last executing test programs: 11.559732637s ago: executing program 1 (id=598): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r3, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000200), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x6, 0x0, 0x0, r5}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b"], 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) prctl$PR_SET_IO_FLUSHER(0x41, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000140)='Zng\x00', 0x4) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 9.916990621s ago: executing program 3 (id=602): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x3c}}, 0x240448d2) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000440)={0x300, 0x2, 0x802, 0xfffffffffffffffa}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000940)="6079a1e1227eac6f0cbd3ed304ee59a668552125a08862c85e4a6c7d2808c6627026cd1ad5fcd2969a", 0x29, 0x8814, &(0x7f0000000140)={0x11, 0x6559, r6, 0x1, 0x2, 0x6, @local}, 0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000021c0)={&(0x7f0000000080), 0xc, &(0x7f0000002180)={&(0x7f0000002380)={0xb4, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4a}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2f}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x7fff}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x82}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40084}, 0x74b21ac0eea1e4a4) r7 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002200)={0x50, 0x0, r8, {0x7, 0x27, 0x0, 0x1dd880}}, 0x50) read$FUSE(r3, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r3, &(0x7f0000002140)={0x20, 0x0, r9, {0x403, 0x4, 0x80003ff, 0xffe}}, 0x20) syz_fuse_handle_req(r3, &(0x7f0000004340)="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", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x1, 0x0, 0x0, {0xfffffffffffffffd, 0x4, 0x3, 0x19, 0x2, 0x0, 0x800, 0x4000000, 0x0, 0x4000, 0xbca4, 0x0, 0x0, 0xc}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000008380)="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", 0x2000, 0x0) getdents64(r7, 0x0, 0x302) 9.916060302s ago: executing program 2 (id=612): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00/\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x11) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) syz_emit_ethernet(0x0, &(0x7f0000000080)={@remote, @broadcast, @void, {@x25={0x805, {0x3, 0x1, 0x23, "a29aa88e541aa38b4c07d49b47cdff93d635e2aabfff17e032b89e49ae82edb11cc643be5bb3d28a7840cec97d2a61"}}}}, 0x0) 9.751282275s ago: executing program 2 (id=603): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, 0x0, 0x0) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x23b, &(0x7f0000000740)={0x0, 0x101830, 0x2000, 0x0, 0x3c6, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f00000016c0)=0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) r10 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaedf, 0x0, 0x1, 0xe5, 0x0, r9}, &(0x7f00000000c0)=0x0, &(0x7f0000001440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r13 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r13, &(0x7f0000000500)=[{&(0x7f0000000880)="4f3bf5cb8031e51b257f38308e5458a7eb86c3b92b6bca18ecc3c38b6201000e15446d487f5506eb672a77f8680ed11a835f2583b1962a90a92e7cfdc5b593a6922bb9c52cd77acb6401eddd1f099ce6e5b3a05d61a959f373fa989b4a", 0x5d}], 0x1) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x4, 0x0, r9, 0x0, &(0x7f0000001400)='./file0\x00', 0x138, 0x0, 0x1}) io_uring_enter(r10, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000003c0)="74a930f7"}) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000014c0)={0x9c, 0x0, &(0x7f0000001780)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0xffffffff, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r13}, @flat=@binder={0x73622a85, 0x120a, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/35, 0x23, 0x1, 0x4}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001600)={@ptr={0x70742a85, 0x0, &(0x7f0000001500)=""/242, 0xf2, 0x1, 0xe}, @flat=@binder={0x73622a85, 0x10a}, @fda={0x66646185, 0xa}}, &(0x7f0000001680)={0x0, 0x28, 0x40}}, 0x400}, @register_looper, @decrefs={0x40046307, 0x2}], 0x6, 0x0, &(0x7f0000001480)="4f12837c7323"}) io_uring_enter(r4, 0x2deb, 0x5f8b, 0x6, 0x0, 0x0) userfaultfd(0x1) 8.773601261s ago: executing program 3 (id=604): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x10, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@mask_fadd={0x58, 0x118, 0x8, {{}, 0x0, 0x0, 0x6, 0x8, 0x1, 0x0, 0xa00100}}, @mask_fadd={0x58, 0x114, 0x8, {{0x1000, 0x8}, 0x0, 0x0, 0x9, 0xc, 0x2, 0x3, 0x0, 0x400}}], 0xb0}, 0x0) 8.536482662s ago: executing program 3 (id=605): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) r1 = syz_io_uring_setup(0x304, &(0x7f00000002c0)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000480)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 8.234872165s ago: executing program 1 (id=608): r0 = socket$packet(0x11, 0x3, 0x300) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x8, &(0x7f0000000000)="a8", 0x1) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000002540)=""/4086, &(0x7f0000000180)=0xff6) poll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x480}], 0x1, 0xf0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000580)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x10, '\x00', 0x5, 0x3, 0x200, 0x8001}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x5, 0x200, 0x3, 0x0, 0x5e, 0xf49}}, {0x4}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000001080)='D', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f00000013c0)={{0x12, 0x1, 0x0, 0xa9, 0x3a, 0x5d, 0x8, 0x4c1, 0x9d, 0x1f14, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x70, 0x0, 0x0, 0x91, 0x2f, 0x2f}}]}}]}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) shutdown(r5, 0x1) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000040)) 7.580567788s ago: executing program 3 (id=609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x2000, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0) 7.309636947s ago: executing program 3 (id=610): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f00000003c0)={0x0, 0x10, 0x4, "abe7b9c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000001c0)={0x20, 0x16, 0x4, "0a5c1d71"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x20, 0x13, 0x4, "9552aff6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0xc, &(0x7f00000000c0)={0x40, 0xe, 0x67, {0x67, 0xb, "79acc10033743a69eac75e68e2601d83559dc80cb7ad76ab41c5299b4faed91b3592e9de68af61ab5f75000149fdbb8f40b3b2d133e9d4fdc75b2321c4cc3c431c81f6f76fc474fd883c8f5cc54c8bba06d5a1e8f573599ac37781cbb3ae8f46b0b427732c"}}, &(0x7f0000000140)={0x0, 0x3, 0xc, @string={0xc, 0x3, "596a1755f49d7c828d7d"}}}, &(0x7f0000000580)={0x1c, &(0x7f0000000240)={0x0, 0xb, 0x79, "112ca53d19d5125ca06f26fdc333cae2931ddf2c6ad37951bce6c77e29352b00fb900dc2c91833bf388340f08cecfba246db5555424dc2e3710f968e13f214590c37b62c74e181e47e51507ecee780692eddd66d0141bca99e66dfcf06ad71e8acb4270ad7fd459ed8339439c884a9ac10f64c274ae50cec79"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xac}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xed}, &(0x7f0000000400)={0x20, 0x0, 0x92, {0x90, "8b67e8c1f0027857f62ce73a415b535ea1a76ee6bb99353cd97d935df5de53c131911e8a7c13276c9fffc918ee0c1bbc18df0158b96aa997f39abd02b8d2cae55dd932c289551c4c6112ad70dd1b4c648bb089b28fa6c53e8d6bece8bb91c6b780b719bfe51bfcdd89db5a580a9dab32432c7c874eb5aa992529d27be8ce5508dd0b7d6a77d58a10e11e4a2e531c5c7f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x70}}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a40), 0x101000, 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220000018000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000d4000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x4000, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000600)=@ipv4_newroute={0x38, 0x18, 0x200, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) 7.162166064s ago: executing program 2 (id=611): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)}], 0x1}}], 0x1, 0x40080c1) shutdown(r1, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x62, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x40000008) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r5) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000000100)={0x30, r6, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) openat$fuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = syz_io_uring_setup(0x7b1, &(0x7f0000000200)={0x0, 0x200086f7, 0x80, 0xffffffff, 0x3b6, 0x0, r0}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r0, 0xffffffffffffffff, 0x5, 0x2020, 0xffffffffffffffff, @void, @void, @value=0xffffffffffffffff}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="0a01000005af9e08d2106528c9a4000000010902120001000000000904"], 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r10, 0x401, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xfffffffffffffdeb, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91524fc60", 0x14}], 0x1}, 0x0) io_uring_enter(r7, 0x48e9, 0x0, 0x3, 0x0, 0x0) 6.164772368s ago: executing program 0 (id=615): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x3c, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0x5, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_BURST={0x0, 0x6, 0x10001}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40050}, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha256-ssse3)\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f00000000c0)={[0xff]}, 0x8) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00082bbd0100fb03df25040000001967b5ce7ff38c942553fd9f3a4c0100000000000000bd81e22c980970ece0abb4274b558784b3cabbb200"/67], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) sendmsg$NFNL_MSG_ACCT_DEL(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, 0x3, 0x7, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x26}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7fffffff}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x233bdea6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x84}, 0x24000000) 4.856253065s ago: executing program 0 (id=616): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x3c}}, 0x240448d2) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000440)={0x300, 0x2, 0x802, 0xfffffffffffffffa}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000940)="6079a1e1227eac6f0cbd3ed304ee59a668552125a08862c85e4a6c7d2808c6627026cd1ad5fcd2969a", 0x29, 0x8814, &(0x7f0000000140)={0x11, 0x6559, r6, 0x1, 0x2, 0x6, @local}, 0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000021c0)={&(0x7f0000000080), 0xc, &(0x7f0000002180)={&(0x7f0000002380)={0xb4, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4a}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2f}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x7fff}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x82}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40084}, 0x74b21ac0eea1e4a4) r7 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002200)={0x50, 0x0, r8, {0x7, 0x27, 0x0, 0x1dd880}}, 0x50) read$FUSE(r3, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r3, &(0x7f0000002140)={0x20, 0x0, r9, {0x403, 0x4, 0x80003ff, 0xffe}}, 0x20) syz_fuse_handle_req(r3, &(0x7f0000004340)="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", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x1, 0x0, 0x0, {0xfffffffffffffffd, 0x4, 0x3, 0x19, 0x2, 0x0, 0x800, 0x4000000, 0x0, 0x4000, 0xbca4, 0x0, 0x0, 0xc}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000008380)="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", 0x2000, 0x0) getdents64(r7, 0x0, 0x302) 4.855158833s ago: executing program 1 (id=617): ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x8000003a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0xfffffffd, 0x0, 0xffffffff, 0xe661, 0x8, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x6, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x7fff, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0x1000f9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x2, 0x78, 0xee4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x9, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0xb, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0xdf, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x9, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000013000100000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00010000000000001400030064756d6d793000000000000000000000050021"], 0x3c}}, 0x0) 4.516704095s ago: executing program 1 (id=618): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x75, 0x75, 0x8, [@datasec={0x9, 0x5, 0x0, 0xf, 0x1, [{0x1, 0x7, 0x9}, {0x2, 0x9, 0x4}, {0x1, 0xff, 0xe4}, {0x2, 0x6, 0x4}, {0x3, 0x5}], '\n'}, @enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0x10, 0x1}, {0x3, 0x718}]}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x5d, 0x0, 0x10}]}, {0x0, [0x5f, 0x30, 0x71, 0xe, 0x5f, 0x0]}}, &(0x7f0000000000)=""/106, 0x98, 0x6a, 0x0, 0x7, 0x0, @void, @value}, 0x28) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b0808004149014006040800", 0x58}], 0x1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r6, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) (async) close_range(r1, r2, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f00000012c0)=0x2) poll(&(0x7f0000000440)=[{r7, 0x8009}], 0x1, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280), 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.355832603s ago: executing program 3 (id=619): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)}], 0x1}}], 0x1, 0x40080c1) shutdown(r1, 0x1) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005e05b14021040203e8450000000109025100010000000009040900000202ff00052406000105240000000d24b8fe3f9ea3a0e8ca0800ff06241a05002a052401010305240600010524"], 0x0) r2 = socket(0x10, 0x803, 0x40000008) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r5) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000000100)={0x30, r6, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) openat$fuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = syz_io_uring_setup(0x7b1, &(0x7f0000000200)={0x0, 0x200086f7, 0x80, 0xffffffff, 0x3b6, 0x0, r0}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r0, 0xffffffffffffffff, 0x5, 0x2020, 0xffffffffffffffff, @void, @void, @value=0xffffffffffffffff}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="0a01000005af9e08d2106528c9a4000000010902120001000000000904"], 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r10, 0x401, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xfffffffffffffdeb, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91524fc60", 0x14}], 0x1}, 0x0) io_uring_enter(r7, 0x48e9, 0x0, 0x3, 0x0, 0x0) 3.604112838s ago: executing program 2 (id=621): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42}, 0x10) socket$kcm(0x29, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x200001, 0x0, {0xa, 0x80}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) bind$tipc(r0, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfff7fffd, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x200040d1}, 0x4080) unshare(0x68040200) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0xc00001) r4 = open(&(0x7f0000000140)='./bus\x00', 0x2, 0xc) write$FUSE_IOCTL(r4, &(0x7f0000001280)={0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x10}}, 0x20) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000340)='./bus\x00', 0x46000a41) open(&(0x7f0000000080)='./bus\x00', 0x60102, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendto$inet6(r7, &(0x7f0000000600)="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", 0x100, 0x1, 0x0, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001f40)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000002018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000007b1100000000000085000000b2000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect(0x2, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0xa0, 0x3b, 0x46, 0x40, 0x6cd, 0x202, 0xa8d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x57, 0x7f, 0x0, 0xdb, 0x2d, 0x94, 0x9}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_usb_connect(0x0, 0xf85, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0xb2, 0x8, 0x2, 0x40, 0x9}, 0x66, &(0x7f0000000100)=ANY=[@ANYBLOB="050f6600033d1003c0d3c9e4fa7900d0cd05e4ec3beefcfabc6018bac610d330169374266ac71468fe02a54d2355b248f3858bc79626a3c08c9d9884a6120cac1fd61410040642b7cdf4b7aca2334599c5f3c9782ca410100a0a61c70000000f05000000b200"], 0x8, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc62}}, {0xd3, &(0x7f0000000280)=@string={0xd3, 0x3, "8fc661dfe85fcd44dcf08ebc7631b4ae52fc860a0daac554bb89d006b8586af30ce18e09322e07531323684cbd62e03ef597aed42e97e1144c75b878052e95cf1e1ae1b5d92ae13acef1b38c54b284099add044846f8716d43149e2dd9d36b4650f1e9dd2a9e7e49701ad0161352167041d5019efc9185c42d75a82064129ce5b6d113108bb1afbe784f7f760744a168db4526173d889a25a4b11b302024fd944c02ebd0d9652e6a745f7e246e129b125602daef04daa765746612b90923bd9a54a7c2d628b2f20a9e919fc435dc0b2a3c"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1404}}, {0x7b, &(0x7f00000013c0)=@string={0x7b, 0x3, "9529e76d32b2379453f9f3dee9c013206eede6a9ff864b3844e366e3fe6b3ebf3caef1348901ec7844035f5162afcca879f57bfcbc68250d0c9b9a569cfc78bbfd9600543c342cbadd23f7e8b753435b7c812eb299a5928bf5b7536078a7f3d30b4f5c5e3164286f5a4f67a53f0ab6c254ed4874ff88c9f5c3"}}, {0x34, &(0x7f0000001cc0)=ANY=[@ANYBLOB="3403ce6b717cf3b47011d662c076280289b9bd60b718548e9eb6b041e60749ae3a6617795add690000740a71a030cb0e381feb980686fdf4edf394336f72133b22c439010c626eccb7b4f31a50c8a37a8799c06919dbae56cbb577bc761b4359e557c2d0d731d3581511c986f8d025767c3c07d865fd78"]}, {0xeb, &(0x7f0000001480)=@string={0xeb, 0x3, "5dbe5627cb8cfcbbc528c5fe24fe345f7981dae3ba626f99431bdd5e301992891c176276d713bb4239d8706185eadd751c9433911fc3aeb8e8d521654534179df55eab964f6422eee27903decea833395b46d33ea5296ddbb8534cb334f91ab5ae035956f720f0917885fcccbf3f44f7a0fe4d90307816251eb0f222eb616ff38bfa7dca65a4e8552220504193fcff1d4b4073acd44d4c4afc03af71273e9bb00fbadf4e28f17c4b47bc7fffc15cacc75d936d86845190fa663860102876ff40dfcea90dcf0075edac7ddd771cd6015864668f4e2bd5acf441c973befa2df324691e64d3e9ca83d3c8"}}]}) syz_usb_control_io(r8, &(0x7f00000017c0)={0x18, &(0x7f0000001600)={0x0, 0x21, 0x81, {0x81, 0x0, "8d793be1869bcc598669a120745e85d5a880e42a119f1ab52cdc70098165269cfff7b7b1b152e7e3821bb8e803a8670bb05ff1fc5df266f56368535fb43e59c082488b329bfd308b8dd60993bdc03f3dac02970d65982a39db157caa5fefd49da0f2535d44af77dac4221865bd67f675def8fecf651a3fb243505b41c8fa56"}}, &(0x7f00000016c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}, &(0x7f0000001700)={0x0, 0xf, 0x2b, {0x5, 0xf, 