last executing test programs: 1m26.404716436s ago: executing program 2 (id=4085): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getuid() sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) socket$kcm(0x2, 0x3, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = add_key(0x0, 0x0, &(0x7f0000000980)="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", 0x451, 0xfffffffffffffffb) keyctl$update(0x2, r5, &(0x7f0000000000), 0x0) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="0000000000000001ff6943b80000000800000014f200000000861f4104bfeacd1f63dd65dd53", 0x26, r6) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r7, 0x10f, 0x82, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000080)) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x935, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0xa0, 0xbe, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x2000, 0xe, 0x1, {0x22, 0xa1d}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0x6, 0x1}}}}}]}}]}}, &(0x7f0000002980)={0x0, 0x0, 0x13, &(0x7f0000000080)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x42, 0x50, 0x0, 0x2, 0x2}, @ptm_cap={0x3}]}}) 1m23.012396017s ago: executing program 2 (id=4095): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x1000, 0xa721, 0x3, {0x0, @sdr={0x31424752, 0x8}}, 0x7}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000002c0)={0x2, @sliced={0x2d, [0x0, 0x3, 0x9, 0x1, 0x4, 0xe, 0x7, 0x4, 0x3, 0x6, 0x9, 0xb, 0x6, 0x3, 0x0, 0x9be1, 0x0, 0x200, 0x0, 0x5, 0x9, 0x7, 0x2, 0xae, 0xf, 0x8, 0x3, 0x4, 0x6, 0x0, 0x7, 0x69, 0x3, 0x0, 0x8, 0x4, 0x2, 0x1, 0x7, 0x1, 0x8000, 0x9, 0xb, 0x1, 0x800, 0xa, 0x5, 0x2], 0x5}}) creat(&(0x7f0000000180)='./file0\x00', 0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@multiplanar_overlay={0x1, 0x3, 0x4, 0x2000, 0x2, {0x0, 0xea60}, {0x2, 0x0, 0x2, 0x0, 0x3, 0x0, '@\v\x00'}, 0x645, 0x3, {&(0x7f0000000040)=[{0x86, 0x6, {0xffffffff}, 0x7}, {0x4, 0x101, {0xc}, 0x6}]}, 0x7ff, 0x0, r1}) 1m22.933377285s ago: executing program 2 (id=4096): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl(0xffffffffffffffff, 0x890b, &(0x7f0000000040)="7ef17527c5c0f635b818aa60aa81203703e5f2322a4f51d378be49dc5effbe6de21744ccc1db54aa40f8fd2d620cb802cf191cce324acbf1204cd327ce") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x1a3) futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000040)="0db723740d6678af6874bb74fb7875012c7de0568a8315a6736b7635e00126b713064871082ef63a291542a0bbb266ec7c61a508716f1b1ea80046ef", 0xe5c) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2180) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3c, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000880)={0x28, 0x4, 0x0, {0x1, 0xffffffffffefffff}}, 0x28) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) accept4(0xffffffffffffffff, &(0x7f0000000440)=@xdp, 0x0, 0x80000) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r8, 0x0, 0x0) syz_fuse_handle_req(r8, &(0x7f000000a200)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$kcm(0x2, 0x1, 0x84) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000080)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="a5f0", 0x2}], 0x1}, 0x48001) sendmsg$inet(r9, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) 1m21.799021868s ago: executing program 2 (id=4100): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f0000000040)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r3, 0xffffffffffffffff, 0x10, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="b19ba63901215fc64a52d45e0c1c88ac9bd745065a777ec63676d3", 0x1b, 0x0) keyctl$instantiate(0xc, r4, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x90}, 0x2a, 0xfffffffffffffff8) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000380)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'load \xc5\x98\x82\xd7Rw\xd5\x994e\\\xb4\x94\xc5Z\xf5\xfb\xd9\xa1pb\xef\x7f\x8f\x1eh\x1f*Y\xb5\xeeD\x12\xcb\xde\x82D\x80\xe3f\xbe\r\x10}\x9f\xaaZ\x03'}, 0x4a, 0xffffffffffffffff) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 1m21.524919392s ago: executing program 2 (id=4101): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xfeeffffc, 0x1, 0x0, 'queue1\x00', 0x10000}) syz_usb_connect(0x0, 0x24, &(0x7f0000002180)=ANY=[@ANYBLOB="12010000c7ce360863078020abd0010203010902120001000000000904000000ff"], 0x0) 1m19.808894799s ago: executing program 2 (id=4113): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x101, 0x0, 0x2, 0x7ffc0002}]}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024) utimensat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={{0x0, 0x2710}, {0x77359400}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x109100, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) userfaultfd(0x80001) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c"], 0x20}}, 0x0) rt_sigaction(0x8026, &(0x7f00000000c0)={0xfffffffffffffffc, 0x54000007, 0x0, {[0xfffffffffffffffa]}}, 0x0, 0x8, &(0x7f0000000080)) 1m18.768329033s ago: executing program 32 (id=4113): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x101, 0x0, 0x2, 0x7ffc0002}]}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024) utimensat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={{0x0, 0x2710}, {0x77359400}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x109100, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) userfaultfd(0x80001) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c"], 0x20}}, 0x0) rt_sigaction(0x8026, &(0x7f00000000c0)={0xfffffffffffffffc, 0x54000007, 0x0, {[0xfffffffffffffffa]}}, 0x0, 0x8, &(0x7f0000000080)) 13.407404096s ago: executing program 0 (id=4315): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @remote}, 0x0, {0x2, 0xffff, @initdev={0xac, 0x1e, 0x2, 0x0}}, 'syz_tun\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) mlockall(0x7) shutdown(r5, 0x2) close(r5) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010200000010f3b100000000010203010902240001010330050904000801030101000921ff000101"], 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x2) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)='.Z', 0x2}], 0x1) 12.048535323s ago: executing program 1 (id=4318): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getuid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) write$tun(r3, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x16}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x68, 0x0, 0x0, 0x1, 0x0, @private=0xa0100fc, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, 0xfff6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r5, 0xc0044dff, &(0x7f0000004000)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, 0x0, &(0x7f0000000080)) 10.436820182s ago: executing program 4 (id=4323): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110a400000000001c1a0000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB="00150100000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.657229471s ago: executing program 0 (id=4325): r0 = shmget$private(0x0, 0x9000, 0x4, &(0x7f0000ff7000/0x9000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0xfff, 0x4, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x2}, {0x7, 0x7, 0x8, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x60}}, 0x400c084) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000180)=""/255) syz_usb_connect(0x1, 0x81d, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x9e, 0xa3, 0x35, 0x10, 0x5ac, 0x20f, 0xdb1d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80b, 0x4, 0x1, 0x3, 0xe0, 0xf, [{{0x9, 0x4, 0x2a, 0x81, 0x4, 0x3, 0x19, 0x2, 0x40, [], [{{0x9, 0x5, 0xd000f9c1341c9b87, 0x4, 0x0, 0xe, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x7}, @generic={0x50, 0xf, "dc35baf7b6ec07d06e287956d04902501542454c880ac0d8a0a98cba2ace2b02c4c1e0864c823fd00991fca4f65b1bb44ff10c748a4ec3b83df1e0aac6fa1ba4097330771cd05faf412e2884f33f"}]}}, {{0x9, 0x5, 0x6, 0xa, 0x40, 0x66, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xc, 0x47}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0xb}]}}, {{0x9, 0x5, 0xc, 0x2, 0x200, 0x0, 0x81, 0xb, [@generic={0x4b, 0x23, "c936f36012fad75d000d6765cf0561cc7d05c8135ba65d6dfda22ff005fa850e9c76c64e3359415cb6522f5da1f7f9d49d8e290b63c5e8a7a4a1f2c251d02853765e658c1f3206e585"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x400, 0xe, 0x3, 0x2, [@generic={0x70, 0x8, "7b1ce6afcd6e2181b7811a9267f6c67e72fc06cbe015d42d258bf0f7c0a59609f37485c8b931252ac7054e261bbd18ab53dc9495daeb5becedae986e2b7f2b402da2f2e4f1373bd2286d798ff6ba53b747b2d0f40a59924cbc19bdf80f6dc5c79eab9aa26239f4e6a8efa0ab9802"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xb0, 0xa4}]}}]}}, {{0x9, 0x4, 0xc8, 0x4, 0xe, 0xfe, 0x42, 0xac, 0x61, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xa752}, {0xd, 0x24, 0xf, 0x1, 0xe69b, 0x7, 0x7, 0x3}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0xff, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x33}]}, @uac_as={[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x2, 0x4, 0x2, 0x8, "e8af9a", "6c10"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0x1, 0x6, "bd36"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x3, 0x99, 0x40, "dd6e43cc6725b2"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x53, 0x1}, @as_header={0x7, 0x24, 0x1, 0x7, 0x9, 0x1002}]}], [{{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x8, 0x3, 0xf3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xfd, 0x6}, @generic={0x1f, 0xa, "dd6fd3481f541c2cee7565fb7846945a5a92aacbf5f080dccb16c72820"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x28, 0x2f, 0x9, 0x2}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x93, 0x2, 0x45, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf8, 0xd}, @generic={0x4e, 0x24, "f1b05cb2189fa07056a00886bdfb2b02f74b0632e794a8c1249fca6de642af92bdcb8b2498aa2f7ab4cccc009e438a27ad9063e9842e9808ac19914a72562b2d72a761c6ab3514028f819154"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0xf7, 0xc4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xea, 0x9}]}}, {{0x9, 0x5, 0x100, 0x1, 0x40, 0x7, 0x0, 0xfd}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x8a, 0x4, 0x0, [@generic={0x38, 0x30, "00921c1f1aff5238184b85bc2580ca7cc87428bd578b35c804932749f7b555a06006a39fb7610699f13b1afb5ac6fd8d88f2da8ccc10"}, @generic={0x15, 0x7, "a8f7e78445845cc4e7b31c8e36177537f5ae0f"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x7, 0xff, 0x81}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x9, 0x5, 0x3}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x40, 0x87, 0x1}}, {{0x9, 0x5, 0xd, 0x3, 0x400, 0x6, 0x6f, 0xd1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x2}, @generic={0x8e, 0x1, "dd573bec2a82df19545f8577d62df4e6b2246da890e99adc176433cfe334a2eb58eff703b386a54d0aa00987e9d076af4fa6ffe5fbb429f6bb590544d4e7a9b6ea8eb8d0d2c9225e25d115eda5d57d2c1c6bc8d81e69e0e71cdc9a0557678fe69320c90c366e482910d8c33c71e76669a617e4d3bae49afb808841239e4b62250f480cf62d249896b1209b7a"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x200, 0x1, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x6}, @generic={0x86, 0xc, "7727373a77697a0d8b5a5cea6d1f611e5eb9b2c0c5c7406864aa5578252cad6b8305c1b2939d210c1800ab401885b8b6c38e14971988cb5d5c26e941681a5ccd03320589dbc48c0cec3ff9dfb4c8fe33b1f64405b3df2d99c5325ccdaad93916ab8533f03d7f39cce0f46fbd17a5a4c51ff505079dfea39799869201ecb2a4ab0539a1c7"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x7, 0x8, 0x6, [@generic={0x84, 0x31, "526d19e4f6ba97481eac9931f0ce096985503faf6b281e647771798289c017360cd32f20b8a5080ca066c08be266d441be31b8bfdfa9d6f11a037146b8fc62d1562e3b5c6d92421a87daceef5b00f9ba927a07811015dd441e040fe2e62b0549187ec3d205c2dec776ca51f586c2c574a2e08d042e6774574866c62607af358d98d4"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x5}]}}, {{0x9, 0x5, 0x80, 0xe, 0x8, 0x5, 0x7, 0x1, [@generic={0xca, 0x23, "49913e38198ea864b93451f3f275ecc8b3d6e86760e3606053f903d5a4daaace372483f2c040300a0868d569d382252b9d4d80225b823f03285f6e8504aca9e30491d0bfc516acb7e6ed493049298a7b7dc197f121e8d2bcef2b9e494f74af0734ee20c82988a613ea35c9ea79bdeadcf34a1dab199b37a60be190de91f5967cc7972f8db181d4803b371657390898998217c06210240d3029daa31759d3514e2b846eb6facbffbf2db37a435a47e67c13d8f0613e92b9f2983b763e24cae116c2ea7f0b27d36c73"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x2, 0xdc, 0x6, [@generic={0xfa, 0x7, "1e889fa35600247d7bf5d586acd30fdd2d71777e52ba05b2efd241c7b81d5dab0c4d3a74b41544facb214585c64d529e328d7180699a767bf7fce92cb15629bee543c52b0427b6f7491cf59614551462b337ed2ad1ff766760361e30c224a0e1d257831c1b3c55f2b5542bf1b2cd3ea006412f1f42e18cf62885d06087c424dc506062ace0f35a6af0414266ed3c4cad1436cd30374e64fdf241b7fb3c86b7109dcc3366d439d991d77e27ed541b0d12d050b7451b48b130198d9380688a0e407738c9bfa406f77711010b925cd332e9635387e3d464d3c812d4782450fa56e8fbbcfc1a3330380789a5c2a2c836b57649193847aef316bc"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x8}]}}]}}, {{0x9, 0x4, 0xd5, 0x48, 0x2, 0xd7, 0x34, 0xb, 0xdb, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "79c2b4"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x6, 0x9, 0x5f}, {0x6, 0x24, 0x1a, 0x0, 0x21}, [@country_functional={0x10, 0x24, 0x7, 0x2, 0x8, [0x3, 0x8, 0x6, 0x2, 0x5]}]}, @uac_control={{0xa, 0x24, 0x1, 0x0, 0x7}, [@mixer_unit={0x7, 0x24, 0x4, 0x5, 0x5, "ff86"}]}], [{{0x9, 0x5, 0x8, 0x0, 0x20, 0x4, 0xd, 0x4}}, {{0x9, 0x5, 0x7, 0x3, 0x40, 0x2, 0x8, 0xc, [@generic={0xde, 0xd, "ec415c474cf0d33f46d1007f7e6effb8df59b52e8b4b7e7783944ac1e1badb09e0fab81f6fbd0fe39b4f0811043bc95f7074242d6915728a7ad33e063cfb314320ed8864d34a2cf2f9d85a568a1aa13688d32c52d5cd576848a35d50a195205b09445d564cfdc734ef41e2b737f64c657afc528c5b15f1494d6105e7a629fbe3d72afbfd36e23969d0a94f4dc8e52a39db67115a72c58a314ebe047b831e5521af3ff541c4c4162a0e5529a04e2005e19fd4ae9544f340fe505ea07e24396c40b48a208d1a4f434c499caee5cafdb890915d0050b9c206c06ba51a27"}]}}]}}, {{0x9, 0x4, 0x4a, 0x7f, 0x0, 0x14, 0xd0, 0xc4, 0xf7, [@uac_control={{0xa, 0x24, 0x1, 0xbd, 0x66}, [@extension_unit={0xb, 0x24, 0x8, 0x5, 0x9, 0x0, "d97ea8f5"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x307, 0x1, 0x4, 0x4}, @extension_unit={0xa, 0x24, 0x8, 0x6, 0x5, 0xd3, "3c4a1f"}]}, @uac_control={{0xa, 0x24, 0x1, 0x0, 0x5}, [@selector_unit={0x6, 0x24, 0x5, 0x5, 0xd3, "82"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x301, 0x4, 0x2, 0x4}]}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x8, 0xb, 0xe1, 0x10, 0x4}, 0x34, &(0x7f0000000040)={0x5, 0xf, 0x34, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x2, 0xf00, 0x2, [0x3fc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "f4d292f85b51f93f557021ce52c9c3bd"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x1, 0x0, 0xe721, 0x4}]}, 0x2, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x404}}]}) 8.709948096s ago: executing program 1 (id=4327): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0xfeffffff) 8.620929393s ago: executing program 1 (id=4328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) unshare(0x22020600) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x30, 0xf, 0x35, 0x8, 0x4da, 0x390d, 0x991a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x44, [{{0x9, 0x4, 0xef, 0x0, 0x3, 0x84, 0x6a, 0x92, 0x0, [], [{{0x9, 0x5, 0x2, 0x10, 0x10, 0x2, 0x4, 0x7}}, {{0x9, 0x5, 0x16873d934242cc64, 0x2, 0x8, 0x8, 0x3, 0x8}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x0, 0x1, 0x1}}]}}]}}]}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, 0x0) 8.077483321s ago: executing program 3 (id=4331): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000280)={0x20, 0x16, 0x4, "197094e4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.161520696s ago: executing program 1 (id=4333): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x0, 0xa, 0x0, 0x61}}) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000600)={0x0, 0x404000, 0x10100, 0x17fffffe}, &(0x7f0000000000), &(0x7f0000000040)=0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x2200, 0x0) syz_io_uring_setup(0x1bed, &(0x7f00000000c0)={0x0, 0x42000000, 0x1000, 0x1, 0x2}, &(0x7f0000000080)=0x0, &(0x7f0000000140)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0xb15, 0x0, 0x0, 0x0, 0x0) 7.034759498s ago: executing program 5 (id=4334): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) writev(r3, &(0x7f0000000180), 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r5, &(0x7f0000000380)=[{&(0x7f00000004c0)=""/217, 0xd9}], 0x1) sendmmsg$inet6(r5, &(0x7f0000000440)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x5, @mcast2, 0x80000001}, 0x1c, &(0x7f0000000340), 0x0, &(0x7f0000000380)=[@hopopts_2292={{0x40, 0x29, 0x36, {0x3b, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x5}, @pad1, @jumbo={0xc2, 0x4, 0xba59}, @padn={0x1, 0x1, [0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @dontfrag={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0xd}}], 0x88}}], 0x1, 0x20048000) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) sysfs$1(0x1, &(0x7f0000000300)='\\\'+$#\x00') r6 = syz_open_procfs(0x0, &(0x7f0000002a00)='net/fib_trie\x00') preadv(r6, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x37, 0xfffffffd) r7 = socket$inet(0xa, 0x1, 0x100) listen(r7, 0x8) 6.884819702s ago: executing program 1 (id=4335): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @remote}, 0x0, {0x2, 0xffff, @initdev={0xac, 0x1e, 0x2, 0x0}}, 'syz_tun\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) mlockall(0x7) shutdown(r5, 0x2) close(r5) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010200000010f3b100000000010203010902240001010330050904000801030101000921ff00010122b00b09058103100002ba07424ae89cf7d629f944"], 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x2) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)='.Z', 0x2}], 0x1) 6.476488245s ago: executing program 0 (id=4336): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r7 = dup3(0xffffffffffffffff, r6, 0x0) write$UHID_INPUT(r7, 0x0, 0x0) r8 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0xabd6, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r8, 0x7a98, 0x0, 0x0, 0x0, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x3504, 0x0, 0x0, 0xb7, 0xfffffffe, 0x5}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$AUDIT_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x400, 0x70bd2b, 0x25dfdbfb, {0x8, 0x1, 0x2, r1, 0x800, 0x6d76, 0x5, 0x3ff, 0x0, 0xd1e0, 0x101}}, 0x3c}, 0x1, 0x0, 0x0, 0x2000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001042bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0305000000000000240012800b050000007269646765000014000280080003000a0400000800040001000100"], 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r11 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x0, 0x1ffc5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x23d0, 0x7, 0x1, 0x8}, {0x2, 0x2, 0x2, 0x0, 0x3, 0x98}, 0x8, 0xca1e, 0x10f4}}, @TCA_TBF_RTAB={0x404, 0x2, [0x10000, 0x5, 0x39723a17, 0x1, 0x664d4621, 0x7f, 0xff, 0x7, 0xd, 0xee8, 0x5a2d, 0xe4, 0x7f, 0x80000001, 0x7fffffff, 0x1, 0x4, 0x9de, 0x4, 0x6, 0x0, 0x1, 0x9, 0xffff7ffc, 0xfffffffd, 0x5, 0xd621, 0x7ff, 0x3, 0x0, 0xe7, 0x1, 0x9, 0x2, 0x6e96, 0x9, 0x80, 0x0, 0x80000000, 0x80000001, 0x0, 0x2, 0x5, 0xd0, 0xc, 0x1, 0x101, 0x5, 0xb, 0xc0, 0xeb5, 0x9, 0x4, 0x8, 0x1, 0x8, 0x2, 0x9, 0x1, 0x5, 0x5, 0x4, 0xeca, 0x1, 0x0, 0xc, 0x8, 0xf, 0x4, 0x1000, 0x6, 0x316b, 0x59f6, 0x10000, 0x8, 0x2, 0x6, 0x5, 0x8, 0x0, 0x4b0, 0x4, 0x6, 0x1, 0x1, 0x6, 0x2, 0x7, 0x6, 0x7, 0x0, 0x7, 0x3, 0x3, 0x7, 0x0, 0x5, 0x4, 0x7de, 0x12, 0x1, 0x4, 0x6b, 0x1, 0x5, 0x60, 0x0, 0x1, 0x700000, 0x7, 0x3, 0x0, 0xa, 0x0, 0x101, 0xfffffff7, 0x6, 0x509, 0x1, 0x9, 0x2, 0xa0000000, 