last executing test programs: 8.749970825s ago: executing program 4 (id=1247): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x13, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 8.297408949s ago: executing program 4 (id=1248): bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r2, 0x4, 0x42800) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x80008, 0xc, 0x414}, 0x50) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000013c0)=""/125, 0x7d}], 0x1, 0x0, 0xffffffff) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$rds(0x15, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x6, 0x71, 0x0, 0x0) syz_clone(0x800000, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000380), &(0x7f00000003c0)) 5.161975674s ago: executing program 2 (id=1263): ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000300)={{}, {0x9b5b}, 0x1f6, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="3bfb41e05b06b2a537caa4a3f4661e84da9cf83c75b4548fa67c667cd184f39bf8f5b84726a6384d9ddcdde5870f7034b8601077e013415baac681b1bfda4af81ac6561a75458dd2d21aa4f799b4607c76dc1494541bb7d55150366de543f59f0c7e726e202686cee708", 0x6a, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1a5}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000a00)={0x74, 0x0, 0x1, 0x0, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4, @remote, 0x7}}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x44015}, 0x20000010) 4.972569426s ago: executing program 3 (id=1264): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0xffffffff}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a80)=ANY=[@ANYBLOB="54000000020601040000000000000000000000000c00078005001500b80100000900020073797a310000000005000500020000000500040000000000050001000700000010000300686173683a69702c6d6163"], 0x54}}, 0x0) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000040)='./file0\x00', 0xa1) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000140)=""/174) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x34}}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f00000002c0)={{0x0, 0xffff70ad}, 0x8}, 0x10) 4.960752743s ago: executing program 1 (id=1265): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0xe0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 4.780220282s ago: executing program 4 (id=1266): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r3 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r3, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@deltclass={0x44, 0x29, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x10, 0x9}, {0x3, 0x7}, {0x0, 0xfff0}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x5}}, @TCA_RATE={0x6, 0x5, {0x1, 0x7}}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}, @TCA_RATE={0x6, 0x5, {0xc0, 0x43}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000003c0)={0x1}, 0x1) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2, 0x2, 0x5}) 4.649842527s ago: executing program 2 (id=1267): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x19, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xe3, &(0x7f0000000400)=""/227, 0x41000, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xd, 0x5, 0x2}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x4, 0x5, 0x7, 0x3}], 0x10, 0x6}, 0x94) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r3, 0x80044df9, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000003c0)={r1, r2}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000971bac5544ad77590779467f", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmmsg$inet6(r4, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x80, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r4, 0x1) r8 = add_key$user(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000012c0)="90cfba486f0edd558258810b39304fbdf43b5fa67d8eb6aec2938ac563bc090e0dc39ee26f7cd0a7678d4647c1f78e112725a7f6eefe4de8e37ccca52b36315931c79467409068b0b6916100967f29cee24a418ffcc797842bb23a92efa09883a220228bff82d23e648cb65a32daf07341394509a10754496da619240ad8b57a822466d4385553585fc19d8aec1ecb1fbd24ce557badaeffbb5c0e592a9aaeb5dda31abbe57049249d736f58ab6b2c3a0f1edaafca55c779dced3ecef2b61349e2b4d6b401", 0xc5, 0xfffffffffffffff9) setsockopt$TIPC_MCAST_BROADCAST(r5, 0x10f, 0x85) keyctl$set_timeout(0xf, r8, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) unshare(0x42050600) r9 = socket(0x10, 0x803, 0x0) r10 = accept4$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14, 0x80800) getsockname$packet(r10, 0x0, &(0x7f0000000900)) 4.643467832s ago: executing program 1 (id=1268): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) epoll_create(0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, 0x0) syz_usb_disconnect(r0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000040)={'pim6reg0\x00', {0x2, 0x0, @remote}}) r7 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) syz_usb_disconnect(r0) close_range(r7, 0xffffffffffffffff, 0x0) 4.557730199s ago: executing program 3 (id=1269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f00000003c0)={0x17c04, 0xffffffffffffffff, 0x4ea, 0x10001, 0x0, 0x8}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket(0x2bf4311e5f15580e, 0x5, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRES16=0x0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000061023730f7000000000000b70823e0ca0726ad53aff8ff00000000940800009600ff000000000000000000b7a10000001d000007010000f8ffffffbfa400000000000007040000f0050000b8020000082063001823000028fce42d6825681f8e509c6473e5bd488eb9a6863971503a362165c40062e7069197c89694a8b910eae9b59516252a23896cbc48e95ec99cd6cc720ac851e6a92aa31abee5c4a75e97973761bf59aa6c58ad8ac5a76c738a702250c3789ef9c51d4763158f15bacb1ab833fe96aa95d60876f084ef8c", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000800000085000000690000009523fe5e44251fffba5791741979cb637dd56a8a09c3b355bd4d0d588276169c744f23e037f6dc9c013e2a8d67802202c5b93cae785ce237957665ef6c07dabc3ea93d59f22fdd931e9447593d98aad6f2e58bc1e9beea500f53ac90e9c4401d1c84d67858a27b171f8601270c425385b2404b3e1e18f05251ab123e51a6029dd7381abf7558bcf1"], &(0x7f0000005d80)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000200)="9a", 