last executing test programs: 23.229013662s ago: executing program 1 (id=1440): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15247423360608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) (async) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000c40)=@multiplanar_mmap={0x1ff, 0xe, 0x4, 0x170000, 0x6, {}, {0x2, 0x0, 0xc6, 0x0, 0x9, 0x6, "318e4d32"}, 0x558, 0x1, {0x0}, 0x9f6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xeb) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) io_uring_setup(0x604f, &(0x7f00000002c0)={0x0, 0x341a, 0x2, 0x4, 0x3b1}) (async) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9}) (async) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040)=0xfff, 0x4) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x3ec, 0x3, 0x9, 0xfff8, 0x4, 0x2, 0x3, {0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0xb5, 0x0, 0x2, 0x0, 0x400}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={r4, 0x4, 0xb947, 0x8}, &(0x7f0000000340)=0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async, rerun: 64) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 64) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async) sendmmsg$inet(r5, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6", 0x90}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6", 0x26}, {&(0x7f0000000f00)="397d5f2e855cb2b0b1e61d3fe47dc3", 0xf}], 0x3}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5", 0x6f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)="faef5f66d64761a0baefceade86d0d3eab77b50cd32e72707a4286fdd686dc3cdb08d1e8be4f15facbfb0ccd2ead75d938b7e9b2d959d4efb02574530e2cc38adfd249f626e54365e5d294edeec37670e0c8987b6f8a3a0b79e4b12e1f", 0x5d}, {&(0x7f0000001340)="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", 0x251}], 0x2}}], 0x3, 0xc0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req3={0x7, 0x9, 0x5, 0x4, 0x1, 0xd, 0x4}, 0x1c) (async, rerun: 64) r6 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000000000040014000d000a00200000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 32) r7 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32) sendto$inet(r7, &(0x7f0000000000), 0x0, 0x11, 0x0, 0x0) 23.008019801s ago: executing program 1 (id=1441): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd701"], 0x0) lstat(0x0, 0x0) close(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) sched_setattr(r3, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000340)) setrlimit(0xf, 0x0) gettid() openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x600) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000300)) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[], 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)}) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6) 18.279890608s ago: executing program 1 (id=1457): r0 = userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x22, 0x2, 0x24) close(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, r0, 0x57c68000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) ftruncate(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0x8, 0x4, 0x5, 0x52}}) shutdown(r6, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x6e, 0x39, 0x2b, 0x8, 0x6cd, 0x119, 0xe6d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfd, 0x0, 0xe0, 0x0, [{{0x9, 0x4, 0xfc, 0x2, 0x0, 0xba, 0x70, 0xc3, 0x8}}]}}]}}, 0x0) 14.633784026s ago: executing program 1 (id=1464): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r0, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x7fffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc048aeca, &(0x7f0000000200)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x16, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 13.925590359s ago: executing program 1 (id=1469): mlock(&(0x7f000021e000/0x2000)=nil, 0x2000) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x10002, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000240)={{0x3, 0x0, 0xa, 0x1}}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) munlockall() mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f000021c000/0x2000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000620108000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x16, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xffffffff) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000005c80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)="de3eab39d6", 0x5}], 0x1, 0x0, 0x0, 0x881}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000800)="93fa7eb83f", 0x5}], 0x1, 0x0, 0x0, 0x8000}}], 0x2, 0x4000045) syz_clone(0x40800000, &(0x7f0000000280)="eceb1036177d123d67", 0x9, &(0x7f00000002c0), &(0x7f0000000380), &(0x7f0000000440)="dfe35f4a563b94299401") sendto$inet(r4, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x2}, 0x8) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa}]}}, 0x0}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)=0x3) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d00)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\a'], 0x24}, 0x1, 0x5502000000000000}, 0x23f58e5b666e3746) syz_usb_connect(0x0, 0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102e9d7b7402d1ef3004ef10102030109022e000137d510060904230400ff86e9040a2401100001020102002408020700028224002403020703060200"], &(0x7f0000000080)={0xffffffffffffffa8, 0x0, 0x0, 0x0, 0x38, [{0x0, &(0x7f0000000000)=@lang_id={0x20, 0x3, 0x423}}, {0x0, &(0x7f0000000100)=@string={0x0, 0x3, "ff1d84c64075d3654d7ee4510410ee5cb7433d82c1e3bf4137232ecfd38a668d9c73aac10e103ed2aa720c6dba5092dead8ebd651efd9c9f8d3c162d03106f"}}]}) waitid$P_PIDFD(0x3, r0, 0x0, 0x8, 0x0) 13.452140847s ago: executing program 3 (id=1471): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000005900008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x300, 0x0, 0x0}, 0x4c) 13.300790044s ago: executing program 3 (id=1472): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_connect(0x0, 0x5a, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_pts(r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2800491, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x4, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2, 0x1}, 0x18, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRES64], 0x20) 11.459450199s ago: executing program 1 (id=1474): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x7}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000000)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x50, 0x0, 0x0, 0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x9}, 0xe) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000440)=0x6, 0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x20, 0x0, 0x80, 0x0, 0x0, '\x00', 0x6, 0x5}) 10.139871784s ago: executing program 3 (id=1478): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYBLOB="adffa888000000001c00128009006e000000000c0002800600050088a800000a000100aa12679e3e13dc6bd386c1e70bb4aaaa48d4011a1c"], 0x48}}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x18) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x5c4131a7c90e292b) r2 = socket$isdn(0x22, 0x3, 0x22) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000380)=0x4) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b"], 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) r4 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r4, &(0x7f0000003080)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000001b40)=[{&(0x7f00000002c0)="451fb88ae975f58b82298dca2a6ee73f3cb4da03d559c14582e34297893c5f4fee2bf9d29330a4600000000000000009bc2e142dac34f6f9c6f74b0db1f32807d00c8ebdd96da9b1f10d67bb1302d966b57255173f30cbca98330f59c4abe398beb64073397dac8a8b5795eef4fb49150269feb236812f8e18ff5027f7ba6538d59acde597dc7b95bbac78044b1a6eb7b048963104fdff0000e0f9f48289a6442addc5", 0xa3}, {&(0x7f00000008c0)}, {&(0x7f0000000a40)="13ab3eeee593968811a98ce0eb08018efc054c8faeba6abd27c981fdbba854db371d3ef85fff0c5a815bce21f63166c801401f654ac3fd484338b4ccb726d2eb2e87f4a952aab9c6ab538365407a9b5b3f5d19b4d7d9afc8072d1d259130729a6745080c9db7398d70da7c1db8bc139e937a2a41f903526d5e15b06b01a068396389ed6dde3749593c274c153ecfa407e7aeb7f20f2eb436898fac9f0724b1894b286db08902dee46666f3af3c6a667eefa37e7eba83b8ddf74f0127ef456502cb08b0dcd36ff606a82b01910f", 0xcd}, {&(0x7f0000000b40)}, {&(0x7f0000000440)}, {0x0}], 0x6}}, {{&(0x7f0000002e40)={0xa, 0x0, 0x6, @mcast2, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000000000000290000000800000000000000000000002e1dcf9d80782b6a2d6fda419b6ab5766ac80f59d18cc593d0936f5261ab4f69814519"], 0x18}}], 0x3, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000006, 0x110, r3, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TCGETA(r6, 0x5405, &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$xdp(r5, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0xc, r5}, 0x10) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000240)=@arm64={0x7, 0x81, 0xb, '\x00', 0xfffffffffffffffe}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"]) 9.990473728s ago: executing program 2 (id=1479): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x328d, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r5], 0x1, r3, r4, 0x3, 0x7ffffffe, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 9.763816415s ago: executing program 2 (id=1480): r0 = userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x22, 0x2, 0x24) close(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, r0, 0x57c68000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) ftruncate(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0x8, 0x4, 0x5, 0x52}}) shutdown(r6, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e74000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x6e, 0x39, 0x2b, 0x8, 0x6cd, 0x119, 0xe6d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfd, 0x0, 0xe0, 0x0, [{{0x9, 0x4, 0xfc, 0x2, 0x0, 0xba, 0x70, 0xc3, 0x8}}]}}]}}, 0x0) 6.877381441s ago: executing program 3 (id=1483): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f00000002c0)=ANY=[@ANYRES32=0x41424344, @ANYRESHEX=r0, @ANYBLOB="8002fffd9078000001fe08f989adb18d07000000"], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000180)={0x7, 0x7, 0x3}, &(0x7f0000000200)=0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000000340)=ANY=[@ANYBLOB="35b745e0b0fdfd18fcc84b7a63a5efb9a6d1f0049b8f807f19a2e40e3aa0e51c05011aeb232035ca06ad57e0e3209f09a856f7e21c4b72988815701e975dabd446f7e572e8a401e43f4f0d1a79000097ccb91badff99771d32020b1140375251c72258bcb5c017f4f173428500"/122, @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf2501000000000000000b0000000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x0, 0x6, 0x0, 0xfffffffc, 0x3}) r5 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) fallocate(r5, 0x42, 0x0, 0x100000000) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f0000000140)=0xffffdffe) r7 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x68, 0x14, 0xf0b, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, {0x7, 0x2}, {0xb, 0xffff}, {0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x200, 0x5, 0x6, 0xd, 0x4, 0x16}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_CORR={0x10, 0x1, {0x46, 0x3, 0x109}}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c4}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r7) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$SEG6_CMD_SET_TUNSRC(r7, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x715, 0x1, 0x48f]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200088d0}, 0x4000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x2}, {0x1, 0x2e7, 0x1800}], 0x2) 5.14251273s ago: executing program 2 (id=1485): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000700)={0xffffffffffffff8c, 0x7d, 0x0, {{0x500, 0xfd, 0x0, 0x3, {0x0, 0x0, 0xffffffffffffffff}, 0x81ff, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x61, '\xf8\xf6i\xfbqm\xcf1^\xca\xb3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xd5\x8cc\xd6C\x05\xc4\xd4\xf1\xf1\xc4\xae\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x23e) 4.813467251s ago: executing program 2 (id=1486): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r5 = socket(0x18, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x2, 0x0, 0x6}}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0xc, @remote, 'ip6tnl0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6638a, 0x1001}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 3.705125881s ago: executing program 3 (id=1488): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_connect(0x0, 0x5a, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_pts(r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2800491, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x4, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2, 0x1}, 0x18, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRES64], 0x20) 3.153680777s ago: executing program 2 (id=1491): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0500000003f01f00810000007f000000010000007921c107ecb97f8d50357a8e1a9e2350ab86daec4bfe96e0ea"], 0x48) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x1, 0x6, 0xf098, 0x4, 0x5, 0x8, 0x8, {0x0, @in={{0x2, 0x4e23, @private=0xa010101}}, 0x7255e9e7, 0x5, 0x6, 0x80000001, 0x6}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB='\"'], 0x7) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)}, 0x20000800) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000001b00)=[{{&(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001980)=[{&(0x7f0000000640)="ee69d07882a8092c7dc0d215d89dfaed8cc8d7a5e4671da14343ee99385aaea0f15d43c8159d0cad263f1c54f384a141e6fa0bc7ca43ead839ca04f1410ca8e417be724d74b6d73217cfc310611e6d2802064a057fd8df67c697764d0c8861116babf6cd28c84b85235598b8a05cfb400e724dd26a75dccd6c6c87fb6f39e77b4f54632b76817fb50d0df678612bcbb770bc78d8d3830f6d1796e4602d9f2d06f133318af350d4bd6bf63967f2293083ac4bbd803e09c322210bf8c228c73170dabf6a", 0xc3}, {&(0x7f0000000140)="8d107cc7214bc1662e13667c67b9f2a0aa187666a155af80dfe3ead238e0f9081b", 0x21}, {&(0x7f0000000740)="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", 0xfd}, {&(0x7f0000000300)}, {&(0x7f00000005c0)="d3b326724d2ee5c3793520382d7f99eca04e73e3a212bc25d406babdb53f7836ad54", 0x22}, {&(0x7f0000000840)="db98e6fcc9a709d55e5fb0797e30e4f054592d6f6c74197989f3c47c811193384da53483b56126359a3654ab0fc203f925d4781d0120eb926a7dcb19e9a8d8cb4f5d3b45b528604d7afa83cbce02b57c73feafe9417429b1edc54362409d357052284c6e94a99fe888e79ef6de4bbea6f6883f17b92c2831e48efae80f5c7fcf49cb3ca4af93bfb575742df61c2dc7a9e21b024f3b32202ed9e22a88c8e90c76cb961323aedd061a806ad9dc831e7a8d4fe09d069e2bb734d86dd19346336fbb8a9e0b28b3f9fbffc84471ac18d4157167e5b7c589aba326601e48b9772d69813aabcdf068a2aece0d6b1450d9a45aa4d721369836a016719572c31c23fabfa12350c6e8f628c6b5776740671e2e1a0fc227ba740c466f2a2120c6df8de5ad4caa47f9d887e2dabbce3973a4606be3cb1847ad4f97d85ef2fa785e94f508580526f521921aadb875a88da8a26948a6229ad62ce791204a9bc39ffb1b5717a7d95dba3a8b5a5d959ec74ec5bad0674147e3d2c1bc5204739f5c03b719490364754f9e2a96e30489263aa2dbeaa12a4960920b9749767426d2b2c77f4243c82843b1c330f8b8190a0cd541353bf561964f5a1c88797fa9cbb55ec7a8333de64cec305aeba2f0b2bb52aa1f3a47180bb471b44375651e657c2e20167c86b54f69bcbcdfeed115f47424327bbf30bea3f380bd7ff2e4600dd50c1f87dec71f70261279913a3efad2c0e3e62d78e71991b2f3376f3652776ef59bed3c04c5272c6a894508fc580a3c2e2c470ee0828b954685968c4384f0728f182ff10c26cad2b811b1dcc0e370d006de8ce719ac08d9ab6ac24bc9274dd862f7eede3bfcfd0ecf81bb80d2f58e9af5a8fa74187a4b3c08fc338b29a6ff73d61f918bcb46cb639f8fec1756771d79390dd6b1aec6dc4cfd894ac8bc2bb7ce96f4a406bcc4937af699bece514d72d6c1a1cc36924e44f9459c4160ac716de1cbf7d219a475d92bd2e978a68a1d231f92549dfdbe877efc8c42757071a5ce19e3a0e1a5074aa398dafe3cf0e824f8dd1bf2a24e0d99b47df94cd8be2f2a0436234e065c048719cb19be16d0a2a1c166275576f86461e599fd76f21697d869b1069850b7c1bf1a894c3c924297ea4b726ebde05ee91d9a3c9dd26ffcce8603ad638e4b90c857aff5178131647dab279e409c844441e6ca24769033e774f78386419b504f033ca7c77acebb8934c050138dd95f2e46592b171d92a975f5df3cfec416c9c053a660f988b3432d63b189da2ea55805302bb2af2eb8d69a67ee4f7c6c34863545a4cf3452237f6b5bd6d96f443f814ca9250d399d9070eab5e26dbc728540c851e966ecd3a2567cec07cf0380924697d474dd1b73b5bb3a62dd2196bfee575416078ae372dce19f0754a9583f1e43bd8fa974ecf96d09d43a5e981fb0ceb922905061ddc0aa0f08b7e8440e43f8903c97f9e9b01b73db9f4a224a8c1c861d1f2ca24831862ed0deb9888b2503b1b88bfedacacffa008007a7b650c8a08ed35de59f6d04f95ab25dcee47b78d195090ac086fba275d4002448ddb8fcab5f24620b6056f137f0216e256ec9446a28c9c9371dce59bab13df2dcab2e45ae7a1664f46d8596a1639ba6cdff1b6a2a0c25a943df3ca67f1f3f86b2532318f25e96652bfafe6ac1e094977dd7be565af81b9fe24d7d7a9f146f4893a8ae3b67321ebd49a633dcbb581142e0447d63656df959439d266fe9062e7f23eb7ba622121e12dda0d87daa60cc12b180575ba395a0061af353886dbda49dcbbe23404ce325ff8122236b86b73b5a22ad355ac07c044b71d549a779010bbb7a25ca0f06151134b27125bb99931a65bd6d42dde1b983dba6ab9fd473fb9e428488a16fc5e557bfd5a173a5cd37f1682ba0946bbb43dde0f6991c6750d118e288d21a9ec6d8f10e92d95214618ca5a3c50944e051225889c4f0fa54672a06b9468f20d0dcbadf8b8852a61a964cf4d5dc281e9c028ed9ff818faa2369105f692cd1ad7ff9759ced01f3d55328b084bc32d9f264b477a2d84bf61f75faf5c7098e015e00f2ab481fdc8915f7485b9ea308e4bb3c15c661641675bd516e65ce06211c42417a2e2e4dffa396ae222d339131acc6aa4b7b174e3e8f4f073581fb340101fcc38f2acbe6aaea27a6abec28ff74a42e677fce30ce248f5cc1fbf6a1f13d9069a8df01455635d7c21c4acf7ef7c349284aa14cace5a98f8c987155cd7d43de0401cc380e9ae3318e12b1549ba5962de1e08e09a2e7684a8e6c13d70b2cc7c3bf443a74666d315876dc125fd9d0cacce15e97561489077b896d883c2cefc5109661676f41842b0c2281823809c041d2b524819545de665321a01a16549c8b2df0be2bd6ecbe9fef93a37d1b6e2d4da8497f14027f5c74fc964b2828d4cc99ebd59ec4d8d9ad38a2e857651c63ed785746c828bc747f3caae3cfa9864d7a4f37296ab72b2a55d29c0b5eb40a0b9c063d876d4d9fd7712c3b4a16ce61b3e6e554c4b908e2e143493cfa11e7ca18790bbf5757bcabc9ad342764c7bb1a34bca723df95999d8b7a74586c181a0c398136baf3cf15d95a88f45b46ab23784fa1e33eef4b5dc05f8a85810c36f83e677efd9a3aa8976c3e298d37b9fbcf55f26663ba6e2dc4b308240a8cb514234e312ed9fd1e7fc13fc0d7437bfff0de1d1b53f694dbe873a98ac6fb2d372300a3a2e95d08ee771aeb4be72fcae1957d217a8d49e3417b09d9541b7fd9f8efd70c7f7f3c1f99ac0208b6e258bb57e37596fef60068460f5806111236c611f7d7cdcb9ad6decc27c11d629d9e33f750816cd6a97d982823820748fdd1e2c47a1c9e5b29a26ed42cf9902bace47cc0756f1473386eb4bd80e2ea8dd965028f72c6521ee6bfd8b97930abba2d3a69b2f506afd4a77a69c04a0305caa537491fad2259be3da06360f45cfb01a2ef31a9db7de9135b9e79fb6efd44265a2c8b0a69d8570a804da9e83bc7740e9d19d58942b8f372687ffa5ec9d26252e913b5dd64e8f854670b9121edfbf5812cb3664eb10bc4406ebe43a5fd810695f6af05984abf5c15de9d1fdf7d35208f345687c6a878cd20e6c86109bab029852e19bedc92ea18c611bb2ac4cf84abc0bd650e450cc6e3384743fb63d3216876e73bcf9869434f67c8c3e1c6de666d90188dc033993404bd91ab6d3f349703a18daac0b579888b2d187c32bca9b8c8e5ae50f382df91703ae656932dff02e54fca9c78203d91de42c1e0b733