0x0, 0xfff, 0x8, 0x2a, 0x2, 0x1, 0x7, 0x5, 0x9, 0x7, 0xfc3, 0xeda, 0x0, 0x0, 0x7, 0x8, 0x9, 0x81, 0x4, 0x9, 0xcb2b, 0x3, 0x4, 0x5d4a, 0x5, 0xffffff7f, 0x4, 0x3, 0xfffffffb, 0x9, 0x3, 0x200, 0x9, 0x9, 0x5, 0x1d1a, 0x5, 0x31400, 0x4001, 0x5, 0xd349, 0x6, 0x8001, 0x9, 0x6, 0x6, 0x6, 0x7a, 0x6, 0x800206, 0x0, 0x169b, 0xd, 0x0, 0x9, 0x8000, 0x7fff, 0x45c, 0x7, 0x2, 0x2, 0x4, 0xffff, 0x0, 0x4, 0xf, 0x4, 0x1, 0x3, 0x8, 0x442, 0x6, 0xffff0001, 0x1, 0x3, 0x38, 0x81, 0xffffffff, 0x2, 0x3ff, 0x1, 0x7, 0x8000007, 0x800, 0x8a1b, 0x2, 0x1, 0x8, 0x0, 0xb461, 0xd06, 0x0, 0x5, 0x2, 0x4, 0x7, 0x4, 0x1, 0x9, 0x0, 0x50d, 0xfffffff1, 0x2, 0x3, 0xe, 0x9, 0x2, 0x10005, 0xf, 0x0, 0x9, 0x9, 0x2, 0x1, 0xfffffff8, 0xd0, 0x7, 0x8, 0x2bb, 0x8, 0x2f, 0x9, 0x8, 0x2, 0x5, 0x2, 0x0, 0x3, 0x2, 0x6, 0x0, 0x6000000, 0x8000, 0x9]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r14 = fcntl$getown(r11, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x0, r14, 0x2, &(0x7f00000001c0)) 6.456354226s ago: executing program 3 (id=4337): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getuid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r5, 0xc0044dff, &(0x7f0000004000)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, 0x0, &(0x7f0000000080)) 5.988845265s ago: executing program 4 (id=4338): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r3 = syz_io_uring_setup(0x514b, &(0x7f00000003c0)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) read$midi(r1, &(0x7f0000000180)=""/153, 0x99) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getresgid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5100) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ce\x00'}, 0x58) r6 = accept4(r0, 0x0, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r7, 0xc010640c, &(0x7f0000000100)={0x10}) sendto$inet(r6, &(0x7f0000000000)="c66e6e657865eb9f7156051c0ee687918ccf02811da8adc272affb81dfe71200", 0x20, 0x4008041, 0x0, 0x0) r8 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000050}, 0x24000081) 5.355823585s ago: executing program 4 (id=4339): prlimit64(0x0, 0x0, &(0x7f0000000000)={0x0, 0x3}, 0x0) syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 5.163286674s ago: executing program 4 (id=4340): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0x6, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x39}, {0x0, 0x8}, {0x800000, 0x3}, {}, {0x80001ff}, {0x0, 0x1000}, {0x4, 0x1}, {0x0, 0x800}, {}, {0x1}, {0x0, 0xe68b}], 0xc}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406d0427c2000000000001090224000eb4fe9000"], 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00', 0x0}) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[], 0x0) socket$packet(0x11, 0x3, 0x300) syz_clone3(&(0x7f00000001c0)={0x100001200, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000040)=""/185) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000a00)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00030200000002ecb76264ef024976923bd238584e3afa541004e93fa6701f7eb710a40a6f49e78106a1f6a861db4398ec3ce90a8cbf8a59a7b7bd4af048587ba6ee26e3b6334d6b1e23bd681655"]}, &(0x7f0000000c40)={0x34, &(0x7f0000000a40)=ANY=[@ANYBLOB="20301d00faff2d4fba3d02a56bc9ce31de136a0ba22b0086a65c3b3ed89cef2c0000"], &(0x7f0000000ac0)={0x0, 0xa, 0x1}, &(0x7f0000000b00)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000bc0)={0x20, 0x1, 0x1, 0x5}, 0x0}) syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) 4.250996755s ago: executing program 0 (id=4341): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b15e1c38eccb448da8913c2beec0abe4fa475c3f62efffd86aa4ec1e5ffca623f443d75ade33190aa7d5518c2a3422d7e4b0d6d738"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000f8ffffffb703000008000000b7040000f5ffffff840000004300000095000000000000008dc12b6f81267fcc99cb9a48fa536044f4289ad032d5a9c672f75374dc6b4bb6e3b150e7ab77422ca3c3796fd32d7a33ec7b727929e26c6b69f9a63769a3be84ba087bf49cfee9c4cd141585836253e60591149f2ab21787afd59bd4843b68a3891e443a85750f38fc08a2f7d6dc9552d6cd2fdd2c079b0e8072e5b04cdca4e64830"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffff885) write$char_usb(r5, &(0x7f0000000380)="be19336e743dd2e1adb8977da4f9471241b65907adf3adeba5b4263646e4236e9c6c8fe2439a6e48a2974bba032e60421a8cba8d17a03c5f7ea50436257ede354d2174da9ba5910d7e3d38aa21bf0487cd5a8680501b4aa43073644321f8bc55fd2885dd4f96274ab80aab36f44698344ec5cdbd5294646275bc862458f5499b9fc1f49e67e7e2623130cc30c71bdecc4264321d7b3db3b72e282cad19a274cae50fe0b6911e3e4a4cf8ab016cd72e814a031bdd2f2d60be23644089abf1be356d834fc1604f56eb3b9798820ca573f91fae2b0079f283b1ba4c8c216d9c8638e6a7aa1d757aeb413e6814ef698ea357abb152b0f64a7391d7", 0xf9) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 3.472296371s ago: executing program 5 (id=4342): r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000246837f73199aee6fd23291b", 0x10}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372", 0x81}], 0x3) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 3.262030497s ago: executing program 5 (id=4343): socket$inet6(0xa, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="643c87cf", 0x3c64}], 0x1, 0x0, 0x0, 0x4}}], 0x1, 0x0) ftruncate(r4, 0x3) r6 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000840) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000180)=0x9) socket$inet6_sctp(0xa, 0x5, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10003, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r8, 0x0) socket$rxrpc(0x21, 0x2, 0xa) 2.806018025s ago: executing program 3 (id=4344): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xe8c}, 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'load '}, 0x1a, 0xffffffffffffffff) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) r1 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x39000, 0x0) write$binfmt_elf64(r3, &(0x7f0000000400)=ANY=[], 0xfffffe3e) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) write$binfmt_misc(r4, &(0x7f00000001c0)="c9abfe6e58eb7fbff58af3c634f6d0d7c2ccffca0421e3e180e006f0d434dc6c78b6546f6fa4364d53211f79b1b30b060353d1a43aae1853b3fce930e7672b929479216badde58", 0x47) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000580)={0x0, 0x0}) ioctl$KVM_RUN(r7, 0xae80, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 2.203730014s ago: executing program 5 (id=4345): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r7 = dup3(0xffffffffffffffff, r6, 0x0) write$UHID_INPUT(r7, 0x0, 0x0) r8 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0xabd6, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r8, 0x7a98, 0x0, 0x0, 0x0, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x3504, 0x0, 0x0, 0xb7, 0xfffffffe, 0x5}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$AUDIT_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x400, 0x70bd2b, 0x25dfdbfb, {0x8, 0x1, 0x2, r1, 0x800, 0x6d76, 0x5, 0x3ff, 0x0, 0xd1e0, 0x101}}, 0x3c}, 0x1, 0x0, 0x0, 0x2000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001042bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0305000000000000240012800b050000007269646765000014000280080003000a0400000800040001000100"], 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r11 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x0, 0x1ffc5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x23d0, 0x7, 0x1, 0x8}, {0x2, 0x2, 0x2, 0x0, 0x3, 0x98}, 0x8, 0xca1e, 0x10f4}}, @TCA_TBF_RTAB={0x404, 0x2, [0x10000, 0x5, 0x39723a17, 0x1, 0x664d4621, 0x7f, 0xff, 0x7, 0xd, 0xee8, 0x5a2d, 0xe4, 0x7f, 0x80000001, 0x7fffffff, 0x1, 0x4, 0x9de, 0x4, 0x6, 0x0, 0x1, 0x9, 0xffff7ffc, 0xfffffffd, 0x5, 0xd621, 0x7ff, 0x3, 0x0, 0xe7, 0x1, 0x9, 0x2, 0x6e96, 0x9, 0x80, 0x0, 0x80000000, 0x80000001, 0x0, 0x2, 0x5, 0xd0, 0xc, 0x1, 0x101, 0x5, 0xb, 0xc0, 0xeb5, 0x9, 0x4, 0x8, 0x1, 0x8, 0x2, 0x9, 0x1, 0x5, 0x5, 0x4, 0xeca, 0x1, 0x0, 0xc, 0x8, 0xf, 0x4, 0x1000, 0x6, 0x316b, 0x59f6, 0x10000, 0x8, 0x2, 0x6, 0x5, 0x8, 0x0, 0x4b0, 0x4, 0x6, 0x1, 0x1, 0x6, 0x2, 0x7, 0x6, 0x7, 0x0, 0x7, 0x3, 0x3, 0x7, 0x0, 0x5, 0x4, 0x7de, 0x12, 0x1, 0x4, 0x6b, 0x1, 0x5, 0x60, 0x0, 0x1, 0x700000, 0x7, 0x3, 0x0, 0xa, 0x0, 0x101, 0xfffffff7, 0x6, 0x509, 0x1, 0x9, 0x2, 0xa0000000, 0x0, 0xfff, 0x8, 0x2a, 0x2, 0x1, 0x7, 0x5, 0x9, 0x7, 0xfc3, 0xeda, 0x0, 0x0, 0x7, 0x8, 0x9, 0x81, 0x4, 0x9, 0xcb2b, 0x3, 0x4, 0x5d4a, 0x5, 0xffffff7f, 0x4, 0x3, 0xfffffffb, 0x9, 0x3, 0x200, 0x9, 0x9, 0x5, 0x1d1a, 0x5, 0x31400, 0x4001, 0x5, 0xd349, 0x6, 0x8001, 0x9, 0x6, 0x6, 0x6, 0x7a, 0x6, 0x800206, 0x0, 0x169b, 0xd, 0x0, 0x9, 0x8000, 0x7fff, 0x45c, 0x7, 0x2, 0x2, 0x4, 0xffff, 0x0, 0x4, 0xf, 0x4, 0x1, 0x3, 0x8, 0x442, 0x6, 0xffff0001, 0x1, 0x3, 0x38, 0x81, 0xffffffff, 0x2, 0x3ff, 0x1, 0x7, 0x8000007, 0x800, 0x8a1b, 0x2, 0x1, 0x8, 0x0, 0xb461, 0xd06, 0x0, 0x5, 0x2, 0x4, 0x7, 0x4, 0x1, 0x9, 0x0, 0x50d, 0xfffffff1, 0x2, 0x3, 0xe, 0x9, 0x2, 0x10005, 0xf, 0x0, 0x9, 0x9, 0x2, 0x1, 0xfffffff8, 0xd0, 0x7, 0x8, 0x2bb, 0x8, 0x2f, 0x9, 0x8, 0x2, 0x5, 0x2, 0x0, 0x3, 0x2, 0x6, 0x0, 0x6000000, 0x8000, 0x9]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r14 = fcntl$getown(r11, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x0, r14, 0x2, &(0x7f00000001c0)) 1.865332747s ago: executing program 1 (id=4346): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="0000000000000001ff6943b80000000800000014f200000000861f4104bfeacd1f63dd65dd53", 0x26, r3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r4, 0x0, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000080)=0x1, 0x4) 969.755641ms ago: executing program 3 (id=4347): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x400caed0, &(0x7f0000000700)={0x6, 0x0, @ioapic={0x10000, 0x3, 0xff, 0x7, 0x0, [{0x6, 0x80}, {0xe7, 0x0, 0xfb, '\x00', 0x7f}, {0x0, 0x9, 0xc, '\x00', 0xa}, {0x2, 0xc6, 0xe, '\x00', 0xfa}, {0x0, 0x3, 0x7, '\x00', 0x9}, {0x45, 0x8, 0x6, '\x00', 0x1}, {0x16, 0x83, 0x6, '\x00', 0xcd}, {0x2, 0x4, 0x2, '\x00', 0x48}, {0x9, 0x3, 0x1a, '\x00', 0x7}, {0x4, 0x8, 0xdb, '\x00', 0x1}, {0x0, 0x7, 0x5, '\x00', 0x75}, {0x8, 0x0, 0xb, '\x00', 0xf}, {0x2, 0x0, 0x9, '\x00', 0xc3}, {0x9, 0x9, 0x6, '\x00', 0x85}, {0xfa, 0x81, 0x6, '\x00', 0x8}, {0x9, 0x9, 0x2, '\x00', 0x1}, {0x5c, 0xc2, 0x40, '\x00', 0x8}, {0x4a, 0x6, 0x8, '\x00', 0x6}, {0xd, 0x3, 0x2, '\x00', 0x14}, {0x6, 0x4, 0x80, '\x00', 0x46}, {0x7, 0x4, 0xf1, '\x00', 0x8}, {0x6, 0xf9, 0xf, '\x00', 0x10}, {0x8, 0x8, 0x81, '\x00', 0x3}, {0xfb, 0x7f, 0x7, '\x00', 0x2}]}}) 599.884173ms ago: executing program 5 (id=4348): syz_emit_ethernet(0xca, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x94, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x8}, @local, {[@hopopts={0x3c, 0x9, '\x00', [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x38, {0x1, 0xc, 0x5, 0x40, [0x3, 0x2, 0xffffffffc0000000, 0x8, 0x6, 0x6]}}]}, @routing={0x32, 0x4, 0x1, 0xa5, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2]}], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 432.977426ms ago: executing program 3 (id=4349): keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x1100, &(0x7f0000000340)={&(0x7f0000000280)={'vmac64(aes-generic)\x00'}}) 365.862229ms ago: executing program 0 (id=4350): r0 = fsopen(&(0x7f0000000100)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x4000, 0x0, 0x0) 193.677835ms ago: executing program 0 (id=4351): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000240)={0x5, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000010026bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d3000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="34001680300001802c000c80140001000500edff300000003394000088a8000014"], 0x70}}, 0x24040800) dup(r3) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r5}) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket(0x2b, 0x1, 0x1) setsockopt$MRT_DEL_MFC_PROXY(r7, 0x0, 0xd3, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r7], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040880) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) shutdown(r8, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @local, 0x6}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0xfffffeb3, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0xfffffffffffffe2a}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24014000}, 0x8000) 136.733839ms ago: executing program 5 (id=4352): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getuid() sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) socket$kcm(0x2, 0x3, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = add_key(0x0, &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="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", 0x3c7, 0xfffffffffffffffb) keyctl$update(0x2, r5, &(0x7f0000000000), 0x0) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="0000000000000001ff6943b80000000800000014f200000000861f4104bfeacd1f63dd65dd53", 0x26, r6) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r7, 0x10f, 0x82, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000080)) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x935, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0xa0, 0xbe, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x2000, 0xe, 0x1, {0x22, 0xa1d}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0x6, 0x1}}}}}]}}]}}, &(0x7f0000002980)={0x0, 0x0, 0x13, &(0x7f0000000080)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x42, 0x50, 0x0, 0x2, 0x2}, @ptm_cap={0x3}]}}) 90.895933ms ago: executing program 4 (id=4353): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 16.110351ms ago: executing program 3 (id=4354): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getuid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r5, 0xc0044dff, &(0x7f0000004000)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, 0x0, &(0x7f0000000080)) 0s ago: executing program 4 (id=4355): shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x2000000) kernel console output (not intermixed with test programs): 66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21898 comm="syz.2.4001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fad9938d169 code=0x7ffc0000 [ 1616.622600][T21912] netlink: 'syz.0.4005': attribute type 7 has an invalid length. [ 1616.631103][ T30] audit: type=1326 audit(1744664737.792:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21898 comm="syz.2.4001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9938d169 code=0x7ffc0000 [ 1616.763248][ T30] audit: type=1326 audit(1744664737.792:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21898 comm="syz.2.4001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fad9938d169 code=0x7ffc0000 [ 1616.945962][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 1616.945985][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1617.031175][ T6775] usb 4-1: USB disconnect, device number 29 [ 1617.287751][ T79] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1617.377699][T21924] random: crng reseeded on system resumption [ 1617.865898][ T6775] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1617.873566][T21239] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1618.035785][ T6775] usb 4-1: Using ep0 maxpacket: 8 [ 1618.051182][ T6775] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1618.065809][T21239] usb 3-1: Using ep0 maxpacket: 32 [ 1618.083178][T21239] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1618.092288][T21239] usb 3-1: config 0 has no interface number 0 [ 1618.101939][ T6775] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1618.115924][ T6775] usb 4-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 1618.133737][T21239] usb 3-1: New USB device found, idVendor=2c7c, idProduct=6002, bcdDevice=42.9b [ 1618.145895][ T6775] usb 4-1: Product: syz [ 1618.153079][T21239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.161147][ T6775] usb 4-1: Manufacturer: syz [ 1618.173137][ T6775] usb 4-1: SerialNumber: syz [ 1618.176910][T20167] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1618.178419][T21239] usb 3-1: Product: syz [ 1618.192134][ T6775] usb 4-1: config 0 descriptor?? [ 1618.201813][T21239] usb 3-1: Manufacturer: syz [ 1618.209021][ T6775] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1618.225968][T21239] usb 3-1: SerialNumber: syz [ 1618.241454][T21239] usb 3-1: config 0 descriptor?? [ 1618.257124][T21239] option 3-1:0.188: GSM modem (1-port) converter detected [ 1618.392896][T20167] usb 5-1: config 0 has no interfaces? [ 1618.413926][T20167] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1618.414435][ T6775] gspca_zc3xx: reg_w_i err -71 [ 1618.433639][T12582] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1618.451995][T20167] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.474935][T21928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1618.486466][T21928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1618.488504][T20167] usb 5-1: Product: syz [ 1618.508970][T20167] usb 5-1: Manufacturer: syz [ 1618.514646][T20167] usb 5-1: SerialNumber: syz [ 1618.526656][T21928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1618.550143][T21928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1618.555056][T20167] usb 5-1: config 0 descriptor?? [ 1618.564890][T21239] usb 3-1: USB disconnect, device number 4 [ 1618.576988][T21239] option 3-1:0.188: device disconnected [ 1618.794119][T21933] syz.4.4012: attempt to access beyond end of device [ 1618.794119][T21933] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1619.013515][ T5898] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1619.022464][ T5898] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1619.036588][ T5898] usb 2-1: can't read configurations, error -71 [ 1619.036941][ T6775] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1619.054015][ T6775] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1619.087257][ T6775] usb 4-1: USB disconnect, device number 30 [ 1619.509672][ T5914] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 1619.560620][T12582] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1619.671872][ T5914] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 1619.683478][ T5914] usb 3-1: config 0 has no interface number 0 [ 1619.844258][ T5914] usb 3-1: config 0 interface 128 has no altsetting 0 [ 1619.867664][ T5914] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 1619.877011][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.885017][ T5914] usb 3-1: Product: syz [ 1619.889332][ T5914] usb 3-1: Manufacturer: syz [ 1619.895969][ T5914] usb 3-1: SerialNumber: syz [ 1619.916375][ T5914] usb 3-1: config 0 descriptor?? [ 1619.957197][ T5914] radio-si470x 3-1:0.128: could not find interrupt in endpoint [ 1619.969567][ T5914] radio-si470x 3-1:0.128: probe with driver radio-si470x failed with error -5 [ 1619.979151][ T5914] usbhid 3-1:0.128: couldn't find an input interrupt endpoint [ 1620.151260][ T5914] usb 3-1: USB disconnect, device number 5 [ 1620.858407][ T5914] usb 5-1: USB disconnect, device number 22 [ 1620.879341][ T3013] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1621.005668][T21975] syzkaller1: entered promiscuous mode [ 1621.011351][T21975] syzkaller1: entered allmulticast mode [ 1621.465880][ T5914] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1621.555896][ T6775] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1621.838138][ T5914] usb 5-1: config 0 has no interfaces? [ 1621.847908][ T5914] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1621.878242][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.904288][ T6775] usb 3-1: config 0 has no interfaces? [ 1621.912621][ T5914] usb 5-1: Product: syz [ 1621.935295][ T6775] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1621.947813][ T5914] usb 5-1: Manufacturer: syz [ 1621.984642][ T6775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.013979][ T5914] usb 5-1: SerialNumber: syz [ 1622.024315][ T6775] usb 3-1: Product: syz [ 1622.025806][ T5899] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1622.052654][ T5914] usb 5-1: config 0 descriptor?? [ 1622.071849][ T6775] usb 3-1: Manufacturer: syz [ 1622.087359][ T6775] usb 3-1: SerialNumber: syz [ 1622.094993][T21991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4031'. [ 1622.120924][T21991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4031'. [ 1622.147927][ T6775] usb 3-1: config 0 descriptor?? [ 1622.205096][ T5899] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1622.272964][T21991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4031'. [ 1622.302191][T21991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4031'. [ 1622.336393][T12582] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1622.405228][T21991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4031'. [ 1622.417521][T21991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4031'. [ 1622.426811][ T5899] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1622.426841][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1622.426865][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1622.426885][ T5899] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1622.573209][ T5899] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1622.610063][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1622.618380][ T5899] usb 2-1: Product: syz [ 1622.622557][ T5899] usb 2-1: Manufacturer: syz [ 1622.627187][ T6775] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1622.635667][ T5899] usb 2-1: SerialNumber: syz [ 1622.644018][ T5899] usb 2-1: config 0 descriptor?? [ 1622.807221][ T6775] usb 4-1: Using ep0 maxpacket: 16 [ 1622.870064][T21986] misc userio: No port type given on /dev/userio [ 1623.204515][ T5899] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 1623.222801][ T5899] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 1623.455822][ T6775] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 1623.471301][ T6775] usb 4-1: config 0 has no interface number 0 [ 1623.482892][ T6775] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xA has invalid maxpacket 1032, setting to 1024 [ 1623.501472][ T6775] usb 4-1: config 0 interface 35 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 1623.513985][ T6775] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1623.527720][ T6775] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1623.552025][ T6775] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=a7.5c [ 1623.569851][ T6775] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 1623.578558][ T6775] usb 4-1: Product: syz [ 1623.582811][ T6775] usb 4-1: Manufacturer: syz [ 1623.588072][ T6775] usb 4-1: SerialNumber: syz [ 1623.597515][ T6775] usb 4-1: config 0 descriptor?? [ 1623.603720][T21995] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1623.617095][ T6775] cypress_m8 4-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1623.831691][T21995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1623.853258][T21995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1623.884552][T21995] fuse: Unknown parameter 'grou)_id5!rpN_. ;' [ 1623.904672][ T5899] usb 3-1: USB disconnect, device number 6 [ 1623.909541][ T6775] usb 4-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 1623.962656][ T6775] usb 4-1: USB disconnect, device number 31 [ 1623.988982][ T6775] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 1624.040233][ T6775] cypress_m8 4-1:0.35: device disconnected [ 1624.097406][ T3013] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1624.375864][ T5899] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1624.525917][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 1624.534625][ T6775] usb 5-1: USB disconnect, device number 23 [ 1624.565556][ T5899] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1624.597467][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.605624][ T5899] usb 3-1: Product: syz [ 1624.614094][ T5899] usb 3-1: Manufacturer: syz [ 1624.621837][ T5899] usb 3-1: SerialNumber: syz [ 1624.639449][ T5899] usb 3-1: config 0 descriptor?? [ 1624.644796][T22006] kvm: apic: phys broadcast and lowest prio [ 1624.705949][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1624.879501][ T5899] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 1624.892395][ T5899] eb 9a 47 80 9b f8 7a f0 [ 1624.898870][ T5899] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 1625.015778][ T6775] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 1625.101856][ T5841] usb 3-1: USB disconnect, device number 7 [ 1625.124311][T21986] delete_channel: no stack [ 1625.131396][T17830] usb 2-1: USB disconnect, device number 12 [ 1625.195912][ T6775] usb 5-1: device descriptor read/64, error -71 [ 1625.266936][ T79] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1625.445944][ T6775] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 1625.590784][ T6775] usb 5-1: device descriptor read/64, error -71 [ 1625.816478][ T6775] usb usb5-port1: attempt power cycle [ 1626.183132][T22041] syzkaller1: entered promiscuous mode [ 1626.189105][T22041] syzkaller1: entered allmulticast mode [ 1626.248177][ T6775] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 1626.329105][ T6775] usb 5-1: device descriptor read/8, error -71 [ 1626.486009][ T5914] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1626.553199][ T3013] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1626.575939][ T6775] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 1626.600888][ T6775] usb 5-1: device descriptor read/8, error -71 [ 1626.635842][ T5899] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1626.694657][ T5914] usb 3-1: config 0 has no interfaces? [ 1626.709152][ T5914] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1626.718594][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.729106][ T5914] usb 3-1: Product: syz [ 1626.733262][ T5914] usb 3-1: Manufacturer: syz [ 1626.738182][ T5914] usb 3-1: SerialNumber: syz [ 1626.744040][ T6775] usb usb5-port1: unable to enumerate USB device [ 1626.759909][ T5914] usb 3-1: config 0 descriptor?? [ 1626.809822][ T5899] usb 4-1: config 0 has no interfaces? [ 1626.817596][ T5899] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1626.829022][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.851677][ T5899] usb 4-1: Product: syz [ 1626.859437][ T5899] usb 4-1: Manufacturer: syz [ 1626.864073][ T5899] usb 4-1: SerialNumber: syz [ 1626.982698][ T5899] usb 4-1: config 0 descriptor?? [ 1627.306496][T22042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1627.316494][T22042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1627.340502][T22042] AppArmor: change_hat: Invalid input '0x00' [ 1627.371894][T22058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4056'. [ 1627.735931][T12582] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1628.323087][T22070] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 1628.947988][ T1003] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1629.118737][ T5914] usb 3-1: USB disconnect, device number 8 [ 1629.207725][ T5898] usb 4-1: USB disconnect, device number 32 [ 1629.414321][T22089] FAULT_INJECTION: forcing a failure. [ 1629.414321][T22089] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.427853][T22089] CPU: 0 UID: 0 PID: 22089 Comm: syz.4.4065 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 1629.427878][T22089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1629.427889][T22089] Call Trace: [ 1629.427896][T22089] [ 1629.427904][T22089] dump_stack_lvl+0x241/0x360 [ 1629.427936][T22089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1629.427961][T22089] ? __pfx__printk+0x10/0x10 [ 1629.427987][T22089] ? __pfx___might_resched+0x10/0x10 [ 1629.428012][T22089] should_fail_ex+0x424/0x570 [ 1629.428037][T22089] should_failslab+0xac/0x100 [ 1629.428062][T22089] __kmalloc_noprof+0xdf/0x4d0 [ 1629.428084][T22089] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 1629.428108][T22089] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1629.428138][T22089] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1629.428177][T22089] tomoyo_path_number_perm+0x245/0x790 [ 1629.428202][T22089] ? tomoyo_path_number_perm+0x215/0x790 [ 1629.428226][T22089] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1629.428253][T22089] ? ksys_write+0x24e/0x2d0 [ 1629.428279][T22089] ? __lock_acquire+0xad5/0xd80 [ 1629.428315][T22089] ? __fget_files+0x2a/0x420 [ 1629.428330][T22089] ? __fget_files+0x2a/0x420 [ 1629.428356][T22089] ? __fget_files+0x2a/0x420 [ 1629.428377][T22089] security_file_ioctl+0xc6/0x2a0 [ 1629.428399][T22089] __se_sys_ioctl+0x46/0x160 [ 1629.428421][T22089] do_syscall_64+0xf3/0x230 [ 1629.428443][T22089] ? clear_bhb_loop+0x45/0xa0 [ 1629.428462][T22089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1629.428479][T22089] RIP: 0033:0x7fc9bad8d169 [ 1629.428495][T22089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1629.428508][T22089] RSP: 002b:00007fc9bbc83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1629.428526][T22089] RAX: ffffffffffffffda RBX: 00007fc9bafa5fa0 RCX: 00007fc9bad8d169 [ 1629.428537][T22089] RDX: 0000200000000700 RSI: 00000000c048aec8 RDI: 0000000000000004 [ 1629.428543][T22089] RBP: 00007fc9bbc83090 R08: 0000000000000000 R09: 0000000000000000 [ 1629.428549][T22089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1629.428555][T22089] R13: 0000000000000000 R14: 00007fc9bafa5fa0 R15: 00007fc9bb0cfa28 [ 1629.428571][T22089] [ 1629.428582][T22089] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1630.048514][ T6775] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1630.196595][T18688] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1630.227349][ T6775] usb 5-1: Using ep0 maxpacket: 32 [ 1630.248450][ T6775] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1630.258432][ T6775] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1630.274074][ T6775] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.316414][ T5914] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1630.340747][ T6775] usb 5-1: config 0 descriptor?? [ 1630.429667][ T6775] hub 5-1:0.0: bad descriptor, ignoring hub [ 1630.443358][ T6775] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1630.457214][ T6775] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1630.535658][ T5914] usb 2-1: config 0 has no interfaces? [ 1630.535808][T17830] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1630.626449][ T5914] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1630.635556][T22094] program syz.4.4066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1630.635906][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.685843][T17830] usb 4-1: Using ep0 maxpacket: 16 [ 1630.694455][T17830] usb 4-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 1630.705119][T17830] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1630.716914][ T5914] usb 2-1: Product: syz [ 1630.721090][ T5914] usb 2-1: Manufacturer: syz [ 1630.770405][T22104] misc userio: No port type given on /dev/userio [ 1630.785458][T17830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1630.807034][ T5914] usb 2-1: SerialNumber: syz [ 1630.816599][T17830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8192, setting to 1024 [ 1630.829962][ T5914] usb 2-1: config 0 descriptor?? [ 1630.843777][T17830] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1630.864396][T17830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.903797][T17830] usb 4-1: Product: syz [ 1630.912069][T17830] usb 4-1: Manufacturer: syz [ 1630.919939][ T6775] usb 5-1: reset high-speed USB device number 28 using dummy_hcd [ 1630.934695][T17830] usb 4-1: SerialNumber: syz [ 1631.166154][ T6775] usb 5-1: device descriptor read/64, error -71 [ 1631.203886][T17830] usb 4-1: config 0 descriptor?? [ 1631.233889][T22113] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4073'. [ 1631.416261][ T79] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1631.426111][ T6775] usb 5-1: reset high-speed USB device number 28 using dummy_hcd [ 1631.477395][T22102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4069'. [ 1631.486646][T22102] netdevsim netdevsim3 : left allmulticast mode [ 1631.556092][T17830] appledisplay 4-1:0.0: Error while getting initial brightness: -110 [ 1631.558449][T22102] netdevsim netdevsim3 : left promiscuous mode [ 1631.576156][ T6775] usb 5-1: device descriptor read/64, error -71 [ 1631.582773][T17830] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110 [ 1631.636405][T22102] bridge0: port 3() entered disabled state [ 1631.666680][T22102] bridge_slave_0: left allmulticast mode [ 1631.672505][T22102] bridge_slave_0: left promiscuous mode [ 1631.679464][T22102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.815805][ T6775] usb 5-1: reset high-speed USB device number 28 using dummy_hcd [ 1631.846574][ T6775] usb 5-1: device descriptor read/8, error -71 [ 1632.135755][ T6775] usb 5-1: reset high-speed USB device number 28 using dummy_hcd [ 1632.155358][T21239] usb 4-1: USB disconnect, device number 33 [ 1632.164136][ T6775] usb 5-1: device descriptor read/8, error -71 [ 1632.280879][ T6775] usb 5-1: USB disconnect, device number 28 [ 1632.627594][ T6775] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1632.666511][T18688] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1632.807324][ T6775] usb 5-1: device descriptor read/64, error -71 [ 1633.344940][ T6775] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1633.495536][ T5899] usb 2-1: USB disconnect, device number 13 [ 1633.556543][ T6775] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 1633.568732][ T6775] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1633.609470][ T6775] usb 5-1: config 0 has no interfaces? [ 1633.654321][ T6775] usb 5-1: New USB device found, idVendor=152e, idProduct=30ca, bcdDevice=ae.11 [ 1633.774961][T22135] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4078'. [ 1633.793852][T22135] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1633.811062][ T6775] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.049351][ T3013] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1634.116897][ T6775] usb 5-1: config 0 descriptor?? [ 1634.184693][T22136] netlink: 'syz.3.4078': attribute type 16 has an invalid length. [ 1634.192668][T22136] netlink: 'syz.3.4078': attribute type 3 has an invalid length. [ 1634.200538][T22136] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.4078'. [ 1635.145932][ T5899] usb 5-1: USB disconnect, device number 30 [ 1635.585003][ T3013] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1635.653357][T22165] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4086'. [ 1635.675942][ T5898] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1635.728560][T22165] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 1636.122987][ T5898] usb 3-1: config 0 has no interfaces? [ 1636.140310][ T5898] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1636.149535][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.158135][ T5898] usb 3-1: Product: syz [ 1636.168917][ T5898] usb 3-1: Manufacturer: syz [ 1636.191009][ T5898] usb 3-1: SerialNumber: syz [ 1636.339863][ T5898] usb 3-1: config 0 descriptor?? [ 1636.735885][T22173] netlink: 'syz.3.4091': attribute type 1 has an invalid length. [ 1636.755808][T22157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1636.765338][T22157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1636.875781][T17830] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1636.915878][T22173] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1637.071164][T17830] usb 5-1: config 0 has no interfaces? [ 1637.080558][T17830] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1637.089723][T17830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.097943][T17830] usb 5-1: Product: syz [ 1637.102382][T17830] usb 5-1: Manufacturer: syz [ 1637.119254][T17830] usb 5-1: SerialNumber: syz [ 1637.138150][T17830] usb 5-1: config 0 descriptor?? [ 1637.147141][ T6775] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1637.165932][ T1003] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1637.184294][T22179] FAULT_INJECTION: forcing a failure. [ 1637.184294][T22179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1637.201375][T22179] CPU: 0 UID: 0 PID: 22179 Comm: syz.0.4092 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 1637.201399][T22179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1637.201410][T22179] Call Trace: [ 1637.201417][T22179] [ 1637.201425][T22179] dump_stack_lvl+0x241/0x360 [ 1637.201457][T22179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1637.201481][T22179] ? __pfx__printk+0x10/0x10 [ 1637.201514][T22179] should_fail_ex+0x424/0x570 [ 1637.201538][T22179] _copy_from_user+0x2d/0xb0 [ 1637.201562][T22179] vmci_host_unlocked_ioctl+0xa85/0x35c0 [ 1637.201596][T22179] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 1637.201638][T22179] ? kasan_quarantine_put+0xdc/0x230 [ 1637.201656][T22179] ? lockdep_hardirqs_on+0x9d/0x150 [ 1637.201685][T22179] ? tomoyo_path_number_perm+0x215/0x790 [ 1637.201711][T22179] ? tomoyo_path_number_perm+0x684/0x790 [ 1637.201735][T22179] ? tomoyo_path_number_perm+0x215/0x790 [ 1637.201759][T22179] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1637.201787][T22179] ? ksys_write+0x24e/0x2d0 [ 1637.201834][T22179] ? __fget_files+0x2a/0x420 [ 1637.201850][T22179] ? __fget_files+0x2a/0x420 [ 1637.201867][T22179] ? __fget_files+0x2a/0x420 [ 1637.201888][T22179] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 1637.201911][T22179] __se_sys_ioctl+0xf1/0x160 [ 1637.201933][T22179] do_syscall_64+0xf3/0x230 [ 1637.201955][T22179] ? clear_bhb_loop+0x45/0xa0 [ 1637.201976][T22179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1637.201992][T22179] RIP: 0033:0x7f04acf8d169 [ 1637.202008][T22179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1637.202023][T22179] RSP: 002b:00007f04adea5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1637.202042][T22179] RAX: ffffffffffffffda RBX: 00007f04ad1a5fa0 RCX: 00007f04acf8d169 [ 1637.202053][T22179] RDX: 0000000000000000 RSI: 00000000000007a8 RDI: 0000000000000003 [ 1637.202064][T22179] RBP: 00007f04adea5090 R08: 0000000000000000 R09: 0000000000000000 [ 1637.202075][T22179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1637.202085][T22179] R13: 0000000000000000 R14: 00007f04ad1a5fa0 R15: 00007f04ad2cfa28 [ 1637.202112][T22179] [ 1637.530892][T22182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1637.631921][T22182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1637.655807][ T6775] usb 2-1: Using ep0 maxpacket: 8 [ 1637.674764][ T6775] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1637.682479][ T6775] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1637.711865][ T6775] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1637.741149][ T6775] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1637.762685][ T6775] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1637.771411][ T6775] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1637.825938][ T6775] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1637.839553][ T6775] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1637.875026][ T6775] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1637.913809][ T6775] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1637.926408][ T5899] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1637.965578][ T6775] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1637.993263][ T6775] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1638.066894][ T6775] usb 2-1: string descriptor 0 read error: -22 [ 1638.075407][ T6775] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1638.097900][ T6775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.132071][ T6775] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1638.212059][ T5899] usb 4-1: config 0 has no interfaces? [ 1638.222017][ T5899] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1638.231263][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.239397][ T5899] usb 4-1: Product: syz [ 1638.243569][ T5899] usb 4-1: Manufacturer: syz [ 1638.248265][ T5899] usb 4-1: SerialNumber: syz [ 1638.262605][ T5899] usb 4-1: config 0 descriptor?? [ 1638.506597][ T3013] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1638.531874][ T5899] usb 3-1: USB disconnect, device number 9 [ 1638.683771][T22193] loop8: detected capacity change from 0 to 7 [ 1638.703158][T22193] Dev loop8: unable to read RDB block 7 [ 1638.710717][T22193] loop8: AHDI p1 p3 p4 [ 1638.718975][T22193] loop8: partition table partially beyond EOD, truncated [ 1638.731497][T22193] loop8: p1 start 975770946 is beyond EOD, truncated [ 1638.759124][T22193] loop8: p3 start 6514546 is beyond EOD, truncated [ 1638.785955][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1639.033012][ T6775] usb 2-1: USB disconnect, device number 14 [ 1639.418036][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 1639.418050][ T30] audit: type=1326 audit(1744664762.312:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22200 comm="syz.1.