0x1}, {&(0x7f0000000280)="335708c22e76f5861a9a831b765237bdc3d3df638ba969ce5dd9df0b8c130325a61d177e2f1611eba2357d8f663b1c84e9fb5261c9c40cd23998e8cce14ef6853b2f503a1c22877dbee58c456bc30875067d2be7bc319fae2173589ead7818f248f44f", 0x63}], 0x2}}, {{&(0x7f0000000300)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000400)='V', 0x1}], 0x1}}], 0x2, 0x4000000) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r9}, 0x20) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r11 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r11, &(0x7f0000007a40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}], 0x1, 0x4004041) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0), 0x718, 0x0, 0x0) r12 = socket$kcm(0x2, 0x7, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 4.425710544s ago: executing program 2 (id=1270): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040c41090ea00000000000109022400010000000009040000010300000009210000000122070009058103000000000029fba674da2e60bcf53c1a48bc080d2a72c32e2004f5d51eaeca05c8853077508a73cee86b82926b45c30467c55def147991eb2c0bee2406ee416276621c55a8a4a71796753ac96ed3e9da7cd0ff0967626691e0af7613"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x3, 0x0, 0x6, 0x0, 0x56, 0x3, 0x2}, 0x9c) syz_io_uring_setup(0x20cc, &(0x7f0000000280)={0x0, 0x0, 0x8000, 0x400000, 0x5c}, &(0x7f0000001340)=0x0, &(0x7f0000000140)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x2, 0x0, 0x1, 0x20, 0x1}) pivot_root(0x0, 0x0) io_uring_enter(r3, 0x47fb, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="0000080000000800392cdaab4a73d45974c07f3254b67f9d793897bf76ecac3af9c6c3e546aff32017a00bd892f97d13bd18c8e24258ab0747dcb8c4f74571c8303729f8536cb90456ccc3c2d8866ec302a28f52995d56ef717885510fb2b35a2a49ad730d70bbec620f184e4ff2e4c50f1efedd24844c81c09bb86e208344062a51578da1be6e3336f69a"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="20010e000000ea6aafaabfc5926708627c6c096370c8cf7923696aba5c3b5f6f0142597bab610c3ac4c980ab4086c1be2aee81c7c142f035d8097d1c6b047133001802e770a63e32c63b2ece59af166cc352d509efb6d79a3c05c719b17245bae7f3ef67b9c78c25cbc04a905117bd21da9432e226859306571286163e0b3a1a59350537b4b51c6f06a5b19fca327425e0a7a7c7d75fdd461d635bdb09a7b38ffe5e16289d8f226dea43c8c3f9"], 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r8, &(0x7f0000000a40)=[{{&(0x7f0000000080)=@phonet={0x23, 0xfd, 0x0, 0x5}, 0x80, 0x0}}, {{&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @random="ac6da4784393", 'veth0_macvtap\x00'}}, 0x80, 0x0}}], 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4.422541618s ago: executing program 4 (id=1271): r0 = creat(&(0x7f0000000080)='./control\x00', 0x2c) r1 = socket(0x2b, 0x80801, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000005480)={0x5, 0x8, [0x0, 0x0]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x7, 0x20, 0x4, 0x200, {{0xd, 0x4, 0x3, 0x8, 0x34, 0x67, 0x0, 0xf, 0x4, 0x0, @multicast1, @private=0xa010100, {[@cipso={0x86, 0x15, 0x1, [{0x6, 0xf, "0be93c4df0241ad057c24d8d08"}]}, @lsrr={0x83, 0xb, 0xf4, [@empty, @dev={0xac, 0x14, 0x14, 0x10}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000bc0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', r4, 0x700, 0x8, 0x80000001, 0xffffffff, {{0x14, 0x4, 0x0, 0x4, 0x50, 0x66, 0x0, 0x8, 0x2f, 0x0, @broadcast, @local, {[@ssrr={0x89, 0xb, 0xee, [@remote, @empty]}, @ssrr={0x89, 0x23, 0x75, [@empty, @multicast1, @remote, @local, @loopback, @multicast1, @local, @multicast2]}, @timestamp_addr={0x44, 0xc, 0x67, 0x1, 0x7, [{@broadcast, 0x7}]}]}}}}}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x478, 0x230, 0x198, 0x230, 0x0, 0x0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x6, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x43}, @loopback, 0xff, 0xff000000, 'ip6gre0\x00', 'ip_vti0\x00', {}, {0xff}, 0x33, 0x1, 0xa}, 0x0, 0xd8, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x0, [0x3, 0x1, 0x1, 0x4, 0x4], 0x0, 0x6}}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xed, 0x9}}}, {{@ip={@initdev={0xac, 0x1e, 0x5, 0x0}, @rand_addr=0x64010102, 0x0, 0x0, 'macvlan1\x00', 'rose0\x00', {}, {}, 0x0, 0x0, 0x1d}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @TTL={0x28}}, {{@ip={@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'xfrm0\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@ttl={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4a91, 0xf2e, @dev={0xac, 0x14, 0x14, 0x1f}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x1f8, 0x110, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @broadcast, 0xff, 0xffffff00, 0xa, 0xc, {@empty, {[0xb791839f568d29f9, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x1, 0x2, 0x5, 0x7, 0x6, 0xfff, 'gretap0\x00', 'hsr0\x00', {}, {}, 0x0, 0x10a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x1}}}, {{@arp={@rand_addr=0x64010102, @loopback, 0xffffffff, 0xffffff00, 0x7, 0xd, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0xb84d, 0x705, 0xbea, 0x8, 0xada, 0x2, 'netdevsim0\x00', 'virt_wifi0\x00', {0xff}, {0xff}, 0x0, 0x30}, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8de, 0x400}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x31caf518}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010"], 0x10}], 0x1}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000200)={0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f0ffffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed000062030000000000003f440000000000007a0a00fe00ffffffd704000020000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a0000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9f, 0xe, 0x5b, 0x40, 0x1235, 0x18, 0xf0ee, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa7, 0xdd, 0x2d}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1820000000000000000000000010000018110000", @ANYRES32, @ANYBLOB="0000020000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.865252318s ago: executing