last executing test programs: 9.515120351s ago: executing program 4 (id=1298): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x280, 0x1e8, 0x0, 0x148, 0x0, 0x148, 0x1e8, 0x240, 0x240, 0x1e8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x84}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r2 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x2, 0x204}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141181) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYBLOB="d8799ae0b8b00ec76c3fa55382fcc52a530f477bcb1550cc02d0b7928ca4", @ANYBLOB="010000000000000000000f00000008000300", @ANYRESDEC=r8, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x20000080) r10 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r7}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r10, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r13 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r13, 0xc0045516, &(0x7f0000000000)=0x639) readv(r13, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x48}, {0x0, 0x2}], 0x2) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x74}, {0x6}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 8.395876026s ago: executing program 4 (id=1300): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x4140045e}, 0xc) r1 = socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0xc4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x5, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x2, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x300) 8.358289146s ago: executing program 4 (id=1301): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110031fcd1b08cf100355af750102030109022d00020809"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='timers\x00') pread64(r3, &(0x7f0000000040)=""/44, 0x2c, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/738], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000)={0xfffffffc, 0xb, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'poly1305-simd\x00'}}) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r6 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) connect$inet(r6, &(0x7f0000000540)={0x2, 0x2, @multicast2}, 0x10) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x440080, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="180127bd7000fedbdf252e00000008000300", @ANYRES32=r9, @ANYBLOB="040005050800c9006c0900000400af000800c900781400000400d0000a00060050505050505000001000e3800c00000008000200ac000000"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x3, [0x2], [0x2000, 0xfffffffc], [], [0x400000000000001]}) r10 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, &(0x7f00000bd000), 0x218, 0x0) syz_io_uring_setup(0xc02, &(0x7f0000000140)={0x0, 0x1061, 0x80, 0x6, 0x1af, 0x0, r11}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x2000, @fd_index=0x2, 0xa3d8, &(0x7f0000000100), 0x0, 0x1, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000001, 0x20010, r10, 0x10000000) 7.087905549s ago: executing program 0 (id=1304): bpf$TOKEN_CREATE(0x24, &(0x7f0000000580), 0x8) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x2cd811de, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000540)={0x0, 0x3}, 0x2) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 6.803680681s ago: executing program 0 (id=1306): r0 = socket$kcm(0xf, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000040)) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f00000000c0)="0219000202000000e4a18045c8d260c9", 0x10}, {0x0}], 0x2}, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000008) 6.349716892s ago: executing program 0 (id=1308): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100000246cf10dd040280b6fc01020301090212000100000000"], 0x0) 5.751191733s ago: executing program 3 (id=1312): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) keyctl$session_to_parent(0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c00078008001240000600000500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c706f727400000000a9a1ec0906f1df8060e388afe27ac00064c8500bfd9438b3348632f99393f2f0dc4a710135dcbed09504383456d7aaac938cee62e91eb97b8a"], 0x58}}, 0x0) r4 = open(0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$tipc(r4, &(0x7f0000001380)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x4}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000200)="ab45b3d24d71effafa5d09c410b578c210cad38a1aa9b36eb645c979b2dfcd5a4247038bb0b38b2d98c5a4b22dad8d80cf3a", 0x32}, {&(0x7f0000000340)="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", 0x1000}], 0x2, &(0x7f0000001340)="46b1c5e9a4204ada96d3a496318cdcc6bf3dae23962a84e85c2d9f2cb1e86cc3145dcb8140", 0x25, 0x24005011}, 0x40) mkdirat(0xffffffffffffffff, 0x0, 0x100) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) msgsnd(0x0, 0x0, 0x8, 0x800) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000180)={0x34, 0x3, 0x2, 0x83a, 0x1, [0x6, 0x9, 0x8, 0x10]}) msgsnd(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="96"], 0x8, 0x0) msgrcv(0x0, 0x0, 0x0, 0xffffff7f00000000, 0x800) 5.326510471s ago: executing program 2 (id=1313): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x4140045e}, 0xc) r1 = socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents(r3, &(0x7f0000000ec0)=""/4096, 0x1000) getdents64(r3, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r6, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r6, 0xb}}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0xc4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x5, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x2, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x203, 0x6, 0x5, 0x3, 0x6, 0x3}, @selector_unit={0x8, 0x24, 0x5, 0x4, 0x4, "35abc5"}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x3, '!'}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x206, 0x3, 0x44, 0xfe00, 0xd, 0x9}, @selector_unit={0xb, 0x24, 0x5, 0x1, 0x4, "430f69cb4f7e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.902938209s ago: executing program 4 (id=1314): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r7], 0x54}}, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.17642852s ago: executing program 4 (id=1315): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x3a, 0x62, 0xdb, 0x10, 0xa2c, 0x8, 0xb425, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc2, 0x0, 0x1, 0x96, 0x76, 0x0, 0x0, [], [{{0x9, 0x5, 0x8, 0x0, 0x20, 0x0, 0x1d, 0x7}}]}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="060000000000000006000000a30300000100000001feffff0d00000004000000b500000000000000000000000000000008000080060000000200000000000010d2b2000004000000d55e0000000000000000000000000000050000400200000005000000760b00008b00000003000000b728517800000000ab0000000000000008000080ab4700000500000006000000faffffffee6e35510100000000000000000000000000000000000000040000000200000006000000ce9dffffa00c000044f20000000000000000000000000000000000400200000000"]) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x40000000000028d, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000400)={0x14, &(0x7f0000000340)={0x20, 0xe, 0x6c, {0x6c, 0x22, "bc7009f8febd6944077da88700b39c1e9e532937e1d427dc1d26aeb089b31b96dcc8a68ad552482edfe48c76ee5530921bdd93aabac345c59ba647ac82dff615a86c27b82c7abafc5445d2bd57dc8e21bbd931281fa30af131f54f5bd991003ae9f1b5b6cca13f4697b9"}}, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f0000000440)=ANY=[@ANYBLOB="003872000000d8be816a91b955a04521e96b28807fc622f3c2826898456e591cdde676b217d2c38708fd4678a5dde90e154cd1b220560cc4429b14eca4b9678e54176b9fb10b03b1b71c3c425f783aa3f8b4f1661894ae876541eb3fbb7a5958227b7cf29d346ea56855af3db001e68af6260561eb8e93fa"], &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0xffff, 0xfd, 0x2da, 0x8, 0x5, 0x4, 0x268, 0x5, 0x3, 0x86, 0x4, 0x3}}, &(0x7f0000000580)={0x20, 0x85, 0x4, 0x8}, &(0x7f00000005c0)={0x20, 0x83, 0x2}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000640)={0x20, 0x89, 0x2}}) syz_usb_connect(0x0, 0xbea, &(0x7f00000007c0)=ANY=[@ANYBLOB="120101020d500920"], 0x0) ioctl$EVIOCRMFF(r4, 0x83c0550b, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) close(0xffffffffffffffff) 3.556305311s ago: executing program 2 (id=1317): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x900, 0x0, 0x0}) 3.432200133s ago: executing program 2 (id=1319): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = epoll_create1(0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000008c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f00000000c0)) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a32000000000900020073797a3000000000050042000100000008000100010000000900020073797a30000000000900020073797a3000000000080001"], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x503, 0x70bd2c, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 3.220315916s ago: executing program 0 (id=1321): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f00000034c0)=[{0x0}], 0x1}, 0x0) 3.088173621s ago: executing program 0 (id=1322): syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) 2.503315327s ago: executing program 3 (id=1323): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000024c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) chown(&(0x7f0000002140)='./file0/../file0\x00', 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004340)="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", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x1, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x3, 0x8, 0x2, 0x0, 0x800, 0x0, 0x0, 0x4000, 0xbca4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.418014074s ago: executing program 2 (id=1324): futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000040), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000040), 0x1, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001200)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@local, 0x0, 0x3c}, @in=@empty, {}, {}, {0x0, 0xfffffffd}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'sha384-arm\x00'}}}]}, 0x138}}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) 2.270007699s ago: executing program 2 (id=1325): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x46011400) syz_open_dev$vim2m(&(0x7f0000000080), 0xe2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x208440, 0x106) fstatfs(r4, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, r6) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) accept4(r0, &(0x7f00000001c0)=@sco={0x1f, @none}, &(0x7f0000000040)=0x80, 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f00000012c0)={0x0, 0x0, {0x3, 0x0, 0x0, 0x2, 0x4}, 0xfffff045}) 1.394750599s ago: executing program 3 (id=1328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) (fail_nth: 8) 951.969449ms ago: executing program 3 (id=1329): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000019"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0xfffffffe, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x2, 0x2000}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 764.679367ms ago: executing program 1 (id=1330): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, 0x0, 0x0) 761.154901ms ago: executing program 4 (id=1331): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100000246cf10dd040280b6fc01020301090212000100000000"], 0x0) 711.014409ms ago: executing program 3 (id=1332): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f00000034c0)=[{0x0}, {0x0}], 0x2}, 0x0) 677.885489ms ago: executing program 1 (id=1333): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x38) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x20203143, 0x3, [0x2], [0x810003], [0x9a8a, 0x0, 0xffffffff, 0x46], [0x2, 0x0, 0x4]}) socket$nl_route(0x10, 0x3, 0x0) 596.34155ms ago: executing program 3 (id=1334): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) 596.147431ms ago: executing program 1 (id=1335): futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000040), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000040), 0x1, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001200)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@local, 0x0, 0x3c}, @in=@empty, {}, {}, {0x0, 0xfffffffd}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'sha384-arm\x00'}}}]}, 0x138}}, 0x0) 515.573441ms ago: executing program 1 (id=1336): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r6, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r7 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1}, 0x24}}, 0x0) 461.879163ms ago: executing program 2 (id=1337): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r0, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in6=@empty, @in6=@mcast2}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {}, {}, {}, 0x0, 0x0, 0xa, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005300)=[{{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000640)="b392e43cd442a2bbf98a491e64de09b1d5836184735e36199b6865c0a5b3becd1b14530fd549a43a1b4231ff1564d1f7142081db0eb07933f231342d94af7f333dbe7f59bea57f57d822876b46cda43aaddd5204736de33e3d961a1f411e720e2b49cf4442af72285fe374eade339ebf871ec4644b04345764f25d382a0e543f0dc8c83f764903edd192874ae6bb53dca301fc0bc8e1737107ffabd396a1490d31fdcb2aa72e175acfaf734a817297ed4d0eb17675ad17fd11814577baed27a56b8b2f9994a3b9feef63ed8da80ecf1e1f97877adc6fdca141155ff71e18", 0xde}, {&(0x7f0000000840)="6d39388e621ab23ca5bb8503700fa2bccd0412c3a74a1e3b3b089d907ed18e5fc1a950c3a61d9f1e3d6aea82a66e77e13177ab4fec5c0bbe52ed494f41cb1177b398da6aa29921d8926ad798310679513ff8390c644b0aba554d722acd540f60800bf2e3992a7d6d7f744166e7fba9c51a6f5badc20814c38bd8432ea4905ebc0877289f19f42cda1fb0a75f7d6140955b0ff291a86d204a2e69590a56f2cd88d233438748132bfafce3c8124b4f052ba6a65ed781bed9fdc875b7ed42f0c9b6ffaee3ebf5504880fc571872f4e567bdb33dee5708630a", 0xd7}, {&(0x7f0000000740)="986c00769b17ca39b174e08a6da9d00a4540931a0e17824def42d2c266cd338ff5926453d4df4e9bb5521e08c37318638c6d70ec56e9c94f225b1eadd70b2d2a239f85a04c1b9e8ff4bdaed5aea742b59e9a8f1d73fca8f9d0c3e749fc684b1546a78e1d35c3722bb3446e07668e315e92ba9e2558c240ab4e07d123e50b080d4be946b3e909fb265ea942041ed5986909a41182819717e55204260e141bd3e0e95789c5ae3baa57439e507e019e0da93c21375565e11d8dea87d5", 0xbb}, {&(0x7f0000000940)="3fdf555b1e4a7d55e96be53c36e389637b2d7fbedb4d06ed09ae42f4017b055c2f2a7878917f8dc3aa00650457d997fc8434bb85927c9da708042251ce338ddf9a1c9936e50211b18cf7809dca30c2ed9d8e9acb0abffdb9db2e85b6a837ee5f0608355394d228d7dfc2c33945bf94f9557d76b1e640f6d6db5a6397c59010c31eebfa2eb77e1d54b4f4f65073797c877e77ab96", 0x94}], 0x4, &(0x7f0000000c40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x4000881}}, {{&(0x7f0000000c80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000d00)="b58d7558fe2486e6d95514b78269a29960586ede3148e9b80cb8c54ca83d5870c905f5cd44176cac0a65c8f36d54628de5391069c2a3a883caeffc72f47f530df6404b16a435c5b1bdabc31e61120a4140c763e174085ebdd82699bd88f0adecf674093a2b", 0x65}, {&(0x7f0000000d80)}, {&(0x7f0000000dc0)}, {&(0x7f0000000e00)}], 0x4, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x20008060}}, {{&(0x7f0000000fc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001780)=[{&(0x7f0000001040)}, {&(0x7f0000001080)="970cb9771bdf53436eaa4b84d52039bd1b854cc6099d9c673b0072da27157b9bd001c7af9e442901510c020435f0bb1a6fd3d7f05239120e57853395d9a523bb783566405e528bb51097c5c948c2be9e2caed51aa16c31bea124bdf08d6fc82605814b48cab2362e1637649be65912f858b24162584912e9aeb7bc685d6121aa8b2bdb9d52c903377e19d4d2f549096f64b6d6079b", 0x95}, {&(0x7f0000001140)="049903f620d84128166d27ccea8d6ff75e7fd718ab4d1a197058adb7313b1d81822ce02cb9ff6a02f5ecbda6323fdf0357d9f731edcf57c5d8f9195f2899e62749bcb1c2e044c76b2b3100ae48646b4fd4b8075fb8765fa3bb1b7673f62793a7610aa6d3fb8ad4297765b2344b9331499b0cf8a18c6bcd7741652fbf5044863eb61972264a91c79443a4111a047746e7ca0ac7677c9978e2579d222aaea0d931fdafc3e0763f621f15d049129c1ca302dd3f8a0d667652decb567b63cf7cadb8e4754c523ea1c0e22513872b2e59ef9a613b84165f6ba1100fbd8d040d165a738687016991b39e2a6405bca62a4cb6674b3c", 0xf2}, {&(0x7f0000001240)="c724c5530ff5cb99c5be838a8b10151e0bee3f34157381cabac49dfc46d9ca5a024d4986d4454d66a71660a44b764b22e5784cef1f8ce8b70a57d7cc4f62896ff482d333bd78447d336eeb29bfa469896e9a103ad8909460de34ad4cc89aeb357ebfaf7d4052e982ab15536c205e57742ec9c2e8c74d3ee6", 0x78}, {&(0x7f00000012c0)="2aa4a51c73b8c645c176e08ad24facdc3ae44e1d8eec96d458b362eaac94e0a68e606f00cdd511dd64aabb3dc032fa57317c4e8e6465c9058ad19f034db03302804896846556a1d7a489852337ce91a041a0ae9cfc420ce9eb85cd964322c01b632ffa2273775fdc6771d991c8cbc02b9bd315ac2cda067212d66d2c483618ac80888c36594cce0dfe3cf50fe03d5a0ded7fd1769b9c839cfab94f541d257ace1a505559d7dcaa1aed0a3015eefb7966c1ba36663a232852cad21c0fff9cd52d9708e65ca534ded1ff3082e431caf3068e89b7c0eb90", 0xd6}, {&(0x7f00000013c0)="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", 0xfe}, {&(0x7f00000014c0)="d7ad30e8323f422a7e30880f55f21df4daf490cc04f5781413b0a5a0d212143a93aae6bc88ce80201a1abd11c02daa62f173e48d5246bf498f5aef1ddb3658a67d3688d0da8519669440539eb1ee7aa9c39a46379c7cc3599aa0aa87f6ec485e057369b84008f2fd2b58ce0544be7d614fdcafb87feeef6e915034cd86f14c6f3e2bce73b68138b3448f4ad57f418f1de1902063445112fb57cf289e9e1101b105f1b3bb6fefd6a5d62319c418714e3cb74c100367e40684f1a0f6", 0xbb}, {&(0x7f0000001580)="2faf384dccff24e85ff2c8ce591894106d646a8660bd2481d8fc148a7af9d866d4c10c604190e7418e3e89160b5a7426410706ff2a2f0832aeb7f3fd71d84e460d7d841e613f06", 0x47}, {&(0x7f0000001600)="cfccc5de515d7fcccbb8ea8bf61fbe14a01acc0cac50ac6c48f81a0b9a1e46cd6dea8c50bbc01d455081a65f224a88b687543de5638bffc772f110babbea4fa6a5", 0x41}, {&(0x7f0000001680)="efda67db8baf017cd6680ed0277fd1f2acb0fdd575d21cb124a07a55f34d338886bdfd2789fd5e3bf28757b2b8efce75db61628b9ec6ce512c5232287836df7c07a186cbedb82f873dba8b0a12616d0692b0c0ac30ab417367fa82283744b5d90d6c83143c89846fe5d130f9f41cb95a0127d7a740597891d2771de28bf564ff94cc487546642d239331107b85d708da31d1672b3521ef78ead1bb1a371b54334727811adfe829a2071c17e5823d5017fdf59fcce50f0edcba3e95e94839a22e375e7b0e99513fc95662d44e43", 0xcd}], 0xa, 0x0, 0x0, 0x20004010}}, {{&(0x7f0000001840)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001f00)=[{&(0x7f00000018c0)="3653a4bf5f3c39c4905a4d5a31711c73e3d5f1994b20166f83c21eb678ee10c6963f88bb9833bb19938d01af8f27e5caa4d7ca059e20a79cb58d0599ee069b9bf891d170b9e60972a872cc75008ea386c453ff83542198ec9bc1826853bab3604804027689090c57201f4a65ff1ef40c5a844777e3deef2b531dc8e1cbabc655cb8887a642c578d8ce5c51c321fd197f892683f011f77fc2e6af32c0c3eaf0e13b87a014d8e4a5cce5550bd0ad871cc0ef49bc558533c9fccc12ea5fb9f24549d8870c92a39892dec2ed099c0168894b315618f61276c1c1c386893f494d76670eb45c655063b2b655", 0xe9}, {&(0x7f00000019c0)="5e1c4130930f55beb460ad9b40abd5c687e1ae3061d229cdaaab39f81d0fff6cc2f67261f03c52ceee686ee77b8357be327fb72af067f453d952b0fbb0538ee395c94c909261f772478f53792d34a8cebb3b779137edcfe410393fed69237792eaa9c7b8e0481277cfdc3092292fc70a5a631aa34e37440f3d0f0ce89341f6123643941b3bd3b403f25f721b27489f1c58accef1e1cf566328077f6980", 0x9d}, {&(0x7f0000001a80)="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", 0xfc}, {&(0x7f0000001b80)="2e433d7773c9acd5f583d0a434f686e0580205ec61554fc540cceba8f44257fc4cafdd8324ce09ab4174db2be5736dc739ccf02ad37cafa0c8d9a86dbf50225db697ca4b9361b398d8dcb7188169eee5224b001d2b51e5bb53557a61391f2a7a2bc0108219867762c28808a7d48ed60f3fd830be54457c69f16e2db17b173caa21ad944fdef3191eb678009bfe7a9fd7801c4017e1b756d35eea03908a3ee83c4eb80d0c1d6846cd5ed76c6a6a8a5a04064763d1ece794ee0a97cee60a226792f73356888d00b5af0c934ba513979b414992c5473c108490b13e167336d5d6364ef1506c843a5e52f7d923f01c454435bc7733a1c7656d93", 