last executing test programs: 11.669292978s ago: executing program 1 (id=2610): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x109002) r3 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000440)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '%'}], 0xa, "2357769680005ce8a84a9afe743f80c68c2364ee1244a17406af4c9436622428e93d625c366b67a3e57e72ef381cf38a0be272426018f57fb09d2bf4e03f637a03dab0cc1a42"}, 0xc1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000000c0)=0x81) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) socket$key(0xf, 0x3, 0x2) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) fcntl$setstatus(r2, 0x4, 0x400) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0xc8, 0x2}) futex(0x0, 0x86, 0x0, &(0x7f00000002c0), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x6010200, 0x0, 0x7, 0x4, 0x9}}, 0x50) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x4e, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x400) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x5, 0x9, 0xe55, 0x6, 0x2, 0x1040, 0x4, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x5, 0x6a], 0x1, 0x1000d6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10.785473864s ago: executing program 1 (id=2614): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x7) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2384, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a"], 0xd8}}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x18000, 0xcd) 10.054093417s ago: executing program 4 (id=2618): unshare(0x62040200) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'filter\x00', 0x7003, [0x0, 0x0, 0x0, 0x0, 0xffffffff]}, &(0x7f0000000100)=0x54) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x68) 7.645669559s ago: executing program 4 (id=2624): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001340)={&(0x7f00000e6000/0x1000)=nil, &(0x7f0000478000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000010b000/0x3000)=nil, &(0x7f0000a22000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00006de000/0x1000)=nil, &(0x7f000016d000/0x3000)=nil, &(0x7f0000958000/0x2000)=nil, &(0x7f00004cd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000340)="a613aa81f829e27f8503b319fcb8148ccc32f25c4b27f54b1babd77e01cbfdc54e9f1142745a176e87807ef85b7610345606785d9499cd462b5ade5154b51bc71bc4d52538fc94a33f67ccdb760a1585e523cbc028079486e29bcc2c6ce7b1e3e4d547b50bc72dcf60c8cf406f0f3f925509f8ae8025f3841c103a464b5ba155b553f4a1a641257375c0e7f957923683f4f70879693fc57677dbc288320b843201de17e2cc3275736af146346598ab3218b381dd7fb3c94f60ac70d62f6c084f9e8bf3e8f9a901eca23869fadda6792f65ef28682f4929bb7f3bc861a81c413cfe5d096270a98a11316d005e7146a80cb085b5e7d8ba9ef9b82b06934e7d42c489d68fbbbd8e73143470773d99f955c109661fdabd100aade78a45a7a16661d1629496c7f994b897d1fcc174dfc267d4732f44a44dd55751337e8ac169a0830430241cb9e43eb80766e02c6db9851f291e75e1bd47ab4ca263157f417d2d36a7857d03d926f7294a6603ef21e18d712944f97b7e11872647c9bebf244ea0d53c7214bac553f57b8815b0f3327767403a7b50e7075028d02e417f10fc2280fb957aa13a850b0523ea810e30f0fbc665faa0e739ed353054d75b09598ec625b0af6e5a9b16b3c3306106b93cded0a2b6823e99b9329346326ce5161e2de604aa525bca438ed98d6c773e5d0f5d90a53bda1a0ac1eef0e12b3389fe9684f86360bf931dd783ed7a00c89ec2b60f13ee511d99ca6275ff0b9ffc29bdffbd887a0c17d8de4c62c558821765b7217bf554c8849f1f266eb33fb7362525f862ac24640601848b0fc0316e2470ae888073185a4be6454b50ab79755d2679caf34c769fc63cc8f7d9e72a2ad1a6172e7cf992ba02da77d94e001b4245f63d81f0eddf53c0c8563cefd929f5aec848b61a9a5ed42c43ea714e5f213ca7e3f40147e7922f5cff51762004e5cc0f950d5a86073806e1b84662638c9f8b06864d3a9dd7aca949cfe89c45b56300b5a02b4ac99e05b806b867081b3ba7474c7141ff883971f76cd5323a5f74b8b9a82dcc1075c01d879e496343adce9e04e45301e5416814d73db832ed8e2065559524cf33fc1ca496797315fb5636b7ca61750e98e67b1c3eefa98db35b1e01f7413593b7dd6401aa720600477cabee1302532d18c9973790c6e1a88296183d50e8a4258469a95530158cb76c64c95f2b274f7741d6fdb6dce322760108df1f8daacd9eb663eca137a92c5ca2b4e9f1d7115cebbed0e25b631c96713fd3e3b9b21442b8b261b354b3c6ef0dfb89c5317a292c530a20bb1e6305505fa3568c1728a2871061bbcd06bb4dd2e00ebdcb50883025144ed7b43ddf8b5ebc1f885ab6eaf109756f1c2b49d5ee424a67aeccdbaaca735f4f996974422b1a732d5c10b62f5cfc657376ef7aac72bdbd3a8b8844e6fb273dc932f6bcb3024084e84fb2f18985f284f1e007cd0e7824f21f23be743db19f7e5ef922cd5404d30e2baf196618d11ab2ed6888329e7c8962bf46a1516ddc5853c19ee10e53053c4a8e200a1866515f628ba96fd311abd1a29772784370d9e63aa97dcd0a15c433633a59dfca28cae9068754c54ed376ad84eb01147f1bb767cc5c3fdef8b80f8879be670c6c083cc97d67b424aadf023bbddff2129bf0d8393a1a5f86185bb54a7b1cbbbb3355ebd7b4d37e3915694a4a9cb04fcf02754f1c5103ad316cccf815c9baf5e7f5212e475490486a6e40b903370a20a49dfbe12f8b665cfc7e0a9e447e3a40d7c28973132a7aeaf73ea085158bc18c7d4d5d1250fead5b081fd7abc333dd3e7155547c0881c4d06bfc9d6c49a3e775ee3ef80fd32d21c98cb117de60c037d487bf2adedce947fcffdad30c6bdb29665661b38a12193a27d97f9f73afc3c133fe5bfa9aa968c982bc69ad9d6880f75cbf0efdb95345a4f3bd4610caddbf30b8d8cdd995a91a37c621638388da2eba7010a92b9dd981ec0270043e7c0360df0a020bc1504b1faac040886abf10cff56a561f6e5b6ae247feecb471c0abbd53f72f628394fdbea4c4b4b72ee76db7dfe61be65ba562188bd03416f98cc14ca5906f5dac42edd2b5f04e6916f954b87ea3e6be067e1a062473a3cd8bd72b420beed957b23d99e1ec1ab1af45f9ab3f08007251ebb5c61d4b35095b43f1e5b9e24ea4a6f0e523b2b97a62c46caa8bd2f1a88ef9857a915759780e4a88fc28682c422bd92f018543494d1262a05a29c76e04af31899d3e2c83b0704205ed7f99383a1d86bdb0ef868f2aa185f15c30e94f4a78e55621d7729bc03e6f6cee2151cfaa4e4894ef3e4526abc1ccbe34bcfce3ef2d157f7813071459937568569606ded4d7297a454fc6ea74350e81c7dfc3a7815c6fe819a40dbe8bcf948da7099ef00082bc71cdbef58bb6d2fd6043624230cc3ba03c6acea73b72ceca7c614ba710beb043b144abe96d511f088da610ad4db90f8b15140f4a1193e807799e73121f8b10effbd0fb81ba491d83d0c7940a341d89c92fec78b44072330c659075c8fbc334c73dc36a9a9b844a73a58e8d9609b15119f60c372660ebe72ebd817445c7d89eb027cccf22a0c3e74e048b343388d0e027ba5e8ceb9f45cb1c00e5d9630846c639a59dc8b8177bee11c71b794125b5887b990dae9de298497930b5900e28c09fcd615fa39b4306bcdbdcb59108c7bee84657671c600fb35dd8ab1ff5f4d16aaf57f45b625a0413346782d432c06d34358bb38d5f8aedc4f4d482308ba1f7a5dc560991826e8f7bf57c31f62801fbaf0e7f76c51262e849fde2c83d0293fa08991435e585066e5cd65152569006182168dce08ac598ecdd555e849107efb84fc5d0dc6134b90a521c53c7896e697d75aa7e4b65b24380a6fd8e437b85e70264800d5d2daa1d78f52a61f4d24754ae16aa8f6d9fdbf56bd09b44ff67da3226780ffe5be4dfec16ae55fd28123af2e9ae97a42f41d3f395449172252fcd3f21622892655340790651f51116ac25e1637b97b2ef6cba14ed21d63202add55b90c95c7861bcbf6817445db523bc8781b6b7b92548f3b6fd14515144d8041ebd4bf2971748dcaa66ad2115fe33d4e764f8819c39f53288e50b74563a54026d6afa8abaf23ba314efb48e49e631b31adaeb6f8a3378e1041e2ecdea616a5348f8ab49f8a26fb40a380eaa16bb17853ae683281e198c49ed996002d23ea8e95c6edaf04ae3213050af0c22ecd6266454ae7014beadea806ef345dae7aafbd1285f69ff321c4c095b3dfa52a45dd2a6beb5b33d05bc782cd5e68f47bfa6c3407a57135f595bd3188949468ad828eb0f1427ec350425126b2ef180ffb6cf9c9b25597df99e92742ac38e3cb3c76239b93a025cab2c577fdd0781ec395e5aa18b7421a59842d5755906569938947cc09043df0de2e2528598e21f54fe731b3797024f5a5468e1f1171557c1fb9f56d00c37a78e2b1a5176d5c84aab793e16e40c37f0aabfba41d6beeaa060fa861d56ce43922082065300ea41f687fd087a9bc2c1439b8b3dec921c7d4725eaa9c617fc5c0fb69390500a8c1519eb6c83c1db0c790b50327f1275efa3f1ad94695412daa9c9a2107bfe7081bb3d7400f76f07b2054b544d6bc83f6deefd6e3a5619a024d2230f777fa8e15e6b4387f7346d9bd43ab9bd4d513aa2fd324342659912fc534693787c3b3ae699b076269ce95db9f2ffcc76b106e087472438449c537e590b05a2cf2877e9f8276e43353a420bdebea13c67dcb989852afb8077169a522de9e023375027af74514f7127347c94e39ac369581de03e366485f9ceaafc9b2d7189ebfef1f99723c50baa9b536dc5869e4b5909b6be7fa5b74fce9ba18a55c209ee9b6b4271aaad91d2d8c1362c88cb2c2ad45b7dfb680fc052583ae5b32b37224378fa55b085df491a9198762f81cb35baa7024eabd92cb5f3c23b016ab695c270718cec6b7444fdd4af6603cfbe578045a4545d02b7a284706fccbde62822218cf0badf81e4aa448b1ccb589cc16ce81c7d6d071aef5dec977aee9db34bf2d5babde1dc66de848f96924515a441fb59c22083c35f5d6b3649bd9913720fc10da170e1355ff160f53a69122b474f4f816a6ea20245c4f353646895da9814b29c74557a6c9931b55a108ac736bc5d92a740f48391acfbc8fe9a96fbff5d68a3f7c1af9f5c43f2a9645605f98579993753cb07e59c846ec2e653485e62b5a77fc1a1a805350e3d5dac383b07f9fb2ce1372a9334ae17e704b3e76b1155b3ec190e0b37b63ecf8000f2e0a757ad00eac239729dcd6236a29cf5a0db8c38cdff8d02dc48d31c9f21aef5ff9e3c7a174ec2cdb21b30472e41322f9e35a9ec21268c9b1266275bb103a1e37bf86dd43882ebe464287cf8cb1400278bb107741fb4bec9f7d211fe57247b730683e6715f8e586be00bef60eedccd27814327ae6ab61ca5236531ffc1cfde2673bdbd908379c1c659f6be4dfe9f5e4ff3a8a46944e77321a57ae621ab27225f97ec60ca4733e8ec5531a3cca73b2fe89d53f06049b9b1d83ab970bfcc92947975c132e55c165aa3c43861a53cca39cd9d9aa24d03d2a43cf69b305d867d9530298882a06d936520fd0884bebf9368582db052a24c2815c25b62e45b5e8c3953250ea08ee99686dc776355967c05e485ecaf5153492e5c4c24708fc7fa5a67a7a03b2efafe539ed85be6ff919b44d9fdc49b3fc6cfda58b1691e5ea2f1dcd205075f6cd675ec52b66f6ee323c3c1c3f43bb5dd200070a42e5d5f7d2c7dab5d1ab9242736f5ebe97870f920bcd784d96e3542855027f551c9dd6df85bd533d9a2d7e746f76dc136614a77c234b663544f96407ba4b9a59b4eb714d53f31a8e3ea6bbe01412bb0d08f9f138100110913bad9858913163909a3aa360e0aaa2bcbc57be36894a1451273f9be7dd01c37c9dd360ed5a4f41e24fc13a56dc1969cc07337afc5e99c52540fab989d75217ad0fa99bf621bb42030d97678751ef075ee78e3f4e70e00dfd056b6dff49056268bd3e9210efdf68d8e488b16bf9889256a3b8be634cbec81812754090c1335bc40bbf0fe9ee4a17d143f80611c0dcff9f11239cc953bf2b11282449dcc7589f590ba7019b51fc28efa5dee26acb2a3c4b4a49b9263dd0bc3a917cc2ac2b3ce1aa0fef6455df53683edc6c04416c0de867ad90d71bc9c9feac204e40db4269c076277d780d4681df95c49c772d373375747cf470315b426a48a0076330ca15332d06f9b723321f5e97ac862b111d9258d7c1a3ebff7e8a26ea5eaae9a97fce678534c09a392d34bbdea35d82abd3e9ffb5d3d9af49f581eb6e47df2d1f26c60f5ecb31cdc1909d11074f98991ba489d43d968e6f989a94f9d0c860b19441c5a1f5d8bcbd45530c8b1b80b10279ec023eb9f00951c066b1351305380edbcfc62c3f307d52e33389e91be77c285669391cbec6a43729e0c78079e1247051fdba137521ec28b6ee26408736ee528f92a02c348b5c910a79fb6496a71c143bd29b88849a053ede6ad0c670fce875bf2bc0d36c1413a253f5b48d55b49adc0d5b205b8843e754d388c77f89b2c2242b0a5036f0c6ad7435749546fb0ccb7ab959634fb4b828524241524cbd3e75ff35f894db14d8993c3a9280cdf62eac2836de95efffbb25cc3101fddf3378257a6f56c2fbf1a2a34509aff95821f35ad9b5f74a2f44bf37d169858feb9049b92c810241444df57721d1e45baa1a0140c0b91cb51b0feb3ee700c9fe35840b7bd1923ee4726e5d96f3468f775da25b2", 0x1000, r2}, 0x68) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0xeea390}}, 0x50) write$FUSE_INIT(r2, &(0x7f00000002c0)={0x50, 0xfffffffffffffff5, r5, {0x7, 0x2b, 0x9, 0x10000000, 0x0, 0x8f3, 0x4d600000, 0x2, 0x0, 0x0, 0x10, 0x1}}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0, 0x24}], 0x1}, 0x800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000580080001"], 0x5c}}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) sendfile(r6, r3, 0x0, 0x100000002) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x2, &(0x7f0000000100)=[{0x6, 0x1, 0x7, 0x3}, {0x2, 0xfe, 0x0, 0xffff}]}) r10 = landlock_create_ruleset(&(0x7f0000000080)={0x1, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r10, 0x0) 7.057435175s ago: executing program 4 (id=2626): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x800) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 6.689501622s ago: executing program 1 (id=2627): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003080)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0xfffffff5}, 0x1c, 0x0}}, {{&(0x7f0000002e40)={0xa, 0x0, 0x6, @mcast2, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x18}}], 0x2, 0x0) 6.386136488s ago: executing program 1 (id=2629): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r6, r3) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x34, r5, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ac1000/0x3000)=nil, 0x3000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="02000000", @ANYRES16=0x0, @ANYBLOB="0100000000000020000854000000080001007063690011000200303030303a30303a31302e3000000000"], 0x30}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4003}, 0x10) r8 = syz_open_dev$dri(0x0, 0x4, 0x200003) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) 6.141016195s ago: executing program 3 (id=2631): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x40010, 0xffffffffffffffff, 0x6a855000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x0, 0x7, 0x3c5b, 0x2, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x8017, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x2, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x5, 0xff, 0x5, 0x1000005, 0x5f2e, 0x2, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x3, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0xe2, 0x5, 0x0, 0x1ef, 0x80000005, 0x8, 0x86, 0x3, 0x303e, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x240, 0x80, 0x3, 0x4, 0x2950bfb0, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x4, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x7c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffdfff, 0x80000000, 0x6, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x101, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x400, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "787c2ce2fba15d4e9f8e96bc11e2ca247a20c3e26661b174fe1825253be9e8480cb4f3524914f59ba189c1429727ef39b4164f93bb821987b3b7f73495bc8e745304668e0e46798c7f5917ea8428d41cab5612336f04000000000000008e9c1c86a394feb64fb06f77dadbcb20fc62741432b7dca37007d68e98fe46135d6a1c5ed42102f58daa5211319db84aa9abac734be47c908dc3ffa3aa7b61ec16d3d1209fc618f6c4532ea582628502ac46d167db6d53d8f3184df68414e6b6ec0109664c570e155654e03d58dadd0e5a7bab42bbb4a9afdefc115eb1609e7b50dbd94b94ba09000000000000001c9e4a41d3e16af21d6c897a1121bc14de16e78d6d7f2ae79db44e302539fd926e0b91e0fc589e2fa19b218d0508b5ce3ad40d03936693ca5aa41ddc07cf492874569ab037e0530e38245b98131ae0c9afd871df5f51331938764f5a7dd96890edd467b2fbc335ed081729b5ea722a98b34d0dac6de995de4ee263c81b2567b3f87e0897857edd5d7e97d61fc67076eab4846010d4828cc879f95cddb69ff6438f2a109285c46d8224c36069d30c3c9cf4a6800ae224111136bd9c1e06c4bfc4685d7bb6a72345772b3ce9bf105490743dc4b700f24ce6b250b95e6c383fe44967a55d140baf0ec339e3815b29a2246cb5c953048c43266485bbd9d0caecf00e9501a4433b54930cba54e06607ada2f5d818e4804294fcf53058e58e0d33d4aa6dc943811056908fe9116e65cdddac1d2fb24d1eacee389af38b7e5a7056d0de50c6b49fb38388cf28c2d6dd3dbbab84ffbef4b0c02a77f018e8a9749a557909e6aa96185d268dad7744b094d8c6134b8defe26674d65f908f9c3a8c201f661fc26efe0eff248d3a473fe32a5b3643bfad8f186c2af3fbaa1d38560c1244c79a0e48893eefb792af281650f34f6c2d9a6c622aba234b63586713cb66179a0897d98ee5228569c32c1a682807c8db7eb197ccbbd6549db86a6a9aebbf5dc14060f22e2b07d6166f43c25ae0c88be7a4dc38e7ed08972a355b0e5d6fc43b8e5594fa6b36a36a44bb94b75eaff11dc17105f54beda54da2a1ea1acfab354745057dd2e7725f2c8450b19fdf37e19f6ce43449e9191f5a5beb4a1bc176f6130052e83acefd8ff18d592bb75f15f86c9113e4bd67ad420c33ae706cdc10060277b83ef30a50d4ac19c9a791b309377aa20a4743bbb799abc3ba58071b628c9ba8103bbfe389939e55296ec9b4f8d3a03aff30ce9aa0dd6e5158a672be8f3da8349ed4ad82f6ca67ee29e8b234840cf7846e604e5b8135abd94d71fe0a79180e75d4e193ea8df466c087b660fe984943751a9f6df8545699701d478c2b3daa949155770e74835bcd972de27afd20b02ce0e504c15b0237437200"}, 0x418, 0x7fffffff}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x8) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x58001) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, r2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x4e280) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000540)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) close(r3) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r6 = syz_open_dev$evdev(&(0x7f0000000340), 0x2, 0xa0242) ioctl$EVIOCGABS20(r6, 0x80184560, &(0x7f0000000580)=""/240) 5.402962365s ago: executing program 3 (id=2634): futex(&(0x7f000000cffc)=0x2, 0x80000000000b, 0x4, &(0x7f000000b000)={0x0, 0x989680}, 0x0, 0xfffffffc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffe]}, 0x8) read(r1, &(0x7f0000000740)=""/384, 0x200008ca) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000280)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000380)=0x1, 0x4) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000000)={0x0, "7c0be39dda2cc61ab2cf18628fba8cd45519a62f5125d4596aae69c0b2faac44", 0x3, 0x1}) 4.487320951s ago: executing program 3 (id=2635): socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @random="0332b2aebdc5", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x67, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, @local}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60381f3400442f00fc0000000011ed002fb2aa95f5000000ff0200f2000000000000000104"], 0x0) 3.921428894s ago: executing program 4 (id=2636): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0xfa) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)="a91f", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001d80)="6e96", 0x2}], 0x1}}], 0x2, 0x4004441) socket$inet6(0xa, 0x6, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffff, 0x4000}, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x260, 0x98, 0x68, 0x0, 0x0, 0x0, 0x1c8, 0x1f0, 0x1f0, 0x1c8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @broadcast, 0x0, 0xffffffff, 'veth0_to_team\x00', 'wg1\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00'}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@addrtype={{0x30}, {0x215, 0x0, 0x0, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x4, 0x3, 0x3, 'pptp\x00', 'syz1\x00', {0x18}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) 3.718418151s ago: executing program 3 (id=2637): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x103b82) ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0) recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000002480)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000002580)=[{&(0x7f0000002500)=""/125, 0x7d}], 0x1, &(0x7f00000025c0)=""/145, 0x91}, 0x9}, {{&(0x7f0000002680)=@l2, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002700)=""/138, 0x8a}], 0x1}, 0x7}, {{&(0x7f0000002800)=@can, 0x80, &(0x7f00000028c0)=[{&(0x7f0000002880)=""/2, 0x2}], 0x1, &(0x7f0000002900)}, 0x5}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000000600000000028290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x2c020400) r7 = getpgid(0x0) r8 = syz_pidfd_open(r7, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x84000, 0x107) recvmmsg$unix(r9, &(0x7f0000002380)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000280)=""/48, 0x30}, {&(0x7f00000002c0)=""/3, 0x3}, {&(0x7f0000000300)=""/248, 0xf8}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/234, 0xea}, {&(0x7f0000001580)=""/78, 0x4e}], 0x6, &(0x7f0000001680)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000001700)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000001780)=""/221, 0xdd}, {&(0x7f0000001880)=""/136, 0x88}], 0x2, &(0x7f0000001940)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001a40)=""/209, 0xd1}, {&(0x7f0000001b40)=""/162, 0xa2}, {&(0x7f0000001c00)=""/183, 0xb7}, {&(0x7f0000001cc0)=""/246, 0xf6}, {&(0x7f0000001dc0)=""/149, 0x95}, {&(0x7f0000001e80)=""/24, 0x18}, {&(0x7f0000001ec0)=""/214, 0xd6}, {&(0x7f0000001fc0)=""/227, 0xe3}], 0x8}}, {{&(0x7f0000002140)=@abs, 0x6e, &(0x7f00000022c0)=[{&(0x7f00000021c0)=""/160, 0xa0}, {&(0x7f0000002280)=""/54, 0x36}], 0x2, &(0x7f0000002300)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x4, 0x1, 0x0) pidfd_send_signal(r8, 0x37, &(0x7f0000000000)={0x1c, 0xb, 0x3}, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f00004fe000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0xaaaaaaaaaaaad11, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 2.724359649s ago: executing program 2 (id=2638): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f00000024c0)={0xa, 0x7, 0x0, @mcast2, 0x8, 0xc0}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) r4 = syz_open_dev$swradio(&(0x7f0000000440), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000000)={0xb, @pix_mp={0x40, 0x2, 0x20303159, 0x6, 0x1, [{0x4}, {0x4, 0x8073}, {0x3, 0x7}, {0x6, 0x4}, {0xfffffff9, 0x10000}, {0x1, 0x6}, {0x8, 0x8}, {0x2, 0x893a}], 0x66, 0x9, 0x2, 0x3, 0x5}}) r5 