program 3 (id=1275): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x9}}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x1ec, r5, 0x200, 0x70bd2c, 0x1, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xb9, 0xc5, "725bacce81a42b4cce2159a251e8cfa9d136daa445a599cb92d8b353572d1e9c22f066f5dffd4d4a506608c4ba5e48320c2960c96e82ae849fdc71d396dc943cfeb3fa3f47790332b8157b1bb3737b41f96e3e35d1cc67db069f72f220be83118a51b488735376b48dbada20896c374a87dfc1770914871b9dadf6b89597e879b91e120055800f39b1a6bb07bfd51ac69a78da1b2ab34a47085413a325c392352dbac6003e1d89723dcb877ccaf6c30c543596c31a"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xca}, @NL80211_ATTR_VENDOR_DATA={0x101, 0xc5, "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"}]}, 0x1ec}}, 0x4000000) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc090, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x60, 0x1, [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0xcfe0, 0xa, 0x1, {0x22, 0x159}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0x2, 0x3}}}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x200, 0x7f, 0xd7, 0x1, 0x40, 0x7}, 0xf, &(0x7f00000004c0)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xb, 0xe, 0x3ff}, @ptm_cap={0x3}]}, 0x4, [{0x0, 0x0}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x403}}, {0x22, &(0x7f0000000840)=@string={0x22, 0x3, "7da9d8a7bafedfa0c9236206af1d036d4ab0ea7e533317aee0637c7bd3681c45"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x455}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x8}, 0x0, &(0x7f00000005c0)={0x20, 0x82, 0x2, "d33d"}, &(0x7f0000000600)={0x20, 0x83, 0x3, "d95b96"}, &(0x7f0000000640)={0x20, 0x84, 0x3, "d13987"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "3ebdfe"}}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 3.735199125s ago: executing program 0 (id=1276): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002280)={'vlan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="3303120081fd120000007ef52f555f2a0c09000000fd88a800f788a83baa9900", 0x20, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0xcf, 0x6, @local}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500000001040101000000000000000400d900010001000000"], 0x1c}}, 0x0) syz_open_dev$vim2m(0x0, 0x4, 0x2) syz_emit_ethernet(0x3e, &(0x7f0000000f40)={@random="3908d61c8c9c", @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x8, 0x0, 0x0, 0x8, 0x40, {0x5, 0x4, 0x2, 0x13, 0x2, 0x66, 0x97da, 0x7f, 0x29, 0x3ff, @remote, @loopback}}}}}}, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/address_bits', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fsopen(&(0x7f0000000040)='afs\x00', 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f00000001c0)="05632aa4f8b4e5a3789a8ddb7eb038083844a84b0b6d9d73cee6fabae7d62727e1e8d1858189041b2961a5c3a475605b", 0x0, &(0x7f0000000500)="2757d5da31bac3313687908bca92e289cd747555acc91dd5267895620f62524ff072f565a0ff6b7e0534c7642e8cb0b4762665f96c1590a447f3db0fcce5bee6734bfda6571ad0fdc7719fda0721140369b553902e4e9eef8dc6cabab74762e90100166f2dfa4d775be4be9b6f2887d3866c5f10ae7fac8bcfea463ae71e730288670d0e937a45f8a463bdb27d0d67371fa441d224adc69cbdd1293439ef4e13698d39c13d3d8ff622c3093d0d69a12b0303e5fe85353493c85ae6ae0c8d88e33a33c8f40e9ca8c9e68560f6b31925", &(0x7f0000000440)="d001a792049d267f6769d124347d8fefbf55d5f5fb294aa371e189dced0a0c3ca7340caf69d420dd2b96f8eb58fd1f82575ee3950b76c42eda515ecc71753996a6f58ce09572f391d0b74921b353a72fdc2f7572c40e250baece66e5b0d73aa771442e4a55a8e837f1f0bd18d7bca611dae820c203930287bb9b15d1ce178dd3cb0a1ad6a3363943507097c3b6404386fdf88f06af12f8f3738f5c4dd285eea70d1f3d", 0x2, r4, 0x4}, 0x38) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x4652, 0x200}, 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r7, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r7, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) 2.785702277s ago: executing program 4 (id=1277): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, 0x0, 0x0, 0x4000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$evdev(0x0, 0x8, 0x800) fsetxattr$security_evm(r3, &(0x7f0000000200), &(0x7f0000000240)=@sha1={0x1, "6bcfc674bf8cfd83adbb89a036d38b508c770dc1"}, 0x15, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0x20000000, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x10, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c}], @echo_reply}}}}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24000050) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) semget$private(0x0, 0x4000000009, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000140), 0x100000b2, 0xa6040) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180)={0x2, 0x100000, 0x80000, {r5}}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000080000000000000a20000000000a010100000000000000000a0000000900010073797a300000000050000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e6974001c000480080001400000000408000240"], 0xac}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) 2.669915324s ago: executing program 0 (id=1278): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18640200004000000000000009000000850000002a200800850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 2.554160183s ago: executing program 0 (id=1279): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f00000002c0)}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000003c0)="4fd010938b67041b4bad4ca04faac5c5453d5f9fa50d7561a596485f3ca25d18116d521526e35c71b8083c20639eb2304e08c120c94bcdf1b7475827b3596343f8814127b7b9a0b935060f477e326c6a2f7af7d6ba3397559891d223598633217198ab4c6369f2eb451be79e103704d145869f19783575e87ee800039af33df0545365968a103362d63477342077a3a203bf8b", 0x93}], 0x1}}], 0x2, 0x4004001) poll(0x0, 0x0, 0x3ff) mbind(&(0x7f00003d4000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000100)=0x1, 0x7fff, 0x6) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r4, 0xa, 0x13) fcntl$setlease(r4, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000740)=ANY=[], 