d183624601d5fb4db79a9b1fb8d295767d520959f3cf22c01711699d4cffc032e8067784064f1b19c9336fd40e75cacd17208750d33ffb905ee588861a9825e6490ed5b6539676a1d8cb8c3defd51262f11da8b858da14e7700dd16c7e28d7521a759b108610787c987f1db4fc8bea27bb8a876ff584207f68be44467628b212bbd7dc8f8951f5b0bbc20efef81c8c6b3c3d94aa15b663bebee7df4b1e800209a026ef521265d2baace7dd7f2acb295788828cd0ca4a1b23695af8111144617b2412e140b9633bbf76875ea25d5d9eca3a88f0348b46c5e3333cd6ed1a9999e55a1fe2ebd1588b56329a031876fbbeadc6830ce4658749e35aeb10f07605ef3f2f08b9c8a886f35b96d48fd4422927c78cd894747dc8e7f325856636f6969fbc389bb4a7f726c6724284e7131ae427e3b5f04e7556e9149636678e99767c49f7c7a84c343550ff70007358c0f4ce55a6c9339bae1b5525e9672be972fcc88e8b929dd8d5f2c18c09ed20e178e7e7e821551f3f4148d02f259ff23e5a5560ebdf84b68c295e272efbfc52d19fe4ef242110fffd36bb145c5e8812cc8f4ca105c732b04b31c4eb3fa576b25948cb19dfccdc0379d865c84236a2a43c448abced16537d04b9833198cc2e2e9b67d055e95ffd2ba7d8efbefb857fd39c3c407d3c1cff5a17258a130c6e5c015dbdb67ca2539683a4100490351d414b6115d3a0bf8e327143ca4974cd55aa3d2458337269c361987ea103771e5d9ee53c589824f0052df968ad023efb80272943f7e163d6d3543b3d4151b7db40fbcdb1008f4da1d19c7ed6fdc64a6cf427a7a175f00aa949faacf816d1ad713d01deb51aa1ac0227292b7a9d8417a3dd84034aa245913e0cdd9cf6cba41482a41b57bd2d78a81ad128cda4469164e9f8590ec64cd0202e02000c07606859b88de085d8ec380ad66e2fe5b651cc32b53529144fbc645e04f6e5da69a40cd8d2b0b3481fd770a36bf9417814ffe9dd45dbb6bf5839d075e4a9a1daedf93ea3b0018a737411908367a436d9ba312ae46fb6478dd19459cce8785993052cdbedd1cb553b4d7b3db886437a85d5b776d64be1051ecb8be1fdf84711be410e15659836b0a34f369c95ee8dd543d838043e3794e4fd8899b536ee2a8d1e2df4f3c7222fbdfe175e917b4930f236260f9add0e0edbfee627fb4efb6754a8623c85102ec6df3897187ae049d951b374a09dc509071291b3f743c8748e00bea0f8656b0ac862ea394138e44e76a79244edf26b86c428036ad8129f8ccfc17742fb2fa6fa1f60e7a83cc91917f5ab4c403cb067cab8013945ccba8eb19fa2ca94d1a7f21b1d6013874c84f3ea9793bdaf5b6598e2bfd194c107bf59c5c11981b95dd01903e4cdf41aae99bb5568602e034b206d9fad535c125901b4a477a4340f76468643f8c9141c1e365e941a29a5c5c9181b93487dae8418941d856246f35e3b7fb90ced8642635548ce134cc51578c53fad31c7644b0a208b86f4ebb87d1bc7f7ffc3b6688039c817f153ed85a544b70700357e301bbbcdda34cedfb396472a9fcffb4f5a3c13b9c8badc2dd99773abb05265d9040490ca8be3a3aa71d0557818bb22a8ec4ee94b1c34cea287686ba33661ec31f1a5e21ba40eb7a2b2e4d496a5ceab8192da03fa26b370284d987408469b9a21c6025c9846726312a1a36311ea21a5cc96b653e679bdb6dacb1c6819e84acf9f20abb5cddec3ffc8348a89546fe73dfd178fc139afda2aed8ebec74bc1b9125cf39340eacec7be5574678e6ca5d9fb80322c484b64d722d45d5a85dca8fcbc6d0c19d0817c3a557af49249d1a2eacc46919d86f5bc0017c6da5bf34818c594c3adde7b33cb2c78b526b30eb669f0afbc3ad95d9ba4f22b2ac473ae45ac66b60b443a159294ff69ac808bd21fa5d9cb8bba7e96f98661774865894ebe00eab1006d25c8f4b7c102edec1ba688104989167c543a2c5f797178ee490959b64f5007a574e89e820a5f5bc0b45d5f6b5891aa2f09037396ee3fa9d9d8f36e73b3dd87807802fe48211ac5d1afd4f91874627a595d1ad779904cb4c6164300d7f329b75d4aae97afed4bb6986b15cd84f21231895aeceeb12c3aa75a78787bc0f6ac66018167d4d93ca9ec65d1baf7f1bcd872439bd00904e6bd69a1b5a33ed36f91fcb977f803d91577c59ff12c2dcec3191c819465557466d1e938a4edaf6985aa9ddb52a4464e81c1304894b8c3621ca962b7c88d15ee2094d8e32afe2f24089d03184d325f4f496acf5ed4e9f4cbef5e7f1f61584bf0291993524554ea3b3921493a3e972a160bc4be3cc3c4ce770dd83742d17b10c3ca0dc80265e0e5364210ee628775c5b3546429f6091000597a06b888de3cff8fd5f8e401046c655fa1d6c2c5ead6dea764cdf2402102933e6e0237c49432cab8244ff35d455b854c7e4e677eea28a6bb1c3bbd851b8e5bbbf99b15054695cacb7d8fd31f040f4b2f712404d76b75", 0xff0}, {&(0x7f0000001840)="65f784d9da00928bdd9f75a034177c67f95e0c05c78d60783b28b20d5e72c08fef42e1070a15779e623ac836614318742f0573c1f95d96a783c12c9d8c5420796f50ef0fdf797c74789c", 0x4a}, {&(0x7f00000018c0)="5cddad75093f7196a4081f88cf2f61989737721dc72ae4b191f1885d6b98f0e3d58645a30e259b17f7d5077fb2e6c033532a2dd29f19300cdc930cd08616be04473d3b80337b111c49d6e6ff4ac7c0221ab8de7e299da44ebd6710854bf39d71d1fef981796fd324113e2a2c90405ce45c401ead327b8fdf037ef06f705d8c89e98bbb123c0f03cd6cced595cabbb816881f2c9529068e7545ab0c00418aede417d42bd950877c637aa4c01c530ddbde0b", 0xb1}], 0x8, &(0x7f0000001a00)=[@rights={{0x1c, 0x1, 0x1, [r3, r0, r1]}}], 0x20, 0x24000000}}, {{&(0x7f0000001a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001ac0), 0x0, 0x0, 0x0, 0x40002}}], 0x2, 0x40000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r7, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x4d4, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) 3.094015727s ago: executing program 0 (id=1492): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) shutdown(r0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") read$char_usb(r2, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close(0x3) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f00000002c0)="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", 0x14d, 0xffffffffffffffff) r5 = socket(0x2b, 0x80801, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000140)=0xc, 0x4) bind$unix(r5, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r6, 0x0, 0x80, 0x0, 0x6, 0x0, @local, @mcast2, 0x0, 0x0, 0x4}}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 3.044102351s ago: executing program 4 (id=1493): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000, 0x2100}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.750338216s ago: executing program 4 (id=1494): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x0, 0x6400}}], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.395970052s ago: executing program 4 (id=1495): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611148000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0xfffffffe, 0x80000000, {0xf}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x4000000) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 2.128096315s ago: executing program 4 (id=1496): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000240)={@random="05c38c886b60", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "00e9fff8fef50000000000a2"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5a, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x44011, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000540)={0x62, @tick=0x3, 0x43, {0x0, 0xfe}, 0x0, 0x0, 0x5}) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000000c0)={@dev}, 0x5) 1.939635532s ago: executing program 4 (id=1497): r0 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x2119, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x800}], 0x2, 0x40000063, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffff9, 0x30, 0x30, 0x0, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e24, @multicast2}}}, 0x118) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x16, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0x1, 0x0, 0x1}) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x68, 0x0, 0xf, 0x32, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x38}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000c40)={{0x12, 0x1, 0x0, 0xfe, 0xeb, 0x4a, 0x8, 0xaf0, 0x8201, 0x348e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x0, 0x39, 0xc6, 0x2b}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x5f, 0x8c, 0x51}}]}}]}}, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.291462699s ago: executing program 2 (id=1498): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f00000002c0)=ANY=[@ANYRES32=0x41424344, @ANYRESHEX=r0, @ANYBLOB="8002fffd9078000001fe08f989adb18d07000000"], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000180)={0x7, 0x7, 0x3}, &(0x7f0000000200)=0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000000340)=ANY=[@ANYBLOB="35b745e0b0fdfd18fcc84b7a63a5efb9a6d1f0049b8f807f19a2e40e3aa0e51c05011aeb232035ca06ad57e0e3209f09a856f7e21c4b72988815701e975dabd446f7e572e8a401e43f4f0d1a79000097ccb91badff99771d32020b1140375251c72258bcb5c017f4f173428500"/122, @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf2501000000000000000b0000000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x0, 0x6, 0x0, 0xfffffffc, 0x3}) r5 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) fallocate(r5, 0x42, 0x0, 0x100000000) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5882", 0x2) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f0000000140)=0xffffdffe) r7 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x68, 0x14, 0xf0b, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, {0x7, 0x2}, {0xb, 0xffff}, {0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x200, 0x5, 0x6, 0xd, 0x4, 0x16}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_CORR={0x10, 0x1, {0x46, 0x3, 0x109}}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c4}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r7) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$SEG6_CMD_SET_TUNSRC(r7, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x715, 0x1, 0x48f]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200088d0}, 0x4000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x2}, {0x1, 0x2e7, 0x1800}], 0x2) 862.477948ms ago: executing program 0 (id=1499): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0106fffffffffffffff00600000008000300", @ANYRES32=r1, @ANYBLOB="07005300010000000800050004"], 0x2c}, 0x1, 0x0, 0x0, 0x4009}, 0x0) 639.973398ms ago: executing program 0 (id=1500): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000980)={0x1, 0x80000000}, 0x8) bind$inet(r1, &(0x7f0000000700)={0x2, 0x0, @multicast2}, 0x10) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000780)=""/4073, 0xfe9}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xd85fd000) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000c5b000/0x3000)=nil) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x600f40) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x3) r6 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x24089, 0x80, 0x3}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x47f6, 0xb277, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40485404, &(0x7f0000000040)=0x1) socket(0x2c, 0x1, 0x5) 553.768316ms ago: executing program 3 (id=1501): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x9, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000080000000400000021"], 0x50) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x5, 0x2172, 0xffffffffffffffff, 0xeb7cf000) shmat(0x0, &(0x7f0000003000/0x3000)=nil, 0x6000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f00000000c0)="5b943a51854bc11203d1b581b7f7dc4243ec7d167fac0e383c70286a231b21b4ec05931141db048aaf31ef63110e824cd8d24a4295b001bba23bf3d2b10bd981d1c3c61af6479bc32ab2d7807e8e0825df3facf7a0232f7ac353ea422710426df4448eb9860be9ab4782e92c95700f2a69361a2bd1aa098e0f7dc217e01e8b5fd99c4bdc67d5dd3d86dbe2dde16eb60be1747dab905396b7561da1033727ee4dc690c9f800ebb7387f11740bced6a0bd5b2030299c9bd7432ba23973", 0xb47, r6}, 0x38) r7 = syz_io_uring_setup(0x3c, &(0x7f00000007c0)={0x0, 0xa56e, 0x13500, 0xf7fffffe, 0x377}, &(0x7f0000000240), &(0x7f0000000180)) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10) socket$netlink(0x10, 0x3, 0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x21, &(0x7f0000000440)=r2, 0x1) 421.544788ms ago: executing program 0 (id=1502): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={0x170, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x154, 0x8, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0xb0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x88, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x4}]}]}, {0x4}, {0x4}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 215.132251ms ago: executing program 0 (id=1503): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={0x2f4, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x2d0, 0x8, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x210, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x1e8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 64.530778ms ago: executing program 0 (id=1504): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x0, 0x0}, &(0x7f0000000380)="379374c96ee3", 0x0, 0xfff5, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=1505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b2fd2c5}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (fail_nth: 9) kernel console output (not intermixed with test programs): r: syz [ 419.207091][ T5891] usb 5-1: SerialNumber: syz [ 419.228427][ T5891] usb 5-1: config 0 descriptor?? [ 419.234690][ T5948] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 419.590658][ T5948] usb 3-1: config 0 has no interfaces? [ 419.625071][ T9767] delete_channel: no stack [ 420.079397][ T7169] usb 2-1: Firmware: major: 159, minor: 135, hardware type: UNKNOWN (69) [ 420.253787][ T5948] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 420.267039][ T7169] usb 2-1: failed to fetch extended address, random address set [ 420.275613][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.321893][ T7169] usb 2-1: atusb_probe: initialization failed, error = -524 [ 420.343709][ T5948] usb 3-1: Product: syz [ 420.351352][ T5948] usb 3-1: Manufacturer: syz [ 420.365245][ T7169] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 420.381799][ T5948] usb 3-1: SerialNumber: syz [ 420.391896][ T7169] usb 2-1: USB disconnect, device number 83 [ 420.405077][ T5948] usb 3-1: config 0 descriptor?? [ 420.604686][ T5891] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 420.744770][ T5891] usb 1-1: device descriptor read/64, error -71 [ 420.994770][ T5891] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 421.125083][ T52] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 421.144644][ T5891] usb 1-1: device descriptor read/64, error -71 [ 421.254966][ T5891] usb usb1-port1: attempt power cycle [ 421.308818][ T52] usb 2-1: config 0 has no interfaces? [ 421.324040][ T52] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 421.342753][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.352505][ T52] usb 2-1: Product: syz [ 421.360489][ T52] usb 2-1: Manufacturer: syz [ 421.369083][ T52] usb 2-1: SerialNumber: syz [ 421.388084][ T52] usb 2-1: config 0 descriptor?? [ 421.434379][ T5892] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 421.594428][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 421.604706][ T5891] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 421.649279][ T5891] usb 1-1: device descriptor read/8, error -71 [ 421.658157][ T5892] usb 4-1: config 1 has an invalid interface number: 233 but max is 0 [ 421.668074][ T5892] usb 4-1: config 1 has no interface number 0 [ 421.674604][ T5892] usb 4-1: config 1 interface 233 altsetting 250 bulk endpoint 0x9 has invalid maxpacket 8 [ 421.694698][ T5892] usb 4-1: config 1 interface 233 has no altsetting 0 [ 421.717089][ T5892] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=34.ac [ 421.726876][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.743680][ T5892] usb 4-1: Product: syz [ 421.748149][ T5892] usb 4-1: Manufacturer: syz [ 421.752907][ T5892] usb 4-1: SerialNumber: syz [ 421.765131][ T9763] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 421.928969][ T5891] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 422.083916][ T52] usb 5-1: USB disconnect, device number 90 [ 422.091466][ T9763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.100163][ T5891] usb 1-1: device descriptor read/8, error -71 [ 422.124620][ T9763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.194834][ T5891] usb usb1-port1: unable to enumerate USB device [ 422.260527][ T5892] imon_raw 4-1:1.233: IR endpoint missing [ 422.299388][ T5892] usb 4-1: USB disconnect, device number 101 [ 422.392215][ T5948] usb 3-1: USB disconnect, device number 100 [ 422.658747][ T9785] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1222'. [ 424.854860][ T5948] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 424.994596][ T5948] usb 3-1: device descriptor read/64, error -71 [ 425.154297][ T5891] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 425.246195][ T5892] usb 2-1: USB disconnect, device number 84 [ 425.277086][ T5948] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 425.314865][ T5891] usb 1-1: Using ep0 maxpacket: 16 [ 425.343249][ T5891] usb 1-1: config 0 has no interfaces? [ 425.362228][ T5891] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 425.411361][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.444310][ T5948] usb 3-1: device descriptor read/64, error -71 [ 425.462725][ T5891] usb 1-1: Product: syz [ 425.496897][ T5891] usb 1-1: Manufacturer: syz [ 425.537074][ T5891] usb 1-1: SerialNumber: syz [ 425.567812][ T5891] usb 1-1: config 0 descriptor?? [ 425.589026][ T5948] usb usb3-port1: attempt power cycle [ 425.824465][ T9806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.854884][ T9806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.057032][ T5948] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 426.150902][ T5948] usb 3-1: device descriptor read/8, error -71 [ 426.154385][ T52] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 426.318511][ T52] usb 2-1: config 0 has no interfaces? [ 426.387076][ T52] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 426.410340][ T5948] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 426.425786][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.444765][ T52] usb 2-1: Product: syz [ 426.451765][ T52] usb 2-1: Manufacturer: syz [ 426.466870][ T52] usb 2-1: SerialNumber: syz [ 426.487067][ T5948] usb 3-1: device descriptor read/8, error -71 [ 426.500738][ T52] usb 2-1: config 0 descriptor?? [ 426.697107][ T5948] usb usb3-port1: unable to enumerate USB device [ 427.345489][ T7185] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 427.471126][ T52] usb 1-1: USB disconnect, device number 100 [ 427.545703][ T7185] usb 4-1: device descriptor read/64, error -71 [ 427.794427][ T7185] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 427.803696][ T9833] delete_channel: no stack [ 428.037966][ T7185] usb 4-1: device descriptor read/64, error -71 [ 428.109665][ T9838] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1236'. [ 428.315922][ T7185] usb usb4-port1: attempt power cycle [ 428.421606][ T5891] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 428.574310][ T5891] usb 5-1: device descriptor read/64, error -71 [ 428.590960][ T9844] delete_channel: no stack [ 428.766429][ T7185] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 428.879920][ T5891] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 428.908142][ T9848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1238'. [ 428.971873][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1238'. [ 429.021864][ T7185] usb 4-1: device descriptor read/8, error -71 [ 429.034465][ T5891] usb 5-1: device descriptor read/64, error -71 [ 429.124428][ T52] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 