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000040)={0x2, 0x0, 0x0, 0xfdfdffff, 0xffff7fff}) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c000280080004400000000408000740000000050800064000000001050002000000000008000340000000040900010073797a30000000000900020073797a3200000000020000001100010000000000000093951d99c0dc38590bf5637500000000000a"], 0x94}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000100003052bbd70000000000000000000", @ANYRESOCT=r0, @ANYBLOB="1564010041800400240012800b0001006d616373656300001400028005000a000000000005000c"], 0x60}, 0x1, 0x0, 0x0, 0x81}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x210083, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xc) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x450802) write$sndseq(r7, &(0x7f0000000180)=[{0x8, 0x6b, 0x4, 0x7, @time={0x220, 0x8e}, {0x72, 0x40}, {0x8, 0x4}, @ext={0x56, &(0x7f0000000100)="fec2c07722e502c35bf9189580ee388901dadeac01268c9abcea96bb047dc80cc0632807d6056cc29e7db262ecabd3a5ad2b1f8945ddab58aae379c6332b86865cc2d36d5ef00b603d1723b02708e0a14f6202ed761f"}}, {0x7, 0x29, 0x22, 0xfe, @tick=0xffffffff, {0x6, 0x9}, {0x8, 0x81}, @note={0x3, 0x36, 0x7, 0xa, 0x4}}, {0x9, 0xc, 0x1, 0x4, @tick=0x6, {0x1, 0x9}, {0x3, 0x9}, @ext={0xe3, &(0x7f0000000400)="f8a11b64233099d5c603ffdea88c0d730772d81390a03a0497fe80961cc94236f9482e10e2c9557b927cd07a38a032ed9f7c058cce79aa33cef2953b426e629bda3700a33741cf306acf0f20b235a23dce1832ce29881abe0ae38a1583912af4e2656b66644472c50a13f45995545b2ae7a1ae80ece80114a627d828900220197121a4844a5151c4f57eb432781df1acba80f0691265d54cb5a08cb7e24ebc7ca5e2508ddd8240029e1647222e447528b3009f083173d06cd2137ea92f9dbe2481ba79126ef38035575b60b651bb80969d65ff0ae57d87b0ff28fc6db2ab328e94317b"}}, {0x8d, 0xa, 0x3, 0xfa, @time={0x1, 0x6}, {0x0, 0x4}, {0x9, 0x1}, @ext={0x1000, &(0x7f0000001180)="ac57ca20b11f6eaae4db419eaed8b42c953d821e3791ac15358b0193be72ceb635429f9531a05b55140dcadfcdd5899830416bf389c1cc2ec886cbb9b17374eb26026e7edb9b3ca13249e35601a017ce5aef92a11c6c54d528f3850a9643502816c64d45561aca13a416cc1e960e7715a8d572ad198d6b84a853b364b2cc3a6c8c2676abb3c936c70739667ad5b8d5e586fe204cb0aefe7ac20cd0b5bd6af73c3a1db3ec7ab8596b63d58684307cef0307449fb6163d2ec20f9fb3a3409e6691caa0e58eab42ece023e9d9b86cb91eecec8d716363408c972edc03a5b314c4085cf79c82c345aef85f24906b93036f85c96f230988ad0d9df9d0a81aec04c287ee85b414887b26eb9c88e0a5b604b5f3a5741532832826a49715bf758e1df52b4cdc93a6b72abe253d74a0f31668c5f2afb0f72d9d7215ef61c03e8eb4429645cfe2bb1e61f3b461ee086021b87333ec0e0b0531d9d5b4d12121816d58dc7fc4cf817c2c5d07030fd9a5bc91cafa6c57ff1b3310e3d4cc2c0050e971cbc22e015b8581ca57fd0732b8d4d939c0749fa7ca7c31d6e8caede6ef0f1a08ca38bac35ba6945278e397a050838178db07762767fdefb23fe98be9526b83f36bcd86e41f11444adb7d5bd2522e6bb6aa5f4e9d973e03a5771a0e406e40fc66ce438f655d95cb7444d380c67ce85ffc909819d06881bb1c07730673a574b9442692d1ec78adff651b44375fcbfbd7fc629d825e580cf4e4c588c34223318dc052d178dfe45a3115792d743c9228c287ff63efef3ade52c559198a1df751244f1249067a56879a3152f1bdfe8bfe588cc01f9722d11e0aa40bb3f15210f10bf631cb83df44d82cb650488098ad63bf30450c091401529fb4be091d389bdb397a0399b0a19a9eb064b03e29e13acb2fb647545b5e43c6790a8c242bcfb9838d8bad3560c6aa39fa0d71246c1f2fd3661ca8e10615b3ed47b1bfcdb8bf93d68e17bc2c2f8deeb54245cd09fd2fff1e8a1a01e3e32fba92be5ed74701032506931e83e5cbdac30deab76eade21579d4bbd21ea42816647ee27b22434d43d24c9d1d6788d553ed1c6d36d460de69492bf8eac01696d830176415a2490646fe7f9f189ac82e4cff3d9aa027b168e72cfde9fa7a71bd646d56be945605c5a31995ce759cc46b4be6d760160a0711e94188bdb75282ced0e97a9022de608eb7cf3418449183a786a886339220329f8ddaf196c2fae7be28545a0bafdf77ec17ad6dd94e4d3b3855f195f956de7d2e5aac3bce4fe2c88c605291cc4dd6c52d8ba27859e3f9dd992a40fee5dbfe40851ad719a545ffe1226ed2b06bd4e326f68d41b140bef828a6d6962f1aa5b9c2dd92654f67581228842fa821c526199935fe7fe98f55dd2fe43eb53b5d165bdf7abad7ff3f5492238d9657f4e3d2825b94d12594dd850ad96784bcf9d15b5ebae39ec653c57924deb03d51ddcfac1f604930d5cd1e63b847fab5e975613f93fd1c58756a364977e965c58b03e212bb36f1d6272963b83d09d71bfa39ca0268d6cb428b79915f0eb594d4cca2f36789117ab75efbcce44a236e467de9dfac6716bf5ab2a6307be113e2ff929d6af91ae474c3be67b2e99373c6a382866f84dd54b47e4070f5d8b13d2a7233435a5270689a26acd08ae198e943e2e7edc31e3f94c4b989fa051a0390006b494ba3f08fef92960be310d71182c16646fe66bb1c63bfa4f001e186cb023ca82835e3d8aed6fa786e9eca6bf2c2ca1ecd59857664437b6fc9aea0d6a9388e28052f46e93a86ae343e658bed89f3e938cf520155f7ee7bc4a48cb0856611ee1a7104ab9029177a7774556b81a6546b9ef294239cb51d8f494e5fe820479c77b548a7d338879500425e0888b92f42c429d275ba50bf9d4c6babe2fb815c661f3c99dcb4ed45b6199d8e2996f9e8e30982f03ad8c8c8677ac4e256e58dfae0fc9f5de2ff81f66d5cbed952becb440f60e13c2d3e92aa83cba1c0a7612c5b51d734fa401bc589a3f7cd140fe5919d1d881149945964598252dbae6a88dd6467ba2d5d7810a17fcd4b93eea23e969daa17a8f17cdec3222e7c6d88a2a50bbecfaa16c051ae4533097a6d12c94f2fc103572d3d218cc255dd30a7b43cedad347e231caf99a75c3c91ce1de8229299b44363ce26ea0a442ac0a0864de3aa8aceac61bbe83a26e47bee7cbc76e54ba9ae0de7854a8ba9645206aadfc7dcad7da92a8314bfb8ba3c36eb1b0f32deb4c5502bdb2df0a5bd2e17014fd8419e5c1bdcbdd81b1db6483dac546f71008867065ac4eadc356a3713a82954e0f153a3bbd798215a5fc0e7f8281298509101ba9ed5f596e514be21927e12c6d229109c36b5aad5ece51e3ff9c89c5af2ca23609f36336cd16dc543839b54e58346a56ef44731f155b33dfbe276d439b0d67b4ed300d3ad37173c2477b83f27fe3a1f1e20aa80a9a9465c75f9a897f13ad43b8c397e85732d9c30d68c99e788bbdd08a2016dec768b719773fc2aef03dd783f1e859777610b0972b8e6f0014b5817ed3c952ab4afac19c9da9933bd57ab6a5ebabb0c9012a8ba4ff643483b936cbe586b16abeab510bb2e64573a4d7f187d91479f407448516e452f1e80b15be5bed2b55efede53e05c368ff8b4c6368d3dcc8ce60ec6f5a86e1f0c402c271913feb10ece1749df5ce0e1fb612b22a0c8355cd54910433714ee825c9d15b85be7af7921013a4caade8de7f7a9277f5424dab1cacb7879d3a8619f6fff96140805d5c6a5bd05567005ad22b2893ab4f174acdd9f56d850b4e28f8b05c44af0981b07bc0949b4fc720b1916be1ae414fd0150f8ea62300b61e6d784ee207c7338b1e23667e88a55ba6d6eb8f55f2f90b59ccac3993f1ef5fdc01fcafccd7f7dcbb247011c82ed51a5be831a1438b43c9439fb5683da40415da028f78dfdc8af2adf4e106a798bb7a6d3fa6995294dc2a8a5360d882d1a0318f33247f0b9356bf433556b3f7b1e6390f7eb15a16cb04ece4307516c69a261ac7aca677bb9b8554d8471e8575a926f81dee39404882ea8e490f9495abcdbffce29e889454d67d50267a4e2da7f739357f7cda8bf938931c88ec5643f722d167a9b844b150fab775795c337cca6885195f15eaadd1b540586098e3ccc0081f032a670e5365bb28e94e3c7509876eff9aa14a276842dd6e3402a1cc15bde3f4be286c93ba93d2daae72612ec2ea00c05f74705167db7bdd66603d542d59e1bf6262732b13c91b31414fc4238b7e071104ab1fd1bad72a2b82da22e96d41d569a89bcfaa891cc77dc3ace5819762e5aeaeba3fc9ef03594b9e9fe1bda49e8feffe54203d0f52e11d57e86add90ff519918f8a8aa6441ba939496c7274f1d6f27f6e9a69a4fb926dfba6e63044e6961e510dc644a501ae760f01b7e22ba464eaa5173c2dd9d84cc3c115a2e8646006a7910f89574ce1809be7ee80f9ec821af3bbe5c53cfcc74044e41686617ac23d5081f6d7d21343cad6e10495624f1eda6d7efa03106aea09436d1984ba9d0be349604c13876b46617e5257ca409d9aa9b9260e9997ff1499e532caf0a33ec3962bea29706dc1e5d0bc81cfc2d8dcb8a719dfad59e7741614cbc6dc3bc97bffdbf48cfcd44ae53a7646a588c0dae18f903126f2d93d02e0f8633ad4345e37e08919c8a5a2d2b9c375e175de8bc7437ba739bcd0c228ebbf6ca9cd6bcb3582c2d33eb86c53fbf92f25bfc772484947192eea1751af558673c39874ec916e8ef6de27983df2b47edcb0ce0135a13cb41e27d77bf136bdd1a2c95ea0ef4fc74da42f1c917812a5c203250f6b674bb070917b0ac08441d1470616eb8f1a44eb3867a07e84b3d1dbde69788e13281ed7cde4659efdfbc13e4dcdfb1f2365767dbaaab04aef5cdd9815f218b127fd12ce1559e7e3188a349cccb9ae3780bafcac1a1c0e3c111ddb4156929dcbadc18f54e2b0f1aca586aebb83d09048141793f9a58341f9afd00c03c4906a1952cf6b78957b80cb26326cba8040ec04db88501173587f89db3a9550c12fb7dca364f1f6ba1520d4fc4f6fde7bf6f020c89bf078f6e388ac3103d5d9a5a27c430fd0410e0b20deca65e09f04378ae339d3c4b48101288b3e35c84eca02f9157bc6161a2743ab4c78b154389a454a548c09d08dbbb3e27911c21feed5ae073783479f0a291135a32f01d37be29bf115fb8df21525bf66ab0c994a0fe71563af5035fc8db8dc0f5a20ec1f1d76d670d67335f95862be6302b6acc33f663ffc430b20db48a1211e9556622b89b67062b5dac7cae6772f1b0178f2a2e2817d4c54952600b3e82f3510c922d75ad80997d781e134220a17200173a27c58c1ff4da7724daa7ae2177ff0bff3b2e176eeced4d833d789088379c5e1183ab9d701e2be3f5ba5c8eeab1c12a69774d195645b15e9a694082fba50400afe6cbd30c44cb371f08a74cc309efd685a8aea4af0ba6d42204b99bc0de6156ac63a2a843fadd189c2949e96119159b1310f0550abfb5c5050fb755108ccc5151e5426f15dbb2cc96a9498d0375a1c35e28547d9941ab004ee13d48cece5745c9b54cf7412c0b1dc6dd53b5c3eee51c25d489f965bd9fb233cc66a1cafba37f25dded39b53863ed8a9d7350d81e63b7ea8e3811109095ae4fa6fa39546513a26ce74d14bb996712142127a5709ab26c2fd34732a879438e4b06aebec50d0b4947df4b238418125eaa9ff0cefee7dbefe6e63bba68efb6ccbd7c327348dc8cadf1cd04af7690680fcd645a69e626a5cde6c4dd68590b01a3efa5852e30ab95924c373b628280226c3aa36e9ebe0acfde690ac2840015494c8888384194f7297ac39668eafdb5ad3c0128bc32f388eb23c9c32f5aac42cb1ad1213a611ef901b35ebc75fc68062d700b541f12f6628a1c2648d32a2e74edcf5655a0d8eb4bf064d39b85fed7b115ec0d42f22dfadcbafda3c3b5906fff6fa85a022573c85c92c868aab13a28f7155c13a56eeaec8fb32e846967919e6a71348a93693e9f0faf7fe9e97b82f18408ca2840499b4cbea803bfa49576c3dcf91fe1357383abdb4b7bf0c0c1b898d36e46de13d22c7fbaaf0a0b39a6a89a917f55be40262cb53f0336bc2aecafaa3d2068da61f654952221e2d0ba587bb591fe147c6bcbdd5ba63e34f804ece54d2e445403fad4082191b837bfb1e4bc0bfff8308f8cd40000be11f9f63e96e278ea9c6e17203669c9940328a5f1bdd7c7daf3307979b9347a8fd70cb76560af68d836c0d52db02522d0136b3aabd5cc422964c7e94be70ac80a7329f2f21bef6ef9bbfcc7fd9273e2cb12861d824024fa7e9547e0b6eec2fc6c335761467bf99b3d07fbd1a3fb868cede7b5e9590fcbf9eebc1a5bcafa7f67a8e11513c6d87d7d512717ddd4107ca430c30da83e5704d4ac8447bb65891869a3f461c90c9be6a2ceeacfed44fb476280e761408aca37762885a21334c5ad182329d4d7f8735bd10e8f09e331a0fe3b18e6fdc4e43c0d303fdb600fd4ab5ab9b8d48eda2dcf14051ca41235a4113c680e025e083f37856e90bc9f5ab2a9a9052cdaf006fae578c41e5ea2d0804bc2f7ecae08e031e8ffc23fb749ea59a37f364631f4e5ba9124783fdab094d3d3af6b105dbdc184ddc9ba6a7c26665a5be0c0c8625fa2661e584c74959f7b47da951587d8ec34c5861c04b8363484f04f377b0c35d61c766d3dea97ba9660ace9e24be79ffd2a9091284c5657d91d0c050a7f9e9146625f5577c2175ec77e6aedf0e1e1b5075df6f10"}}], 0x70) 2.526505732s ago: executing program 3 (id=2640): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0xfa) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)="a91f", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001d80)="6e96", 0x2}], 0x1}}], 0x2, 0x4004441) socket$inet6(0xa, 0x6, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffff, 0x4000}, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x260, 0x98, 0x68, 0x0, 0x0, 0x0, 0x1c8, 0x1f0, 0x1f0, 0x1c8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @broadcast, 0x0, 0xffffffff, 'veth0_to_team\x00', 'wg1\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00'}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@addrtype={{0x30}, {0x215, 0x0, 0x0, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x4, 0x3, 0x3, 'pptp\x00', 'syz1\x00', {0x18}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) 2.496004645s ago: executing program 2 (id=2641): rseq(0x0, 0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x4, 0x726, 0x800}, {0x2, 0x11a, 0x800}, {0x3, 0x4, 0x800}, {0x3, 0x8, 0x3800}, {0x1, 0x4, 0x800}, {0x2, 0xffff, 0x1000}, {0x4, 0x5, 0x800}, {0x0, 0x7ef4, 0x1000}], 0x8, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)) execve(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='ns\x00') getdents(r0, 0xffffffffffffffff, 0x5a) flock(0xffffffffffffffff, 0xff6df98cfde10021) 2.317478967s ago: executing program 0 (id=2642): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xd2b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x8864, r4, {0x1}, {}, {0xe, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @remote}]}}]}, 0x48}}, 0x24040084) 2.23323043s ago: executing program 2 (id=2643): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x2000000}}}}}}}, 0x0) 2.079392588s ago: executing program 1 (id=2644): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1000001, {{0xa, 0x0, 0x0, @mcast2, 0x6e}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) connect$inet(r3, &(0x7f0000000540)={0x2, 0x2, @multicast2}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 1.944555149s ago: executing program 4 (id=2645): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xa, 0x0, 0x0}) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r3}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xa}) (async) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r3}) (async) 1.749703479s ago: executing program 0 (id=2646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x8, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}, 0x1, 0xf5ffffffffffffff}, 0x0) 1.693295595s ago: executing program 2 (id=2647): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x5, 0x5, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x81000}) write$binfmt_script(r1, 0x0, 0x0) 1.421595215s ago: executing program 0 (id=2648): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f0000002840)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf9e, 0x0, @opaque="0cda48483a6e98b901cb7ab617ce0b146e305450c14abf9d66d498aefcbf8096618905e54220f8399fbbd171d1cafcef88f544d7cb867054030400dbb0ce224dab42a65d107ee1fedf3a02a8f0f5e70cc560fa5000f32e6fb38188ad96cb419ccaeecfd11808b480bbcc46587710f0904243634eeb6496718d62d3efc69ae043c0350d05bc9d3b13b776d0d711cdbff17051f16cbb7328ae3cc95923ca60a545e3ec76de3ec1bf9eba3ef6279e0a9a4a9a83c0827f5f11e58330e97cf2760b0c68409b9d173c0cf0206aca1802059c0ed3821f1c679d7c355781c59282c6b2d462c9a34759b2408142fc30977e519b8212713ced6f5befa522190db848bd55b2a44c8bce622b4c125a857fff4e6e2a57e57d627a9668c4ae9fbbffce005840b9bc9d78a65bdb93c5c2e66fd1f55b3aacc4b17751b8adeb5a37e2df3b02a7ddd4c3dd6fcc019352fbf0831be4ae2a7de96f845136ace1d2d7e3173d39e7cac5549f6ca98ada73fa1dc4960df48f12d34d0b3d8dba4929420cb652f2d8e02d323f725ee508f1ace0636d6e8224cd9bc6e742d5e31bef42032235a7e37717f56f1d30b2b4a56d575921ce647e600ea77480bfeef8ae5bb8441c88a37dd980c846e5b0f584f8edb8dbbf20a2ecfaa1bd6f1b27811c155d5919adcec5174bf6dd5fb3426b8cdfcf8774c2c6627ebe12a81d9c98361fc69b317a15e4e808ebdeabc3686a22e5ab42290b45b81ea3ab7c46149ef7de525f892104c4363a8eee360fec1933bb9962b8eca80d3c303ff5d005add6a7047e5bf6044d4fcc23b95951df5871a457409f2e2f98f82df735fad96fbf0898ade670027cb738f8ccf3ee914b9989c4b7cd8ca4459ad3a35dcd5508f2de3384f3bc6ad49a1160f25c440ab30fa934d61023d0da4163e2c787c4c4a2dd1dba35b636b08e6100e3686e4a32f2efe8722ae933f49ad041e25d374fd36cfe02347d2b02b5989bc60ca35612142b4f443e6f8ebf11b71038ffe9cffbf5e97158882913436f5d83296922f491b29582012f503487d9b3996dd1249f9d2918b5cecf0534d74753f836b18c1f86481eb7ee01880f155e875acf3454db10a7f579f55dec2aa4650a530e8e76a29a952188537dde927b699c9612252f005390f4d31ec09c52d800003522ff8e02c2c1bc83d90fa04a4bd80d3785904bfdba38aaec616be3e044b0fa1ed4bb123ab07db82f226455237b499c4e8f11be78cc425dbba27e06263264f468f3398ea22bcdae49ac9bd0fc9a18466860d447612e3966eebc6de64e61db7dc59c9ac4a6c3c66b7fb2e098a4833743e15cf1678452f85c6fd858f67c1fdfd56ca824f99b71369e3153a2a126b5dd2992b88ba3b04ba227fe9c4f7bfc48083bf91cee51dba7dc231cb0cbe70e1c341c3ee797d8a4185f4d5c6a44053350761cb7bca3780816b41f88d3ff82b9d9459fad1a04160a8095ef9237adef81be7116cb7757d7d1b5916f3c5ea5527023921ee6132f30629c3b5390a37afffba8d8c3b544e1ea464b496d5486602b2832a78875f7e8620cc0d569d91f7246c010e709884c6a7854e899e36d55cc8dc98c87d906648dd9b5e52cc3cdce1a42a882056aa113c54c4c67035149d5d63a9f89ea519c75306acd98fcd25b1f549f4f58901c93b72df800ba7f18be5f60c427ed900a16bec991faa19d362b884a8d7e1586b3fa1955be5a73e443f6f99c0fc408c32470404c82c6f079297d64d7965d918a773af3abe7e7baffb2d033735f9ecc234a9fdbe47615a049b940d6e5821dbeaa961d21500622d60b4e36ce942d3828ea475e9919dbc7db83b322bd502a856e72e165babd5b281eabe433d0a63bae9275824ecb6026d3c79f02c8c587b996e0811648503523c21432bd55c0f3af86d55c7231866881877064ff3c248b95036f859fbf268308e855de8c58daa7815c1e9841d8bda14688fbde12d8cb41f7322f97dbe894da2f734b07b4164aacadbd111e9c7dc642c69fdc5bd66f09712912a08a1f739c03322d8e547fab6bbf9eeb2766c7a123032ab238656c7a2a424109d8e8afdfd1d004417759cc5990de6d09c8b1d5420cd7cd8a9cd09fe67500c34128fd2b18a9cfefae939ec3d61835d43075d8f2d70f3a0c162020ed6e3e1ac1c17a4ae8e639a08b39dc0cc96c206f8a0554018bf30e88d4591b337b278ec5104c18fd57f08393b44dfe7ab506c45e77e06297049af15d6da6cb46aa81824ca384b6ce6f9e3d1d3cceafeabbb293ac95d5cbfdc0fedf28d93c21628e2899c52700fdf1132ed4fe70973b90ecd23ba6456e480f33bac43d8d887d4570c405ca2840cd3464b9309573fb1a6b1b717e1eb21bc54d7dee18c53cccaf9f9757914aa85596d5d4e05eb08911e84ab05dcf34995bba29ff175cfe10f202f82e9e1db17fafd230ee140c9c58134c1cd3c146b80ccd90b2ee136daa86ea6e3b269a73d286f00e3352e8085824348eee1974bcb09f4c2c799aa148149c88aa66fae22ab8842dc0916baa04073bc79539df4dce0341af518460a7afcb9a2cd6133752b6aeed9f8b08fca549cde3473d5e2a74c49e8919103d6d983c0559a5c628f71ade5bbb096adad2f845d84428a57d17ddf5e2eb6fa7016d4a83b433dc17692a919815c95480621ae14ee64bb04770995cbcc6fe4feb444fac47b0c64c1befb3aa22652bb3e12975ed771f66ac346279416b4178bbb55083301957683a9a1c33e0f838b5939ddb95ce233b8751fe6df4574a41d07eb108075a48df37fa76e886d4e9643709e15ae8269a64e666d08e5009469f0d9e481409acb5522553f15ef59e023eeb3b646b9a83ed9c1ed1f1225271472090980faab0192acef80190645d22e5e5c240d64ced36a57a412bdc2a1165a2c9a3ab9388338fae2fba742c01b309900f0c199800643277b30d1286a36cc73024b7b651604a087d17588017dd449f7487e0b2163b5517672bb4ed4389ff104fb38b30e15db2e13251ef644992eb55f8b7a465b990e7a7eb0eed10e8e1d54b00221b1e550c55296a223f67e4c2982722cd13174c4335d240fbfdc5c6d0f677089a468e4be6c4664ae5c531f3dee4fc8e0ec52f8924eec04d5625172455cfc78c8e0d80905dd975f7fd78a9b48d958e1d7241cd70c536dc59b977738a63bac17a2ed380181414ac6328ec64ab415256d36edfdbd2accd3a41294e3fbf0ccf73bdb559b088e25ab3482a69cd71887ae4bbef76276ee38b0fc9b4e0e14b40c22c577f407d69d6634934b56d43240bc92f16227976dc819d3f2b06420690ffc3fac19cdd9ccb8713d1ddfe9e7b4ead3de09ab715c6e9a4495361a24be66e3051014f14d40c2cb1dc9d2b04b35f543d6c2ac8d4e04cc24d07b6e86d19849e29e0ba583967f5e91a379772853ac42320338cf9eec2a62652b19ef64e697dc60e375cc5abe62354badb71d89aa0c4eebeead4d3c3a3b0681ede093f8f0d6aae0abcdade797e6d30f66f727481323d814fe768dd56e28de2aa3e285b42aebf194dea51541cc12d12bf717e8c1f0593623d0ddd27a6e2b4aa8d028bccc9d520c72483bd974b29942b56dce791aa63e95bf3edc8ab7248f68c1eb07defd07b673b66e0c5258c6e282f753dd4ef01ae56c9d115ab918e8822d752fcfeae1b1c3ed275140fce24c0c18be52e5292505a3464859ec638acd74108660a016efbd08f9ea11e84002a4f247199bd73215aa3dc4bcb5337e61255aa5819e782186d30908965a30ff36c7f73d4f6dcb5e6a2e14586513270ca6553fff64e4daf4b8098c1678fe864b0b0a51407715b2fb54ece815a0aaeace4a65efc5fa9d1439d8c87e44eedce3a885ef4850d1aff105b2ef457fd9a60b49182de38fd189d5a8062911b1e569ae88bf875389938d3a94a9baa9282b1740c1e68330e704792b27989e5cc6359b516786d342e9b6ef34c7091fac8ffac2011cc5c7bb3b91a162a3db7c2883f2bba7a57b9f3d8536594a77b677930f5d0f4fd37675adeed6651968d667539ba84938fda650fa037ecff5f269a80c77f25cbe87ead00936e59206f7ce090194134f95b7b915c60236219532bd7c941181985da747751bd08fca88728013bee1d0df8aab6268fbf80bc631c3785b0549c5294b9316de25cf5713508bc28a972454a4bf40da7021f870a202aade9fce66ea570821bc6778eb850c4bcd101353db2ab0cfdc1b8b38aae3c47fd4751ebdb22ba17960e68aab7d215d1e87e74b29280de54b9edf978c85235af10e0bb27b53c52e393d74d9e9b8b4bd7caf7b41870a1b90e3ab8058b87c84cb96b4c1a4ed38b4e2d88d91b1e9d4c797732dc7efca9d3bb86ff8a4ac9aca9288c8bac70f543d7269397d03a47d583928ef0ea2a26937ddf22481af9946c9e5fe4deb693fad877c862bb36bc1ab92e3977cb29fbbb47ec03e36234a8422be94b40b21adfc9eb0c2efda4cec388e97fd3e00824a73e04a7f8deab66e39f813345d09888d65705c032b98a393e4967117dba113753c383cab16262ddf22f6e4223c4c759165c0df7e41084a0e5e80a86920b8e257e789a878d2a70ad6beae82776c3e51674de800906e3f21016630ca495be606a78e27541c5c90b028edc7eadafcbb78b60b939e3b34f1f1e41f96f169fe5fa90787c8f4524b794447c62a50de67b8d18c636727b4f65f2e11602eb31998f57f8d3ff9cc15989b6e7cea02cb74c8ad360d0d5fa43336f18826982c7c447830dee3e8c149a720f1e8f4573e10e573bd88b94bca844f2ec41b14d0705b430115e689c605d312ddeda296bebb5282186e85d23c4baf30d15afbfaf5bfc4600767e69dc670916c7a8545ec19cdb4f147a5c709dd734d59bf61613c0c18ce784dc5efefe0f128954c293ef49df805311dce0acb71b43a89599e010de859dc7629340a8e9309e42f03f8b16fd460c6da0e63765eebf90b40d679fe7ff28f3e5d0fdece65263fc8e02b099199fd5e4c807b1f6e61bcd7ec7d67ffb79e5ead2f0e2b787e034d3ff842fa75cc62061807936ca92e38d5fea34b5a7d35abc0a1bf5d2a34c8f4d04e81e874d26ab94a1b0277897d7a8e4af2256d9f0971f9185734189350947136256d898ec5d11fb31d5fc735763c815f3c8667d05e76c2ee1fe2ce621338da4045e61532da4463dd4cf516e9c5d79b670ebac5fb5b8f54708372ea05462665acd97767a0da0f9895c0425d38c23ef5e1f3f30a95f798ea5971f6edd04658696315513f7e4100fa82d5febcc6293f1f9d686dbeb0ff94f0a030dbacadc06dc68ff08478bf8cd8853096fe90814ae1f72d53dcc3f950d4f9ee7c5df4da90adea4f3678992b9cd8287815b39b56986c23e57232f478cead86206e7618218e94aa99e97302a395deda8532df6b4aa119e3d42cae394b34841af2be71285c4ef115c27e7775f26553e45a43291b9b7b9c16ece0dee01795d3d0fa04545e6d8014f8b59f1e820e5f326fb1032220c40c169014d460927b70b9f0a6a4875e16ee8dc44a438ed1e114a64ced4eee4a8733afac3177fadc7450eba48280569e0c595317852314536159d869673c084b973b5323c5410cbe6928f097c50204ca8e07a617b72bab13fc8efbe0186a576aab68ff9433e7547ff39955d16ade190fc2aca"}}}}}, 