0x8) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e21, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) setsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, 0x0) ptrace$getregset(0x4212, r1, 0x202, &(0x7f0000000300)={0x0}) shutdown(r0, 0x1) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00'}) write$binfmt_aout(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) 1.497902755s ago: executing program 0 (id=1280): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="d0030000040a010200000000000000000a000005db000c00d7ad814a8f5a158155f2e3ec96853f05377d27971c5e022b1734535f1e8d2201a8b8e2b700f622fcf06dad1ca87ab46db8e01ddf6272c20948dbd33242ff1f342cecc316cc442f810989cd66d40f0aca6d9a076aa937a4eaa2e589fdb0d09c336b8f0acb5fc5904cda9927d66e84c41469d3ff943b5953603a9824abc22a574ba1b0e27d2ccfe91e7e974320742aed766f17b20c98eff69124526e04a33c69fb33f987e58b4a55765c1da173f0e53d7eeb555a692004ad5b816c81a14de56d8482d44c835006cef965958d2655271fc71100eb000c00e79061654a330fad385ab4ac8ed86c4b6927485e50a4bf8fb44c788aef4c1ce201555cd5d056f808822c40366c4a7e43ebe5effcf49bd8ae2326d54656caf5abb316ead064ad1d538ef619b6cdc68e3eb4c7df87d76932991938795ca1477028d9a6cf57e18b8b787359ac1e0ff7c059871d3a629b8cde0154d9b27bec516d2eb5c999c615f276d14a39f50fa4e92b47f78d6884d86b13340ebf4c365a99e42a92d7ba9e582b62141dd76d73b2809284a6de9e9616ca7dbb4acec9cdbc62d7717488bb929992c3d45d9f21b406e77d1c709717505ad2d0f7a199a5cd8256bcde5909169a2ef37600a8000c00d3aa34a982b3501c7f59959d307da80b5c41b7468526534cb16a1e0040665b6e0acea5cd0dc3706f97c82d72ac35fd30fa696c42c9275f1cdda91e78791a93b4739623b34fd27f98058d91dcc9c6273489a117181f0b5b6cfbaae024d390c9119212444383560a659adb6cf0f8b98022e2ffd122015a7e0ab7d7f7b8fb5a8a444c85e6cf2bf6c29a0a4f9d222c20dea8d1e3c35fcbbbac2ae7f382a9cc956882d7ad33ed0900010073797a31000000000b00070066696c7465720000580008800c00014000000000000003ff0c00024000000000000000060c00014000000000000000000c0002400000000000000fff0c00024000000000000000080c00024000000000000000020c0001400000000000000006140004800800014000000001080002405a324cac08000a4000000001b3000c004d9229dad9fa66fa5041c22181d00cd85552002f2013d1b112da6bcbc2b558387f52a757860db6ba0c9c9bc9fe78e1991f400ff403a4549db7ed1d8861dd5f19cdf62def37a43f74327a340d791fb974784adc7aa2a5a9cd891913d235209c8791ec6e4b271a8151ff3d9a6c237043eba6a7274eda42a5fb4cbaa28c7cdd58996b5decbdc8b25bbf5685d90a1a57ef225f5d2d8ac31ebdab6e7b85df6f17183b0ffc012b1628271db36f727a6eaa5b000900010073797a3000000000"], 0x3d0}, 0x1, 0x0, 0x0, 0x2044800}, 0x4008000) (async) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000008e4f8ef141e06edd0106050000000000000900000000000a050101000700000005000100070000000500010007000000890d00000000000005000100070000000500010007000000"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x40) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) (async) r4 = syz_open_pts(r3, 0x101) r5 = dup3(r4, r3, 0x0) socket(0x28, 0x6, 0x5) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) (async, rerun: 64) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, 0x0, 0x0) (async) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xc8c7, 0x0, 0xfffffffd, 0x2}, 0x0, 0x0) (async) listen(r6, 0x0) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) (async) quotactl_fd$Q_GETFMT(r5, 0xffffffff80000400, 0x0, &(0x7f0000000800)) (async) bpf$MAP_CREATE(0x0, 0x0, 0x8855ea46682d7e32) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0) (async) syz_io_uring_setup(0x27f3, 0x0, 0x0, 0x0) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) (async, rerun: 64) write$UHID_INPUT(r5, &(0x7f0000002440)={0xa, {"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", 0xe24}}, 0xffffff5c) (async, rerun: 64) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x4058, @private1, 0x401}, 0x20) 1.183445241s ago: executing program 2 (id=1281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4000000400101040000000000000000020000002400018014000180080001007f00000108000200e00000010c0002800500010000000000240002800c000280050001000000000014000180080001000000000008000200e000000208000740000000001c0018800800014000000452080001400000b4900800014000009932100005"], 0xa4}}, 0x0) 1.179890121s ago: executing program 4 (id=1282): syz_usb_connect(0x2, 0x3d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9e, 0xea, 0x5c, 0x20, 0x5ac, 0x292, 0x448b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x44, [{{0x9, 0x4, 0x92, 0x0, 0x2, 0x3, 0x1a, 0x2, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "e37e1b82e6"}]}}, {{0x9, 0x5, 0xb, 0x2}}]}}]}}]}}, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) ioprio_set$pid(0x3, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x6802c3, 0x1d6) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x559af05a10134899, 0x0, {{0x4, 0x1, 0x5, 0xa, 0x3, 0x1, {0x1, 0x180, 0x8, 0x9, 0x100, 0x7cf4, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0xbff, 0x1}}, {0x0, 0x10}}}, 0xa0) quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0) (async) sendfile(r2, r2, &(0x7f0000000080)=0x2, 0x7f03) syz_usb_connect$cdc_ncm(0x6, 0xad, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x2, 0x1, 0x8, 0x80, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ']'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x9593, 0xffff, 0x40}, {0x6, 0x24, 0x1a, 0xff, 0x6}, [@acm={0x4, 0x24, 0x2, 0x8}, @mdlm_detail={0x17, 0x24, 0x13, 0x4, "365e5f948a34b6334fe3f45ce4778ab4683239"}, @dmm={0x7, 0x24, 0x14, 0xfc00, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x3737, 0x6, 0x9f, 0x7, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x7, 0x10, 0xfa, 0x7, 0x7}, @acm={0x4, 0x24, 0x2, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x2a, 0x0, 0xf7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x620, 0x2, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x8167b7275f6d9dba, 0x40}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0xc0, 0x3, 0x59, 0x40, 0x5}, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="00e2ff0000"], 0x2, [{0xfc, &(0x7f0000000180)=@string={0xfc, 