0x2b, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x21, 0xf, 0x4}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x2, 0x1ef00, 0x2, [0x3f3f, 0xfff0, 0xff000f, 0x0]}]}}, &(0x7f0000001740)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc4, 0x18, 0x80, 0x18, "beaed9fc", "c4e05f43"}}, &(0x7f0000001780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x60, 0x3, 0x1, 0xfd, 0x1, 0x9}}}, &(0x7f0000001c40)={0x44, &(0x7f0000001800)={0x20, 0xa, 0x3e, "763981b15473ac1f9c30f985f5e89003e008a61ab4fc639f175192a329f9b4a8dc7ad456aa11533c281761ee365715ba276ffc0b332e31437f462959caec"}, &(0x7f0000001880)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000018c0)={0x0, 0x8, 0x1, 0xc6}, &(0x7f0000001900)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001940)=ANY=[@ANYBLOB="20000400000002008010"], &(0x7f0000001980)={0x40, 0x7, 0x2, 0x5}, &(0x7f00000019c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001a00)={0x40, 0xb, 0x2, "f562"}, &(0x7f0000001a40)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000001a80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, &(0x7f0000001ac0)={0x40, 0x17, 0x6, @random="897960e9a712"}, &(0x7f0000001b00)={0x40, 0x19, 0x2, 'im'}, &(0x7f0000001b40)={0x40, 0x1a, 0x2, 0xffff}, &(0x7f0000001b80)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000001bc0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000001c00)={0x40, 0x21, 0x1, 0x5}}) 3.542176729s ago: executing program 0 (id=622): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010004b040000fffffff700007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c00210009"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) readv(r1, &(0x7f0000000280), 0x5c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r5 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r5, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2020, 0x0) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000100)=@mmap={0x7, 0x3, 0x4, 0x1, 0x8, {0x77359400}, {0x2, 0xc, 0x2, 0xff, 0x25, 0xb, "9e660730"}, 0x5, 0x1, {}, 0x3}) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00)) sendmmsg(r3, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="39ce9908e52f46e44a803151", 0xc}], 0x1}}], 0x1, 0x18014) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000000000000000800000000001000", @ANYRES16=r6, @ANYBLOB="1103020000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7], 0x44}, 0x1, 0xba01}, 0x4000) 3.13662872s ago: executing program 4 (id=623): r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) pread64(r0, &(0x7f0000000280)=""/193, 0xc1, 0x4) socket$inet6(0xa, 0x3, 0xff) socket(0x2b, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[]) read$FUSE(r2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x6000000}, 0x8000000, 0x0, 0xff, 0x1}, 0x20) 3.136234045s ago: executing program 0 (id=624): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x38, 0x0, 0x600, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x12, 0x3, @l2={'eth', 0x3a, 'veth0_vlan\x00'}}}}, ["", "", "", ""]}, 0x38}}, 0x4000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x400}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1c}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000180)={{0x40, 0x4}, {0xf, 0x3}, 0x0, 0x4, 0x1}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffff9c, &(0x7f0000000380), 0x101802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5e0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x2, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xff7ae0b95406984d}, 0x20004080) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000200)="430fc73f0f20c035000000200f22c0400f01d10f1a560467458b13c4612d5d67c167410f01790048b89a1e0000000000000f23d00f21f835100000030f23f866baf80cb8d886de81ef66bafc0cb82f72c73bef672e26f3410f01e8", 0x5b}], 0x1, 0x24, &(0x7f0000000280)=[@vmwrite={0x8, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1}], 0x1) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0185647, &(0x7f0000000100)={0xf010000, 0x3, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9a0910, 0x0, '\x00', @value64=0x8}}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3, @ANYRES64=r2, @ANYBLOB="d5"], 0x20) 2.995749465s ago: executing program 4 (id=625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400d487ca043471eb2546ec0000010a01020000"], 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x20000000) (async) r2 = openat$binderfs(0xffffff9c, &(0x7f0000000340)='./binderfs2/custom0\x00', 0x804, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0xb}) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) (async) listen(r3, 0x0) (async) r4 = openat$btrfs_control(0xffffff9c, &(0x7f00000000c0), 0x80000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/161, 0xa1}, {&(0x7f00000003c0)=""/244, 0xf4}, {&(0x7f00000002c0)=""/57, 0x39}], 0x3) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) (async, rerun: 32) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config', 0x0, 0x0) (rerun: 32) getdents64(r9, &(0x7f0000000000)=""/31, 0x1f) (async) syz_usb_connect(0x5, 0x164, &(0x7f0000000240)=ANY=[@ANYBLOB="120100007af28810d30b55055b000000000109025201010000000009044000000e010000082406", @ANYRESDEC, @ANYBLOB="99063b6cac3448b4b221fe8a27a8b69948f148dcc57ccc298d4c8f5d004d93c90fd026b7c0dd2c189e91fcf27b37743c91857859575d"], 0x0) (async) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) 2.97553285s ago: executing program 0 (id=626): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1e, 0x5, 0x0) listen(r1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1d, [0x8000, 0x8000, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4b, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x4000, 0x5, 0x4, 0x3, 0x4, 0x6, 0x1, 0x6, 0x9, 0x3, 0x15bb, 0x2, 0xe661, 0x81, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0x7, 0x1, 0x1, 0x5, 0xd091, 0x3e, 0x7, 0x9a59, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x5, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x200c7, 0xf9, 0xd, 0x2bf, 0x6c9, 0x10000007, 0xfffffffc, 0x3, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x0, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f5, 0x0, 0x2, 0x80, 0x2009, 0x4, 0x9, 0x8, 0x7, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x9, 0x1, 0x8, 0xffffffff, 0x9, 0x10, 0x42, 0x2], [0x7, 0xf5fd, 0x0, 0x5, 0xfffffffa, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x6c8712a, 0x5, 0xad, 0x4, 0x5, 0x20000005, 0x800, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x367, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0xc4, 0x120000, 0xbe, 0x9, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0x1fc, 0x40006, 0x0, 0x8, 0x57b, 0x101, 0x10000, 0x6, 0x7fff, 0xfffd, 0x4, 0x20002, 0x5, 0x1, 0x2, 0x14c, 0x60a6, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xca, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9600, 0xa, 0x2, 0x4, 0x40000006, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x7, 0xfffffffe, 0x6, 0x0, 0x4, 0x24000000, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r3 = openat$uinput(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000180)={{0xb4c, 0x6, 0x800, 0x3}, 'syz0\x00', 0x3e}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x128, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xfc, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa}}, @TCA_U32_SEL={0xe4, 0x5, {0x3, 0x8, 0xd, 0x4, 0x7ff, 0x365, 0x2, 0x6, [{0x1, 0xffff, 0x7706, 0x8}, {0x7fffffff, 0x8, 0xd7, 0x3}, {0x3, 0x2, 0xea9a, 0x6}, {0x7, 0x9, 0x1, 0x9}, {0x40, 0x2, 0x1000}, {0xf, 0x3a3, 0x8, 0x401}, {0x10000, 0x9, 0x6, 0x7fffffff}, {0x4, 0x0, 0x80, 0x40}, {0x43, 0x5, 0x5, 0x4}, {0xfffffffb, 0x5, 0xff, 0x9}, {0xd, 0x7f, 0x1, 0x8}, {0x5, 0x6, 0x80, 0x715e}, {0x6, 0xc25a0, 0x8, 0x1000}]}}]}}]}, 0x128}}, 0x24040084) 2.632505496s ago: executing program 1 (id=627): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880020000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c00110019"], 0xec}}, 0x20000000) 2.541624091s ago: executing program 4 (id=628): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 2.537725335s ago: executing program 0 (id=629): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) ptrace$pokeuser(0x6, r3, 0x2, 0x8001) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x100}) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010102, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sed\x00', 0x0, 0x60000000, 0xc}, {@empty, 0x4e21, 0x12002, 0xf, 0xe1b2, 0x10001}}, 0x44) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) (async) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000000)=0x1) ppoll(&(0x7f0000000180)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010003000000202505a8a440000102030109021b0001010450010904000702070106000905010200044a8556"], 0x0) close_range(r5, 0xffffffffffffffff, 0x0) (async) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x46) (async) move_mount(r8, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x273) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a45323, &(0x7f00000001c0)={{0x8, 0xc}, 'port0\x00', 0x47, 0x1, 0x80, 0xf3, 0x4, 0x6, 0x7, 0x0, 0x4, 0x5}) (async) preadv2(r7, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 2.348607709s ago: executing program 1 (id=630): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r5, 0x200004) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io(r7, &(0x7f0000000b00)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r9, 0x501c4814, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x1947, 0xf}) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x2, 0x9, 0x6, 0x2, 0x2, 0x0, 0x70bd2b, 0x25dfdbff}, 0x10}}, 0x10) ioctl$KVM_CAP_X2APIC_API(r10, 0x4068aea3, 0x0) ioctl$KVM_SIGNAL_MSI(r10, 0x4020aea5, &(0x7f0000000140)={0x8080000, 0x4, 0x44, 0x1, 0x80000003}) sendto$rxrpc(r5, &(0x7f0000000300)="cc140167150f7e2501a459db4bc720330562f8caed842bebbc923a120407b5a81e4d3a049926eb5600ee8c6daf7dddf4dcda37f6d76aefe09a897e009cfcb37bda4d9454bf2329519b68a0d9f9afe494d16377c04ae567631726118bb8404c6df98a50614c70c872042190c53815c80e8a5d48f9eec8eba739055b17f3b885cc9010e93af195ce769385aa5b3d83e56546e2f9b761b821c34ec712f572", 0x9d, 0x80000, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000410007010000000007000000017c00000400fc8010000180060006e47f0a0000040090c0", @ANYRESOCT=r2, @ANYRESDEC=r7, @ANYRESOCT=r9, @ANYRES8=r7, @ANYRES8=r6, @ANYRES64=r4, @ANYRESDEC=r2], 0x28}}, 0x4010) 2.315245602s ago: executing program 2 (id=631): socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mlock2(&(0x7f00005c2000/0x1000)=nil, 0x1000, 0x1) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x27) r3 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0xffffffff) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) 2.223662952s ago: executing program 4 (id=632): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) dup(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f00000000c0)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) inotify_init1(0x80800) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000004000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00141202800800010008000000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00'], 0x54}}, 0x0) 508.654163ms ago: executing program 4 (id=633): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000200000005000000180001801400020073797a5f74756e0000000000000000001400038004000400080002000000000004000100080005"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x24000010) 20.835762ms ago: executing program 2 (id=634): epoll_create1(0x0) socket(0x10, 0x803, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x100000000000000, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000a40)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@weak_handle={0x77682a85, 0x1, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000b00)="94"}) socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000080)={0x9008, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r4, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x169f80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r8, 0x47f6, 0x0, 0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)=@sack_info={0x0, 0x68c, 0x6}, &(0x7f0000000440)=0xc) 0s ago: executing program 4 (id=635): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x4}, 0x8) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (rerun: 32) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0x401}, 0x8) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) (async, rerun: 32) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x100}, 0x0) (async, rerun: 32) syz_usb_connect(0x0, 0x5f, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async, rerun: 32) signalfd4(r4, 0x0, 0x3d, 0x400) (async, rerun: 32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x27) (async, rerun: 64) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) (rerun: 64) kernel console output (not intermixed with test programs): 164.050835][ T30] audit: type=1326 audit(1747402906.727:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 164.454144][ T47] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 164.656768][ T6761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.735850][ T6761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.771639][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 164.782503][ T47] usb 1-1: unable to get BOS descriptor or descriptor too short [ 164.798878][ T47] usb 1-1: config 8 has an invalid interface number: 93 but max is 2 [ 164.829751][ T47] usb 1-1: config 8 has an invalid interface number: 17 but max is 2 [ 164.862813][ T47] usb 1-1: config 8 has an invalid interface number: 69 but max is 2 [ 164.873421][ T47] usb 1-1: config 8 has no interface number 0 [ 164.879761][ T47] usb 1-1: config 8 has no interface number 1 [ 164.887595][ T47] usb 1-1: config 8 has no interface number 2 [ 164.894076][ T47] usb 1-1: config 8 interface 93 has no altsetting 0 [ 164.900958][ T47] usb 1-1: config 8 interface 17 has no altsetting 0 [ 164.907850][ T47] usb 1-1: config 8 interface 69 has no altsetting 0 [ 164.926463][ T6764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.935557][ T6764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.962760][ T47] usb 1-1: New USB device found, idVendor=0781, idProduct=0002, bcdDevice= 0.09 [ 164.986474][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.022204][ T47] usb 1-1: Product: ᶗ歓傡䖮$ꞽä›éˆ±ë¥§à½£æ†‰â‰­àª¿êšŠè‚¡ì¸é“‰äŠ¨ì®¨×–ë›¿æ§«ë½ºéŒã‰æ ˆì¹…⯰g [ 165.148807][ T47] usb 1-1: Manufacturer: â° [ 165.160637][ T47] usb 1-1: SerialNumber: ဉ [ 165.411665][ T47] usb-storage 1-1:8.93: USB Mass Storage device detected [ 165.470680][ T47] usb-storage 1-1:8.93: Quirks match for vid 0781 pid 0002: 10 [ 165.637369][ T47] usb-storage 1-1:8.17: USB Mass Storage device detected [ 165.690439][ T47] usb-storage 1-1:8.17: Quirks match for vid 0781 pid 0002: 10 [ 165.821178][ T47] usb-storage 1-1:8.69: USB Mass Storage device detected [ 165.876708][ T47] usb-storage 1-1:8.69: Quirks match for vid 0781 pid 0002: 10 [ 165.937681][ T47] usb 1-1: USB disconnect, device number 8 [ 166.497497][ T6787] syz.4.224 (6787) used obsolete PPPIOCDETACH ioctl [ 166.729437][ T6777] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 166.738379][ T6777] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 166.775676][ T6777] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 166.789088][ T6777] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 166.820547][ T6777] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 166.827848][ T6777] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 166.854206][ T5836] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 166.878363][ T6777] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 166.889353][ T6777] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 166.931781][ T6777] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 166.934321][ T47] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 166.959629][ T6777] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 167.031358][ T5836] usb 1-1: config 137 has an invalid interface number: 127 but max is 2 [ 167.043583][ T5836] usb 1-1: config 137 has an invalid interface number: 141 but max is 2 [ 167.061830][ T5836] usb 1-1: config 137 has an invalid interface number: 159 but max is 2 [ 167.071594][ T5836] usb 1-1: config 137 has an invalid descriptor of length 7, skipping remainder of the config [ 167.097653][ T5836] usb 1-1: config 137 has no interface number 0 [ 167.112035][ T5836] usb 1-1: config 137 has no interface number 1 [ 167.118962][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 167.165900][ T5836] usb 1-1: config 137 has no interface number 2 [ 167.183651][ T5836] usb 1-1: config 137 interface 127 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 167.242118][ T5836] usb 1-1: config 137 interface 127 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 167.278682][ T5836] usb 1-1: config 137 interface 127 altsetting 129 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 167.335320][ T5836] usb 1-1: config 137 interface 127 altsetting 129 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 167.394418][ T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.414593][ T5836] usb 1-1: config 137 interface 159 altsetting 220 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 167.428815][ T47] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 167.443306][ T47] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 167.469556][ T5836] usb 1-1: config 137 interface 127 has no altsetting 0 [ 167.491538][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.514254][ T5836] usb 1-1: config 137 interface 141 has no altsetting 0 [ 167.532015][ T5836] usb 1-1: config 137 interface 159 has no altsetting 0 [ 167.545224][ T47] usb 4-1: config 0 descriptor?? [ 167.569193][ T5836] usb 1-1: New USB device found, idVendor=03f0, idProduct=a31d, bcdDevice=67.fc [ 167.588801][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.600444][ T5836] usb 1-1: Product: ㆸá™â«ºî©‘餒볻䄰抱璷킡ì„ൌ૵컴担龛ጫä¾î¹›ãƒ—᧫ႊ蔯ƽⳚ쇲䊲î²ì¡“䴦䶟ণ᪨î®Ô„â´ê¼£ê¶´å§½ë†¾ì®Œè¸©Ûâ“둹뒆㟟潲멵ন쵟舧èží†˜í‘šã­”ç…“b벘釣諆ㅳⶋ鰴დíšì‰™ì¾…ꯓﴷ꧉ชԷ仠 [ 167.632148][ T5836] usb 1-1: Manufacturer: ꢷ慕휇섧㗓슇ç§í’ì¬Í´ï³Žë¨æ²½î¡·ãšã¯±æ£ å­ê³²áº’婿¬¢í…飽堛닚䢡얮錃ï®ë·£å«¢Ã£Ýšá¸¿ê·°ï”°ë¶á»¥ã¯­ã¾‰î´™ë­™ä¶ƒé’뉗שּׁ₊ẕ⛟쟚㇥漌î‰è³½á–œé§‡á‰¶íŸ™íŸœà°ƒç“뤂⾞ë¿ášåŽ¯éƒ¨ô€¦šì¦…ê·¾á²ï¯†ä¼‰ëçƒà¨¸Ò¼â«¢à±¿ë•ä»­à¶›æ‚뀊徭贘ൡ眵ῡè¢å‘¬Å”îºæ‰µè“ [ 167.637454][ T6798] usb usb8: usbfs: process 6798 (syz.1.227) did not claim interface 0 before use [ 167.907480][ T5836] usb 1-1: SerialNumber: syz [ 167.930433][ T6791] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 167.960384][ T6793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.970114][ T6793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.020718][ T1207] usb 4-1: USB disconnect, device