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41aad8d169 code=0x7ffc0000 [ 1639.658286][T18688] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1639.771005][ T30] audit: type=1326 audit(1744664762.362:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22200 comm="syz.1.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f41aad8d169 code=0x7ffc0000 [ 1639.809748][ T30] audit: type=1326 audit(1744664762.362:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22200 comm="syz.1.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41aad8d169 code=0x7ffc0000 [ 1639.869415][ T30] audit: type=1326 audit(1744664762.362:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22200 comm="syz.1.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41aad8d169 code=0x7ffc0000 [ 1639.919290][T22207] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1640.164446][ T6775] usb 5-1: USB disconnect, device number 31 [ 1640.198891][ T30] audit: type=1326 audit(1744664762.382:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22200 comm="syz.1.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f41aad8d169 code=0x7ffc0000 [ 1640.312155][ T30] audit: type=1326 audit(1744664762.382:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22200 comm="syz.1.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41aad8d169 code=0x7ffc0000 [ 1640.365836][ T5899] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1640.391238][ T5914] usb 4-1: USB disconnect, device number 34 [ 1640.421181][ T30] audit: type=1326 audit(1744664762.382:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22200 comm="syz.1.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41aad8d169 code=0x7ffc0000 [ 1640.479755][ T30] audit: type=1326 audit(1744664762.402:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22200 comm="syz.1.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f41aad8d169 code=0x7ffc0000 [ 1640.548425][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 1640.583174][ T30] audit: type=1326 audit(1744664762.402:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22200 comm="syz.1.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41aad8d169 code=0x7ffc0000 [ 1640.663404][ T30] audit: type=1326 audit(1744664762.402:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22200 comm="syz.1.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41aad8d169 code=0x7ffc0000 [ 1640.916359][T12582] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1640.994680][T22224] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4108'. [ 1641.031857][ T3013] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.164195][T22230] FAULT_INJECTION: forcing a failure. [ 1641.164195][T22230] name failslab, interval 1, probability 0, space 0, times 0 [ 1641.181122][T22230] CPU: 1 UID: 0 PID: 22230 Comm: syz.3.4110 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 1641.181149][T22230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1641.181163][T22230] Call Trace: [ 1641.181171][T22230] [ 1641.181180][T22230] dump_stack_lvl+0x241/0x360 [ 1641.181211][T22230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1641.181236][T22230] ? __pfx__printk+0x10/0x10 [ 1641.181263][T22230] ? __pfx___might_resched+0x10/0x10 [ 1641.181286][T22230] should_fail_ex+0x424/0x570 [ 1641.181310][T22230] should_failslab+0xac/0x100 [ 1641.181334][T22230] __kmalloc_noprof+0xdf/0x4d0 [ 1641.181357][T22230] ? tomoyo_encode+0x26f/0x540 [ 1641.181386][T22230] tomoyo_encode+0x26f/0x540 [ 1641.181417][T22230] tomoyo_realpath_from_path+0x59e/0x5e0 [ 1641.181454][T22230] tomoyo_path_number_perm+0x245/0x790 [ 1641.181479][T22230] ? tomoyo_path_number_perm+0x215/0x790 [ 1641.181503][T22230] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1641.181532][T22230] ? ksys_write+0x24e/0x2d0 [ 1641.181560][T22230] ? __lock_acquire+0xad5/0xd80 [ 1641.181596][T22230] ? __fget_files+0x2a/0x420 [ 1641.181610][T22230] ? __fget_files+0x2a/0x420 [ 1641.181629][T22230] ? __fget_files+0x2a/0x420 [ 1641.181650][T22230] security_file_ioctl+0xc6/0x2a0 [ 1641.181672][T22230] __se_sys_ioctl+0x46/0x160 [ 1641.181696][T22230] do_syscall_64+0xf3/0x230 [ 1641.181723][T22230] ? clear_bhb_loop+0x45/0xa0 [ 1641.181744][T22230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.181760][T22230] RIP: 0033:0x7fdb4718d169 [ 1641.181775][T22230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1641.181788][T22230] RSP: 002b:00007fdb4804d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1641.181814][T22230] RAX: ffffffffffffffda RBX: 00007fdb473a5fa0 RCX: 00007fdb4718d169 [ 1641.181827][T22230] RDX: 00002000000001c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 1641.181839][T22230] RBP: 00007fdb4804d090 R08: 0000000000000000 R09: 0000000000000000 [ 1641.181850][T22230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1641.181861][T22230] R13: 0000000000000000 R14: 00007fdb473a5fa0 R15: 00007fdb474cfa28 [ 1641.181888][T22230] [ 1641.181932][T22230] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1641.536214][ T3013] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.656346][ T5841] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1641.680964][ T3013] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.818647][ T3013] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.830760][ T5841] usb 5-1: config 0 has no interfaces? [ 1641.848567][ T5841] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1641.861343][T22238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4112'. [ 1641.878621][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.892845][ T5841] usb 5-1: Product: syz [ 1641.897684][ T5841] usb 5-1: Manufacturer: syz [ 1641.902385][ T5841] usb 5-1: SerialNumber: syz [ 1641.932180][ T5841] usb 5-1: config 0 descriptor?? [ 1642.126277][T12582] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1643.310126][ T79] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1643.319252][ T5899] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1643.375835][ T5899] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1643.394654][ T5899] usb 2-1: can't read configurations, error -71 [ 1643.613481][ T3013] bond0 (unregistering): Released all slaves [ 1643.620469][ T5841] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1643.684789][T22255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4120'. [ 1643.777212][T22257] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1643.794321][T22257] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1643.805045][T22257] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1643.853366][T22257] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1643.861564][T22257] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1643.894191][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1643.928615][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1643.947159][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1643.972463][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1643.988186][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1644.037213][ T5841] usb 4-1: config 0 has no interfaces? [ 1644.153261][ T3013] bond1 (unregistering): Released all slaves [ 1644.203092][ T5841] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1644.263276][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.288167][ T5841] usb 4-1: Product: syz [ 1644.308348][ T6775] usb 5-1: USB disconnect, device number 32 [ 1644.335815][ T5841] usb 4-1: Manufacturer: syz [ 1644.340467][ T5841] usb 4-1: SerialNumber: syz [ 1644.367818][ T5841] usb 4-1: config 0 descriptor?? [ 1644.407356][ T3013] : left promiscuous mode [ 1644.490074][T12582] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1644.675985][ T5899] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1644.851976][ T5899] usb 2-1: not running at top speed; connect to a high speed hub [ 1644.861638][ T5899] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 1644.872841][ T5899] usb 2-1: config 95 has no interface number 0 [ 1644.915250][ T5899] usb 2-1: config 95 interface 1 has no altsetting 0 [ 1645.001663][ T5899] usb 2-1: string descriptor 0 read error: -22 [ 1645.051955][ T5899] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 1645.082989][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.232101][ T3013] batadv0: left promiscuous mode [ 1645.258960][ T3013] hsr_slave_0: left promiscuous mode [ 1645.289203][ T3013] hsr_slave_1: left promiscuous mode [ 1645.638390][T17066] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1646.066394][T22257] Bluetooth: hci2: command tx timeout [ 1646.562576][ T5914] usb 4-1: USB disconnect, device number 35 [ 1646.790671][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1647.292512][T22259] chnl_net:caif_netlink_parms(): no params data found [ 1647.479364][ T5841] usb 2-1: USB disconnect, device number 17 [ 1647.986098][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1647.993115][T22259] bridge0: port 1(bridge_slave_0) entered blocking state [ 1648.010270][T22259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.018594][T22259] bridge_slave_0: entered allmulticast mode [ 1648.026882][T22259] bridge_slave_0: entered promiscuous mode [ 1648.039188][T22259] bridge0: port 2(bridge_slave_1) entered blocking state [ 1648.047143][T22259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.054439][T22259] bridge_slave_1: entered allmulticast mode [ 1648.062963][T22259] bridge_slave_1: entered promiscuous mode [ 1648.146049][T22257] Bluetooth: hci2: command tx timeout [ 1648.173220][T22312] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4130'. [ 1648.183186][ T5841] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1648.203983][T22259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1648.218477][T22259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1648.309405][T22259] team0: Port device team_slave_0 added [ 1648.335818][ T5841] usb 2-1: Using ep0 maxpacket: 32 [ 1648.349198][ T5841] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1648.367407][T22259] team0: Port device team_slave_1 added [ 1648.372714][ T5841] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1648.409592][ T5841] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1648.438150][ T5841] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1648.451437][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.459619][ T6775] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1648.480920][ T5841] usb 2-1: Product: syz [ 1648.485140][ T5841] usb 2-1: Manufacturer: syz [ 1648.515038][ T5841] usb 2-1: SerialNumber: syz [ 1648.528281][T22259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1648.535362][T22259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1648.561294][ C1] vkms_vblank_simulate: vblank timer overrun [ 1648.595749][T22259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1648.632071][T22259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1648.648117][ T6775] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 1648.663548][T22259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1648.675811][ T6775] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1648.689615][ C1] vkms_vblank_simulate: vblank timer overrun [ 1648.750605][T22259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1648.760401][ T5841] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1648.784030][ T6775] usb 5-1: config 0 has no interfaces? [ 1648.810579][ T6775] usb 5-1: New USB device found, idVendor=152e, idProduct=30ca, bcdDevice=ae.11 [ 1648.835824][T17830] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1648.860008][ T6775] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.913410][ T6775] usb 5-1: config 0 descriptor?? [ 1648.946752][ T5841] usb 2-1: USB disconnect, device number 18 [ 1649.010514][T22259] hsr_slave_0: entered promiscuous mode [ 1649.035760][T17830] usb 4-1: config index 0 descriptor too short (expected 8192, got 36) [ 1649.041800][T22259] hsr_slave_1: entered promiscuous mode [ 1649.082770][T22259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1649.089027][T17830] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1649.112927][T22259] Cannot create hsr debugfs directory [ 1649.124143][T17830] usb 4-1: config 0 has no interfaces? [ 1649.141335][T17830] usb 4-1: New USB device found, idVendor=152e, idProduct=30ca, bcdDevice=ae.11 [ 1649.156659][ T79] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1649.164038][T17830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.195621][T17830] usb 4-1: config 0 descriptor?? [ 1649.215188][T21239] usb 5-1: USB disconnect, device number 33 [ 1649.309180][ T6543] udevd[6543]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1649.791175][T22259] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1649.811176][T22259] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1649.861064][ T5914] usb 4-1: USB disconnect, device number 36 [ 1649.874120][T22259] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1649.875822][T21239] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1649.925261][T22259] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1650.098920][T22351] FAULT_INJECTION: forcing a failure. [ 1650.098920][T22351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1650.154884][T22351] CPU: 0 UID: 0 PID: 22351 Comm: syz.4.4135 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 1650.154911][T22351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1650.154922][T22351] Call Trace: [ 1650.154930][T22351] [ 1650.154938][T22351] dump_stack_lvl+0x241/0x360 [ 1650.154969][T22351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1650.154993][T22351] ? __pfx__printk+0x10/0x10 [ 1650.155022][T22351] should_fail_ex+0x424/0x570 [ 1650.155045][T22351] _copy_to_user+0x31/0xb0 [ 1650.155071][T22351] simple_read_from_buffer+0xc4/0x170 [ 1650.155099][T22351] proc_fail_nth_read+0x1ef/0x260 [ 1650.155121][T22351] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1650.155142][T22351] ? rw_verify_area+0x246/0x630 [ 1650.155159][T22351] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1650.155179][T22351] vfs_read+0x21f/0xb90 [ 1650.155203][T22351] ? __pfx___mutex_lock+0x10/0x10 [ 1650.155226][T22351] ? __pfx_vfs_read+0x10/0x10 [ 1650.155247][T22351] ? __fget_files+0x2a/0x420 [ 1650.155265][T22351] ? __fget_files+0x39d/0x420 [ 1650.155279][T22351] ? __fget_files+0x2a/0x420 [ 1650.155305][T22351] ksys_read+0x19d/0x2d0 [ 1650.155326][T22351] ? __pfx_ksys_read+0x10/0x10 [ 1650.155350][T22351] ? do_syscall_64+0xb6/0x230 [ 1650.155373][T22351] do_syscall_64+0xf3/0x230 [ 1650.155395][T22351] ? clear_bhb_loop+0x45/0xa0 [ 1650.155416][T22351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.155433][T22351] RIP: 0033:0x7fc9bad8bb7c [ 1650.155448][T22351] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1650.155462][T22351] RSP: 002b:00007fc9bbc83030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1650.155481][T22351] RAX: ffffffffffffffda RBX: 00007fc9bafa5fa0 RCX: 00007fc9bad8bb7c [ 1650.155494][T22351] RDX: 000000000000000f RSI: 00007fc9bbc830a0 RDI: 0000000000000004 [ 1650.155505][T22351] RBP: 00007fc9bbc83090 R08: 0000000000000000 R09: 0000000000000000 [ 1650.155516][T22351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1650.155526][T22351] R13: 0000000000000000 R14: 00007fc9bafa5fa0 R15: 00007fc9bb0cfa28 [ 1650.155555][T22351] [ 1650.366523][T22257] Bluetooth: hci2: command tx timeout [ 1650.375860][T21239] usb 2-1: config 0 has no interfaces? [ 1650.385191][T22259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1650.423679][T21239] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1650.432847][T21239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.440885][T21239] usb 2-1: Product: syz [ 1650.445025][T21239] usb 2-1: Manufacturer: syz [ 1650.449637][T21239] usb 2-1: SerialNumber: syz [ 1650.456084][T21239] usb 2-1: config 0 descriptor?? [ 1650.526470][ T2977] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1650.645444][T22259] 8021q: adding VLAN 0 to HW filter on device team0 [ 1650.817474][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.824702][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1650.889894][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 1650.897034][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1651.065376][T22259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1651.195975][ T5898] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1651.325951][ T5841] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1651.345875][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 1651.353639][ T5898] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1651.381409][ T5898] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1651.402603][T22259] veth0_vlan: entered promiscuous mode [ 1651.438568][T22259] veth1_vlan: entered promiscuous mode [ 1651.462453][ T5898] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1651.495972][ T5841] usb 5-1: device descriptor read/64, error -71 [ 1651.509044][ T5898] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1651.524369][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.585384][ T5898] usb 4-1: Product: syz [ 1651.594027][ T5898] usb 4-1: Manufacturer: syz [ 1651.644821][ T5898] usb 4-1: SerialNumber: syz [ 1651.667755][T22259] veth0_macvtap: entered promiscuous mode [ 1651.746682][ T1003] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1651.799384][T22259] veth1_macvtap: entered promiscuous mode [ 1651.836162][ T5841] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1651.891477][ T5898] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1651.914759][T22259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1651.983064][T22259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1651.996580][ T5841] usb 5-1: device descriptor read/64, error -71 [ 1652.062056][T22259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1652.106683][ T5898] usb 4-1: USB disconnect, device number 37 [ 1652.116630][ T5841] usb usb5-port1: attempt power cycle [ 1652.154473][T22259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.253372][T22259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1652.317834][T22259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1652.330029][T22259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.342002][T22259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1652.358844][T22259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.379542][T22259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1652.386921][T22257] Bluetooth: hci2: command tx timeout [ 1652.463421][T22259] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.485859][ T5841] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1652.511212][ T5841] usb 5-1: device descriptor read/8, error -71 [ 1652.517528][T22259] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.536424][ T6543] udevd[6543]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1652.552829][T22259] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.562731][T22259] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.765847][ T5841] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1652.849130][ T5841] usb 5-1: device descriptor read/8, error -71 [ 1652.862582][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1652.881351][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1652.898150][ T5898] usb 2-1: USB disconnect, device number 19 [ 1652.906618][ T1003] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1653.027231][T22389] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20001 [ 1653.039447][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1653.098845][ T5841] usb usb5-port1: unable to enumerate USB device [ 1653.148425][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1653.425800][ T5898] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1653.545833][ T5841] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1653.652114][ T5898] usb 2-1: config 0 has no interfaces? [ 1653.669655][ T5898] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1653.679040][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.690806][ T5898] usb 2-1: Product: syz [ 1653.694996][ T5898] usb 2-1: Manufacturer: syz [ 1653.710175][ T5898] usb 2-1: SerialNumber: syz [ 1653.726477][ T5841] usb 4-1: config index 0 descriptor too short (expected 8192, got 36) [ 1653.745496][ T5898] usb 2-1: config 0 descriptor?? [ 1653.799447][ T5841] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.028220][T22392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1654.038537][T22392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1654.052383][ T5841] usb 4-1: config 0 has no interfaces? [ 1654.068317][ T5841] usb 4-1: New USB device found, idVendor=152e, idProduct=30ca, bcdDevice=ae.11 [ 1654.102418][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.148650][ T5841] usb 4-1: config 0 descriptor?? [ 1654.290701][T22385] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1654.527554][ T5898] usb 4-1: USB disconnect, device number 38 [ 1654.645875][ T5841] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1655.009158][T21239] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1655.176122][T21239] usb 5-1: Using ep0 maxpacket: 16 [ 1655.196621][T21239] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1655.231055][T21239] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1655.274915][T21239] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1655.308067][T21239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.355587][T21239] usb 5-1: Product: syz [ 1655.531976][T21239] usb 5-1: Manufacturer: syz [ 1655.536815][T21239] usb 5-1: SerialNumber: syz [ 1655.546375][ T5841] usb 6-1: config 0 has no interfaces? [ 1655.559994][ T5841] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1655.569130][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.578081][ T5841] usb 6-1: Product: syz [ 1655.582354][ T5841] usb 6-1: Manufacturer: syz [ 1655.589800][ T5841] usb 6-1: SerialNumber: syz [ 1655.602853][ T5841] usb 6-1: config 0 descriptor?? [ 1655.760855][T21239] usb 5-1: 0:2 : does not exist [ 1655.779551][T21239] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1655.813370][T21239] usb 5-1: USB disconnect, device number 38 [ 1655.823678][ T79] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1656.128405][ T5896] udevd[5896]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1656.146006][ T5898] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1656.327933][ T5898] usb 4-1: config 0 has no interfaces? [ 1656.342408][ T5898] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1656.352248][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.362240][ T5898] usb 4-1: Product: syz [ 1656.366669][ T5898] usb 4-1: Manufacturer: syz [ 1656.371314][ T5898] usb 4-1: SerialNumber: syz [ 1656.393024][ T5898] usb 4-1: config 0 descriptor?? [ 1656.428934][T21239] usb 2-1: USB disconnect, device number 20 [ 1656.604289][T22440] trusted_key: encrypted_key: insufficient parameters specified [ 1657.415878][ T79] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1657.501818][ T5899] usb 6-1: USB disconnect, device number 2 [ 1657.685839][ T5898] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1658.308317][ T5898] usb 2-1: config 0 has no interfaces? [ 1658.388614][ T5898] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1658.459379][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.492659][ T5898] usb 2-1: Product: syz [ 1658.503912][ T5898] usb 2-1: Manufacturer: syz [ 1658.531070][ T5898] usb 2-1: SerialNumber: syz [ 1658.535998][ T5899] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1658.588525][ T5898] usb 2-1: config 0 descriptor?? [ 1658.717458][ T5899] usb 6-1: Using ep0 maxpacket: 32 [ 1658.737969][ T5899] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1658.753747][ T5899] usb 6-1: config 0 has no interface number 0 [ 1658.767867][T22385] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1658.793693][ T5899] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1658.815616][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.841709][ T5899] usb 6-1: Product: syz [ 1658.857576][ T5899] usb 6-1: Manufacturer: syz [ 1658.866772][T22473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4154'. [ 1658.883105][ T5899] usb 6-1: SerialNumber: syz [ 1658.938506][ T5899] usb 6-1: config 0 descriptor?? [ 1658.943761][T22473] netlink: 'syz.0.4154': attribute type 30 has an invalid length. [ 1658.969776][ T5899] smsc95xx v2.0.0 [ 1658.990529][T22473] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1659.000090][T22473] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1659.008980][T22473] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1659.017848][T22473] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1659.635774][ T5841] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1659.704716][T21239] usb 4-1: USB disconnect, device number 39 [ 1659.788636][ T5841] usb 5-1: Using ep0 maxpacket: 32 [ 1659.843612][ T5841] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1659.855039][ T5841] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1659.887542][ T5841] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1659.903240][ T5841] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1659.913502][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.922423][ T5841] usb 5-1: Product: syz [ 1659.927423][ T5841] usb 5-1: Manufacturer: syz [ 1659.932123][ T5841] usb 5-1: SerialNumber: syz [ 1660.001096][T22493] FAULT_INJECTION: forcing a failure. [ 1660.001096][T22493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1660.042912][T22493] CPU: 0 UID: 0 PID: 22493 Comm: syz.3.4158 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 1660.042940][T22493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1660.042951][T22493] Call Trace: [ 1660.042959][T22493] [ 1660.042970][T22493] dump_stack_lvl+0x241/0x360 [ 1660.043004][T22493] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1660.043028][T22493] ? __pfx__printk+0x10/0x10 [ 1660.043064][T22493] should_fail_ex+0x424/0x570 [ 1660.043088][T22493] _copy_from_user+0x2d/0xb0 [ 1660.043119][T22493] copy_msghdr_from_user+0xb3/0x580 [ 1660.043150][T22493] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1660.043185][T22493] do_recvmmsg+0x3bf/0xab0 [ 1660.043216][T22493] ? __pfx_do_recvmmsg+0x10/0x10 [ 1660.043252][T22493] ? rcu_read_lock_any_held+0xbb/0x160 [ 1660.043276][T22493] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1660.043302][T22493] ? vfs_write+0xb29/0xd10 [ 1660.043330][T22493] ? ksys_write+0x24e/0x2d0 [ 1660.043353][T22493] ? __mutex_unlock_slowpath+0x229/0x800 [ 1660.043385][T22493] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1660.043405][T22493] ? __fget_files+0x2a/0x420 [ 1660.043438][T22493] __x64_sys_recvmmsg+0x1ab/0x260 [ 1660.043460][T22493] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1660.043487][T22493] ? do_syscall_64+0xb6/0x230 [ 1660.043511][T22493] do_syscall_64+0xf3/0x230 [ 1660.043532][T22493] ? clear_bhb_loop+0x45/0xa0 [ 1660.043554][T22493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1660.043571][T22493] RIP: 0033:0x7fdb4718d169 [ 1660.043587][T22493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1660.043602][T22493] RSP: 002b:00007fdb4804d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1660.043621][T22493] RAX: ffffffffffffffda RBX: 00007fdb473a5fa0 RCX: 00007fdb4718d169 [ 1660.043635][T22493] RDX: 0000000000000004 RSI: 00002000000086c0 RDI: 0000000000000003 [ 1660.043646][T22493] RBP: 00007fdb4804d090 R08: 0000000000000000 R09: 0000000000000000 [ 1660.043657][T22493] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000002 [ 1660.043668][T22493] R13: 0000000000000000 R14: 00007fdb473a5fa0 R15: 00007fdb474cfa28 [ 1660.043696][T22493] [ 1660.298298][ T5899] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 1660.314154][ T5899] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1660.333929][ T5899] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1660.348200][ T5899] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 1660.397492][ T79] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1660.399011][ T5841] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 1660.434350][ T5841] usb 5-1: USB disconnect, device number 39 [ 1660.538952][ T5899] usb 6-1: USB disconnect, device number 3 [ 1660.660849][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1660.982661][T22506] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4162'. [ 1661.025540][T22506] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4162'. [ 1661.214386][ T5899] usb 2-1: USB disconnect, device number 21 [ 1661.476002][ T5898] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1661.565996][ T5914] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1661.798920][ T5898] usb 4-1: config 0 has no interfaces? [ 1661.862549][T22523] netlink: 'syz.5.4165': attribute type 16 has an invalid length. [ 1661.880543][ T79] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1661.935898][T22523] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.4165'. [ 1662.074089][ T5914] usb 5-1: config 0 has no interfaces? [ 1662.245956][ T5898] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1662.275787][ T6775] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1662.317677][ T5914] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1662.332987][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.359630][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.380615][ T5898] usb 4-1: Product: syz [ 1662.425240][ T5898] usb 4-1: Manufacturer: syz [ 1662.430187][ T5914] usb 5-1: Product: syz [ 1662.474144][ T5898] usb 4-1: SerialNumber: syz [ 1662.479179][ T5914] usb 5-1: Manufacturer: syz [ 1662.483851][ T5914] usb 5-1: SerialNumber: syz [ 1662.515468][ T5898] usb 4-1: config 0 descriptor?? [ 1662.554226][ T5914] usb 5-1: config 0 descriptor?? [ 1662.609353][ T6775] usb 2-1: config 0 has no interfaces? [ 1662.757811][ T6775] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1662.852623][T22518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1662.862371][T22518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1663.045203][ T6775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.115183][ T6775] usb 2-1: Product: syz [ 1663.141856][ T6775] usb 2-1: Manufacturer: syz [ 1663.172516][ T6775] usb 2-1: SerialNumber: syz [ 1663.235123][ T6775] usb 2-1: config 0 descriptor?? [ 1663.317117][ T79] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1664.132722][ T5898] usb 5-1: USB disconnect, device number 40 [ 1664.517804][T18688] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1665.034062][ T5841] usb 4-1: USB disconnect, device number 40 [ 1665.242241][ T5841] usb 2-1: USB disconnect, device number 22 [ 1665.745775][T18688] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1665.995805][ T5898] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1666.247502][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 1666.276013][ T6775] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1666.295426][ T5898] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1666.345763][ T5898] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1666.405149][ T5898] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1666.454765][ T6775] usb 6-1: Using ep0 maxpacket: 32 [ 1666.461409][T22580] could not allocate digest TFM handle vmac64(aes-generic) [ 1666.504698][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.506097][ T6775] usb 6-1: config 4 has an invalid interface number: 5 but max is 0 [ 1666.520835][ T5898] usb 2-1: Product: syz [ 1666.525482][ T5898] usb 2-1: Manufacturer: syz [ 1666.541126][ T5898] usb 2-1: SerialNumber: syz [ 1666.563342][ T6775] usb 6-1: config 4 has an invalid descriptor of length 36, skipping remainder of the config [ 1666.653144][ T6775] usb 6-1: config 4 has no interface number 0 [ 1666.668697][ T6775] usb 6-1: New USB device found, idVendor=19d2, idProduct=0124, bcdDevice=18.ca [ 1666.685911][ T6775] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.695644][ T6775] usb 6-1: Product: syz [ 1666.745970][ T6775] usb 6-1: Manufacturer: syz [ 1666.752151][ T6775] usb 6-1: SerialNumber: syz [ 1666.969199][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1667.048288][ T5898] usb 2-1: 0:2 : does not exist [ 1667.054518][T22576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1667.080200][ T5898] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1667.099740][T22576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1667.586160][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1667.615800][ T6775] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1667.732898][ T5898] usb 2-1: USB disconnect, device number 23 [ 1667.773978][T22600] kvm: apic: phys broadcast and lowest prio [ 1667.858482][ T6775] usb 5-1: config 0 has no interfaces? [ 1667.868558][ T6775] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1667.895853][ T6775] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.914865][ T6775] usb 5-1: Product: syz [ 1667.941288][ T6775] usb 5-1: Manufacturer: syz [ 1667.951682][ T6775] usb 5-1: SerialNumber: syz [ 1667.965586][ T6775] usb 5-1: config 0 descriptor?? [ 1668.179950][ T5896] udevd[5896]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1668.527397][ T5914] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1668.541147][ T2977] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1668.698505][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1668.731903][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1668.760790][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1668.807836][ T5914] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1668.834362][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.868261][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.874721][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.903360][ T5914] usb 4-1: config 0 descriptor?? [ 1669.125123][T20167] usb 6-1: USB disconnect, device number 4 [ 1669.339719][T22612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4182'. [ 1669.348951][T22612] tc_dump_action: action bad kind [ 1669.698184][T17066] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1670.065350][ T5841] usb 5-1: USB disconnect, device number 41 [ 1670.584944][T22656] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4190'. [ 1671.011897][T20167] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1671.166175][ T79] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1671.432009][T20167] usb 5-1: config 0 has no interfaces? [ 1671.491803][T20167] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1671.566646][T20167] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.574971][ T5914] usbhid 4-1:0.0: can't add hid device: -71 [ 1671.676175][ T5841] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1671.698581][ T5914] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1671.737380][T20167] usb 5-1: Product: syz [ 1671.782796][T20167] usb 5-1: Manufacturer: syz [ 1671.805548][T20167] usb 5-1: SerialNumber: syz [ 1671.837630][ T5841] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1671.866048][ T5914] usb 4-1: USB disconnect, device number 41 [ 1671.873870][T20167] usb 5-1: config 0 descriptor?? [ 1671.886358][ T5841] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1671.954852][ T5841] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1672.018309][ T5841] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1672.089098][ T5841] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1672.181876][T22655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1672.191558][T22655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1672.215633][ T5841] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1672.237272][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1672.275620][ T5841] usb 6-1: Product: syz [ 1672.284519][ T5841] usb 6-1: Manufacturer: syz [ 1672.384186][ T5841] cdc_wdm 6-1:1.0: skipping garbage [ 1672.396046][ T5914] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1672.399098][ T5841] cdc_wdm 6-1:1.0: skipping garbage [ 1672.440451][ T5841] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1672.453661][ T5841] cdc_wdm 6-1:1.0: Unknown control protocol [ 1672.561577][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1672.631441][ T5914] usb 4-1: config 0 has no interfaces? [ 1672.648482][ T5914] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1672.673403][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.712631][ T5914] usb 4-1: Product: syz [ 1672.983584][ T5914] usb 4-1: Manufacturer: syz [ 1672.995094][ T5914] usb 4-1: SerialNumber: syz [ 1673.017719][ T5914] usb 4-1: config 0 descriptor?? [ 1673.835365][T22699] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4199'. [ 1673.968771][ T79] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1673.987217][ T5841] usb 5-1: USB disconnect, device number 42 [ 1674.570806][ T5841] usb 6-1: USB disconnect, device