0x3, "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"}}, {0xff, &(0x7f0000000280)=@string={0xff, 0x3, "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"}}]}) 997.911204ms ago: executing program 0 (id=1283): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$vim2m(&(0x7f0000000280), 0x800000000020001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) close(r1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x10, 0x6, 0x5b0, 0x290, 0xd0, 0x1a0, 0x1a0, 0x0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, [0xffffffff, 0xff000000, 0xff], [0x0, 0xffffff00, 0xff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x73, 0x81, 0x2, 0x64}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x4e0}}, {{@ipv6={@local, @loopback, [0x0, 0xff, 0xff000000, 0xffffff00], [0xffffffff, 0x0, 0xffffffff, 0xff], 'ip6gre0\x00', 'syzkaller1\x00', {0xff}, {}, 0x4, 0x6, 0x0, 0x30}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, @ipv6=@private0, 0xd, 0x25, 0x162b}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x84}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@hbh={{0x48}, {0x8001, 0x6, 0x0, [0x3, 0x2, 0x1, 0x8, 0xd850, 0x8000, 0x0, 0x2bd8, 0x6, 0x7, 0x9, 0x3, 0x1, 0x1, 0xb30, 0xa2f6], 0xf}}, @common=@frag={{0x30}, {[0x6, 0x800], 0x5, 0xe, 0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@broadcast}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x6, @ipv4=@private=0xa010101, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x4040000) 997.374752ms ago: executing program 2 (id=1284): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) (fail_nth: 57) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40040d4) close(0x3) 984.856845ms ago: executing program 1 (id=1285): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000068f3000000e600580300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000852000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 874.376578ms ago: executing program 1 (id=1286): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="bf16200000000000b70700000100f0ff50700000000000008f0000000820000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd364158a4591c559f76c0130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce74c4dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f00c484d339c480f70006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08ef74c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d3287a7b01ab84d336f3c0f45a0642d6f2c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe91ff799a11d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcffff3ffd86fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d253e8778e6e8ffe4ea50b076446f35efffc806b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd3153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00f80b58fd76e4bc46c84799aa792cdaeb6cfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be15579518540000bc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e99948a9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676080000007229e0237c1e34641848531712ff09e89fb062a3e66f4f3c9d7a7fc9aab1ced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfd0e5e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a690bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b270a3646ef55b9f070ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cdcc1f594ecfaff9a79b56f8b380380020000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) 744.979794ms ago: executing program 0 (id=1287): r0 = creat(&(0x7f0000000080)='./control\x00', 0x2c) r1 = socket(0x2b, 0x80801, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000005480)={0x5, 0x8, [0x0, 0x0]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x7, 0x20, 0x4, 0x200, {{0xd, 0x4, 0x3, 0x8, 0x34, 0x67, 0x0, 0xf, 0x4, 0x0, @multicast1, @private=0xa010100, {[@cipso={0x86, 0x15, 0x1, [{0x6, 0xf, "0be93c4df0241ad057c24d8d08"}]}, @lsrr={0x83, 0xb, 0xf4, [@empty, @dev={0xac, 0x14, 0x14, 0x10}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000bc0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', r4, 0x700, 0x8, 0x80000001, 0xffffffff, {{0x14, 0x4, 0x0, 0x4, 0x50, 0x66, 0x0, 0x8, 0x2f, 0x0, @broadcast, @local, {[@ssrr={0x89, 0xb, 0xee, [@remote, @empty]}, @ssrr={0x89, 0x23, 0x75, [@empty, @multicast1, @remote, @local, @loopback, @multicast1, @local, @multicast2]}, @timestamp_addr={0x44, 0xc, 0x67, 0x1, 0x7, [{@broadcast, 0x7}]}]}}}}}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x478, 0x230, 0x198, 0x230, 0x0, 0x0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x6, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x43}, @loopback, 0xff, 0xff000000, 'ip6gre0\x00', 'ip_vti0\x00', {}, {0xff}, 0x33, 0x1, 0xa}, 0x0, 0xd8, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x0, [0x3, 0x1, 0x1, 0x4, 0x4], 0x0, 0x6}}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xed, 0x9}}}, {{@ip={@initdev={0xac, 0x1e, 0x5, 0x0}, @rand_addr=0x64010102, 0x0, 0x0, 'macvlan1\x00', 'rose0\x00', {}, {}, 0x0, 0x0, 0x1d}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @TTL={0x28}}, {{@ip={@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'xfrm0\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@ttl={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4a91, 0xf2e, @dev={0xac, 0x14, 0x14, 0x1f}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x1f8, 0x110, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @broadcast, 0xff, 0xffffff00, 0xa, 0xc, {@empty, {[0xb791839f568d29f9, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x1, 0x2, 0x5, 0x7, 0x6, 0xfff, 'gretap0\x00', 'hsr0\x00', {}, {}, 0x0, 0x10a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x1}}}, {{@arp={@rand_addr=0x64010102, @loopback, 0xffffffff, 0xffffff00, 0x7, 0xd, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0xb84d, 0x705, 0xbea, 0x8, 0xada, 0x2, 'netdevsim0\x00', 'virt_wifi0\x00', {0xff}, {0xff}, 0x0, 0x30}, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8de, 0x400}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x31caf518}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010"], 