429.154560][ T5891] usb usb5-port1: attempt power cycle [ 429.192123][ T7169] usb 2-1: USB disconnect, device number 85 [ 429.314497][ T7185] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 429.322414][ T52] usb 1-1: device descriptor read/64, error -71 [ 429.356179][ T7185] usb 4-1: device descriptor read/8, error -71 [ 429.399305][ T9842] could not allocate digest TFM handle sha512-ce [ 429.465155][ T7185] usb usb4-port1: unable to enumerate USB device [ 429.515285][ T30] audit: type=1326 audit(1743437341.560:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 429.538283][ T5891] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 429.604653][ T30] audit: type=1326 audit(1743437341.560:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 429.630539][ T5891] usb 5-1: device descriptor read/8, error -71 [ 429.658112][ T52] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 429.687464][ T30] audit: type=1326 audit(1743437341.560:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 430.054837][ T5891] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 430.055283][ T52] usb 1-1: device descriptor read/64, error -71 [ 430.120455][ T5891] usb 5-1: device descriptor read/8, error -71 [ 430.168776][ T9823] delete_channel: no stack [ 430.173390][ T30] audit: type=1326 audit(1743437341.570:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 430.184565][ T5892] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 430.206592][ T52] usb usb1-port1: attempt power cycle [ 430.263431][ T30] audit: type=1326 audit(1743437341.570:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 430.305656][ T5891] usb usb5-port1: unable to enumerate USB device [ 430.375584][ T5892] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 430.400218][ T5892] usb 3-1: config 0 has no interfaces? [ 430.417346][ T5892] usb 3-1: config 0 has no interfaces? [ 430.445377][ T5892] usb 3-1: config 0 has no interfaces? [ 430.462315][ T5892] usb 3-1: config 0 has no interfaces? [ 430.472855][ T5892] usb 3-1: config 0 has no interfaces? [ 430.499581][ T30] audit: type=1326 audit(1743437341.570:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 430.534792][ T5892] usb 3-1: config 0 has no interfaces? [ 430.546453][ T5892] usb 3-1: config 0 has no interfaces? [ 430.565463][ T5892] usb 3-1: config 0 has no interfaces? [ 430.574615][ T52] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 430.606015][ T30] audit: type=1326 audit(1743437341.570:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 430.759459][ T52] usb 1-1: device descriptor read/8, error -71 [ 430.798190][ T30] audit: type=1326 audit(1743437341.620:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 430.823385][ T5892] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 430.849035][ T5892] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 430.859099][ T5892] usb 3-1: Product: syz [ 430.864165][ T5892] usb 3-1: Manufacturer: syz [ 430.877583][ T5892] usb 3-1: SerialNumber: syz [ 430.883361][ T9867] macvtap0: entered promiscuous mode [ 430.897414][ T9867] veth0_macvtap: entered promiscuous mode [ 430.903289][ T5892] usb 3-1: config 0 descriptor?? [ 430.910218][ T30] audit: type=1326 audit(1743437341.620:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 430.964502][ T9867] team0: Device macvtap0 failed to register rx_handler [ 431.004684][ T30] audit: type=1326 audit(1743437341.620:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 431.144602][ T52] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 431.161193][ T9867] veth0_macvtap: left promiscuous mode [ 431.179727][ T5892] usb 3-1: USB disconnect, device number 105 [ 431.222236][ T52] usb 1-1: device descriptor read/8, error -71 [ 431.344426][ T5891] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 431.465040][ T52] usb usb1-port1: unable to enumerate USB device [ 431.514471][ T5891] usb 4-1: device descriptor read/64, error -71 [ 431.664599][ T5889] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 431.686604][ T9875] mmap: syz.0.1248 (9875): VmData 37740544 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 431.844344][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 431.851838][ T5889] usb 5-1: config 0 has no interfaces? [ 431.859656][ T5889] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 431.869024][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.877239][ T5889] usb 5-1: Product: syz [ 431.890397][ T5889] usb 5-1: Manufacturer: syz [ 431.895744][ T5891] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 431.925148][ T5889] usb 5-1: SerialNumber: syz [ 431.944301][ T52] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 432.044320][ T5891] usb 4-1: device descriptor read/64, error -71 [ 432.136923][ T5889] usb 5-1: config 0 descriptor?? [ 432.195632][ T9882] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1250'. [ 432.304867][ T5891] usb usb4-port1: attempt power cycle [ 432.447337][ T9872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.458930][ T9872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.467380][ T52] usb 2-1: config 0 has no interfaces? [ 432.477878][ T52] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 432.487232][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.504737][ T52] usb 2-1: Product: syz [ 432.509081][ T52] usb 2-1: Manufacturer: syz [ 432.513676][ T52] usb 2-1: SerialNumber: syz [ 432.544091][ T52] usb 2-1: config 0 descriptor?? [ 433.374845][ T9895] delete_channel: no stack [ 433.379532][ T5891] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 433.505626][ T52] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 433.606618][ T5891] usb 4-1: device descriptor read/8, error -71 [ 433.666372][ T52] usb 3-1: config 0 has no interfaces? [ 433.679274][ T52] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 433.688811][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.700272][ T52] usb 3-1: Product: syz [ 433.716292][ T52] usb 3-1: Manufacturer: syz [ 433.742836][ T52] usb 3-1: SerialNumber: syz [ 433.904639][ T7169] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 433.912523][ T5891] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 433.937981][ T52] usb 3-1: config 0 descriptor?? [ 434.010831][ T5948] usb 5-1: USB disconnect, device number 95 [ 434.039375][ T979] usb 2-1: USB disconnect, device number 86 [ 434.074852][ T7169] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 434.092792][ T7169] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 434.108479][ T7169] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 434.126647][ T7169] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.433999][ T9895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.447396][ T9895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.496963][ T5891] usb 4-1: device descriptor read/8, error -71 [ 434.614902][ T5891] usb usb4-port1: unable to enumerate USB device [ 434.623083][ T9901] netlink: 'syz.1.1253': attribute type 10 has an invalid length. [ 434.632582][ T9901] team0: Device veth1_vlan failed to register rx_handler [ 434.736393][ T9901] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 435.396121][ T9908] FAULT_INJECTION: forcing a failure. [ 435.396121][ T9908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.410793][ T9908] CPU: 0 UID: 0 PID: 9908 Comm: syz.3.1256 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 435.410816][ T9908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 435.410825][ T9908] Call Trace: [ 435.410832][ T9908] [ 435.410838][ T9908] dump_stack_lvl+0x241/0x360 [ 435.410866][ T9908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.410888][ T9908] ? __pfx__printk+0x10/0x10 [ 435.410920][ T9908] should_fail_ex+0x424/0x570 [ 435.410948][ T9908] fpu__restore_sig+0x1c3/0x11d0 [ 435.410967][ T9908] ? __lock_acquire+0xad5/0xd80 [ 435.410983][ T9908] ? __pfx_fpu__restore_sig+0x10/0x10 [ 435.411019][ T9908] restore_sigcontext+0x685/0x7d0 [ 435.411038][ T9908] ? __pfx_restore_sigcontext+0x10/0x10 [ 435.411080][ T9908] __do_sys_rt_sigreturn+0x1bf/0x290 [ 435.411097][ T9908] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 435.411125][ T9908] ? do_syscall_64+0xb6/0x230 [ 435.411141][ T9908] do_syscall_64+0xf3/0x230 [ 435.411155][ T9908] ? clear_bhb_loop+0x45/0xa0 [ 435.411172][ T9908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.411186][ T9908] RIP: 0033:0x7f7615f8d167 [ 435.411199][ T9908] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 435.411212][ T9908] RSP: 002b:00007f7616d0e038 EFLAGS: 00000246 [ 435.411226][ T9908] RAX: 00000000000001c1 RBX: 00007f76161a5fa0 RCX: 00007f7615f8d169 [ 435.411237][ T9908] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001080 [ 435.411246][ T9908] RBP: 00007f7616d0e090 R08: 0000000000000001 R09: 0000000000000000 [ 435.411255][ T9908] R10: 0000200000001100 R11: 0000000000000246 R12: 0000000000000002 [ 435.411265][ T9908] R13: 0000000000000000 R14: 00007f76161a5fa0 R15: 00007f76162cfa28 [ 435.411286][ T9908] [ 435.774093][ T5891] usb 3-1: USB disconnect, device number 106 [ 436.034895][ T9910] netlink: 'syz.2.1258': attribute type 83 has an invalid length. [ 436.166497][ T7169] usb 1-1: USB disconnect, device number 105 [ 436.404835][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1259'. [ 436.707107][ T9926] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1262'. [ 436.759197][ T9926] veth9: entered allmulticast mode [ 436.957864][ T9932] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1263'. [ 437.521341][ T7169] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 437.553567][ T9943] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 437.714654][ T7169] usb 4-1: Using ep0 maxpacket: 16 [ 437.722554][ T7169] usb 4-1: config 0 has no interfaces? [ 437.732721][ T7169] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 437.746540][ T7169] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.778892][ T7169] usb 4-1: Product: syz [ 437.824381][ T7169] usb 4-1: Manufacturer: syz [ 437.838104][ T7169] usb 4-1: SerialNumber: syz [ 437.854329][ T979] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 438.054952][ T7169] usb 4-1: config 0 descriptor?? [ 438.216471][ T979] usb 3-1: config index 0 descriptor too short (expected 8192, got 77) [ 438.280046][ T979] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.315659][ T9939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.348805][ T979] usb 3-1: config 0 has no interfaces? [ 438.365199][ T9939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.392711][ T979] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 438.406040][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.416456][ T979] usb 3-1: Product: syz [ 438.420676][ T979] usb 3-1: Manufacturer: syz [ 438.425900][ T979] usb 3-1: SerialNumber: syz [ 438.441008][ T979] usb 3-1: config 0 descriptor?? [ 438.583463][ T9953] delete_channel: no stack [ 438.657770][ T9944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1267'. [ 439.004841][ T5889] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 439.139354][ T9957] FAULT_INJECTION: forcing a failure. [ 439.139354][ T9957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.164947][ T9957] CPU: 0 UID: 0 PID: 9957 Comm: syz.1.1270 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 439.164982][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 439.164996][ T9957] Call Trace: [ 439.165002][ T9957] [ 439.165009][ T9957] dump_stack_lvl+0x241/0x360 [ 439.165037][ T9957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.165058][ T9957] ? __pfx__printk+0x10/0x10 [ 439.165088][ T9957] should_fail_ex+0x424/0x570 [ 439.165118][ T9957] _copy_from_user+0x2d/0xb0 [ 439.165139][ T9957] snd_seq_oss_write+0x397/0xc10 [ 439.165172][ T9957] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 439.165188][ T9957] ? end_current_label_crit_section+0x151/0x180 [ 439.165210][ T9957] ? common_file_perm+0x1a6/0x210 [ 439.165232][ T9957] ? bpf_lsm_file_permission+0x9/0x10 [ 439.165251][ T9957] odev_write+0x5b/0x80 [ 439.165265][ T9957] ? __pfx_odev_write+0x10/0x10 [ 439.165279][ T9957] vfs_write+0x2bc/0xd10 [ 439.165309][ T9957] ? __pfx_vfs_write+0x10/0x10 [ 439.165329][ T9957] ? __fget_files+0x2a/0x420 [ 439.165346][ T9957] ? __fget_files+0x2a/0x420 [ 439.165364][ T9957] ? __fget_files+0x39d/0x420 [ 439.165381][ T9957] ? __fget_files+0x2a/0x420 [ 439.165405][ T9957] ksys_write+0x19d/0x2d0 [ 439.165428][ T9957] ? __pfx_ksys_write+0x10/0x10 [ 439.165453][ T9957] ? do_syscall_64+0xb6/0x230 [ 439.165470][ T9957] do_syscall_64+0xf3/0x230 [ 439.165484][ T9957] ? clear_bhb_loop+0x45/0xa0 [ 439.165501][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.165516][ T9957] RIP: 0033:0x7f178d18d169 [ 439.165529][ T9957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.165541][ T9957] RSP: 002b:00007f178df3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 439.165557][ T9957] RAX: ffffffffffffffda RBX: 00007f178d3a5fa0 RCX: 00007f178d18d169 [ 439.165567][ T9957] RDX: 000000000000023e RSI: 0000200000000700 RDI: 0000000000000003 [ 439.165577][ T9957] RBP: 00007f178df3e090 R08: 0000000000000000 R09: 0000000000000000 [ 439.165585][ T9957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 439.165593][ T9957] R13: 0000000000000000 R14: 00007f178d3a5fa0 R15: 00007f178d4cfa28 [ 439.165622][ T9957] [ 439.567833][ T5889] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 439.581294][ T5889] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 439.686643][ T5889] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 439.760632][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 439.760655][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.760682][ T30] audit: type=1326 audit(1743437351.820:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9961 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 439.781948][ T30] audit: type=1326 audit(1743437351.820:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9961 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 439.852295][ T30] audit: type=1326 audit(1743437351.870:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9961 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 439.923934][ T30] audit: type=1326 audit(1743437351.870:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9961 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 439.990734][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.002685][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.012528][ T30] audit: type=1326 audit(1743437351.870:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9961 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 440.035783][ T30] audit: type=1326 audit(1743437351.870:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9961 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 440.058800][ T30] audit: type=1326 audit(1743437351.870:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9961 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 440.083878][ T30] audit: type=1326 audit(1743437351.870:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9961 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f178d18bad0 code=0x7ffc0000 [ 440.118595][ T9953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.127814][ T9953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.191577][ T30] audit: type=1326 audit(1743437351.870:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9961 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 440.226974][ T9964] fuse: Bad value for 'fd' [ 440.320672][ T7169] usb 4-1: USB disconnect, device number 110 [ 440.343525][ T30] audit: type=1326 audit(1743437351.870:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9961 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 440.575495][ T979] usb 3-1: USB disconnect, device number 107 [ 440.773455][ T9974] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 440.926133][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1276'. [ 440.981466][ T9974] veth11: entered promiscuous mode [ 441.702893][ T52] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 442.004338][ T52] usb 1-1: Using ep0 maxpacket: 16 [ 442.115128][ T9991] delete_channel: no stack [ 442.119753][ T52] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 442.139877][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.154444][ T52] usb 1-1: Product: syz [ 442.158705][ T52] usb 1-1: Manufacturer: syz [ 442.169677][ T52] usb 1-1: SerialNumber: syz [ 442.188274][ T52] usb 1-1: config 0 descriptor?? [ 442.344506][ T7169] usb 5-1: USB disconnect, device number 96 [ 442.548658][ T52] speedtch 1-1:0.0: speedtch_bind: wrong device class 68 [ 442.563759][ T52] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 442.597058][ T5889] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 442.618846][ T52] usb 1-1: USB disconnect, device number 106 [ 442.683689][ T9997] netlink: 'syz.4.1282': attribute type 10 has an invalid length. [ 442.696135][ T9997] team0: Device veth1_vlan failed to register rx_handler [ 442.726345][ T9997] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 442.951355][ T5889] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 442.971639][ T5889] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 442.982140][ T5889] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 443.028595][ T5889] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 443.040845][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.080892][ T5889] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 443.127789][T10000] netlink: 320 bytes leftover after parsing attributes in process `syz.1.1283'. [ 443.167118][ T5889] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 443.339027][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.541659][ T9990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.553851][ T9990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.554544][ T5889] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 443.594917][ T979] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 443.734450][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 443.750790][ T5889] usb 1-1: config 0 has no interfaces? [ 443.769519][ T979] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.783087][ T5889] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 443.788215][ T979] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 443.792894][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.813609][ T5889] usb 1-1: Product: syz [ 443.822731][ T5889] usb 1-1: Manufacturer: syz [ 443.837688][ T5889] usb 1-1: SerialNumber: syz [ 443.854613][ T5889] usb 1-1: config 0 descriptor?? [ 443.863084][ T979] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 443.889451][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.919550][ T979] usb 2-1: Product: syz [ 