0x0) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) 1.409673198s ago: executing program 4 (id=2649): r0 = socket$inet6(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x1c, 0x0, 0x0) sched_setattr(r2, &(0x7f0000000100)={0x38, 0x5, 0x42, 0x0, 0x3, 0x800, 0x0, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setsig(0x4203, r4, 0x9, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='fd\x00') statx(r5, 0x0, 0x1000, 0x4000, 0x0) sched_setattr(r4, &(0x7f0000000040)={0x38, 0x6, 0x5c4e1c9efd7debe8, 0x9, 0xc9f, 0x4, 0x2, 0x8, 0x1507, 0x3}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x1, 0x7, 0x32315559, 0x8, 0x203, 0x2, 0x8, 0x6, 0x1, 0x2, 0x0, 0x5}}) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') fanotify_init(0x21, 0x8000) syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18300000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32, @ANYBLOB="0000000002000000b703000008000000850000006a00000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r6 = syz_pidfd_open(0x0, 0x0) setns(r6, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x700, 0x1, 0x900}}) 968.039376ms ago: executing program 2 (id=2650): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000002900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000cb9f2cfcc837c14b000000000000000000000000000000000000000200000000000000ffffe2ffe0ffffff000000000000000000000000000000000000000000000000000000000000e1069346585daf1fd012000002"], 0xb8}}, 0x4004) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x4, 0x1, 0x0, @remote, @local}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x18}}}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0xffff0000}, 0x0) 699.671404ms ago: executing program 2 (id=2651): r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x43d4, &(0x7f0000000340), &(0x7f00000002c0)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x48e9, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xa000000, @private1}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 698.583892ms ago: executing program 3 (id=2652): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) (async) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000100)={0x1d, 0x1, 0x2, "3bd9d3fe337649c318d3b5710fe89a0d9ec9b50e98bc73d00e25fe8fe53c842e", 0x32315241}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000100)={0x1d, 0x1, 0x2, "3bd9d3fe337649c318d3b5710fe89a0d9ec9b50e98bc73d00e25fe8fe53c842e", 0x32315241}) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') preadv(r5, 0x0, 0x0, 0x8, 0x0) r6 = getpid() syz_pidfd_open(r6, 0x0) (async) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) (async) setns(r7, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x9b8154a639e7733e) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) (async) r8 = fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbM:', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0x4000) pipe(&(0x7f0000000140)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0)) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x84002, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x84002, 0x0) 289.5011ms ago: executing program 0 (id=2653): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)) execve(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='ns\x00') getdents(r0, 0xffffffffffffffff, 0x5a) flock(0xffffffffffffffff, 0xff6df98cfde10021) 253.262574ms ago: executing program 0 (id=2654): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000004000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b00010064796e736574000008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0x20008050}, 0x20050800) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000480)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$FS_IOC_READ_VERITY_METADATA(r7, 0xc0286687, &(0x7f0000000140)={0x2, 0xfffffffffffffff8, 0x88, &(0x7f0000000080)=""/136}) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x70}, 0x1, 0x7}, 0x40000) fcntl$getown(r6, 0x9) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x54}, 0x1, 0x0, 0x0, 0x30000016}, 0x80) 82.104481ms ago: executing program 0 (id=2655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0}) r3 = socket(0x840000000002, 0x3, 0xff) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={'wlan1\x00', {0x2, 0x4e24, @broadcast}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000680)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x203, 0x0, 0x3, 0x0, 0x5, 0x4], 0xeeee0000, 0x280241}) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000040)=0x5) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x181}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x58, 0x1401, 0x20, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd000411000422"], 0x7a) 0s ago: executing program 1 (id=2656): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x1, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) (fail_nth: 5) kernel console output (not intermixed with test programs): 04][ T5895] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 550.717767][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 550.744114][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 550.832358][ T10] usb 2-1: USB disconnect, device number 90 [ 551.625181][ T10] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 551.646740][ T5895] usb 1-1: USB disconnect, device number 103 [ 551.659585][ T5895] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 551.683576][ T5895] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 551.759508][ T5895] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 551.800862][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 551.816593][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 551.835309][ T10] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 551.879496][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.911932][ T5895] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 551.925747][ T10] usb 2-1: Product: syz [ 551.929967][ T10] usb 2-1: Manufacturer: syz [ 551.941310][ T5892] usb 3-1: USB disconnect, device number 90 [ 551.994837][ T5895] keyspan 1-1:0.107: device disconnected [ 552.002142][ T10] usb 2-1: SerialNumber: syz [ 552.049115][ T10] usb 2-1: config 0 descriptor?? [ 552.105582][ T1537] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 552.287441][ T1537] usb 5-1: Using ep0 maxpacket: 8 [ 552.350650][ T1537] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 552.401847][ T1537] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 552.442618][ T1537] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 552.503569][ T10] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 552.533414][ T1537] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 552.642902][ T1537] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 552.713776][ T10] usb 2-1: USB disconnect, device number 91 [ 552.734211][ T1537] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.055403][T12501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2130'. [ 553.125493][ T1537] usb 5-1: usb_control_msg returned -32 [ 553.165276][ T1537] usbtmc 5-1:16.0: can't read capabilities [ 554.607598][T12533] FAULT_INJECTION: forcing a failure. [ 554.607598][T12533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.681136][T12533] CPU: 0 UID: 0 PID: 12533 Comm: syz.1.2141 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 554.681161][T12533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 554.681172][T12533] Call Trace: [ 554.681178][T12533] [ 554.681186][T12533] dump_stack_lvl+0x241/0x360 [ 554.681215][T12533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.681238][T12533] ? __pfx__printk+0x10/0x10 [ 554.681267][T12533] should_fail_ex+0x424/0x570 [ 554.681287][T12533] _copy_to_user+0x31/0xb0 [ 554.681311][T12533] simple_read_from_buffer+0xc4/0x170 [ 554.681338][T12533] proc_fail_nth_read+0x1ef/0x260 [ 554.681356][T12533] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 554.681374][T12533] ? rw_verify_area+0x246/0x630 [ 554.681390][T12533] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 554.681407][T12533] vfs_read+0x21f/0xb90 [ 554.681428][T12533] ? __pfx___mutex_lock+0x10/0x10 [ 554.681449][T12533] ? __pfx_vfs_read+0x10/0x10 [ 554.681468][T12533] ? __fget_files+0x2a/0x420 [ 554.681483][T12533] ? __fget_files+0x39d/0x420 [ 554.681495][T12533] ? __fget_files+0x2a/0x420 [ 554.681515][T12533] ksys_read+0x19d/0x2d0 [ 554.681534][T12533] ? __pfx_ksys_read+0x10/0x10 [ 554.681556][T12533] ? do_syscall_64+0xb6/0x230 [ 554.681577][T12533] do_syscall_64+0xf3/0x230 [ 554.681596][T12533] ? clear_bhb_loop+0x45/0xa0 [ 554.681614][T12533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.681629][T12533] RIP: 0033:0x7fdfe4f8bb7c [ 554.681643][T12533] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 554.681657][T12533] RSP: 002b:00007fdfe5e7b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 554.681674][T12533] RAX: ffffffffffffffda RBX: 00007fdfe51a6080 RCX: 00007fdfe4f8bb7c [ 554.681685][T12533] RDX: 000000000000000f RSI: 00007fdfe5e7b0a0 RDI: 0000000000000008 [ 554.681695][T12533] RBP: 00007fdfe5e7b090 R08: 0000000000000000 R09: 0000000000000000 [ 554.681704][T12533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.681713][T12533] R13: 0000000000000000 R14: 00007fdfe51a6080 R15: 00007fdfe52cfa28 [ 554.681736][T12533] [ 555.007863][T12535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2142'. [ 555.485570][ T5896] usb 5-1: USB disconnect, device number 89 [ 556.015471][ T5895] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 556.243887][T12561] netlink: 788 bytes leftover after parsing attributes in process `syz.4.2151'. [ 556.309885][ T5895] usb 1-1: config 0 has no interfaces? [ 556.344569][ T5895] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 556.363209][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.371414][ T5895] usb 1-1: Product: syz [ 556.380702][ T5895] usb 1-1: Manufacturer: syz [ 556.385495][ T5895] usb 1-1: SerialNumber: syz [ 556.406742][ T5895] usb 1-1: config 0 descriptor?? [ 556.955419][ T10] usb 1-1: USB disconnect, device number 104 [ 557.325663][ T9] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 557.455569][T12572] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 557.504969][ T9] usb 4-1: config 0 has no interfaces? [ 557.517049][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 557.541830][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.564180][T12572] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 557.575660][ T9] usb 4-1: Product: syz [ 557.580976][ T9] usb 4-1: Manufacturer: syz [ 557.586619][ T9] usb 4-1: SerialNumber: syz [ 557.612155][ T9] usb 4-1: config 0 descriptor?? [ 557.807943][T12576] FAULT_INJECTION: forcing a failure. [ 557.807943][T12576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.845261][T12576] CPU: 1 UID: 0 PID: 12576 Comm: syz.0.2156 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 557.845293][T12576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 557.845307][T12576] Call Trace: [ 557.845316][T12576] [ 557.845325][T12576] dump_stack_lvl+0x241/0x360 [ 557.845364][T12576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 557.845394][T12576] ? __pfx__printk+0x10/0x10 [ 557.845445][T12576] should_fail_ex+0x424/0x570 [ 557.845474][T12576] _copy_from_iter+0x211/0x1c70 [ 557.845505][T12576] ? skb_set_owner_w+0x246/0x380 [ 557.845533][T12576] ? sock_alloc_send_pskb+0x944/0xa70 [ 557.845562][T12576] ? __pfx__copy_from_iter+0x10/0x10 [ 557.845602][T12576] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 557.845632][T12576] skb_copy_datagram_from_iter+0xec/0x6c0 [ 557.845664][T12576] ? skb_put+0x114/0x1f0 [ 557.845690][T12576] tun_get_user+0x17f3/0x47c0 [ 557.845729][T12576] ? aa_file_perm+0x139/0xf60 [ 557.845763][T12576] ? aa_file_perm+0x139/0xf60 [ 557.845795][T12576] ? aa_file_perm+0x3f1/0xf60 [ 557.845825][T12576] ? __pfx_tun_get_user+0x10/0x10 [ 557.845850][T12576] ? __lock_acquire+0xad5/0xd80 [ 557.845877][T12576] ? ref_tracker_alloc+0x316/0x4c0 [ 557.845903][T12576] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 557.845943][T12576] ? tun_get+0x1e/0x2f0 [ 557.845975][T12576] ? tun_get+0x1e/0x2f0 [ 557.845991][T12576] ? tun_get+0x27d/0x2f0 [ 557.846011][T12576] tun_chr_write_iter+0x10d/0x1f0 [ 557.846046][T12576] vfs_write+0x70f/0xd10 [ 557.846078][T12576] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 557.846112][T12576] ? __pfx_vfs_write+0x10/0x10 [ 557.846138][T12576] ? __fget_files+0x2a/0x420 [ 557.846161][T12576] ? __fget_files+0x2a/0x420 [ 557.846189][T12576] ksys_write+0x19d/0x2d0 [ 557.846215][T12576] ? __pfx_ksys_write+0x10/0x10 [ 557.846245][T12576] ? do_syscall_64+0xb6/0x230 [ 557.846275][T12576] do_syscall_64+0xf3/0x230 [ 557.846319][T12576] ? clear_bhb_loop+0x45/0xa0 [ 557.846344][T12576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.846366][T12576] RIP: 0033:0x7f90a778d169 [ 557.846384][T12576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.846402][T12576] RSP: 002b:00007f90a850b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 557.846441][T12576] RAX: ffffffffffffffda RBX: 00007f90a79a5fa0 RCX: 00007f90a778d169 [ 557.846457][T12576] RDX: 000000000000007a RSI: 0000200000000480 RDI: 0000000000000003 [ 557.846471][T12576] RBP: 00007f90a850b090 R08: 0000000000000000 R09: 0000000000000000 [ 557.846485][T12576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.846498][T12576] R13: 0000000000000000 R14: 00007f90a79a5fa0 R15: 00007f90a7acfa28 [ 557.846531][T12576] [ 558.575289][ T9] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 558.685192][ T5892] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 558.736124][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 558.764879][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 558.835281][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 558.847091][ T5892] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 558.961850][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 558.972333][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.062796][ T5892] usb 5-1: Product: syz [ 559.070578][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 559.084176][ T5892] usb 5-1: Manufacturer: syz [ 559.095200][ T5892] usb 5-1: SerialNumber: syz [ 559.306755][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 559.328166][ T5892] usb 5-1: config 0 descriptor?? [ 559.373471][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 559.387196][ T5892] as10x_usb: device has been detected [ 559.393996][ T5892] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 559.775043][T12586] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2159'. [ 559.874173][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.972737][ T5892] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 560.091860][ T5892] as10x_usb: error during firmware upload part1 [ 560.128848][ T5892] Registered device Sky IT Digital Key (green led) [ 560.152913][ T5892] usb 5-1: USB disconnect, device number 90 [ 560.255209][ T9] usb 2-1: usb_control_msg returned -32 [ 560.289317][ T9] usbtmc 2-1:16.0: can't read capabilities [ 560.356310][ T5892] Unregistered device Sky IT Digital Key (green led) [ 560.358184][ T5892] as10x_usb: device has been disconnected [ 560.440597][T12609] fuse: Unknown parameter 'group_i' [ 560.822430][ T1537] usb 4-1: USB disconnect, device number 110 [ 562.385181][ T24] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 562.559944][ T5892] usb 2-1: USB disconnect, device number 92 [ 562.578689][ T24] usb 4-1: config 0 has an invalid interface number: 163 but max is 0 [ 562.587084][ T24] usb 4-1: config 0 has no interface number 0 [ 562.612534][ T24] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=90.11 [ 562.642137][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.668240][ T24] usb 4-1: Product: syz [ 562.672463][ T24] usb 4-1: Manufacturer: syz [ 562.695138][ T24] usb 4-1: SerialNumber: syz [ 562.717162][ T24] usb 4-1: config 0 descriptor?? [ 562.861070][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.867689][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.151003][ T24] ftdi_sio 4-1:0.163: FTDI USB Serial Device converter detected [ 563.184678][ T24] ftdi_sio ttyUSB0: unknown device type: 0x9011 [ 563.224931][ T24] usb 4-1: USB disconnect, device number 111 [ 563.272108][ T24] ftdi_sio 4-1:0.163: device disconnected [ 563.697761][T12654] program syz.0.2183 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 563.749524][T12655] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2183'. [ 563.759982][T12655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2183'. [ 564.077002][T12663] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2187'. [ 564.111043][T12666] netlink: 'syz.1.2188': attribute type 5 has an invalid length. [ 564.435166][ T5896] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 564.459842][T12676] syzkaller1: entered promiscuous mode [ 564.465628][T12676] syzkaller1: entered allmulticast mode [ 564.572324][T12682] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2194'. [ 564.637355][ T5896] usb 3-1: not running at top speed; connect to a high speed hub [ 564.706074][ T5896] usb 3-1: config 1 interface 0 has no altsetting 0 [ 564.729700][ T5896] usb 3-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 564.768631][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.844619][ T5896] usb 3-1: Product: syz [ 564.867967][ T5896] usb 3-1: Manufacturer: syz [ 564.896943][ T5896] usb 3-1: SerialNumber: syz [ 565.194796][T12691] program syz.4.2197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 565.236863][ T5896] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input38 [ 565.251083][T12691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2197'. [ 565.261162][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2197'. [ 565.290935][ T5196] bcm5974 3-1:1.0: could not read from device [ 565.342052][ T5896] usb 3-1: USB disconnect, device number 91 [ 565.348633][ T5196] bcm5974 3-1:1.0: could not read from device [ 565.435959][T12697] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2199'. [ 565.881118][T12716] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 566.035258][ T1537] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 566.043385][T12720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2208'. [ 566.105234][ T5896] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 566.200743][ T1537] usb 5-1: config 0 has no interfaces? [ 566.212227][ T1537] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 566.236381][ T1537] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.299770][ T5896] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 566.313843][ T1537] usb 5-1: Product: syz [ 566.345733][ T1537] usb 5-1: Manufacturer: syz [ 566.352743][ T5896] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 566.364442][ T1537] usb 5-1: SerialNumber: syz [ 566.391212][ T1537] usb 5-1: config 0 descriptor?? [ 566.404713][ T5896] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 566.429673][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 566.445455][ T5896] usb 3-1: Product: syz [ 566.597255][T12719] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 566.604866][T12719] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 566.618965][ T5896] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 566.881460][T12714] xt_CT: You must specify a L4 protocol and not