0x10}], 0x1}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000200)={0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f0ffffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed000062030000000000003f440000000000007a0a00fe00ffffffd704000020000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a0000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9f, 0xe, 0x5b, 0x40, 0x1235, 0x18, 0xf0ee, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa7, 0xdd, 0x2d}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1820000000000000000000000010000018110000", @ANYRES32, @ANYBLOB="0000020000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 411.971088ms ago: executing program 1 (id=1288): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='wlan1\x00', 0x10) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000003803afffe800000000000000000000000000000ff020000000000000000000200000001"], 0x0) 363.10864ms ago: executing program 2 (id=1289): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, 0x0, 0x0, 0x4000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x8, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0x20000000, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x10, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c}], @echo_reply}}}}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24000050) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) semget$private(0x0, 0x4000000009, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000140), 0x100000b2, 0xa6040) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180)={0x2, 0x100000, 0x80000, {r4}}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000080000000000000a20000000000a010100000000000000000a0000000900010073797a300000000050000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e6974001c000480080001400000000408000240"], 0xac}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) 362.516492ms ago: executing program 3 (id=1290): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x20000600}, 0x1, 0x225c17d03}, 0x0) 214.007697ms ago: executing program 3 (id=1291): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r3, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x5, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "b4bc323ef77d1f000071849800000000dfff00"}}) 203.290571ms ago: executing program 1 (id=1292): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x714, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@dev}, {@empty}]}]}}, @timestamp}}}}, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, "d7a6a0c01afc3eb3", "ca757e3d203df15ac203831b6066966b", "49e8b49b", "f15813d4ec309bae"}, 0x28) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1) 0s ago: executing program 3 (id=1293): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x1, @multicast}, 0x4a, {0x2, 0x4e22, @multicast2}, 'pim6reg1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x20000) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000f80)={0x53, 0xffffffffffffffff, 0x6, 0x7f, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000ec0)="a00afccbacc9", 0x0, 0x5, 0x22, 0x2, 0x0}) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000070a0103000014b5000000000100797a3000000008f90e0000000000"], 0x20}}, 0x20000000) unshare(0x5e020980) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200000000000000000008"], 0x1c}}, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r9 = syz_open_procfs(r5, &(0x7f0000000200)='fd/3\x00') io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, r9}]) ioctl$KDSETLED(r3, 0x4b32, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x4) kernel console output (not intermixed with test programs): 64.183641][ T9211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.223340][ T9211] CPU: 1 UID: 0 PID: 9211 Comm: syz.4.908 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 364.223373][ T9211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 364.223386][ T9211] Call Trace: [ 364.223394][ T9211] [ 364.223404][ T9211] dump_stack_lvl+0x189/0x250 [ 364.223436][ T9211] ? __pfx____ratelimit+0x10/0x10 [ 364.223457][ T9211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.223488][ T9211] ? __pfx__printk+0x10/0x10 [ 364.223517][ T9211] ? __might_fault+0xb0/0x130 [ 364.223559][ T9211] should_fail_ex+0x414/0x560 [ 364.223587][ T9211] _copy_from_user+0x2d/0xb0 [ 364.223619][ T9211] smc_setsockopt+0x3b8/0xab0 [ 364.223654][ T9211] ? __pfx_smc_setsockopt+0x10/0x10 [ 364.223674][ T9211] ? aa_sock_opt_perm+0x74/0x110 [ 364.223698][ T9211] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 364.223719][ T9211] ? __pfx_smc_setsockopt+0x10/0x10 [ 364.223742][ T9211] do_sock_setsockopt+0x179/0x1b0 [ 364.223777][ T9211] __x64_sys_setsockopt+0x13f/0x1b0 [ 364.223814][ T9211] do_syscall_64+0xfa/0x3b0 [ 364.223836][ T9211] ? lockdep_hardirqs_on+0x9c/0x150 [ 364.223858][ T9211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.223880][ T9211] ? clear_bhb_loop+0x60/0xb0 [ 364.223907][ T9211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.223931][ T9211] RIP: 0033:0x7f6b1058e929 [ 364.223949][ T9211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.223968][ T9211] RSP: 002b:00007f6b113ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 364.223992][ T9211] RAX: ffffffffffffffda RBX: 00007f6b107b5fa0 RCX: 00007f6b1058e929 [ 364.224008][ T9211] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 364.224020][ T9211] RBP: 00007f6b113ae090 R08: 00000000000003f0 R09: 0000000000000000 [ 364.224033][ T9211] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 364.224047][ T9211] R13: 0000000000000000 R14: 00007f6b107b5fa0 R15: 00007f6b108dfa28 [ 364.224077][ T9211] [ 364.641098][ T3094] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 364.653804][ T3094] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 364.666253][ T3094] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 364.676580][ T3094] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 