number 5 [ 1674.727217][ T6775] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1674.897754][ T6775] usb 5-1: Using ep0 maxpacket: 16 [ 1674.956310][ T6775] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1674.982578][ T6775] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1675.030590][ T6775] usb 5-1: config 0 has no interface number 0 [ 1675.039312][ T6775] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1675.057501][ T6775] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.092912][ T6775] usb 5-1: Product: syz [ 1675.110022][ T6775] usb 5-1: Manufacturer: syz [ 1675.134995][ T6775] usb 5-1: SerialNumber: syz [ 1675.162056][ T5914] usb 4-1: USB disconnect, device number 42 [ 1675.180963][ T6775] usb 5-1: config 0 descriptor?? [ 1675.194062][ T6775] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 1675.223094][ T6775] usb 5-1: No valid video chain found. [ 1675.405972][T21239] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1675.435819][T22718] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4205'. [ 1675.449197][ T79] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1675.590305][T22720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1675.599594][T22720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1675.755273][T21239] usb 6-1: config 0 has no interfaces? [ 1675.790054][T21239] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1675.800542][T21239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.817285][T21239] usb 6-1: Product: syz [ 1675.826340][T21239] usb 6-1: Manufacturer: syz [ 1675.852146][T21239] usb 6-1: SerialNumber: syz [ 1675.924175][T21239] usb 6-1: config 0 descriptor?? [ 1676.407503][T22725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4206'. [ 1676.525889][T22725] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1676.901558][T22385] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1677.440965][T22727] netlink: 'syz.1.4206': attribute type 16 has an invalid length. [ 1677.547151][T22727] netlink: 'syz.1.4206': attribute type 3 has an invalid length. [ 1677.601160][T22727] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.4206'. [ 1678.263271][T20167] usb 5-1: USB disconnect, device number 43 [ 1678.327981][T12582] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1678.568588][ T6775] usb 6-1: USB disconnect, device number 6 [ 1678.775987][T21239] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1679.097155][T22781] FAULT_INJECTION: forcing a failure. [ 1679.097155][T22781] name failslab, interval 1, probability 0, space 0, times 0 [ 1679.241863][T22781] CPU: 0 UID: 0 PID: 22781 Comm: syz.1.4216 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 1679.241890][T22781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1679.241901][T22781] Call Trace: [ 1679.241907][T22781] [ 1679.241912][T22781] dump_stack_lvl+0x241/0x360 [ 1679.241932][T22781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1679.241947][T22781] ? __pfx__printk+0x10/0x10 [ 1679.241967][T22781] ? __pfx___might_resched+0x10/0x10 [ 1679.241984][T22781] should_fail_ex+0x424/0x570 [ 1679.241998][T22781] should_failslab+0xac/0x100 [ 1679.242013][T22781] kmem_cache_alloc_lru_noprof+0x7d/0x390 [ 1679.242026][T22781] ? __d_alloc+0x31/0x740 [ 1679.242039][T22781] __d_alloc+0x31/0x740 [ 1679.242049][T22781] ? hashlen_string+0x54/0x110 [ 1679.242061][T22781] d_alloc_name+0xeb/0x290 [ 1679.242073][T22781] ? __pfx_d_alloc_name+0x10/0x10 [ 1679.242087][T22781] ? _raw_spin_unlock+0x28/0x50 [ 1679.242099][T22781] simple_fill_super+0x30d/0x640 [ 1679.242118][T22781] bm_fill_super+0x195/0x220 [ 1679.242131][T22781] ? __pfx_bm_fill_super+0x10/0x10 [ 1679.242145][T22781] get_tree_keyed+0xde/0x170 [ 1679.242158][T22781] vfs_get_tree+0x90/0x2b0 [ 1679.242172][T22781] vfs_cmd_create+0xa0/0x1f0 [ 1679.242183][T22781] ? __se_sys_fsconfig+0xa14/0xf40 [ 1679.242195][T22781] __se_sys_fsconfig+0xa20/0xf40 [ 1679.242211][T22781] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 1679.242221][T22781] ? ksys_write+0x275/0x2d0 [ 1679.242238][T22781] ? __x64_sys_fsconfig+0x20/0xc0 [ 1679.242251][T22781] do_syscall_64+0xf3/0x230 [ 1679.242263][T22781] ? clear_bhb_loop+0x45/0xa0 [ 1679.242275][T22781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1679.242284][T22781] RIP: 0033:0x7f41aad8d169 [ 1679.242294][T22781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1679.242302][T22781] RSP: 002b:00007f41abc40038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1679.242314][T22781] RAX: ffffffffffffffda RBX: 00007f41aafa5fa0 RCX: 00007f41aad8d169 [ 1679.242325][T22781] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1679.242335][T22781] RBP: 00007f41abc40090 R08: 0000000000000000 R09: 0000000000000000 [ 1679.242346][T22781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1679.242356][T22781] R13: 0000000000000000 R14: 00007f41aafa5fa0 R15: 00007f41ab0cfa28 [ 1679.242376][T22781] [ 1679.616132][T21239] usb 5-1: config 0 has no interfaces? [ 1679.637083][T21239] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1679.646273][T21239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.654288][T21239] usb 5-1: Product: syz [ 1679.658529][T21239] usb 5-1: Manufacturer: syz [ 1679.663148][T21239] usb 5-1: SerialNumber: syz [ 1679.672924][T21239] usb 5-1: config 0 descriptor?? [ 1679.725775][ T6775] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1679.758575][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1679.854220][T22790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4218'. [ 1679.994199][T22793] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4217'. [ 1680.255091][T22800] FAULT_INJECTION: forcing a failure. [ 1680.255091][T22800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1680.257939][ T6775] usb 6-1: config 0 has no interfaces? [ 1680.278566][T22800] CPU: 0 UID: 0 PID: 22800 Comm: syz.1.4219 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 1680.278590][T22800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1680.278601][T22800] Call Trace: [ 1680.278609][T22800] [ 1680.278623][T22800] dump_stack_lvl+0x241/0x360 [ 1680.278655][T22800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1680.278680][T22800] ? __pfx__printk+0x10/0x10 [ 1680.278714][T22800] should_fail_ex+0x424/0x570 [ 1680.278739][T22800] _copy_to_user+0x31/0xb0 [ 1680.278766][T22800] simple_read_from_buffer+0xc4/0x170 [ 1680.278794][T22800] proc_fail_nth_read+0x1ef/0x260 [ 1680.278816][T22800] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1680.278838][T22800] ? rw_verify_area+0x246/0x630 [ 1680.278855][T22800] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1680.278875][T22800] vfs_read+0x21f/0xb90 [ 1680.278899][T22800] ? __pfx___mutex_lock+0x10/0x10 [ 1680.278922][T22800] ? __pfx_vfs_read+0x10/0x10 [ 1680.278943][T22800] ? __fget_files+0x2a/0x420 [ 1680.278959][T22800] ? __fget_files+0x39d/0x420 [ 1680.278972][T22800] ? __fget_files+0x2a/0x420 [ 1680.278995][T22800] ksys_read+0x19d/0x2d0 [ 1680.279015][T22800] ? __pfx_ksys_read+0x10/0x10 [ 1680.279039][T22800] ? do_syscall_64+0xb6/0x230 [ 1680.279063][T22800] do_syscall_64+0xf3/0x230 [ 1680.279084][T22800] ? clear_bhb_loop+0x45/0xa0 [ 1680.279105][T22800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.279122][T22800] RIP: 0033:0x7f41aad8bb7c [ 1680.279138][T22800] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1680.279152][T22800] RSP: 002b:00007f41abc40030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1680.279170][T22800] RAX: ffffffffffffffda RBX: 00007f41aafa5fa0 RCX: 00007f41aad8bb7c [ 1680.279184][T22800] RDX: 000000000000000f RSI: 00007f41abc400a0 RDI: 0000000000000004 [ 1680.279195][T22800] RBP: 00007f41abc40090 R08: 0000000000000000 R09: 0000000000000000 [ 1680.279206][T22800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1680.279216][T22800] R13: 0000000000000000 R14: 00007f41aafa5fa0 R15: 00007f41ab0cfa28 [ 1680.279245][T22800] [ 1680.853368][ T6775] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1681.065797][ T6775] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.075146][ T6775] usb 6-1: Product: syz [ 1681.085807][ T6775] usb 6-1: Manufacturer: syz [ 1681.095738][ T6775] usb 6-1: SerialNumber: syz [ 1681.119821][ T6775] usb 6-1: config 0 descriptor?? [ 1681.296074][ T5841] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1681.315111][T18688] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1681.776051][ T5841] usb 2-1: config 0 has no interfaces? [ 1681.786788][ T5841] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1681.799085][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.807361][ T5841] usb 2-1: Product: syz [ 1681.828179][ T5841] usb 2-1: Manufacturer: syz [ 1681.852731][ T5841] usb 2-1: SerialNumber: syz [ 1681.878253][ T5841] usb 2-1: config 0 descriptor?? [ 1682.335877][ T5914] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1682.370546][ T5841] usb 5-1: USB disconnect, device number 44 [ 1682.554232][ T6775] usb 6-1: USB disconnect, device number 7 [ 1682.627631][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1682.681509][ T5914] usb 4-1: config 0 has no interfaces? [ 1682.710856][ T5914] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1682.733251][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.803820][ T5914] usb 4-1: Product: syz [ 1682.824897][ T5914] usb 4-1: Manufacturer: syz [ 1682.878779][ T5914] usb 4-1: SerialNumber: syz [ 1682.987339][ T5914] usb 4-1: config 0 descriptor?? [ 1683.759522][T22385] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1683.868563][T22875] could not allocate digest TFM handle vmac64(aes-generic) [ 1684.298806][T22895] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4232'. [ 1684.585771][ T5914] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1684.713556][T21239] usb 2-1: USB disconnect, device number 24 [ 1684.936732][T22385] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1685.210457][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 1685.217406][ T5914] usb 5-1: config 9 has an invalid interface number: 179 but max is 1 [ 1685.226555][ T5914] usb 5-1: config 9 has an invalid interface number: 252 but max is 1 [ 1685.234847][ T5914] usb 5-1: config 9 has no interface number 0 [ 1685.261354][ T5914] usb 5-1: config 9 has no interface number 1 [ 1685.271142][ T5914] usb 5-1: config 9 interface 179 altsetting 6 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1685.307160][ T5914] usb 5-1: config 9 interface 179 altsetting 6 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1685.326910][T22909] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4234'. [ 1685.382290][ T5914] usb 5-1: config 9 interface 179 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 1685.397373][ T5898] usb 4-1: USB disconnect, device number 43 [ 1685.423719][T22909] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1685.445101][ T5914] usb 5-1: config 9 interface 179 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 1685.478279][ T5914] usb 5-1: config 9 interface 179 altsetting 6 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1685.617706][T22909] netlink: 'syz.0.4234': attribute type 16 has an invalid length. [ 1685.626671][T22909] netlink: 'syz.0.4234': attribute type 3 has an invalid length. [ 1685.634611][T22909] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.4234'. [ 1685.663274][T22903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1685.673599][ T5914] usb 5-1: config 9 interface 179 altsetting 6 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1685.703180][ T5914] usb 5-1: config 9 interface 179 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 1685.797476][ T5914] usb 5-1: config 9 interface 179 altsetting 6 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1685.809572][ T5914] usb 5-1: config 9 interface 179 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 1685.823586][ T5914] usb 5-1: config 9 interface 252 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 1685.835043][ T5914] usb 5-1: config 9 interface 252 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 1685.848197][ T5914] usb 5-1: config 9 interface 252 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 1685.899405][ T5914] usb 5-1: config 9 interface 252 altsetting 6 has an endpoint descriptor with address 0x11, changing to 0x1 [ 1685.983262][ T5914] usb 5-1: config 9 interface 252 altsetting 6 endpoint 0x1 has an invalid bInterval 32, changing to 9 [ 1686.063172][ T5914] usb 5-1: config 9 interface 252 altsetting 6 endpoint 0x1 has invalid maxpacket 33548, setting to 1024 [ 1686.240143][T22385] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1686.775424][ T5914] usb 5-1: config 9 interface 252 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 1686.883638][ T5914] usb 5-1: config 9 interface 252 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 1686.943297][ T5914] usb 5-1: config 9 interface 252 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1686.973510][ T5914] usb 5-1: config 9 interface 252 altsetting 6 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 1687.010500][ T5914] usb 5-1: config 9 interface 179 has no altsetting 0 [ 1687.025264][ T5914] usb 5-1: config 9 interface 252 has no altsetting 0 [ 1687.057230][ T5914] usb 5-1: New USB device found, idVendor=0403, idProduct=e0eb, bcdDevice=35.80 [ 1687.069968][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.090795][ T5914] usb 5-1: Product: з [ 1687.102152][ T5914] usb 5-1: Manufacturer: ᐖ [ 1687.120892][ T5914] usb 5-1: SerialNumber: 咃ꊇ삜䴆䔲错䳁흙殪됱嶳멙寴ꅪ챦◅ㆀ涁긂ໍ邩ꟍ鐅䪚 [ 1687.173122][T22898] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1687.376705][ T5914] ftdi_sio 5-1:9.179: FTDI USB Serial Device converter detected [ 1687.390833][ T5914] ftdi_sio ttyUSB0: unknown device type: 0x3580 [ 1687.436899][ T5914] ftdi_sio 5-1:9.252: FTDI USB Serial Device converter detected [ 1687.454199][ T5914] ftdi_sio ttyUSB1: unknown device type: 0x3580 [ 1687.474680][ T5914] usb 5-1: USB disconnect, device number 45 [ 1687.540894][ T5914] ftdi_sio 5-1:9.179: device disconnected [ 1687.556410][ T5841] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 1687.601076][ T5914] ftdi_sio 5-1:9.252: device disconnected [ 1687.726080][ T5841] usb 4-1: device descriptor read/64, error -71 [ 1687.750049][T22385] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1687.921425][T22937] netlink: 236 bytes leftover after parsing attributes in process `syz.5.4243'. [ 1687.995796][ T5914] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1688.028847][ T5841] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 1688.135812][ T5914] usb 5-1: device descriptor read/64, error -71 [ 1688.175993][ T5841] usb 4-1: device descriptor read/64, error -71 [ 1688.293566][ T5841] usb usb4-port1: attempt power cycle [ 1688.376586][ T5914] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1688.445762][ T5898] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 1688.526030][ T5914] usb 5-1: device descriptor read/64, error -71 [ 1688.579341][T22958] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 1688.708717][ T5841] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 1688.708767][ T5914] usb usb5-port1: attempt power cycle [ 1689.159874][ T5898] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1689.168795][ T5898] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1689.194100][ T5841] usb 4-1: device descriptor read/8, error -71 [ 1689.207540][ T5898] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1689.266548][ T5898] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1689.280304][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1689.291818][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1689.309370][ T5898] usb 2-1: string descriptor 0 read error: -22 [ 1689.315754][ T5898] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1689.326373][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.349539][ T5898] usb 2-1: config 0 descriptor?? [ 1689.356857][T22951] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1689.378300][ T5898] hub 2-1:0.0: bad descriptor, ignoring hub [ 1689.386077][ T5898] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1689.413654][ T5898] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input59 [ 1689.445864][ T5841] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 1689.488473][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1689.506090][ T5841] usb 4-1: device descriptor read/8, error -71 [ 1689.535965][ T5914] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1689.558654][ T5914] usb 5-1: device descriptor read/8, error -71 [ 1689.661568][T22951] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4248'. [ 1689.696231][ T5841] usb usb4-port1: unable to enumerate USB device [ 1689.789207][ T5898] usb 2-1: USB disconnect, device number 25 [ 1689.797257][ T5914] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1689.829528][ T5914] usb 5-1: device descriptor read/8, error -71 [ 1689.976655][ T5914] usb usb5-port1: unable to enumerate USB device [ 1690.262966][T22967] FAULT_INJECTION: forcing a failure. [ 1690.262966][T22967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1690.339262][T22967] CPU: 0 UID: 0 PID: 22967 Comm: syz.5.4252 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 1690.339290][T22967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1690.339301][T22967] Call Trace: [ 1690.339309][T22967] [ 1690.339316][T22967] dump_stack_lvl+0x241/0x360 [ 1690.339349][T22967] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1690.339374][T22967] ? __pfx__printk+0x10/0x10 [ 1690.339411][T22967] should_fail_ex+0x424/0x570 [ 1690.339435][T22967] _copy_to_iter+0x43f/0x1c90 [ 1690.339471][T22967] ? __pfx__copy_to_iter+0x10/0x10 [ 1690.339503][T22967] ? skb_recv_datagram+0x26e/0x310 [ 1690.339528][T22967] __skb_datagram_iter+0x101/0x940 [ 1690.339550][T22967] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1690.339578][T22967] skb_copy_datagram_iter+0xd1/0x250 [ 1690.339602][T22967] netlink_recvmsg+0x2d4/0x1180 [ 1690.339626][T22967] ? __lock_acquire+0xad5/0xd80 [ 1690.339653][T22967] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1690.339680][T22967] ? __lock_acquire+0xad5/0xd80 [ 1690.339708][T22967] ? __import_iovec+0x3c2/0x830 [ 1690.339737][T22967] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1690.339764][T22967] sock_recvmsg_nosec+0x18e/0x1d0 [ 1690.339791][T22967] ____sys_recvmsg+0x3d4/0x480 [ 1690.339819][T22967] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1690.339861][T22967] do_recvmmsg+0x428/0xab0 [ 1690.339893][T22967] ? __pfx_do_recvmmsg+0x10/0x10 [ 1690.339929][T22967] ? rcu_read_lock_any_held+0xbb/0x160 [ 1690.339952][T22967] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1690.339977][T22967] ? vfs_write+0xb29/0xd10 [ 1690.340008][T22967] ? ksys_write+0x24e/0x2d0 [ 1690.340030][T22967] ? __mutex_unlock_slowpath+0x229/0x800 [ 1690.340062][T22967] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1690.340083][T22967] ? __fget_files+0x2a/0x420 [ 1690.340115][T22967] __x64_sys_recvmmsg+0x1ab/0x260 [ 1690.340137][T22967] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1690.340164][T22967] ? do_syscall_64+0xb6/0x230 [ 1690.340189][T22967] do_syscall_64+0xf3/0x230 [ 1690.340210][T22967] ? clear_bhb_loop+0x45/0xa0 [ 1690.340231][T22967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.340247][T22967] RIP: 0033:0x7fb91cb8d169 [ 1690.340263][T22967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1690.340278][T22967] RSP: 