use inversions on it [ 566.908129][ T5892] usb 3-1: USB disconnect, device number 92 [ 567.029020][T12733] xt_TCPMSS: Only works on TCP SYN packets [ 567.421887][T12736] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2212'. [ 568.598274][T12744] netlink: 788 bytes leftover after parsing attributes in process `syz.0.2213'. [ 569.055599][ T5896] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 569.270709][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.452248][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.485646][ T5896] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 569.533777][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.588831][ T5896] usb 3-1: config 0 descriptor?? [ 569.775174][ T1537] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 569.951706][ T1537] usb 2-1: not running at top speed; connect to a high speed hub [ 569.963333][ T1537] usb 2-1: config 1 interface 0 has no altsetting 0 [ 569.987023][ T1537] usb 2-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 570.043331][ T1537] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.054438][ T1537] usb 2-1: Product: syz [ 570.069097][ T1537] usb 2-1: Manufacturer: syz [ 570.082467][ T1537] usb 2-1: SerialNumber: syz [ 570.090609][ T5896] usbhid 3-1:0.0: can't add hid device: -71 [ 570.106488][ T5896] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 570.130406][ T5896] usb 3-1: USB disconnect, device number 93 [ 570.397466][ T1537] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input39 [ 570.448010][T12766] __nla_validate_parse: 1 callbacks suppressed [ 570.448034][T12766] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2221'. [ 570.466726][ T5196] bcm5974 2-1:1.0: could not read from device [ 570.490614][ T5196] bcm5974 2-1:1.0: could not read from device [ 570.499445][ T1537] usb 2-1: USB disconnect, device number 93 [ 571.186454][ T5892] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 571.305817][T12786] xt_recent: hitcount (33554432) is larger than allowed maximum (65535) [ 571.402409][ T5892] usb 3-1: config 0 has no interfaces? [ 571.643105][ T5892] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 571.663388][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.710104][ T5892] usb 3-1: Product: syz [ 571.725268][ T5892] usb 3-1: Manufacturer: syz [ 571.729910][ T5892] usb 3-1: SerialNumber: syz [ 571.766168][ T5892] usb 3-1: config 0 descriptor?? [ 572.520748][T12803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 572.995573][ T1537] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 573.156712][ T1537] usb 2-1: not running at top speed; connect to a high speed hub [ 573.166223][ T1537] usb 2-1: config 1 interface 0 has no altsetting 0 [ 573.186737][ T1537] usb 2-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 573.225172][ T1537] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.429823][ T1537] usb 2-1: Product: syz [ 573.463751][ T1537] usb 2-1: Manufacturer: syz [ 573.504740][ T1537] usb 2-1: SerialNumber: syz [ 573.755681][ T24] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 573.785324][ T9] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 573.902675][ T1537] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input40 [ 573.922899][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.951891][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.978110][ T5196] bcm5974 2-1:1.0: could not read from device [ 573.992758][ T1537] usb 2-1: USB disconnect, device number 94 [ 574.003798][ T5196] bcm5974 2-1:1.0: could not read from device [ 574.022569][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 574.056555][ T5196] bcm5974 2-1:1.0: could not read from device [ 574.085639][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 574.120281][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.147439][ T24] usb 4-1: config 0 descriptor?? [ 574.157480][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 574.164757][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.254796][ T5896] usb 3-1: USB disconnect, device number 94 [ 574.282295][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 574.365242][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 574.432596][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.520982][ T9] usb 1-1: config 0 descriptor?? [ 574.840325][T12812] "syz.3.2236" (12812) uses obsolete ecb(arc4) skcipher [ 574.995186][ T5895] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 575.017402][ T5892] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 575.047817][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 575.053877][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 575.076623][ T9] usb 1-1: USB disconnect, device number 105 [ 575.177015][ T5895] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 575.201576][ T5892] usb 2-1: not running at top speed; connect to a high speed hub [ 575.229991][ T5895] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 575.330329][ T5895] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 575.339788][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.353914][ T5892] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 575.391423][ T5892] usb 2-1: config 95 has no interface number 0 [ 575.525738][ T5892] usb 2-1: config 95 interface 1 has no altsetting 0 [ 575.573738][ T5892] usb 2-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 575.593399][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.620313][ T5892] usb 2-1: Product: syz [ 575.638350][ T5892] usb 2-1: Manufacturer: syz [ 575.660953][ T5892] usb 2-1: SerialNumber: syz [ 575.769660][T12817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.778733][T12817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.027742][T12819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.045650][T12819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.081844][T12819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.107338][T12819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.136630][ T5896] usb 3-1: USB disconnect, device number 95 [ 576.295806][T12819] GUP no longer grows the stack in syz.1.2239 (12819): 200000004000-20000000a000 (200000001000) [ 576.368235][T12819] CPU: 0 UID: 0 PID: 12819 Comm: syz.1.2239 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 576.368272][T12819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 576.368287][T12819] Call Trace: [ 576.368297][T12819] [ 576.368317][T12819] dump_stack_lvl+0x241/0x360 [ 576.368359][T12819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 576.368393][T12819] ? __pfx__printk+0x10/0x10 [ 576.368420][T12819] ? find_vma+0xfa/0x170 [ 576.368467][T12819] __get_user_pages+0x3b46/0x4180 [ 576.368543][T12819] ? __pfx___get_user_pages+0x10/0x10 [ 576.368575][T12819] ? __gup_longterm_locked+0xd86/0x1850 [ 576.368610][T12819] ? __pfx_down_read_killable+0x10/0x10 [ 576.368644][T12819] ? __lock_acquire+0xad5/0xd80 [ 576.368688][T12819] __gup_longterm_locked+0xec1/0x1850 [ 576.368738][T12819] ? try_get_folio+0xfd/0x6a0 [ 576.368762][T12819] ? try_grab_folio_fast+0x1d6/0x500 [ 576.368783][T12819] ? __pfx___gup_longterm_locked+0x10/0x10 [ 576.368827][T12819] ? gup_fast_fallback+0x203f/0x2980 [ 576.368864][T12819] gup_fast_fallback+0x2227/0x2980 [ 576.368931][T12819] ? __pfx_gup_fast_fallback+0x10/0x10 [ 576.368998][T12819] ? __lock_acquire+0xad5/0xd80 [ 576.369023][T12819] ? is_valid_gup_args+0x124/0x200 [ 576.369060][T12819] get_user_pages_fast+0xd2/0x160 [ 576.369095][T12819] ? __pfx_get_user_pages_fast+0x10/0x10 [ 576.369130][T12819] ? rcu_is_watching+0x15/0xb0 [ 576.369158][T12819] ? trace_contention_end+0x3c/0x120 [ 576.369193][T12819] __iov_iter_get_pages_alloc+0x39d/0xa90 [ 576.369235][T12819] ? __se_sys_vmsplice+0x4bc/0x1430 [ 576.369273][T12819] iov_iter_get_pages2+0xd1/0x130 [ 576.369316][T12819] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 576.369361][T12819] __se_sys_vmsplice+0x6c6/0x1430 [ 576.369430][T12819] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 576.369465][T12819] ? __pfx_futex_wake+0x10/0x10 [ 576.369554][T12819] ? do_syscall_64+0xb6/0x230 [ 576.369586][T12819] do_syscall_64+0xf3/0x230 [ 576.369613][T12819] ? clear_bhb_loop+0x45/0xa0 [ 576.369639][T12819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.369661][T12819] RIP: 0033:0x7fdfe4f8d169 [ 576.369681][T12819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.369700][T12819] RSP: 002b:00007fdfe5e9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 576.369724][T12819] RAX: ffffffffffffffda RBX: 00007fdfe51a5fa0 RCX: 00007fdfe4f8d169 [ 576.369740][T12819] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 000000000000000a [ 576.369755][T12819] RBP: 00007fdfe500e990 R08: 0000000000000000 R09: 0000000000000000 [ 576.369769][T12819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.369783][T12819] R13: 0000000000000000 R14: 00007fdfe51a5fa0 R15: 00007fdfe52cfa28 [ 576.369815][T12819] [ 576.736162][ T5895] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 577.139284][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 577.417412][ T5895] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.427676][ T5895] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 577.525662][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 577.548172][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 577.630936][ T24] usb 4-1: USB disconnect, device number 112 [ 577.665590][ T5896] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 577.675301][ T5895] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 577.775136][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.794301][ T5895] usb 1-1: config 0 descriptor?? [ 577.846271][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 577.877245][ T5892] usb 2-1: USB disconnect, device number 95 [ 577.914474][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.075276][ T5896] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 578.095288][ T24] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 578.133617][ T5896] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 578.185051][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.233264][ T5896] usb 3-1: config 0 descriptor?? [ 578.395305][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 578.403418][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.451676][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 578.480853][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.569029][ T24] usb 4-1: config 0 descriptor?? [ 578.795284][ T5892] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 578.949625][ T5892] usb 2-1: config 0 has no interfaces? [ 578.959447][ T5892] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 578.986944][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.026442][ T5892] usb 2-1: Product: syz [ 579.032466][T12734] Set syz1 is full, maxelem 65536 reached [ 579.061023][ T24] apple 0003:05AC:0254.0015: hidraw0: USB HID v0.03 Device [HID 05ac:0254] on usb-dummy_hcd.3-1/input0 [ 579.073552][ T5892] usb 2-1: Manufacturer: syz [ 579.082570][ T5892] usb 2-1: SerialNumber: syz [ 579.102671][ T5892] usb 2-1: config 0 descriptor?? [ 579.149174][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 579.256072][ T24] usb 4-1: USB disconnect, device number 113 [ 579.342320][ T1537] usb 5-1: USB disconnect, device number 91 [ 579.882791][T12849] FAULT_INJECTION: forcing a failure. [ 579.882791][T12849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.901939][T12849] CPU: 1 UID: 0 PID: 12849 Comm: syz.3.2246 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 579.901968][T12849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 579.901978][T12849] Call Trace: [ 579.901985][T12849] [ 579.901991][T12849] dump_stack_lvl+0x241/0x360 [ 579.902020][T12849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 579.902042][T12849] ? __pfx__printk+0x10/0x10 [ 579.902072][T12849] should_fail_ex+0x424/0x570 [ 579.902094][T12849] _copy_from_user+0x2d/0xb0 [ 579.902117][T12849] move_addr_to_kernel+0x7f/0x170 [ 579.902139][T12849] copy_msghdr_from_user+0x477/0x580 [ 579.902164][T12849] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 579.902183][T12849] ? __fget_files+0x2a/0x420 [ 579.902199][T12849] ? __fget_files+0x2a/0x420 [ 579.902219][T12849] __sys_sendmmsg+0x361/0x7b0 [ 579.902245][T12849] ? __pfx___sys_sendmmsg+0x10/0x10 [ 579.902287][T12849] ? rcu_read_lock_any_held+0xbb/0x160 [ 579.902307][T12849] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 579.902330][T12849] ? vfs_write+0xb29/0xd10 [ 579.902355][T12849] ? ksys_write+0x24e/0x2d0 [ 579.902374][T12849] ? __mutex_unlock_slowpath+0x229/0x800 [ 579.902415][T12849] ? ksys_write+0x275/0x2d0 [ 579.902441][T12849] __x64_sys_sendmmsg+0xa0/0xb0 [ 579.902459][T12849] do_syscall_64+0xf3/0x230 [ 579.902479][T12849] ? clear_bhb_loop+0x45/0xa0 [ 579.902497][T12849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.902512][T12849] RIP: 0033:0x7fcfd258d169 [ 579.902525][T12849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.902538][T12849] RSP: 002b:00007fcfd34ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 579.902554][T12849] RAX: ffffffffffffffda RBX: 00007fcfd27a5fa0 RCX: 00007fcfd258d169 [ 579.902566][T12849] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000005 [ 579.902576][T12849] RBP: 00007fcfd34ae090 R08: 0000000000000000 R09: 0000000000000000 [ 579.902586][T12849] R10: 0000000004008804 R11: 0000000000000246 R12: 0000000000000001 [ 579.902595][T12849] R13: 0000000000000000 R14: 00007fcfd27a5fa0 R15: 00007fcfd28cfa28 [ 579.902617][T12849] [ 579.955167][ T10] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 580.324107][ T10] usb 5-1: config 0 has no interfaces? [ 580.339533][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 580.361531][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.425690][T12827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.456617][ T1537] usb 1-1: USB disconnect, device number 106 [ 580.483841][ T10] usb 5-1: Product: syz [ 580.498765][ T10] usb 5-1: Manufacturer: syz [ 580.503737][ T10] usb 5-1: SerialNumber: syz [ 580.529022][ T10] usb 5-1: config 0 descriptor?? [ 580.739288][T12843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.752232][ T5896] usb 3-1: USB disconnect, device number 96 [ 580.860885][T12847] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2245'. [ 580.879052][ T1537] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 581.047450][ T1537] usb 1-1: not running at top speed; connect to a high speed hub [ 581.055506][ T10] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 581.074377][ T1537] usb 1-1: config 1 interface 0 has no altsetting 0 [ 581.112474][ T1537] usb 1-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 581.194985][ T1537] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.232665][ T1537] usb 1-1: Product: syz [ 581.234651][ T10] usb 4-1: config 0 has no interfaces? [ 581.250165][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 581.260006][ T1537] usb 1-1: Manufacturer: syz [ 581.264869][ T1537] usb 1-1: SerialNumber: syz [ 581.264947][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.484748][ T10] usb 4-1: Product: syz [ 581.524120][ T10] usb 4-1: Manufacturer: syz [ 581.543622][ T5896] usb 2-1: USB disconnect, device number 96 [ 581.579255][ T10] usb 4-1: SerialNumber: syz [ 581.689627][ T1537] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input42 [ 581.695630][ T10] usb 4-1: config 0 descriptor?? [ 581.714179][ T5196] bcm5974 1-1:1.0: could not read from device [ 581.746450][T12868] netlink: 'syz.1.2252': attribute type 12 has an invalid length. [ 581.754856][T12868] netlink: 'syz.1.2252': attribute type 29 has an invalid length. [ 581.765730][ T5196] bcm5974 1-1:1.0: could not read from device [ 581.785434][T12868] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2252'. [ 581.794544][T12868] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2252'. [ 581.849596][ T5196] bcm5974 1-1:1.0: could not read from device [ 581.877158][ T1537] usb 1-1: USB disconnect, device number 107 [ 582.485254][ T1537] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 582.581303][ T5896] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 582.610264][T12881] ip6t_srh: unknown srh invflags 4449 [ 582.658113][ T1537] usb 2-1: config 0 has an invalid interface number: 32 but max is 0 [ 582.666841][ T1537] usb 2-1: config 0 has no interface number 0 [ 582.673815][ T1537] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 582.686391][ T1537] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.709591][ T1537] usb 2-1: config 0 descriptor?? [ 582.724253][ T1537] cp210x 2-1:0.32: cp210x converter detected [ 582.745220][ T5896] usb 1-1: Using ep0 maxpacket: 32 [ 582.753791][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.768102][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.809771][ T5896] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 582.850819][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.855795][ T5895] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 583.038987][ T10] usb 5-1: USB disconnect, device number 92 [ 583.117486][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 583.133152][ T1537] cp210x 2-1:0.32: failed to get vendor val 0x000e size 3: -32 [ 583.145774][ T5896] usb 1-1: config 0 descriptor?? [ 583.172766][ T5895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.209516][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 583.252931][ T5895] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 583.348874][ T1537] cp210x 2-1:0.32: GPIO initialisation failed: -19 [ 583.425998][ T1537] usb 2-1: cp210x converter now attached to ttyUSB0 [ 583.574599][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.636904][ T5895] usb 3-1: Product: syz [ 583.775119][ T5895] usb 3-1: Manufacturer: syz [ 583.785500][ T5895] usb 3-1: SerialNumber: syz [ 583.806220][ T5895] usb 3-1: config 0 descriptor?? [ 583.849818][ T1537] usb 4-1: USB disconnect, device number 114 [ 584.299848][ T24] usb 2-1: USB disconnect, device number 97 [ 584.310886][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 584.322897][ T24] cp210x 2-1:0.32: device disconnected [ 584.405494][ T10] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 584.625596][ T10] usb 4-1: device descriptor read/64, error -71 [ 584.885211][ T10] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 585.045234][ T10] usb 4-1: device descriptor read/64, error -71 [ 585.176254][ T10] usb usb4-port1: attempt power cycle [ 585.430839][ T5896] usbhid 1-1:0.0: can't add hid device: -71 [ 585.441750][ T5896] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 585.490305][ T5896] usb 1-1: USB disconnect, device number 108 [ 585.535394][ T10] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 585.558511][ T10] usb 4-1: device descriptor read/8, error -71 [ 585.715454][ T5895] usb 3-1: USB disconnect, device number 97 [ 585.965244][ T10] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 586.046044][ T10] usb 4-1: device descriptor read/8, error -71 [ 586.075278][ T1537] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 586.156682][ T10] usb usb4-port1: unable to enumerate USB device [ 586.189920][T12915] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2265'. [ 586.570471][ T1537] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 586.634967][ T1537] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 586.680503][ T1537] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 586.711149][ T1537] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.835511][ T10] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 587.215312][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 587.251480][ T10] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 587.309251][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.360374][ T10] usb 3-1: Product: syz [ 587.388723][ T10] usb 3-1: Manufacturer: syz [ 587.535294][ T10] usb 3-1: SerialNumber: syz [ 587.736034][ T24] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 587.805242][ T1537] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 587.806194][ T10] usb 3-1: config 0 descriptor?? [ 