number 10 [ 168.200678][ T6805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.205122][ T5836] option 1-1:137.127: GSM modem (1-port) converter detected [ 168.214889][ T6805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.333660][ T5836] usb 1-1: USB disconnect, device number 9 [ 168.384496][ T6808] netlink: 'syz.4.232': attribute type 3 has an invalid length. [ 168.440185][ T5836] option 1-1:137.127: device disconnected [ 169.116004][ T6817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.414679][ T6817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.925108][ T6824] netlink: 36 bytes leftover after parsing attributes in process `syz.0.238'. [ 170.325284][ T5836] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 170.506929][ T5836] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 170.515548][ T5836] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.528349][ T5836] usb 4-1: config 0 has no interface number 0 [ 170.629575][ T5836] usb 4-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 170.639830][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.662489][ T5836] usb 4-1: config 0 descriptor?? [ 170.732231][ T5836] rndis_host 4-1:0.9: More than one union descriptor, skipping ... [ 170.740507][ T5836] usb 4-1: bad CDC descriptors [ 170.746711][ T5836] cdc_acm 4-1:0.9: More than one union descriptor, skipping ... [ 171.056578][ T6849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.065904][ T6849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.564241][ T1207] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 171.606837][ T5836] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 171.727713][ T1207] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.727735][ T1207] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 171.727769][ T1207] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 171.729797][ T1207] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.729817][ T1207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.729832][ T1207] usb 5-1: Product: syz [ 171.729844][ T1207] usb 5-1: Manufacturer: syz [ 171.729855][ T1207] usb 5-1: SerialNumber: syz [ 171.752185][ T1207] cdc_ncm 5-1:1.0: skipping garbage [ 171.752210][ T1207] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 171.752254][ T1207] cdc_ncm 5-1:1.0: bind() failure [ 171.816391][ T5836] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 171.969550][ T1207] usb 5-1: USB disconnect, device number 13 [ 172.068325][ T5836] usb 2-1: config 0 interface 0 has no altsetting 0 [ 172.093460][ T5836] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 172.117998][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.136116][ T5836] usb 2-1: config 0 descriptor?? [ 172.170547][ T5836] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 172.320912][ T6871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.337403][ T6871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.601364][ T6873] binder: 6872:6873 ioctl c0306201 800003c0 returned -14 [ 173.114718][ T47] usb 4-1: USB disconnect, device number 11 [ 173.215653][ T6888] netlink: 'syz.4.258': attribute type 10 has an invalid length. [ 173.287606][ T6888] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.328852][ T6888] bond0: (slave team0): Enslaving as an active interface with an up link [ 174.335668][ T47] usb 2-1: USB disconnect, device number 12 [ 175.657148][ T6911] loop2: detected capacity change from 0 to 14 [ 175.713597][ T6911] Dev loop2: unable to read RDB block 14 [ 175.733081][ T6911] loop2: unable to read partition table [ 175.753625][ T6911] loop2: partition table beyond EOD, truncated [ 175.791885][ T6911] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 176.640495][ T6924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.670533][ T6924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.273442][ T6929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.340927][ T6929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.864300][ T6942] netlink: 'syz.0.275': attribute type 5 has an invalid length. [ 177.900853][ T6942] netlink: 16 bytes leftover after parsing attributes in process `syz.0.275'. [ 178.327925][ T5895] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 178.474281][ T5895] usb 5-1: device descriptor read/64, error -71 [ 178.736196][ T5895] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 178.784135][ T1207] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 178.894178][ T5895] usb 5-1: device descriptor read/64, error -71 [ 178.970246][ T1207] usb 2-1: config 0 has an invalid interface number: 149 but max is 0 [ 178.983404][ T1207] usb 2-1: config 0 has no interface number 0 [ 178.994207][ T1207] usb 2-1: config 0 interface 149 has no altsetting 0 [ 179.007050][ T5895] usb usb5-port1: attempt power cycle [ 179.012551][ T1207] usb 2-1: New USB device found, idVendor=357d, idProduct=7788, bcdDevice=36.2f [ 179.031100][ T1207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.055468][ T1207] usb 2-1: config 0 descriptor?? [ 179.272866][ T1207] usb 2-1: string descriptor 0 read error: -71 [ 179.295363][ T1207] usb-storage 2-1:0.149: USB Mass Storage device detected [ 179.319105][ T1207] usb-storage 2-1:0.149: Quirks match for vid 357d pid 7788: 4800000 [ 179.365677][ T5895] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 179.455092][ T1207] usb 2-1: USB disconnect, device number 13 [ 179.498056][ T5895] usb 5-1: device descriptor read/8, error -71 [ 179.774165][ T5895] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 179.829374][ T5895] usb 5-1: device descriptor read/8, error -71 [ 179.906509][ T6970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.923906][ T6970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.950820][ T5895] usb usb5-port1: unable to enumerate USB device [ 180.135394][ T5836] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 180.301619][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 180.313308][ T5836] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 180.325541][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.340930][ T5836] usb 4-1: config 0 descriptor?? [ 180.347235][ T6968] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 180.818646][ T5836] elan 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 181.022271][ T5895] usb 4-1: USB disconnect, device number 12 [ 181.128889][ T6986] fido_id[6986]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 181.147985][ T6992] batadv0: entered promiscuous mode [ 181.183852][ T6992] vlan2: entered promiscuous mode [ 181.352246][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 181.352264][ T30] audit: type=1326 audit(1747402925.407:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 181.446245][ T30] audit: type=1326 audit(1747402925.417:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb4558 code=0x7ffc0000 [ 181.490961][ T30] audit: type=1326 audit(1747402925.417:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb4558 code=0x7ffc0000 [ 181.524830][ T30] audit: type=1326 audit(1747402925.417:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb4558 code=0x7ffc0000 [ 181.624208][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 181.629522][ T30] audit: type=1326 audit(1747402925.417:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb4558 code=0x7ffc0000 [ 181.709090][ T30] audit: type=1326 audit(1747402925.447:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb4558 code=0x7ffc0000 [ 181.771940][ T30] audit: type=1326 audit(1747402925.447:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 181.793855][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.809227][ T24] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 181.818652][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.891182][ T24] usb 5-1: config 0 has no interface number 0 [ 181.923957][ T30] audit: type=1326 audit(1747402925.447:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 181.945859][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.006441][ T24] usb 5-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 182.018743][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.029000][ T30] audit: type=1326 audit(1747402925.447:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 182.054267][ T30] audit: type=1326 audit(1747402925.447:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb4558 code=0x7ffc0000 [ 182.076310][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.091100][ T24] usb 5-1: config 0 descriptor?? [ 182.099631][ T24] rndis_host 5-1:0.9: More than one union descriptor, skipping ... [ 182.114785][ T24] usb 5-1: bad CDC descriptors [ 182.128195][ T24] cdc_acm 5-1:0.9: More than one union descriptor, skipping ... [ 182.401995][ T7013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.421336][ T7013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.639226][ T7017] tipc: Started in network mode [ 182.689747][ T7017] tipc: Node identity , cluster identity 4711 [ 182.696974][ T7017] tipc: Failed to set node id, please configure manually [ 182.714913][ T7017] tipc: Enabling of bearer rejected, failed to enable media [ 183.980048][ T7034] binder: 7028:7034 ioctl 8208ae63 800007c0 returned -22 [ 184.174389][ T5893] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 184.349374][ T5893] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.392806][ T5893] usb 2-1: config 0 interface 0 has no altsetting 0 [ 184.420179][ T5893] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 184.474250][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.574167][ T5895] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 184.694447][ T5893] usb 2-1: config 0 descriptor?? [ 184.919716][ T5893] usbhid 2-1:0.0: can't add hid device: -71 [ 184.931373][ T5893] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 184.950764][ T5893] usb 2-1: USB disconnect, device number 14 [ 185.266168][ T5895] usb 4-1: config 0 has no interfaces? [ 185.418906][ T5895] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 185.436963][ T47] usb 5-1: USB disconnect, device number 18 [ 185.669087][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.724459][ T5895] usb 4-1: Product: syz [ 185.728812][ T5895] usb 4-1: Manufacturer: syz [ 185.733448][ T5895] usb 4-1: SerialNumber: syz [ 185.743013][ T5895] usb 4-1: config 0 descriptor?? [ 186.427016][ T7066] netlink: 'syz.1.315': attribute type 10 has an invalid length. [ 186.558469][ T7066] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.614136][ T7066] bond0: (slave team0): Enslaving as an active interface with an up link [ 187.287045][ T7073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.372690][ T7073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.487027][ T7072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.499175][ T7072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.082880][ T5893] usb 4-1: USB disconnect, device number 13 [ 188.614238][ T5893] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 188.865630][ T5893] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 188.874934][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.948264][ T5893] usb 5-1: Product: syz [ 188.952549][ T5893] usb 5-1: Manufacturer: syz [ 188.986448][ T5893] usb 5-1: SerialNumber: syz [ 189.109955][ T5893] usb 5-1: config 0 descriptor?? [ 189.254122][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 189.308643][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 189.308663][ T30] audit: type=1326 audit(1747402933.357:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 189.499038][ T30] audit: type=1326 audit(1747402933.357:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 189.583128][ T30] audit: type=1326 audit(1747402933.407:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 189.586304][ T47] usb 5-1: USB disconnect, device number 19 [ 189.625773][ T24] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 189.634416][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.670986][ T24] usb 4-1: config 0 has no interface number 0 [ 189.700520][ T30] audit: type=1326 audit(1747402933.407:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 189.716866][ T24] usb 4-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 189.802960][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.810456][ T30] audit: type=1326 audit(1747402933.407:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 189.836404][ T24] usb 4-1: config 0 descriptor?? [ 189.854512][ T24] rndis_host 4-1:0.9: More than one union descriptor, skipping ... [ 189.862231][ T30] audit: type=1326 audit(1747402933.407:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 189.916427][ T30] audit: type=1326 audit(1747402933.547:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 189.938296][ T24] usb 4-1: bad CDC descriptors [ 189.940065][ T24] cdc_acm 4-1:0.9: More than one union descriptor, skipping ... [ 190.181885][ T30] audit: type=1326 audit(1747402933.547:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 190.256621][ T7106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.270838][ T7106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.279066][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 190.491301][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 190.519480][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 190.743122][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.090621][ T24] usb 2-1: Product: syz [ 191.161017][ T24] usb 2-1: Manufacturer: syz [ 191.379564][ T24] usb 2-1: SerialNumber: syz [ 191.473956][ T24] usb 2-1: config 0 descriptor?? [ 192.561359][ T5895] usb 4-1: USB disconnect, device number 14 [ 193.228304][ T7119] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.330'. [ 193.318688][ T7119] netlink: zone id is out of range [ 193.324001][ T30] audit: type=1326 audit(1747402937.377:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 193.367783][ T7119] netlink: zone id is out of range [ 193.372998][ T7119] netlink: zone id is out of range [ 193.455996][ T7119] netlink: zone id is out of range [ 193.484164][ T30] audit: type=1326 audit(1747402937.427:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 193.494280][ T7119] netlink: zone id is out of range [ 193.574663][ T7119] netlink: get zone limit has 8 unknown bytes [ 193.679139][ T24] usb 2-1: USB disconnect, device number 15 [ 193.694292][ T5893] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 193.884216][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 193.903472][ T5893] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.925461][ T5893] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.969194][ T5893] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 194.002556][ T5893] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 194.061360][ T5893] usb 4-1: Product: syz [ 194.084182][ T5893] usb 4-1: Manufacturer: syz [ 194.124629][ T5893] hub 4-1:4.0: USB hub found [ 194.199527][ T7132] netlink: 'syz.0.334': attribute type 1 has an invalid length. [ 194.314657][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.321611][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.329027][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 194.329046][ T30] audit: type=1326 audit(1747402938.387:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 194.365171][ T30] audit: type=1326 audit(1747402938.427:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 194.404705][ T5893] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 194.462850][ T5893] usb 4-1: USB disconnect, device number 15 [ 195.459354][ T7150] FAULT_INJECTION: forcing a failure. [ 195.459354][ T7150] name failslab, interval 1, probability 0, space 0, times 0 [ 195.499607][ T7153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.510311][ T7153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.559538][ T7150] CPU: 0 UID: 0 PID: 7150 Comm: syz.0.339 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 195.559563][ T7150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.559579][ T7150] Call Trace: [ 195.559586][ T7150] [ 195.559593][ T7150] dump_stack_lvl+0x189/0x250 [ 195.559622][ T7150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.559643][ T7150] ? __pfx__printk+0x10/0x10 [ 195.559662][ T7150] ? __pfx___might_resched+0x10/0x10 [ 195.559676][ T7150] ? fs_reclaim_acquire+0x7d/0x100 [ 195.559702][ T7150] should_fail_ex+0x414/0x560 [ 195.559721][ T7150] should_failslab+0xa8/0x100 [ 195.559743][ T7150] kmem_cache_alloc_noprof+0x73/0x3c0 [ 195.559761][ T7150] ? __kernfs_new_node+0xd7/0x7f0 [ 195.559782][ T7150] ? kasan_save_track+0x4f/0x80 [ 195.559802][ T7150] __kernfs_new_node+0xd7/0x7f0 [ 195.559824][ T7150] ? __lock_acquire+0xaac/0xd20 [ 195.559850][ T7150] ? __pfx___kernfs_new_node+0x10/0x10 [ 195.559872][ T7150] ? kernfs_root+0x1c/0x230 [ 195.559897][ T7150] ? kernfs_root+0x1c/0x230 [ 195.559917][ T7150] ? kernfs_root+0x1c/0x230 [ 195.559935][ T7150] ? kernfs_root+0x1c/0x230 [ 195.559959][ T7150] kernfs_new_node+0x102/0x210 [ 195.559985][ T7150] __kernfs_create_file+0x4b/0x2e0 [ 195.560004][ T7150] sysfs_add_file_mode_ns+0x238/0x300 [ 195.560031][ T7150] internal_create_group+0x66d/0x1110 [ 195.560066][ T7150] ? __pfx_internal_create_group+0x10/0x10 [ 195.560089][ T7150] ? kernfs_add_one+0xf0/0x520 [ 195.560117][ T7150] sysfs_create_groups+0x59/0x120 [ 195.560153][ T7150] device_add_attrs+0xe0/0x5a0 [ 195.560177][ T7150] ? __pfx_device_add_attrs+0x10/0x10 [ 195.560199][ T7150] ? device_add_class_symlinks+0x21f/0x240 [ 195.560219][ T7150] device_add+0x496/0xb50 [ 195.560236][ T7150] ? device_initialize+0x24b/0x440 [ 195.560255][ T7150] netdev_register_kobject+0x156/0x2f0 [ 195.560282][ T7150] register_netdevice+0x126c/0x1af0 [ 195.560316][ T7150] ? __pfx_register_netdevice+0x10/0x10 [ 195.560340][ T7150] ? __kasan_kmalloc+0x93/0xb0 [ 195.560359][ T7150] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 195.560377][ T7150] ? register_vlan_dev+0x380/0x800 [ 195.560394][ T7150] register_vlan_dev+0x3cb/0x800 [ 195.560414][ T7150] vlan_newlink+0x4b2/0x610 [ 195.560433][ T7150] ? __pfx_vlan_newlink+0x10/0x10 [ 195.560452][ T7150] rtnl_newlink_create+0x305/0xaf0 [ 195.560477][ T7150] ? __pfx_aa_get_newest_label+0x10/0x10 [ 195.560497][ T7150] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 195.560516][ T7150] ? rtnl_newlink+0x8db/0x1c70 [ 195.560534][ T7150] ? __pfx___mutex_lock+0x10/0x10 [ 195.560562][ T7150] ? ns_capable+0x8a/0xf0 [ 195.560585][ T7150] rtnl_newlink+0x16d6/0x1c70 [ 195.560604][ T7150] ? kasan_save_track+0x3e/0x80 [ 195.560630][ T7150] ? __pfx_rtnl_newlink+0x10/0x10 [ 195.560671][ T7150] ? kasan_quarantine_put+0xdd/0x220 [ 195.560688][ T7150] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.560713][ T7150] ? __pfx_do_softirq+0x10/0x10 [ 