002b:00007fb91da31038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1690.340297][T22967] RAX: ffffffffffffffda RBX: 00007fb91cda5fa0 RCX: 00007fb91cb8d169 [ 1690.340310][T22967] RDX: 0000000000000004 RSI: 00002000000086c0 RDI: 0000000000000003 [ 1690.340321][T22967] RBP: 00007fb91da31090 R08: 0000000000000000 R09: 0000000000000000 [ 1690.340332][T22967] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000002 [ 1690.340342][T22967] R13: 0000000000000000 R14: 00007fb91cda5fa0 R15: 00007fb91cecfa28 [ 1690.340370][T22967] [ 1690.868670][ T2977] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1691.195794][ T5841] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1691.435986][ T5898] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1691.582456][ T5841] usb 2-1: config 0 has no interfaces? [ 1691.588141][ T5899] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1691.597111][ T5841] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1691.614224][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.622401][ T5841] usb 2-1: Product: syz [ 1691.631277][ T5841] usb 2-1: Manufacturer: syz [ 1691.637373][ T5841] usb 2-1: SerialNumber: syz [ 1691.648087][ T5841] usb 2-1: config 0 descriptor?? [ 1691.678517][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 1691.742271][ T5898] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1691.755915][T21239] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 1691.771898][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.784567][ T5898] usb 4-1: config 0 descriptor?? [ 1691.891432][T22975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1691.908871][T22975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1691.954253][T21239] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 1691.982353][T21239] usb 5-1: config 0 has no interface number 0 [ 1691.989128][T21239] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1692.010478][T21239] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 1692.027858][T21239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.039583][T21239] usb 5-1: Product: syz [ 1692.044001][T21239] usb 5-1: Manufacturer: syz [ 1692.050255][T22385] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1692.072896][T21239] usb 5-1: SerialNumber: syz [ 1692.088027][T21239] usb 5-1: config 0 descriptor?? [ 1692.094047][T22996] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 1692.105994][T21239] ums-sddr09 5-1:0.20: USB Mass Storage device detected [ 1692.142046][ T5899] usb 6-1: config 0 has no interfaces? [ 1692.153724][ T5899] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1692.164261][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.179486][ T5899] usb 6-1: Product: syz [ 1692.183822][ T5899] usb 6-1: Manufacturer: syz [ 1692.190391][ T5899] usb 6-1: SerialNumber: syz [ 1692.198528][ T5899] usb 6-1: config 0 descriptor?? [ 1692.243130][T21239] ums-sddr09 5-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 1692.585730][T21239] usb 5-1: USB disconnect, device number 50 [ 1692.739736][T22999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1692.758575][T22999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1693.082056][T23004] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1693.592304][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1693.664640][ T24] usb 2-1: USB disconnect, device number 26 [ 1694.011297][T23007] FAULT_INJECTION: forcing a failure. [ 1694.011297][T23007] name failslab, interval 1, probability 0, space 0, times 0 [ 1694.033167][T23007] CPU: 0 UID: 0 PID: 23007 Comm: syz.4.4265 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 1694.033194][T23007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1694.033205][T23007] Call Trace: [ 1694.033213][T23007] [ 1694.033221][T23007] dump_stack_lvl+0x241/0x360 [ 1694.033253][T23007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1694.033277][T23007] ? __pfx__printk+0x10/0x10 [ 1694.033304][T23007] ? __pfx___might_resched+0x10/0x10 [ 1694.033331][T23007] should_fail_ex+0x424/0x570 [ 1694.033355][T23007] should_failslab+0xac/0x100 [ 1694.033380][T23007] kmem_cache_alloc_noprof+0x78/0x390 [ 1694.033402][T23007] ? alloc_empty_file+0x56/0x1d0 [ 1694.033432][T23007] alloc_empty_file+0x56/0x1d0 [ 1694.033459][T23007] alloc_file_clone+0x58/0xe0 [ 1694.033478][T23007] do_shmat+0x750/0xcf0 [ 1694.033511][T23007] ? __pfx_do_shmat+0x10/0x10 [ 1694.033537][T23007] ? fput+0x9b/0xd0 [ 1694.033556][T23007] __x64_sys_shmat+0x108/0x190 [ 1694.033580][T23007] ? __pfx___x64_sys_shmat+0x10/0x10 [ 1694.033610][T23007] ? do_syscall_64+0xb6/0x230 [ 1694.033635][T23007] do_syscall_64+0xf3/0x230 [ 1694.033656][T23007] ? clear_bhb_loop+0x45/0xa0 [ 1694.033676][T23007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1694.033693][T23007] RIP: 0033:0x7fc9bad8d169 [ 1694.033709][T23007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1694.033723][T23007] RSP: 002b:00007fc9bbc83038 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1694.033743][T23007] RAX: ffffffffffffffda RBX: 00007fc9bafa5fa0 RCX: 00007fc9bad8d169 [ 1694.033756][T23007] RDX: 0000000000000000 RSI: 0000200000ffd000 RDI: 0000000000000000 [ 1694.033767][T23007] RBP: 00007fc9bbc83090 R08: 0000000000000000 R09: 0000000000000000 [ 1694.033778][T23007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1694.033792][T23007] R13: 0000000000000001 R14: 00007fc9bafa5fa0 R15: 00007fc9bb0cfa28 [ 1694.033819][T23007] [ 1694.529205][ T5898] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1694.539907][ T5898] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading RX_CTL register: ffffffe0 [ 1694.572532][ T5898] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1694.594136][ T5898] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading Medium Status register: ffffffe0 [ 1694.696017][ T24] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 1694.825984][ T6775] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1694.838208][ T5898] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1694.907316][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1694.942390][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1694.960668][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 1694.977575][ T6775] usb 2-1: config 0 has an invalid interface number: 171 but max is 0 [ 1694.993218][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1695.007325][ T6775] usb 2-1: config 0 has no interface number 0 [ 1695.014382][ T24] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1695.041266][ T6775] usb 2-1: too many endpoints for config 0 interface 171 altsetting 204: 195, using maximum allowed: 30 [ 1695.052881][ T24] usb 5-1: config 1 has no interface number 1 [ 1695.059915][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1695.078473][ T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1695.093053][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1695.103614][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.114345][ T24] usb 5-1: Product: syz [ 1695.120455][ T24] usb 5-1: Manufacturer: syz [ 1695.125436][ T24] usb 5-1: SerialNumber: syz [ 1695.141348][ T6775] usb 2-1: config 0 interface 171 altsetting 204 has 0 endpoint descriptors, different from the interface descriptor's value: 195 [ 1695.179626][ T6775] usb 2-1: config 0 interface 171 has no altsetting 0 [ 1695.194992][ T6775] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1695.219377][ T6775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.243588][ T6775] usb 2-1: config 0 descriptor?? [ 1695.365394][ T24] hub 5-1:1.0: Invalid hub with more than one config or interface [ 1695.384262][ T24] hub 5-1:1.0: probe with driver hub failed with error -22 [ 1695.402841][ T24] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 1695.413446][ T5898] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 1695.481662][T21239] usb 6-1: USB disconnect, device number 8 [ 1695.492971][ T6775] usb 2-1: string descriptor 0 read error: -71 [ 1695.500265][ T6775] cp210x 2-1:0.171: cp210x converter detected [ 1695.514698][ T6775] cp210x 2-1:0.171: failed to get vendor val 0x370b size 1: -71 [ 1695.555274][ T6775] cp210x 2-1:0.171: querying part number failed [ 1695.556494][ T5898] asix 4-1:0.0 (unnamed net_device) (uninitialized): Could not register MDIO bus (err -5) [ 1695.610414][ T6775] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1695.626632][ T6775] usb 2-1: USB disconnect, device number 27 [ 1695.659363][ T6775] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1695.700889][ T24] usb 5-1: USB disconnect, device number 51 [ 1695.707670][ T5898] asix 4-1:0.0: probe with driver asix failed with error -5 [ 1695.718958][ T6775] cp210x 2-1:0.171: device disconnected [ 1695.825001][ T5898] usb 4-1: USB disconnect, device number 48 [ 1696.063830][ T7168] udevd[7168]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1696.081463][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1696.415772][ T24] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1696.485861][ T5898] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1696.592991][ T24] usb 5-1: config 0 has no interfaces? [ 1696.640622][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1696.656367][ T5898] usb 4-1: config 0 has no interfaces? [ 1696.670053][ T5898] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1696.680636][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.700680][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.724798][ T5898] usb 4-1: Product: syz [ 1696.821054][ T5898] usb 4-1: Manufacturer: syz [ 1696.828350][ T24] usb 5-1: Product: syz [ 1696.835903][ T5898] usb 4-1: SerialNumber: syz [ 1696.842474][ T24] usb 5-1: Manufacturer: syz [ 1696.852268][ T24] usb 5-1: SerialNumber: syz [ 1696.862044][ T5898] usb 4-1: config 0 descriptor?? [ 1696.871992][ T24] usb 5-1: config 0 descriptor?? [ 1696.979868][T21239] IPVS: starting estimator thread 0... [ 1697.165854][T23053] IPVS: using max 51 ests per chain, 122400 per kthread [ 1697.426188][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1697.792027][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1698.082198][ T24] usb 6-1: config 0 has no interfaces? [ 1698.215803][ T24] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1698.243118][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.265455][ T24] usb 6-1: Product: syz [ 1698.282935][ T24] usb 6-1: Manufacturer: syz [ 1698.332495][ T24] usb 6-1: SerialNumber: syz [ 1698.385338][ T24] usb 6-1: config 0 descriptor?? [ 1698.689150][T22385] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1699.176367][ T5898] usb 5-1: USB disconnect, device number 52 [ 1700.055896][T23077] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4285'. [ 1700.148379][ T2977] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1700.226008][T23077] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1700.240138][ T5898] usb 4-1: USB disconnect, device number 49 [ 1700.821651][T23077] netlink: 'syz.1.4285': attribute type 16 has an invalid length. [ 1700.830012][T23077] netlink: 'syz.1.4285': attribute type 3 has an invalid length. [ 1700.842024][T23077] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.4285'. [ 1700.937693][ T6775] usb 6-1: USB disconnect, device number 9 [ 1700.988033][T23086] trusted_key: encrypted_key: insufficient parameters specified [ 1701.263736][T23090] netlink: 'syz.3.4292': attribute type 1 has an invalid length. [ 1701.425226][T23090] bond4: entered promiscuous mode [ 1701.477011][T23090] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1701.596138][ T79] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1701.681200][T23092] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1701.759472][T23092] bond4: (slave bond5): making interface the new active one [ 1701.767606][T23092] bond5: entered promiscuous mode [ 1701.778507][T23092] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1702.355863][ T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1702.479468][ T6775] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1702.706061][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1702.712991][ T6775] usb 5-1: config 0 has no interfaces? [ 1702.723958][ T6775] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1702.751698][ T6775] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.868185][T18688] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1702.935903][ T5899] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1702.946955][ T5898] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1702.965327][ T6775] usb 5-1: Product: syz [ 1702.975166][ T6775] usb 5-1: Manufacturer: syz [ 1703.003188][ T6775] usb 5-1: SerialNumber: syz [ 1703.100981][ T5899] usb 2-1: config 0 has no interfaces? [ 1703.103474][ T6775] usb 5-1: config 0 descriptor?? [ 1703.121588][ T5899] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1703.130897][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.139559][ T5899] usb 2-1: Product: syz [ 1703.150937][ T5899] usb 2-1: Manufacturer: syz [ 1703.162217][ T5898] usb 6-1: config 0 has no interfaces? [ 1703.177799][ T5899] usb 2-1: SerialNumber: syz [ 1703.246949][ T5899] usb 2-1: config 0 descriptor?? [ 1703.341828][ T5898] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1703.359852][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.412687][ T5898] usb 6-1: Product: syz [ 1703.445081][ T5898] usb 6-1: Manufacturer: syz [ 1703.452692][ T5898] usb 6-1: SerialNumber: syz [ 1703.528412][T23117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1703.540187][T23117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1703.673213][ T5898] usb 6-1: config 0 descriptor?? [ 1704.009004][ T79] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1705.164687][ T5899] usb 5-1: USB disconnect, device number 53 [ 1705.174257][T18688] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1705.375241][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1705.385289][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1705.402655][ T24] usb 4-1: can't read configurations, error -71 [ 1705.698011][ T5899] usb 6-1: USB disconnect, device number 10 [ 1705.923733][T20167] usb 2-1: USB disconnect, device number 28 [ 1706.056137][ T5898] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 1706.264371][ T5898] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1706.313761][ T5898] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1706.340833][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1706.364239][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1706.393619][ T5898] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1706.452322][ T79] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1706.525858][ T24] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 1706.605420][ T5898] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1706.628013][T23152] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4310'. [ 1706.686898][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1706.698738][ T5898] usb 5-1: Product: syz [ 1706.702986][ T5898] usb 5-1: Manufacturer: syz [ 1706.708019][ T5898] usb 5-1: SerialNumber: syz [ 1706.716654][ T5898] usb 5-1: config 0 descriptor?? [ 1706.727918][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1706.759279][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1706.789533][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1706.807558][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1706.821397][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1706.854629][ T24] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1706.864052][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1706.872635][ T24] usb 4-1: Product: syz [ 1706.877274][ T24] usb 4-1: Manufacturer: syz [ 1706.888155][ T24] usb 4-1: SerialNumber: syz [ 1706.932730][ T24] usb 4-1: config 0 descriptor?? [ 1707.269542][ T5898] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 1707.285429][ T5898] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 1707.433089][T23159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4309'. [ 1707.456966][ T24] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 1707.479148][T23159] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1707.496002][ T24] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 1707.990327][T23159] netlink: 'syz.1.4309': attribute type 16 has an invalid length. [ 1707.998527][T23159] netlink: 'syz.1.4309': attribute type 3 has an invalid length. [ 1708.012531][T23159] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.4309'. [ 1708.116764][T12582] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1708.504683][ T5898] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1708.679277][ T5898] usb 6-1: config 0 has no interfaces? [ 1708.734505][ T5898] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1708.750366][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.768080][ T5898] usb 6-1: Product: syz [ 1708.778134][ T5898] usb 6-1: Manufacturer: syz [ 1708.785097][ T5898] usb 6-1: SerialNumber: syz [ 1708.906487][ T5898] usb 6-1: config 0 descriptor?? [ 1709.116017][ T5898] usb 4-1: USB disconnect, device number 51 [ 1709.130726][T23141] delete_channel: no stack [ 1709.144686][ T24] usb 5-1: USB disconnect, device number 54 [ 1709.181687][T23137] delete_channel: no stack [ 1709.376265][T22385] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1709.766437][T17830] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1710.015842][ T5898] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1710.246112][ T5898] usb 2-1: config 0 has no interfaces? [ 1710.258160][ T5898] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1710.270160][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.280296][ T5898] usb 2-1: Product: syz [ 1710.284671][ T5898] usb 2-1: Manufacturer: syz [ 1710.307589][T17830] usb 4-1: config 0 has no interfaces? [ 1710.343385][ T5898] usb 2-1: SerialNumber: syz [ 1710.354367][T17830] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1710.373564][ T5898] usb 2-1: config 0 descriptor?? [ 1710.465033][T17830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.616549][T17830] usb 4-1: Product: syz [ 1710.644115][T17830] usb 4-1: Manufacturer: syz [ 1710.659381][T18688] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1710.723124][T17830] usb 4-1: SerialNumber: syz [ 1710.793357][T23191] FAULT_INJECTION: forcing a failure. [ 1710.793357][T23191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1710.811297][T23191] CPU: 1 UID: 0 PID: 23191 Comm: syz.4.4322 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 1710.811317][T23191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1710.811325][T23191] Call Trace: [ 1710.811330][T23191] [ 1710.811335][T23191] dump_stack_lvl+0x241/0x360 [ 1710.811355][T23191] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1710.811369][T23191] ? __pfx__printk+0x10/0x10 [ 1710.811389][T23191] should_fail_ex+0x424/0x570 [ 1710.811402][T23191] _copy_from_user+0x2d/0xb0 [ 1710.811417][T23191] get_sg_io_hdr+0x154/0x1240 [ 1710.811429][T23191] ? _raw_write_unlock_irqrestore+0x90/0x140 [ 1710.811441][T23191] ? lockdep_hardirqs_on+0x9d/0x150 [ 1710.811454][T23191] ? _raw_write_unlock_irqrestore+0xde/0x140 [ 1710.811465][T23191] ? __pfx__raw_write_unlock_irqrestore+0x10/0x10 [ 1710.811476][T23191] ? __pfx_get_sg_io_hdr+0x10/0x10 [ 1710.811493][T23191] ? sg_add_request+0x606/0x660 [ 1710.811506][T23191] sg_new_write+0x15d/0x880 [ 