0xf8}, {&(0x7f0000001c80)="5030e338968d384cd89c8b5136d6db8b27a73a50f7b369bbcfae609990e52ec2be0d586e19ca02cabdcdaa67c7941cfd7dd124096156b0c980d15b1319e85180c3bf276a7ffe7c600b65a730b392284bc39408ef3eb56265bc2d62b717c0e05c2198c8d4ea4f74b3c49b80d8ca9d88a24becc06b4ab427208b8d4073caa400d2ba913373e74c0a64a76c7e854c04070d5e8872cdb58060e670bbffe817e7a3a64dc101d13f11487c0875f6c8e7d6e755c6684149aa3351486d008f18d75543c54b0db9064843e46121ad40001e77ee2d9117e4978d0a862200e55631fae6abc5", 0xe0}, {&(0x7f0000001d80)="5ec53b179af6927dcbd70163066751d52226ba0edd629a5b86c0fda08027c2e0033e22275566da501ea1afd997669a257c4fabe5323d378de484d4e0ae76ec21fc010dca44f92a71672c6d60478895d8e368f8d595c7c951b2d97c9dbdbf6948ae01ddcd87c6f9112ba4493dd1106e711fd98045868b6529377deb40a2526bbe001d81f3dad985d937ac9a", 0x8b}, {&(0x7f0000001e40)="171fa92ced5461151aea4518978830968d43bcb7fa91ab445a96ecb53e7f2cb82efffaadb33c3538241b1e4d25ad74cdafaacf844c4bac79d26f97c0f49ebb28b7afe6f48a1265a85a5ab21b3d51498ee592bb746b44d461f477f1da605eea9ad9e3c8462073a2b6672aaaf18da5a0a8a8548fb93b9ed501f3fe74e873e747c32efa63dfe27c2f7bade85129c204f390", 0x90}], 0x7, &(0x7f0000001f80)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x10}}], 0x28, 0x20000010}}, {{&(0x7f0000001fc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005240)=[{&(0x7f0000004080)="83026ebf3ded3cf1181f85c20d87624593d3128109af02186b84d37d5d6c0e31594841190128a3aab39f8ed904ae7e6b79106f4e2c66a4d5862a8d02f3a608ac12cd1d2317b75f0d587668498cbcb5b4873dc288391f6a1ddb5d5092e98638732fb7122ebf82b2da34940602bb97a51268c3117c", 0x74}, {&(0x7f0000004100)="d507be43ebe0987ff92a14479bdf54cfb176717009d59ee985e7b207dadc898758a150c054f08b9a36683ed6002832254fa4e09c354e51dd709c8bd061a2674196db33187ccd4dcb1451841b0e34ec76aef99a03291b760a101a210f9100db165b8c1a3409c4003a74275e84a47276d0281117ca5cd2efe446c228351b89e4b97e285db518a4b86428ede8a7a5834e8eb717660fd786208ec3faa50253156fe8239dddd3e04d6b4c9e5d2ec9a4fed487", 0xb0}, {0x0}, {&(0x7f0000004240)="6b78c18b8db3143621e925e1d87399b8878ac953f0eb6e4abcd8d5772a790a09d70147d02af88e1d7f1508ec467bc8fa7f5186bc3f2a523a9c5c6d68b2d4eafa565bc69be101989c0afa4842ecb8abf4c5868c06dfff24920e795aa5b0ee8d64508a978a29937abe19dc12f78efc6dfe859c909e0ed02d401b5cb70fb82c15d9c962d0a7f6528a575b0be5a001dbb04b2e1a8caa778d50fe49086f03935f65f073905b3076bd9d6d800b551f786d9f1173258b11c5b9df7240d26ebf1929dfe479b5ff044843edec535373c9fadccdcf5196914d3f9dfdb9b75d519f425278fe47798ade8104231b0fce06cb581ec9d512944f3eb67132a19923a0dbc25865ab85cc5cd4b66423242a315a6150987c8a43a83b4ac5ac1e32127f39b8ca5eac0de73f9cf812739d487f51ded832c11f1d719b13c47099a864253e59f4ccdffac1249398219c94fa03b00dcd763d51bd6fe20963a0786b88f03d5aba9d337853e15c035d8d2f11247436ee1690f402ccfd00dc5af92c91d4119a4df58ec4dbc7814f0ab89fd2fa46dc39b560e12a2f3625f3eb7162a7d268e6e47540ee65011625728d9f311ded5e781061d3cbd58344abb39bc577ba5a761c95dec06ec331d2c7ff5bcd31951347968aa7e246453ab7a3de1fb8531ab82b10893026541766296c2c805f364c14240135294977f3c2e5413f7e25665409edc56643955786600b6a68e20b9ade01798650b7b3c802324e193dcad7b284b2a05712321faeccda563f090fde294466f8f6b034641f22964cdd57acbe797784cfccc071a54e249c5aa2fd61261d513caca176fe0d0a52cc52fa00d63346e6b266b5f5c9d1a93e130d28e8a394f0548ca2aada633b9211cd30da6c26574e789d5ce14c0c654009ff0ba3ff47ac85f1bbaf5426a3393c0a8dd647d2d6c6f7ca2534e338a61d13b5152a8d80ba8753643f6f73e12cb72ca710f6dbacff947e31417f6cf16a0784ba63e795364a25ef0a351990f8a7d54f6a302f586390fadb01c25463f242b79a725a148105afc6afa5a410871c6ed12830c8b15886b92bd7c39c136e0aa42cddd758b358d29baf9b24f1766dd1bc630dc525717e90f3f4d153be74b959bf77cdf1e216c8cf3cce20f6719ef4ab86fb198b99a9a8d69a5d1ec6421faf5301d4a7719b959457e18b3f7d9ba0de9ac73dfd6ced726d364da0dd8f84dd45c417d9cf62b878d7c75caaeaab0ad790e74f2a2242bb9d51d023ed5a9d73beb429141b05f0bdda1819091e6ac116e5dc332ae49801281c7c3f120b1d1e9a20d4937f97061c044efbdb6bf7638cc428e5f1051d5b6472850c96e35bffbfec30accd9bc9eaa4faf253df0a8cc49056b6b65a07fbfb868661e77190435280df46b4deee369a2b32b27f621b2fccd6489e8d195323e1c9a980086d76116d820e8bf4fc5c5d362a46ed24e526eb48c4211423cfdd7002601c0466f4981269f69b0e0c4b922a263e98ed71da5d2489e59b54fe613b05bd07a885f4e78890e8d821822825d2db1380b405d62836d0a932eb4354d99d79c76957ddd4127c48df496b6007222f1fc45e7758da4f42e77fdf080b2efd78dfdc01b1d1b5a29f0f2e9c4b62e9c206fef7fc98fba661ae4c32c096696fe88e333e9c3d9b31c5d88296ee90e2a64ed87908345cca1ade65305d59ca3c97d3a08ae9d26eff4ed10eb2de15f27a1daec2af5c6f729a6daf2bd4b08b61970a10092edab7d5d55f7a36580461ed3702c2c04804fa912a602f1d16350e2f336d57182a4027017985562813faf20a2bd7343766d8f7f43600c3f4ca75adf1826c21b488044720229a237aa41c8a438d068ed6622a6547b13bb11a871c9e102c07b421e195576ef05101d438264b39fe474018d678171c2a8aa4ad37358de8a99e97f6fa0bdb320c8c8f530d9445465a4df9067a50201cb0af6fc1186dd1c0d931c4853de4eacff6e8cd43133b3d53c264ee7545d0bf1779a0f270bf05a03b3f0d6fbe208991a541d141becc1374df45bd70bd35a5da31d1f213511700318f6f7c6d8bd6e5f6a6c901687e43bfe2371001aead6feda14b46c6ab7bf95de8ed83616dd9e4f1170dc46a919d8571234a15c01e2c0f1f9892edef6898a01a1a47c96b2da758492d170e69733a3b34d02f03c6ecef1e464576fc54f14e8ca0be1af01cdc5192cb4a7c00cce41ef38962dd9e4f07eb9f2cff397401a4af3e357240f9e80e89d1e8b0c62f22cbf56d07fbe4c50af5eabc0cc80aee526d30a10e6eeac6179b63faa02198249701b51bb94418dda5faf52c2452c956f2b27b9cd1b55a69292b6908db6c2583a548812b0f08dfcc24c4eeac7b7dd740d045f2cdf8d6925223a0f3324d79450c612982599827236464df4bd1a03e967b6a081267ffffb8341f5bea859ffdb706e46f5c30616b929791ac8c50345d4f8018434ffe22c7ed660e798d8a719e7300e865baaa95a84ad646676bd0e08a12b42519decf45078db9fe4e526aab5c34c4b3c7ea2f8fabfded1744a6b08ca5f731edcfa39894ff0cc6d76777d9f1b444c4cd63a32ca19339389fdf8bad023ee5eaaff7b9ce7febf9e8ae5936c65701d499ee38fdb4a022aa43bca9568ecc7ada275e40e22a7c372f511d221f2ae40e418f447b812a931999c1fa4e013cf2945799e78bcc2bc9abc684fe5a83f9744575637a6d579826154361f8ff8d936d231e6034bfcf9ec91f35e68046a58404ea6e2942a57d181831d5da923c776b4a6aa3d0b00e61b8e780d0c1fc5ad956add34b230bbe15a6ad4559062e25d63ba6bbad6775a688c9022144c45b17e9713a0453374e5c578b3b7589525483bf5d49891814f25925c04ad1e857460487f46186cbe4f5e4e6f244254d4b2abc84f844dd2e27d804dfeb601f1a7a5aa31a8ca6336ff9996c12627acc0f0d7484d7647b3cfa0a6f495c00148f169aa578c37dc50f03507c4c7d2bf2c901ba07da68555eeaefc30187d817cfe7ec16706301a0bbe389439a997b16faab3af63e0c4165705a0a9681920722e9ae09b69e4ce1cd866f95247d067f568da749168ce9f9b0f9aeb976082aac8d0b660f2c7081d176443452402c292dd79aaee43fdc6b02b24c0ed9c09672468c8703f8ed75f637188de28f3bd2662a1bfc005d76bcf187fea9772a3dd5865ae75b08af8232972eb1a8cb3e53aff7d197d2e2ee69884ac365ef1145247c41294f62cdc8adf347b50dd68e95793d74b2bde86d354c3791d62833f80136ec084ce5f1fd596da6154123f5fce3139635354057f3b6ac26e7f34feaf6b4873ce96a352a67321d87010e4803ee3de3702af3f2a95f655c021049a407d7c328695a1cc2337f830009594513b292aea28becb668c3ccd4045a17138e46b31476133d3110160771125db6e6321ab41ed8fa24bea9b522e6a99529f9e30b6c59441c36d5fe41878ff76fc3af51b1cd47a7ae05df4cb0b5a9cbd5c6109ef01e5bb1810e54aa0eca000162fb95e6c08e9e1d3c189ddaa621c4f23c76322aade47b77c69e91f3c6c3855cd140ebfb431edba4ab2d1f80fc9f69a782bf2b9cd5c62b73127e969ab708c96eb02dcec74f5d3b87c9fa5a428137a75aea6bb3ff777a5f46889e2d9a3eb82f31a711e884fb7e1b0df401aef92b4b0488937c50e7dfa36358b91ffe37629cb711c30f582d543e2d02e49374a6abb4ba86a0475f57d11c032f3c95eb3dc392b6ac618905ab2bd3bbb90d4f4c61e781caaebd8d528af1e1ba87a76ad71688dd462ea775a4bac2b5acaee326a0acdc2614e696341a616f15bf8e215725d338ccbd8b2159a6bff30ebcd5919962c7c8434296d2d7180e3ba191482e871dae339ccc1a2fd767cb817a62f54bfc254f5549c03f0ea3600641ca241fb0443a8788afd7623f1d43b9994209f87d46f41f9a0fda1145cbf0e4a9fd95e3cf57ba2ae70cccda2954356fd02807579d405630499c47a5d9b2e01bd6291dd1fa1087e14679251c51228340e107b531acb2b92a9a9b2fec222f0f91fb26bcf1944ee90a02dace361fc12ef8b31ef612508ab6d11a50053f5b8675473f9a62aa440ee3d6737362adce565436e6679540a4ef52d3abf8deee3d38b238a42d09a8c259353e5e41ee71c3feb04787d4f450bcdcab2f0a3e896d169bc58eb0763de9974d5bcb130e449ce8a47d1e50acf830b91449cf329e28bf9c6bfeae96b7372630ae5b95474b444bf018ebcba1ea441c35e5f0e07b07a026314266ad7f96f075337c0c3b56c75b1ef5f4d67bbb60a31f436eeeefaa6e586d8c39014f26f287252f534436a62a0649d5f51ca2b2f0a543e9aea36ae090d8a1a039f2268d2cd98866f1ea64fa4a9eaaa06f99a0a974465aea98ea2d020b6c6193844c30255c7e7ccf3da580ed1ff7002c0e2a53b0d6ca671fb3cfe5aa6c8150f54b5d03bfde910991e6256ed9e3beb56d2a4ec5a47a222ca59e51640e1bce4d188255ccb046ad1edfd189908cdb2a86ff26bcaeb7c03afda97052608962c981ed13e690ebea2dae70bb140dcbc1504c7c6fc819ccde79217c0bf3067fcd95e5e347fc4f3a53dc35c5a4520d61e94b8a49a1162981527144757d0f431612fa01d942a3dcac5b71eb870dfc78bec236489bd6fd28622b44d39bd428e9626badf153105646907aeec476694227bb67fa7ac633f8f45ee2c818bf911a0c7ae9c1d921ed0357434439d4cb075cd707acab0779080574a0f02224858b4140adbb89ad4d0176db6bce94f69f242073ddda6eab7ed73ee5732e55fbc2c45d408fc8313dcb1df2d45045ba99bfd9ddb6f27646aba52bba2d2bc6362e49e7176f0b218898684e4624eec24c1d3d2c7f97de33381f6f9bc336d3667759d099fc242cbbc84db50eb8b7d473b1ce4c927b553a5798e9431c0c9aaee1fc7d39278d2e5dd001acd3f2b608b42f88bd3060e16779e27b643b387ee3b7cf9481241877fe0540d788c2fbdabb568afa339dabbc6e840483bd008a8a2ab0a1ac2dc8323c06b6482f4de36064ad9e9f14db21f79f3cf8a6089596d02ea6f289aaa7d9bf3874c5e42797e5c4e18eab9508f9c61b266258be34b1f10db9a44288616eb9bbe8d8dfa7d2dc4adfb5840a916555a192c7970709d97ea1247d313b0eedd8658d13cae23647fae47f2764d8fa54844f07fb036a95120632e8bfa5c5f589a3486244bd47ca18e7e49752485a054e9d20344b11b9a9cb290802eeef99341d36b5285982a24a94cca4bccce89252e347977619e94424bcf55be062688e9fdbd0821b7825c1bca88e35a01fcc793feb8e645f9567111c866fd721b75b83d65c2d5b81c4ef83472f93e690042f2964ed7453aea903d930c6d7af7eaa917b9088a4a3f00b45d14e8671d1e61a7514de501ce9dc3f07c70794acbcab7a318b17c191e614fd1f0a8d8bebdd922068facfbe704c2bcc995d106f7038fced62e11cda7e76d65e3d7452bf0df494e96600b374e87bb533a69a15ef6eb2470717af4e65012aca7b2903b5fa2c8ef86a0dab29d36341a7b4cf32dcb00e2ddc748547a1121316691375ec2b6f33f4364003e9fec955aaa4394b6af2d191efea0cf2397c2ad4286174f9cd4256192b7edd5abe2d2bbc5bd69b375d10f612a4e2a23f17e84da50bf4b6a8b2756188124db4b2ae48399aaa5fd16b9b07674ebaefce4b92af6e35757bcea0889ab4efbd1d46a51ed0f49959db19a322bb679e2fa9c6d895a0bebe0e4fd2d6bfa27d7ce567367e052d5fd4371f45469d6a38c98dde81c857115b8943760a9dd8c9b3689e73b42f6014d4f1f1", 0x1000}], 0x4, &(0x7f00000052c0), 0x0, 0x4049810}}], 0x5, 0x4010) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth1_to_batadv\x00', 0x0}) bind$packet(r5, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) socket$packet(0x11, 0x2, 0x300) r7 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0xa0, 0x0, @in={0x2, 0x4e22, @local}}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x88, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xe}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x17}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x14}, 0x20000010) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x50, 0x1801, 0x0, 0x0}, {0x7, 0x4200, 0x0, 0x0}, {0x794, 0xd201, 0x0, 0x0}], 0x3}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300", @ANYRES32=0x0, @ANYBLOB="6023664eb897f5dd6baf21475213cadf28d9889c73131f"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 388.588144ms ago: executing program 1 (id=1338): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r3, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 218.578117ms ago: executing program 1 (id=1339): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$audio(0xffffff9c, 0x0, 0x402, 0x0) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) socket$inet6(0x10, 0x80000, 0x3) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) r3 = gettid() sched_getattr(r3, &(0x7f0000000440)={0x38}, 0x38, 0x0) membarrier(0x10, 0x0) poll(0x0, 0x0, 0x1) (async) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) (async) prctl$PR_MCE_KILL_GET(0x22) (async) r4 = socket(0x10, 0x80002, 0x0) (async) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) (async) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r8 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) (rerun: 64) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r8) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$alg(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="90946f441024179a812c1452544faf66b36dfd04429454d4d087ec0fc096ac68174bfb9d460c3ccb81c421ca342a88ed5916172d5b72b9ceca13b497432a355417c290d85bc5549ffda47756366a47bc009b9c8fe15f0cc62e65750a03f423dcfc", 0x61}, {&(0x7f0000000480)="c1cf1d47a43e1d4e4edd7274aa5134ee2609bc28acdda6c12280fe11a0c955a36d9597884d550372109fd754a4f07afc3dca702c1bc6888d8b1d5de82ba046fa05881f9fcfc79529224bd538615b71", 0x4f}, {&(0x7f0000000500)}, {&(0x7f0000000540)="f95d8034ab4dbf253c51fa99e3da4b2418c5ed70d1d0f08458eb919794e399b81233780c711fa590933e7575", 0x2c}, {&(0x7f0000000580)="6c18c570cf09660afa9a19312e28bed7466a59faa73a4b", 0x17}, {&(0x7f00000005c0)="a0a2abb17f66b33c3ae31fbae3226a07b575b2567a17f3efc01f7edbf48f30324d5484b9164505a19e27e76debcce25beb823e5d17839d5dad1ae297d8e9afa4b1367cb171f7c483b51845e83f456b97c947a7a49ad19888b6c2c290a2667443deac9db30d9e3271d41ed123a7c18a954237902ea87923ee4dd799ecc19891602c1bc04943bcf31fa8f3634b3c61621df583c4d8272b1e913b99d6c27d9ca0c5b25c52860aa0c79f9aebdd53e4cdef5069c9e8f2c575823b2bd6a8a8ac5b4e235f5ce9c9834ba86945e083aa2899debee49246a108c67aa9c550d152811bc06e2e5cb0eb98e237ad7ba732257c5c244a19", 0xf1}, {&(0x7f00000006c0)="84091193c2bf73d112c9ad2f7539af363aff5c65ffa52c5a0e76797690209998bac74d47f6", 0x25}], 0x7, &(0x7f00000007c0)=[@op={0x18}], 0x18, 0x80c0}, 0x40) (async) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) socket(0x10, 0x3, 0x0) 0s ago: executing program 0 (id=1340): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) keyctl$session_to_parent(0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c00078008001240000600000500010006000000050005000a00000005000400000000000900020073797a3100000000110003"], 0x58}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300", 0x50}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x4}}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000340)="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", 0xfe0}], 0x2, &(0x7f0000001340)="46b1c5e9a4204ada96d3a496318cdcc6bf3dae23962a84e85c2d9f2cb1e86cc3145dcb8140", 0x25, 0x24005011}, 0x40) mkdirat(0xffffffffffffffff, 0x0, 0x100) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) msgsnd(0x0, 0x0, 0x8, 0x800) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000180)={0x34, 0x3, 0x2, 0x83a, 0x1, [0x6, 0x9, 0x8, 0x10]}) msgsnd(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB, @ANYRES16], 0x8, 0x0) msgrcv(0x0, 0x0, 0x0, 0xffffff7f00000000, 0x800) kernel console output (not intermixed with test programs): tributes in process `syz.1.875'. [ 314.876856][ T8930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.878'. [ 314.997891][ T8930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.878'. [ 315.418315][ T5827] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 315.688424][ T5827] usb 5-1: Using ep0 maxpacket: 16 [ 315.721291][ T5827] usb 5-1: config 0 has an invalid interface number: 194 but max is 0 [ 315.738489][ T5827] usb 5-1: config 0 has no interface number 0 [ 315.771154][ T5827] usb 5-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b4.25 [ 315.780674][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.793642][ T120] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 315.838834][ T5827] usb 5-1: Product: syz [ 315.904387][ T5827] usb 5-1: Manufacturer: syz [ 315.918356][ T5827] usb 5-1: SerialNumber: syz [ 316.034628][ T5827] usb 5-1: config 0 descriptor?? [ 316.104637][ T120] usb 2-1: config 0 has no interfaces? [ 316.144757][ T5827] cypress_cy7c63 5-1:0.194: Cypress CY7C63xxx device now attached [ 316.246055][ T120] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 316.302789][ T120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.330337][ T120] usb 2-1: Product: syz [ 316.334600][ T120] usb 2-1: Manufacturer: syz [ 316.351560][ T120] usb 2-1: SerialNumber: syz [ 316.454117][ T120] usb 2-1: config 0 descriptor?? [ 316.677186][ T8944] Invalid logical block size (-1) [ 316.869248][ T8955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.880886][ T8955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.006730][ T8955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.061938][ T8955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.112095][ T8958] FAULT_INJECTION: forcing a failure. [ 317.112095][ T8958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.170783][ T8958] CPU: 1 UID: 0 PID: 8958 Comm: syz.0.885 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 317.170807][ T8958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 317.170816][ T8958] Call Trace: [ 317.170823][ T8958] [ 317.170830][ T8958] dump_stack_lvl+0x189/0x250 [ 317.170858][ T8958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.170879][ T8958] ? __pfx__printk+0x10/0x10 [ 317.170903][ T8958] should_fail_ex+0x414/0x560 [ 317.170929][ T8958] _copy_to_user+0x31/0xb0 [ 317.170951][ T8958] simple_read_from_buffer+0xe1/0x170 [ 317.170973][ T8958] proc_fail_nth_read+0x1df/0x250 [ 317.170995][ T8958] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 317.171024][ T8958] ? rw_verify_area+0x258/0x650 [ 317.171038][ T8958] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 317.171059][ T8958] vfs_read+0x1fd/0x980 [ 317.171079][ T8958] ? __pfx___mutex_lock+0x10/0x10 [ 317.171095][ T8958] ? __pfx_vfs_read+0x10/0x10 [ 317.171112][ T8958] ? __fget_files+0x2a/0x420 [ 317.171133][ T8958] ? __fget_files+0x3a0/0x420 [ 317.171150][ T8958] ? __fget_files+0x2a/0x420 [ 317.171174][ T8958] ksys_read+0x145/0x250 [ 317.171188][ T8958] ? tomoyo_file_fcntl+0x78/0x210 [ 317.171208][ T8958] ? __pfx_ksys_read+0x10/0x10 [ 317.171226][ T8958] ? do_syscall_64+0xba/0x210 [ 317.171246][ T8958] do_syscall_64+0xf6/0x210 [ 317.171263][ T8958] ? clear_bhb_loop+0x45/0xa0 [ 317.171280][ T8958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.171294][ T8958] RIP: 0033:0x7fa40df8d37c [ 317.171310][ T8958] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 317.171328][ T8958] RSP: 002b:00007fa40edd9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 317.171348][ T8958] RAX: ffffffffffffffda RBX: 00007fa40e1b5fa0 RCX: 00007fa40df8d37c [ 317.171364][ T8958] RDX: 000000000000000f RSI: 00007fa40edd90a0 RDI: 0000000000000004 [ 317.171377][ T8958] RBP: 00007fa40edd9090 R08: 0000000000000000 R09: 0000000000000000 [ 317.171389][ T8958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.171400][ T8958] R13: 0000000000000000 R14: 00007fa40e1b5fa0 R15: 00007fa40e2dfa28 [ 317.171431][ T8958] [ 317.399643][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.406032][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.338221][ T5827] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 318.366792][ T49] usb 5-1: USB disconnect, device number 58 [ 318.479353][ T49] cypress_cy7c63 5-1:0.194: Cypress CY7C63xxx device now disconnected [ 318.523208][ T5883] usb 2-1: USB disconnect, device number 37 [ 318.557645][ T8973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'. [ 318.567294][ T5827] usb 3-1: Using ep0 maxpacket: 32 [ 318.584339][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 318.622483][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 318.635860][ T8973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'. [ 318.668564][ T5827] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 318.691020][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.717761][ T5827] usb 3-1: config 0 descriptor?? [ 318.726048][ T8965] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 318.737047][ T5827] hub 3-1:0.0: USB hub found [ 318.938813][ T5827] hub 3-1:0.0: 1 port detected [ 319.088240][ T120] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 319.241108][ T120] usb 4-1: unable to get BOS descriptor or descriptor too short [ 319.272301][ T120] usb 4-1: not running at top speed; connect to a high speed hub [ 319.301551][ T120] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 319.341977][ T120] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 319.413602][ T120] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 319.438217][ T120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.446292][ T120] usb 4-1: Product: syz [ 319.450649][ T120] usb 4-1: Manufacturer: syz [ 319.455290][ T120] usb 4-1: SerialNumber: syz [ 320.510877][ T5827] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 320.563301][ T49] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 321.073709][ T49] usb 2-1: config 0 has no interfaces? [ 321.140969][ T49] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 321.194950][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.228424][ T49] usb 2-1: Product: syz [ 321.248193][ T49] usb 2-1: Manufacturer: syz [ 321.259912][ T49] usb 2-1: SerialNumber: syz [ 321.279272][ T49] usb 2-1: config 0 descriptor?? [ 321.888801][ T120] cdc_ether 4-1:1.0: skipping garbage [ 321.901865][ T120] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 321.962512][ T120] usb 4-1: USB disconnect, device number 40 [ 322.118188][ T49] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 322.461230][ T49] usb 5-1: config 9 has an invalid interface number: 224 but max is 3 [ 322.470811][ T49] usb 5-1: config 9 has an invalid interface number: 235 but max is 3 [ 322.479373][ T49] usb 5-1: config 9 has an invalid interface number: 251 but max is 3 [ 322.493351][ T49] usb 5-1: config 9 has an invalid interface number: 175 but max is 3 [ 322.508514][ T120] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 322.516448][ T49] usb 5-1: config 9 has an invalid interface number: 132 but max is 3 [ 322.531251][ T49] usb 5-1: config 9 has an invalid descriptor of length 211, skipping remainder of the config [ 322.556720][ T49] usb 5-1: config 9 has 5 interfaces, different from the descriptor's value: 4 [ 322.580179][ T49] usb 5-1: config 9 has no interface number 0 [ 322.593525][ T49] usb 5-1: config 9 has no interface number 1 [ 322.606571][ T49] usb 5-1: config 9 has no interface number 2 [ 322.621413][ T49] usb 5-1: config 9 has no interface number 3 [ 322.643499][ T49] usb 5-1: config 9 has no interface number 4 [ 322.658221][ T49] usb 5-1: config 9 interface 224 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 322.686436][ T120] usb 4-1: config 0 has no interfaces? [ 322.692541][ T49] usb 5-1: config 9 interface 224 altsetting 6 endpoint 0x4 has invalid maxpacket 1144, setting to 64 [ 322.711192][ T120] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 322.722890][ T120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.733190][ T120] usb 4-1: Product: syz [ 322.737639][ T120] usb 4-1: Manufacturer: syz [ 322.741663][ T49] usb 5-1: config 9 interface 224 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 322.778472][ T120] usb 4-1: SerialNumber: syz [ 322.788195][ T49] usb 5-1: config 9 interface 235 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 322.832040][ T120] usb 4-1: config 0 descriptor?? [ 322.840750][ T49] usb 5-1: config 9 interface 251 altsetting 14 endpoint 0xC has invalid maxpacket 96, setting to 64 [ 322.868735][ T24] usb 3-1: USB disconnect, device number 46 [ 322.945344][ T49] usb 5-1: config 9 interface 251 altsetting 14 has a duplicate endpoint with address 0x1, skipping [ 322.982707][ T49] usb 5-1: config 9 interface 251 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 323.007288][ T49] usb 5-1: config 9 interface 251 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 323.070262][ T49] usb 5-1: config 9 interface 251 altsetting 14 has a duplicate endpoint with address 0xC, skipping [ 323.102344][ T49] usb 5-1: config 9 interface 251 altsetting 14 bulk endpoint 0xD has invalid maxpacket 32 [ 323.121800][ T9013] Invalid logical block size (-1) [ 323.126968][ T49] usb 5-1: config 9 interface 251 altsetting 14 has a duplicate endpoint with address 0xA, skipping [ 323.148346][ T49] usb 5-1: too many endpoints for config 9 interface 175 altsetting 172: 136, using maximum allowed: 30 [ 323.219009][ T49] usb 5-1: config 9 interface 175 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 136 [ 323.233088][ T49] usb 5-1: config 9 interface 132 altsetting 161 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 323.248310][ T49] usb 5-1: config 9 interface 224 has no altsetting 0 [ 323.258441][ T49] usb 5-1: config 9 interface 235 has no altsetting 0 [ 323.266859][ T49] usb 5-1: config 9 interface 251 has no altsetting 0 [ 323.318288][ T49] usb 5-1: config 9 interface 175 has no altsetting 0 [ 323.333422][ T5886] usb 2-1: USB disconnect, device number 38 [ 323.348182][ T24] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 323.362693][ T49] usb 5-1: config 9 interface 132 has no altsetting 0 [ 323.406713][ T49] usb 5-1: New USB device found, idVendor=12d1, idProduct=d77f, bcdDevice=ae.50 [ 323.419035][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.427527][ T49] usb 5-1: Product: syz [ 323.433356][ T49] usb 5-1: Manufacturer: à°Œ [ 323.442071][ T49] usb 5-1: SerialNumber: syz [ 323.518296][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 323.525109][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 323.539679][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 323.560206][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 323.581824][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 323.601453][ T24] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 323.617622][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.636818][ T24] usb 3-1: config 0 descriptor?? [ 323.644657][ T9016] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 323.665220][ T24] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13 [ 323.704203][ T5886] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 323.872305][ T49] option 5-1:9.224: GSM modem (1-port) converter detected [ 323.872448][ T5827] usb 3-1: USB disconnect, device number 47 [ 323.887764][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 323.922636][ T5886] usb 2-1: config 0 has an invalid interface number: 194 but max is 0 [ 323.933029][ T5886] usb 2-1: config 0 has no interface number 0 [ 323.953376][ T5886] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b4.25 [ 323.963253][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.973991][ T5886] usb 2-1: Product: syz [ 323.978936][ T5886] usb 2-1: Manufacturer: syz [ 323.984071][ T5886] usb 2-1: SerialNumber: syz [ 323.990545][ T49] usb 5-1: USB disconnect, device number 59 [ 323.998952][ T5886] usb 2-1: config 0 descriptor?? [ 324.026734][ T5886] cypress_cy7c63 2-1:0.194: Cypress CY7C63xxx device now attached [ 324.033341][ T49] option 5-1:9.224: device disconnected [ 324.142570][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.904'. [ 324.167156][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.904'. [ 324.533431][ T9028] xt_policy: neither incoming nor outgoing policy selected [ 324.829185][ T9040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.860944][ T9040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.879713][ T9040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.925585][ T9040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.019026][ T49] usb 4-1: USB disconnect, device number 41 [ 325.531725][ T9056] netlink: 132 bytes leftover after parsing attributes in process `syz.4.912'. [ 326.077261][ T9061] netlink: 56 bytes leftover after parsing attributes in process `syz.3.914'. [ 326.103729][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.914'. [ 326.117870][ T9061] netlink: 372 bytes leftover after parsing attributes in process `syz.3.914'. [ 326.128390][ T9061] netlink: 88 bytes leftover after parsing attributes in process `syz.3.914'. [ 326.251904][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.915'. [ 326.284887][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.915'. [ 326.312753][ T9069] netlink: 84 bytes leftover after parsing attributes in process `syz.0.916'. [ 326.528205][ T24] usb 2-1: USB disconnect, device number 39 [ 326.552686][ T24] cypress_cy7c63 2-1:0.194: Cypress CY7C63xxx device now disconnected [ 327.003768][ T9095] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 327.003768][ T9095] The task syz.0.923 (9095) triggered the difference, watch for misbehavior. [ 327.078338][ T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 327.471879][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 327.591554][ T24] usb 2-1: config 0 has no interfaces? [ 327.605296][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 327.615802][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.698311][ T24] usb 2-1: Product: syz [ 327.702547][ T24] usb 2-1: Manufacturer: syz [ 327.708248][ T24] usb 2-1: SerialNumber: syz [ 327.715854][ T24] usb 2-1: config 0 descriptor?? [ 327.949869][ T9084] Invalid logical block size (-1) [ 328.499794][ T9119] Cannot find set identified by id 0 to match [ 329.480251][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.930'. [ 329.534391][ T9132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.930'. [ 329.658217][ T24] usb 2-1: USB disconnect, device number 40 [ 329.914312][ T9141] fuse: Bad value for 'rootmode' [ 330.365745][ T9155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.936'. [ 330.706852][ T9159] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 331.618422][ T9164] capability: warning: `syz.4.940' uses 32-bit capabilities (legacy support in use) [ 332.248247][ T24] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 332.421249][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.432510][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.458207][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 332.488165][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 332.510752][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.944'. [ 332.528472][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.543848][ T24] usb 5-1: config 0 descriptor?? [ 332.610969][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.944'. [ 332.753222][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.944'. [ 332.778613][ T9184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.945'. [ 332.908427][ T5885] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 332.970798][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 332.979682][ T24] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 333.019592][ T24] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 333.078200][ T5885] usb 3-1: config 0 has no interfaces? [ 333.090529][ T5885] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 333.118256][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.140067][ T9189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.947'. [ 333.146882][ T5885] usb 3-1: Product: syz [ 333.157636][ T5885] usb 3-1: Manufacturer: syz [ 333.191120][ T5885] usb 3-1: SerialNumber: syz [ 333.221026][ T5885] usb 3-1: config 0 descriptor?? [ 333.254288][ T9193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.947'. [ 333.267372][ T9173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.312062][ T9173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.453811][ T9189] veth3: entered promiscuous mode [ 333.459420][ T9189] bridge0: port 1(veth3) entered blocking state [ 333.465857][ T9189] bridge0: port 1(veth3) entered disabled state [ 333.479915][ T9189] veth3: entered allmulticast mode [ 333.499095][ T5885] usb 5-1: USB disconnect, device number 60 [ 333.553847][ T9182] Invalid logical block size (-1) [ 333.791326][ T9199] FAULT_INJECTION: forcing a failure. [ 333.791326][ T9199] name failslab, interval 1, probability 0, space 0, times 0 [ 333.824033][ T9199] CPU: 0 UID: 0 PID: 9199 Comm: syz.3.950 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 333.824063][ T9199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 333.824075][ T9199] Call Trace: [ 333.824085][ T9199] [ 333.824094][ T9199] dump_stack_lvl+0x189/0x250 [ 333.824130][ T9199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.824158][ T9199] ? __pfx__printk+0x10/0x10 [ 333.824183][ T9199] ? __pfx___might_resched+0x10/0x10 [ 333.824200][ T9199] ? fs_reclaim_acquire+0x7d/0x100 [ 333.824232][ T9199] should_fail_ex+0x414/0x560 [ 333.824268][ T9199] should_failslab+0xa8/0x100 [ 333.824297][ T9199] __kmalloc_noprof+0xcb/0x4f0 [ 333.824318][ T9199] ? kfree+0x4d/0x440 [ 333.824336][ T9199] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 333.824364][ T9199] tomoyo_realpath_from_path+0xe3/0x5d0 [ 333.824389][ T9199] ? tomoyo_domain+0xda/0x130 [ 333.824417][ T9199] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 333.824445][ T9199] tomoyo_path_number_perm+0x1e8/0x5a0 [ 333.824478][ T9199] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 333.824532][ T9199] ? __lock_acquire+0xaac/0xd20 [ 333.824577][ T9199] ? __fget_files+0x2a/0x420 [ 333.824605][ T9199] ? __fget_files+0x3a0/0x420 [ 333.824627][ T9199] ? __fget_files+0x2a/0x420 [ 333.824653][ T9199] security_file_ioctl+0xcb/0x2d0 [ 333.824681][ T9199] __se_sys_ioctl+0x47/0x170 [ 333.824701][ T9199] do_syscall_64+0xf6/0x210 [ 333.824724][ T9199] ? clear_bhb_loop+0x45/0xa0 [ 333.824746][ T9199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.824764][ T9199] RIP: 0033:0x7fe2d8d8e969 [ 333.824782][ T9199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.824798][ T9199] RSP: 002b:00007fe2d9b2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 333.824819][ T9199] RAX: ffffffffffffffda RBX: 00007fe2d8fb5fa0 RCX: 00007fe2d8d8e969 [ 333.824833][ T9199] RDX: 0000200000000080 RSI: 000000004048aec9 RDI: 0000000000000004 [ 333.824846][ T9199] RBP: 00007fe2d9b2e090 R08: 0000000000000000 R09: 0000000000000000 [ 333.824858][ T9199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.824868][ T9199] R13: 0000000000000000 R14: 00007fe2d8fb5fa0 R15: 00007fe2d90dfa28 [ 333.824896][ T9199] [ 333.824905][ T9199] ERROR: Out of memory at tomoyo_realpath_from_path. [ 336.160379][ T5827] usb 3-1: USB disconnect, device number 48 [ 336.653526][ T9232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.958'. [ 336.738241][ T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 337.023195][ T9235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.959'. [ 337.248382][ T24] usb 3-1: config 0 has no interfaces? [ 337.270190][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 337.279728][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.288433][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.959'. [ 337.309094][ T24] usb 3-1: Product: syz [ 337.314536][ T24] usb 3-1: Manufacturer: syz [ 337.319788][ T24] usb 3-1: SerialNumber: syz [ 337.349777][ T9235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.959'. [ 337.391153][ T24] usb 3-1: config 0 descriptor?? [ 337.688258][ T5886] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 337.900225][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 337.927057][ T5886] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 338.053719][ T5886] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 338.132181][ T5886] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 338.183905][ T5886] usb 2-1: config 1 has no interface number 0 [ 338.197886][ T5886] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 338.223421][ T5886] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 338.260611][ T5886] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 338.278988][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.302158][ T5886] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 338.497168][ T9238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.548785][ T9238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.557791][ T9238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.585239][ T9238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.634498][ T9238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.677017][ T9238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.716302][ T9246] netlink: 68 bytes leftover after parsing attributes in process `syz.4.962'. [ 338.744398][ T5886] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 338.782547][ T9246] fuse: root generation should be zero [ 338.871847][ T9249] FAULT_INJECTION: forcing a failure. [ 338.871847][ T9249] name failslab, interval 1, probability 0, space 0, times 0 [ 338.907098][ T9249] CPU: 0 UID: 0 PID: 9249 Comm: syz.3.963 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 338.907127][ T9249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 338.907139][ T9249] Call Trace: [ 338.907151][ T9249] [ 338.907160][ T9249] dump_stack_lvl+0x189/0x250 [ 338.907198][ T9249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.907226][ T9249] ? __pfx__printk+0x10/0x10 [ 338.907249][ T9249] ? __pfx___might_resched+0x10/0x10 [ 338.907268][ T9249] ? fs_reclaim_acquire+0x7d/0x100 [ 338.907302][ T9249] should_fail_ex+0x414/0x560 [ 338.907340][ T9249] should_failslab+0xa8/0x100 [ 338.907368][ T9249] __kmalloc_noprof+0xcb/0x4f0 [ 338.907390][ T9249] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.907410][ T9249] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 338.907444][ T9249] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 338.907478][ T9249] genl_family_rcv_msg_doit+0xb8/0x300 [ 338.907513][ T9249] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 338.907543][ T9249] ? rcu_is_watching+0x15/0xb0 [ 338.907577][ T9249] ? apparmor_capable+0x137/0x1b0 [ 338.907605][ T9249] ? bpf_lsm_capable+0x9/0x20 [ 338.907633][ T9249] ? security_capable+0x7e/0x2e0 [ 338.907660][ T9249] genl_rcv_msg+0x60e/0x790 [ 338.907694][ T9249] ? __pfx_genl_rcv_msg+0x10/0x10 [ 338.907720][ T9249] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 338.907739][ T9249] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 338.907765][ T9249] ? __pfx_nl80211_post_doit+0x10/0x10 [ 338.907788][ T9249] ? ref_tracker_free+0x63a/0x7d0 [ 338.907807][ T9249] ? __copy_skb_header+0xa7/0x550 [ 338.907843][ T9249] netlink_rcv_skb+0x219/0x490 [ 338.907865][ T9249] ? __pfx_genl_rcv_msg+0x10/0x10 [ 338.907893][ T9249] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 338.907940][ T9249] ? down_read+0x1ad/0x2e0 [ 338.907968][ T9249] genl_rcv+0x28/0x40 [ 338.907992][ T9249] netlink_unicast+0x758/0x8d0 [ 338.908035][ T9249] netlink_sendmsg+0x805/0xb30 [ 338.908076][ T9249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.908100][ T9249] ? aa_sock_msg_perm+0x94/0x160 [ 338.908123][ T9249] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 338.908145][ T9249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.908167][ T9249] __sock_sendmsg+0x219/0x270 [ 338.908202][ T9249] ____sys_sendmsg+0x505/0x830 [ 338.908234][ T9249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.908269][ T9249] ? import_iovec+0x74/0xa0 [ 338.908300][ T9249] ___sys_sendmsg+0x21f/0x2a0 [ 338.908327][ T9249] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.908392][ T9249] ? __fget_files+0x2a/0x420 [ 338.908417][ T9249] ? __fget_files+0x3a0/0x420 [ 338.908460][ T9249] __x64_sys_sendmsg+0x19b/0x260 [ 338.908488][ T9249] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 338.908530][ T9249] ? do_syscall_64+0xba/0x210 [ 338.908558][ T9249] do_syscall_64+0xf6/0x210 [ 338.908590][ T9249] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 338.908611][ T9249] ? clear_bhb_loop+0x45/0xa0 [ 338.908644][ T9249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.908664][ T9249] RIP: 0033:0x7fe2d8d8e969 [ 338.908690][ T9249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.908708][ T9249] RSP: 002b:00007fe2d9b2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.908730][ T9249] RAX: ffffffffffffffda RBX: 00007fe2d8fb5fa0 RCX: 00007fe2d8d8e969 [ 338.908745][ T9249] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 338.908758][ T9249] RBP: 00007fe2d9b2e090 R08: 0000000000000000 R09: 0000000000000000 [ 338.908770][ T9249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.908781][ T9249] R13: 0000000000000000 R14: 00007fe2d8fb5fa0 R15: 00007fe2d90dfa28 [ 338.908813][ T9249] [ 339.496318][ T49] usb 2-1: USB disconnect, device number 41 [ 339.514640][ T49] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 339.624987][ T5827] usb 3-1: USB disconnect, device number 49 [ 339.746130][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.966'. [ 339.818204][ T5886] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 339.935437][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.966'. [ 339.953515][ T9262] netlink: 24 bytes leftover after parsing attributes in process `syz.2.966'. [ 340.071420][ T9259] veth5: entered promiscuous mode [ 340.077274][ T9259] bridge2: port 1(veth5) entered blocking state [ 340.103973][ T9259] bridge2: port 1(veth5) entered disabled state [ 340.142775][ T5886] usb 4-1: config 0 has no interfaces? [ 340.162967][ T5886] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 340.178561][ T9259] veth5: entered allmulticast mode [ 340.202497][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.280863][ T5886] usb 4-1: Product: syz [ 340.314326][ T5886] usb 4-1: Manufacturer: syz [ 340.426928][ T5886] usb 4-1: SerialNumber: syz [ 340.450627][ T5886] usb 4-1: config 0 descriptor?? [ 340.678164][ T24] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 340.936307][ T9280] netlink: 452 bytes leftover after parsing attributes in process `syz.2.970'. [ 341.249121][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 341.261592][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 341.346940][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 341.366709][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 341.487706][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.971'. [ 341.497946][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 341.521766][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.570593][ T24] usb 2-1: Product: syz [ 341.599597][ T24] usb 2-1: Manufacturer: syz [ 341.621607][ T24] usb 2-1: SerialNumber: syz [ 342.704398][ T9292] __nla_validate_parse: 2 callbacks suppressed [ 342.704421][ T9292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.973'. [ 342.868041][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'. [ 343.427069][ T9292] veth7: entered promiscuous mode [ 343.535816][ T5885] usb 4-1: USB disconnect, device number 42 [ 343.967797][ T9306] netlink: 104 bytes leftover after parsing attributes in process `syz.2.977'. [ 344.330173][ T24] cdc_ether 2-1:1.0: skipping garbage [ 344.378331][ T24] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 344.449158][ T24] usb 2-1: USB disconnect, device number 42 [ 344.507511][ T9315] FAULT_INJECTION: forcing a failure. [ 344.507511][ T9315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.629664][ T9315] CPU: 0 UID: 0 PID: 9315 Comm: syz.1.981 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 344.629696][ T9315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 344.629709][ T9315] Call Trace: [ 344.629718][ T9315] [ 344.629727][ T9315] dump_stack_lvl+0x189/0x250 [ 344.629760][ T9315] ? __lock_acquire+0xaac/0xd20 [ 344.629791][ T9315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.629819][ T9315] ? __pfx__printk+0x10/0x10 [ 344.629839][ T9315] ? __might_fault+0xb0/0x130 [ 344.629876][ T9315] should_fail_ex+0x414/0x560 [ 344.629913][ T9315] _copy_from_user+0x2d/0xb0 [ 344.629940][ T9315] ___sys_sendmsg+0x158/0x2a0 [ 344.629969][ T9315] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.630032][ T9315] ? __fget_files+0x2a/0x420 [ 344.630056][ T9315] ? __fget_files+0x3a0/0x420 [ 344.630092][ T9315] __x64_sys_sendmsg+0x19b/0x260 [ 344.630120][ T9315] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 344.630162][ T9315] ? do_syscall_64+0xba/0x210 [ 344.630190][ T9315] do_syscall_64+0xf6/0x210 [ 344.630223][ T9315] ? clear_bhb_loop+0x45/0xa0 [ 344.630248][ T9315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.630268][ T9315] RIP: 0033:0x7f543738e969 [ 344.630285][ T9315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.630309][ T9315] RSP: 002b:00007f543814b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.630331][ T9315] RAX: ffffffffffffffda RBX: 00007f54375b5fa0 RCX: 00007f543738e969 [ 344.630346][ T9315] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 344.630358][ T9315] RBP: 00007f543814b090 R08: 0000000000000000 R09: 0000000000000000 [ 344.630369][ T9315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.630381][ T9315] R13: 0000000000000000 R14: 00007f54375b5fa0 R15: 00007f54376dfa28 [ 344.630412][ T9315] [ 344.861982][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.982'. [ 344.949922][ T9317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.982'. [ 345.017019][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.982'. [ 345.150754][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.986'. [ 345.384640][ T9331] xt_hashlimit: size too large, truncated to 1048576 [ 346.974954][ T9356] random: crng reseeded on system resumption [ 348.088234][ T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 348.126859][ T9369] loop2: detected capacity change from 0 to 7 [ 348.152064][ T9369] Dev loop2: unable to read RDB block 7 [ 348.178728][ T9369] loop2: unable to read partition table [ 348.201230][ T9369] loop2: partition table beyond EOD, truncated [ 348.232838][ T9369] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 348.308275][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 348.316653][ T24] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 348.325247][ T24] usb 4-1: config 179 has no interface number 0 [ 348.333660][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 348.346405][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 348.366208][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 20, changing to 8 [ 348.410976][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 57696, setting to 1024 [ 348.427227][ T24] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 348.448229][ T24] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 348.457484][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.477706][ T9366] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 348.659479][ T9376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.999'. [ 348.722362][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.999'. [ 348.737474][ T9376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.999'. [ 348.746768][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input14 [ 348.930279][ T9366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.946545][ T9366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.512388][ T24] usb 4-1: USB disconnect, device number 43 [ 349.518547][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 349.518584][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 349.546688][ T24] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 350.259166][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1003'. [ 350.307581][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1003'. [ 350.826234][ T9394] binder: 9393:9394 unknown command 0 [ 350.853543][ T9394] binder: 9393:9394 ioctl c0306201 200000000480 returned -22 [ 351.438370][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 351.468249][ T5885] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 351.563462][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1009'. [ 351.638586][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 351.650056][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 351.662838][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 194, changing to 11 [ 351.683278][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17196, setting to 1024 [ 351.696620][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 351.715998][ T24] usb 4-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice=ae.0d [ 351.726686][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.751072][ T5885] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 351.768313][ T24] usb 4-1: Product: syz [ 351.779846][ T24] usb 4-1: Manufacturer: syz [ 351.788465][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.809683][ T24] usb 4-1: SerialNumber: syz [ 351.822385][ T5885] usb 5-1: config 0 descriptor?? [ 352.079897][ T9404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 352.110290][ T5885] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input15 [ 352.131563][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 352.278798][ T5885] usb 5-1: USB disconnect, device number 61 [ 352.294394][ T5184] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 352.346639][ T24] snd-usb-audio 4-1:8.0: probe with driver snd-usb-audio failed with error -2 [ 352.348014][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1011'. [ 352.387757][ T24] usb 4-1: USB disconnect, device number 44 [ 352.450060][ T5886] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 352.471590][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'. [ 352.486119][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.596896][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1011'. [ 352.608879][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 352.631963][ T5886] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 352.675309][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.704004][ T5886] usb 2-1: Product: syz [ 352.714691][ T5886] usb 2-1: Manufacturer: syz [ 352.733548][ T5886] usb 2-1: SerialNumber: syz [ 352.796957][ T5886] usb 2-1: config 0 descriptor?? [ 352.855201][ T9415] Cannot find map_set index 0 as target [ 353.041794][ T5886] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 353.064894][ T9421] capability: warning: `syz.4.1014' uses deprecated v2 capabilities in a way that may be insecure [ 353.227279][ T9424] syzkaller0: entered promiscuous mode [ 353.246768][ T9409] FAULT_INJECTION: forcing a failure. [ 353.246768][ T9409] name failslab, interval 1, probability 0, space 0, times 0 [ 353.268385][ T9424] syzkaller0: entered allmulticast mode [ 353.296563][ T9409] CPU: 0 UID: 0 PID: 9409 Comm: syz.1.1010 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 353.296596][ T9409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 353.296609][ T9409] Call Trace: [ 353.296617][ T9409] [ 353.296626][ T9409] dump_stack_lvl+0x189/0x250 [ 353.296663][ T9409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.296693][ T9409] ? __pfx__printk+0x10/0x10 [ 353.296717][ T9409] ? __pfx___might_resched+0x10/0x10 [ 353.296740][ T9409] should_fail_ex+0x414/0x560 [ 353.296776][ T9409] ? traverse+0xd9/0x570 [ 353.296794][ T9409] should_failslab+0xa8/0x100 [ 353.296822][ T9409] __kvmalloc_node_noprof+0x168/0x5e0 [ 353.296848][ T9409] ? traverse+0xd9/0x570 [ 353.296872][ T9409] traverse+0xd9/0x570 [ 353.296906][ T9409] seq_read_iter+0xcfe/0xe10 [ 353.296927][ T9409] ? aa_file_perm+0x11f/0xed0 [ 353.296956][ T9409] ? __asan_memset+0x22/0x50 [ 353.296982][ T9409] seq_read+0x2e2/0x3d0 [ 353.297011][ T9409] ? __pfx_seq_read+0x10/0x10 [ 353.297051][ T9409] ? __pfx_seq_read+0x10/0x10 [ 353.297067][ T9409] proc_reg_read+0x1e6/0x2e0 [ 353.297091][ T9409] vfs_readv+0x5a2/0x840 [ 353.297117][ T9409] ? __pfx_proc_reg_read+0x10/0x10 [ 353.297141][ T9409] ? __pfx_vfs_readv+0x10/0x10 [ 353.297185][ T9409] ? __fget_files+0x2a/0x420 [ 353.297215][ T9409] ? __fget_files+0x3a0/0x420 [ 353.297239][ T9409] ? __fget_files+0x2a/0x420 [ 353.297273][ T9409] __x64_sys_preadv+0x197/0x2a0 [ 353.297301][ T9409] ? __pfx___x64_sys_preadv+0x10/0x10 [ 353.297337][ T9409] do_syscall_64+0xf6/0x210 [ 353.297361][ T9409] ? clear_bhb_loop+0x45/0xa0 [ 353.297386][ T9409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.297406][ T9409] RIP: 0033:0x7f543738e969 [ 353.297424][ T9409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.297441][ T9409] RSP: 002b:00007f543814b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 353.297463][ T9409] RAX: ffffffffffffffda RBX: 00007f54375b5fa0 RCX: 00007f543738e969 [ 353.297478][ T9409] RDX: 0000000000000002 RSI: 0000200000002280 RDI: 0000000000000004 [ 353.297490][ T9409] RBP: 00007f543814b090 R08: 0000000000000007 R09: 0000000000000000 [ 353.297512][ T9409] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000001 [ 353.297530][ T9409] R13: 0000000000000000 R14: 00007f54375b5fa0 R15: 00007f54376dfa28 [ 353.297562][ T9409] [ 353.541537][ T5886] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 353.562550][ T5886] usb 2-1: USB disconnect, device number 43 [ 353.603198][ T120] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 353.738803][ T120] usb 5-1: device descriptor read/64, error -71 [ 353.981523][ T9435] ipvlan2: entered promiscuous mode [ 353.983067][ T120] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 353.986776][ T9435] ipvlan2: entered allmulticast mode [ 354.148189][ T120] usb 5-1: device descriptor read/64, error -71 [ 354.247723][ T9439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1020'. [ 354.260153][ T120] usb usb5-port1: attempt power cycle [ 354.281047][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1021'. [ 354.342476][ T9447] FAULT_INJECTION: forcing a failure. [ 354.342476][ T9447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.356120][ T9447] CPU: 0 UID: 0 PID: 9447 Comm: syz.1.1023 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 354.356146][ T9447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 354.356159][ T9447] Call Trace: [ 354.356167][ T9447] [ 354.356175][ T9447] dump_stack_lvl+0x189/0x250 [ 354.356211][ T9447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.356239][ T9447] ? __pfx__printk+0x10/0x10 [ 354.356284][ T9447] should_fail_ex+0x414/0x560 [ 354.356338][ T9447] _copy_to_user+0x31/0xb0 [ 354.356367][ T9447] simple_read_from_buffer+0xe1/0x170 [ 354.356396][ T9447] proc_fail_nth_read+0x1df/0x250 [ 354.356427][ T9447] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.356458][ T9447] ? rw_verify_area+0x258/0x650 [ 354.356485][ T9447] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.356514][ T9447] vfs_read+0x1fd/0x980 [ 354.356541][ T9447] ? __pfx___mutex_lock+0x10/0x10 [ 354.356565][ T9447] ? __pfx_vfs_read+0x10/0x10 [ 354.356589][ T9447] ? __fget_files+0x2a/0x420 [ 354.356619][ T9447] ? __fget_files+0x3a0/0x420 [ 354.356643][ T9447] ? __fget_files+0x2a/0x420 [ 354.356678][ T9447] ksys_read+0x145/0x250 [ 354.356698][ T9447] ? rcu_is_watching+0x15/0xb0 [ 354.356729][ T9447] ? __pfx_ksys_read+0x10/0x10 [ 354.356756][ T9447] ? do_syscall_64+0xba/0x210 [ 354.356783][ T9447] do_syscall_64+0xf6/0x210 [ 354.356807][ T9447] ? clear_bhb_loop+0x45/0xa0 [ 354.356831][ T9447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.356850][ T9447] RIP: 0033:0x7f543738d37c [ 354.356868][ T9447] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 354.356886][ T9447] RSP: 002b:00007f543814b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 354.356907][ T9447] RAX: ffffffffffffffda RBX: 00007f54375b5fa0 RCX: 00007f543738d37c [ 354.356922][ T9447] RDX: 000000000000000f RSI: 00007f543814b0a0 RDI: 0000000000000005 [ 354.356934][ T9447] RBP: 00007f543814b090 R08: 0000000000000000 R09: 0000000000000000 [ 354.356947][ T9447] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 354.356960][ T9447] R13: 0000000000000000 R14: 00007f54375b5fa0 R15: 00007f54376dfa28 [ 354.356991][ T9447] [ 354.648193][ T120] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 354.678921][ T120] usb 5-1: device descriptor read/8, error -71 [ 354.918293][ T120] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 354.940833][ T120] usb 5-1: device descriptor read/8, error -71 [ 355.060513][ T120] usb usb5-port1: unable to enumerate USB device [ 355.419116][ T5827] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 355.553078][ T9477] ip6gre1: entered promiscuous mode [ 355.658226][ T5827] usb 2-1: device descriptor read/64, error -71 [ 355.898182][ T5827] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 356.028538][ T5827] usb 2-1: device descriptor read/64, error -71 [ 356.138815][ T5827] usb usb2-port1: attempt power cycle [ 356.176932][ T9485] binder: BINDER_SET_CONTEXT_MGR already set [ 356.183384][ T9485] binder: 9484:9485 ioctl 4018620d 200000000040 returned -16 [ 356.488353][ T5827] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 356.559182][ T5827] usb 2-1: device descriptor read/8, error -71 [ 356.739953][ T120] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 356.808281][ T5827] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 356.839481][ T5827] usb 2-1: device descriptor read/8, error -71 [ 356.902965][ T120] usb 4-1: Using ep0 maxpacket: 8 [ 356.969483][ T120] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 356.998443][ T5827] usb usb2-port1: unable to enumerate USB device [ 357.276481][ T120] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 357.289549][ T120] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 357.556494][ T120] usb 4-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 357.565803][ T120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.595775][ T120] usb 4-1: Product: syz [ 357.604459][ T120] usb 4-1: Manufacturer: syz [ 357.614528][ T120] usb 4-1: SerialNumber: syz [ 357.631456][ T120] ti_usb_3410_5052 4-1:1.0: TI USB 3410 1 port adapter converter detected [ 357.699554][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1037'. [ 357.844110][ T5883] usb 4-1: USB disconnect, device number 45 [ 357.937432][ T9504] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1038'. [ 358.293860][ T9512] FAULT_INJECTION: forcing a failure. [ 358.293860][ T9512] name failslab, interval 1, probability 0, space 0, times 0 [ 358.318288][ T9512] CPU: 1 UID: 0 PID: 9512 Comm: syz.4.1041 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 358.318320][ T9512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 358.318333][ T9512] Call Trace: [ 358.318342][ T9512] [ 358.318351][ T9512] dump_stack_lvl+0x189/0x250 [ 358.318389][ T9512] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.318418][ T9512] ? __pfx__printk+0x10/0x10 [ 358.318435][ T9512] ? __lock_acquire+0xaac/0xd20 [ 358.318479][ T9512] should_fail_ex+0x414/0x560 [ 358.318517][ T9512] should_failslab+0xa8/0x100 [ 358.318546][ T9512] kmem_cache_alloc_noprof+0x73/0x3c0 [ 358.318570][ T9512] ? skb_clone+0x212/0x3a0 [ 358.318602][ T9512] skb_clone+0x212/0x3a0 [ 358.318632][ T9512] __netlink_deliver_tap+0x404/0x850 [ 358.318668][ T9512] ? netlink_deliver_tap+0x2e/0x1b0 [ 358.318691][ T9512] netlink_deliver_tap+0x19c/0x1b0 [ 358.318713][ T9512] netlink_sendskb+0x68/0x140 [ 358.318747][ T9512] netlink_rcv_skb+0x2a0/0x490 [ 358.318769][ T9512] ? __pfx_genl_rcv_msg+0x10/0x10 [ 358.318798][ T9512] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 358.318845][ T9512] ? down_read+0x1ad/0x2e0 [ 358.318885][ T9512] genl_rcv+0x28/0x40 [ 358.318907][ T9512] netlink_unicast+0x758/0x8d0 [ 358.318949][ T9512] netlink_sendmsg+0x805/0xb30 [ 358.318980][ T9512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.319005][ T9512] ? aa_sock_msg_perm+0x94/0x160 [ 358.319028][ T9512] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 358.319050][ T9512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.319072][ T9512] __sock_sendmsg+0x219/0x270 [ 358.319105][ T9512] ____sys_sendmsg+0x505/0x830 [ 358.319136][ T9512] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.319170][ T9512] ? import_iovec+0x74/0xa0 [ 358.319200][ T9512] ___sys_sendmsg+0x21f/0x2a0 [ 358.319227][ T9512] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.319296][ T9512] ? __fget_files+0x2a/0x420 [ 358.319320][ T9512] ? __fget_files+0x3a0/0x420 [ 358.319356][ T9512] __x64_sys_sendmsg+0x19b/0x260 [ 358.319382][ T9512] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 358.319421][ T9512] ? do_syscall_64+0xba/0x210 [ 358.319463][ T9512] do_syscall_64+0xf6/0x210 [ 358.319487][ T9512] ? clear_bhb_loop+0x45/0xa0 [ 358.319511][ T9512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.319542][ T9512] RIP: 0033:0x7f19b8b8e969 [ 358.319560][ T9512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.319576][ T9512] RSP: 002b:00007f19b997b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.319596][ T9512] RAX: ffffffffffffffda RBX: 00007f19b8db5fa0 RCX: 00007f19b8b8e969 [ 358.319627][ T9512] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 358.319640][ T9512] RBP: 00007f19b997b090 R08: 0000000000000000 R09: 0000000000000000 [ 358.319652][ T9512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.319663][ T9512] R13: 0000000000000000 R14: 00007f19b8db5fa0 R15: 00007f19b8edfa28 [ 358.319694][ T9512] [ 358.749961][ T9521] ipvlan3: entered promiscuous mode [ 358.755258][ T9521] ipvlan3: entered allmulticast mode [ 358.755615][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'. [ 358.760613][ T9521] bridge0: entered allmulticast mode [ 358.776885][ T9521] bridge0: port 3(ipvlan3) entered blocking state [ 358.783529][ T9521] bridge0: port 3(ipvlan3) entered disabled state [ 358.907325][ T9510] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 358.917459][ T9510] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 358.950809][ T9510] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 358.995873][ T9527] fuse: Bad value for 'fd' [ 359.013083][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'. [ 359.049106][ T9510] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 359.055189][ T9510] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 359.114953][ T9510] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 359.136798][ T9510] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 359.210344][ T9510] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 359.291378][ T9510] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 360.212152][ T9558] netlink: 'syz.2.1055': attribute type 1 has an invalid length. [ 360.348438][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 360.408260][ T120] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 360.579940][ T120] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.579976][ T120] usb 5-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 360.579993][ T120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.584691][ T120] usb 5-1: config 0 descriptor?? [ 360.988472][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 361.067222][ T120] logitech 0003:046D:C287.0007: hidraw0: USB HID v0.00 Device [HID 046d:c287] on usb-dummy_hcd.4-1/input0 [ 361.088245][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 361.148202][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 361.152147][ T120] logitech 0003:046D:C287.0007: no inputs found [ 361.228159][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 361.341068][ T120] usb 5-1: USB disconnect, device number 66 [ 361.860545][ T9582] FAULT_INJECTION: forcing a failure. [ 361.860545][ T9582] name failslab, interval 1, probability 0, space 0, times 0 [ 361.918763][ T9582] CPU: 1 UID: 0 PID: 9582 Comm: syz.3.1064 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 361.918793][ T9582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 361.918806][ T9582] Call Trace: [ 361.918814][ T9582] [ 361.918823][ T9582] dump_stack_lvl+0x189/0x250 [ 361.918854][ T9582] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 361.918879][ T9582] ? netlink_broadcast_filtered+0x659/0x1140 [ 361.918912][ T9582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.918940][ T9582] ? __pfx__printk+0x10/0x10 [ 361.918967][ T9582] ? ref_tracker_alloc+0x318/0x460 [ 361.919001][ T9582] should_fail_ex+0x414/0x560 [ 361.919039][ T9582] should_failslab+0xa8/0x100 [ 361.919067][ T9582] kmem_cache_alloc_noprof+0x73/0x3c0 [ 361.919090][ T9582] ? skb_clone+0x212/0x3a0 [ 361.919121][ T9582] skb_clone+0x212/0x3a0 [ 361.919151][ T9582] __netlink_deliver_tap+0x404/0x850 [ 361.919186][ T9582] ? netlink_deliver_tap+0x2e/0x1b0 [ 361.919208][ T9582] netlink_deliver_tap+0x19c/0x1b0 [ 361.919231][ T9582] netlink_broadcast_filtered+0xcbb/0x1140 [ 361.919285][ T9582] netlink_sendmsg+0x7ae/0xb30 [ 361.919317][ T9582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.919343][ T9582] ? aa_sock_msg_perm+0x94/0x160 [ 361.919366][ T9582] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 361.919388][ T9582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.919410][ T9582] __sock_sendmsg+0x219/0x270 [ 361.919444][ T9582] ____sys_sendmsg+0x505/0x830 [ 361.919476][ T9582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.919509][ T9582] ? import_iovec+0x74/0xa0 [ 361.919538][ T9582] ___sys_sendmsg+0x21f/0x2a0 [ 361.919566][ T9582] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.919628][ T9582] ? __fget_files+0x2a/0x420 [ 361.919653][ T9582] ? __fget_files+0x3a0/0x420 [ 361.919696][ T9582] __x64_sys_sendmsg+0x19b/0x260 [ 361.919724][ T9582] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 361.919766][ T9582] ? do_syscall_64+0xba/0x210 [ 361.919794][ T9582] do_syscall_64+0xf6/0x210 [ 361.919818][ T9582] ? clear_bhb_loop+0x45/0xa0 [ 361.919843][ T9582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.919862][ T9582] RIP: 0033:0x7fe2d8d8e969 [ 361.919880][ T9582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.919898][ T9582] RSP: 002b:00007fe2d6bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.919919][ T9582] RAX: ffffffffffffffda RBX: 00007fe2d8fb6080 RCX: 00007fe2d8d8e969 [ 361.919933][ T9582] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000006 [ 361.919945][ T9582] RBP: 00007fe2d6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 361.919957][ T9582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.919969][ T9582] R13: 0000000000000000 R14: 00007fe2d8fb6080 R15: 00007fe2d90dfa28 [ 361.920006][ T9582] [ 362.577929][ T5883] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 362.788312][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 362.814933][ T9601] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1071'. [ 362.825885][ T5883] usb 5-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 362.841877][ T5883] usb 5-1: config 0 has an invalid interface number: 150 but max is 64 [ 362.893266][ T5883] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.912208][ T5885] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 362.925154][ T5883] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 362.948445][ T5883] usb 5-1: config 0 has no interface number 0 [ 362.964383][ T5883] usb 5-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 363.026720][ T5883] usb 5-1: config 0 interface 150 has no altsetting 0 [ 363.044927][ T9610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1072'. [ 363.078605][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 363.079089][ T5883] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 363.098203][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.109206][ T5883] usb 5-1: config 0 descriptor?? [ 363.236539][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 363.238341][ T5139] Bluetooth: hci4: command 0x0406 tx timeout [ 363.322860][ T5139] Bluetooth: hci3: command 0x0406 tx timeout [ 363.409239][ T5885] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 363.575656][ T5885] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 363.611088][ T5885] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 363.632510][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.743878][ T9593] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 364.880592][ T9619] netlink: 'syz.3.1076': attribute type 1 has an invalid length. [ 365.044742][ T9618] bond1: entered allmulticast mode [ 365.102292][ T9618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 365.126665][ T5885] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 365.199910][ T5883] usb 5-1: USB disconnect, device number 67 [ 365.306633][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1077'. [ 365.388746][ T5885] usb 3-1: USB disconnect, device number 50 [ 365.519546][ T9627] bridge_slave_1: left allmulticast mode [ 365.525382][ T9627] bridge_slave_1: left promiscuous mode [ 365.537538][ T9627] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.623661][ T9627] bridge_slave_0: left allmulticast mode [ 365.630973][ T9627] bridge_slave_0: left promiscuous mode [ 365.637564][ T9627] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.701062][ T9631] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1080'. [ 365.715498][ T9631] FAULT_INJECTION: forcing a failure. [ 365.715498][ T9631] name failslab, interval 1, probability 0, space 0, times 0 [ 365.779584][ T9631] CPU: 0 UID: 0 PID: 9631 Comm: syz.4.1080 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 365.779614][ T9631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 365.779626][ T9631] Call Trace: [ 365.779634][ T9631] [ 365.779643][ T9631] dump_stack_lvl+0x189/0x250 [ 365.779679][ T9631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.779719][ T9631] ? __pfx__printk+0x10/0x10 [ 365.779737][ T9631] ? __lock_acquire+0xaac/0xd20 [ 365.779778][ T9631] should_fail_ex+0x414/0x560 [ 365.779815][ T9631] should_failslab+0xa8/0x100 [ 365.779842][ T9631] kmem_cache_alloc_noprof+0x73/0x3c0 [ 365.779864][ T9631] ? skb_clone+0x212/0x3a0 [ 365.779895][ T9631] skb_clone+0x212/0x3a0 [ 365.779923][ T9631] __netlink_deliver_tap+0x404/0x850 [ 365.779956][ T9631] ? netlink_deliver_tap+0x2e/0x1b0 [ 365.779978][ T9631] netlink_deliver_tap+0x19c/0x1b0 [ 365.780000][ T9631] netlink_sendskb+0x68/0x140 [ 365.780031][ T9631] netlink_rcv_skb+0x2a0/0x490 [ 365.780051][ T9631] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 365.780080][ T9631] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 365.780114][ T9631] ? apparmor_capable+0x137/0x1b0 [ 365.780142][ T9631] ? bpf_lsm_capable+0x9/0x20 [ 365.780168][ T9631] ? security_capable+0x7e/0x2e0 [ 365.780196][ T9631] nfnetlink_rcv+0x273/0x2530 [ 365.780225][ T9631] ? __dev_queue_xmit+0x27e/0x3a70 [ 365.780252][ T9631] ? __dev_queue_xmit+0x27e/0x3a70 [ 365.780276][ T9631] ? __dev_queue_xmit+0x27e/0x3a70 [ 365.780302][ T9631] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 365.780340][ T9631] ? __dev_queue_xmit+0x27e/0x3a70 [ 365.780366][ T9631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.780390][ T9631] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 365.780420][ T9631] ? __pfx___dev_queue_xmit+0x10/0x10 [ 365.780459][ T9631] ? ref_tracker_free+0x63a/0x7d0 [ 365.780477][ T9631] ? __copy_skb_header+0xa7/0x550 [ 365.780503][ T9631] ? __pfx_ref_tracker_free+0x10/0x10 [ 365.780523][ T9631] ? __skb_clone+0x63/0x7a0 [ 365.780552][ T9631] ? __skb_clone+0x483/0x7a0 [ 365.780584][ T9631] ? skb_clone+0x246/0x3a0 [ 365.780613][ T9631] ? __netlink_deliver_tap+0x807/0x850 [ 365.780633][ T9631] ? netlink_deliver_tap+0x2e/0x1b0 [ 365.780660][ T9631] ? netlink_deliver_tap+0x2e/0x1b0 [ 365.780680][ T9631] ? netlink_deliver_tap+0x2e/0x1b0 [ 365.780714][ T9631] netlink_unicast+0x758/0x8d0 [ 365.780756][ T9631] netlink_sendmsg+0x805/0xb30 [ 365.780787][ T9631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.780812][ T9631] ? aa_sock_msg_perm+0x94/0x160 [ 365.780834][ T9631] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 365.780856][ T9631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.780878][ T9631] __sock_sendmsg+0x219/0x270 [ 365.780911][ T9631] ____sys_sendmsg+0x505/0x830 [ 365.780942][ T9631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 365.780976][ T9631] ? import_iovec+0x74/0xa0 [ 365.781008][ T9631] ___sys_sendmsg+0x21f/0x2a0 [ 365.781036][ T9631] ? __pfx____sys_sendmsg+0x10/0x10 [ 365.781101][ T9631] ? __fget_files+0x2a/0x420 [ 365.781126][ T9631] ? __fget_files+0x3a0/0x420 [ 365.781164][ T9631] __x64_sys_sendmsg+0x19b/0x260 [ 365.781193][ T9631] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 365.781236][ T9631] ? do_syscall_64+0xba/0x210 [ 365.781265][ T9631] do_syscall_64+0xf6/0x210 [ 365.781289][ T9631] ? clear_bhb_loop+0x45/0xa0 [ 365.781314][ T9631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.781334][ T9631] RIP: 0033:0x7f19b8b8e969 [ 365.781353][ T9631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.781371][ T9631] RSP: 002b:00007f19b997b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.781393][ T9631] RAX: ffffffffffffffda RBX: 00007f19b8db5fa0 RCX: 00007f19b8b8e969 [ 365.781408][ T9631] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 365.781421][ T9631] RBP: 00007f19b997b090 R08: 0000000000000000 R09: 0000000000000000 [ 365.781433][ T9631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.781445][ T9631] R13: 0000000000000000 R14: 00007f19b8db5fa0 R15: 00007f19b8edfa28 [ 365.781477][ T9631] [ 367.160907][ T120] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 367.321069][ T120] usb 3-1: config 0 has no interfaces? [ 367.335312][ T120] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 367.400786][ T120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.435825][ T120] usb 3-1: Product: syz [ 367.508162][ T120] usb 3-1: Manufacturer: syz [ 367.517589][ T120] usb 3-1: SerialNumber: syz [ 367.546015][ T120] usb 3-1: config 0 descriptor?? [ 368.380038][ T5827] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 368.554139][ T5827] usb 4-1: unable to get BOS descriptor or descriptor too short [ 368.582964][ T5827] usb 4-1: not running at top speed; connect to a high speed hub [ 368.601242][ T5827] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 368.700253][ T5827] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 368.734192][ T9672] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 368.743511][ T9672] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 368.747719][ T5827] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 368.778385][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.789623][ T5827] usb 4-1: Product: syz [ 368.795726][ T5827] usb 4-1: Manufacturer: syz [ 368.804473][ T5827] usb 4-1: SerialNumber: syz [ 369.770106][ T9688] FAULT_INJECTION: forcing a failure. [ 369.770106][ T9688] name failslab, interval 1, probability 0, space 0, times 0 [ 369.869226][ T9688] CPU: 0 UID: 0 PID: 9688 Comm: syz.4.1094 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 369.869257][ T9688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 369.869274][ T9688] Call Trace: [ 369.869287][ T9688] [ 369.869294][ T9688] dump_stack_lvl+0x189/0x250 [ 369.869325][ T9688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.869346][ T9688] ? __pfx__printk+0x10/0x10 [ 369.869368][ T9688] ? __pfx___might_resched+0x10/0x10 [ 369.869381][ T9688] ? fs_reclaim_acquire+0x7d/0x100 [ 369.869406][ T9688] should_fail_ex+0x414/0x560 [ 369.869433][ T9688] should_failslab+0xa8/0x100 [ 369.869453][ T9688] __kmalloc_noprof+0xcb/0x4f0 [ 369.869469][ T9688] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.869484][ T9688] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 369.869508][ T9688] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 369.869534][ T9688] genl_family_rcv_msg_doit+0xb8/0x300 [ 369.869558][ T9688] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 369.869579][ T9688] ? rcu_is_watching+0x15/0xb0 [ 369.869615][ T9688] ? apparmor_capable+0x137/0x1b0 [ 369.869636][ T9688] ? bpf_lsm_capable+0x9/0x20 [ 369.869656][ T9688] ? security_capable+0x7e/0x2e0 [ 369.869675][ T9688] genl_rcv_msg+0x60e/0x790 [ 369.869699][ T9688] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.869716][ T9688] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 369.869730][ T9688] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 369.869749][ T9688] ? __pfx_nl80211_post_doit+0x10/0x10 [ 369.869764][ T9688] ? ref_tracker_free+0x63a/0x7d0 [ 369.869777][ T9688] ? __copy_skb_header+0xa7/0x550 [ 369.869802][ T9688] netlink_rcv_skb+0x219/0x490 [ 369.869818][ T9688] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.869837][ T9688] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 369.869868][ T9688] ? down_read+0x1ad/0x2e0 [ 369.869888][ T9688] genl_rcv+0x28/0x40 [ 369.869905][ T9688] netlink_unicast+0x758/0x8d0 [ 369.869935][ T9688] netlink_sendmsg+0x805/0xb30 [ 369.869956][ T9688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.869973][ T9688] ? aa_sock_msg_perm+0x94/0x160 [ 369.869990][ T9688] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 369.870005][ T9688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.870021][ T9688] __sock_sendmsg+0x219/0x270 [ 369.870045][ T9688] ____sys_sendmsg+0x505/0x830 [ 369.870067][ T9688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.870091][ T9688] ? import_iovec+0x74/0xa0 [ 369.870113][ T9688] ___sys_sendmsg+0x21f/0x2a0 [ 369.870132][ T9688] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.870176][ T9688] ? __fget_files+0x2a/0x420 [ 369.870194][ T9688] ? __fget_files+0x3a0/0x420 [ 369.870219][ T9688] __x64_sys_sendmsg+0x19b/0x260 [ 369.870239][ T9688] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 369.870269][ T9688] ? do_syscall_64+0xba/0x210 [ 369.870289][ T9688] do_syscall_64+0xf6/0x210 [ 369.870306][ T9688] ? clear_bhb_loop+0x45/0xa0 [ 369.870323][ T9688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.870337][ T9688] RIP: 0033:0x7f19b8b8e969 [ 369.870350][ T9688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.870368][ T9688] RSP: 002b:00007f19b997b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.870384][ T9688] RAX: ffffffffffffffda RBX: 00007f19b8db5fa0 RCX: 00007f19b8b8e969 [ 369.870395][ T9688] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 369.870404][ T9688] RBP: 00007f19b997b090 R08: 0000000000000000 R09: 0000000000000000 [ 369.870413][ T9688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.870422][ T9688] R13: 0000000000000000 R14: 00007f19b8db5fa0 R15: 00007f19b8edfa28 [ 369.870444][ T9688] [ 370.327163][ T5886] usb 3-1: USB disconnect, device number 51 [ 370.667408][ T9696] binder: BINDER_SET_CONTEXT_MGR already set [ 370.673643][ T9696] binder: 9690:9696 ioctl 4018620d 200000000040 returned -16 [ 370.721186][ T9694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.735138][ T9694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.898343][ T5885] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 370.919843][ T9701] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 371.608510][ T5886] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 371.684584][ T9721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1104'. [ 371.814878][ T5886] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 371.823721][ T5886] usb 5-1: config 0 has no interface number 0 [ 371.830019][ T5886] usb 5-1: too many endpoints for config 0 interface 3 altsetting 244: 37, using maximum allowed: 30 [ 371.841191][ T5886] usb 5-1: config 0 interface 3 altsetting 244 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 371.858223][ T5886] usb 5-1: config 0 interface 3 has no altsetting 0 [ 371.865082][ T5886] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 371.874538][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.889177][ T5886] usb 5-1: config 0 descriptor?? [ 371.931177][ T9726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1104'. [ 372.108444][ T5827] cdc_ether 4-1:1.0: skipping garbage [ 372.118632][ T5827] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 372.140381][ T5886] usb 5-1: string descriptor 0 read error: -71 [ 372.159994][ T5886] ums-realtek 5-1:0.3: USB Mass Storage device detected [ 372.167346][ T5827] usb 4-1: USB disconnect, device number 46 [ 372.322859][ T5886] usb 5-1: USB disconnect, device number 69 [ 372.568947][ T9721] veth7: entered promiscuous mode [ 372.811024][ T9740] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1107'. [ 373.052636][ T9748] loop8: detected capacity change from 0 to 1 [ 373.066197][ T9748] futex_wake_op: syz.1.1105 tries to shift op by -33; fix this program [ 373.088860][ T9748] netdevsim netdevsim1: Direct firmware load for . [ 373.088860][ T9748] failed with error -2 [ 373.101378][ T9748] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 373.101378][ T9748] [ 373.428211][ T120] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 373.590624][ T120] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.612911][ T120] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 373.658289][ T120] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 373.750574][ T120] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 373.781757][ T120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.842641][ T120] usb 3-1: Product: syz [ 373.846912][ T120] usb 3-1: Manufacturer: syz [ 373.885251][ T120] usb 3-1: SerialNumber: syz [ 373.926754][ T120] usb 3-1: selecting invalid altsetting 1 [ 374.548438][ T120] usb 3-1: selecting invalid altsetting 1 [ 374.603306][ T120] cdc_ncm 3-1:1.0: bind() failure [ 374.804760][ T9776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.843581][ T9776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.599648][ T9785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1121'. [ 375.650647][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1121'. [ 375.737961][ T9785] veth5: entered promiscuous mode [ 375.744929][ T9785] bridge3: port 1(veth5) entered blocking state [ 375.764544][ T9785] bridge3: port 1(veth5) entered disabled state [ 375.782695][ T9785] veth5: entered allmulticast mode [ 376.009756][ T5886] usb 3-1: USB disconnect, device number 53 [ 376.655255][ T9799] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 376.978312][ T5886] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 377.221004][ T5886] usb 2-1: config 0 has no interfaces? [ 377.233928][ T5886] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 377.243516][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.265976][ T5886] usb 2-1: Product: syz [ 377.319743][ T5886] usb 2-1: Manufacturer: syz [ 377.349880][ T5886] usb 2-1: SerialNumber: syz [ 377.729885][ T5886] usb 2-1: config 0 descriptor?? [ 378.052268][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1129'. [ 378.059661][ T9817] Invalid logical block size (-1) [ 378.166103][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1129'. [ 378.227218][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1129'. [ 378.673194][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.681097][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.765726][ T9826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1132'. [ 378.789902][ T9826] vlan3: entered promiscuous mode [ 379.509006][ T30] audit: type=1326 audit(1746099325.827:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9829 comm="syz.2.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff378e969 code=0x7ffc0000 [ 379.611305][ T30] audit: type=1326 audit(1746099325.827:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9829 comm="syz.2.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff378e969 code=0x7ffc0000 [ 379.688565][ T5886] usb 2-1: USB disconnect, device number 48 [ 380.943378][ T9860] x_tables: duplicate underflow at hook 2 [ 381.039705][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 381.345607][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 381.467659][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.546078][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.695058][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 381.780705][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 381.790895][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 382.088574][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 382.168407][ T24] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 382.368281][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 382.375072][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.402913][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 382.435886][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 382.450935][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 382.495669][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 382.551382][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 382.567287][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 382.577647][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 382.594498][ T10] usb 3-1: SerialNumber: syz [ 382.611097][ T10] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 382.623606][ T10] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 382.763821][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 382.794737][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 382.814052][ T9855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.823857][ T9855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.846198][ T24] usb 5-1: Manufacturer: syz [ 382.888395][ T24] usb 5-1: config 0 descriptor?? [ 383.198527][ T24] rc_core: IR keymap rc-hauppauge not found [ 383.206662][ T24] Registered IR keymap rc-empty [ 383.211971][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 383.259415][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 383.289590][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 383.308247][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input17 [ 383.331286][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 383.358276][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 383.405132][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 383.458268][ T5883] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 383.466532][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 383.502528][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 383.550717][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 383.582903][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 383.608389][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 383.648686][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 383.657723][ T5883] usb 2-1: config 0 has no interfaces? [ 383.666753][ T5883] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 383.686273][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.694499][ T5883] usb 2-1: Product: syz [ 383.699547][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 383.706820][ T5883] usb 2-1: Manufacturer: syz [ 383.715680][ T5883] usb 2-1: SerialNumber: syz [ 383.728691][ T24] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 383.737790][ T24] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 383.753175][ T5883] usb 2-1: config 0 descriptor?? [ 383.775134][ T24] usb 5-1: USB disconnect, device number 70 [ 383.882242][ T5827] usb 3-1: USB disconnect, device number 54 [ 383.978750][ T9881] Invalid logical block size (-1) [ 384.688227][ T5883] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 384.910035][ T5883] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 384.960883][ T5883] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.013291][ T5883] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 385.075218][ T5883] usb 5-1: config 1 has no interface number 0 [ 385.200113][ T5883] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 385.480463][ T5883] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 385.506783][ T5883] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 385.618466][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.626871][ T5883] usb 5-1: Product: syz [ 385.761870][ T5883] usb 5-1: Manufacturer: syz [ 385.792049][ T5883] usb 5-1: SerialNumber: syz [ 386.176429][ T5827] usb 2-1: USB disconnect, device number 49 [ 386.244465][ T10] usb 5-1: USB disconnect, device number 71 [ 387.151197][ T9929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1162'. [ 387.338225][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 387.411244][ T9929] veth7: entered promiscuous mode [ 387.438509][ T9929] bridge5: port 1(veth7) entered blocking state [ 387.461307][ T9929] bridge5: port 1(veth7) entered disabled state [ 387.490703][ T9929] veth7: entered allmulticast mode [ 387.501809][ T10] usb 3-1: config 0 has no interfaces? [ 387.511432][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 387.525820][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.552945][ T10] usb 3-1: Product: syz [ 387.557433][ T10] usb 3-1: Manufacturer: syz [ 387.565022][ T10] usb 3-1: SerialNumber: syz [ 387.586792][ T10] usb 3-1: config 0 descriptor?? [ 387.717377][ T30] audit: type=1326 audit(1746099334.057:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b8b8e969 code=0x7ffc0000 [ 387.766993][ T9947] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 387.770745][ T30] audit: type=1326 audit(1746099334.087:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f19b8b8e969 code=0x7ffc0000 [ 387.788228][ T5827] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 387.837045][ T9951] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1169'. [ 387.870990][ T30] audit: type=1326 audit(1746099334.087:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b8b8e969 code=0x7ffc0000 [ 387.937981][ T9947] binder: 9946:9947 ioctl 541b 0 returned -22 [ 387.976602][ T30] audit: type=1326 audit(1746099334.097:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f19b8b8e969 code=0x7ffc0000 [ 388.037601][ T30] audit: type=1326 audit(1746099334.197:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b8b8e969 code=0x7ffc0000 [ 388.105821][ T30] audit: type=1326 audit(1746099334.197:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b8b8e969 code=0x7ffc0000 [ 388.154662][ T5827] usb 4-1: Using ep0 maxpacket: 16 [ 388.156177][ T30] audit: type=1326 audit(1746099334.277:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19b8b8e969 code=0x7ffc0000 [ 388.195741][ T5827] usb 4-1: config 0 has no interfaces? [ 388.201554][ T5827] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 388.215739][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.216059][ T30] audit: type=1326 audit(1746099334.277:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b8b8e969 code=0x7ffc0000 [ 388.281566][ T30] audit: type=1326 audit(1746099334.277:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b8b8e969 code=0x7ffc0000 [ 388.283713][ T5827] usb 4-1: config 0 descriptor?? [ 388.355637][ T30] audit: type=1326 audit(1746099334.277:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f19b8b8e969 code=0x7ffc0000 [ 390.277648][ T24] usb 3-1: USB disconnect, device number 55 [ 390.487360][ T5883] usb 4-1: USB disconnect, device number 47 [ 390.505882][ T9966] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1173'. [ 390.626121][ T9970] FAULT_INJECTION: forcing a failure. [ 390.626121][ T9970] name failslab, interval 1, probability 0, space 0, times 0 [ 390.655671][ T9970] CPU: 1 UID: 0 PID: 9970 Comm: syz.2.1174 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 390.655700][ T9970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 390.655712][ T9970] Call Trace: [ 390.655720][ T9970] [ 390.655728][ T9970] dump_stack_lvl+0x189/0x250 [ 390.655765][ T9970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.655791][ T9970] ? __pfx__printk+0x10/0x10 [ 390.655816][ T9970] ? __pfx___might_resched+0x10/0x10 [ 390.655839][ T9970] should_fail_ex+0x414/0x560 [ 390.655874][ T9970] should_failslab+0xa8/0x100 [ 390.655900][ T9970] __kmalloc_cache_noprof+0x70/0x3d0 [ 390.655924][ T9970] ? nft_delrule+0x57/0xba0 [ 390.655952][ T9970] nft_delrule+0x57/0xba0 [ 390.655978][ T9970] ? nft_pernet+0x23/0x240 [ 390.656002][ T9970] ? nla_strcmp+0x106/0x140 [ 390.656020][ T9970] ? nla_strcmp+0x106/0x140 [ 390.656042][ T9970] nf_tables_delrule+0x99e/0x12e0 [ 390.656079][ T9970] ? __pfx_nf_tables_delrule+0x10/0x10 [ 390.656098][ T9970] ? nfnl_pernet+0x23/0x240 [ 390.656131][ T9970] ? __nla_parse+0x40/0x60 [ 390.656157][ T9970] nfnetlink_rcv+0x113f/0x2530 [ 390.656212][ T9970] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 390.656287][ T9970] ? skb_clone+0x246/0x3a0 [ 390.656328][ T9970] ? netlink_deliver_tap+0x2e/0x1b0 [ 390.656348][ T9970] ? netlink_deliver_tap+0x2e/0x1b0 [ 390.656372][ T9970] netlink_unicast+0x758/0x8d0 [ 390.656412][ T9970] netlink_sendmsg+0x805/0xb30 [ 390.656451][ T9970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.656476][ T9970] ? aa_sock_msg_perm+0x94/0x160 [ 390.656498][ T9970] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 390.656520][ T9970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.656542][ T9970] __sock_sendmsg+0x219/0x270 [ 390.656574][ T9970] ____sys_sendmsg+0x505/0x830 [ 390.656604][ T9970] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.656637][ T9970] ? import_iovec+0x74/0xa0 [ 390.656667][ T9970] ___sys_sendmsg+0x21f/0x2a0 [ 390.656693][ T9970] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.656756][ T9970] ? __fget_files+0x2a/0x420 [ 390.656780][ T9970] ? __fget_files+0x3a0/0x420 [ 390.656815][ T9970] __x64_sys_sendmsg+0x19b/0x260 [ 390.656842][ T9970] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.656885][ T9970] ? do_syscall_64+0xba/0x210 [ 390.656911][ T9970] do_syscall_64+0xf6/0x210 [ 390.656935][ T9970] ? clear_bhb_loop+0x45/0xa0 [ 390.656959][ T9970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.656977][ T9970] RIP: 0033:0x7f8ff378e969 [ 390.656995][ T9970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.657012][ T9970] RSP: 002b:00007f8ff45d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.657032][ T9970] RAX: ffffffffffffffda RBX: 00007f8ff39b5fa0 RCX: 00007f8ff378e969 [ 390.657046][ T9970] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 390.657058][ T9970] RBP: 00007f8ff45d5090 R08: 0000000000000000 R09: 0000000000000000 [ 390.657070][ T9970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.657082][ T9970] R13: 0000000000000000 R14: 00007f8ff39b5fa0 R15: 00007f8ff3adfa28 [ 390.657130][ T9970] [ 392.453484][T10013] netlink: 'syz.1.1186': attribute type 29 has an invalid length. [ 392.513056][T10014] netlink: 'syz.1.1186': attribute type 29 has an invalid length. [ 392.570455][T10013] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1186'. [ 392.629838][T10016] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1187'. [ 392.888218][ T5827] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 393.048224][ T5827] usb 2-1: Using ep0 maxpacket: 32 [ 393.060556][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 393.100827][ T5827] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 393.110060][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.128413][ T5827] usb 2-1: Product: syz [ 393.133256][ T5827] usb 2-1: Manufacturer: syz [ 393.138039][ T5827] usb 2-1: SerialNumber: syz [ 393.188172][ T5883] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 393.189216][ T5827] usb 2-1: config 0 descriptor?? [ 393.328314][ T5883] usb 4-1: device descriptor read/64, error -71 [ 393.504689][ T5827] ath6kl: Failed to submit usb control message: -71 [ 393.547457][ T5827] ath6kl: unable to send the bmi data to the device: -71 [ 393.608606][ T5883] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 394.012239][ T5827] ath6kl: Unable to send get target info: -71 [ 394.018191][ T5883] usb 4-1: device descriptor read/64, error -71 [ 394.105949][ T5827] ath6kl: Failed to init ath6kl core: -71 [ 394.138601][ T5883] usb usb4-port1: attempt power cycle [ 394.147856][ T5827] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 394.228353][ T5827] usb 2-1: USB disconnect, device number 50 [ 394.518321][ T5883] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 394.559529][ T5883] usb 4-1: device descriptor read/8, error -71 [ 394.808575][ T5883] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 394.838973][ T5883] usb 4-1: device descriptor read/8, error -71 [ 394.962570][ T5883] usb usb4-port1: unable to enumerate USB device [ 395.188415][ T24] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 395.378273][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 395.415321][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 395.427312][ T24] usb 2-1: no configurations [ 395.451180][ T24] usb 2-1: can't read configurations, error -22 [ 396.241060][T10056] netlink: 428 bytes leftover after parsing attributes in process `syz.3.1203'. [ 396.243018][T10058] FAULT_INJECTION: forcing a failure. [ 396.243018][T10058] name failslab, interval 1, probability 0, space 0, times 0 [ 396.269665][T10058] CPU: 0 UID: 0 PID: 10058 Comm: syz.4.1202 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 396.269688][T10058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 396.269697][T10058] Call Trace: [ 396.269703][T10058] [ 396.269710][T10058] dump_stack_lvl+0x189/0x250 [ 396.269738][T10058] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.269759][T10058] ? __pfx__printk+0x10/0x10 [ 396.269778][T10058] ? __pfx___might_resched+0x10/0x10 [ 396.269791][T10058] ? fs_reclaim_acquire+0x7d/0x100 [ 396.269816][T10058] should_fail_ex+0x414/0x560 [ 396.269842][T10058] should_failslab+0xa8/0x100 [ 396.269862][T10058] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 396.269881][T10058] ? __alloc_skb+0x112/0x2d0 [ 396.269902][T10058] __alloc_skb+0x112/0x2d0 [ 396.269920][T10058] netlink_ack+0x146/0xa50 [ 396.269934][T10058] ? __mutex_trylock_common+0x153/0x260 [ 396.269951][T10058] ? __pfx___mutex_trylock_common+0x10/0x10 [ 396.269974][T10058] netlink_rcv_skb+0x2a0/0x490 [ 396.269989][T10058] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 396.270005][T10058] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 396.270036][T10058] ? netlink_deliver_tap+0x2e/0x1b0 [ 396.270050][T10058] ? netlink_deliver_tap+0x2e/0x1b0 [ 396.270065][T10058] xfrm_netlink_rcv+0x79/0x90 [ 396.270080][T10058] netlink_unicast+0x758/0x8d0 [ 396.270109][T10058] netlink_sendmsg+0x805/0xb30 [ 396.270131][T10058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.270148][T10058] ? aa_sock_msg_perm+0x94/0x160 [ 396.270164][T10058] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 396.270180][T10058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.270195][T10058] __sock_sendmsg+0x219/0x270 [ 396.270220][T10058] ____sys_sendmsg+0x505/0x830 [ 396.270242][T10058] ? __pfx_____sys_sendmsg+0x10/0x10 [ 396.270267][T10058] ? import_iovec+0x74/0xa0 [ 396.270288][T10058] ___sys_sendmsg+0x21f/0x2a0 [ 396.270308][T10058] ? __pfx____sys_sendmsg+0x10/0x10 [ 396.270351][T10058] ? __fget_files+0x2a/0x420 [ 396.270369][T10058] ? __fget_files+0x3a0/0x420 [ 396.270394][T10058] __x64_sys_sendmsg+0x19b/0x260 [ 396.270414][T10058] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 396.270444][T10058] ? do_syscall_64+0xba/0x210 [ 396.270464][T10058] do_syscall_64+0xf6/0x210 [ 396.270481][T10058] ? clear_bhb_loop+0x45/0xa0 [ 396.270499][T10058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.270512][T10058] RIP: 0033:0x7f19b8b8e969 [ 396.270525][T10058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.270538][T10058] RSP: 002b:00007f19b997b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.270552][T10058] RAX: ffffffffffffffda RBX: 00007f19b8db5fa0 RCX: 00007f19b8b8e969 [ 396.270563][T10058] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 396.270572][T10058] RBP: 00007f19b997b090 R08: 0000000000000000 R09: 0000000000000000 [ 396.270580][T10058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.270588][T10058] R13: 0000000000000000 R14: 00007f19b8db5fa0 R15: 00007f19b8edfa28 [ 396.270609][T10058] [ 396.596585][T10056] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1203'. [ 396.941593][T10064] netlink: 'syz.4.1204': attribute type 10 has an invalid length. [ 397.016025][T10064] team0: Device veth1_macvtap failed to register rx_handler [ 397.095908][T10073] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1207'. [ 397.224347][T10071] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20000 [ 397.432701][T10064] syz.4.1204 (10064) used greatest stack depth: 19992 bytes left [ 398.918135][ T24] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 399.288162][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 399.296053][ T24] usb 2-1: config 252 has an invalid interface number: 15 but max is 0 [ 399.334505][ T24] usb 2-1: config 252 has no interface number 0 [ 399.362911][ T24] usb 2-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 399.513366][ T24] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 399.524124][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.764517][ T24] usb 2-1: Product: syz [ 399.913746][ T24] usb 2-1: Manufacturer: syz [ 399.919140][ T24] usb 2-1: SerialNumber: syz [ 399.991647][ T24] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 400.152698][ T1165] usb 2-1: Failed to submit usb control message: -71 [ 400.157016][ T24] usb 2-1: USB disconnect, device number 53 [ 400.186051][ T1165] usb 2-1: unable to send the bmi data to the device: -71 [ 400.214268][ T1165] usb 2-1: unable to get target info from device [ 400.224397][ T1165] usb 2-1: could not get target info (-71) [ 400.238996][ T1165] usb 2-1: could not probe fw (-71) [ 400.249953][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1217'. [ 400.324541][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1217'. [ 400.554077][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1221'. [ 400.726458][T10119] veth9: entered promiscuous mode [ 400.749436][T10119] bridge5: port 1(veth9) entered blocking state [ 400.756006][T10119] bridge5: port 1(veth9) entered disabled state [ 400.782298][T10119] veth9: entered allmulticast mode [ 400.929891][T10133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1227'. [ 401.023647][T10137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1228'. [ 401.063674][T10138] veth7: entered promiscuous mode [ 401.084823][T10141] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1228'. [ 401.107620][T10138] bridge4: port 1(veth7) entered blocking state [ 401.114731][T10138] bridge4: port 1(veth7) entered disabled state [ 401.123670][T10138] veth7: entered allmulticast mode [ 401.220884][T10144] veth9: entered promiscuous mode [ 401.226414][T10144] bridge4: port 1(veth9) entered blocking state [ 401.246516][T10144] bridge4: port 1(veth9) entered disabled state [ 401.268432][T10144] veth9: entered allmulticast mode [ 401.378770][ T24] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 401.509041][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 401.509066][ T30] audit: type=1804 audit(1746099347.847:381): pid=10150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1218" name="/newroot/251/file0" dev="tmpfs" ino=1303 res=1 errno=0 [ 401.559593][ T5886] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 401.654804][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 401.695627][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 401.711607][ T24] usb 5-1: can't read configurations, error -61 [ 401.861918][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.888201][ T24] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 401.990636][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 402.032563][ T5886] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 402.053071][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.075578][ T5886] usb 3-1: config 0 descriptor?? [ 402.115523][ T5886] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 402.132190][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 402.199850][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 402.208371][ T24] usb 5-1: can't read configurations, error -61 [ 402.221331][ T24] usb usb5-port1: attempt power cycle [ 402.608190][ T24] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 402.630670][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 402.637951][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 402.646390][ T24] usb 5-1: can't read configurations, error -61 [ 402.788502][ T24] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 402.838990][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 402.846881][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 402.855198][ T24] usb 5-1: can't read configurations, error -61 [ 402.918849][ T24] usb usb5-port1: unable to enumerate USB device [ 404.141782][T10175] "syz.2.1231" (10175) uses obsolete ecb(arc4) skcipher [ 404.168425][T10186] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1241'. [ 404.291229][T10190] FAULT_INJECTION: forcing a failure. [ 404.291229][T10190] name failslab, interval 1, probability 0, space 0, times 0 [ 404.362280][T10190] CPU: 1 UID: 0 PID: 10190 Comm: syz.3.1243 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 404.362304][T10190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 404.362313][T10190] Call Trace: [ 404.362318][T10190] [ 404.362325][T10190] dump_stack_lvl+0x189/0x250 [ 404.362352][T10190] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.362373][T10190] ? __pfx__printk+0x10/0x10 [ 404.362392][T10190] ? __pfx___might_resched+0x10/0x10 [ 404.362404][T10190] ? fs_reclaim_acquire+0x7d/0x100 [ 404.362429][T10190] should_fail_ex+0x414/0x560 [ 404.362456][T10190] should_failslab+0xa8/0x100 [ 404.362475][T10190] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 404.362493][T10190] ? __alloc_skb+0x112/0x2d0 [ 404.362512][T10190] __alloc_skb+0x112/0x2d0 [ 404.362531][T10190] netlink_ack+0x146/0xa50 [ 404.362544][T10190] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.362562][T10190] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 404.362576][T10190] ? __pfx_nl80211_post_doit+0x10/0x10 [ 404.362591][T10190] ? ref_tracker_free+0x63a/0x7d0 [ 404.362605][T10190] ? __copy_skb_header+0xa7/0x550 [ 404.362629][T10190] netlink_rcv_skb+0x2a0/0x490 [ 404.362644][T10190] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.362664][T10190] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 404.362696][T10190] ? down_read+0x1ad/0x2e0 [ 404.362716][T10190] genl_rcv+0x28/0x40 [ 404.362733][T10190] netlink_unicast+0x758/0x8d0 [ 404.362763][T10190] netlink_sendmsg+0x805/0xb30 [ 404.362786][T10190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.362804][T10190] ? aa_sock_msg_perm+0x94/0x160 [ 404.362820][T10190] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 404.362836][T10190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.362851][T10190] __sock_sendmsg+0x219/0x270 [ 404.362876][T10190] ____sys_sendmsg+0x505/0x830 [ 404.362908][T10190] ? __pfx_____sys_sendmsg+0x10/0x10 [ 404.362943][T10190] ? import_iovec+0x74/0xa0 [ 404.362982][T10190] ___sys_sendmsg+0x21f/0x2a0 [ 404.363006][T10190] ? __pfx____sys_sendmsg+0x10/0x10 [ 404.363050][T10190] ? __fget_files+0x2a/0x420 [ 404.363068][T10190] ? __fget_files+0x3a0/0x420 [ 404.363094][T10190] __x64_sys_sendmsg+0x19b/0x260 [ 404.363114][T10190] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 404.363144][T10190] ? do_syscall_64+0xba/0x210 [ 404.363163][T10190] do_syscall_64+0xf6/0x210 [ 404.363180][T10190] ? clear_bhb_loop+0x45/0xa0 [ 404.363197][T10190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.363211][T10190] RIP: 0033:0x7fe2d8d8e969 [ 404.363225][T10190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.363237][T10190] RSP: 002b:00007fe2d9b2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.363253][T10190] RAX: ffffffffffffffda RBX: 00007fe2d8fb5fa0 RCX: 00007fe2d8d8e969 [ 404.363264][T10190] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 404.363274][T10190] RBP: 00007fe2d9b2e090 R08: 0000000000000000 R09: 0000000000000000 [ 404.363283][T10190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.363291][T10190] R13: 0000000000000000 R14: 00007fe2d8fb5fa0 R15: 00007fe2d90dfa28 [ 404.363313][T10190] [ 404.989511][ T24] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 405.041129][T10197] input: syz0 as /devices/virtual/input/input19 [ 405.047931][T10197] input: failed to attach handler leds to device input19, error: -6 [ 405.094544][T10197] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 405.151832][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.166995][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 405.180743][ T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 405.193623][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 405.207179][ T24] usb 2-1: SerialNumber: syz [ 405.437353][ T24] usb 2-1: 0:2 : does not exist [ 405.473512][ T24] usb 2-1: USB disconnect, device number 54 [ 405.545238][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 406.048194][ T5886] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 406.173434][ T24] usb 3-1: USB disconnect, device number 56 [ 406.218291][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 406.231241][ T5886] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 406.259223][ T5886] usb 4-1: can't read configurations, error -61 [ 406.401605][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'. [ 406.418341][ T5886] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 406.458004][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'. [ 406.578159][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 406.586136][ T5886] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 406.593986][ T5886] usb 4-1: can't read configurations, error -61 [ 406.601300][ T5886] usb usb4-port1: attempt power cycle [ 406.820482][T10231] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 406.827027][T10231] PKCS7: Only support pkcs7_signedData type [ 406.847788][T10231] xt_hashlimit: size too large, truncated to 1048576 [ 406.855626][T10231] netlink: 'syz.2.1258': attribute type 21 has an invalid length. [ 406.864595][T10231] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1258'. [ 406.968161][ T5886] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 407.000201][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 407.013364][ T5886] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 407.032179][ T5886] usb 4-1: can't read configurations, error -61 [ 407.109615][ T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 407.180258][ T5886] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 407.210766][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 407.255995][ T5886] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 407.266404][ T5886] usb 4-1: can't read configurations, error -61 [ 407.284087][ T10] usb 3-1: device descriptor read/64, error -71 [ 407.290693][ T5886] usb usb4-port1: unable to enumerate USB device [ 407.539096][ T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 407.592617][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1265'. [ 407.678280][ T10] usb 3-1: device descriptor read/64, error -71 [ 407.793972][ T10] usb usb3-port1: attempt power cycle [ 408.138271][ T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 408.142526][T10258] ipvlan2: entered promiscuous mode [ 408.154096][T10258] ipvlan2: entered allmulticast mode [ 408.159658][T10258] hsr0: entered allmulticast mode [ 408.165075][T10258] hsr_slave_0: entered allmulticast mode [ 408.174751][T10258] hsr_slave_1: entered allmulticast mode [ 408.181245][ T10] usb 3-1: device descriptor read/8, error -71 [ 408.418209][ T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 408.439419][ T10] usb 3-1: device descriptor read/8, error -71 [ 408.563335][ T10] usb usb3-port1: unable to enumerate USB device [ 408.588185][ T5827] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 408.765700][ T5827] usb 2-1: Using ep0 maxpacket: 16 [ 408.867799][ T5827] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 408.884036][ T5827] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.897302][ T5827] usb 2-1: config 0 has no interface number 0 [ 408.995732][ T5827] usb 2-1: config 0 interface 251 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 409.053644][ T5827] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 409.053715][T10272] loop6: detected capacity change from 0 to 63 [ 409.064176][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.081994][ T5827] usb 2-1: Product: syz [ 409.086353][ T5827] usb 2-1: Manufacturer: syz [ 409.091513][ T5827] usb 2-1: SerialNumber: syz [ 409.121486][ T5880] Buffer I/O error on dev loop6, logical block 0, async page read [ 409.131228][ T5827] usb 2-1: config 0 descriptor?? [ 409.139107][ T5880] Buffer I/O error on dev loop6, logical block 0, async page read [ 409.147366][ T5880] Buffer I/O error on dev loop6, logical block 0, async page read [ 409.155619][ T5880] Buffer I/O error on dev loop6, logical block 0, async page read [ 409.163947][ T5880] Buffer I/O error on dev loop6, logical block 0, async page read [ 409.458645][T10280] xt_hashlimit: size too large, truncated to 1048576 [ 410.720372][ T10] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 410.917188][ T10] usb 4-1: config 0 has no interfaces? [ 410.933756][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 410.944376][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.954778][ T10] usb 4-1: Product: syz [ 410.972321][ T10] usb 4-1: Manufacturer: syz [ 410.977225][ T10] usb 4-1: SerialNumber: syz [ 411.017522][ T10] usb 4-1: config 0 descriptor?? [ 411.058236][ T24] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 411.113614][T10315] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1285'. [ 411.238348][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 411.249773][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 411.257674][ T24] usb 5-1: can't read configurations, error -61 [ 411.299685][T10306] Invalid logical block size (-1) [ 411.307960][ T10] usb 4-1: USB disconnect, device number 56 [ 411.361955][ T5827] asix 2-1:0.251: probe with driver asix failed with error -22 [ 411.418094][ T5827] usb 2-1: USB disconnect, device number 55 [ 411.418978][ T24] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 411.648452][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 411.667857][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 411.694096][ T24] usb 5-1: can't read configurations, error -61 [ 411.706429][ T24] usb usb5-port1: attempt power cycle [ 411.716004][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1287'. [ 411.913679][T10329] Cannot find map_set index 0 as target [ 412.096976][ T24] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 412.269219][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 412.277284][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 412.287889][ T24] usb 5-1: can't read configurations, error -61 [ 412.610241][ T24] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 412.618596][T10339] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 412.659772][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 412.672256][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 412.685318][ T24] usb 5-1: can't read configurations, error -61 [ 412.730772][ T24] usb usb5-port1: unable to enumerate USB device [ 412.745862][T10342] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1292'. [ 412.908305][ T5883] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 413.205509][ T5883] usb 4-1: config 0 has no interfaces? [ 413.223930][ T5883] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 413.233861][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.242260][ T5883] usb 4-1: Product: syz [ 413.246823][ T5883] usb 4-1: Manufacturer: syz [ 413.251746][ T5883] usb 4-1: SerialNumber: syz [ 413.273006][ T5883] usb 4-1: config 0 descriptor?? [ 413.808172][ T5883] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 414.052201][T10357] No such timeout policy "syz0" [ 414.193774][ T5883] usb 2-1: config 0 has no interfaces? [ 414.200239][ T30] audit: type=1326 audit(1746099360.547:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10356 comm="syz.4.1298" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19b8b8e969 code=0x0 [ 414.264120][ T5883] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 414.277536][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.286418][ T5883] usb 2-1: Product: syz [ 414.365114][ T5883] usb 2-1: Manufacturer: syz [ 414.370556][ T24] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 414.435559][ T5883] usb 2-1: SerialNumber: syz [ 414.525753][ T5883] usb 2-1: config 0 descriptor?? [ 414.559722][ T24] usb 3-1: config 0 has no interfaces? [ 414.576918][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 414.791067][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.815131][ T24] usb 3-1: Product: syz [ 414.845243][ T24] usb 3-1: Manufacturer: syz [ 414.870513][ T24] usb 3-1: SerialNumber: syz [ 414.903832][ T24] usb 3-1: config 0 descriptor?? [ 415.368630][T10369] Invalid logical block size (-1) [ 415.477743][ T24] usb 3-1: USB disconnect, device number 61 [ 415.618421][ T5827] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 415.678758][ T5883] usb 4-1: USB disconnect, device number 57 [ 415.818877][ T5827] usb 5-1: Using ep0 maxpacket: 8 [ 415.847742][ T5827] usb 5-1: unable to get BOS descriptor or descriptor too short [ 415.872116][ T5827] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 416.104528][ T5827] usb 5-1: config 8 has 0 interfaces, different from the descriptor's value: 2 [ 416.367122][ T5827] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 416.381048][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.389366][ T5827] usb 5-1: Product: syz [ 416.393739][ T5827] usb 5-1: Manufacturer: syz [ 416.406231][ T5827] usb 5-1: SerialNumber: syz [ 417.397805][ T5883] usb 2-1: USB disconnect, device number 56 [ 417.868151][ T5883] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 418.018167][ T24] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 418.025882][ T5883] usb 2-1: Using ep0 maxpacket: 8 [ 418.062634][ T5883] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 418.111354][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.159325][ T5883] usb 2-1: Product: syz [ 418.177255][ T5883] usb 2-1: Manufacturer: syz [ 418.184103][ T5883] usb 2-1: SerialNumber: syz [ 418.199665][ T5883] usb 2-1: config 0 descriptor?? [ 418.217356][ T24] usb 4-1: config 0 has no interfaces? [ 418.237614][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 418.261939][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.316990][ T24] usb 4-1: Product: syz [ 418.340679][ T24] usb 4-1: Manufacturer: syz [ 418.373666][ T24] usb 4-1: SerialNumber: syz [ 418.398002][ T24] usb 4-1: config 0 descriptor?? [ 418.400910][ T10] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 418.439844][ T5827] usb 5-1: USB disconnect, device number 80 [ 418.458880][ T5883] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 418.535197][T10405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1314'. [ 418.575349][T10405] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1314'. [ 418.598186][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 418.610050][ T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 418.632155][ T10] usb 3-1: config 1 has an invalid descriptor of length 203, skipping remainder of the config [ 418.647450][T10405] veth9: entered promiscuous mode [ 418.662699][T10405] bridge6: port 1(veth9) entered blocking state [ 418.668557][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 418.674522][T10405] bridge6: port 1(veth9) entered disabled state [ 418.686023][T10405] veth9: entered allmulticast mode [ 418.695213][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 418.707405][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.053519][ T10] usb 3-1: Product: syz [ 419.062851][ T10] usb 3-1: Manufacturer: syz [ 419.069888][ T10] usb 3-1: SerialNumber: syz [ 419.071472][T10397] gtp0: entered promiscuous mode [ 419.093985][T10397] gtp0: entered allmulticast mode [ 419.114030][ T5883] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 419.157010][ T5883] usb 2-1: USB disconnect, device number 57 [ 419.290504][ T10] usb 3-1: 0:2 : does not exist [ 419.323969][ T10] usb 3-1: USB disconnect, device number 62 [ 419.488297][ T5886] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 419.648172][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 419.655276][ T5886] usb 5-1: config 0 has an invalid interface number: 194 but max is 0 [ 419.665999][ T5886] usb 5-1: config 0 has no interface number 0 [ 419.676521][ T5886] usb 5-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b4.25 [ 419.689896][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.699891][ T5886] usb 5-1: Product: syz [ 419.704258][ T5886] usb 5-1: Manufacturer: syz [ 419.711877][ T5886] usb 5-1: SerialNumber: syz [ 419.722110][ T5886] usb 5-1: config 0 descriptor?? [ 419.736519][ T5886] cypress_cy7c63 5-1:0.194: Cypress CY7C63xxx device now attached [ 419.979553][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1318'. [ 420.664424][T10434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.677983][T10434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.710975][T10434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.733898][T10434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.854023][ T5883] usb 4-1: USB disconnect, device number 58 [ 421.448163][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 421.623984][ T10] usb 3-1: config 0 has no interfaces? [ 421.637676][ T30] audit: type=1326 audit(1746099367.977:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10450 comm="syz.1.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543738e969 code=0x7ffc0000 [ 421.662698][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 421.683773][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.695300][ T10] usb 3-1: Product: syz [ 421.700134][ T10] usb 3-1: Manufacturer: syz [ 421.704866][ T10] usb 3-1: SerialNumber: syz [ 421.719861][ T10] usb 3-1: config 0 descriptor?? [ 421.746536][ T30] audit: type=1326 audit(1746099368.007:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10450 comm="syz.1.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f543738e969 code=0x7ffc0000 [ 421.813523][ T30] audit: type=1326 audit(1746099368.007:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10450 comm="syz.1.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543738e969 code=0x7ffc0000 [ 421.868912][ T30] audit: type=1326 audit(1746099368.007:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10450 comm="syz.1.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543738e969 code=0x7ffc0000 [ 421.918124][ T30] audit: type=1326 audit(1746099368.007:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10450 comm="syz.1.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f543738e969 code=0x7ffc0000 [ 422.035738][ T10] usb 3-1: USB disconnect, device number 63 [ 422.070210][T10457] FAULT_INJECTION: forcing a failure. [ 422.070210][T10457] name failslab, interval 1, probability 0, space 0, times 0 [ 422.102778][T10457] CPU: 1 UID: 0 PID: 10457 Comm: syz.3.1328 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 422.102811][T10457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 422.102824][T10457] Call Trace: [ 422.102832][T10457] [ 422.102841][T10457] dump_stack_lvl+0x189/0x250 [ 422.102879][T10457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.102908][T10457] ? __pfx__printk+0x10/0x10 [ 422.102935][T10457] ? __pfx___might_resched+0x10/0x10 [ 422.102953][T10457] ? fs_reclaim_acquire+0x7d/0x100 [ 422.102987][T10457] should_fail_ex+0x414/0x560 [ 422.103024][T10457] should_failslab+0xa8/0x100 [ 422.103052][T10457] __kmalloc_noprof+0xcb/0x4f0 [ 422.103076][T10457] ? nf_tables_newrule+0x1506/0x2890 [ 422.103104][T10457] nf_tables_newrule+0x1506/0x2890 [ 422.103144][T10457] ? __pfx_nf_tables_newrule+0x10/0x10 [ 422.103183][T10457] ? __nla_parse+0x40/0x60 [ 422.103210][T10457] nfnetlink_rcv+0x113f/0x2530 [ 422.103270][T10457] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 422.103354][T10457] ? skb_clone+0x246/0x3a0 [ 422.103397][T10457] ? netlink_deliver_tap+0x2e/0x1b0 [ 422.103413][T10457] ? netlink_deliver_tap+0x2e/0x1b0 [ 422.103432][T10457] netlink_unicast+0x758/0x8d0 [ 422.103463][T10457] netlink_sendmsg+0x805/0xb30 [ 422.103485][T10457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.103503][T10457] ? aa_sock_msg_perm+0x94/0x160 [ 422.103520][T10457] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 422.103536][T10457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.103551][T10457] __sock_sendmsg+0x219/0x270 [ 422.103578][T10457] ____sys_sendmsg+0x505/0x830 [ 422.103601][T10457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 422.103625][T10457] ? import_iovec+0x74/0xa0 [ 422.103647][T10457] ___sys_sendmsg+0x21f/0x2a0 [ 422.103667][T10457] ? __pfx____sys_sendmsg+0x10/0x10 [ 422.103711][T10457] ? __fget_files+0x2a/0x420 [ 422.103729][T10457] ? __fget_files+0x3a0/0x420 [ 422.103755][T10457] __x64_sys_sendmsg+0x19b/0x260 [ 422.103779][T10457] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 422.103823][T10457] ? do_syscall_64+0xba/0x210 [ 422.103852][T10457] do_syscall_64+0xf6/0x210 [ 422.103877][T10457] ? clear_bhb_loop+0x45/0xa0 [ 422.103896][T10457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.103910][T10457] RIP: 0033:0x7fe2d8d8e969 [ 422.103923][T10457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.103935][T10457] RSP: 002b:00007fe2d9b2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.103951][T10457] RAX: ffffffffffffffda RBX: 00007fe2d8fb5fa0 RCX: 00007fe2d8d8e969 [ 422.103962][T10457] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 422.103971][T10457] RBP: 00007fe2d9b2e090 R08: 0000000000000000 R09: 0000000000000000 [ 422.103979][T10457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.103988][T10457] R13: 0000000000000000 R14: 00007fe2d8fb5fa0 R15: 00007fe2d90dfa28 [ 422.104009][T10457] [ 422.597252][ T49] usb 5-1: USB disconnect, device number 81 [ 422.604985][ T49] cypress_cy7c63 5-1:0.194: Cypress CY7C63xxx device now disconnected [ 422.893870][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1336'. [ 422.932343][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1336'. [ 422.998196][ T5827] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 423.008232][ T49] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 423.163164][ T5827] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 423.172568][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.178543][ T49] usb 5-1: Using ep0 maxpacket: 16 [ 423.180704][ T5827] usb 4-1: Product: syz [ 423.190587][ T5827] usb 4-1: Manufacturer: syz [ 423.195309][ T5827] usb 4-1: SerialNumber: syz [ 423.207272][ T49] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.210964][ T5827] usb 4-1: config 0 descriptor?? [ 423.227839][ T49] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 423.244363][ T49] usb 5-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 423.254438][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.266718][ T49] usb 5-1: Product: syz [ 423.268402][ T5886] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 423.271732][ T49] usb 5-1: Manufacturer: syz [ 423.283989][ T49] usb 5-1: SerialNumber: syz [ 423.300110][ T49] usb 5-1: config 0 descriptor?? [ 423.547240][ T49] usb 5-1: USB disconnect, device number 82 [ 423.554830][ T5827] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 059 [ 423.567798][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.597350][ T5886] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 423.617752][ T5886] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 423.626965][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.655941][ T5886] usb 3-1: config 0 descriptor?? [ 423.687288][T10469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.701763][ T5886] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 423.720090][T10469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.741236][ T5886] dvb-usb: bulk message failed: -22 (3/0) [ 423.767899][ T5886] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 423.787179][ T5886] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 423.807417][ T5886] usb 3-1: media controller created [ 423.823600][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 423.865867][ T5886] dvb-usb: bulk message failed: -22 (6/0) [ 423.876647][ T5886] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 423.899459][ T5886] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20 [ 423.916125][T10476] ------------[ cut here ]------------ [ 423.921917][T10476] usb 4-1: BOGUS control dir, pipe 80003b80 doesn't match bRequestType c1 [ 423.936351][ T5886] dvb-usb: schedule remote query interval to 150 msecs. [ 423.955269][ T5886] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 423.968572][T10476] WARNING: CPU: 0 PID: 10476 at drivers/usb/core/urb.c:413 usb_submit_urb+0x1112/0x1870 [ 423.978515][T10476] Modules linked in: [ 423.982666][T10476] CPU: 0 UID: 0 PID: 10476 Comm: syz.2.1337 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 423.994923][T10476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 424.005234][T10476] RIP: 0010:usb_submit_urb+0x1112/0x1870 [ 424.010969][T10476] Code: 0f b6 44 05 00 84 c0 0f 85 38 06 00 00 45 0f b6 04 24 48 c7 c7 20 5f 12 8c 48 8b 74 24 18 4c 89 fa 44 89 f1 e8 7f 6a 6f fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 2b f4 ff ff 89 e9 80 [ 424.030839][T10476] RSP: 0018:ffffc9000b23f870 EFLAGS: 00010246 [ 424.036929][T10476] RAX: 5439095849ebf600 RBX: ffff88814c365100 RCX: 0000000000080000 [ 424.045815][T10476] RDX: ffffc9000bf2a000 RSI: 0000000000004ad4 RDI: 0000000000004ad5 [ 424.054232][T10476] RBP: 1ffff1100b38d7e0 R08: 0000000000000003 R09: 0000000000000004 [ 424.062279][T10476] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: ffff888059c6bf00 [ 424.070346][T10476] R13: dffffc0000000000 R14: 0000000080003b80 R15: ffff88803306faa0 [ 424.078496][T10476] FS: 00007f8ff45d56c0(0000) GS:ffff8881260cc000(0000) knlGS:0000000000000000 [ 424.087463][T10476] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 424.094134][T10476] CR2: 000000110c3aaae7 CR3: 0000000062bfc000 CR4: 00000000003526f0 [ 424.102181][T10476] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 424.110298][T10476] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 424.118359][T10476] Call Trace: [ 424.121660][T10476] [ 424.124629][T10476] usb_start_wait_urb+0x114/0x4c0 [ 424.129732][T10476] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 424.135321][T10476] ? __kmalloc_noprof+0x29b/0x4f0 [ 424.140452][T10476] usb_control_msg+0x232/0x3e0 [ 424.145561][T10476] osif_xfer+0x21a/0x5e0 [ 424.150159][T10476] __i2c_transfer+0x871/0x2170 [ 424.154961][T10476] ? lockdep_hardirqs_on+0x9c/0x150 [ 424.160242][T10476] ? __pfx___i2c_transfer+0x10/0x10 [ 424.165458][T10476] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 424.170891][T10476] ? i2c_transfer+0x11d/0x3a0 [ 424.175615][T10476] i2c_transfer+0x25b/0x3a0 [ 424.180185][T10476] ? __pfx_i2c_transfer+0x10/0x10 [ 424.185243][T10476] ? _copy_from_user+0x94/0xb0 [ 424.190357][T10476] i2cdev_ioctl_rdwr+0x460/0x740 [ 424.195325][T10476] i2cdev_ioctl+0x64b/0x7f0 [ 424.199922][T10476] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 424.204960][T10476] ? __fget_files+0x3a0/0x420 [ 424.209732][T10476] ? __fget_files+0x2a/0x420 [ 424.214333][T10476] ? bpf_lsm_file_ioctl+0x9/0x20 [ 424.219323][T10476] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 424.224374][T10476] __se_sys_ioctl+0xf9/0x170 [ 424.229011][T10476] do_syscall_64+0xf6/0x210 [ 424.233520][T10476] ? clear_bhb_loop+0x45/0xa0 [ 424.238237][T10476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.244151][T10476] RIP: 0033:0x7f8ff378e969 [ 424.248928][T10476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.268964][T10476] RSP: 002b:00007f8ff45d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.277415][T10476] RAX: ffffffffffffffda RBX: 00007f8ff39b5fa0 RCX: 00007f8ff378e969 [ 424.285449][T10476] RDX: 0000200000002580 RSI: 0000000000000707 RDI: 000000000000000a [ 424.293472][T10476] RBP: 00007f8ff3810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 424.301502][T10476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.309578][T10476] R13: 0000000000000000 R14: 00007f8ff39b5fa0 R15: 00007f8ff3adfa28 [ 424.317592][T10476] [ 424.320703][T10476] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 424.327998][T10476] CPU: 0 UID: 0 PID: 10476 Comm: syz.2.1337 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 424.340061][T10476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 424.350123][T10476] Call Trace: [ 424.353422][T10476] [ 424.356352][T10476] dump_stack_lvl+0x99/0x250 [ 424.360953][T10476] ? __asan_memcpy+0x40/0x70 [ 424.365542][T10476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.370749][T10476] ? __pfx__printk+0x10/0x10 [ 424.375348][T10476] panic+0x2db/0x790 [ 424.379285][T10476] ? __pfx_panic+0x10/0x10 [ 424.383724][T10476] __warn+0x31b/0x4b0 [ 424.387709][T10476] ? usb_submit_urb+0x1112/0x1870 [ 424.392751][T10476] ? usb_submit_urb+0x1112/0x1870 [ 424.397777][T10476] report_bug+0x2be/0x4f0 [ 424.402140][T10476] ? usb_submit_urb+0x1112/0x1870 [ 424.407182][T10476] ? usb_submit_urb+0x1112/0x1870 [ 424.412207][T10476] ? usb_submit_urb+0x1114/0x1870 [ 424.417232][T10476] handle_bug+0x84/0x160 [ 424.421480][T10476] exc_invalid_op+0x1a/0x50 [ 424.425985][T10476] asm_exc_invalid_op+0x1a/0x20 [ 424.430854][T10476] RIP: 0010:usb_submit_urb+0x1112/0x1870 [ 424.436501][T10476] Code: 0f b6 44 05 00 84 c0 0f 85 38 06 00 00 45 0f b6 04 24 48 c7 c7 20 5f 12 8c 48 8b 74 24 18 4c 89 fa 44 89 f1 e8 7f 6a 6f fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 2b f4 ff ff 89 e9 80 [ 424.456112][T10476] RSP: 0018:ffffc9000b23f870 EFLAGS: 00010246 [ 424.462186][T10476] RAX: 5439095849ebf600 RBX: ffff88814c365100 RCX: 0000000000080000 [ 424.470157][T10476] RDX: ffffc9000bf2a000 RSI: 0000000000004ad4 RDI: 0000000000004ad5 [ 424.478138][T10476] RBP: 1ffff1100b38d7e0 R08: 0000000000000003 R09: 0000000000000004 [ 424.486126][T10476] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: ffff888059c6bf00 [ 424.494113][T10476] R13: dffffc0000000000 R14: 0000000080003b80 R15: ffff88803306faa0 [ 424.502106][T10476] usb_start_wait_urb+0x114/0x4c0 [ 424.507153][T10476] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 424.512726][T10476] ? __kmalloc_noprof+0x29b/0x4f0 [ 424.517760][T10476] usb_control_msg+0x232/0x3e0 [ 424.522533][T10476] osif_xfer+0x21a/0x5e0 [ 424.526793][T10476] __i2c_transfer+0x871/0x2170 [ 424.531579][T10476] ? lockdep_hardirqs_on+0x9c/0x150 [ 424.536803][T10476] ? __pfx___i2c_transfer+0x10/0x10 [ 424.542009][T10476] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 424.547385][T10476] ? i2c_transfer+0x11d/0x3a0 [ 424.552066][T10476] i2c_transfer+0x25b/0x3a0 [ 424.556578][T10476] ? __pfx_i2c_transfer+0x10/0x10 [ 424.561617][T10476] ? _copy_from_user+0x94/0xb0 [ 424.566390][T10476] i2cdev_ioctl_rdwr+0x460/0x740 [ 424.571352][T10476] i2cdev_ioctl+0x64b/0x7f0 [ 424.575874][T10476] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 424.580909][T10476] ? __fget_files+0x3a0/0x420 [ 424.585593][T10476] ? __fget_files+0x2a/0x420 [ 424.590188][T10476] ? bpf_lsm_file_ioctl+0x9/0x20 [ 424.595131][T10476] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 424.600191][T10476] __se_sys_ioctl+0xf9/0x170 [ 424.604794][T10476] do_syscall_64+0xf6/0x210 [ 424.609301][T10476] ? clear_bhb_loop+0x45/0xa0 [ 424.613979][T10476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.619869][T10476] RIP: 0033:0x7f8ff378e969 [ 424.624281][T10476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.643893][T10476] RSP: 002b:00007f8ff45d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.652310][T10476] RAX: ffffffffffffffda RBX: 00007f8ff39b5fa0 RCX: 00007f8ff378e969 [ 424.660293][T10476] RDX: 0000200000002580 RSI: 0000000000000707 RDI: 000000000000000a [ 424.668283][T10476] RBP: 00007f8ff3810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 424.676259][T10476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.684231][T10476] R13: 0000000000000000 R14: 00007f8ff39b5fa0 R15: 00007f8ff3adfa28 [ 424.692226][T10476] [ 424.695558][T10476] Kernel Offset: disabled [ 424.699894][T10476] Rebooting in 86400 seconds..