195.560725][ T7150] ? kmem_cache_free+0x192/0x3f0 [ 195.560750][ T7150] ? __local_bh_enable_ip+0x12d/0x1c0 [ 195.560764][ T7150] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.560784][ T7150] ? __local_bh_enable_ip+0x12d/0x1c0 [ 195.560798][ T7150] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 195.560818][ T7150] ? aa_get_newest_label+0xf7/0x5d0 [ 195.560838][ T7150] ? __lock_acquire+0xaac/0xd20 [ 195.560877][ T7150] ? __pfx_rtnl_newlink+0x10/0x10 [ 195.560894][ T7150] rtnetlink_rcv_msg+0x7cf/0xb70 [ 195.560914][ T7150] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 195.560931][ T7150] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.560952][ T7150] ? ref_tracker_free+0x63a/0x7d0 [ 195.560967][ T7150] ? __copy_skb_header+0xa7/0x550 [ 195.560996][ T7150] netlink_rcv_skb+0x219/0x490 [ 195.561016][ T7150] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.561034][ T7150] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.561067][ T7150] ? netlink_deliver_tap+0x2e/0x1b0 [ 195.561085][ T7150] ? netlink_deliver_tap+0x2e/0x1b0 [ 195.561107][ T7150] netlink_unicast+0x75b/0x8d0 [ 195.561131][ T7150] netlink_sendmsg+0x805/0xb30 [ 195.561157][ T7150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.561177][ T7150] ? __import_iovec+0x5d4/0x7f0 [ 195.561197][ T7150] ? aa_sock_msg_perm+0x94/0x160 [ 195.561216][ T7150] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 195.561234][ T7150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.561253][ T7150] __sock_sendmsg+0x219/0x270 [ 195.561272][ T7150] ____sys_sendmsg+0x505/0x830 [ 195.561298][ T7150] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.561325][ T7150] ? __lock_acquire+0xaac/0xd20 [ 195.561351][ T7150] ___sys_sendmsg+0x21f/0x2a0 [ 195.561374][ T7150] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.561398][ T7150] ? ktime_get+0x3e/0x1f0 [ 195.561437][ T7150] ? __fget_files+0x2a/0x420 [ 195.561457][ T7150] ? __fget_files+0x3a0/0x420 [ 195.561485][ T7150] __sys_sendmsg+0x164/0x220 [ 195.561508][ T7150] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.561540][ T7150] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 195.561561][ T7150] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.561586][ T7150] __do_fast_syscall_32+0xb4/0x110 [ 195.561615][ T7150] do_fast_syscall_32+0x34/0x80 [ 195.561637][ T7150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.561655][ T7150] RIP: 0023:0xf7fd7539 [ 195.561669][ T7150] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 195.561682][ T7150] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 195.561698][ T7150] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000080000280 [ 195.561708][ T7150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.561717][ T7150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.561725][ T7150] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 195.561734][ T7150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.561755][ T7150] [ 196.126804][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.219567][ T7154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.284570][ T7154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.793499][ T7165] netlink: 'syz.4.342': attribute type 6 has an invalid length. [ 197.926839][ T7184] binder: 7182:7184 unknown command 1077961724 [ 197.937889][ T7184] binder: 7182:7184 ioctl c0306201 80000780 returned -22 [ 198.193527][ T7190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.273740][ T7190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.954550][ T5893] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 200.130597][ T5893] usb 2-1: config 0 has an invalid interface number: 9 but max is 0 [ 200.194110][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.232856][ T5893] usb 2-1: config 0 has no interface number 0 [ 200.266560][ T5893] usb 2-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 200.281518][ T7214] netlink: 44 bytes leftover after parsing attributes in process `syz.3.359'. [ 200.297534][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.318475][ T5893] usb 2-1: config 0 descriptor?? [ 200.356124][ T5893] rndis_host 2-1:0.9: More than one union descriptor, skipping ... [ 200.392553][ T5893] usb 2-1: bad CDC descriptors [ 200.414945][ T5893] cdc_acm 2-1:0.9: More than one union descriptor, skipping ... [ 200.493523][ T7221] FAULT_INJECTION: forcing a failure. [ 200.493523][ T7221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.509161][ T7221] CPU: 0 UID: 0 PID: 7221 Comm: syz.3.364 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 200.509195][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 200.509208][ T7221] Call Trace: [ 200.509217][ T7221] [ 200.509226][ T7221] dump_stack_lvl+0x189/0x250 [ 200.509260][ T7221] ? __lock_acquire+0xaac/0xd20 [ 200.509301][ T7221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.509332][ T7221] ? __pfx__printk+0x10/0x10 [ 200.509354][ T7221] ? __might_fault+0xb0/0x130 [ 200.509394][ T7221] should_fail_ex+0x414/0x560 [ 200.509422][ T7221] _copy_from_iter+0x1db/0x15a0 [ 200.509450][ T7221] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 200.509482][ T7221] ? __pfx__copy_from_iter+0x10/0x10 [ 200.509510][ T7221] ? policy_nodemask+0x27c/0x720 [ 200.509538][ T7221] ? aa_file_perm+0x11f/0xed0 [ 200.509572][ T7221] ? page_copy_sane+0x4e/0x280 [ 200.509601][ T7221] copy_page_from_iter+0x7b/0x100 [ 200.509632][ T7221] anon_pipe_write+0x99a/0x1360 [ 200.509686][ T7221] ? __pfx_anon_pipe_write+0x10/0x10 [ 200.509714][ T7221] ? common_file_perm+0x199/0x200 [ 200.509742][ T7221] ? bpf_lsm_file_permission+0x9/0x20 [ 200.509770][ T7221] ? security_file_permission+0x75/0x290 [ 200.509813][ T7221] vfs_write+0x548/0xa90 [ 200.509843][ T7221] ? __pfx_anon_pipe_write+0x10/0x10 [ 200.509874][ T7221] ? __pfx_vfs_write+0x10/0x10 [ 200.509911][ T7221] ? __fget_files+0x2a/0x420 [ 200.509951][ T7221] ksys_write+0x145/0x250 [ 200.509979][ T7221] ? __pfx_ksys_write+0x10/0x10 [ 200.510006][ T7221] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 200.510037][ T7221] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.510067][ T7221] __do_fast_syscall_32+0xb4/0x110 [ 200.510097][ T7221] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.510129][ T7221] do_fast_syscall_32+0x34/0x80 [ 200.510159][ T7221] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 200.510185][ T7221] RIP: 0023:0xf70ce539 [ 200.510202][ T7221] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 200.510220][ T7221] RSP: 002b:00000000f50be55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 200.510241][ T7221] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 200.510255][ T7221] RDX: 00000000fffffecc RSI: 0000000000000000 RDI: 0000000000000000 [ 200.510274][ T7221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 200.510287][ T7221] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 200.510299][ T7221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 200.510331][ T7221] [ 201.125747][ T7230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.134835][ T7230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.474302][ T5932] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 201.814309][ T5932] usb 5-1: Using ep0 maxpacket: 16 [ 201.838121][ T5932] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.850301][ T5932] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 201.883117][ T5932] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 202.003801][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.140800][ T5932] usb 5-1: config 0 descriptor?? [ 202.517119][ T7232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.527527][ T7232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.736911][ T5932] usb 5-1: USB disconnect, device number 20 [ 203.359221][ T5890] usb 2-1: USB disconnect, device number 16 [ 203.629809][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.368'. [ 203.907790][ T7250] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 204.230484][ T5893] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 204.549582][ T5893] usb 2-1: Invalid ep0 maxpacket: 16 [ 204.684152][ T5893] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 204.753803][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.374'. [ 204.904507][ T5893] usb 2-1: Invalid ep0 maxpacket: 16 [ 204.921246][ T7272] fuse: Bad value for 'group_id' [ 204.927627][ T5893] usb usb2-port1: attempt power cycle [ 204.937820][ T7272] fuse: Bad value for 'group_id' [ 204.981611][ T7270] netlink: 'syz.4.375': attribute type 16 has an invalid length. [ 205.006805][ T7274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.047894][ T7274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.070268][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.375'. [ 205.086362][ T7274] fuse: Bad value for 'group_id' [ 205.115368][ T7274] fuse: Bad value for 'group_id' [ 205.309601][ T5893] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 205.474986][ T5893] usb 2-1: Invalid ep0 maxpacket: 16 [ 205.703559][ T5893] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 205.747165][ T5893] usb 2-1: Invalid ep0 maxpacket: 16 [ 205.755427][ T5893] usb usb2-port1: unable to enumerate USB device [ 205.978513][ T47] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 206.141918][ T47] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 206.158913][ T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.172658][ T47] usb 5-1: config 0 has no interface number 0 [ 206.180641][ T47] usb 5-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 206.193975][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.227348][ T47] usb 5-1: config 0 descriptor?? [ 206.235521][ T47] rndis_host 5-1:0.9: More than one union descriptor, skipping ... [ 206.270154][ T47] usb 5-1: bad CDC descriptors [ 206.290292][ T47] cdc_acm 5-1:0.9: More than one union descriptor, skipping ... [ 206.807661][ T7295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.831803][ T7295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.609656][ T5895] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 207.786950][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.812527][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.889411][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.924097][ T7302] capability: warning: `syz.0.383' uses 32-bit capabilities (legacy support in use) [ 207.976989][ T5895] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 208.065525][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.165296][ T5895] usb 2-1: config 0 descriptor?? [ 208.593220][ T5895] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 208.714298][ T5895] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 208.920261][ T7309] binder: 7297:7309 ioctl 4018620d 0 returned -22 [ 209.212606][ T7316] netlink: 'syz.2.386': attribute type 6 has an invalid length. [ 210.246002][ C0] plantronics 0003:047F:FFFF.0006: usb_submit_urb(ctrl) failed: -1 [ 210.414226][ T5895] usb 2-1: reset high-speed USB device number 21 using dummy_hcd [ 210.564608][ T5895] usb 2-1: device descriptor read/64, error -32 [ 210.815177][ T5890] usb 5-1: USB disconnect, device number 21 [ 210.826293][ T5895] usb 2-1: reset high-speed USB device number 21 using dummy_hcd [ 211.005784][ T5895] usb 2-1: device descriptor read/64, error -32 [ 211.277918][ T5895] usb 2-1: reset high-speed USB device number 21 using dummy_hcd [ 211.315394][ T5895] usb 2-1: device descriptor read/8, error -32 [ 211.578624][ T7320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.086242][ T7328] kernel read not supported for file /bus (pid: 7328 comm: syz.3.390) [ 212.105571][ T30] audit: type=1800 audit(1747402956.167:205): pid=7328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.390" name="bus" dev="mqueue" ino=13345 res=0 errno=0 [ 212.208655][ T30] audit: type=1804 audit(1747402956.187:206): pid=7328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.390" name="bus" dev="mqueue" ino=13345 res=1 errno=0 [ 212.256608][ T30] audit: type=1326 audit(1747402956.317:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 212.284643][ T5932] usb 2-1: USB disconnect, device number 21 [ 212.359704][ T30] audit: type=1326 audit(1747402956.317:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd7558 code=0x7ffc0000 [ 212.384571][ T47] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 212.476236][ T30] audit: type=1326 audit(1747402956.317:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 212.506903][ T30] audit: type=1326 audit(1747402956.317:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd7558 code=0x7ffc0000 [ 212.536055][ T30] audit: type=1326 audit(1747402956.317:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd7558 code=0x7ffc0000 [ 212.558308][ T47] usb 5-1: device descriptor read/64, error -71 [ 212.664452][ T30] audit: type=1326 audit(1747402956.317:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 212.722431][ T30] audit: type=1326 audit(1747402956.317:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 212.822384][ T47] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 212.862024][ T30] audit: type=1326 audit(1747402956.357:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd7558 code=0x7ffc0000 [ 213.024185][ T47] usb 5-1: device descriptor read/64, error -71 [ 213.135300][ T47] usb usb5-port1: attempt power cycle [ 213.234142][ T5932] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 213.426613][ T5932] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 213.458990][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.486192][ T5932] usb 4-1: Product: syz [ 213.490467][ T47] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 213.515085][ T5932] usb 4-1: Manufacturer: syz [ 213.516781][ T47] usb 5-1: device descriptor read/8, error -71 [ 213.521374][ T5932] usb 4-1: SerialNumber: syz [ 213.551745][ T5932] usb 4-1: config 0 descriptor?? [ 213.562793][ T5932] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 213.865215][ T47] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 213.912271][ T47] usb 5-1: device descriptor read/8, error -71 [ 214.034498][ T47] usb usb5-port1: unable to enumerate USB device [ 214.566198][ T5932] gspca_sunplus: reg_r err -110 [ 214.581127][ T5932] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 214.655153][ T5932] usb 4-1: USB disconnect, device number 16 [ 214.941635][ T7354] program syz.1.398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.155658][ T7362] netlink: 'syz.3.400': attribute type 1 has an invalid length. [ 215.409892][ T7366] bond0: (slave team0): Releasing backup interface [ 215.426438][ T7366] bridge_slave_0: left allmulticast mode [ 215.448926][ T7366] bridge_slave_0: left promiscuous mode [ 215.478820][ T7366] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.531968][ T7366] bridge_slave_1: left allmulticast mode [ 215.543668][ T7366] bridge_slave_1: left promiscuous mode [ 215.556886][ T7366] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.806627][ T7366] bond0: (slave bond_slave_0): Releasing backup interface [ 215.887379][ T7366] bond0: (slave bond_slave_1): Releasing backup interface [ 215.944160][ T47] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 216.110023][ T7366] team0: Port device team_slave_0 removed [ 216.114150][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 216.133181][ T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.150528][ T7366] team0: Port device team_slave_1 removed [ 216.179602][ T7366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.204158][ T5836] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 216.214590][ T7366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.232117][ T47] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 216.264126][ T47] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 216.268871][ T7366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.291118][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.327296][ T7366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.369228][ T47] usb 5-1: config 0 descriptor?? [ 216.410497][ T7366] batman_adv: batadv0: Removing interface: virt_wifi0 [ 216.461434][ T5836] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 216.471744][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.541486][ T5836] usb 4-1: Product: syz [ 216.566863][ T5836] usb 4-1: Manufacturer: syz [ 216.586622][ T5836] usb 4-1: SerialNumber: syz [ 216.614304][ T5836] usb 4-1: config 0 descriptor?? [ 216.863170][ T7366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.945505][ T7366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.146792][ T5836] usb 5-1: USB disconnect, device number 26 [ 217.170258][ T47] usb 4-1: USB disconnect, device number 17 [ 217.560078][ T7393] FAULT_INJECTION: forcing a failure. [ 217.560078][ T7393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.840242][ T7393] CPU: 1 UID: 0 PID: 7393 Comm: syz.0.410 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 217.840273][ T7393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.840286][ T7393] Call Trace: [ 217.840295][ T7393] [ 217.840306][ T7393] dump_stack_lvl+0x189/0x250 [ 217.840345][ T7393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.840376][ T7393] ? __pfx__printk+0x10/0x10 [ 217.840408][ T7393] should_fail_ex+0x414/0x560 [ 217.840435][ T7393] _copy_to_user+0x31/0xb0 [ 217.840468][ T7393] simple_read_from_buffer+0xe1/0x170 [ 217.840501][ T7393] proc_fail_nth_read+0x1df/0x250 [ 217.840536][ T7393] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.840570][ T7393] ? rw_verify_area+0x258/0x650 [ 217.840593][ T7393] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.840624][ T7393] vfs_read+0x1fd/0x980 [ 217.840654][ T7393] ? __pfx___mutex_lock+0x10/0x10 [ 217.840686][ T7393] ? __pfx_vfs_read+0x10/0x10 [ 217.840711][ T7393] ? __fget_files+0x2a/0x420 [ 217.840755][ T7393] ? __fget_files+0x3a0/0x420 [ 217.840782][ T7393] ? __fget_files+0x2a/0x420 [ 217.840822][ T7393] ksys_read+0x145/0x250 [ 217.840849][ T7393] ? __pfx_ksys_read+0x10/0x10 [ 217.840877][ T7393] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 217.840907][ T7393] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.840936][ T7393] __do_fast_syscall_32+0xb4/0x110 [ 217.840969][ T7393] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.841000][ T7393] do_fast_syscall_32+0x34/0x80 [ 217.841030][ T7393] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.841056][ T7393] RIP: 0023:0xf7fd7539 [ 217.841074][ T7393] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 217.841094][ T7393] RSP: 002b:00000000f50f6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 217.841116][ T7393] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50f6620 [ 217.841131][ T7393] RDX: 000000000000000f