587.872348][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 587.924985][ T24] usb 2-1: config 0 has no interfaces? [ 587.943419][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 587.953711][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2270'. [ 587.963740][T12932] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2270'. [ 588.104109][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.293961][ T10] gspca_se401: Bayer format not supported! [ 588.354066][ T24] usb 2-1: Product: syz [ 588.396547][ T24] usb 2-1: Manufacturer: syz [ 588.401277][ T24] usb 2-1: SerialNumber: syz [ 588.449406][ T1537] usb 4-1: config 0 has no interfaces? [ 588.491475][ T24] usb 2-1: config 0 descriptor?? [ 588.554012][ T1537] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 588.567516][ T10] usb 3-1: USB disconnect, device number 98 [ 588.627741][ T1537] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.672235][ T1537] usb 4-1: Product: syz [ 588.680305][ T1537] usb 4-1: Manufacturer: syz [ 588.702106][ T1537] usb 4-1: SerialNumber: syz [ 588.739257][T12928] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2268'. [ 588.757207][ T1537] usb 4-1: config 0 descriptor?? [ 589.083481][ T1537] usb 5-1: USB disconnect, device number 93 [ 589.621806][T12945] xt_HMARK: proto mask must be zero with L3 mode [ 589.843285][T12944] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2274'. [ 590.730954][T12961] xt_TCPMSS: Only works on TCP SYN packets [ 591.062825][ T10] usb 4-1: USB disconnect, device number 119 [ 591.496877][ T1537] usb 2-1: USB disconnect, device number 98 [ 592.605225][ T1537] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 592.866870][ T1537] usb 1-1: Using ep0 maxpacket: 16 [ 593.685370][ T5896] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 593.693321][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 593.875346][ T5896] usb 4-1: device descriptor read/64, error -32 [ 594.115215][ T5896] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 594.265265][ T5896] usb 4-1: device descriptor read/64, error -71 [ 594.376913][ T5896] usb usb4-port1: attempt power cycle [ 594.592069][T13008] usb usb8: usbfs: process 13008 (syz.1.2290) did not claim interface 0 before use [ 594.765808][ T5896] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 594.834904][ T5896] usb 4-1: device descriptor read/8, error -71 [ 595.149010][ T5896] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 595.346185][ T5896] usb 4-1: device descriptor read/8, error -71 [ 595.540557][ T5896] usb usb4-port1: unable to enumerate USB device [ 596.155306][ T24] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 596.182479][ T1537] usb 1-1: unable to get BOS descriptor or descriptor too short [ 596.237401][ T1537] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 596.305211][ T1537] usb 1-1: can't read configurations, error -71 [ 596.359019][ T24] usb 5-1: config 0 has no interfaces? [ 596.393362][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 596.412585][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.431761][ T24] usb 5-1: Product: syz [ 596.439753][ T24] usb 5-1: Manufacturer: syz [ 596.476209][ T24] usb 5-1: SerialNumber: syz [ 596.514267][ T24] usb 5-1: config 0 descriptor?? [ 596.884399][T13014] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2292'. [ 598.235193][ T24] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 598.520369][ T24] usb 2-1: config 0 has no interfaces? [ 598.536693][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 598.548921][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.557612][ T24] usb 2-1: Product: syz [ 598.564784][ T24] usb 2-1: Manufacturer: syz [ 598.579796][ T24] usb 2-1: SerialNumber: syz [ 598.593198][ T24] usb 2-1: config 0 descriptor?? [ 598.994659][T13061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.011528][T13061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.115237][ T5895] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 599.171561][ T24] usb 5-1: USB disconnect, device number 94 [ 599.514532][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 599.532309][ T5895] usb 1-1: config 252 has an invalid interface number: 187 but max is 0 [ 599.593529][T13073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2308'. [ 599.623110][T13073] bridge0: port 3(syz_tun) entered blocking state [ 599.625119][ T5895] usb 1-1: config 252 has no interface number 0 [ 599.629808][T13073] bridge0: port 3(syz_tun) entered forwarding state [ 599.642752][T13073] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.649895][T13073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.657342][T13073] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.664473][T13073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.719705][T13073] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 599.736693][ T5895] usb 1-1: New USB device found, idVendor=07ca, idProduct=a867, bcdDevice=2d.22 [ 599.810762][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.205916][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 600.218340][ C0] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1c used by aa:aa:aa:aa:aa:1c detected! [ 601.065659][ T5895] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 601.225211][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 601.394850][ T5895] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 601.525282][ T5895] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 601.537914][ T5895] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 601.547317][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.555986][ T5895] usb 5-1: Product: syz [ 601.562627][ T5895] usb 5-1: Manufacturer: syz [ 601.578609][ T5895] usb 5-1: SerialNumber: syz [ 601.631233][ T10] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 601.802095][ T5895] usb 5-1: 0:2 : does not exist [ 601.815613][ T10] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 601.828982][ T10] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 601.843706][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 601.858037][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.870345][ T5895] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 602.028001][ T5895] usb 5-1: USB disconnect, device number 95 [ 602.044575][ T1537] usb 1-1: USB disconnect, device number 111 [ 602.456419][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 602.555266][ T10] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 602.819157][ T10] usb 1-1: config 0 has no interfaces? [ 602.831558][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 602.865308][ T1537] usb 2-1: USB disconnect, device number 99 [ 602.893276][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.923739][ T10] usb 1-1: Product: syz [ 602.944333][ T10] usb 1-1: Manufacturer: syz [ 602.969789][T13101] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2317'. [ 603.074326][ T10] usb 1-1: SerialNumber: syz [ 603.164463][ T10] usb 1-1: config 0 descriptor?? [ 603.916782][ T5895] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 603.950652][T13095] bridge0: port 3(syz_tun) entered disabled state [ 604.039646][T13095] syz_tun (unregistering): left allmulticast mode [ 604.046685][T13095] syz_tun (unregistering): left promiscuous mode [ 604.053297][T13095] bridge0: port 3(syz_tun) entered disabled state [ 604.138433][ T5895] usb 2-1: config 0 has no interfaces? [ 604.148719][ T5895] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 604.159161][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.176589][ T5895] usb 2-1: Product: syz [ 604.214048][ T5895] usb 2-1: Manufacturer: syz [ 604.232952][ T5895] usb 2-1: SerialNumber: syz [ 604.254725][ T5895] usb 2-1: config 0 descriptor?? [ 604.451266][ T5895] usb 3-1: USB disconnect, device number 99 [ 604.518296][T13110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2319'. [ 604.889780][ T9] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 605.213715][ T9] usb 5-1: config 0 has no interfaces? [ 605.443790][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 605.453693][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.463228][ T9] usb 5-1: Product: syz [ 605.468046][ T9] usb 5-1: Manufacturer: syz [ 605.472760][ T9] usb 5-1: SerialNumber: syz [ 605.523151][ T9] usb 5-1: config 0 descriptor?? [ 606.125140][ T10] usb 1-1: USB disconnect, device number 112 [ 606.372030][T13128] netlink: 'syz.3.2324': attribute type 8 has an invalid length. [ 607.315176][ T10] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 607.459048][ T5896] usb 2-1: USB disconnect, device number 100 [ 607.517155][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 607.544263][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=8b.55 [ 607.604000][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.700485][ T10] usb 4-1: config 0 descriptor?? [ 607.719804][ T10] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 607.845909][ T5896] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 607.930084][ T1537] usb 5-1: USB disconnect, device number 96 [ 607.937054][T13134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.967556][T13134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.035145][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 608.075881][ T5896] usb 2-1: config 252 has an invalid interface number: 187 but max is 0 [ 608.084278][ T5896] usb 2-1: config 252 has no interface number 0 [ 608.119725][ T5896] usb 2-1: New USB device found, idVendor=07ca, idProduct=a867, bcdDevice=2d.22 [ 608.156268][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.246925][ T10] gspca_sn9c2028: read1 error -110 [ 608.258926][ T10] gspca_sn9c2028: read1 error -32 [ 608.274707][ T10] gspca_sn9c2028: read1 error -32 [ 608.300337][ T10] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -32 [ 608.450052][T13138] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 609.739583][T13148] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2329'. [ 609.769692][ T9] usb 4-1: USB disconnect, device number 124 [ 609.815650][T13148] netem: change failed [ 610.235282][ T9] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 610.375175][ T9] usb 4-1: device descriptor read/64, error -71 [ 610.625225][ T9] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 610.785196][ T9] usb 4-1: device descriptor read/64, error -71 [ 610.905444][ T9] usb usb4-port1: attempt power cycle [ 611.040070][T13173] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2334'. [ 611.245132][ T9] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 611.323925][ T9] usb 4-1: device descriptor read/8, error -71 [ 611.352171][ T1537] usb 2-1: USB disconnect, device number 101 [ 611.445395][ T5896] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 611.598296][ T5896] usb 1-1: config 0 has no interfaces? [ 611.607199][ T5896] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 611.616674][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.624743][ T5896] usb 1-1: Product: syz [ 611.696361][ T5896] usb 1-1: Manufacturer: syz [ 611.755620][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 611.772876][ T5896] usb 1-1: SerialNumber: syz [ 611.820811][ T9] usb 4-1: device descriptor read/8, error -71 [ 611.861664][ T5896] usb 1-1: config 0 descriptor?? [ 611.927286][ T1537] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 611.958188][ T9] usb usb4-port1: unable to enumerate USB device [ 612.204971][T13172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2336'. [ 613.445374][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 613.692345][ T9] usb 4-1: config 0 has no interfaces? [ 613.704431][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 613.713841][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.746216][ T9] usb 4-1: Product: syz [ 613.827654][ T9] usb 4-1: Manufacturer: syz [ 613.924811][ T9] usb 4-1: SerialNumber: syz [ 613.961373][ T9] usb 4-1: config 0 descriptor?? [ 614.303887][T13192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2340'. [ 615.603478][ T47] usb 1-1: USB disconnect, device number 113 [ 616.005402][T13197] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 616.645284][ T5895] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 616.725541][T13215] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 616.792451][ T1537] usb 4-1: USB disconnect, device number 3 [ 616.805339][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 616.813646][T13215] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 616.854033][ T5895] usb 3-1: config 252 has an invalid interface number: 187 but max is 0 [ 616.895226][ T5895] usb 3-1: config 252 has no interface number 0 [ 616.901612][ T5895] usb 3-1: New USB device found, idVendor=07ca, idProduct=a867, bcdDevice=2d.22 [ 616.959532][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.140002][T13223] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2350'. [ 619.138386][ T10] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 619.466449][ T10] usb 2-1: config 0 has no interfaces? [ 619.475239][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 619.504923][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.524986][ T10] usb 2-1: Product: syz [ 619.539156][ T10] usb 2-1: Manufacturer: syz [ 619.545603][ T5895] usb 3-1: USB disconnect, device number 100 [ 619.565541][ T10] usb 2-1: SerialNumber: syz [ 619.636408][ T10] usb 2-1: config 0 descriptor?? [ 620.145276][ T5895] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 620.308335][ T5895] usb 3-1: config 0 has no interfaces? [ 620.360250][ T5895] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 620.397408][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.452702][ T5895] usb 3-1: Product: syz [ 620.495219][ T10] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 620.521332][ T5895] usb 3-1: Manufacturer: syz [ 620.536530][ T5895] usb 3-1: SerialNumber: syz [ 620.549868][ T5895] usb 3-1: config 0 descriptor?? [ 620.648872][ T10] usb 1-1: device descriptor read/64, error -71 [ 620.831521][T13247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2355'. [ 620.916510][ T10] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 621.075180][ T10] usb 1-1: device descriptor read/64, error -71 [ 621.185601][ T10] usb usb1-port1: attempt power cycle [ 621.300373][T13252] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 621.535264][ T10] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 621.622890][ T10] usb 1-1: device descriptor read/8, error -71 [ 621.825229][ T5895] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 621.865224][ T10] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 621.887295][ T10] usb 1-1: device descriptor read/8, error -71 [ 621.982625][ T5895] usb 4-1: config 0 has no interfaces? [ 621.997569][ T10] usb usb1-port1: unable to enumerate USB device [ 622.005598][ T5895] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 622.019963][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.043163][ T5895] usb 4-1: Product: syz [ 622.052285][ T5895] usb 4-1: Manufacturer: syz [ 622.061676][ T5895] usb 4-1: SerialNumber: syz [ 622.074562][ T5895] usb 4-1: config 0 descriptor?? [ 622.470883][ T10] usb 2-1: USB disconnect, device number 103 [ 622.657895][T13266] FAULT_INJECTION: forcing a failure. [ 622.657895][T13266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.671923][T13266] CPU: 0 UID: 0 PID: 13266 Comm: syz.1.2361 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 622.671955][T13266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 622.671969][T13266] Call Trace: [ 622.671978][T13266] [ 622.671988][T13266] dump_stack_lvl+0x241/0x360 [ 622.672028][T13266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 622.672060][T13266] ? __pfx__printk+0x10/0x10 [ 622.672112][T13266] should_fail_ex+0x424/0x570 [ 622.672140][T13266] _copy_from_user+0x2d/0xb0 [ 622.672172][T13266] ____sys_sendmsg+0x324/0x860 [ 622.672206][T13266] ? __pfx_____sys_sendmsg+0x10/0x10 [ 622.672228][T13266] ? __fget_files+0x2a/0x420 [ 622.672251][T13266] ? __fget_files+0x2a/0x420 [ 622.672281][T13266] __sys_sendmmsg+0x3a0/0x7b0 [ 622.672317][T13266] ? __pfx___sys_sendmmsg+0x10/0x10 [ 622.672378][T13266] ? rcu_read_lock_any_held+0xbb/0x160 [ 622.672408][T13266] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 622.672440][T13266] ? vfs_write+0xb29/0xd10 [ 622.672475][T13266] ? ksys_write+0x24e/0x2d0 [ 622.672502][T13266] ? __mutex_unlock_slowpath+0x229/0x800 [ 622.672561][T13266] ? ksys_write+0x275/0x2d0 [ 622.672598][T13266] __x64_sys_sendmmsg+0xa0/0xb0 [ 622.672624][T13266] do_syscall_64+0xf3/0x230 [ 622.672652][T13266] ? clear_bhb_loop+0x45/0xa0 [ 622.672677][T13266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.672698][T13266] RIP: 0033:0x7fdfe4f8d169 [ 622.672717][T13266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.672736][T13266] RSP: 002b:00007fdfe5e9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 622.672759][T13266] RAX: ffffffffffffffda RBX: 00007fdfe51a5fa0 RCX: 00007fdfe4f8d169 [ 622.672775][T13266] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000005 [ 622.672789][T13266] RBP: 00007fdfe5e9c090 R08: 0000000000000000 R09: 0000000000000000 [ 622.672806][T13266] R10: 0000000004008804 R11: 0000000000000246 R12: 0000000000000001 [ 622.672819][T13266] R13: 0000000000000000 R14: 00007fdfe51a5fa0 R15: 00007fdfe52cfa28 [ 622.672851][T13266] [ 623.069489][ T10] usb 3-1: USB disconnect, device number 101 [ 623.243094][T13270] bridge0: port 5(macsec0) entered blocking state [ 623.278236][T13270] bridge0: port 5(macsec0) entered disabled state [ 623.291813][T13270] macsec0: entered allmulticast mode [ 623.498703][T13270] veth1_macvtap: entered allmulticast mode [ 623.510339][T13270] macsec0: entered promiscuous mode [ 623.516525][T13270] bridge0: port 5(macsec0) entered blocking state [ 623.523208][T13270] bridge0: port 5(macsec0) entered forwarding state [ 623.725451][ T10] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 623.875236][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 623.885287][ T10] usb 1-1: config 252 has an invalid interface number: 187 but max is 0 [ 623.894826][ T10] usb 1-1: config 252 has no interface number 0 [ 623.929281][ T10] usb 1-1: New USB device found, idVendor=07ca, idProduct=a867, bcdDevice=2d.22 [ 623.955638][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.217080][T13288] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2366'. [ 624.301982][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.302045][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.323791][ T1537] usb 4-1: USB disconnect, device number 4 [ 626.761187][ T1537] usb 1-1: USB disconnect, device number 118 [ 627.263830][T13311] FAULT_INJECTION: forcing a failure. [ 627.263830][T13311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.280512][T13311] CPU: 1 UID: 0 PID: 13311 Comm: syz.2.2373 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 627.280535][T13311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 627.280545][T13311] Call Trace: [ 627.280552][T13311] [ 627.280558][T13311] dump_stack_lvl+0x241/0x360 [ 627.280587][T13311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.280616][T13311] ? __pfx__printk+0x10/0x10 [ 627.280647][T13311] should_fail_ex+0x424/0x570 [ 627.280675][T13311] _copy_from_user+0x2d/0xb0 [ 627.280707][T13311] copy_msghdr_from_user+0xb3/0x580 [ 627.280744][T13311] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 627.280773][T13311] ? __fget_files+0x2a/0x420 [ 627.280790][T13311] ? __fget_files+0x2a/0x420 [ 627.280810][T13311] __sys_sendmsg+0x20a/0x360 [ 627.280831][T13311] ? __pfx___sys_sendmsg+0x10/0x10 [ 627.280886][T13311] ? do_syscall_64+0xb6/0x230 [ 627.280908][T13311] do_syscall_64+0xf3/0x230 [ 627.280926][T13311] ? clear_bhb_loop+0x45/0xa0 [ 627.280944][T13311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.280960][T13311] RIP: 0033:0x7eff2378d169 [ 627.280973][T13311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.280986][T13311] RSP: 002b:00007eff24531038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.281002][T13311] RAX: ffffffffffffffda RBX: 00007eff239a5fa0 RCX: 00007eff2378d169 [ 627.281014][T13311] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000004 [ 627.281024][T13311] RBP: 00007eff24531090 R08: 0000000000000000 R09: 0000000000000000 [ 627.281033][T13311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.281043][T13311] R13: 0000000000000000 R14: 00007eff239a5fa0 R15: 00007eff23acfa28 [ 627.281065][T13311] [ 627.520824][ T10] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 627.608458][T13299] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 627.821034][ T10] usb 1-1: config 0 has no interfaces? [ 627.830930][T13313] loop2: detected capacity change from 0 to 7 [ 627.851284][T13313] Dev loop2: unable to read RDB block 7 [ 627.861448][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 627.866815][T13313] loop2: unable to read partition table [ 627.954100][T13313] loop2: partition table beyond EOD, truncated [ 627.970133][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.991430][T13313] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 628.036855][T13318] netlink: 249 bytes leftover after parsing attributes in process `syz.3.2375'. [ 628.108263][ T10] usb 1-1: Product: syz [ 628.112485][ T10] usb 1-1: Manufacturer: syz [ 628.183568][ T10] usb 1-1: SerialNumber: syz [ 628.377194][ T10] usb 1-1: config 0 descriptor?? [ 628.763189][T13334] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2377'. [ 628.798133][T13310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2372'. [ 630.791307][ T5892] usb 1-1: USB disconnect, device number 119 [ 631.101408][T13360] syz.3.2386 (13360): drop_caches: 0 [ 631.112833][T13360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2386'. [ 631.124788][T13360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2386'. [ 631.425312][ T5896] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 631.569980][T13363] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 631.588641][ T5896] usb 3-1: config 0 has no interfaces? [ 631.605785][ T5896] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 631.614947][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.623445][ T5896] usb 3-1: Product: syz [ 631.627793][ T5896] usb 3-1: Manufacturer: syz [ 631.634816][ T5896] usb 3-1: SerialNumber: syz [ 631.747115][ T5896] usb 3-1: config 0 descriptor?? [ 633.035285][ T47] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 633.189108][ T47] usb 1-1: config 0 has no interfaces? [ 633.252012][ T47] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 633.296995][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.367767][ T47] usb 1-1: Product: syz [ 633.382517][ T47] usb 1-1: Manufacturer: syz [ 633.388038][ T47] usb 1-1: SerialNumber: syz [ 633.396942][ T47] usb 1-1: config 0 descriptor?? [ 633.837980][T13388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2394'. [ 633.995217][ T1537] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 634.304932][ T1537] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 634.361831][ T5892] usb 3-1: USB disconnect, device number 102 [ 634.405180][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 634.420657][ T1537] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 634.463968][ T1537] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 634.495208][ T1537] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.585355][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 634.608638][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.619799][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.656944][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 634.724515][ T10] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 634.844556][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.910229][ T10] usb 4-1: config 0 descriptor?? [ 635.142597][T13405] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 635.520821][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 635.553729][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 635.610589][ T10] usb 4-1: USB disconnect, device number 5 [ 635.985275][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 636.145662][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 636.196090][ T10] usb 4-1: config 252 has an invalid interface number: 187 but max is 0 [ 636.211406][ T10] usb 4-1: config 252 has no interface number 0 [ 636.222235][ T10] usb 4-1: New USB device found, idVendor=07ca, idProduct=a867, bcdDevice=2d.22 [ 636.239860][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.285325][ T5896] usb 1-1: USB disconnect, device number 120 [ 637.131897][ T10] usb 2-1: USB disconnect, device number 104 [ 638.804306][ T5895] usb 4-1: USB disconnect, device number 6 [ 639.245318][ T5896] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 639.447714][ T5896] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 639.468678][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.541797][ T5896] usb 4-1: Product: syz [ 639.564729][ T5896] usb 4-1: Manufacturer: syz [ 639.585968][ T5896] usb 4-1: SerialNumber: syz [ 639.766293][ T5896] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 639.855386][ T24] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 639.875267][ T47] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 640.042383][ T47] usb 5-1: config 0 has no interfaces? [ 640.053420][ T47] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 640.073323][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.081971][ C1] usb 4-1: ath: unknown panic pattern! [ 640.097660][ T47] usb 5-1: Product: syz [ 640.107822][ T47] usb 5-1: Manufacturer: syz [ 640.125817][ T47] usb 5-1: SerialNumber: syz [ 640.164391][ T47] usb 5-1: config 0 descriptor?? [ 640.446490][T13470] netlink: 4232 bytes leftover after parsing attributes in process `syz.3.2417'. [ 640.686682][T13465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2418'. [ 640.946139][ T24] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 640.953451][ T24] ath9k_htc: Failed to initialize the device [ 640.961789][ T47] usb 4-1: USB disconnect, device number 7 [ 640.981789][ T47] usb 4-1: ath9k_htc: USB layer deinitialized [ 642.409407][T13485] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2422'. [ 643.029275][T13496] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2421'. [ 644.245180][ T10] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 644.624087][ T47] usb 5-1: USB disconnect, device number 97 [ 644.701262][ T10] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 644.755217][ T10] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 644.813480][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 644.862859][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.070652][T13513] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2428'. [ 645.090217][T13513] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2428'. [ 645.140058][ T5895] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 645.355870][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 645.376386][ T5895] usb 5-1: config 252 has an invalid interface number: 187 but max is 0 [ 645.384899][ T5895] usb 5-1: config 252 has no interface number 0 [ 645.883690][ T5895] usb 5-1: New USB device found, idVendor=07ca, idProduct=a867, bcdDevice=2d.22 [ 645.974220][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.015312][ T47] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 646.202937][ T47] usb 2-1: config 0 has no interfaces? [ 646.213544][ T47] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 646.227144][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.241857][ T47] usb 2-1: Product: syz [ 646.258147][ T47] usb 2-1: Manufacturer: syz [ 646.274050][ T47] usb 2-1: SerialNumber: syz [ 647.006566][ T47] usb 2-1: config 0 descriptor?? [ 647.119869][ T47] usb 3-1: USB disconnect, device number 103 [ 647.191310][T13526] netlink: 'syz.2.2431': attribute type 4 has an invalid length. [ 647.212557][T13527] netlink: 'syz.2.2431': attribute type 4 has an invalid length. [ 647.666869][ T47] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 647.795289][ T5896] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 647.838067][ T47] usb 3-1: config 1 has an invalid interface number: 116 but max is 0 [ 647.853230][ T47] usb 3-1: config 1 has no interface number 0 [ 647.866496][ T47] usb 3-1: config 1 interface 116 has no altsetting 0 [ 647.885291][ T47] usb 3-1: New USB device found, idVendor=0499, idProduct=101c, bcdDevice=52.c1 [ 647.899919][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.908535][ T47] usb 3-1: Product: syz [ 647.912804][ T47] usb 3-1: Manufacturer: syz [ 647.921005][ T47] usb 3-1: SerialNumber: syz [ 647.960204][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.992005][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.002894][T13539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2435'. [ 648.031482][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 648.048171][ T5896] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 648.059918][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.088943][ T5896] usb 1-1: config 0 descriptor?? [ 648.173457][ T47] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 648.240178][ T47] usb 3-1: USB disconnect, device number 104 [ 648.352563][ T24] usb 5-1: USB disconnect, device number 98 [ 648.446830][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.116/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 648.544988][ T5896] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 648.574452][ T5896] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 648.795172][ T24] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 648.886245][T13549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.965486][T13549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.054176][ T47] usb 1-1: USB disconnect, device number 121 [ 649.068341][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 649.089128][ T5892] usb 2-1: USB disconnect, device number 105 [ 649.122295][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 649.155201][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 649.186313][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 649.239941][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 649.253026][ T5896] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 649.437654][ T24] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 649.466758][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.481080][ T5896] usb 4-1: config 0 has no interfaces? [ 649.521030][ T5896] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 649.535579][ T24] usb 5-1: Product: syz [ 649.539849][ T24] usb 5-1: Manufacturer: syz [ 649.546259][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.554304][ T24] usb 5-1: SerialNumber: syz [ 649.560899][ T5896] usb 4-1: Product: syz [ 649.566499][ T24] usb 5-1: config 0 descriptor?? [ 649.573197][ T5896] usb 4-1: Manufacturer: syz [ 649.582814][ T24] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 649.639066][ T5896] usb 4-1: SerialNumber: syz [ 649.646349][ T24] imon 5-1:0.0: unable to initialize intf0, err -90 [ 649.654179][ T5896] usb 4-1: config 0 descriptor?? [ 649.668418][ T24] imon:imon_probe: failed to initialize context! [ 649.734575][ T5892] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 649.742546][ T24] imon 5-1:0.0: unable to register, err -19 [ 649.786944][T13541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.802023][T13541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.830981][T13541] netlink: 'syz.4.2436': attribute type 7 has an invalid length. [ 649.845454][T13541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2436'. [ 649.879545][T13542] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2436'. [ 649.885435][T13541] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2436'. [ 649.942846][ T5895] usb 5-1: USB disconnect, device number 99 [ 649.958109][ T5892] usb 2-1: unable to get BOS descriptor or descriptor too short [ 649.968264][ T5892] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 649.978480][ T5892] usb 2-1: config 1 has no interface number 1 [ 649.991216][ T5892] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 650.023633][ T5892] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 650.033250][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.053344][ T24] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 650.088443][ T5892] usb 2-1: Product: syz [ 650.092698][ T5892] usb 2-1: Manufacturer: syz [ 650.098223][ T5892] usb 2-1: SerialNumber: syz [ 650.216357][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 650.225686][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 650.237857][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 650.248699][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.271579][ T24] usb 3-1: Product: syz [ 650.277299][ T24] usb 3-1: Manufacturer: syz [ 650.282254][ T24] usb 3-1: SerialNumber: syz [ 650.379267][ T5892] usb 2-1: found format II with max.bitrate = 26774, frame size=2 [ 650.389491][ T5892] usb 2-1: found format II with max.bitrate = 26774, frame size=2 [ 650.410031][ T5892] usb 2-1: failed to enable PITCH for EP 0x82 [ 650.469890][ T5892] usb 2-1: USB disconnect, device number 106 [ 650.573660][ T24] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input44 [ 650.600672][ T5196] bcm5974 3-1:1.0: could not read from device [ 650.610718][ T5196] bcm5974 3-1:1.0: could not read from device [ 650.631861][ T5196] bcm5974 3-1:1.0: could not read from device [ 650.641734][ T24] usb 3-1: USB disconnect, device number 105 [ 650.649674][ T5196] bcm5974 3-1:1.0: could not read from device [ 650.751863][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 650.763089][T13566] bridge0: port 2(macsec0) entered disabled state [ 650.774682][T13566] bridge0: port 1(syz_tun) entered disabled state [ 651.118016][T13571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2447'. [ 651.395209][ T5895] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 651.535483][ T24] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 651.545398][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 651.552903][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.683991][ T5895] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 651.707129][ T5896] usb 4-1: USB disconnect, device number 8 [ 651.749722][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.815995][ T24] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 651.827319][ T5895] usb 5-1: config 0 descriptor?? [ 651.855037][T13581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.881597][T13581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.926744][ T24] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 652.028406][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 652.175206][ T5896] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 652.205176][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.255195][ T47] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 652.294865][ T5895] kye 0003:0458:5013.0017: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 652.407730][ T5896] usb 4-1: device descriptor read/64, error -71 [ 652.432144][ T5895] kye 0003:0458:5013.0017: item fetching failed at offset 0/5 [ 652.461730][ T47] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 652.472456][ T47] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 652.477613][ T5895] kye 0003:0458:5013.0017: parse failed [ 652.511961][ T47] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 652.511998][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.573915][ T5895] kye 0003:0458:5013.0017: probe with driver kye failed with error -22 [ 652.618815][T13587] tty tty20: ldisc open failed (-12), clearing slot 19 [ 652.632303][ T5895] usb 5-1: USB disconnect, device number 100 [ 652.665490][ T5896] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 652.797769][ T5896] usb 4-1: device descriptor read/64, error -71 [ 652.974537][ T5896] usb usb4-port1: attempt power cycle [ 653.262435][T13599] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2452'. [ 653.515893][ T5896] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 653.556762][ T5896] usb 4-1: device descriptor read/8, error -71 [ 653.675298][T12333] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 653.805414][ T5896] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 653.848011][ T5896] usb 4-1: device descriptor read/8, error -71 [ 653.854416][T12333] usb 5-1: config 1 interface 1 has no altsetting 0 [ 653.869062][T12333] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 653.900027][T12333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.922210][T12333] usb 5-1: Product: syz [ 653.932282][T12333] usb 5-1: Manufacturer: syz [ 653.944308][T12333] usb 5-1: SerialNumber: syz [ 653.993449][ T5896] usb usb4-port1: unable to enumerate USB device [ 654.341116][ T9] usb 3-1: USB disconnect, device number 106 [ 654.342068][T12333] usb 5-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 654.359949][T12333] usb 5-1: 2:1 : sample bitwidth 232 in over sample bytes 4 [ 654.367654][T12333] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 654.464045][T12333] usb 5-1: USB disconnect, device number 101 [ 654.818988][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 655.014091][T13608] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 655.135204][T13608] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 655.165425][T12333] usb 2-1: USB disconnect, device number 107 [ 655.305166][ T9] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 655.324866][T13620] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2460'. [ 655.492334][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 655.504853][T13624] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2461'. [ 655.675617][ T5896] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 655.780758][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 655.798115][ T9] usb 5-1: config 244 has an invalid interface number: 68 but max is 0 [ 655.806633][ T9] usb 5-1: config 244 has an invalid descriptor of length 0, skipping remainder of the config [ 655.845520][ T9] usb 5-1: config 244 has no interface number 0 [ 655.907090][ T9] usb 5-1: config 244 interface 68 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 655.936997][ T5896] usb 4-1: config 0 has no interfaces? [ 655.943932][ T9] usb 5-1: config 244 interface 68 has no altsetting 0 [ 655.993356][ T5896] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 656.006317][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.019339][ T5896] usb 4-1: Product: syz [ 656.019421][ T9] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 656.023600][ T5896] usb 4-1: Manufacturer: syz [ 656.042707][ T5896] usb 4-1: SerialNumber: syz [ 656.054410][ T5896] usb 4-1: config 0 descriptor?? [ 656.278810][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.306647][ T9] usb 5-1: Product: syz [ 656.355629][ T9] usb 5-1: Manufacturer: syz [ 656.360454][ T9] usb 5-1: SerialNumber: syz [ 656.545431][ T5895] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 656.697224][ T5895] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.709444][ T5895] usb 2-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 656.724095][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.772319][ T5895] usb 2-1: config 0 descriptor?? [ 656.817663][ T5895] gspca_main: kinect-2.14.0 probing 045e:02bf [ 658.317869][T12333] usb 2-1: USB disconnect, device number 108 [ 659.891258][ T5892] usb 4-1: USB disconnect, device number 13 [ 660.095952][T13670] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2473'. [ 660.136805][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 660.405330][ T5892] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 660.778207][ T5892] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 660.861382][ T5892] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 660.905166][ T5892] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 660.931075][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.031138][ T9] comedi comedi0: Wrong number of endpoints [ 661.145212][T12333] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 661.160287][ T9] dt9812 5-1:244.68: driver 'dt9812' failed