443.932044][ T979] usb 2-1: Manufacturer: syz [ 443.949430][ T979] usb 2-1: SerialNumber: syz [ 444.114080][T10002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.128101][T10002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.189144][T10006] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 444.216036][ T7169] usb 1-1: USB disconnect, device number 107 [ 444.300727][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1287'. [ 444.310540][T10009] netlink: 'syz.3.1287': attribute type 1 has an invalid length. [ 444.318937][T10009] netlink: 'syz.3.1287': attribute type 2 has an invalid length. [ 444.504548][ T7180] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 444.650063][ T5889] usb 3-1: USB disconnect, device number 108 [ 444.667037][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1289'. [ 444.706106][ T7180] usb 5-1: config index 0 descriptor too short (expected 8192, got 77) [ 444.725368][ T7180] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.762592][ T7180] usb 5-1: config 0 has no interfaces? [ 444.778282][ T7180] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 444.806616][ T7180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.816832][ T7180] usb 5-1: Product: syz [ 444.832846][ T7180] usb 5-1: Manufacturer: syz [ 444.845496][ T7180] usb 5-1: SerialNumber: syz [ 444.854867][ T7180] usb 5-1: config 0 descriptor?? [ 444.991156][T10004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.004728][T10004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.023044][ T979] cdc_ncm 2-1:1.0: bind() failure [ 445.051745][ T979] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 445.076964][ T979] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 445.092767][ T979] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 445.116884][ T979] usb 2-1: USB disconnect, device number 87 [ 445.124130][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1286'. [ 445.703366][T10035] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 446.104344][ T5892] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 446.266302][ T5892] usb 2-1: config index 0 descriptor too short (expected 8192, got 77) [ 446.302329][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.373906][ T5892] usb 2-1: config 0 has no interfaces? [ 446.400879][ T5892] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 446.434352][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.499421][ T5892] usb 2-1: Product: syz [ 446.512751][ T5892] usb 2-1: Manufacturer: syz [ 446.566310][ T5892] usb 2-1: SerialNumber: syz [ 446.609078][ T5892] usb 2-1: config 0 descriptor?? [ 446.846920][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1294'. [ 446.958470][T10046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1297'. [ 447.148392][ T7180] usb 5-1: USB disconnect, device number 97 [ 447.614505][ T5889] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 447.714583][T10059] delete_channel: no stack [ 447.886964][ T5889] usb 5-1: unable to get BOS descriptor or descriptor too short [ 447.895350][ T5889] usb 5-1: not running at top speed; connect to a high speed hub [ 447.944831][ T5889] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 447.958033][ T5889] usb 5-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 447.968411][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.977071][ T5889] usb 5-1: Product: syz [ 447.981389][ T5889] usb 5-1: Manufacturer: syz [ 448.023074][ T5889] usb 5-1: SerialNumber: syz [ 448.064357][ T52] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 448.214480][ T52] usb 1-1: Using ep0 maxpacket: 16 [ 448.296415][T10065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.315601][ T52] usb 1-1: config 0 has no interfaces? [ 448.324808][ T52] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 448.334312][ T7186] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 448.344954][T10065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.353483][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.370995][ T52] usb 1-1: Product: syz [ 448.394380][ T52] usb 1-1: Manufacturer: syz [ 448.399245][ T52] usb 1-1: SerialNumber: syz [ 448.408557][ T52] usb 1-1: config 0 descriptor?? [ 448.489561][T10070] delete_channel: no stack [ 448.533633][ T7186] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 448.564860][ T5889] usb 5-1: USB disconnect, device number 98 [ 448.760421][ T7186] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 448.773991][T10061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.796052][ T5892] usb 2-1: USB disconnect, device number 88 [ 448.807740][T10061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.051420][T10079] netlink: 'syz.4.1304': attribute type 10 has an invalid length. [ 449.112633][T10080] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 449.247038][ T7186] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 449.268563][ T7180] usb 1-1: USB disconnect, device number 108 [ 449.299300][T10079] team0: Device veth1_vlan failed to register rx_handler [ 449.414334][ T7186] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 449.445892][ T7186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.454309][ T5889] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 449.470044][ T7186] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 449.603082][ T7186] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 449.628001][ T5889] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 449.721516][T10085] netlink: 'syz.1.1305': attribute type 10 has an invalid length. [ 449.730952][T10085] team0: Device veth1_vlan failed to register rx_handler [ 449.792482][T10086] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 450.069244][ T5889] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 450.118596][ T5889] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 450.140377][ T5889] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 450.187452][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.352354][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 450.577598][T10059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.590627][T10059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.648936][ T5889] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 451.218970][T10070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.228839][T10070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.346092][ T5889] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 451.692927][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 452.094563][ T5889] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 452.156361][T10099] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 452.268964][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 452.291532][ T5889] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 452.347922][ T5889] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 452.455855][ T5889] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 452.473346][ T5889] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.494557][ T5889] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 452.503949][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.512308][ T7186] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 452.676356][ T7186] usb 2-1: config index 0 descriptor too short (expected 8192, got 77) [ 452.685034][ T7186] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.710753][ T7180] usb 3-1: USB disconnect, device number 109 [ 452.741774][ T5889] usb 5-1: GET_CAPABILITIES returned 0 [ 452.776585][ T5889] usbtmc 5-1:16.0: can't read capabilities [ 452.782618][ T7186] usb 2-1: config 0 has no interfaces? [ 452.793639][ T7186] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 452.817142][ T7186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.854333][ T7186] usb 2-1: Product: syz [ 452.884764][ T7186] usb 2-1: Manufacturer: syz [ 452.899716][ T7186] usb 2-1: SerialNumber: syz [ 452.916784][ T7186] usb 2-1: config 0 descriptor?? [ 452.971718][T10094] tipc: Failed to remove unknown binding: 66,1,1/0:1719097907/1719097909 [ 453.016344][ T5889] usb 5-1: USB disconnect, device number 99 [ 453.157159][T10100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1309'. [ 453.435843][ T7180] usb 4-1: USB disconnect, device number 111 [ 453.508955][T10109] fuse: Bad value for 'fd' [ 453.664386][ T5889] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 453.846930][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.875107][ T5889] usb 3-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 453.898432][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.913267][ T5889] usb 3-1: config 0 descriptor?? [ 453.984357][ T7175] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 454.124402][ T5889] usbhid 3-1:0.0: can't add hid device: -71 [ 454.132680][ T5889] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 454.142334][ T7175] usb 5-1: Using ep0 maxpacket: 16 [ 454.161941][ T5889] usb 3-1: USB disconnect, device number 110 [ 454.171309][ T7175] usb 5-1: config 0 has no interfaces? [ 454.191428][ T7175] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 454.203227][ T7175] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.214161][ T7175] usb 5-1: Product: syz [ 454.219771][ T7175] usb 5-1: Manufacturer: syz [ 454.227153][ T7175] usb 5-1: SerialNumber: syz [ 454.234644][ T7175] usb 5-1: config 0 descriptor?? [ 454.453283][T10117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.463703][T10117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.986986][T10136] netlink: 'syz.2.1321': attribute type 10 has an invalid length. [ 455.010104][T10136] team0: Device veth1_vlan failed to register rx_handler [ 455.024090][T10136] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 455.273794][ T7186] usb 2-1: USB disconnect, device number 89 [ 455.301623][ T7180] usb 5-1: USB disconnect, device number 100 [ 456.211694][T10141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.326537][T10141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.479909][ T7180] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 457.053921][T10153] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1326'. [ 457.244117][T10155] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 457.270142][T10155] team0: Port device batadv2 added [ 457.394490][ T7175] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 457.410816][T10159] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 457.417734][T10159] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 457.436902][T10159] vhci_hcd vhci_hcd.0: Device attached [ 457.452516][T10160] vhci_hcd: connection closed [ 457.461792][ T3020] vhci_hcd: stop threads [ 457.485459][ T3020] vhci_hcd: release socket [ 457.490588][ T3020] vhci_hcd: disconnect device [ 457.554530][ T7175] usb 5-1: Using ep0 maxpacket: 8 [ 457.570616][ T7175] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 457.589452][ T7175] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 457.602172][ T7175] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 457.664592][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1329'. [ 457.772732][ T7175] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 457.836789][ T7175] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 457.862274][ T7175] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.133833][ T7175] usb 5-1: GET_CAPABILITIES returned 0 [ 458.156100][ T7175] usbtmc 5-1:16.0: can't read capabilities [ 458.338678][T10153] tipc: Failed to remove unknown binding: 66,1,1/0:405320362/405320364 [ 458.370889][ T7169] usb 5-1: USB disconnect, device number 101 [ 459.054457][ T7169] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 459.303720][ T7169] usb 4-1: Using ep0 maxpacket: 16 [ 459.325905][ T7169] usb 4-1: config 0 has no interfaces? [ 459.337855][ T7169] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 459.347426][ T7169] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.370087][T10182] FAULT_INJECTION: forcing a failure. [ 459.370087][T10182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.384774][ T7169] usb 4-1: Product: syz [ 459.392614][ T7169] usb 4-1: Manufacturer: syz [ 459.411263][ T7169] usb 4-1: SerialNumber: syz [ 459.422025][T10182] CPU: 0 UID: 0 PID: 10182 Comm: syz.4.1336 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 459.422056][T10182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 459.422069][T10182] Call Trace: [ 459.422078][T10182] [ 459.422087][T10182] dump_stack_lvl+0x241/0x360 [ 459.422134][T10182] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.422165][T10182] ? __pfx__printk+0x10/0x10 [ 459.422206][T10182] should_fail_ex+0x424/0x570 [ 459.422245][T10182] _copy_from_iter+0x211/0x1c70 [ 459.422446][T10182] ? __build_skb_around+0x247/0x3d0 [ 459.422482][T10182] ? __alloc_skb+0x298/0x480 [ 459.422502][T10182] ? __pfx__copy_from_iter+0x10/0x10 [ 459.422523][T10182] ? __pfx___alloc_skb+0x10/0x10 [ 459.422547][T10182] ? skb_put+0x114/0x1f0 [ 459.422571][T10182] netlink_sendmsg+0x73c/0xcd0 [ 459.422600][T10182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.422622][T10182] ? aa_sock_msg_perm+0x91/0x160 [ 459.422647][T10182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.422663][T10182] __sock_sendmsg+0x221/0x270 [ 459.422684][T10182] ____sys_sendmsg+0x523/0x860 [ 459.422712][T10182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.422733][T10182] ? __fget_files+0x2a/0x420 [ 459.422753][T10182] ? __fget_files+0x2a/0x420 [ 459.422777][T10182] __sys_sendmsg+0x271/0x360 [ 459.422808][T10182] ? __pfx___sys_sendmsg+0x10/0x10 [ 459.422829][T10182] ? trace_sched_exit_tp+0x3c/0x120 [ 459.422866][T10182] ? __pfx___schedule+0x10/0x10 [ 459.422902][T10182] ? do_syscall_64+0xb6/0x230 [ 459.422919][T10182] do_syscall_64+0xf3/0x230 [ 459.422934][T10182] ? clear_bhb_loop+0x45/0xa0 [ 459.422951][T10182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.422966][T10182] RIP: 0033:0x7fa125f8d169 [ 459.422981][T10182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.422995][T10182] RSP: 002b:00007fa126d94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.423012][T10182] RAX: ffffffffffffffda RBX: 00007fa1261a5fa0 RCX: 00007fa125f8d169 [ 459.423024][T10182] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 459.423034][T10182] RBP: 00007fa126d94090 R08: 0000000000000000 R09: 0000000000000000 [ 459.423043][T10182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.423053][T10182] R13: 0000000000000000 R14: 00007fa1261a5fa0 R15: 00007fa1262cfa28 [ 459.423075][T10182] [ 459.661965][ T7169] usb 4-1: config 0 descriptor?? [ 459.919931][T10178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.959538][T10178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.047053][T10178] fuse: Bad value for 'fd' [ 460.128323][ T5891] usb 4-1: USB disconnect, device number 112 [ 460.481922][ T7180] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 460.661179][ T7180] usb 2-1: config 0 has no interfaces? [ 460.692553][ T7180] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 460.706718][ T7180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.745587][ T7180] usb 2-1: Product: syz [ 460.768990][ T7180] usb 2-1: Manufacturer: syz [ 460.797309][ T7180] usb 2-1: SerialNumber: syz [ 460.861748][ T7180] usb 2-1: config 0 descriptor?? [ 460.883087][T10191] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1338'. [ 461.276073][T10197] FAULT_INJECTION: forcing a failure. [ 461.276073][T10197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.294595][T10197] CPU: 1 UID: 0 PID: 10197 Comm: syz.2.1339 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 461.294629][T10197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 461.294643][T10197] Call Trace: [ 461.294653][T10197] [ 461.294661][T10197] dump_stack_lvl+0x241/0x360 [ 461.294782][T10197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.294814][T10197] ? __pfx__printk+0x10/0x10 [ 461.294861][T10197] should_fail_ex+0x424/0x570 [ 461.294900][T10197] _copy_from_user+0x2d/0xb0 [ 461.294968][T10197] restore_altstack+0x9a/0x160 [ 461.295000][T10197] ? __pfx_restore_altstack+0x10/0x10 [ 461.295031][T10197] __do_sys_rt_sigreturn+0x19a/0x290 [ 461.295048][T10197] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 461.295078][T10197] ? do_syscall_64+0xb6/0x230 [ 461.295096][T10197] do_syscall_64+0xf3/0x230 [ 461.295110][T10197] ? clear_bhb_loop+0x45/0xa0 [ 461.295128][T10197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.295143][T10197] RIP: 0033:0x7fe1c5329359 [ 461.295158][T10197] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 461.295172][T10197] RSP: 002b:00007fe1c619fa80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 461.295189][T10197] RAX: ffffffffffffffda RBX: 00007fe1c55a5fa0 RCX: 00007fe1c5329359 [ 461.295200][T10197] RDX: 00007fe1c619fa80 RSI: 00007fe1c619fbb0 RDI: 0000000000000021 [ 461.295211][T10197] RBP: 00007fe1c61a0090 R08: 0000000000000001 R09: 0000000000000000 [ 461.295221][T10197] R10: 0000200000001100 R11: 0000000000000202 R12: 0000000000000002 [ 461.295231][T10197] R13: 0000000000000000 R14: 00007fe1c55a5fa0 R15: 00007fe1c56cfa28 [ 461.295253][T10197] [ 461.784310][ T7175] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 461.794820][ T5892] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 461.964669][ T7175] usb 4-1: config 0 has no interfaces? [ 461.970480][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 461.978978][ T5892] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 461.990949][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 462.069180][ T7175] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 462.152895][ T5892] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 462.208941][ T7175] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.228120][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 462.247468][ T7175] usb 4-1: Product: syz [ 462.255406][ T7175] usb 4-1: Manufacturer: syz [ 462.260333][ T7175] usb 4-1: SerialNumber: syz [ 462.265261][ T5892] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 462.281749][ T7175] usb 4-1: config 0 descriptor?? [ 462.287177][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.316228][ T5892] usb 1-1: config 0 descriptor?? [ 462.322710][T10200] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 462.609405][ T5892] usb 1-1: USB disconnect, device number 109 [ 462.615690][ T5843] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 463.044157][ T5891] usb 2-1: USB disconnect, device number 91 [ 463.091045][T10212] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1345'. [ 463.584822][T10217] delete_channel: no stack [ 463.825760][ T7175] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 463.964312][ T5892] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 463.984279][ T7175] usb 3-1: Using ep0 maxpacket: 8 [ 463.991213][ T7175] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 464.004437][ T7186] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 464.030682][ T7175] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 464.154773][ T52] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 464.181825][ T7175] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 464.198593][ T7175] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 464.213215][ T7175] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 464.228118][ T7175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.268030][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 464.275420][ T7186] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 464.293021][ T5892] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 464.302214][ T5892] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 464.311342][ T7186] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 464.323702][ T5892] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 464.332805][ T7186] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 464.346174][ T52] usb 1-1: Using ep0 maxpacket: 16 [ 464.351420][ T5892] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 464.361635][ T7186] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 464.371821][ T52] usb 1-1: config 0 has no interfaces? [ 464.377823][ T5892] usb 2-1: too many endpoints for config 1 interface 1 altsetting 5: 210, using maximum allowed: 30 [ 464.390226][ T7186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.399834][ T52] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 464.409388][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.417649][ T5892] usb 2-1: config 1 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 210 [ 464.434524][ T52] usb 1-1: Product: syz [ 464.439163][ T52] usb 1-1: Manufacturer: syz [ 464.445588][ T7175] usb 3-1: GET_CAPABILITIES returned 0 [ 464.451388][ T5892] usb 2-1: config 1 interface 1 has no altsetting 0 [ 464.458383][ T7175] usbtmc 3-1:16.0: can't read capabilities [ 464.469961][ T52] usb 1-1: SerialNumber: syz [ 464.475835][ T7186] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 464.494480][ T5892] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 464.505057][ T52] usb 1-1: config 0 descriptor?? [ 464.528338][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.538296][ T5892] usb 2-1: Product: 麷釜วⓃ榕㳡蟙땪ꝅ學༳吆疷⅖癔靧⺆꼽猄᰾刯奱榺몘﹑⹒弣䢲杹ꉋ盇埕ꓜﲽ꟏秞漃寡㽠흿䲤Ḵ瑼鼔⃉ㅢ὇ྎ㙱ᧂ볳٩ᠿ綒꛷곰椼ꖬ형쫓᫢표﯊酗䩕鑼㝖㛊꼊ḕ쯎ᛅ⠺色㺥俴퇅좏殟方⭃⹥꽵刣쓺킅Ꚉ쓚䍂呾덳ဥ쒻䘇器淙▁꒜躟ᓝ⢖〱틚 [ 464.576714][ T7186] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 464.627413][ T5984] udevd[5984]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 464.644095][ T5892] usb 2-1: Manufacturer: 롰ࡐᶬ벗㋩䬰鐹垥և㯾锟䍠᪋낢¢똚鷂욂⩑僩띨㛴﹵값Ꞹ礋᱌უ뷅鲅⎃렪擿뱁뢯埲ꬔ싐㇀Ȑ죦ꟾ쏪汰퉦พ뻺잯ⴣ뛥⺍ꛖஔ㘻峠좓෺ꔪ쪘三㘠縬篙㣌볦碳扰ㅀ艣Ṋꄇﯩ䦙⛬눿㧽橐眙雔䜻넊覶 [ 464.682644][T10212] tipc: Failed to remove unknown binding: 66,1,1/0:469957377/469957379 [ 464.713447][ T7186] usb 3-1: USB disconnect, device number 111 [ 464.752451][T10223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.770250][T10223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.780231][T10218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.792976][ T5892] usb 2-1: SerialNumber: syz [ 464.798733][T10218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.815629][T10223] fuse: Bad value for 'fd' [ 464.825229][ T52] usb 1-1: USB disconnect, device number 110 [ 465.021957][ T5891] usb 4-1: USB disconnect, device number 113 [ 465.234037][ T5892] usb 2-1: 0:2 : does not exist [ 465.305290][ T5892] usb 2-1: USB disconnect, device number 92 [ 465.536685][ T6494] udevd[6494]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 465.683066][T10238] FAULT_INJECTION: forcing a failure. [ 465.683066][T10238] name failslab, interval 1, probability 0, space 0, times 0 [ 465.703854][T10238] CPU: 0 UID: 0 PID: 10238 Comm: syz.3.1353 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 465.703885][T10238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 465.703899][T10238] Call Trace: [ 465.703917][T10238] [ 465.703926][T10238] dump_stack_lvl+0x241/0x360 [ 465.703965][T10238] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.704051][T10238] ? __pfx__printk+0x10/0x10 [ 465.704085][T10238] ? __pfx___might_resched+0x10/0x10 [ 465.704119][T10238] should_fail_ex+0x424/0x570 [ 465.704157][T10238] should_failslab+0xac/0x100 [ 465.704186][T10238] __kmalloc_cache_noprof+0x73/0x370 [ 465.704209][T10238] ? nfnetlink_rcv+0x1037/0x28f0 [ 465.704243][T10238] nfnetlink_rcv+0x1037/0x28f0 [ 465.704271][T10238] ? __kernel_text_address+0xd/0x40 [ 465.704329][T10238] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 465.704375][T10238] ? __lock_acquire+0xad5/0xd80 [ 465.704445][T10238] ? netlink_deliver_tap+0x2e/0x1b0 [ 465.704474][T10238] ? netlink_deliver_tap+0x2e/0x1b0 [ 465.704500][T10238] netlink_unicast+0x7f8/0x9a0 [ 465.704532][T10238] ? __pfx_netlink_unicast+0x10/0x10 [ 465.704556][T10238] ? skb_put+0x114/0x1f0 [ 465.704590][T10238] netlink_sendmsg+0x8c3/0xcd0 [ 465.704630][T10238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.704659][T10238] ? aa_sock_msg_perm+0x91/0x160 [ 465.704702][T10238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.704727][T10238] __sock_sendmsg+0x221/0x270 [ 465.704755][T10238] ____sys_sendmsg+0x523/0x860 [ 465.704797][T10238] ? __pfx_____sys_sendmsg+0x10/0x10 [ 465.704834][T10238] ? __fget_files+0x2a/0x420 [ 465.704863][T10238] ? __fget_files+0x2a/0x420 [ 465.704898][T10238] __sys_sendmsg+0x271/0x360 [ 465.704941][T10238] ? __pfx___sys_sendmsg+0x10/0x10 [ 465.705036][T10238] ? do_syscall_64+0xb6/0x230 [ 465.705060][T10238] do_syscall_64+0xf3/0x230 [ 465.705080][T10238] ? clear_bhb_loop+0x45/0xa0 [ 465.705105][T10238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.705123][T10238] RIP: 0033:0x7f7615f8d169 [ 465.705143][T10238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.705160][T10238] RSP: 002b:00007f7616d0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.705182][T10238] RAX: ffffffffffffffda RBX: 00007f76161a5fa0 RCX: 00007f7615f8d169 [ 465.705196][T10238] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 465.705210][T10238] RBP: 00007f7616d0e090 R08: 0000000000000000 R09: 0000000000000000 [ 465.705222][T10238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.705234][T10238] R13: 0000000000000000 R14: 00007f76161a5fa0 R15: 00007f76162cfa28 [ 465.705263][T10238] [ 466.145934][T10244] wg1: entered promiscuous mode [ 466.163074][T10244] wg1: entered allmulticast mode [ 466.589781][ T5891] usb 5-1: USB disconnect, device number 102 [ 466.654403][ T7180] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 466.824309][ T7180] usb 1-1: Using ep0 maxpacket: 16 [ 466.839300][ T7180] usb 1-1: config 0 has no interfaces? [ 466.852202][ T7180] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 466.866203][ T7180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.882597][ T7180] usb 1-1: Product: syz [ 466.890546][ T7180] usb 1-1: Manufacturer: syz [ 466.900875][ T7180] usb 1-1: SerialNumber: syz [ 466.922649][ T7180] usb 1-1: config 0 descriptor?? [ 467.208443][T10254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.223170][T10264] FAULT_INJECTION: forcing a failure. [ 467.223170][T10264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.254749][T10254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.296261][T10254] fuse: Bad value for 'fd' [ 467.308708][T10264] CPU: 1 UID: 0 PID: 10264 Comm: syz.1.1363 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 467.308740][T10264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 467.308754][T10264] Call Trace: [ 467.308762][T10264] [ 467.308771][T10264] dump_stack_lvl+0x241/0x360 [ 467.308809][T10264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.308839][T10264] ? __pfx__printk+0x10/0x10 [ 467.308882][T10264] should_fail_ex+0x424/0x570 [ 467.308921][T10264] _copy_from_user+0x2d/0xb0 [ 467.308951][T10264] do_ipv6_setsockopt+0x2f9/0x3680 [ 467.308988][T10264] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 467.309014][T10264] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 467.309060][T10264] ? __pfx___might_resched+0x10/0x10 [ 467.309090][T10264] ? rcu_read_lock_any_held+0xbb/0x160 [ 467.309120][T10264] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 467.309157][T10264] ? aa_sk_perm+0x96f/0xac0 [ 467.309187][T10264] ? ksys_write+0x24e/0x2d0 [ 467.309216][T10264] ? __pfx_aa_sk_perm+0x10/0x10 [ 467.309247][T10264] ipv6_setsockopt+0x5d/0x170 [ 467.309275][T10264] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 467.309302][T10264] do_sock_setsockopt+0x3b1/0x710 [ 467.309340][T10264] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 467.309369][T10264] ? __fget_files+0x2a/0x420 [ 467.309397][T10264] ? __fget_files+0x39d/0x420 [ 467.309421][T10264] ? __fget_files+0x2a/0x420 [ 467.309455][T10264] __x64_sys_setsockopt+0x1ee/0x280 [ 467.309501][T10264] do_syscall_64+0xf3/0x230 [ 467.309522][T10264] ? clear_bhb_loop+0x45/0xa0 [ 467.309546][T10264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.309566][T10264] RIP: 0033:0x7f178d18d169 [ 467.309586][T10264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.309604][T10264] RSP: 002b:00007f178df3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 467.309627][T10264] RAX: ffffffffffffffda RBX: 00007f178d3a5fa0 RCX: 00007f178d18d169 [ 467.309643][T10264] RDX: 0000000000000001 RSI: 0000000000000029 RDI: 0000000000000004 [ 467.309656][T10264] RBP: 00007f178df3e090 R08: 0000000000000004 R09: 0000000000000000 [ 467.309670][T10264] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 467.309683][T10264] R13: 0000000000000000 R14: 00007f178d3a5fa0 R15: 00007f178d4cfa28 [ 467.309716][T10264] [ 467.312590][ T979] usb 1-1: USB disconnect, device number 111 [ 467.551070][ T7180] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 467.788655][ T5891] IPVS: starting estimator thread 0... [ 467.797923][T10267] IPVS: rr: SCTP 127.0.0.1:0 - no destination available [ 467.904529][T10271] IPVS: using max 26 ests per chain, 62400 per kthread [ 468.027455][T10277] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1367'. [ 468.324424][ T979] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 468.367338][T10289] lo: entered promiscuous mode [ 468.372965][T10289] tunl0: entered promiscuous mode [ 468.430222][T10289] gre0: entered promiscuous mode [ 468.461329][T10289] gretap0: entered promiscuous mode [ 468.528214][ T979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 86, changing to 10 [ 468.544718][ T979] usb 1-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 468.554447][T10289] erspan0: entered promiscuous mode [ 468.584534][ T52] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 468.594466][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.606199][T10289] ip_vti0: entered promiscuous mode [ 468.625652][ T979] usb 1-1: config 0 descriptor?? [ 468.651644][T10289] ip6_vti0: entered promiscuous mode [ 468.685105][T10289] sit0: entered promiscuous mode [ 468.721466][T10289] ip6tnl0: entered promiscuous mode [ 468.834333][ T52] usb 4-1: Using ep0 maxpacket: 16 [ 468.855209][T10289] ip6gre0: entered promiscuous mode [ 468.872254][ T52] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.895140][T10289] syz_tun: entered promiscuous mode [ 468.897260][ T52] usb 4-1: config 0 has no interfaces? [ 468.915217][T10289] ip6gretap0: entered promiscuous mode [ 468.932453][ T52] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 468.949250][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.958067][ T52] usb 4-1: Product: syz [ 468.969603][ T52] usb 4-1: Manufacturer: syz [ 468.984506][ T52] usb 4-1: SerialNumber: syz [ 468.985887][T10289] bridge0: entered promiscuous mode [ 468.998514][ T52] usb 4-1: config 0 descriptor?? [ 469.026913][T10289] dummy0: entered promiscuous mode [ 469.032997][T10289] nlmon0: entered promiscuous mode [ 469.104586][ T979] usbhid 1-1:0.0: can't add hid device: -71 [ 469.110734][ T979] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 469.228725][T10286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.248065][ T979] usb 1-1: USB disconnect, device number 112 [ 469.262251][T10286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.279938][T10289] caif0: entered promiscuous mode [ 469.324574][T10289] batadv0: entered promiscuous mode [ 469.349106][T10289] vxcan0: entered promiscuous mode [ 469.385335][T10289] vxcan1: entered promiscuous mode [ 469.390955][T10289] veth0: entered promiscuous mode [ 469.419980][T10289] veth1: entered promiscuous mode [ 469.575219][T10289] wg0: entered promiscuous mode [ 469.647109][T10289] wg2: entered promiscuous mode [ 469.686736][T10289] veth0_to_bridge: entered promiscuous mode [ 469.792791][T10289] veth1_to_bridge: entered promiscuous mode [ 469.823989][T10289] veth0_to_bond: entered promiscuous mode [ 469.857820][T10289] veth1_to_bond: entered promiscuous mode [ 469.907062][T10289] veth0_to_team: entered promiscuous mode [ 470.000144][T10289] veth1_to_team: entered promiscuous mode [ 470.015305][T10289] veth0_to_batadv: entered promiscuous mode [ 470.032303][T10289] batadv_slave_0: entered promiscuous mode [ 470.042134][T10289] veth1_to_batadv: entered promiscuous mode [ 470.059215][T10289] batadv_slave_1: entered promiscuous mode [ 470.068587][T10289] xfrm0: entered promiscuous mode [ 470.075767][T10289] veth0_to_hsr: entered promiscuous mode [ 470.115356][T10289] veth1_to_hsr: entered promiscuous mode [ 470.150804][T10289] hsr0: entered promiscuous mode [ 470.173686][T10289] veth1_virt_wifi: entered promiscuous mode [ 470.207669][T10289] veth0_virt_wifi: entered promiscuous mode [ 470.259441][T10289] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 470.272253][T10289] vlan0: entered promiscuous mode [ 470.291495][T10289] vlan1: entered promiscuous mode [ 470.307980][T10289] macvlan0: entered promiscuous mode [ 470.321460][T10289] macvlan1: entered promiscuous mode [ 470.330548][T10289] ipvlan0: entered promiscuous mode [ 470.341153][T10289] ipvlan1: entered promiscuous mode [ 470.350397][T10289] macvtap0: entered promiscuous mode [ 470.363520][T10289] macsec0: entered promiscuous mode [ 470.372034][T10289] geneve0: entered promiscuous mode [ 470.390073][T10289] geneve1: entered promiscuous mode [ 470.402114][T10289] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 470.411053][T10289] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 470.428784][T10289] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 470.442875][T10289] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 470.462323][T10289] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 470.474347][T10289] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 470.482535][T10289] bond1: entered promiscuous mode [ 470.494987][T10289] bond2: entered promiscuous mode [ 470.500304][T10289] veth2: entered promiscuous mode [ 470.509643][T10289] veth3: entered promiscuous mode [ 470.518606][T10289] veth4: entered promiscuous mode [ 470.524150][T10289] veth5: entered promiscuous mode [ 470.543611][T10289] veth6: entered promiscuous mode [ 470.553283][T10289] veth7: entered promiscuous mode [ 470.567817][T10289] veth8: entered promiscuous mode [ 470.585801][T10289] veth9: entered promiscuous mode [ 470.597883][T10289] erspan1: entered promiscuous mode [ 470.617955][T10289] mac80211_hwsim hwsim12 wlan2: entered promiscuous mode [ 470.644116][T10289] veth10: entered promiscuous mode [ 470.661689][T10289] veth12: entered promiscuous mode [ 470.709205][T10289] veth13: entered promiscuous mode [ 471.334466][ T7169] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 471.389865][ T5892] usb 4-1: USB disconnect, device number 114 [ 471.542426][ T7169] usb 3-1: Using ep0 maxpacket: 16 [ 471.548637][T10321] macvtap0: entered promiscuous mode [ 471.563167][T10321] veth0_macvtap: entered promiscuous mode [ 471.585252][ T7169] usb 3-1: config 0 has no interfaces? [ 471.602415][T10321] team0: Device macvtap0 failed to register rx_handler [ 471.635520][ T7169] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 471.653577][ T7169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.676775][T10321] veth0_macvtap: left promiscuous mode [ 471.682663][ T7169] usb 3-1: Product: syz [ 471.694719][ T7169] usb 3-1: Manufacturer: syz [ 471.702697][ T7169] usb 3-1: SerialNumber: syz [ 471.720340][ T7169] usb 3-1: config 0 descriptor?? [ 471.891106][T10328] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 472.169483][T10310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.193857][T10310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.287151][ T5892] usb 3-1: USB disconnect, device number 112 [ 472.377460][T10337] delete_channel: no stack [ 472.623319][ T7169] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 472.776408][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1390'. [ 472.804720][ T7169] usb 1-1: Using ep0 maxpacket: 8 [ 472.819911][ T7169] usb 1-1: config 0 has an invalid interface number: 201 but max is 0 [ 472.829738][ T7169] usb 1-1: config 0 has no interface number 0 [ 472.848374][ T7169] usb 1-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=f8.a5 [ 472.854477][ T5892] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 472.862173][ T7169] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.887457][ T7169] usb 1-1: Product: syz [ 472.905076][ T7169] usb 1-1: Manufacturer: syz [ 472.922194][ T7169] usb 1-1: SerialNumber: syz [ 472.947938][ T7169] usb 1-1: config 0 descriptor?? [ 472.970117][ T7169] gspca_main: spca501-2.14.0 probing 040a:0002 [ 473.059251][ T5892] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 473.119667][ T5892] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 473.379257][ T5892] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 473.442390][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.530651][T10340] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 473.590440][ T5892] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 473.850396][ T7169] gspca_spca501: reg write: error -110 [ 473.858551][ T7169] spca501 1-1:0.201: Reg write failed for 0x00,0x02,0x01 [ 473.878999][ T7169] spca501 1-1:0.201: probe with driver spca501 failed with error -22 [ 473.915273][T10337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.927211][T10337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.067817][ T7169] usb 1-1: USB disconnect, device number 113 [ 474.084830][ T5891] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 474.245680][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 474.269722][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.281538][ T5891] usb 3-1: config 0 has no interfaces? [ 474.302492][ T5891] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 474.365177][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.389103][ T5891] usb 3-1: Product: syz [ 474.400476][ T5891] usb 3-1: Manufacturer: syz [ 474.412471][ T5891] usb 3-1: SerialNumber: syz [ 474.466917][ T5891] usb 3-1: config 0 descriptor?? [ 474.691608][T10348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.706024][T10348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.065586][T10363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1397'. [ 475.088274][T10363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1397'. [ 475.436587][ T5892] usb 3-1: USB disconnect, device number 113 [ 475.554942][ T52] usb 5-1: USB disconnect, device number 104 [ 475.957352][T10379] FAULT_INJECTION: forcing a failure. [ 475.957352][T10379] name failslab, interval 1, probability 0, space 0, times 0 [ 475.971646][T10379] CPU: 1 UID: 0 PID: 10379 Comm: syz.4.1402 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 475.971677][T10379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 475.971691][T10379] Call Trace: [ 475.971701][T10379] [ 475.971710][T10379] dump_stack_lvl+0x241/0x360 [ 475.971750][T10379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.971782][T10379] ? __pfx__printk+0x10/0x10 [ 475.971817][T10379] ? __pfx___might_resched+0x10/0x10 [ 475.971859][T10379] should_fail_ex+0x424/0x570 [ 475.971899][T10379] should_failslab+0xac/0x100 [ 475.971925][T10379] __kmalloc_cache_noprof+0x73/0x370 [ 475.971950][T10379] ? nft_chain_parse_hook+0xa26/0x16f0 [ 475.971988][T10379] nft_chain_parse_hook+0xa26/0x16f0 [ 475.972020][T10379] ? __pfx_rhltable_lookup+0x10/0x10 [ 475.972054][T10379] ? __pfx_nft_chain_parse_hook+0x10/0x10 [ 475.972090][T10379] ? nft_chain_lookup+0x12b/0x390 [ 475.972133][T10379] nf_tables_updchain+0x437/0x1e00 [ 475.972194][T10379] ? __pfx_nf_tables_updchain+0x10/0x10 [ 475.972229][T10379] ? nft_pernet+0x23/0x240 [ 475.972261][T10379] ? nla_strcmp+0xd5/0x110 [ 475.972289][T10379] nf_tables_newchain+0x10f6/0x3390 [ 475.972332][T10379] ? __lock_acquire+0xad5/0xd80 [ 475.972368][T10379] ? __pfx_nf_tables_newchain+0x10/0x10 [ 475.972411][T10379] ? __pfx___nla_validate_parse+0x10/0x10 [ 475.972447][T10379] ? __lock_acquire+0xad5/0xd80 [ 475.972494][T10379] ? __nla_parse+0x40/0x60 [ 475.972524][T10379] nfnetlink_rcv+0x12eb/0x28f0 [ 475.972593][T10379] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 475.972680][T10379] ? skb_clone+0x240/0x390 [ 475.972714][T10379] ? netlink_deliver_tap+0x2e/0x1b0 [ 475.972743][T10379] ? netlink_deliver_tap+0x2e/0x1b0 [ 475.972772][T10379] netlink_unicast+0x7f8/0x9a0 [ 475.972805][T10379] ? __pfx_netlink_unicast+0x10/0x10 [ 475.972830][T10379] ? skb_put+0x114/0x1f0 [ 475.972925][T10379] netlink_sendmsg+0x8c3/0xcd0 [ 475.972965][T10379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.972997][T10379] ? aa_sock_msg_perm+0x91/0x160 [ 475.973033][T10379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.973057][T10379] __sock_sendmsg+0x221/0x270 [ 475.973086][T10379] ____sys_sendmsg+0x523/0x860 [ 475.973128][T10379] ? __pfx_____sys_sendmsg+0x10/0x10 [ 475.973158][T10379] ? __fget_files+0x2a/0x420 [ 475.973187][T10379] ? __fget_files+0x2a/0x420 [ 475.973222][T10379] __sys_sendmsg+0x271/0x360 [ 475.973260][T10379] ? __pfx___sys_sendmsg+0x10/0x10 [ 475.973351][T10379] ? do_syscall_64+0xb6/0x230 [ 475.973377][T10379] do_syscall_64+0xf3/0x230 [ 475.973398][T10379] ? clear_bhb_loop+0x45/0xa0 [ 475.973423][T10379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.973446][T10379] RIP: 0033:0x7fa125f8d169 [ 475.973466][T10379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.973484][T10379] RSP: 002b:00007fa126d94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.973508][T10379] RAX: ffffffffffffffda RBX: 00007fa1261a5fa0 RCX: 00007fa125f8d169 [ 475.973524][T10379] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 475.973539][T10379] RBP: 00007fa126d94090 R08: 0000000000000000 R09: 0000000000000000 [ 475.973553][T10379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.973565][T10379] R13: 0000000000000000 R14: 00007fa1261a5fa0 R15: 00007fa1262cfa28 [ 475.973599][T10379] [ 476.674349][ T52] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 476.826310][ T52] usb 2-1: Using ep0 maxpacket: 16 [ 476.833840][ T52] usb 2-1: config 0 has no interfaces? [ 476.866903][ T52] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 476.894503][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.913402][ T52] usb 2-1: Product: syz [ 476.913423][T10383] block device autoloading is deprecated and will be removed. [ 476.918577][ T52] usb 2-1: Manufacturer: syz [ 476.938781][ T52] usb 2-1: SerialNumber: syz [ 476.964988][T10390] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 477.185486][ T52] usb 2-1: config 0 descriptor?? [ 477.196657][T10383] syz.2.1404: attempt to access beyond end of device [ 477.196657][T10383] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 477.304465][ T5892] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 477.413097][T10377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.424563][T10377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.468868][T10395] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1407'. [ 477.488305][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 477.497124][ T5892] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 477.511648][ T5892] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 477.560898][ T7186] usb 2-1: USB disconnect, device number 93 [ 477.587118][ T5892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.654585][ T5892] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 477.684477][ T5892] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 477.705969][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.714028][ T5892] usb 1-1: Product: syz [ 477.750684][ T5892] usb 1-1: Manufacturer: syz [ 477.767937][ T5892] usb 1-1: SerialNumber: syz [ 477.799671][ T5892] usb 1-1: config 0 descriptor?? [ 477.813523][ T5892] hub 1-1:0.0: bad descriptor, ignoring hub [ 477.824319][ T5892] hub 1-1:0.0: probe with driver hub failed with error -5 [ 478.298439][T10404] FAULT_INJECTION: forcing a failure. [ 478.298439][T10404] name failslab, interval 1, probability 0, space 0, times 0 [ 478.324849][ T5891] usb 1-1: reset high-speed USB device number 114 using dummy_hcd [ 478.370664][ T5891] usb 1-1: device reset changed ep0 maxpacket size! [ 478.377818][T10404] CPU: 1 UID: 0 PID: 10404 Comm: syz.1.1409 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 478.377848][T10404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 478.377861][T10404] Call Trace: [ 478.377871][T10404] [ 478.377880][T10404] dump_stack_lvl+0x241/0x360 [ 478.377919][T10404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.377960][T10404] ? __pfx__printk+0x10/0x10 [ 478.378004][T10404] should_fail_ex+0x424/0x570 [ 478.378044][T10404] should_failslab+0xac/0x100 [ 478.378070][T10404] __kmalloc_cache_noprof+0x73/0x370 [ 478.378093][T10404] ? xfrm_policy_alloc+0x77/0x2a0 [ 478.378132][T10404] xfrm_policy_alloc+0x77/0x2a0 [ 478.378166][T10404] pfkey_compile_policy+0x2ef/0xaf0 [ 478.378209][T10404] ? __pfx_pfkey_compile_policy+0x10/0x10 [ 478.378238][T10404] xfrm_user_policy+0x736/0xc30 [ 478.378267][T10404] ? xfrm_user_policy+0x617/0xc30 [ 478.378290][T10404] ? __pfx_xfrm_user_policy+0x10/0x10 [ 478.378318][T10404] ? bpf_lsm_capable+0x9/0x10 [ 478.378342][T10404] ? security_capable+0x7e/0x2d0 [ 478.378378][T10404] do_ip_setsockopt+0x1b7c/0x39c0 [ 478.378411][T10404] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 478.378437][T10404] ? aa_sk_perm+0x96f/0xac0 [ 478.378469][T10404] ? ksys_write+0x24e/0x2d0 [ 478.378499][T10404] ? __pfx_aa_sk_perm+0x10/0x10 [ 478.378533][T10404] ip_setsockopt+0x63/0x100 [ 478.378556][T10404] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 478.378583][T10404] do_sock_setsockopt+0x3b1/0x710 [ 478.378621][T10404] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 478.378649][T10404] ? __fget_files+0x2a/0x420 [ 478.378678][T10404] ? __fget_files+0x39d/0x420 [ 478.378702][T10404] ? __fget_files+0x2a/0x420 [ 478.378736][T10404] __x64_sys_setsockopt+0x1ee/0x280 [ 478.378776][T10404] do_syscall_64+0xf3/0x230 [ 478.378802][T10404] ? clear_bhb_loop+0x45/0xa0 [ 478.378829][T10404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.378850][T10404] RIP: 0033:0x7f178d18d169 [ 478.378870][T10404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.378889][T10404] RSP: 002b:00007f178df1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 478.378913][T10404] RAX: ffffffffffffffda RBX: 00007f178d3a6080 RCX: 00007f178d18d169 [ 478.378935][T10404] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000006 [ 478.378949][T10404] RBP: 00007f178df1d090 R08: 00000000000000b8 R09: 0000000000000000 [ 478.378963][T10404] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 478.378977][T10404] R13: 0000000000000000 R14: 00007f178d3a6080 R15: 00007f178d4cfa28 [ 478.379010][T10404] [ 478.658961][ T5891] usb 1-1: USB disconnect, device number 114 [ 478.964394][ T5891] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 479.076868][ T7169] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 479.124376][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 479.137218][ T5891] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 479.146368][ T7180] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 479.160370][ T5891] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 479.186505][ T5891] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 479.207023][ T5891] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 479.217028][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.233763][ T5891] usb 1-1: Product: syz [ 479.239623][ T5891] usb 1-1: Manufacturer: syz [ 479.246988][ T7169] usb 3-1: config 0 interface 0 has no altsetting 0 [ 479.258144][ T7169] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 479.269362][ T5891] usb 1-1: SerialNumber: syz [ 479.307492][ T7169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.324297][ T7180] usb 5-1: Using ep0 maxpacket: 16 [ 479.340194][ T7180] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.352035][ T7169] usb 3-1: config 0 descriptor?? [ 479.358756][ T7180] usb 5-1: config 0 has no interfaces? [ 479.379102][ T7180] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 479.388523][ T7180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.399073][ T7180] usb 5-1: Product: syz [ 479.403368][ T7180] usb 5-1: Manufacturer: syz [ 479.408719][ T7180] usb 5-1: SerialNumber: syz [ 479.423407][ T7180] usb 5-1: config 0 descriptor?? [ 479.529259][T10421] delete_channel: no stack [ 479.562163][ T5891] usb 1-1: 0:2 : does not exist [ 479.611372][ T5891] usb 1-1: USB disconnect, device number 115 [ 479.645812][ T6494] udevd[6494]: setting mode of /dev/bus/usb/001/115 to 020664 failed: No such file or directory [ 479.702591][T10412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.712291][T10412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.748503][ T6494] udevd[6494]: setting owner of /dev/bus/usb/001/115 to uid=0, gid=0 failed: No such file or directory [ 479.966157][ T6494] udevd[6494]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 480.044288][ T52] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 480.311123][ T52] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 480.321768][ T52] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 480.353432][ T52] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 480.385362][ T7169] video4linux radio48: keene_cmd_set failed (-71) [ 480.392139][ T7169] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 480.412051][ T52] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 480.431577][ T7169] usb 3-1: USB disconnect, device number 114 [ 480.469344][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.540630][ T52] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 480.570768][ T52] usb 2-1: invalid MIDI out EP 0 [ 480.716175][T10421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.725381][T10421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.821887][ T52] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 480.995076][ T7808] udevd[7808]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 481.394711][ T7169] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 481.578234][T10439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1422'. [ 481.644300][ T52] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 481.647139][ T7169] usb 3-1: Using ep0 maxpacket: 8 [ 481.759868][ T7169] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.790318][ T7169] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 481.802018][ T52] usb 4-1: Using ep0 maxpacket: 16 [ 481.814795][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.826546][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.867215][ T52] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 481.885335][ T7169] usb 3-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 481.897909][ T7169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.939666][ T7169] usb 3-1: Product: syz [ 481.949758][ T7169] usb 3-1: Manufacturer: syz [ 481.960846][ T7169] usb 3-1: SerialNumber: syz [ 481.970213][ T52] usb 4-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 481.985146][ T7169] usb 3-1: config 0 descriptor?? [ 482.033140][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.113831][ T52] usb 4-1: config 0 descriptor?? [ 482.178923][ T5889] usb 5-1: USB disconnect, device number 105 [ 482.383701][T10445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.394569][T10445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.413712][T10445] netlink: 'syz.2.1419': attribute type 10 has an invalid length. [ 482.438644][T10445] bridge0: port 3(team0) entered disabled state [ 482.446439][T10445] team0: left allmulticast mode [ 482.459982][T10445] team_slave_0: left allmulticast mode [ 482.465858][T10445] team_slave_1: left allmulticast mode [ 482.471552][T10445] batadv1: left allmulticast mode [ 482.476782][T10445] team0: left promiscuous mode [ 482.477080][T10446] netlink: 'syz.2.1419': attribute type 10 has an invalid length. [ 482.482616][T10445] bridge0: port 3(team0) entered disabled state [ 482.586845][T10446] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1419'. [ 482.632587][ T7186] usb 2-1: USB disconnect, device number 94 [ 482.867903][T10445] batman_adv: batadv0: Adding interface: team0 [ 482.918147][T10445] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.954017][T10445] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 482.975737][T10446] team0: entered promiscuous mode [ 482.986210][T10446] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.993284][T10446] batman_adv: batadv0: Interface activated: team0 [ 483.001241][T10446] batman_adv: batadv0: Interface deactivated: team0 [ 483.031808][T10446] batman_adv: batadv0: Removing interface: team0 [ 483.072105][ T5892] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 483.091273][T10446] bridge0: port 3(team0) entered blocking state [ 483.098510][T10446] bridge0: port 3(team0) entered disabled state [ 483.105925][T10446] team0: entered allmulticast mode [ 483.111709][T10446] team_slave_0: entered allmulticast mode [ 483.117645][T10446] team_slave_1: entered allmulticast mode [ 483.124728][T10446] batadv1: entered allmulticast mode [ 483.138032][T10445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.149424][T10445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.285706][T10446] bridge0: port 3(team0) entered blocking state [ 483.292196][T10446] bridge0: port 3(team0) entered forwarding state [ 483.294471][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 483.294496][ T30] audit: type=1326 audit(1743437395.330:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10452 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 483.494689][ T5892] usb 5-1: no configurations [ 483.499421][ T5892] usb 5-1: can't read configurations, error -22 [ 483.508579][ T30] audit: type=1326 audit(1743437395.330:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10452 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 483.531879][ T30] audit: type=1326 audit(1743437395.330:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10452 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 483.539510][T10456] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 483.555142][ T30] audit: type=1326 audit(1743437395.330:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10452 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 483.654367][ T5892] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 483.685350][ T30] audit: type=1326 audit(1743437395.330:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10452 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 483.811702][ T30] audit: type=1326 audit(1743437395.340:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10452 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 483.841503][ T5892] usb 5-1: no configurations [ 483.854551][ T5892] usb 5-1: can't read configurations, error -22 [ 483.924637][ T7169] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 484.024088][ T5892] usb usb5-port1: attempt power cycle [ 484.072855][ T30] audit: type=1326 audit(1743437395.340:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10452 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 484.174458][ T30] audit: type=1326 audit(1743437395.340:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10452 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 484.205654][ T7169] usb 1-1: config index 0 descriptor too short (expected 8192, got 77) [ 484.250385][ T30] audit: type=1326 audit(1743437395.340:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10452 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 484.298513][ T7169] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.338397][ T30] audit: type=1326 audit(1743437395.340:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10452 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f178d18d169 code=0x7ffc0000 [ 484.378777][ T52] usbhid 4-1:0.0: can't add hid device: -71 [ 484.385044][ T5892] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 484.402639][ T52] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 484.419667][ T5892] usb 5-1: no configurations [ 484.426382][ T5892] usb 5-1: can't read configurations, error -22 [ 484.447393][ T52] usb 4-1: USB disconnect, device number 115 [ 484.475835][ T7169] usb 1-1: config 0 has no interfaces? [ 484.564400][ T5892] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 484.599140][ T7169] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 484.609851][ T5892] usb 5-1: no configurations [ 484.624711][ T5892] usb 5-1: can't read configurations, error -22 [ 