RSI: 00000000f7462ff4 RDI: 0000000000000000 [ 217.841143][ T7393] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 217.841156][ T7393] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 217.841168][ T7393] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.841200][ T7393] [ 218.270122][ T47] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 218.457616][ T47] usb 4-1: unable to get BOS descriptor or descriptor too short [ 218.514305][ T47] usb 4-1: not running at top speed; connect to a high speed hub [ 218.571862][ T47] usb 4-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.607685][ T47] usb 4-1: config 1 interface 0 has no altsetting 0 [ 218.961932][ T47] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 218.979556][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.009659][ T47] usb 4-1: Product: syz [ 219.014162][ T47] usb 4-1: Manufacturer: syz [ 219.019861][ T47] usb 4-1: SerialNumber: syz [ 219.092745][ T47] usb 4-1: can't set config #1, error -71 [ 219.113742][ T47] usb 4-1: USB disconnect, device number 18 [ 221.841769][ T7437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.945666][ T7437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.035336][ T7442] netlink: 92 bytes leftover after parsing attributes in process `syz.4.421'. [ 222.151746][ T7437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.164384][ T7437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.474350][ T5932] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 223.645429][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 223.659423][ T5932] usb 4-1: config 6 has an invalid interface number: 56 but max is 0 [ 223.668433][ T5932] usb 4-1: config 6 has no interface number 0 [ 223.675249][ T5932] usb 4-1: config 6 interface 56 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 223.694741][ T5932] usb 4-1: config 6 interface 56 altsetting 12 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 223.733200][ T5932] usb 4-1: config 6 interface 56 altsetting 12 has a duplicate endpoint with address 0x2, skipping [ 223.745347][ T5932] usb 4-1: config 6 interface 56 altsetting 12 has a duplicate endpoint with address 0xD, skipping [ 223.757959][ T5932] usb 4-1: config 6 interface 56 has no altsetting 0 [ 223.771180][ T5932] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=fe.97 [ 223.791123][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.828013][ T5932] usb 4-1: Product: à – [ 223.863350][ T5932] usb 4-1: Manufacturer: Ñ‘ [ 223.876097][ T5932] usb 4-1: SerialNumber: syz [ 224.537192][ T5932] appletouch 4-1:6.56: Could not find int-in endpoint [ 224.571341][ T5932] appletouch 4-1:6.56: probe with driver appletouch failed with error -5 [ 224.614782][ T5932] usbhid 4-1:6.56: couldn't find an input interrupt endpoint [ 224.696625][ T5932] usb 4-1: USB disconnect, device number 19 [ 225.207433][ T7461] netlink: 44 bytes leftover after parsing attributes in process `syz.3.428'. [ 226.283228][ T7459] ptrace attach of "./syz-executor exec"[5852] was attempted by "./syz-executor exec"[7459] [ 227.694578][ T5932] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 227.924245][ T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 227.938349][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 227.963236][ T5932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.973756][ T5932] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 227.990338][ T5932] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 228.004632][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.035688][ T5932] usb 2-1: config 0 descriptor?? [ 228.104147][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 228.127193][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.216423][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 228.326356][ T7486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.337605][ T7486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.359676][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.395086][ T24] usb 5-1: config 0 descriptor?? [ 228.612016][ T47] usb 2-1: USB disconnect, device number 22 [ 229.222840][ T24] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 229.256279][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.439'. [ 229.265679][ T7499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.439'. [ 229.633816][ T24] usb 5-1: USB disconnect, device number 27 [ 231.314168][ T24] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 231.486356][ T24] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 231.519240][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.573435][ T24] usb 2-1: config 0 descriptor?? [ 231.581189][ T30] kauditd_printk_skb: 126 callbacks suppressed [ 231.581208][ T30] audit: type=1326 audit(1747402975.637:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.4.443" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f43539 code=0x0 [ 231.622201][ T24] ums-realtek 2-1:0.0: USB Mass Storage device detected [ 231.723332][ T7524] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 231.851126][ T24] usb 2-1: USB disconnect, device number 23 [ 231.889851][ T7524] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 232.215326][ T5890] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 232.416602][ T5890] usb 4-1: not running at top speed; connect to a high speed hub [ 232.429127][ T5890] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 232.532193][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.601394][ T5890] usb 4-1: Product: ÑŒ [ 232.629285][ T5890] usb 4-1: Manufacturer: 衿ꫜ䇧裱Ҿ渤喪嫅變﫭︺ꀌ⠖꣓㛠㭕뒤헣㡨駙㪧싗ࣃ⥎핡᪾怽♮뻌忙烟蟯꟩풲넺棇ཕ渎霦㚑è€ã·³î”‰äŽ‰ê«¾è‡ç¼«à§³ì»µé‘²äª’æˆéŸ¯èŸ¿á‚£ä¿™à©±å´”é„ሥ [ 232.650342][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.749912][ T5890] usb 4-1: SerialNumber: 委¡췚쬖䯵ç‚ã°é”›á»†é¶€ãº¥â€²ß¦á­˜Â§á‹’삪䆹⺤탈냞ᕸã‹îº‘롴迢虓æ”쀔ᢸ䖧￱è™ì­ ì¶¦ï¥¹ä·¯ç£„歜ꌮᛇ噑ᘦ꜒罀議芜㞌̑äªâµ‡êž¯ç‚¥ã€£îœ˜ï‡ç¾ˆã–‰à¼¹í˜‡é¼»ç£§ìºïƒ¨ [ 232.844501][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 233.022835][ T24] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 233.034247][ T24] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 233.042297][ T24] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 233.177744][ T24] usb 5-1: config 0 has no interface number 0 [ 233.183953][ T24] usb 5-1: config 0 has no interface number 1 [ 233.233960][ T24] usb 5-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f [ 233.243485][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.287335][ T24] usb 5-1: Product: syz [ 233.324843][ T7549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.330182][ T24] usb 5-1: Manufacturer: syz [ 233.401086][ T7549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.408915][ T24] usb 5-1: SerialNumber: syz [ 233.452630][ T24] usb 5-1: config 0 descriptor?? [ 233.482788][ T7530] xt_HMARK: proto mask must be zero with L3 mode [ 233.499590][ T5890] cdc_ncm 4-1:1.0: bind() failure [ 233.519144][ T24] cdc_acm 5-1:0.51: probe with driver cdc_acm failed with error -22 [ 233.550149][ T5890] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 233.605588][ T5890] cdc_ncm 4-1:1.1: bind() failure [ 233.663232][ T5890] usb 4-1: USB disconnect, device number 20 [ 233.851488][ T7553] nvme_fabrics: missing parameter 'transport=%s' [ 233.881748][ T7553] nvme_fabrics: missing parameter 'nqn=%s' [ 235.452529][ T7581] FAULT_INJECTION: forcing a failure. [ 235.452529][ T7581] name failslab, interval 1, probability 0, space 0, times 0 [ 235.524241][ T7581] CPU: 0 UID: 0 PID: 7581 Comm: syz.3.458 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 235.524271][ T7581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.524288][ T7581] Call Trace: [ 235.524298][ T7581] [ 235.524307][ T7581] dump_stack_lvl+0x189/0x250 [ 235.524349][ T7581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.524392][ T7581] ? __pfx__printk+0x10/0x10 [ 235.524422][ T7581] ? __pfx___might_resched+0x10/0x10 [ 235.524442][ T7581] ? fs_reclaim_acquire+0x7d/0x100 [ 235.524482][ T7581] should_fail_ex+0x414/0x560 [ 235.524512][ T7581] should_failslab+0xa8/0x100 [ 235.524544][ T7581] kmem_cache_alloc_noprof+0x73/0x3c0 [ 235.524572][ T7581] ? ep_insert+0x51a/0x1a00 [ 235.524601][ T7581] ep_insert+0x51a/0x1a00 [ 235.524641][ T7581] ? __pfx_ep_insert+0x10/0x10 [ 235.524666][ T7581] ? __pfx___mutex_lock+0x10/0x10 [ 235.524697][ T7581] ? __fget_files+0x2a/0x420 [ 235.524730][ T7581] ? __fget_files+0x2a/0x420 [ 235.524757][ T7581] ? __fget_files+0x3a0/0x420 [ 235.524785][ T7581] ? __fget_files+0x2a/0x420 [ 235.524825][ T7581] do_epoll_ctl+0x80e/0xe80 [ 235.524860][ T7581] __ia32_sys_epoll_ctl+0x15d/0x1a0 [ 235.524885][ T7581] ? rcu_is_watching+0x15/0xb0 [ 235.524907][ T7581] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 235.524936][ T7581] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 235.524966][ T7581] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.524995][ T7581] __do_fast_syscall_32+0xb4/0x110 [ 235.525026][ T7581] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.525057][ T7581] do_fast_syscall_32+0x34/0x80 [ 235.525088][ T7581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 235.525115][ T7581] RIP: 0023:0xf70ce539 [ 235.525132][ T7581] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 235.525152][ T7581] RSP: 002b:00000000f50be55c EFLAGS: 00000206 ORIG_RAX: 00000000000000ff [ 235.525175][ T7581] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000001 [ 235.525189][ T7581] RDX: 0000000000000003 RSI: 0000000080000080 RDI: 0000000000000000 [ 235.525203][ T7581] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 235.525215][ T7581] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 235.525228][ T7581] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 235.525269][ T7581] [ 236.271053][ T7585] netlink: 92 bytes leftover after parsing attributes in process `syz.1.460'. [ 236.399926][ T7590] program syz.3.461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.282986][ T5836] usb 5-1: USB disconnect, device number 28 [ 237.988428][ T7609] netlink: 'syz.3.467': attribute type 33 has an invalid length. [ 238.056289][ T7609] netlink: 152 bytes leftover after parsing attributes in process `syz.3.467'. [ 239.064884][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.470'. [ 239.433617][ T7628] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 241.289562][ T7645] program syz.4.476 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.669502][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'. [ 241.679744][ T7649] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 241.709400][ T7649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.944229][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 242.166068][ T24] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 242.204088][ T24] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 242.241493][ T24] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 242.262385][ T24] usb 2-1: config 0 has no interface number 0 [ 242.294112][ T24] usb 2-1: config 0 has no interface number 1 [ 242.777928][ T24] usb 2-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f [ 242.841703][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.916345][ T24] usb 2-1: Product: syz [ 242.920571][ T24] usb 2-1: Manufacturer: syz [ 242.985939][ T24] usb 2-1: SerialNumber: syz [ 243.003912][ T24] usb 2-1: config 0 descriptor?? [ 243.011757][ T24] cdc_acm 2-1:0.51: probe with driver cdc_acm failed with error -22 [ 243.625816][ T1207] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 244.362727][ T1207] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 244.384762][ T7677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.398348][ T7677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.421467][ T1207] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.501569][ T1207] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 244.585669][ T1207] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.629530][ T7677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.639995][ T1207] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 244.649394][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 244.657918][ T7677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.668229][ T1207] usb 4-1: Product: syz [ 244.672473][ T1207] usb 4-1: Manufacturer: syz [ 244.801037][ T1207] cdc_wdm 4-1:1.0: skipping garbage [ 244.812806][ T1207] cdc_wdm 4-1:1.0: skipping garbage [ 244.840888][ T1207] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 244.984978][ T24] usb 4-1: USB disconnect, device number 21 [ 245.385466][ T7694] trusted_key: syz.0.488 sent an empty control message without MSG_MORE. [ 246.082609][ T30] audit: type=1326 audit(1747402990.137:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7699 comm="syz.3.490" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ce539 code=0x0 [ 246.173110][ T7711] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 246.193434][ T7711] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 246.868405][ T7719] FAULT_INJECTION: forcing a failure. [ 246.868405][ T7719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.886853][ T7719] CPU: 0 UID: 0 PID: 7719 Comm: syz.2.494 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 246.886884][ T7719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 246.886906][ T7719] Call Trace: [ 246.886921][ T7719] [ 246.886930][ T7719] dump_stack_lvl+0x189/0x250 [ 246.886963][ T7719] ? __lock_acquire+0xaac/0xd20 [ 246.886997][ T7719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.887028][ T7719] ? __pfx__printk+0x10/0x10 [ 246.887049][ T7719] ? __might_fault+0xb0/0x130 [ 246.887089][ T7719] should_fail_ex+0x414/0x560 [ 246.887118][ T7719] _copy_from_user+0x2d/0xb0 [ 246.887151][ T7719] snd_seq_write+0x300/0x810 [ 246.887189][ T7719] ? __pfx_snd_seq_write+0x10/0x10 [ 246.887214][ T7719] ? bpf_lsm_file_permission+0x9/0x20 [ 246.887242][ T7719] ? security_file_permission+0x75/0x290 [ 246.887278][ T7719] ? rw_verify_area+0x258/0x650 [ 246.887303][ T7719] ? __pfx_snd_seq_write+0x10/0x10 [ 246.887328][ T7719] vfs_write+0x27b/0xa90 [ 246.887363][ T7719] ? __pfx_vfs_write+0x10/0x10 [ 246.887391][ T7719] ? __fget_files+0x2a/0x420 [ 246.887423][ T7719] ? __fget_files+0x2a/0x420 [ 246.887451][ T7719] ? __fget_files+0x3a0/0x420 [ 246.887479][ T7719] ? __fget_files+0x2a/0x420 [ 246.887517][ T7719] ksys_write+0x145/0x250 [ 246.887546][ T7719] ? __pfx_ksys_write+0x10/0x10 [ 246.887575][ T7719] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 246.887606][ T7719] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.887636][ T7719] __do_fast_syscall_32+0xb4/0x110 [ 246.887667][ T7719] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.887699][ T7719] do_fast_syscall_32+0x34/0x80 [ 246.887728][ T7719] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 246.887752][ T7719] RIP: 0023:0xf70be539 [ 246.887769][ T7719] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 246.887788][ T7719] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 246.887818][ T7719] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 246.887832][ T7719] RDX: 000000000000ffc8 RSI: 0000000000000000 RDI: 0000000000000000 [ 246.887845][ T7719] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.887856][ T7719] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 246.887868][ T7719] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.887899][ T7719] [ 247.245309][ T1207] usb 2-1: USB disconnect, device number 24 [ 247.804190][ T5890] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 247.875344][ T24] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 247.974473][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 247.982516][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.003841][ T5890] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 248.013460][ T5890] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 248.102440][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.123145][ T5890] usb 5-1: config 0 descriptor?? [ 248.132859][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.143472][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 248.169978][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 248.184822][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 248.194383][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 248.202451][ T24] usb 2-1: Manufacturer: syz [ 248.292892][ T24] usb 2-1: config 0 descriptor?? [ 248.356117][ T7726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.371896][ T7726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.506190][ T5893] usb 5-1: USB disconnect, device number 29 [ 248.586382][ T30] audit: type=1800 audit(1747402992.617:343): pid=7729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.499" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 248.650630][ T7729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.669779][ T7729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.713344][ T7729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.729793][ T7729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.759662][ T5893] usb 2-1: USB disconnect, device number 25 [ 249.262477][ T7750] FAULT_INJECTION: forcing a failure. [ 249.262477][ T7750] name failslab, interval 1, probability 0, space 0, times 0 [ 249.316803][ T7750] CPU: 1 UID: 0 PID: 7750 Comm: syz.4.505 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 249.316834][ T7750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 249.316846][ T7750] Call Trace: [ 249.316854][ T7750] [ 249.316863][ T7750] dump_stack_lvl+0x189/0x250 [ 249.316901][ T7750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.316931][ T7750] ? __pfx__printk+0x10/0x10 [ 249.316955][ T7750] ? __pfx___might_resched+0x10/0x10 [ 249.316976][ T7750] ? fs_reclaim_acquire+0x7d/0x100 [ 249.317013][ T7750] should_fail_ex+0x414/0x560 [ 249.317041][ T7750] should_failslab+0xa8/0x100 [ 249.317071][ T7750] __kmalloc_noprof+0xcb/0x4f0 [ 249.317098][ T7750] ? __vb2_queue_alloc+0x29d/0x15a0 [ 249.317132][ T7750] __vb2_queue_alloc+0x29d/0x15a0 [ 249.317185][ T7750] vb2_core_create_bufs+0x765/0xde0 [ 249.317226][ T7750] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 249.317252][ T7750] ? __mutex_trylock_common+0x153/0x260 [ 249.317283][ T7750] ? vb2_set_flags_and_caps+0x309/0x5f0 [ 249.317316][ T7750] vb2_create_bufs+0x5b9/0xae0 [ 249.317350][ T7750] ? __pfx_vb2_create_bufs+0x10/0x10 [ 249.317381][ T7750] ? vb2_set_flags_and_caps+0x309/0x5f0 [ 249.317415][ T7750] vb2_ioctl_create_bufs+0x285/0x3f0 [ 249.317457][ T7750] v4l_create_bufs+0x190/0x2a0 [ 249.317489][ T7750] __video_do_ioctl+0xc9b/0xdb0 [ 249.317532][ T7750] ? __pfx___video_do_ioctl+0x10/0x10 [ 249.317568][ T7750] ? trace_kmalloc+0x1f/0xd0 [ 249.317601][ T7750] video_usercopy+0x86e/0x14f0 [ 249.317642][ T7750] ? __pfx___video_do_ioctl+0x10/0x10 [ 249.317673][ T7750] ? __pfx_video_usercopy+0x10/0x10 [ 249.317724][ T7750] ? __fget_files+0x2a/0x420 [ 249.317756][ T7750] v4l2_ioctl+0x18a/0x1e0 [ 249.317791][ T7750] v4l2_compat_ioctl32+0x1d7/0x260 [ 249.317820][ T7750] __ia32_compat_sys_ioctl+0x551/0x840 [ 249.317848][ T7750] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 249.317872][ T7750] ? __fget_files+0x3a0/0x420 [ 249.317907][ T7750] ? fput+0xa0/0xd0 [ 249.317940][ T7750] ? ksys_write+0x1f0/0x250 [ 249.317973][ T7750] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 249.318003][ T7750] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.318032][ T7750] __do_fast_syscall_32+0xb4/0x110 [ 249.318061][ T7750] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.318093][ T7750] do_fast_syscall_32+0x34/0x80 [ 249.318122][ T7750] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 249.318147][ T7750] RIP: 0023:0xf7f43539 [ 249.318164][ T7750] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 249.318182][ T7750] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 249.318206][ T7750] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0f8565c [ 249.318220][ T7750] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 249.318233][ T7750] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 249.318262][ T7750] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 249.318275][ T7750] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.318306][ T7750] [ 249.863431][ T30] audit: type=1326 audit(1747402993.917:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.1.507" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb4539 code=0x0 [ 249.922290][ T7762] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 249.943303][ T7762] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 250.248520][ T7765] netlink: 20 bytes leftover after parsing attributes in process `syz.3.506'. [ 250.845712][ T7770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.509'. [ 251.049192][ T7774] FAULT_INJECTION: forcing a failure. [ 251.049192][ T7774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.071958][ T7774] CPU: 0 UID: 0 PID: 7774 Comm: syz.3.510 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 251.071995][ T7774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 251.072008][ T7774] Call Trace: [ 251.072017][ T7774] [ 251.072027][ T7774] dump_stack_lvl+0x189/0x250 [ 251.072067][ T7774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.072097][ T7774] ? __pfx__printk+0x10/0x10 [ 251.072130][ T7774] should_fail_ex+0x414/0x560 [ 251.072160][ T7774] _copy_to_user+0x31/0xb0 [ 251.072193][ T7774] simple_read_from_buffer+0xe1/0x170 [ 251.072226][ T7774] proc_fail_nth_read+0x1df/0x250 [ 251.072261][ T7774] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.072297][ T7774] ? rw_verify_area+0x258/0x650 [ 251.072321][ T7774] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.072354][ T7774] vfs_read+0x1fd/0x980 [ 251.072384][ T7774] ? __pfx___mutex_lock+0x10/0x10 [ 251.072415][ T7774] ? __pfx_vfs_read+0x10/0x10 [ 251.072441][ T7774] ? __fget_files+0x2a/0x420 [ 251.072482][ T7774] ? __fget_files+0x3a0/0x420 [ 251.072509][ T7774] ? __fget_files+0x2a/0x420 [ 251.072548][ T7774] ksys_read+0x145/0x250 [ 251.072576][ T7774] ? __pfx_ksys_read+0x10/0x10 [ 251.072604][ T7774] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 251.072634][ T7774] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.072664][ T7774] __do_fast_syscall_32+0xb4/0x110 [ 251.072695][ T7774] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.072726][ T7774] do_fast_syscall_32+0x34/0x80 [ 251.072756][ T7774] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 251.072782][ T7774] RIP: 0023:0xf70ce539 [ 251.072799][ T7774] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 251.072817][ T7774] RSP: 002b:00000000f50be590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 251.072839][ T7774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50be620 [ 251.072854][ T7774] RDX: 000000000000000f RSI: 00000000f7432ff4 RDI: 0000000000000000 [ 251.072867][ T7774] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 251.072879][ T7774] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 251.072891][ T7774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 251.072922][ T7774] [ 251.785269][ T7785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.513'. [ 252.254266][ T5836] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 252.404243][ T5836] usb 4-1: Using ep0 maxpacket: 32 [ 252.418287][ T5836] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 252.433872][ T5836] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 252.526402][ T5836] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 252.555344][ T5836] usb 4-1: config 1 has no interface number 0 [ 252.603821][ T5836] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 252.843375][ T5836] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 252.900538][ T5836] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 252.910166][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.110850][ T5836] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 253.300861][ T5836] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 253.567755][ T5836] usb 4-1: USB disconnect, device number 22 [ 253.585393][ T5836] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 254.402444][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 254.836404][ T7816] FAULT_INJECTION: forcing a failure. [ 254.836404][ T7816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.876966][ T7815] ALSA: mixer_oss: invalid OSS volume '' [ 254.913511][ T7816] CPU: 1 UID: 0 PID: 7816 Comm: syz.2.521 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 254.913547][ T7816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.913559][ T7816] Call Trace: [ 254.913568][ T7816] [ 254.913577][ T7816] dump_stack_lvl+0x189/0x250 [ 254.913616][ T7816] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.913649][ T7816] ? __pfx__printk+0x10/0x10 [ 254.913673][ T7816] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.913706][ T7816] should_fail_ex+0x414/0x560 [ 254.913734][ T7816] _copy_to_user+0x31/0xb0 [ 254.913767][ T7816] put_compat_flock+0x13a/0x1f0 [ 254.913791][ T7816] ? __pfx_put_compat_flock+0x10/0x10 [ 254.913821][ T7816] do_compat_fcntl64+0x6b3/0x720 [ 254.913841][ T7816] ? lock_vma_under_rcu+0xf8/0x710 [ 254.913872][ T7816] ? __pfx_do_compat_fcntl64+0x10/0x10 [ 254.913905][ T7816] ? ksys_write+0x1e1/0x250 [ 254.913938][ T7816] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 254.913967][ T7816] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.914009][ T7816] __do_fast_syscall_32+0xb4/0x110 [ 254.914039][ T7816] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.914070][ T7816] do_fast_syscall_32+0x34/0x80 [ 254.914099][ T7816] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 254.914125][ T7816] RIP: 0023:0xf70be539 [ 254.914144][ T7816] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 254.914163][ T7816] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000037 [ 254.914185][ T7816] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000005 [ 254.914198][ T7816] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 254.914211][ T7816] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 254.914222][ T7816] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 254.914235][ T7816] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 254.914265][ T7816] [ 255.487199][ T7819] FAULT_INJECTION: forcing a failure. [ 255.487199][ T7819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.571654][ T7819] CPU: 1 UID: 0 PID: 7819 Comm: syz.0.522 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 255.571687][ T7819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 255.571700][ T7819] Call Trace: [ 255.571708][ T7819] [ 255.571716][ T7819] dump_stack_lvl+0x189/0x250 [ 255.571766][ T7819] ? __lock_acquire+0xaac/0xd20 [ 255.571801][ T7819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.571832][ T7819] ? __pfx__printk+0x10/0x10 [ 255.571852][ T7819] ? __might_fault+0xb0/0x130 [ 255.571892][ T7819] should_fail_ex+0x414/0x560 [ 255.571958][ T7819] _copy_from_user+0x2d/0xb0 [ 255.571993][ T7819] snd_pcm_oss_write+0x84f/0x11a0 [ 255.572039][ T7819] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 255.572064][ T7819] ? bpf_lsm_file_permission+0x9/0x20 [ 255.572092][ T7819] ? security_file_permission+0x75/0x290 [ 255.572128][ T7819] ? rw_verify_area+0x258/0x650 [ 255.572152][ T7819] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 255.572177][ T7819] vfs_write+0x27b/0xa90 [ 255.572211][ T7819] ? __pfx_vfs_write+0x10/0x10 [ 255.572237][ T7819] ? __fget_files+0x2a/0x420 [ 255.572270][ T7819] ? __fget_files+0x2a/0x420 [ 255.572297][ T7819] ? __fget_files+0x3a0/0x420 [ 255.572323][ T7819] ? __fget_files+0x2a/0x420 [ 255.572361][ T7819] ksys_write+0x145/0x250 [ 255.572388][ T7819] ? __pfx_ksys_write+0x10/0x10 [ 255.572421][ T7819] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 255.572451][ T7819] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.572480][ T7819] __do_fast_syscall_32+0xb4/0x110 [ 255.572509][ T7819] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.572541][ T7819] do_fast_syscall_32+0x34/0x80 [ 255.572571][ T7819] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 255.572596][ T7819] RIP: 0023:0xf7fd7539 [ 255.572614][ T7819] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 255.572633][ T7819] RSP: 002b:00000000f50d555c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 255.572655][ T7819] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000500 [ 255.572669][ T7819] RDX: 000000000000fc36 RSI: 0000000000000000 RDI: 0000000000000000 [ 255.572682][ T7819] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 255.572695][ T7819] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 255.572707][ T7819] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 255.572738][ T7819] [ 255.914914][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.922249][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.224572][ T7828] hub 1-0:1.0: USB hub found [ 256.267821][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.526'. [ 256.277175][ T7828] hub 1-0:1.0: 1 port detected [ 256.300097][ T7835] FAULT_INJECTION: forcing a failure. [ 256.300097][ T7835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.316503][ T7835] CPU: 1 UID: 0 PID: 7835 Comm: syz.1.525 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 256.316536][ T7835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.316550][ T7835] Call Trace: [ 256.316558][ T7835] [ 256.316567][ T7835] dump_stack_lvl+0x189/0x250 [ 256.316603][ T7835] ? __lock_acquire+0xaac/0xd20 [ 256.316636][ T7835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.316666][ T7835] ? __pfx__printk+0x10/0x10 [ 256.316681][ T7835] ? __might_fault+0xb0/0x130 [ 256.316715][ T7835] should_fail_ex+0x414/0x560 [ 256.316744][ T7835] _copy_from_user+0x2d/0xb0 [ 256.316777][ T7835] get_compat_msghdr+0xad/0x4a0 [ 256.316810][ T7835] ? __pfx_get_compat_msghdr+0x10/0x10 [ 256.316843][ T7835] ___sys_sendmsg+0x193/0x2a0 [ 256.316877][ T7835] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.316945][ T7835] ? __fget_files+0x2a/0x420 [ 256.316974][ T7835] ? __fget_files+0x3a0/0x420 [ 256.317002][ T7835] __sys_sendmsg+0x164/0x220 [ 256.317025][ T7835] ? __pfx___sys_sendmsg+0x10/0x10 [ 256.317074][ T7835] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 256.317104][ T7835] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.317133][ T7835] __do_fast_syscall_32+0xb4/0x110 [ 256.317154][ T7835] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.317176][ T7835] do_fast_syscall_32+0x34/0x80 [ 256.317207][ T7835] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.317233][ T7835] RIP: 0023:0xf7fb4539 [ 256.317250][ T7835] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 256.317268][ T7835] RSP: 002b:00000000f509455c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 256.317289][ T7835] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000740 [ 256.317300][ T7835] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.317309][ T7835] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 256.317317][ T7835] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 256.317326][ T7835] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 256.317354][ T7835] [ 256.537192][ T7832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.546092][ T7832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.566180][ T7831] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 256.573500][ T7831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.584469][ T7834] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.527' sets config #0 [ 256.602115][ T7834] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.527' sets config #1 [ 256.908864][ T7839] TCP: tcp_parse_options: Illegal window scaling value 255 > 14 received [ 256.964164][ T5932] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 257.164185][ T5932] usb 4-1: Using ep0 maxpacket: 8 [ 257.248116][ T5932] usb 4-1: unable to get BOS descriptor or descriptor too short [ 257.260519][ T5932] usb 4-1: config 8 has an invalid interface number: 238 but max is 2 [ 257.269048][ T5932] usb 4-1: config 8 has an invalid interface number: 230 but max is 2 [ 257.277469][ T5932] usb 4-1: config 8 has no interface number 0 [ 257.294153][ T5932] usb 4-1: config 8 has no interface number 1 [ 257.300434][ T5932] usb 4-1: config 8 interface 238 has no altsetting 0 [ 257.311349][ T5932] usb 4-1: config 8 interface 230 has no altsetting 0 [ 257.318952][ T5932] usb 4-1: config 8 interface 2 has no altsetting 0 [ 257.328653][ T5932] usb 4-1: New USB device found, idVendor=0582, idProduct=0050, bcdDevice=b3.d9 [ 257.360122][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.372396][ T5932] usb 4-1: Product: syz [ 257.377357][ T5932] usb 4-1: Manufacturer: syz [ 257.382107][ T5932] usb 4-1: SerialNumber: syz [ 257.559365][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'. [ 257.707299][ T7854] openvswitch: netlink: Flow key attr not present in new flow. [ 257.804137][ T47] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 257.825780][ T7834] netlink: 44 bytes leftover after parsing attributes in process `syz.3.527'. [ 257.838199][ T7834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.527'. [ 257.961473][ T5932] usb 4-1: selecting invalid altsetting 0 [ 258.082023][ T5932] usb 4-1: USB disconnect, device number 23 [ 258.101575][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 258.112128][ T47] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 258.120966][ T47] usb 2-1: config 0 has no interface number 0 [ 258.160727][ T47] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 258.189577][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.198784][ T47] usb 2-1: Product: syz [ 258.203178][ T47] usb 2-1: Manufacturer: syz [ 258.211072][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.238/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.250025][ T47] usb 2-1: SerialNumber: syz [ 258.259299][ T47] usb 2-1: config 0 descriptor?? [ 258.272251][ T47] smsc95xx v2.0.0 [ 259.844609][ T1207] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 260.017734][ T7878] netlink: 20 bytes leftover after parsing attributes in process `syz.4.540'. [ 260.034119][ T1207] usb 4-1: Using ep0 maxpacket: 32 [ 260.038152][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.540'. [ 260.041833][ T1207] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 260.083349][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 260.094737][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 260.106095][ T1207] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 260.115354][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.124206][ T5890] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 260.145778][ T1207] usb 4-1: config 0 descriptor?? [ 260.152813][ T7871] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 260.180891][ T1207] hub 4-1:0.0: USB hub found [ 260.295029][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 260.330244][ T5890] usb 1-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice= 8.e8 [ 260.357284][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.366792][ T5890] usb 1-1: Product: syz [ 260.371621][ T5890] usb 1-1: Manufacturer: syz [ 260.377242][ T5890] usb 1-1: SerialNumber: syz [ 260.392485][ T5890] usb 1-1: config 0 descriptor?? [ 260.458438][ T1207] hub 4-1:0.0: 6 ports detected [ 260.464742][ T1207] hub 4-1:0.0: insufficient power available to use all downstream ports [ 260.704130][ T47] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 260.739350][ T5932] usb 1-1: USB disconnect, device number 10 [ 260.787986][ T1207] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 260.849117][ T1207] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 260.896227][ T47] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 260.904622][ T1207] usbhid 4-1:0.0: can't add hid device: -71 [ 260.915910][ T1207] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 260.948003][ T47] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 260.970355][ T1207] usb 4-1: USB disconnect, device number 24 [ 261.082747][ T47] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 261.122010][ T47] usb 2-1: USB disconnect, device number 26 [ 261.428606][ T7893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.464196][ T47] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 261.668214][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 261.692142][ T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.722790][ T47] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 261.750104][ T47] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 261.817999][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.874768][ T47] usb 2-1: config 0 descriptor?? [ 262.177514][ T7891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.328263][ T7891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.573192][ T47] usb 2-1: USB disconnect, device number 27 [ 262.603224][ T7906] netlink: 20 bytes leftover after parsing attributes in process `syz.2.549'. [ 262.644193][ T5932] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 262.887028][ T5932] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 262.899475][ T5932] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.918986][ T7914] sctp: [Deprecated]: syz.1.550 (pid 7914) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.918986][ T7914] Use struct sctp_sack_info instead [ 262.984169][ T5932] usb 5-1: config 0 has no interface number 0 [ 263.030798][ T5932] usb 