to auto-configure device. [ 661.218228][ T9] usb 5-1: USB disconnect, device number 102 [ 661.280153][T13678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.355597][T13678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.365195][T12333] usb 4-1: Using ep0 maxpacket: 16 [ 661.373965][T12333] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 661.485796][T12333] usb 4-1: config 0 has no interface number 0 [ 661.491984][T12333] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 661.497072][T13684] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2477'. [ 661.714854][T12333] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 661.725525][T13684] netlink: 'syz.2.2477': attribute type 7 has an invalid length. [ 661.743413][T13684] netlink: 'syz.2.2477': attribute type 8 has an invalid length. [ 661.763102][T13684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2477'. [ 661.798737][T12333] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 661.808783][T12333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.818952][T12333] usb 4-1: Product: syz [ 661.833275][T12333] usb 4-1: Manufacturer: syz [ 661.839539][T13684] gretap0: entered promiscuous mode [ 661.852000][T12333] usb 4-1: SerialNumber: syz [ 661.860075][T13684] batadv_slave_1: entered promiscuous mode [ 661.882909][T12333] usb 4-1: config 0 descriptor?? [ 661.903939][T13674] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 661.914985][T13674] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 662.158663][T13674] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 662.166615][T13694] xt_l2tp: v2 doesn't support IP mode [ 662.255804][T12333] asix 4-1:0.251: probe with driver asix failed with error -71 [ 662.441192][T13702] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2484'. [ 662.623852][T12333] usb 4-1: USB disconnect, device number 14 [ 662.905159][ T5892] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 663.090047][ T5892] usb 5-1: config 0 has no interfaces? [ 663.107691][ T5892] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 663.176922][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.242126][ T5892] usb 5-1: Product: syz [ 663.252295][ T5892] usb 5-1: Manufacturer: syz [ 663.262442][ T5892] usb 5-1: SerialNumber: syz [ 663.353689][ T5892] usb 5-1: config 0 descriptor?? [ 663.761176][T12333] usb 1-1: USB disconnect, device number 122 [ 664.590653][T13726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2489'. [ 664.600322][ T5892] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 664.600739][T13726] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2489'. [ 664.651897][T13726] veth0: entered promiscuous mode [ 664.681538][T13724] program syz.1.2490 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 664.718208][T13724] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2490'. [ 664.739505][T13724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2490'. [ 664.787254][ T5892] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 664.798264][ T5892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.854803][ T5892] usb 1-1: config 0 has no interface number 0 [ 664.895115][ T5892] usb 1-1: config 0 interface 172 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 664.927262][T13728] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 664.959080][ T5892] usb 1-1: config 0 interface 172 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 665.000025][T13730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2492'. [ 665.120319][ T5892] usb 1-1: config 0 interface 172 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 665.183325][ T5892] usb 1-1: config 0 interface 172 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 665.299708][ T5892] usb 1-1: config 0 interface 172 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 665.427991][ T5892] usb 1-1: config 0 interface 172 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 665.487186][ T5892] usb 1-1: config 0 interface 172 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 15 [ 665.591397][T13739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2496'. [ 665.624087][ T5892] usb 1-1: New USB device found, idVendor=07c4, idProduct=a002, bcdDevice=c3.c0 [ 665.633719][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.641881][ T5892] usb 1-1: Product: syz [ 665.653163][ T5892] usb 1-1: Manufacturer: syz [ 665.670057][ T5892] usb 1-1: SerialNumber: syz [ 665.684262][ T5892] usb 1-1: config 0 descriptor?? [ 665.702190][ T5892] ums-datafab 1-1:0.172: USB Mass Storage device detected [ 665.714500][ T5892] ums-datafab 1-1:0.172: Quirks match for vid 07c4 pid a002: 1 [ 665.725574][ T5896] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 665.854702][ T5892] usb 5-1: USB disconnect, device number 103 [ 665.925862][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 665.950608][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 665.962141][ T5896] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 665.997089][ T5896] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 666.032495][ T5896] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 666.050119][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.072601][ T5896] usb 2-1: Product: syz [ 666.088278][ T5896] usb 2-1: Manufacturer: syz [ 666.108553][ T5896] usb 2-1: SerialNumber: syz [ 666.132488][ T5896] usb 2-1: config 0 descriptor?? [ 666.163829][T13737] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 666.181778][ T5896] mcba_usb 2-1:0.0: Can't find endpoints [ 666.650758][ T30] audit: type=1326 audit(1744505351.056:7140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13736 comm="syz.1.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe4f8d169 code=0x7ffc0000 [ 666.739162][ T30] audit: type=1326 audit(1744505351.056:7141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13736 comm="syz.1.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe4f8d169 code=0x7ffc0000 [ 666.971684][ T5892] usb 1-1: USB disconnect, device number 123 [ 667.031984][ T30] audit: type=1326 audit(1744505351.056:7142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13736 comm="syz.1.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fdfe4f8d169 code=0x7ffc0000 [ 667.141312][ T30] audit: type=1326 audit(1744505351.056:7143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13736 comm="syz.1.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe4f8d169 code=0x7ffc0000 [ 667.434484][ T30] audit: type=1326 audit(1744505351.056:7144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13736 comm="syz.1.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe4f8d169 code=0x7ffc0000 [ 667.582921][ T30] audit: type=1326 audit(1744505351.096:7145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13736 comm="syz.1.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdfe4f8d169 code=0x7ffc0000 [ 667.606492][T13765] FAULT_INJECTION: forcing a failure. [ 667.606492][T13765] name failslab, interval 1, probability 0, space 0, times 0 [ 667.855115][T13765] CPU: 1 UID: 0 PID: 13765 Comm: syz.0.2504 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 667.855147][T13765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 667.855161][T13765] Call Trace: [ 667.855170][T13765] [ 667.855179][T13765] dump_stack_lvl+0x241/0x360 [ 667.855220][T13765] ? __pfx_dump_stack_lvl+0x10/0x10 [ 667.855251][T13765] ? __pfx__printk+0x10/0x10 [ 667.855284][T13765] ? __pfx___might_resched+0x10/0x10 [ 667.855316][T13765] should_fail_ex+0x424/0x570 [ 667.855343][T13765] should_failslab+0xac/0x100 [ 667.855373][T13765] kmem_cache_alloc_noprof+0x78/0x390 [ 667.855413][T13765] ? prepare_creds+0x31/0x6f0 [ 667.855445][T13765] prepare_creds+0x31/0x6f0 [ 667.855473][T13765] ? get_ruleset_from_fd+0xa4/0x220 [ 667.855495][T13765] __se_sys_landlock_restrict_self+0x199/0x7d0 [ 667.855514][T13765] ? __secure_computing+0xef/0x2f0 [ 667.855569][T13765] do_syscall_64+0xf3/0x230 [ 667.855596][T13765] ? clear_bhb_loop+0x45/0xa0 [ 667.855622][T13765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.855643][T13765] RIP: 0033:0x7f90a778d169 [ 667.855663][T13765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.855682][T13765] RSP: 002b:00007f90a850b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 667.855707][T13765] RAX: ffffffffffffffda RBX: 00007f90a79a5fa0 RCX: 00007f90a778d169 [ 667.855724][T13765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 667.855737][T13765] RBP: 00007f90a850b090 R08: 0000000000000000 R09: 0000000000000000 [ 667.855751][T13765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.855764][T13765] R13: 0000000000000000 R14: 00007f90a79a5fa0 R15: 00007f90a7acfa28 [ 667.855797][T13765] [ 668.044689][ T30] audit: type=1326 audit(1744505351.096:7146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13736 comm="syz.1.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe4f8d169 code=0x7ffc0000 [ 668.067469][ T30] audit: type=1326 audit(1744505351.096:7147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13736 comm="syz.1.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe4f8d169 code=0x7ffc0000 [ 668.090066][ T30] audit: type=1326 audit(1744505351.106:7148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13736 comm="syz.1.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fdfe4f8d169 code=0x7ffc0000 [ 668.112623][ T30] audit: type=1326 audit(1744505351.106:7149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13736 comm="syz.1.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe4f8d169 code=0x7ffc0000 [ 668.521845][T13776] xt_TCPMSS: Only works on TCP SYN packets [ 669.330024][ T5896] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 669.348767][T13787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2509'. [ 669.545129][T12333] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 669.557537][ T5896] usb 1-1: config 0 has no interfaces? [ 669.570679][ T5896] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 669.581675][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.592570][ T5896] usb 1-1: Product: syz [ 669.610278][ T5896] usb 1-1: Manufacturer: syz [ 669.629330][ T5896] usb 1-1: SerialNumber: syz [ 669.656500][ T5896] usb 1-1: config 0 descriptor?? [ 669.716854][T12333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 669.728046][T12333] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 669.744209][T12333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 669.769780][T12333] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 669.779407][T12333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.791848][T12333] usb 3-1: Product: syz [ 669.797901][T12333] usb 3-1: Manufacturer: syz [ 669.805224][T12333] usb 3-1: SerialNumber: syz [ 669.830561][T12333] usb 3-1: config 0 descriptor?? [ 669.843849][T13785] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 669.852666][T13785] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 669.866931][T12333] usb 3-1: ucan: probing device on interface #0 [ 670.129713][T13789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.155539][ T10] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 670.166705][T13789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.607908][T13785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.625988][T13785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.642912][T12333] ucan 3-1:0.0 can0: registered device [ 670.861347][T12333] ucan 3-1:0.0 can0: firmware string: unknown [ 670.883840][T12333] usb 3-1: USB disconnect, device number 107 [ 671.384784][T13801] program syz.1.2514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 671.419813][T13801] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2514'. [ 671.429680][T13801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2514'. [ 671.658550][T13805] netlink: 'syz.1.2515': attribute type 8 has an invalid length. [ 672.163750][T13817] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2521'. [ 672.344292][T12333] usb 1-1: USB disconnect, device number 124 [ 672.653234][T13833] netlink: 788 bytes leftover after parsing attributes in process `syz.0.2525'. [ 673.553392][T13838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2527'. [ 673.615298][T13838] netlink: 'syz.3.2527': attribute type 7 has an invalid length. [ 673.653659][T13838] netlink: 'syz.3.2527': attribute type 8 has an invalid length. [ 673.682141][T13838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2527'. [ 673.777823][T13838] gretap0: entered promiscuous mode [ 673.795332][T13838] batadv_slave_1: entered promiscuous mode [ 673.814929][T13838] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 673.869146][T13838] Cannot create hsr debugfs directory [ 674.555222][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 674.924813][T13854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.944258][T13854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.016506][ T10] usb 4-1: config 0 has no interfaces? [ 675.040616][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 675.050036][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.188726][T13855] xt_TCPMSS: Only works on TCP SYN packets [ 675.266199][ T10] usb 4-1: Product: syz [ 675.341546][ T10] usb 4-1: Manufacturer: syz [ 675.408327][ T10] usb 4-1: SerialNumber: syz [ 675.473105][ T10] usb 4-1: config 0 descriptor?? [ 676.235236][ T10] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 676.440896][ T10] usb 1-1: config 0 has no interfaces? [ 676.460081][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 676.632123][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.710826][ T10] usb 1-1: Product: syz [ 676.720932][ T10] usb 1-1: Manufacturer: syz [ 676.733888][ T10] usb 1-1: SerialNumber: syz [ 676.756601][ T10] usb 1-1: config 0 descriptor?? [ 677.513267][T13870] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 677.915155][ T10] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 678.008463][ T5895] usb 4-1: USB disconnect, device number 15 [ 678.066731][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 678.073459][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 678.094579][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 678.115486][ T10] usb 3-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=f4.95 [ 678.124708][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.142285][ T10] usb 3-1: Product: syz [ 678.153607][T13876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2538'. [ 678.162720][T13876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2538'. [ 678.184635][ T10] usb 3-1: Manufacturer: syz [ 678.199335][ T10] usb 3-1: SerialNumber: syz [ 678.214588][ T10] usb 3-1: config 0 descriptor?? [ 678.229716][T13874] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 678.237932][T13874] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 678.451611][T13874] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 678.459427][T13874] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 678.625265][T13880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2541'. [ 678.777416][T13886] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2537'. [ 678.787007][T13886] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2537'. [ 678.797454][T13886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.815761][T13886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.886217][T13890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.895735][T13890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.918248][ T5895] usb 1-1: USB disconnect, device number 125 [ 680.709393][T13902] bridge_slave_0: default FDB implementation only supports local addresses [ 680.853672][ T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 680.875201][ T47] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 680.914087][ T10] asix 3-1:0.0: probe with driver asix failed with error -71 [ 681.035408][ T10] usb 3-1: USB disconnect, device number 108 [ 681.084455][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 681.225461][ T47] usb 1-1: unable to get BOS descriptor or descriptor too short [ 681.316446][ T47] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.407450][ T47] usb 1-1: config 0 has no interfaces? [ 681.634942][ T47] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 681.648895][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.658520][ T47] usb 1-1: Product: syz [ 681.720204][ T47] usb 1-1: Manufacturer: syz [ 681.729518][ T47] usb 1-1: SerialNumber: syz [ 681.757385][ T47] usb 1-1: config 0 descriptor?? [ 682.191960][T13904] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 682.655154][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 683.002371][T13887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.040500][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 683.199858][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.210373][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 683.244202][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 683.314060][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.478864][ T10] usb 4-1: config 0 descriptor?? [ 683.810779][T13948] usb usb9: usbfs: process 13948 (syz.1.2559) did not claim interface 9 before use [ 683.880747][T13950] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2558'. [ 683.915579][T13948] usb usb9: usbfs: process 13948 (syz.1.2559) did not claim interface 9 before use [ 683.938505][ T10] usb 1-1: USB disconnect, device number 126 [ 684.132270][T13957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.181081][T13957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.895288][T13964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2563'. [ 685.159367][T13966] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 685.544238][T13969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.553089][T13969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.594618][T13969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.644879][T13969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.739926][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.747415][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.879628][T13931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.917039][ T47] usb 4-1: USB disconnect, device number 16 [ 686.171365][T13979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.225730][T13979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.343093][T13985] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2571'. [ 686.395180][ T9] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 686.515290][ T47] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 686.577544][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 686.609106][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.626190][T13989] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2573'. [ 686.636645][T13989] netlink: 'syz.3.2573': attribute type 7 has an invalid length. [ 686.644481][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 686.654742][T13989] netlink: 'syz.3.2573': attribute type 8 has an invalid length. [ 686.662867][T13989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2573'. [ 686.674387][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 686.683802][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.712570][ T47] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 686.738051][ T9] usb 1-1: Product: syz [ 686.748031][ T9] usb 1-1: Manufacturer: syz [ 686.753875][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.775205][ T47] usb 5-1: Product: syz [ 686.779408][ T9] usb 1-1: SerialNumber: syz [ 686.784864][ T47] usb 5-1: Manufacturer: syz [ 686.802667][ T47] usb 5-1: SerialNumber: syz [ 686.832683][ T47] usb 5-1: config 0 descriptor?? [ 687.029053][ T9] usb 1-1: 0:2 : does not exist [ 687.089100][ T9] usb 1-1: USB disconnect, device number 127 [ 687.282122][ T47] airspy 5-1:0.0: Board ID: 00 [ 687.297837][ T47] airspy 5-1:0.0: Firmware version: [ 687.340673][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 688.245175][T12333] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 688.478064][T12333] usb 4-1: config 0 has no interfaces? [ 688.504957][T12333] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 