364.744096][ T3094] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 364.831170][ T3094] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.875106][ T3094] usb 2-1: config 0 descriptor?? [ 365.319582][ T3094] usbhid 2-1:0.0: can't add hid device: -71 [ 365.357489][ T3094] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 365.391047][ T1209] usb 3-1: USB disconnect, device number 50 [ 365.443455][ T3094] usb 2-1: USB disconnect, device number 54 [ 365.747118][ T9229] __nla_validate_parse: 155 callbacks suppressed [ 365.747142][ T9229] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.914'. [ 365.810762][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.914'. [ 365.987977][ T9233] netlink: 'syz.4.914': attribute type 1 has an invalid length. [ 366.126325][ T9233] bond2: entered promiscuous mode [ 366.132289][ T9236] fuse: Unknown parameter 'grou00000000000000000000' [ 366.140661][ T9233] 8021q: adding VLAN 0 to HW filter on device bond2 [ 366.218092][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.914'. [ 366.324170][ T3094] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 366.654760][ T9245] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 366.701213][ T9245] netlink: 'syz.1.917': attribute type 10 has an invalid length. [ 366.770149][ T3094] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 366.779360][ T3094] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.794700][ T3094] usb 4-1: Product: syz [ 366.808303][ T3094] usb 4-1: Manufacturer: syz [ 366.814615][ T3094] usb 4-1: SerialNumber: syz [ 366.829288][ T3094] usb 4-1: config 0 descriptor?? [ 366.936417][ T3094] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 368.745505][ T9264] tun0: tun_chr_ioctl cmd 1074025675 [ 368.752213][ T9264] tun0: persist enabled [ 368.761509][ T9264] tun0: tun_chr_ioctl cmd 1074025675 [ 368.774091][ T9264] tun0: persist disabled [ 368.989423][ T9264] binder: 9261:9264 ioctl c0306201 2000000003c0 returned -14 [ 369.342598][ T9275] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 369.354491][ T5917] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 369.526687][ T5917] usb 2-1: config 255 has too many interfaces: 226, using maximum allowed: 32 [ 369.542075][ T5917] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 369.584491][ T5917] usb 2-1: config 255 has 1 interface, different from the descriptor's value: 226 [ 369.591903][ T3094] usb 4-1: USB disconnect, device number 51 [ 369.624089][ T1209] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 369.633136][ T5917] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 369.704078][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.814062][ T1209] usb 3-1: Using ep0 maxpacket: 32 [ 369.848061][ T1209] usb 3-1: config 0 has an invalid interface number: 250 but max is 1 [ 369.914041][ T1209] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.949456][ T9271] syzkaller1: entered promiscuous mode [ 369.962349][ T9271] syzkaller1: entered allmulticast mode [ 369.977805][ T1209] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 370.002323][ T1209] usb 3-1: config 0 has no interface number 0 [ 370.039464][ T1209] usb 3-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 370.051345][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.063165][ T1209] usb 3-1: Product: syz [ 370.067675][ T1209] usb 3-1: Manufacturer: syz [ 370.072577][ T1209] usb 3-1: SerialNumber: syz [ 370.088839][ T9271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.102460][ T9271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.104966][ T1209] usb 3-1: config 0 descriptor?? [ 370.164400][ T3094] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 370.326014][ T3094] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 370.339294][ T3094] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.340702][ T5917] usb 2-1: USB disconnect, device number 55 [ 370.350351][ T3094] usb 4-1: config 0 has no interface number 0 [ 370.381800][ T3094] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 370.394487][ T3094] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.407377][ T3094] usb 4-1: Product: syz [ 370.412317][ T3094] usb 4-1: Manufacturer: syz [ 370.417420][ T3094] usb 4-1: SerialNumber: syz [ 370.433777][ T3094] usb 4-1: config 0 descriptor?? [ 370.442774][ T3094] hub 4-1:0.31: bad descriptor, ignoring hub [ 370.456565][ T3094] hub 4-1:0.31: probe with driver hub failed with error -5 [ 370.468706][ T3094] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 370.475513][ T3094] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 370.486653][ T3094] usb 4-1: Failed to create links for entity 6 [ 370.492835][ T3094] usb 4-1: Failed to register entities (-22). [ 370.784313][ T3094] usb 4-1: USB disconnect, device number 52 [ 370.983374][ T9283] fuse: Unknown parameter 'grou00000000000000000000' [ 371.218766][ T9288] netlink: 'syz.1.929': attribute type 2 has an invalid length. [ 371.231113][ T9288] netlink: 'syz.1.929': attribute type 11 has an invalid length. [ 371.241834][ T9288] netlink: 132 bytes leftover after parsing attributes in process `syz.1.929'. [ 371.668956][ T5917] usb 3-1: USB disconnect, device number 51 [ 372.850848][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 372.850871][ T30] audit: type=1326 audit(1752781818.412:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9314 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d138e929 code=0x7ffc0000 [ 372.879450][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.887114][ T30] audit: type=1326 audit(1752781818.412:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9314 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d138e929 code=0x7ffc0000 [ 372.909393][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.981183][ T9318] input: syz1 as /devices/virtual/input/input20 [ 372.989461][ T30] audit: type=1326 audit(1752781818.452:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9314 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f46d138e929 