484.634390][ T7169] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.717093][ T5892] usb usb5-port1: unable to enumerate USB device [ 484.793211][ T7169] usb 1-1: Product: syz [ 484.838248][ T7169] usb 1-1: Manufacturer: syz [ 484.857117][ T7169] usb 1-1: SerialNumber: syz [ 484.896501][ T7169] usb 1-1: config 0 descriptor?? [ 485.146583][T10456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1425'. [ 485.888572][ T52] usb 3-1: USB disconnect, device number 115 [ 486.215588][T10464] netlink: 320 bytes leftover after parsing attributes in process `syz.2.1428'. [ 486.454566][ T7169] usb 1-1: USB disconnect, device number 116 [ 486.607416][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1430'. [ 486.727729][T10469] macsec1: entered allmulticast mode [ 486.733321][T10469] dummy0: entered allmulticast mode [ 486.756741][T10469] dummy0: left allmulticast mode [ 486.847903][T10470] bond0: option resend_igmp: invalid value (7540) [ 486.854631][T10470] bond0: option resend_igmp: allowed values 0 - 255 [ 487.328611][T10487] delete_channel: no stack [ 487.405831][ T52] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 487.567041][ T52] usb 4-1: Using ep0 maxpacket: 16 [ 487.576954][ T52] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.593907][ T52] usb 4-1: config 0 has no interfaces? [ 487.603231][ T52] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 487.619368][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.631854][ T52] usb 4-1: Product: syz [ 487.707255][ T52] usb 4-1: Manufacturer: syz [ 487.713671][ T52] usb 4-1: SerialNumber: syz [ 487.724353][ T5891] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 488.160947][ T52] usb 4-1: config 0 descriptor?? [ 488.427411][T10481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.436537][T10481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.454368][ T5891] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 488.482370][ T5891] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 488.503817][ T5891] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 488.592324][ T5891] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 488.614343][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.783195][ T5891] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 488.800019][ T5891] usb 3-1: invalid MIDI out EP 0 [ 488.931722][ T5891] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 488.986093][T10487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.996402][T10487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.020930][ T6494] udevd[6494]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 489.514536][ T7169] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 489.675428][ T7169] usb 2-1: no configurations [ 489.771739][ T7169] usb 2-1: can't read configurations, error -22 [ 489.864959][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1443'. [ 489.977736][T10509] qrtr: Invalid version 50 [ 490.014446][ T7169] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 490.575036][ T7169] usb 2-1: no configurations [ 490.581244][ T7169] usb 2-1: can't read configurations, error -22 [ 490.589275][ T7169] usb usb2-port1: attempt power cycle [ 490.947827][ T7186] usb 4-1: USB disconnect, device number 116 [ 490.974391][ T7169] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 491.084127][ T7169] usb 2-1: no configurations [ 491.088928][ T7169] usb 2-1: can't read configurations, error -22 [ 491.293438][ T7186] usb 3-1: USB disconnect, device number 116 [ 491.304466][ T7169] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 491.380531][ T7169] usb 2-1: no configurations [ 491.396675][ T7169] usb 2-1: can't read configurations, error -22 [ 491.464140][ T7169] usb usb2-port1: unable to enumerate USB device [ 491.536395][T10525] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1447'. [ 491.597829][T10525] netlink: 'syz.2.1447': attribute type 3 has an invalid length. [ 491.830366][T10533] SET target dimension over the limit! [ 492.132249][T10535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.142069][T10535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.351665][ T7180] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 492.936273][ T7186] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 493.106437][T10548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.116179][T10548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.188135][ T5891] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 493.374337][ T7186] usb 5-1: device descriptor read/64, error -71 [ 493.624620][ T7186] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 493.774322][ T7186] usb 5-1: device descriptor read/64, error -71 [ 493.907558][ T7186] usb usb5-port1: attempt power cycle [ 494.078462][T10557] delete_channel: no stack [ 494.262683][ T7186] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 494.361080][ T7186] usb 5-1: device descriptor read/8, error -71 [ 494.605186][ T7186] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 494.614396][ T52] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 494.735088][ T7186] usb 5-1: device descriptor read/8, error -71 [ 494.846215][ T7186] usb usb5-port1: unable to enumerate USB device [ 494.878909][ T52] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 494.891473][ T52] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 495.022641][ T52] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 495.037475][ T52] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 495.047598][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.108486][ T7180] usb 4-1: device descriptor read/64, error -71 [ 495.127761][ T52] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 495.148516][ T52] usb 2-1: invalid MIDI out EP 0 [ 495.310064][T10557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.320016][T10557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.394575][ T7180] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 495.582244][ T7180] usb 4-1: config 0 has no interfaces? [ 495.690905][ T7180] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 495.705227][ T7180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.728107][ T7180] usb 4-1: Product: syz [ 495.740664][ T7180] usb 4-1: Manufacturer: syz [ 495.753367][ T7180] usb 4-1: SerialNumber: syz [ 495.831464][ T52] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 495.845444][ T7180] usb 4-1: config 0 descriptor?? [ 496.000234][ T7808] udevd[7808]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 496.094796][T10567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1459'. [ 496.158852][ T5889] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 496.424223][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 496.536251][ T5889] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 496.546789][ T5889] usb 5-1: config 0 has no interface number 0 [ 496.567268][ T5889] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 496.596431][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.627563][ T5889] usb 5-1: Product: syz [ 496.640183][ T5889] usb 5-1: Manufacturer: syz [ 496.660929][ T5889] usb 5-1: SerialNumber: syz [ 496.685295][ T5889] usb 5-1: config 0 descriptor?? [ 496.772528][T10580] loop8: detected capacity change from 0 to 1 [ 496.784259][T10580] Dev loop8: unable to read RDB block 1 [ 496.790467][T10580] loop8: unable to read partition table [ 496.802147][T10580] loop8: partition table beyond EOD, truncated [ 496.810991][T10580] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 496.884420][T10580] futex_wake_op: syz.0.1458 tries to shift op by -33; fix this program [ 496.902675][T10580] netdevsim netdevsim0: Direct firmware load for . [ 496.902675][T10580] failed with error -2 [ 496.921638][T10580] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 496.921638][T10580] [ 496.952838][ T5889] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 496.961685][ T5889] usb 5-1: No valid video chain found. [ 497.002310][ T5889] usb 5-1: USB disconnect, device number 114 [ 497.469176][ T7180] usb 2-1: USB disconnect, device number 99 [ 498.384527][ T5891] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 498.394577][ T5889] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 498.574465][ T7180] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 498.597442][ T5891] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 498.616394][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.618213][ T7186] usb 4-1: USB disconnect, device number 118 [ 498.646741][ T5891] usb 3-1: config 0 descriptor?? [ 498.653422][ T5889] usb 5-1: no configurations [ 498.665264][ T5889] usb 5-1: can't read configurations, error -22 [ 498.713040][ T5891] cp210x 3-1:0.0: cp210x converter detected [ 498.784391][ T7180] usb 2-1: Using ep0 maxpacket: 32 [ 498.796457][ T7180] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.804353][ T5889] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 498.825490][ T7180] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 498.859422][ T7180] usb 2-1: config 0 interface 0 has no altsetting 0 [ 498.880068][ T7180] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 498.973187][T10597] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 498.979792][T10597] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 499.026711][T10597] vhci_hcd vhci_hcd.0: Device attached [ 499.033153][ T5889] usb 5-1: no configurations [ 499.036861][ T7180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.040313][ T5889] usb 5-1: can't read configurations, error -22 [ 499.054834][ T5889] usb usb5-port1: attempt power cycle [ 499.097845][ T7180] usb 2-1: config 0 descriptor?? [ 499.103644][ T5891] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 499.188679][ T5891] cp210x 3-1:0.0: querying part number failed [ 499.199965][ T5891] usb 3-1: cp210x converter now attached to ttyUSB0 [ 499.214576][ T5892] vhci_hcd: vhci_device speed not set [ 499.274387][ T5892] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 499.314853][ T7186] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 499.404480][ T5889] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 499.447003][ T5889] usb 5-1: no configurations [ 499.451960][ T5889] usb 5-1: can't read configurations, error -22 [ 499.460617][ T7186] usb 4-1: device descriptor read/64, error -71 [ 499.621223][ T5889] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 499.646122][ T5889] usb 5-1: no configurations [ 499.652511][ T5889] usb 5-1: can't read configurations, error -22 [ 499.668422][ T7180] corsair-cpro 0003:1B1C:0C10.000B: unbalanced collection at end of report description [ 499.688869][ T5889] usb usb5-port1: unable to enumerate USB device [ 499.693949][ T7180] corsair-cpro 0003:1B1C:0C10.000B: probe with driver corsair-cpro failed with error -22 [ 499.704644][ T7186] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 499.864405][ T7186] usb 4-1: device descriptor read/64, error -71 [ 499.922945][T10599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1469'. [ 499.966943][T10599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.979138][ T7186] usb usb4-port1: attempt power cycle [ 500.044395][T10599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.324346][ T7186] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 500.366744][T10616] netlink: 'syz.2.1468': attribute type 8 has an invalid length. [ 500.385090][ T7186] usb 4-1: device descriptor read/8, error -71 [ 500.634427][ T7186] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 500.665756][ T7186] usb 4-1: device descriptor read/8, error -71 [ 500.784863][ T7186] usb usb4-port1: unable to enumerate USB device [ 500.848193][T10625] delete_channel: no stack [ 501.120927][T10622] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1472915327 (188533161856 ns) > initial count (57843868544 ns). Using initial count to start timer. [ 501.290579][ T7186] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 501.404965][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.412339][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.434061][T10634] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 501.547147][ T7186] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 501.575524][ T7186] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 501.706992][ T7186] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 501.734537][ T7186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.746505][T10608] vhci_hcd: connection reset by peer [ 501.752238][ T36] vhci_hcd: stop threads [ 501.753540][ T5889] usb 3-1: USB disconnect, device number 117 [ 501.764151][ T36] vhci_hcd: release socket [ 501.772741][ T5889] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 501.791947][ T36] vhci_hcd: disconnect device [ 501.818478][ T7186] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 501.833586][ T5889] cp210x 3-1:0.0: device disconnected [ 501.921349][ T7186] usb 1-1: invalid MIDI out EP 0 [ 502.088433][T10625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.107249][T10625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.270477][ T7186] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 502.464354][ T52] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 502.502820][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 502.636402][ T52] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 502.833874][ T52] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 502.969983][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 503.060713][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 503.194280][ T979] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 503.349435][ T52] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 503.370944][ T979] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 503.405450][ T52] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 503.427558][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.447316][ T979] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 503.462160][ T52] usb 4-1: Product: syz [ 503.471138][ T52] usb 4-1: Manufacturer: syz [ 503.494369][ T52] usb 4-1: SerialNumber: syz [ 503.515375][ T979] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 503.551808][ T52] usb 4-1: config 0 descriptor?? [ 503.589896][ T52] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 503.594361][ T979] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 503.630589][ T52] imon 4-1:0.0: unable to initialize intf0, err -90 [ 503.677741][ T52] imon:imon_probe: failed to initialize context! [ 503.691659][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.702960][ T52] imon 4-1:0.0: unable to register, err -19 [ 503.724752][ T7186] usb 2-1: USB disconnect, device number 100 [ 503.917642][ T979] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 504.104716][T10644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.135129][T10644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.176258][ T979] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 504.194712][ T52] usb 4-1: USB disconnect, device number 123 [ 504.872374][T10654] delete_channel: no stack [ 504.896668][ T6494] udevd[6494]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.994378][ T5892] vhci_hcd: vhci_device speed not set [ 505.008565][ T979] usb 1-1: USB disconnect, device number 118 [ 505.407258][T10658] FAULT_INJECTION: forcing a failure. [ 505.407258][T10658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.444701][ T7169] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 505.604384][T10658] CPU: 1 UID: 0 PID: 10658 Comm: syz.0.1482 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 505.604436][T10658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 505.604459][T10658] Call Trace: [ 505.604475][T10658] [ 505.604491][T10658] dump_stack_lvl+0x241/0x360 [ 505.604534][T10658] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.604566][T10658] ? __pfx__printk+0x10/0x10 [ 505.604608][T10658] should_fail_ex+0x424/0x570 [ 505.604648][T10658] _copy_from_user+0x2d/0xb0 [ 505.604679][T10658] restore_sigcontext+0xda/0x7d0 [ 505.604709][T10658] ? __pfx_restore_sigcontext+0x10/0x10 [ 505.604772][T10658] __do_sys_rt_sigreturn+0x1bf/0x290 [ 505.604797][T10658] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 505.604839][T10658] ? do_syscall_64+0xb6/0x230 [ 505.604865][T10658] do_syscall_64+0xf3/0x230 [ 505.604887][T10658] ? clear_bhb_loop+0x45/0xa0 [ 505.604912][T10658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.604933][T10658] RIP: 0033:0x7fdc18729359 [ 505.604948][T10658] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 505.604962][T10658] RSP: 002b:00007fdc19591a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 505.604978][T10658] RAX: ffffffffffffffda RBX: 00007fdc189a5fa0 RCX: 00007fdc18729359 [ 505.604990][T10658] RDX: 00007fdc19591a80 RSI: 00007fdc19591bb0 RDI: 0000000000000021 [ 505.605000][T10658] RBP: 00007fdc19592090 R08: 0000000000000001 R09: 0000000000000000 [ 505.605010][T10658] R10: 0000200000001100 R11: 0000000000000202 R12: 0000000000000002 [ 505.605020][T10658] R13: 0000000000000000 R14: 00007fdc189a5fa0 R15: 00007fdc18acfa28 [ 505.605042][T10658] [ 506.110691][ T7169] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 506.175157][ T7169] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 506.297640][ T7169] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 506.361564][ T7169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.406243][T10655] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 506.493785][ T7169] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 506.949447][ T5892] usb 3-1: USB disconnect, device number 118 [ 506.967787][T10643] delete_channel: no stack [ 507.101915][T10654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.111392][T10654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.491475][T10675] tipc: Started in network mode [ 507.507163][T10675] tipc: Node identity 7e63dc574d18, cluster identity 4711 [ 507.554583][T10675] tipc: Enabled bearer , priority 0 [ 507.607907][T10675] +: renamed from syzkaller0 [ 507.674436][T10676] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 507.688994][T10675] tipc: Disabling bearer [ 507.903553][T10675] bridge0: port 3(team0) entered disabled state [ 507.910095][T10675] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.917805][T10675] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.991965][T10675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.009394][T10675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.072438][T10675] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.084776][T10675] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.094516][T10675] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.103554][T10675] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.367770][ T979] usb 5-1: USB disconnect, device number 119 [ 508.487514][T10678] FAULT_INJECTION: forcing a failure. [ 508.487514][T10678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.534371][T10678] CPU: 0 UID: 0 PID: 10678 Comm: syz.4.1487 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 508.534402][T10678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 508.534416][T10678] Call Trace: [ 508.534424][T10678] [ 508.534434][T10678] dump_stack_lvl+0x241/0x360 [ 508.534473][T10678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 508.534503][T10678] ? __pfx__printk+0x10/0x10 [ 508.534546][T10678] should_fail_ex+0x424/0x570 [ 508.534584][T10678] _copy_from_user+0x2d/0xb0 [ 508.534614][T10678] copy_msghdr_from_user+0xb3/0x580 [ 508.534658][T10678] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 508.534680][T10678] ? __fget_files+0x2a/0x420 [ 508.534708][T10678] ? __fget_files+0x2a/0x420 [ 508.534743][T10678] __sys_sendmsg+0x20a/0x360 [ 508.534781][T10678] ? __pfx___sys_sendmsg+0x10/0x10 [ 508.534869][T10678] ? do_syscall_64+0xb6/0x230 [ 508.534893][T10678] do_syscall_64+0xf3/0x230 [ 508.534915][T10678] ? clear_bhb_loop+0x45/0xa0 [ 508.534939][T10678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.534960][T10678] RIP: 0033:0x7fa125f8d169 [ 508.534979][T10678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.534997][T10678] RSP: 002b:00007fa126d94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.535021][T10678] RAX: ffffffffffffffda RBX: 00007fa1261a5fa0 RCX: 00007fa125f8d169 [ 508.535037][T10678] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000004 [ 508.535050][T10678] RBP: 00007fa126d94090 R08: 0000000000000000 R09: 0000000000000000 [ 508.535064][T10678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.535076][T10678] R13: 0000000000000000 R14: 00007fa1261a5fa0 R15: 00007fa1262cfa28 [ 508.535109][T10678] [ 508.828060][ T5889] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 508.984878][ T5889] usb 4-1: device descriptor read/64, error -71 [ 509.127302][T10690] bond0: left promiscuous mode [ 509.133107][T10690] bond_slave_0: left promiscuous mode [ 509.150876][T10690] bond_slave_1: left promiscuous mode [ 509.242127][T10690] macvtap0: left promiscuous mode [ 509.269510][T10692] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 509.335846][ T5889] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 509.394452][ T979] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 509.695700][ T5889] usb 4-1: device descriptor read/64, error -71 [ 509.767105][ T979] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 509.781833][ T979] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 509.804104][ T979] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 509.814754][ T5889] usb usb4-port1: attempt power cycle [ 509.824669][T10697] netlink: 'syz.4.1495': attribute type 4 has an invalid length. [ 509.842148][T10697] netlink: 'syz.4.1495': attribute type 4 has an invalid length. [ 509.850624][ T979] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 509.871847][ T979] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 509.891630][ T979] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 509.909901][ T979] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 509.943519][ T979] usb 1-1: Product: syz [ 509.982274][ T979] usb 1-1: Manufacturer: syz [ 510.047093][ T979] cdc_wdm 1-1:1.0: skipping garbage [ 510.060654][ T979] cdc_wdm 1-1:1.0: skipping garbage [ 510.080865][ T979] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 510.103953][ T979] cdc_wdm 1-1:1.0: Unknown control protocol [ 510.154302][ T5889] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 510.246229][ T5889] usb 4-1: device descriptor read/8, error -71 [ 510.485126][ T5889] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 510.515354][ T5889] usb 4-1: device descriptor read/8, error -71 [ 510.549999][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 [ 510.556674][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 510.563586][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 510.570239][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 510.576963][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 510.583570][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 510.590216][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 510.596731][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 510.603366][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 510.613094][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 510.619764][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 510.628119][ T52] usb 1-1: USB disconnect, device number 119 [ 510.634395][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 510.634424][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 510.634442][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 510.663906][ T5889] usb usb4-port1: unable to enumerate USB device [ 510.702599][T10689] Option '[y$ [ 510.702599][T10689] >ڎTkS@SVfhJ' to dns_resolver key: bad/missing value [ 510.714953][ T5892] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 510.894255][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 510.908492][ T5892] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 510.938715][ T5892] usb 5-1: New USB device found, idVendor=0af0, idProduct=8201, bcdDevice=34.8e [ 511.060616][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.074376][ T5892] usb 5-1: Product: syz [ 511.078738][ T5892] usb 5-1: Manufacturer: syz [ 511.121892][ T5892] usb 5-1: SerialNumber: syz [ 511.161457][ T5892] usb 5-1: config 0 descriptor?? [ 511.185871][ T5892] hso 5-1:0.0: Not our interface [ 511.331713][T10711] netlink: 'syz.0.1499': attribute type 83 has an invalid length. [ 511.543758][ T5948] usb 5-1: USB disconnect, device number 120 [ 512.334743][T10727] FAULT_INJECTION: forcing a failure. [ 512.334743][T10727] name failslab, interval 1, probability 0, space 0, times 0 [ 512.386841][T10727] CPU: 0 UID: 0 PID: 10727 Comm: syz.4.1505 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 512.386866][T10727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 512.386876][T10727] Call Trace: [ 512.386882][T10727] [ 512.386889][T10727] dump_stack_lvl+0x241/0x360 [ 512.386920][T10727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.386942][T10727] ? __pfx__printk+0x10/0x10 [ 512.386964][T10727] ? __pfx_rhltable_lookup+0x10/0x10 [ 512.386980][T10727] ? __pfx___might_resched+0x10/0x10 [ 512.387004][T10727] should_fail_ex+0x424/0x570 [ 512.387032][T10727] should_failslab+0xac/0x100 [ 512.387051][T10727] __kmalloc_cache_noprof+0x73/0x370 [ 512.387067][T10727] ? nf_tables_updchain+0xa81/0x1e00 [ 512.387094][T10727] nf_tables_updchain+0xa81/0x1e00 [ 512.387136][T10727] ? __pfx_nf_tables_updchain+0x10/0x10 [ 512.387160][T10727] ? nft_pernet+0x23/0x240 [ 512.387183][T10727] ? nla_strcmp+0xd5/0x110 [ 512.387202][T10727] nf_tables_newchain+0x10f6/0x3390 [ 512.387232][T10727] ? __lock_acquire+0xad5/0xd80 [ 512.387257][T10727] ? __pfx_nf_tables_newchain+0x10/0x10 [ 512.387286][T10727] ? __pfx___nla_validate_parse+0x10/0x10 [ 512.387312][T10727] ? __lock_acquire+0xad5/0xd80 [ 512.387344][T10727] ? __nla_parse+0x40/0x60 [ 512.387366][T10727] nfnetlink_rcv+0x12eb/0x28f0 [ 512.387415][T10727] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 512.387434][T10727] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 512.387466][T10727] ? rcu_preempt_deferred_qs_irqrestore+0x8c6/0xcb0 [ 512.387507][T10727] ? rcu_read_unlock_special+0x49b/0x570 [ 512.387522][T10727] ? skb_clone+0x240/0x390 [ 512.387536][T10727] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 512.387559][T10727] ? netlink_deliver_tap+0x2e/0x1b0 [ 512.387579][T10727] ? __rcu_read_unlock+0xa1/0x110 [ 512.387600][T10727] netlink_unicast+0x7f8/0x9a0 [ 512.387629][T10727] ? __pfx_netlink_unicast+0x10/0x10 [ 512.387647][T10727] ? skb_put+0x114/0x1f0 [ 512.387671][T10727] netlink_sendmsg+0x8c3/0xcd0 [ 512.387700][T10727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.387722][T10727] ? aa_sock_msg_perm+0x91/0x160 [ 512.387747][T10727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.387764][T10727] __sock_sendmsg+0x221/0x270 [ 512.387784][T10727] ____sys_sendmsg+0x523/0x860 [ 512.387813][T10727] ? __pfx_____sys_sendmsg+0x10/0x10 [ 512.387839][T10727] ? __fget_files+0x2a/0x420 [ 512.387859][T10727] ? __fget_files+0x2a/0x420 [ 512.387884][T10727] __sys_sendmsg+0x271/0x360 [ 512.387910][T10727] ? __pfx___sys_sendmsg+0x10/0x10 [ 512.387930][T10727] ? trace_sched_exit_tp+0x3c/0x120 [ 512.387968][T10727] ? __pfx___schedule+0x10/0x10 [ 512.388008][T10727] ? do_syscall_64+0xb6/0x230 [ 512.388031][T10727] do_syscall_64+0xf3/0x230 [ 512.388052][T10727] ? clear_bhb_loop+0x45/0xa0 [ 512.388077][T10727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.388098][T10727] RIP: 0033:0x7fa125f8d169 [ 512.388125][T10727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.388140][T10727] RSP: 002b:00007fa126d94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.388157][T10727] RAX: ffffffffffffffda RBX: 00007fa1261a5fa0 RCX: 00007fa125f8d169 [ 512.388168][T10727] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 512.388178][T10727] RBP: 00007fa126d94090 R08: 0000000000000000 R09: 0000000000000000 [ 512.388205][T10727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.388214][T10727] R13: 0000000000000000 R14: 00007fa1261a5fa0 R15: 00007fa1262cfa28 [ 512.388237][T10727] [ 512.392585][T10727] ------------[ cut here ]------------ [ 512.756691][T10727] WARNING: CPU: 0 PID: 10727 at net/netfilter/core.c:501 __nf_unregister_net_hook+0x683/0x810 [ 512.766999][T10727] Modules linked in: [ 512.771384][T10727] CPU: 0 UID: 0 PID: 10727 Comm: syz.4.1505 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 512.783183][T10727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 512.793379][T10727] RIP: 0010:__nf_unregister_net_hook+0x683/0x810 [ 512.799776][T10727] Code: 41 5d 41 5e 41 5f 5d e9 cb f8 74 f7 e8 06 9d 8f f7 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 ee 9c 8f f7 90 <0f> 0b 90 48 c7 c7 60 16 16 90 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 [ 512.819527][T10727] RSP: 0018:ffffc900038cee10 EFLAGS: 00010293 [ 512.825648][T10727] RAX: ffffffff8a33e022 RBX: 0000000000000000 RCX: ffff88802b90bc00 [ 512.833655][T10727] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 512.841740][T10727] RBP: dffffc0000000000 R08: ffffffff8a33da61 R09: 1ffffffff20be9ce [ 512.849869][T10727] R10: dffffc0000000000 R11: fffffbfff20be9cf R12: ffff888035670000 [ 512.857894][T10727] R13: ffff8880333ce480 R14: dffffc0000000000 R15: ffff8880573fa710 [ 512.865921][T10727] FS: 00007fa126d946c0(0000) GS:ffff888124fb1000(0000) knlGS:0000000000000000 [ 512.875198][T10727] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 512.881805][T10727] CR2: 0000200000f20030 CR3: 00000000511d4000 CR4: 00000000003526f0 [ 512.890261][T10727] Call Trace: [ 512.893562][T10727] [ 512.896556][T10727] ? nf_tables_updchain+0xa81/0x1e00 [ 512.901862][T10727] nf_tables_updchain+0x108e/0x1e00 [ 512.907120][T10727] ? __pfx_nf_tables_updchain+0x10/0x10 [ 512.912687][T10727] ? nft_pernet+0x23/0x240 [ 512.917445][T10727] ? nla_strcmp+0xd5/0x110 [ 512.921896][T10727] nf_tables_newchain+0x10f6/0x3390 [ 512.927186][T10727] ? __lock_acquire+0xad5/0xd80 [ 512.932167][T10727] ? __pfx_nf_tables_newchain+0x10/0x10 [ 512.938446][T10727] ? __pfx___nla_validate_parse+0x10/0x10 [ 512.945383][T10727] ? __lock_acquire+0xad5/0xd80 [ 512.950294][T10727] ? __nla_parse+0x40/0x60 [ 512.955027][T10727] nfnetlink_rcv+0x12eb/0x28f0 [ 512.959990][T10727] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 512.965182][T10727] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 512.971216][T10727] ? rcu_preempt_deferred_qs_irqrestore+0x8c6/0xcb0 [ 512.978128][T10727] ? rcu_read_unlock_special+0x49b/0x570 [ 512.983791][T10727] ? skb_clone+0x240/0x390 [ 512.988289][T10727] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 512.994477][T10727] ? netlink_deliver_tap+0x2e/0x1b0 [ 512.999741][T10727] ? __rcu_read_unlock+0xa1/0x110 [ 513.004874][T10727] netlink_unicast+0x7f8/0x9a0 [ 513.009715][T10727] ? __pfx_netlink_unicast+0x10/0x10 [ 513.015141][T10727] ? skb_put+0x114/0x1f0 [ 513.019436][T10727] netlink_sendmsg+0x8c3/0xcd0 [ 513.024368][T10727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.029810][T10727] ? aa_sock_msg_perm+0x91/0x160 [ 513.034906][T10727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.040341][T10727] __sock_sendmsg+0x221/0x270 [ 513.045113][T10727] ____sys_sendmsg+0x523/0x860 [ 513.049945][T10727] ? __pfx_____sys_sendmsg+0x10/0x10 [ 513.055392][T10727] ? __fget_files+0x2a/0x420 [ 513.060041][T10727] ? __fget_files+0x2a/0x420 [ 513.064893][T10727] __sys_sendmsg+0x271/0x360 [ 513.069544][T10727] ? __pfx___sys_sendmsg+0x10/0x10 [ 513.075060][T10727] ? trace_sched_exit_tp+0x3c/0x120 [ 513.080637][T10727] ? __pfx___schedule+0x10/0x10 [ 513.085650][T10727] ? do_syscall_64+0xb6/0x230 [ 513.090375][T10727] do_syscall_64+0xf3/0x230 [ 513.094975][T10727] ? clear_bhb_loop+0x45/0xa0 [ 513.099700][T10727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.105666][T10727] RIP: 0033:0x7fa125f8d169 [ 513.110146][T10727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.129959][T10727] RSP: 002b:00007fa126d94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.138468][T10727] RAX: ffffffffffffffda RBX: 00007fa1261a5fa0 RCX: 00007fa125f8d169 [ 513.146542][T10727] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 513.154585][T10727] RBP: 00007fa126d94090 R08: 0000000000000000 R09: 0000000000000000 [ 513.162576][T10727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.170600][T10727] R13: 0000000000000000 R14: 00007fa1261a5fa0 R15: 00007fa1262cfa28 [ 513.178641][T10727] [ 513.181884][T10727] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 513.189273][T10727] CPU: 0 UID: 0 PID: 10727 Comm: syz.4.1505 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 513.200991][T10727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 513.211061][T10727] Call Trace: [ 513.214422][T10727] [ 513.217398][T10727] dump_stack_lvl+0x241/0x360 [ 513.222106][T10727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.227323][T10727] ? __pfx__printk+0x10/0x10 [ 513.231956][T10727] ? vscnprintf+0x5d/0x90 [ 513.236298][T10727] panic+0x349/0x880 [ 513.240204][T10727] ? __warn+0x174/0x4d0 [ 513.244397][T10727] ? __pfx_panic+0x10/0x10 [ 513.248869][T10727] __warn+0x344/0x4d0 [ 513.252889][T10727] ? __nf_unregister_net_hook+0x683/0x810 [ 513.258669][T10727] report_bug+0x2b3/0x500 [ 513.263027][T10727] ? __nf_unregister_net_hook+0x683/0x810 [ 513.268762][T10727] ? __nf_unregister_net_hook+0x683/0x810 [ 513.274496][T10727] ? __nf_unregister_net_hook+0x685/0x810 [ 513.280221][T10727] handle_bug+0x89/0x170 [ 513.284472][T10727] exc_invalid_op+0x1a/0x50 [ 513.289094][T10727] asm_exc_invalid_op+0x1a/0x20 [ 513.293966][T10727] RIP: 0010:__nf_unregister_net_hook+0x683/0x810 [ 513.300326][T10727] Code: 41 5d 41 5e 41 5f 5d e9 cb f8 74 f7 e8 06 9d 8f f7 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 ee 9c 8f f7 90 <0f> 0b 90 48 c7 c7 60 16 16 90 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 [ 513.320144][T10727] RSP: 0018:ffffc900038cee10 EFLAGS: 00010293 [ 513.326407][T10727] RAX: ffffffff8a33e022 RBX: 0000000000000000 RCX: ffff88802b90bc00 [ 513.334652][T10727] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 513.342769][T10727] RBP: dffffc0000000000 R08: ffffffff8a33da61 R09: 1ffffffff20be9ce [ 513.350777][T10727] R10: dffffc0000000000 R11: fffffbfff20be9cf R12: ffff888035670000 [ 513.358807][T10727] R13: ffff8880333ce480 R14: dffffc0000000000 R15: ffff8880573fa710 [ 513.366905][T10727] ? __nf_unregister_net_hook+0xc1/0x810 [ 513.372571][T10727] ? __nf_unregister_net_hook+0x682/0x810 [ 513.378331][T10727] ? nf_tables_updchain+0xa81/0x1e00 [ 513.383640][T10727] nf_tables_updchain+0x108e/0x1e00 [ 513.388913][T10727] ? __pfx_nf_tables_updchain+0x10/0x10 [ 513.394514][T10727] ? nft_pernet+0x23/0x240 [ 513.398991][T10727] ? nla_strcmp+0xd5/0x110 [ 513.403795][T10727] nf_tables_newchain+0x10f6/0x3390 [ 513.409047][T10727] ? __lock_acquire+0xad5/0xd80 [ 513.413967][T10727] ? __pfx_nf_tables_newchain+0x10/0x10 [ 513.419573][T10727] ? __pfx___nla_validate_parse+0x10/0x10 [ 513.425359][T10727] ? __lock_acquire+0xad5/0xd80 [ 513.430234][T10727] ? __nla_parse+0x40/0x60 [ 513.434839][T10727] nfnetlink_rcv+0x12eb/0x28f0 [ 513.439659][T10727] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 513.444807][T10727] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 513.450870][T10727] ? rcu_preempt_deferred_qs_irqrestore+0x8c6/0xcb0 [ 513.457502][T10727] ? rcu_read_unlock_special+0x49b/0x570 [ 513.463266][T10727] ? skb_clone+0x240/0x390 [ 513.467724][T10727] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 513.473902][T10727] ? netlink_deliver_tap+0x2e/0x1b0 [ 513.479121][T10727] ? __rcu_read_unlock+0xa1/0x110 [ 513.484177][T10727] netlink_unicast+0x7f8/0x9a0 [ 513.488979][T10727] ? __pfx_netlink_unicast+0x10/0x10 [ 513.494311][T10727] ? skb_put+0x114/0x1f0 [ 513.498601][T10727] netlink_sendmsg+0x8c3/0xcd0 [ 513.503537][T10727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.508844][T10727] ? aa_sock_msg_perm+0x91/0x160 [ 513.513842][T10727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.519262][T10727] __sock_sendmsg+0x221/0x270 [ 513.524277][T10727] ____sys_sendmsg+0x523/0x860 [ 513.529294][T10727] ? __pfx_____sys_sendmsg+0x10/0x10 [ 513.534599][T10727] ? __fget_files+0x2a/0x420 [ 513.539205][T10727] ? __fget_files+0x2a/0x420 [ 513.543833][T10727] __sys_sendmsg+0x271/0x360 [ 513.548475][T10727] ? __pfx___sys_sendmsg+0x10/0x10 [ 513.553642][T10727] ? trace_sched_exit_tp+0x3c/0x120 [ 513.558880][T10727] ? __pfx___schedule+0x10/0x10 [ 513.563797][T10727] ? do_syscall_64+0xb6/0x230 [ 513.568553][T10727] do_syscall_64+0xf3/0x230 [ 513.573086][T10727] ? clear_bhb_loop+0x45/0xa0 [ 513.577796][T10727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.583729][T10727] RIP: 0033:0x7fa125f8d169 [ 513.588207][T10727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.608276][T10727] RSP: 002b:00007fa126d94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.616746][T10727] RAX: ffffffffffffffda RBX: 00007fa1261a5fa0 RCX: 00007fa125f8d169 [ 513.624746][T10727] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 513.632821][T10727] RBP: 00007fa126d94090 R08: 0000000000000000 R09: 0000000000000000 [ 513.640901][T10727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.648889][T10727] R13: 0000000000000000 R14: 00007fa1261a5fa0 R15: 00007fa1262cfa28 [ 513.657424][T10727] [ 513.660748][T10727] Kernel Offset: disabled [ 513.665089][T10727] Rebooting in 86400 seconds..