688.520553][T12333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.551934][T12333] usb 4-1: Product: syz [ 688.570841][T12333] usb 4-1: Manufacturer: syz [ 688.584001][T12333] usb 4-1: SerialNumber: syz [ 688.588935][ T5896] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 688.682800][T12333] usb 4-1: config 0 descriptor?? [ 688.785166][ T5896] usb 1-1: Using ep0 maxpacket: 32 [ 688.934281][ T5896] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.973669][ T5896] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 689.038496][ T5896] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 689.240838][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.289667][ T5896] usb 1-1: config 0 descriptor?? [ 689.339801][ T47] airspy 5-1:0.0: usb_control_msg() failed -110 request 12 [ 689.570081][ T47] airspy 5-1:0.0: Registered as swradio24 [ 689.598098][ T47] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 689.634034][ T47] usb 5-1: USB disconnect, device number 105 [ 690.725327][ T5896] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 690.900031][ T5896] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 690.919355][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.993540][ T5896] usb 5-1: Product: syz [ 691.013767][ T5896] usb 5-1: Manufacturer: syz [ 691.040685][ T5896] usb 5-1: SerialNumber: syz [ 691.072255][ T5896] usb 5-1: config 0 descriptor?? [ 691.107590][ T5896] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 691.387924][ T10] usb 4-1: USB disconnect, device number 17 [ 691.719451][T14031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2585'. [ 691.745509][ T24] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 691.763291][T14031] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.772482][T14031] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.781276][T14031] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.790105][T14031] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.829651][ T5896] gspca_sunplus: reg_w_riv err -110 [ 691.870925][ T5896] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 691.917848][T14031] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.927107][T14031] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.936186][T14031] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.945159][T14031] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.975914][ T24] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 691.986221][ T24] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 691.987032][T14004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 692.011763][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 692.031657][ T9] usb 1-1: USB disconnect, device number 2 [ 692.066091][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.262978][T14027] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 692.437744][T14040] program syz.3.2588 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 692.471232][T14041] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2587'. [ 693.247298][ T9] usb 5-1: USB disconnect, device number 106 [ 693.737110][T14034] input: syz0 as /devices/virtual/input/input45 [ 693.820226][T14034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2586'. [ 693.830976][T14034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2586'. [ 693.845239][ T24] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 694.027612][T14061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.036850][T14061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.249311][ T24] usb 5-1: config 0 has no interfaces? [ 694.349143][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 694.458905][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.478093][ T24] usb 5-1: Product: syz [ 694.485888][ T24] usb 5-1: Manufacturer: syz [ 694.496270][ T24] usb 5-1: SerialNumber: syz [ 694.553206][ T24] usb 5-1: config 0 descriptor?? [ 695.052219][ T24] usb 3-1: USB disconnect, device number 109 [ 695.175710][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 695.305215][ T9] usb 4-1: device descriptor read/64, error -71 [ 695.548789][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 695.685190][ T9] usb 4-1: device descriptor read/64, error -71 [ 695.715392][ T24] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 695.819398][ T9] usb usb4-port1: attempt power cycle [ 695.885355][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 695.895297][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.918337][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 695.962689][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 696.047139][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.103367][ T24] usb 3-1: config 0 descriptor?? [ 696.235263][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 696.277972][ T9] usb 4-1: device descriptor read/8, error -71 [ 696.515668][ T24] usb 5-1: USB disconnect, device number 107 [ 696.516585][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 696.579390][ T9] usb 4-1: device descriptor read/8, error -71 [ 696.717988][ T9] usb usb4-port1: unable to enumerate USB device [ 696.879525][T14090] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2601'. [ 697.825106][ T5895] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 698.444513][T14107] xt_TCPMSS: Only works on TCP SYN packets [ 698.459874][ T5895] usb 1-1: config 0 has no interfaces? [ 698.492153][ T5895] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 698.505088][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.533571][ T5895] usb 1-1: Product: syz [ 698.543679][ T5895] usb 1-1: Manufacturer: syz [ 698.563951][ T5895] usb 1-1: SerialNumber: syz [ 698.626465][ T5895] usb 1-1: config 0 descriptor?? [ 699.757490][T14073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.822663][ T47] usb 3-1: USB disconnect, device number 110 [ 700.133523][T14122] team0: Device gtp0 is of different type [ 700.405361][ T5895] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 700.495254][ T9] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 700.555154][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 700.563120][ T5895] usb 4-1: config 0 interface 0 has no altsetting 0 [ 700.580358][ T5895] usb 4-1: New USB device found, idVendor=05ac, idProduct=abdf, bcdDevice=3d.49 [ 700.599744][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.629618][ T5895] usb 4-1: Product: syz [ 700.653564][ T5895] usb 4-1: Manufacturer: syz [ 700.683190][ T5895] usb 4-1: SerialNumber: syz [ 700.789289][ T5895] usb 4-1: config 0 descriptor?? [ 700.815621][ T5895] ipheth 4-1:0.0: Unable to find endpoints [ 700.906451][T14139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.916125][T14139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.008913][ T24] usb 1-1: USB disconnect, device number 3 [ 701.040412][ T5895] usb 4-1: USB disconnect, device number 22 [ 703.344290][ T5892] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 703.535310][ T5892] usb 1-1: Using ep0 maxpacket: 32 [ 703.632258][ T5892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.643317][ T5892] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 703.653425][ T5892] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 703.757681][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.835088][ T5892] usb 1-1: config 0 descriptor?? [ 703.910854][T14177] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 704.154840][T14182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2625'. [ 704.208947][T14180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2624'. [ 704.265264][T14180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2624'. [ 704.785289][ T9] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 704.945259][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 704.955502][ T9] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 704.967038][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 705.030601][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 705.063118][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 705.094124][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 705.122946][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.190218][ T9] usbtmc 5-1:16.0: bulk endpoints not found [ 705.525320][T14167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 705.538070][T14193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.547314][T14193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.747879][ T9] usb 1-1: USB disconnect, device number 4 [ 706.256561][ T5892] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 706.406792][ T24] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 706.568284][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 706.616362][ T24] usb 3-1: config 7 has an invalid interface number: 25 but max is 3 [ 706.633873][ T24] usb 3-1: config 7 has an invalid interface number: 110 but max is 3 [ 706.651931][ T24] usb 3-1: config 7 has an invalid interface number: 175 but max is 3 [ 706.681707][ T24] usb 3-1: config 7 has an invalid interface number: 173 but max is 3 [ 706.704094][ T24] usb 3-1: config 7 has no interface number 0 [ 706.717839][ T24] usb 3-1: config 7 has no interface number 1 [ 706.723977][ T24] usb 3-1: config 7 has no interface number 2 [ 706.737775][ T24] usb 3-1: config 7 has no interface number 3 [ 706.762127][ T24] usb 3-1: config 7 interface 25 altsetting 2 endpoint 0x6 has an invalid bInterval 0, changing to 10 [ 706.799784][ T24] usb 3-1: config 7 interface 25 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 706.833388][ T24] usb 3-1: config 7 interface 25 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 706.865071][ T24] usb 3-1: config 7 interface 110 altsetting 71 has a duplicate endpoint with address 0xE, skipping [ 706.879543][ T24] usb 3-1: config 7 interface 110 altsetting 71 has an endpoint descriptor with address 0x32, changing to 0x2 [ 706.891782][ T24] usb 3-1: config 7 interface 110 altsetting 71 has a duplicate endpoint with address 0x2, skipping [ 706.907419][ T24] usb 3-1: config 7 interface 110 altsetting 71 endpoint 0xF has an invalid bInterval 72, changing to 4 [ 706.920555][ T24] usb 3-1: config 7 interface 110 altsetting 71 has an invalid descriptor for endpoint zero, skipping [ 706.934288][ T24] usb 3-1: config 7 interface 110 altsetting 71 has a duplicate endpoint with address 0x6, skipping [ 706.952763][ T24] usb 3-1: config 7 interface 110 altsetting 71 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 707.040107][ T24] usb 3-1: config 7 interface 175 altsetting 224 has a duplicate endpoint with address 0xF, skipping [ 707.064181][ T24] usb 3-1: config 7 interface 173 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 707.082858][ T24] usb 3-1: config 7 interface 25 has no altsetting 0 [ 707.090199][ T24] usb 3-1: config 7 interface 110 has no altsetting 0 [ 707.102350][ T24] usb 3-1: config 7 interface 175 has no altsetting 0 [ 707.109862][ T24] usb 3-1: config 7 interface 173 has no altsetting 0 [ 707.165632][ T24] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=a3.17 [ 707.180505][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.191838][ T24] usb 3-1: Product: Ї [ 707.202849][ T24] usb 3-1: Manufacturer: 눥푷徝ᴳ溟朷럢ᡞꯢ妱蚒͙ј卭벭呹晢ᔲ漝Ế᏶쥼䠎ሴ츷殭坋㋏畾ꃉ賬췒踤䥳씯홼浽ล赝̡ÊΘ몆뗊痪䡀뱑륛曚㐀涞凲딅륌䥾샺鶸ⴃ始ἃ⧙᪜쓆в褅フκ㞩Ṑ툪ז玶逥苙慾Ꮣ汣⫐佱ሑ뉟벜←袋橅뢷➐﯍ [ 707.318206][ T24] usb 3-1: SerialNumber: syz [ 707.519222][ T9] usb 5-1: USB disconnect, device number 108 [ 707.548371][T14207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.573378][T14207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.645999][T14215] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 707.811269][T14207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.825710][T14207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.035399][T14207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.082820][T14207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.225735][ T24] usb 3-1: USB disconnect, device number 112 [ 708.261001][T14225] xt_TCPMSS: Only works on TCP SYN packets [ 708.924597][T14228] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2638'. [ 709.282108][T14239] xt_TCPMSS: Only works on TCP SYN packets [ 710.655254][ T5892] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 710.695704][T14262] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2650'. [ 710.808480][ T5892] usb 5-1: config 0 has no interfaces? [ 710.822880][ T5892] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 710.851898][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.889387][ T5892] usb 5-1: Product: syz [ 710.954935][ T5892] usb 5-1: Manufacturer: syz [ 710.986459][ T5892] usb 5-1: SerialNumber: syz [ 711.007350][ T5892] usb 5-1: config 0 descriptor?? [ 711.563132][T14279] FAULT_INJECTION: forcing a failure. [ 711.563132][T14279] name failslab, interval 1, probability 0, space 0, times 0 [ 711.588776][T14279] CPU: 1 UID: 0 PID: 14279 Comm: syz.1.2656 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 711.588808][T14279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 711.588823][T14279] Call Trace: [ 711.588832][T14279] [ 711.588841][T14279] dump_stack_lvl+0x241/0x360 [ 711.588880][T14279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 711.588912][T14279] ? __pfx__printk+0x10/0x10 [ 711.588947][T14279] ? __pfx___might_resched+0x10/0x10 [ 711.588980][T14279] should_fail_ex+0x424/0x570 [ 711.589014][T14279] should_failslab+0xac/0x100 [ 711.589045][T14279] __kmalloc_cache_noprof+0x73/0x370 [ 711.589076][T14279] ? landlock_init_hierarchy_log+0xa0/0x640 [ 711.589112][T14279] landlock_init_hierarchy_log+0xa0/0x640 [ 711.589139][T14279] ? __kmalloc_cache_noprof+0x236/0x370 [ 711.589176][T14279] landlock_merge_ruleset+0x66e/0x900 [ 711.589210][T14279] __se_sys_landlock_restrict_self+0x2ce/0x7d0 [ 711.589245][T14279] do_syscall_64+0xf3/0x230 [ 711.589274][T14279] ? clear_bhb_loop+0x45/0xa0 [ 711.589300][T14279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.589322][T14279] RIP: 0033:0x7fdfe4f8d169 [ 711.589341][T14279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.589359][T14279] RSP: 002b:00007fdfe5e9c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 711.589382][T14279] RAX: ffffffffffffffda RBX: 00007fdfe51a5fa0 RCX: 00007fdfe4f8d169 [ 711.589399][T14279] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 711.589412][T14279] RBP: 00007fdfe5e9c090 R08: 0000000000000000 R09: 0000000000000000 [ 711.589426][T14279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.589439][T14279] R13: 0000000000000000 R14: 00007fdfe51a5fa0 R15: 00007fdfe52cfa28 [ 711.589471][T14279] [ 711.590143][T14279] ------------[ cut here ]------------ [ 711.780503][T14279] WARNING: CPU: 1 PID: 14279 at security/landlock/domain.h:133 free_ruleset+0x1f3/0x250 [ 711.790343][T14279] Modules linked in: [ 711.794281][T14279] CPU: 1 UID: 0 PID: 14279 Comm: syz.1.2656 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 711.806455][T14279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 711.816572][T14279] RIP: 0010:free_ruleset+0x1f3/0x250 [ 711.821881][T14279] Code: 89 ff e8 60 0b 6c fd 49 8b 1f 4c 89 ff e8 a5 68 60 fd 48 85 db 74 36 e8 bb e3 01 fd 49 89 df e9 34 ff ff ff e8 ae e3 01 fd 90 <0f> 0b 90 eb c2 e8 a3 e3 01 fd eb 1c bf 01 00 00 00 89 ee e8 d5 e7 [ 711.841586][T14279] RSP: 0018:ffffc9001c50fdd8 EFLAGS: 00010293 [ 711.847716][T14279] RAX: ffffffff84c17182 RBX: 0000000000000000 RCX: ffff88805a85da00 [ 711.855717][T14279] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 711.863693][T14279] RBP: 1ffff1100687e394 R08: ffffffff84c27d1f R09: 1ffff1100687e391 [ 711.871780][T14279] R10: dffffc0000000000 R11: ffffed100687e392 R12: ffff8880343f1ca0 [ 711.879811][T14279] R13: dffffc0000000000 R14: ffff8880253bd600 R15: ffff8880343f1c80 [ 711.887817][T14279] FS: 00007fdfe5e9c6c0(0000) GS:ffff888125094000(0000) knlGS:0000000000000000 [ 711.896876][T14279] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 711.903468][T14279] CR2: 0000001b3095ffff CR3: 00000000488a0000 CR4: 00000000003526f0 [ 711.911492][T14279] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 711.919513][T14279] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 711.927648][T14279] Call Trace: [ 711.930933][T14279] [ 711.933866][T14279] landlock_merge_ruleset+0x6d8/0x900 [ 711.939308][T14279] __se_sys_landlock_restrict_self+0x2ce/0x7d0 [ 711.945556][T14279] do_syscall_64+0xf3/0x230 [ 711.950113][T14279] ? clear_bhb_loop+0x45/0xa0 [ 711.954796][T14279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.960739][T14279] RIP: 0033:0x7fdfe4f8d169 [ 711.965214][T14279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.985265][T14279] RSP: 002b:00007fdfe5e9c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 711.993713][T14279] RAX: ffffffffffffffda RBX: 00007fdfe51a5fa0 RCX: 00007fdfe4f8d169 [ 712.001738][T14279] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 712.009774][T14279] RBP: 00007fdfe5e9c090 R08: 0000000000000000 R09: 0000000000000000 [ 712.017797][T14279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.025829][T14279] R13: 0000000000000000 R14: 00007fdfe51a5fa0 R15: 00007fdfe52cfa28 [ 712.033828][T14279] [ 712.036888][T14279] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 712.044180][T14279] CPU: 1 UID: 0 PID: 14279 Comm: syz.1.2656 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 712.056354][T14279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 712.066429][T14279] Call Trace: [ 712.069712][T14279] [ 712.072649][T14279] dump_stack_lvl+0x241/0x360 [ 712.077345][T14279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 712.082604][T14279] ? __pfx__printk+0x10/0x10 [ 712.087212][T14279] ? vscnprintf+0x5d/0x90 [ 712.091557][T14279] panic+0x349/0x880 [ 712.095475][T14279] ? __warn+0x174/0x4d0 [ 712.099685][T14279] ? __pfx_panic+0x10/0x10 [ 712.104125][T14279] __warn+0x344/0x4d0 [ 712.108115][T14279] ? free_ruleset+0x1f3/0x250 [ 712.112808][T14279] report_bug+0x2b3/0x500 [ 712.117153][T14279] ? free_ruleset+0x1f3/0x250 [ 712.121853][T14279] ? free_ruleset+0x1f3/0x250 [ 712.126540][T14279] ? free_ruleset+0x1f5/0x250 [ 712.131260][T14279] handle_bug+0x89/0x170 [ 712.135642][T14279] exc_invalid_op+0x1a/0x50 [ 712.140153][T14279] asm_exc_invalid_op+0x1a/0x20 [ 712.145002][T14279] RIP: 0010:free_ruleset+0x1f3/0x250 [ 712.150305][T14279] Code: 89 ff e8 60 0b 6c fd 49 8b 1f 4c 89 ff e8 a5 68 60 fd 48 85 db 74 36 e8 bb e3 01 fd 49 89 df e9 34 ff ff ff e8 ae e3 01 fd 90 <0f> 0b 90 eb c2 e8 a3 e3 01 fd eb 1c bf 01 00 00 00 89 ee e8 d5 e7 [ 712.169942][T14279] RSP: 0018:ffffc9001c50fdd8 EFLAGS: 00010293 [ 712.176031][T14279] RAX: ffffffff84c17182 RBX: 0000000000000000 RCX: ffff88805a85da00 [ 712.184088][T14279] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 712.192056][T14279] RBP: 1ffff1100687e394 R08: ffffffff84c27d1f R09: 1ffff1100687e391 [ 712.200031][T14279] R10: dffffc0000000000 R11: ffffed100687e392 R12: ffff8880343f1ca0 [ 712.208097][T14279] R13: dffffc0000000000 R14: ffff8880253bd600 R15: ffff8880343f1c80 [ 712.216075][T14279] ? landlock_log_drop_domain+0x4f/0x1b0 [ 712.221731][T14279] ? free_ruleset+0x1f2/0x250 [ 712.226416][T14279] ? free_ruleset+0x1f2/0x250 [ 712.231102][T14279] landlock_merge_ruleset+0x6d8/0x900 [ 712.236504][T14279] __se_sys_landlock_restrict_self+0x2ce/0x7d0 [ 712.242665][T14279] do_syscall_64+0xf3/0x230 [ 712.247180][T14279] ? clear_bhb_loop+0x45/0xa0 [ 712.251860][T14279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.257749][T14279] RIP: 0033:0x7fdfe4f8d169 [ 712.262163][T14279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 712.281787][T14279] RSP: 002b:00007fdfe5e9c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 712.290299][T14279] RAX: ffffffffffffffda RBX: 00007fdfe51a5fa0 RCX: 00007fdfe4f8d169 [ 712.298302][T14279] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 712.306275][T14279] RBP: 00007fdfe5e9c090 R08: 0000000000000000 R09: 0000000000000000 [ 712.314243][T14279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.322211][T14279] R13: 0000000000000000 R14: 00007fdfe51a5fa0 R15: 00007fdfe52cfa28 [ 712.330195][T14279] [ 712.333656][T14279] Kernel Offset: disabled [ 712.337990][T14279] Rebooting in 86400 seconds..