5-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 263.084854][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.130384][ T5932] usb 5-1: config 0 descriptor?? [ 263.183969][ T5932] rndis_host 5-1:0.9: More than one union descriptor, skipping ... [ 263.192617][ T5932] usb 5-1: bad CDC descriptors [ 263.201398][ T5932] cdc_acm 5-1:0.9: More than one union descriptor, skipping ... [ 263.478249][ T47] usb 5-1: USB disconnect, device number 30 [ 265.024394][ T5938] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 265.121834][ T47] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 265.239189][ T5938] usb 5-1: Using ep0 maxpacket: 8 [ 265.247014][ T5938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.258533][ T5938] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 265.273094][ T5938] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 265.279524][ T47] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 265.287067][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.291805][ T47] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.309294][ T47] usb 1-1: config 0 has no interface number 0 [ 265.318191][ T5938] usb 5-1: Product: syz [ 265.322600][ T5938] usb 5-1: Manufacturer: syz [ 265.327724][ T47] usb 1-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 265.334849][ T5938] usb 5-1: SerialNumber: syz [ 265.340789][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.346775][ T5938] usb 5-1: config 0 descriptor?? [ 265.384811][ T47] usb 1-1: config 0 descriptor?? [ 265.407164][ T47] rndis_host 1-1:0.9: More than one union descriptor, skipping ... [ 265.419670][ T47] usb 1-1: bad CDC descriptors [ 265.428563][ T47] cdc_acm 1-1:0.9: More than one union descriptor, skipping ... [ 265.464315][ T5932] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 265.575976][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.553'. [ 265.595443][ T7929] dummy0: entered promiscuous mode [ 265.600956][ T7929] macvtap1: entered promiscuous mode [ 265.606676][ T7929] macvtap1: entered allmulticast mode [ 265.612098][ T7929] dummy0: entered allmulticast mode [ 265.614142][ T5932] usb 2-1: Using ep0 maxpacket: 32 [ 265.627235][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.553'. [ 265.632479][ T5932] usb 2-1: config 8 has an invalid interface number: 203 but max is 0 [ 265.648828][ T5932] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 265.659659][ T5932] usb 2-1: config 8 has no interface number 0 [ 265.660078][ T7929] dummy0: left allmulticast mode [ 265.673923][ T5932] usb 2-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 265.686650][ T5932] usb 2-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 265.686665][ T7929] dummy0: left promiscuous mode [ 265.697685][ T5932] usb 2-1: config 8 interface 203 altsetting 1 endpoint 0x8B has invalid wMaxPacketSize 0 [ 265.712800][ T5932] usb 2-1: config 8 interface 203 altsetting 1 bulk endpoint 0x8B has invalid maxpacket 0 [ 265.723587][ T5932] usb 2-1: config 8 interface 203 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.725354][ T7941] netlink: 28 bytes leftover after parsing attributes in process `syz.4.553'. [ 265.737713][ T5932] usb 2-1: config 8 interface 203 has no altsetting 0 [ 265.757076][ T5932] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 265.767314][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 265.778111][ T5932] usb 2-1: Product: syz [ 265.782546][ T5932] usb 2-1: Manufacturer: syz [ 265.788174][ T5932] usb 2-1: SerialNumber: syz [ 265.798999][ T7934] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 265.894366][ T7945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.904658][ T7945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.934966][ T7941] dummy0: entered promiscuous mode [ 265.953787][ T7941] dummy0: entered allmulticast mode [ 265.965086][ T7941] macvtap1: left promiscuous mode [ 265.970802][ T7941] macvtap1: left allmulticast mode [ 265.976433][ T7941] dummy0: left allmulticast mode [ 266.032084][ T47] usb 5-1: USB disconnect, device number 31 [ 266.173544][ T5932] port100 2-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint [ 266.226331][ T5932] usb 2-1: USB disconnect, device number 28 [ 266.257914][ T7950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.309257][ T7950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.372616][ T7956] netlink: 36 bytes leftover after parsing attributes in process `syz.3.560'. [ 267.005038][ T7959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'. [ 267.253080][ T7965] FAULT_INJECTION: forcing a failure. [ 267.253080][ T7965] name failslab, interval 1, probability 0, space 0, times 0 [ 267.274900][ T7965] CPU: 0 UID: 0 PID: 7965 Comm: syz.3.563 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 267.274933][ T7965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 267.274947][ T7965] Call Trace: [ 267.274955][ T7965] [ 267.274964][ T7965] dump_stack_lvl+0x189/0x250 [ 267.275007][ T7965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.275039][ T7965] ? __pfx__printk+0x10/0x10 [ 267.275066][ T7965] ? __pfx___might_resched+0x10/0x10 [ 267.275086][ T7965] ? fs_reclaim_acquire+0x7d/0x100 [ 267.275124][ T7965] should_fail_ex+0x414/0x560 [ 267.275151][ T7965] ? xt_alloc_table_info+0x3b/0xa0 [ 267.275179][ T7965] should_failslab+0xa8/0x100 [ 267.275209][ T7965] __kvmalloc_node_noprof+0x168/0x5e0 [ 267.275240][ T7965] ? xt_alloc_table_info+0x3b/0xa0 [ 267.275281][ T7965] xt_alloc_table_info+0x3b/0xa0 [ 267.275310][ T7965] do_ip6t_set_ctl+0x8ea/0xce0 [ 267.275345][ T7965] ? rcu_is_watching+0x15/0xb0 [ 267.275364][ T7965] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 267.275398][ T7965] ? nf_setsockopt+0x221/0x290 [ 267.275430][ T7965] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 267.275477][ T7965] ? __pfx_aa_sk_perm+0x10/0x10 [ 267.275507][ T7965] nf_setsockopt+0x26f/0x290 [ 267.275537][ T7965] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 267.275564][ T7965] do_sock_setsockopt+0x25a/0x3e0 [ 267.275597][ T7965] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 267.275624][ T7965] ? __fget_files+0x2a/0x420 [ 267.275658][ T7965] ? __fget_files+0x3a0/0x420 [ 267.275685][ T7965] ? __fget_files+0x2a/0x420 [ 267.275722][ T7965] __ia32_sys_setsockopt+0x18b/0x220 [ 267.275759][ T7965] __do_fast_syscall_32+0xb4/0x110 [ 267.275790][ T7965] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.275822][ T7965] do_fast_syscall_32+0x34/0x80 [ 267.275851][ T7965] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.275877][ T7965] RIP: 0023:0xf70ce539 [ 267.275895][ T7965] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 267.275914][ T7965] RSP: 002b:00000000f50be55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 267.275936][ T7965] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 267.275950][ T7965] RDX: 0000000000000040 RSI: 0000000080000340 RDI: 00000000000002d4 [ 267.275964][ T7965] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.275976][ T7965] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 267.275988][ T7965] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.276018][ T7965] [ 267.533750][ C0] vkms_vblank_simulate: vblank timer overrun [ 267.892671][ T7973] openvswitch: netlink: Flow key attr not present in new flow. [ 267.900718][ T5836] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 268.096012][ T47] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 268.103726][ T5836] usb 5-1: device descriptor read/64, error -71 [ 268.141701][ T5932] usb 1-1: USB disconnect, device number 11 [ 268.286652][ T47] usb 2-1: config 0 has an invalid interface number: 9 but max is 0 [ 268.296290][ T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.307360][ T47] usb 2-1: config 0 has no interface number 0 [ 268.313539][ T47] usb 2-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 268.322905][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.334324][ T47] usb 2-1: config 0 descriptor?? [ 268.347374][ T47] rndis_host 2-1:0.9: More than one union descriptor, skipping ... [ 268.363701][ T47] usb 2-1: bad CDC descriptors [ 268.368903][ T5836] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 268.380418][ T47] cdc_acm 2-1:0.9: More than one union descriptor, skipping ... [ 268.514770][ T5836] usb 5-1: device descriptor read/64, error -71 [ 268.534622][ T5932] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 268.558361][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.567'. [ 268.627816][ T5836] usb usb5-port1: attempt power cycle [ 268.641557][ T5893] usb 2-1: USB disconnect, device number 29 [ 268.712245][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.742200][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.779926][ T5932] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 268.834249][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.867458][ T5932] usb 1-1: config 0 descriptor?? [ 268.887719][ T5932] gspca_main: spca501-2.14.0 probing 0000:0000 [ 269.004227][ T5836] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 269.073478][ T5836] usb 5-1: device descriptor read/8, error -71 [ 269.404217][ T5836] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 269.460828][ T5836] usb 5-1: device descriptor read/8, error -71 [ 269.587866][ T5836] usb usb5-port1: unable to enumerate USB device [ 269.632561][ T5932] gspca_spca501: reg write: error -71 [ 269.643136][ T5932] spca501 1-1:0.0: Reg write failed for 0x05,0x22,0x04 [ 269.689697][ T5932] spca501 1-1:0.0: probe with driver spca501 failed with error -22 [ 269.729594][ T5932] usbhid 1-1:0.0: can't add hid device: -71 [ 269.744367][ T5932] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 269.760408][ T5932] usb 1-1: USB disconnect, device number 12 [ 270.499843][ T8002] netlink: 'syz.1.575': attribute type 33 has an invalid length. [ 270.529998][ T8002] netlink: 152 bytes leftover after parsing attributes in process `syz.1.575'. [ 271.515031][ T8013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.545905][ T8013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.614107][ T5836] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 271.869152][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 271.964537][ T5836] usb 5-1: Using ep0 maxpacket: 16 [ 272.077300][ T8015] syzkaller1: entered promiscuous mode [ 272.099218][ T8015] syzkaller1: entered allmulticast mode [ 272.109448][ T5836] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.138706][ T5836] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 272.204074][ T5836] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 272.215966][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.373909][ T5836] usb 5-1: config 0 descriptor?? [ 272.805177][ T8014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.995434][ T8014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.053118][ T47] usb 5-1: USB disconnect, device number 36 [ 274.152476][ T8042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.586'. [ 274.544543][ T5893] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 274.704521][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 274.719538][ T5893] usb 1-1: config index 0 descriptor too short (expected 146, got 18) [ 274.742910][ T5893] usb 1-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 274.752577][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.761066][ T5893] usb 1-1: Product: syz [ 274.765860][ T5893] usb 1-1: Manufacturer: syz [ 274.824651][ T5893] usb 1-1: SerialNumber: syz [ 274.837374][ T5893] usb 1-1: config 0 descriptor?? [ 275.078721][ T5893] usb 1-1: USB disconnect, device number 13 [ 275.931824][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.523504][ T8082] FAULT_INJECTION: forcing a failure. [ 276.523504][ T8082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.602535][ T8082] CPU: 1 UID: 0 PID: 8082 Comm: syz.0.595 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 276.602568][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 276.602582][ T8082] Call Trace: [ 276.602591][ T8082] [ 276.602600][ T8082] dump_stack_lvl+0x189/0x250 [ 276.602641][ T8082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.602672][ T8082] ? __pfx__printk+0x10/0x10 [ 276.602708][ T8082] should_fail_ex+0x414/0x560 [ 276.602737][ T8082] _copy_to_user+0x31/0xb0 [ 276.602771][ T8082] simple_read_from_buffer+0xe1/0x170 [ 276.602803][ T8082] proc_fail_nth_read+0x1df/0x250 [ 276.602836][ T8082] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 276.602872][ T8082] ? rw_verify_area+0x258/0x650 [ 276.602897][ T8082] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 276.602930][ T8082] vfs_read+0x1fd/0x980 [ 276.602961][ T8082] ? __pfx___mutex_lock+0x10/0x10 [ 276.602991][ T8082] ? __pfx_vfs_read+0x10/0x10 [ 276.603018][ T8082] ? __fget_files+0x2a/0x420 [ 276.603051][ T8082] ? __fget_files+0x3a0/0x420 [ 276.603078][ T8082] ? __fget_files+0x2a/0x420 [ 276.603117][ T8082] ksys_read+0x145/0x250 [ 276.603145][ T8082] ? __pfx_ksys_read+0x10/0x10 [ 276.603172][ T8082] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 276.603221][ T8082] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.603250][ T8082] __do_fast_syscall_32+0xb4/0x110 [ 276.603282][ T8082] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.603313][ T8082] do_fast_syscall_32+0x34/0x80 [ 276.603343][ T8082] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 276.603369][ T8082] RIP: 0023:0xf7fd7539 [ 276.603387][ T8082] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 276.603419][ T8082] RSP: 002b:00000000f50f6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 276.603443][ T8082] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f50f6620 [ 276.603458][ T8082] RDX: 000000000000000f RSI: 00000000f7462ff4 RDI: 0000000000000000 [ 276.603475][ T8082] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 276.603486][ T8082] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 276.603498][ T8082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 276.603529][ T8082] [ 277.684136][ T47] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 277.829800][ T5895] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 277.865502][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.596'. [ 278.034216][ T5893] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 278.161661][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 278.206388][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.242645][ T5895] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 278.293513][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.301713][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 278.329862][ T5893] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 278.366412][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.445578][ T5895] usb 5-1: config 0 descriptor?? [ 278.450942][ T5893] usb 1-1: Product: syz [ 278.461402][ T5893] usb 1-1: Manufacturer: syz [ 278.535925][ T47] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 278.555005][ T47] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 278.565858][ T5893] usb 1-1: SerialNumber: syz [ 278.585534][ T47] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.595317][ T5893] usb 1-1: config 0 descriptor?? [ 278.622386][ T47] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 278.638898][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.672191][ T47] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 278.794632][ T47] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 278.814830][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.891475][ T5895] cypress 0003:04B4:07B1.0008: unknown main item tag 0x0 [ 278.901216][ T8111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.924176][ T5895] cypress 0003:04B4:07B1.0008: unknown main item tag 0x0 [ 278.931337][ T5895] cypress 0003:04B4:07B1.0008: unknown main item tag 0x0 [ 278.950362][ T8111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.959422][ T5895] cypress 0003:04B4:07B1.0008: unknown main item tag 0x0 [ 278.972653][ T5893] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 278.982120][ T5895] cypress 0003:04B4:07B1.0008: unknown main item tag 0x0 [ 279.009314][ T5895] cypress 0003:04B4:07B1.0008: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.4-1/input0 [ 279.399941][ T5895] usb 5-1: USB disconnect, device number 37 [ 279.580137][ T5893] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 279.622605][ T5893] usb 1-1: USB disconnect, device number 14 [ 280.291367][ T24] usb 2-1: USB disconnect, device number 30 [ 280.318727][ T8092] delete_channel: no stack [ 280.562107][ T8130] FAULT_INJECTION: forcing a failure. [ 280.562107][ T8130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.598207][ T8130] CPU: 0 UID: 0 PID: 8130 Comm: syz.3.605 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 280.598243][ T8130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 280.598257][ T8130] Call Trace: [ 280.598265][ T8130] [ 280.598275][ T8130] dump_stack_lvl+0x189/0x250 [ 280.598316][ T8130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.598348][ T8130] ? __pfx__printk+0x10/0x10 [ 280.598392][ T8130] should_fail_ex+0x414/0x560 [ 280.598421][ T8130] _copy_to_user+0x31/0xb0 [ 280.598456][ T8130] simple_read_from_buffer+0xe1/0x170 [ 280.598490][ T8130] proc_fail_nth_read+0x1df/0x250 [ 280.598527][ T8130] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 280.598562][ T8130] ? rw_verify_area+0x258/0x650 [ 280.598586][ T8130] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 280.598620][ T8130] vfs_read+0x1fd/0x980 [ 280.598650][ T8130] ? __pfx___mutex_lock+0x10/0x10 [ 280.598681][ T8130] ? __pfx_vfs_read+0x10/0x10 [ 280.598707][ T8130] ? __fget_files+0x2a/0x420 [ 280.598741][ T8130] ? __fget_files+0x3a0/0x420 [ 280.598769][ T8130] ? __fget_files+0x2a/0x420 [ 280.598808][ T8130] ksys_read+0x145/0x250 [ 280.598834][ T8130] ? __pfx_ksys_read+0x10/0x10 [ 280.598861][ T8130] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 280.598892][ T8130] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.598921][ T8130] __do_fast_syscall_32+0xb4/0x110 [ 280.598952][ T8130] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.598983][ T8130] do_fast_syscall_32+0x34/0x80 [ 280.599013][ T8130] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 280.599039][ T8130] RIP: 0023:0xf70ce539 [ 280.599058][ T8130] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 280.599076][ T8130] RSP: 002b:00000000f50be590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 280.599099][ T8130] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f50be620 [ 280.599114][ T8130] RDX: 000000000000000f RSI: 00000000f7432ff4 RDI: 0000000000000000 [ 280.599127][ T8130] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 280.599140][ T8130] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 280.599152][ T8130] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 280.599183][ T8130] [ 281.124126][ T5893] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 281.274450][ T5893] usb 2-1: device descriptor read/64, error -71 [ 281.441639][ T8135] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[8135] [ 281.534096][ T5893] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 281.634252][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 281.684153][ T5893] usb 2-1: device descriptor read/64, error -71 [ 281.730362][ T8143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.739825][ T8143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.844286][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 281.851810][ T24] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 281.862297][ T24] usb 4-1: config 0 has no interface number 0 [ 281.878586][ T5893] usb usb2-port1: attempt power cycle [ 281.888959][ T24] usb 4-1: config 0 interface 184 has no altsetting 0 [ 281.912713][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 282.039587][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.058932][ T24] usb 4-1: Product: syz [ 282.064590][ T24] usb 4-1: Manufacturer: syz [ 282.069378][ T24] usb 4-1: SerialNumber: syz [ 282.085527][ T24] usb 4-1: config 0 descriptor?? [ 282.110625][ T24] smsc75xx v1.0.0 [ 282.265466][ T5893] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 282.334971][ T5893] usb 2-1: device descriptor read/8, error -71 [ 282.624120][ T5893] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 282.649132][ T8151] netlink: 40 bytes leftover after parsing attributes in process `syz.0.615'. [ 282.695229][ T5893] usb 2-1: device descriptor read/8, error -71 [ 282.805291][ T5893] usb usb2-port1: unable to enumerate USB device [ 283.349350][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 283.557394][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 283.651783][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 283.666521][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 283.748845][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 283.795172][ T24] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 283.848281][ T24] usb 4-1: USB disconnect, device number 25 [ 283.916831][ T8161] dummy0: entered promiscuous mode [ 284.495316][ T8170] FAULT_INJECTION: forcing a failure. [ 284.495316][ T8170] name failslab, interval 1, probability 0, space 0, times 0 [ 284.511846][ T8170] CPU: 1 UID: 0 PID: 8170 Comm: syz.4.620 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 284.511877][ T8170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 284.511890][ T8170] Call Trace: [ 284.511900][ T8170] [ 284.511910][ T8170] dump_stack_lvl+0x189/0x250 [ 284.511952][ T8170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.511983][ T8170] ? __pfx__printk+0x10/0x10 [ 284.512016][ T8170] ? __pfx___might_resched+0x10/0x10 [ 284.512035][ T8170] should_fail_ex+0x414/0x560 [ 284.512062][ T8170] should_failslab+0xa8/0x100 [ 284.512096][ T8170] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 284.512124][ T8170] ? trace_rpm_usage+0x7e/0x1f0 [ 284.512146][ T8170] ? __alloc_skb+0x112/0x2d0 [ 284.512168][ T8170] ? __pfx_nsim_get_coalesce+0x10/0x10 [ 284.512190][ T8170] __alloc_skb+0x112/0x2d0 [ 284.512219][ T8170] ethnl_default_notify+0x4a4/0x990 [ 284.512256][ T8170] ? __pfx_ethnl_default_notify+0x10/0x10 [ 284.512303][ T8170] ? mutex_is_locked+0x17/0x50 [ 284.512318][ T8170] ? rtnl_is_locked+0x15/0x20 [ 284.512343][ T8170] ethnl_default_set_doit+0x64e/0xa20 [ 284.512380][ T8170] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 284.512414][ T8170] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 284.512458][ T8170] genl_family_rcv_msg_doit+0x212/0x300 [ 284.512488][ T8170] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 284.512529][ T8170] ? bpf_lsm_capable+0x9/0x20 [ 284.512561][ T8170] ? security_capable+0x7e/0x2e0 [ 284.512592][ T8170] genl_rcv_msg+0x60e/0x790 [ 284.512627][ T8170] ? __pfx_genl_rcv_msg+0x10/0x10 [ 284.512648][ T8170] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 284.512672][ T8170] ? ref_tracker_free+0x63a/0x7d0 [ 284.512696][ T8170] ? __copy_skb_header+0xa7/0x550 [ 284.512738][ T8170] netlink_rcv_skb+0x219/0x490 [ 284.512765][ T8170] ? __pfx_genl_rcv_msg+0x10/0x10 [ 284.512789][ T8170] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 284.512830][ T8170] ? down_read+0x1ad/0x2e0 [ 284.512869][ T8170] genl_rcv+0x28/0x40 [ 284.512897][ T8170] netlink_unicast+0x75b/0x8d0 [ 284.512936][ T8170] netlink_sendmsg+0x805/0xb30 [ 284.512975][ T8170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.513012][ T8170] ? __import_iovec+0x5d4/0x7f0 [ 284.513041][ T8170] ? aa_sock_msg_perm+0x94/0x160 [ 284.513069][ T8170] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 284.513094][ T8170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.513120][ T8170] __sock_sendmsg+0x219/0x270 [ 284.513147][ T8170] ____sys_sendmsg+0x505/0x830 [ 284.513185][ T8170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.513231][ T8170] ___sys_sendmsg+0x21f/0x2a0 [ 284.513254][ T8170] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.513322][ T8170] ? __fget_files+0x2a/0x420 [ 284.513350][ T8170] ? __fget_files+0x3a0/0x420 [ 284.513387][ T8170] __sys_sendmsg+0x164/0x220 [ 284.513409][ T8170] ? __pfx___sys_sendmsg+0x10/0x10 [ 284.513450][ T8170] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 284.513483][ T8170] ? lockdep_hardirqs_on+0x9c/0x150 [ 284.513512][ T8170] __do_fast_syscall_32+0xb4/0x110 [ 284.513540][ T8170] ? lockdep_hardirqs_on+0x9c/0x150 [ 284.513564][ T8170] do_fast_syscall_32+0x34/0x80 [ 284.513587][ T8170] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 284.513615][ T8170] RIP: 0023:0xf7f43539 [ 284.513633][ T8170] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 284.513651][ T8170] RSP: 002b:00000000f504555c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 284.513672][ T8170] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000540 [ 284.513688][ T8170] RDX: 0000000000088010 RSI: 0000000000000000 RDI: 0000000000000000 [ 284.513697][ T8170] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 284.513705][ T8170] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 284.513714][ T8170] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 284.513735][ T8170] [ 284.665697][ T5893] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 284.665901][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.906156][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.977246][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 285.074448][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 285.092743][ T5893] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 285.102167][ T5893] usb 2-1: config 0 has no interface number 0 [ 285.118684][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.622'. [ 285.120187][ T5893] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 285.128152][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.622'. [ 285.148420][ T24] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 285.148891][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.156688][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.156714][ T24] usb 4-1: config 0 has no interface number 0 [ 285.157604][ T24] usb 4-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 285.190820][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.215576][ T24] usb 4-1: config 0 descriptor?? [ 285.223060][ T24] rndis_host 4-1:0.9: More than one union descriptor, skipping ... [ 285.226962][ T5893] usb 2-1: Product: syz [ 285.231104][ T24] usb 4-1: bad CDC descriptors [ 285.240704][ T24] cdc_acm 4-1:0.9: More than one union descriptor, skipping ... [ 285.250910][ T5893] usb 2-1: Manufacturer: syz [ 285.265343][ T5893] usb 2-1: SerialNumber: syz [ 285.332898][ T8177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.365235][ T5893] usb 2-1: config 0 descriptor?? [ 285.404959][ T5893] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 285.441572][ T8177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.484860][ T8173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.513813][ T8173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.773267][ T5893] gspca_spca1528: reg_w err -71 [ 285.823017][ T8198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.837006][ T8198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.905349][ T5893] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 285.946439][ T5893] usb 2-1: USB disconnect, device number 35 [ 286.008021][ T8204] netlink: 72 bytes leftover after parsing attributes in process `syz.1.627'. [ 286.295020][ T8209] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 286.305152][ T5893] IPVS: starting estimator thread 0... [ 286.465325][ T8211] IPVS: using max 29 ests per chain, 69600 per kthread [ 286.854677][ T5895] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 286.980119][ T8218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.632'. [ 287.068710][ T8218] batadv0: entered promiscuous mode [ 287.103415][ T8218] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 287.140714][ T8218] batadv0: left promiscuous mode [ 287.204123][ T5893] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 287.790566][ T5893] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 287.803918][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 287.855792][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 287.877864][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 287.914263][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 287.927580][ T5893] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 287.937468][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.974651][ T5893] usb 2-1: config 0 descriptor?? [ 287.986830][ T8223] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 288.644313][ T8229] netlink: zone id is out of range [ 288.969265][ T5895] usb 1-1: unable to get BOS descriptor or descriptor too short [ 288.979805][ T5895] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 288.994279][ T5895] usb 1-1: can't read configurations, error -71 [ 289.024386][ T31] INFO: task kworker/0:3:5891 blocked for more than 143 seconds. [ 289.038110][ T31] Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 [ 289.086416][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.149769][ T31] task:kworker/0:3 state:D stack:22232 pid:5891 tgid:5891 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 289.234029][ T31] Workqueue: usb_hub_wq hub_event [ 289.251411][ T31] Call Trace: [ 289.260745][ T31] [ 289.268401][ T31] __schedule+0x16e2/0x4cd0 [ 289.320104][ T31] ? schedule+0x165/0x360 [ 289.523092][ T31] ? __pfx___schedule+0x10/0x10 [ 289.702598][ T31] ? schedule+0x91/0x360 [ 289.721416][ T31] schedule+0x165/0x360 [ 289.734126][ T31] schedule_timeout+0x9a/0x270 [ 289.742380][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 289.763953][ T31] ? wait_for_completion+0x267/0x5d0 [ 289.781839][ T31] wait_for_completion+0x2bf/0x5d0 [ 289.794327][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 289.812038][ T31] pn533_usb_send_frame+0x2d8/0x560 [ 289.834288][ T31] ? __pfx_pn533_usb_send_frame+0x10/0x10 [ 289.840153][ T31] ? pn533_std_tx_frame_finish+0x303/0x3b0 [ 289.856011][ T31] __pn533_send_async+0x41f/0x5f0 [ 289.869970][ T31] pn533_finalize_setup+0x231/0x760 [ 289.888573][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.895625][ T31] ? __pfx_pn533_finalize_setup+0x10/0x10 [ 289.901692][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 289.916030][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 289.927422][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 289.937584][ T31] ? pn53x_common_init+0x95b/0xa90 [ 289.947985][ T31] pn533_usb_probe+0xe56/0x1150 [ 289.982915][ T31] ? __pfx_pn533_usb_probe+0x10/0x10 [ 290.018905][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 290.027454][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 290.038367][ T31] ? __update_runtime_status+0x1b3/0x390 [ 290.046049][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 290.094931][ T31] usb_probe_interface+0x641/0xbc0 [ 290.100292][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 290.106255][ T31] really_probe+0x26a/0x9a0 [ 290.110907][ T31] __driver_probe_device+0x18c/0x2f0 [ 290.116983][ T31] driver_probe_device+0x4f/0x430 [ 290.122095][ T31] __device_attach_driver+0x2ce/0x530 [ 290.128072][ T31] bus_for_each_drv+0x251/0x2e0 [ 290.133729][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 290.141800][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 290.149783][ T31] __device_attach+0x2b8/0x400 [ 290.157344][ T31] ? __pfx___device_attach+0x10/0x10 [ 290.162812][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 290.173419][ T31] bus_probe_device+0x185/0x260 [ 290.181196][ T31] device_add+0x7b6/0xb50 [ 290.197107][ T31] usb_set_configuration+0x1a87/0x20e0 [ 290.206929][ T31] usb_generic_driver_probe+0x8d/0x150 [ 290.212585][ T31] usb_probe_device+0x1c4/0x390 [ 290.223602][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 290.233807][ T31] really_probe+0x26a/0x9a0 [ 290.240859][ T31] __driver_probe_device+0x18c/0x2f0 [ 290.245946][ T5895] usb 4-1: USB disconnect, device number 26 [ 290.249219][ T31] driver_probe_device+0x4f/0x430 [ 290.259499][ T31] __device_attach_driver+0x2ce/0x530 [ 290.269256][ T31] bus_for_each_drv+0x251/0x2e0 [ 290.280542][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 290.289441][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 290.296936][ T31] __device_attach+0x2b8/0x400 [ 290.301882][ T31] ? __pfx___device_attach+0x10/0x10 [ 290.318132][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 290.330091][ T31] bus_probe_device+0x185/0x260 [ 290.340487][ T31] device_add+0x7b6/0xb50 [ 290.345118][ T31] usb_new_device+0xa39/0x16c0 [ 290.349945][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 290.355644][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.360895][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.366234][ T31] hub_event+0x2941/0x4a00 [ 290.370758][ T31] ? __pfx_hub_event+0x10/0x10 [ 290.375629][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 290.381445][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.386856][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 290.392621][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 290.398543][ T31] process_scheduled_works+0xade/0x17a0 [ 290.404298][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 290.410431][ T31] worker_thread+0x8a0/0xda0 [ 290.416703][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 290.423111][ T31] ? __kthread_parkme+0x7b/0x200 [ 290.428425][ T31] kthread+0x711/0x8a0 [ 290.432552][ T31] ? __pfx_worker_thread+0x10/0x10 [ 290.437789][ T31] ? __pfx_kthread+0x10/0x10 [ 290.442442][ T31] ? __pfx_kthread+0x10/0x10 [ 290.447139][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.452410][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.457789][ T31] ? __pfx_kthread+0x10/0x10 [ 290.462424][ T31] ret_from_fork+0x4b/0x80 [ 290.467166][ T31] ? __pfx_kthread+0x10/0x10 [ 290.471811][ T31] ret_from_fork_asm+0x1a/0x30 [ 290.476760][ T31] [ 290.479853][ T31] [ 290.479853][ T31] Showing all locks held in the system: [ 290.500426][ T31] 2 locks held by kworker/u8:1/13: [ 290.519788][ T31] #0: ffff888143eab148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 290.542886][ T31] #1: ffff8880b8823b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 290.554819][ T31] 1 lock held by khungtaskd/31: [ 290.559731][ T31] #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 290.570100][ T31] 2 locks held by getty/5593: [ 290.575071][ T31] #0: ffff88803029c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 290.585708][ T31] #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 290.596240][ T31] 6 locks held by kworker/0:3/5891: [ 290.601629][ T31] #0: ffff8881442f0148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 290.614116][ T31] #1: ffffc90004f6fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 290.626356][ T31] #2: ffff888027f94198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 290.635764][ T31] #3: ffff8880587e0198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 290.645469][ T31] #4: ffff88805adb5160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 290.654877][ T31] #5: ffff88805adb6438 (&priv->cmd_lock){+.+.}-{4:4}, at: __pn533_send_async+0x25a/0x5f0 [ 290.664945][ T31] 5 locks held by kworker/0:5/5893: [ 290.670189][ T31] #0: ffff8881442f0148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 290.681716][ T31] #1: ffffc90004f8fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 290.693825][ T31] #2: ffff888027f13198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 290.702861][ T31] #3: ffff88807ca48198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 290.712236][ T31] #4: ffff888059130160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 290.721694][ T31] 4 locks held by udevd/5941: [ 290.726481][ T31] #0: ffff88807d45ae80 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 290.735431][ T31] #1: ffff88807c249488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 290.744966][ T31] #2: ffff888024dda878 (kn->active#25){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 290.754834][ T31] #3: ffff8880587e0198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 290.764429][ T31] 1 lock held by syz.1.630/8219: [ 290.769403][ T31] #0: ffffffff8df43680 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 290.779577][ T31] [ 290.781938][ T31] ============================================= [ 290.781938][ T31] [ 290.790640][ T31] NMI backtrace for cpu 1 [ 290.790656][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 290.790719][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.790732][ T31] Call Trace: [ 290.790741][ T31] [ 290.790750][ T31] dump_stack_lvl+0x189/0x250 [ 290.790785][ T31] ? __wake_up_klogd+0xd9/0x110 [ 290.790815][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.790847][ T31] ? __pfx__printk+0x10/0x10 [ 290.790882][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 290.790909][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 290.790928][ T31] ? _printk+0xcf/0x120 [ 290.790954][ T31] ? __pfx__printk+0x10/0x10 [ 290.790978][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 290.791004][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 290.791030][ T31] watchdog+0xfee/0x1030 [ 290.791060][ T31] ? watchdog+0x1de/0x1030 [ 290.791097][ T31] kthread+0x711/0x8a0 [ 290.791128][ T31] ? __pfx_watchdog+0x10/0x10 [ 290.791156][ T31] ? __pfx_kthread+0x10/0x10 [ 290.791184][ T31] ? __pfx_kthread+0x10/0x10 [