1710.811519][T23191] ? __pfx_sg_new_write+0x10/0x10 [ 1710.811550][T23191] ? ksys_write+0x24e/0x2d0 [ 1710.811564][T23191] sg_ioctl+0x18cd/0x2ea0 [ 1710.811574][T23191] ? __lock_acquire+0xad5/0xd80 [ 1710.811590][T23191] ? __pfx_sg_ioctl+0x10/0x10 [ 1710.811601][T23191] ? __fget_files+0x2a/0x420 [ 1710.811610][T23191] ? __fget_files+0x2a/0x420 [ 1710.811620][T23191] ? __fget_files+0x2a/0x420 [ 1710.811631][T23191] ? __pfx_sg_ioctl+0x10/0x10 [ 1710.811642][T23191] __se_sys_ioctl+0xf1/0x160 [ 1710.811654][T23191] do_syscall_64+0xf3/0x230 [ 1710.811667][T23191] ? clear_bhb_loop+0x45/0xa0 [ 1710.811678][T23191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.811688][T23191] RIP: 0033:0x7fc9bad8d169 [ 1710.811698][T23191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1710.811706][T23191] RSP: 002b:00007fc9bbc83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1710.811717][T23191] RAX: ffffffffffffffda RBX: 00007fc9bafa5fa0 RCX: 00007fc9bad8d169 [ 1710.811725][T23191] RDX: 0000200000000080 RSI: 0000000000002285 RDI: 0000000000000003 [ 1710.811731][T23191] RBP: 00007fc9bbc83090 R08: 0000000000000000 R09: 0000000000000000 [ 1710.811737][T23191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1710.811742][T23191] R13: 0000000000000000 R14: 00007fc9bafa5fa0 R15: 00007fc9bb0cfa28 [ 1710.811757][T23191] [ 1711.054115][T17830] usb 4-1: config 0 descriptor?? [ 1711.346909][ T24] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1711.388033][T17830] usb 6-1: USB disconnect, device number 11 [ 1711.530383][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1711.627708][ T24] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1711.645411][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.673804][ T24] usb 5-1: config 0 descriptor?? [ 1711.887934][ T5914] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1712.048114][ T5914] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 1712.056157][ T5914] usb 6-1: config 0 has no interfaces? [ 1712.067575][ T5914] usb 6-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1712.077865][T18688] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1712.086333][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.110193][ T5914] usb 6-1: config 0 descriptor?? [ 1712.329594][T23196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1712.341294][T23196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1712.360369][ T5914] usb 6-1: USB disconnect, device number 12 [ 1712.748454][ T5914] usb 2-1: USB disconnect, device number 29 [ 1712.784699][T17830] usb 4-1: USB disconnect, device number 52 [ 1712.938104][T23204] tls_set_device_offload_rx: netdev not found [ 1713.195911][T22385] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1713.235782][ T5914] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1713.235917][T17830] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1713.395901][T17830] usb 2-1: Using ep0 maxpacket: 8 [ 1713.406234][ T5914] usb 6-1: Using ep0 maxpacket: 8 [ 1713.412379][T23215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4330'. [ 1713.414113][T17830] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 1713.439267][T17830] usb 2-1: config 0 has no interface number 0 [ 1713.440036][ T5914] usb 6-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1713.445458][T17830] usb 2-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 1713.472659][ T5914] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1713.484295][ T5914] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1713.493743][T17830] usb 2-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 1713.493955][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.514193][ T5914] usb 6-1: Product: syz [ 1713.519433][ T5914] usb 6-1: Manufacturer: ᐇ [ 1713.524517][ T5914] usb 6-1: SerialNumber: syz [ 1713.525286][T17830] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1713.543043][T17830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.552061][T17830] usb 2-1: Product: syz [ 1713.562553][T17830] usb 2-1: Manufacturer: syz [ 1713.567396][T17830] usb 2-1: SerialNumber: syz [ 1713.574284][T17830] usb 2-1: config 0 descriptor?? [ 1713.582105][T23209] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1713.748251][T23207] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4329'. [ 1713.769013][ T5914] usbhid 6-1:1.0: can't add hid device: -71 [ 1713.775478][ T5914] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1713.795145][ T5914] usb 6-1: USB disconnect, device number 13 [ 1713.803117][ T5899] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1713.989469][ T5899] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1713.998787][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1714.010375][ T5899] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1714.022616][ T5899] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1714.030775][ T5899] usb 4-1: Manufacturer: syz [ 1714.040849][ T5899] usb 4-1: config 0 descriptor?? [ 1714.110115][ T5899] rc_core: IR keymap rc-hauppauge not found [ 1714.116939][ T5899] Registered IR keymap rc-empty [ 1714.124086][ T5899] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1714.136503][ T24] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1714.146567][ T24] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading RX_CTL register: ffffffe0 [ 1714.159188][ T5899] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input60 [ 1714.170841][ T24] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1714.180918][ T24] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading Medium Status register: ffffffe0 [ 1714.303401][T17830] ath6kl: Failed to submit usb control message: -71 [ 1714.312469][T22385] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1714.313790][T17830] ath6kl: unable to send the bmi data to the device: -71 [ 1714.328277][ C1] igorplugusb 4-1:0.0: receive overflow invalid: 148 [ 1714.341025][T17830] ath6kl: Unable to send get target info: -71 [ 1714.367679][T17830] ath6kl: Failed to init ath6kl core: -71 [ 1714.406610][T17830] ath6kl_usb 2-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 1714.425828][ T24] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1714.436148][T17830] usb 2-1: USB disconnect, device number 30 [ 1714.538366][T21239] usb 4-1: USB disconnect, device number 53 [ 1714.896979][ T24] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 1715.001038][ T24] asix 5-1:0.0 (unnamed net_device) (uninitialized): Could not register MDIO bus (err -5) [ 1715.051690][ T24] asix 5-1:0.0: probe with driver asix failed with error -5 [ 1715.085966][T17830] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1715.125752][T21239] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1715.196386][ T24] usb 5-1: USB disconnect, device number 55 [ 1715.298240][T17830] usb 2-1: Using ep0 maxpacket: 16 [ 1715.334921][T23245] syzkaller1: entered promiscuous mode [ 1715.340690][T23245] syzkaller1: entered allmulticast mode [ 1715.474140][T21239] usb 6-1: config 0 has no interfaces? [ 1715.491698][T23247] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 1715.550186][T12582] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1715.626011][ T5899] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1715.670358][T21239] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1715.739432][T21239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.756452][T21239] usb 6-1: Product: syz [ 1715.760693][T21239] usb 6-1: Manufacturer: syz [ 1715.778567][T21239] usb 6-1: SerialNumber: syz [ 1715.791916][T21239] usb 6-1: config 0 descriptor?? [ 1715.828805][ T5899] usb 4-1: config 0 has no interfaces? [ 1715.920910][ T5899] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1715.935746][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.950066][ T5899] usb 4-1: Product: syz [ 1715.956651][ T5899] usb 4-1: Manufacturer: syz [ 1715.968337][ T5899] usb 4-1: SerialNumber: syz [ 1716.145622][ T5899] usb 4-1: config 0 descriptor?? [ 1716.831175][ T2977] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1717.005919][ T5900] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1717.191214][ T5900] usb 5-1: config 180 has an invalid descriptor of length 0, skipping remainder of the config [ 1717.277125][ T5900] usb 5-1: config 180 has 0 interfaces, different from the descriptor's value: 14 [ 1717.397619][ T5900] usb 5-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 1717.460611][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1717.735527][ T24] usb 6-1: USB disconnect, device number 14 [ 1717.867604][T23260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1717.963139][T23260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1717.979532][T23260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1718.118819][ T2977] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1718.137427][T23260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1718.643092][T21239] usb 4-1: USB disconnect, device number 54 [ 1719.227098][T22385] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1719.263146][T23275] xt_nfacct: accounting object `syz0' does not exists [ 1719.429373][T23274] trusted_key: encrypted_key: insufficient parameters specified [ 1719.662803][T17830] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1719.675200][T17830] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1719.754158][T17830] usb 2-1: can't read configurations, error -71 [ 1719.858184][T23282] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1720.936048][T22385] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1720.985953][T17830] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1721.326866][T17830] usb 2-1: config 0 has no interfaces? [ 1721.406964][ T5900] usb 5-1: string descriptor 0 read error: -71 [ 1721.426402][T17830] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1721.514993][ T5900] usb 5-1: USB disconnect, device number 56 [ 1721.560066][T17830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.636038][T17830] usb 2-1: Product: syz [ 1721.771111][T23310] [ 1721.773485][T23310] ====================================================== [ 1721.780491][T23310] WARNING: possible circular locking dependency detected [ 1721.787496][T23310] 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 Not tainted [ 1721.794588][T23310] ------------------------------------------------------ [ 1721.801606][T23310] syz.0.4351/23310 is trying to acquire lock: [ 1721.807668][T23310] ffffffff900fd588 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x161/0x11f0 [ 1721.817075][T23310] [ 1721.817075][T23310] but task is already holding lock: [ 1721.824430][T23310] ffff88804f7d8aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 1721.834522][T23310] [ 1721.834522][T23310] which lock already depends on the new lock. [ 1721.834522][T23310] [ 1721.844922][T23310] [ 1721.844922][T23310] the existing dependency chain (in reverse order) is: [ 1721.853928][T23310] [ 1721.853928][T23310] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 1721.862528][T23310] lock_acquire+0x116/0x2f0 [ 1721.867546][T23310] __mutex_lock+0x1a5/0x10c0 [ 1721.872650][T23310] smc_switch_to_fallback+0x35/0xda0 [ 1721.878449][T23310] smc_sendmsg+0x11f/0x530 [ 1721.883382][T23310] __sock_sendmsg+0x221/0x270 [ 1721.888575][T23310] __sys_sendto+0x365/0x4c0 [ 1721.893588][T23310] __x64_sys_sendto+0xde/0x100 [ 1721.898862][T23310] do_syscall_64+0xf3/0x230 [ 1721.903885][T23310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.910304][T23310] [ 1721.910304][T23310] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1721.917949][T23310] lock_acquire+0x116/0x2f0 [ 1721.922963][T23310] lock_sock_nested+0x48/0x100 [ 1721.928244][T23310] do_ip_setsockopt+0x17e9/0x39c0 [ 1721.933783][T23310] ip_setsockopt+0x63/0x100 [ 1721.938810][T23310] do_sock_setsockopt+0x3b1/0x710 [ 1721.944433][T23310] __x64_sys_setsockopt+0x1ee/0x280 [ 1721.950139][T23310] do_syscall_64+0xf3/0x230 [ 1721.955155][T23310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.961557][T23310] [ 1721.961557][T23310] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 1721.968765][T23310] validate_chain+0xa69/0x24e0 [ 1721.974063][T23310] __lock_acquire+0xad5/0xd80 [ 1721.979253][T23310] lock_acquire+0x116/0x2f0 [ 1721.984266][T23310] __mutex_lock+0x1a5/0x10c0 [ 1721.989370][T23310] ip_mroute_setsockopt+0x161/0x11f0 [ 1721.995170][T23310] do_ip_setsockopt+0x1114/0x39c0 [ 1722.000707][T23310] ip_setsockopt+0x63/0x100 [ 1722.005725][T23310] smc_setsockopt+0x25c/0xd50 [ 1722.010914][T23310] do_sock_setsockopt+0x3b1/0x710 [ 1722.016445][T23310] __x64_sys_setsockopt+0x1ee/0x280 [ 1722.022150][T23310] do_syscall_64+0xf3/0x230 [ 1722.027166][T23310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.033569][T23310] [ 1722.033569][T23310] other info that might help us debug this: [ 1722.033569][T23310] [ 1722.043785][T23310] Chain exists of: [ 1722.043785][T23310] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 1722.043785][T23310] [ 1722.057335][T23310] Possible unsafe locking scenario: [ 1722.057335][T23310] [ 1722.064770][T23310] CPU0 CPU1 [ 1722.070124][T23310] ---- ---- [ 1722.075472][T23310] lock(&smc->clcsock_release_lock); [ 1722.080834][T23310] lock(sk_lock-AF_INET); [ 1722.087773][T23310] lock(&smc->clcsock_release_lock); [ 1722.095655][T23310] lock(rtnl_mutex); [ 1722.099626][T23310] [ 1722.099626][T23310] *** DEADLOCK *** [ 1722.099626][T23310] [ 1722.107757][T23310] 1 lock held by syz.0.4351/23310: [ 1722.112849][T23310] #0: ffff88804f7d8aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 1722.123369][T23310] [ 1722.123369][T23310] stack backtrace: [ 1722.129243][T23310] CPU: 0 UID: 0 PID: 23310 Comm: syz.0.4351 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 1722.129261][T23310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1722.129272][T23310] Call Trace: [ 1722.129278][T23310] [ 1722.129284][T23310] dump_stack_lvl+0x241/0x360 [ 1722.129310][T23310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1722.129330][T23310] ? __pfx__printk+0x10/0x10 [ 1722.129348][T23310] ? print_lock+0x171/0x1a0 [ 1722.129366][T23310] print_circular_bug+0x2e1/0x300 [ 1722.129385][T23310] check_noncircular+0x142/0x160 [ 1722.129405][T23310] validate_chain+0xa69/0x24e0 [ 1722.129424][T23310] ? sched_clock_cpu+0x77/0x4d0 [ 1722.129445][T23310] __lock_acquire+0xad5/0xd80 [ 1722.129461][T23310] lock_acquire+0x116/0x2f0 [ 1722.129474][T23310] ? ip_mroute_setsockopt+0x161/0x11f0 [ 1722.129495][T23310] ? finish_task_switch+0x1e5/0x870 [ 1722.129510][T23310] __mutex_lock+0x1a5/0x10c0 [ 1722.129527][T23310] ? ip_mroute_setsockopt+0x161/0x11f0 [ 1722.129546][T23310] ? trace_sched_exit_tp+0x3c/0x120 [ 1722.129558][T23310] ? __schedule+0x1ba6/0x5240 [ 1722.129574][T23310] ? ip_mroute_setsockopt+0x161/0x11f0 [ 1722.129592][T23310] ? __pfx___mutex_lock+0x10/0x10 [ 1722.129611][T23310] ? schedule+0x163/0x360 [ 1722.129627][T23310] ip_mroute_setsockopt+0x161/0x11f0 [ 1722.129649][T23310] ? register_lock_class+0x54/0x330 [ 1722.129663][T23310] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 1722.129687][T23310] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1722.129706][T23310] do_ip_setsockopt+0x1114/0x39c0 [ 1722.129726][T23310] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1722.129744][T23310] ? smc_setsockopt+0x1b2/0xd50 [ 1722.129759][T23310] ? __pfx___mutex_lock+0x10/0x10 [ 1722.129780][T23310] ip_setsockopt+0x63/0x100 [ 1722.129795][T23310] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1722.129816][T23310] smc_setsockopt+0x25c/0xd50 [ 1722.129832][T23310] ? __pfx_aa_sk_perm+0x10/0x10 [ 1722.129850][T23310] ? __pfx_smc_setsockopt+0x10/0x10 [ 1722.129865][T23310] ? aa_sock_opt_perm+0x79/0x120 [ 1722.129885][T23310] ? __pfx_smc_setsockopt+0x10/0x10 [ 1722.129900][T23310] do_sock_setsockopt+0x3b1/0x710 [ 1722.129917][T23310] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1722.129929][T23310] ? __fget_files+0x2a/0x420 [ 1722.129943][T23310] ? __fget_files+0x39d/0x420 [ 1722.129954][T23310] ? __fget_files+0x2a/0x420 [ 1722.129968][T23310] __x64_sys_setsockopt+0x1ee/0x280 [ 1722.129984][T23310] do_syscall_64+0xf3/0x230 [ 1722.130000][T23310] ? clear_bhb_loop+0x45/0xa0 [ 1722.130022][T23310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.130036][T23310] RIP: 0033:0x7f04acf8d169 [ 1722.130049][T23310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1722.130061][T23310] RSP: 002b:00007f04ade42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1722.130076][T23310] RAX: ffffffffffffffda RBX: 00007f04ad1a6240 RCX: 00007f04acf8d169 [ 1722.130086][T23310] RDX: 00000000000000d3 RSI: 0000000000000000 RDI: 000000000000000c [ 1722.130095][T23310] RBP: 00007f04ad00e990 R08: 0000000000000000 R09: 0000000000000000 [ 1722.130104][T23310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1722.130113][T23310] R13: 0000000000000000 R14: 00007f04ad1a6240 R15: 00007f04ad2cfa28 [ 1722.130127][T23310] [ 1722.465798][T17830] usb 2-1: Manufacturer: syz [ 1722.470417][T17830] usb 2-1: SerialNumber: syz [ 1722.626227][T17830] usb 2-1: config 0 descriptor?? [ 1722.734433][T23308] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1722.754076][T23308] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1722.828208][T12582] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1722.903112][T23313] syzkaller1: entered promiscuous mode [ 1722.926226][T23313] syzkaller1: entered allmulticast mode [ 1722.985095][T17830] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1723.001127][T23308] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4351'. [ 1723.057934][ T6775] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1723.358389][ T6775] usb 4-1: config 0 has no interfaces? [ 1723.369058][ T6775] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1723.379776][ T6775] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.388321][ T6775] usb 4-1: Product: syz [ 1723.392727][ T6775] usb 4-1: Manufacturer: syz [ 1723.397809][ T6775] usb 4-1: SerialNumber: syz [ 1723.418002][ T6775] usb 4-1: config 0 descriptor?? [ 1723.429268][T17830] usb 6-1: config 0 has no interfaces? [ 1723.439925][T17830] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1723.449341][T17830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.458937][T17830] usb 6-1: Product: syz [ 1723.463277][T17830] usb 6-1: Manufacturer: syz [ 1723.468213][T17830] usb 6-1: SerialNumber: syz [ 1723.487540][T17830] usb 6-1: config 0 descriptor?? [ 1723.767170][T23307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1723.779478][T23307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1724.055958][T18688] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1724.331801][ T24] usb 2-1: USB disconnect, device number 32 [ 1725.093374][ T24] usb 6-1: USB disconnect, device number 15 [ 1725.165853][ T2977] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1725.195889][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1725.339355][ T24] usb 4-1: USB disconnect, device number 55 [ 1726.276100][T18688] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1727.375983][T22385] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1728.485781][T18688] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1729.616066][T22385] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1730.307411][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.313774][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.736777][ T2977] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!