code=0x7ffc0000 [ 373.011739][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.257810][ T9312] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.265198][ T9312] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.346379][ T9324] fuse: Bad value for 'rootmode' [ 373.671427][ T30] audit: type=1326 audit(1752781818.452:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9314 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d138e929 code=0x7ffc0000 [ 373.693811][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.834088][ T30] audit: type=1326 audit(1752781818.452:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9314 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d138e929 code=0x7ffc0000 [ 373.962177][ T30] audit: type=1326 audit(1752781818.452:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9314 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f46d138e929 code=0x7ffc0000 [ 374.054652][ T30] audit: type=1326 audit(1752781818.452:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9314 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d138e929 code=0x7ffc0000 [ 374.095364][ T9327] fuse: Unknown parameter 'grou00000000000000000000' [ 374.118036][ T30] audit: type=1326 audit(1752781818.452:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9314 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d138e929 code=0x7ffc0000 [ 374.253548][ T30] audit: type=1326 audit(1752781818.452:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9314 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f46d138e929 code=0x7ffc0000 [ 374.349940][ T9312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.411108][ T9312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.713258][ T9335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 374.760162][ T9312] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.823512][ T9338] ======================================================= [ 374.823512][ T9338] WARNING: The mand mount option has been deprecated and [ 374.823512][ T9338] and is ignored by this kernel. Remove the mand [ 374.823512][ T9338] option from the mount to silence this warning. [ 374.823512][ T9338] ======================================================= [ 374.833897][ T9312] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.858363][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.928718][ T9312] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.938336][ T9312] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.971372][ T9338] fuse: Bad value for 'user_id' [ 375.002181][ T9338] fuse: Bad value for 'user_id' [ 376.374909][ T5939] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 376.447522][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 376.584289][ T5939] usb 2-1: Using ep0 maxpacket: 16 [ 376.774096][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 377.386020][ T5939] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.424134][ T5939] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.455288][ T5939] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 377.464618][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.472652][ T5939] usb 2-1: Product: syz [ 377.477594][ T5939] usb 2-1: Manufacturer: syz [ 377.482224][ T5939] usb 2-1: SerialNumber: syz [ 377.722917][ T10] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 378.029499][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.609219][ T10] usb 3-1: Product: syz [ 378.613450][ T10] usb 3-1: Manufacturer: syz [ 378.693243][ T10] usb 3-1: SerialNumber: syz [ 378.916469][ T10] usb 3-1: config 0 descriptor?? [ 379.335940][ T5939] usb 2-1: 0:2 : does not exist [ 379.458770][ T5939] usb 2-1: USB disconnect, device number 56 [ 379.757728][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 379.823684][ T9375] loop2: detected capacity change from 0 to 7 [ 379.859220][ T9375] Dev loop2: unable to read RDB block 7 [ 379.874483][ T9375] loop2: unable to read partition table [ 379.895751][ T9375] loop2: partition table beyond EOD, truncated [ 379.942494][ T9375] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 380.036632][ T9381] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.050694][ T10] usb 3-1: can't set config #0, error -71 [ 380.087271][ T10] usb 3-1: USB disconnect, device number 52 [ 380.627210][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.956'. [ 380.685033][ T9397] FAULT_INJECTION: forcing a failure. [ 380.685033][ T9397] name failslab, interval 1, probability 0, space 0, times 0 [ 380.724423][ T9391] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 380.744291][ T9397] CPU: 0 UID: 0 PID: 9397 Comm: syz.0.956 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 380.744321][ T9397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 380.744339][ T9397] Call Trace: [ 380.744348][ T9397] [ 380.744357][ T9397] dump_stack_lvl+0x189/0x250 [ 380.744389][ T9397] ? __pfx____ratelimit+0x10/0x10 [ 380.744413][ T9397] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.744451][ T9397] ? __pfx__printk+0x10/0x10 [ 380.744487][ T9397] ? __pfx___might_resched+0x10/0x10 [ 380.744511][ T9397] ? fs_reclaim_acquire+0x7d/0x100 [ 380.744538][ T9397] should_fail_ex+0x414/0x560 [ 380.744565][ T9397] should_failslab+0xa8/0x100 [ 380.744599][ T9397] kmem_cache_alloc_noprof+0x73/0x3c0 [ 380.744628][ T9397] ? __kernfs_new_node+0xd7/0x7e0 [ 380.744655][ T9397] __kernfs_new_node+0xd7/0x7e0 [ 380.744676][ T9397] ? __lock_acquire+0xab9/0xd20 [ 380.744706][ T9397] ? __pfx___kernfs_new_node+0x10/0x10 [ 380.744730][ T9397] ? kernfs_root+0x1c/0x230 [ 380.744757][ T9397] ? kernfs_root+0x1c/0x230 [ 380.744777][ T9397] ? kernfs_root+0x1c/0x230 [ 380.744795][ T9397] ? kernfs_root+0x1c/0x230 [ 380.744820][ T9397] kernfs_new_node+0x102/0x210 [ 380.744848][ T9397] kernfs_create_dir_ns+0x44/0x130 [ 380.744875][ T9397] sysfs_create_dir_ns+0x123/0x280 [ 380.744912][ T9397] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 380.744948][ T9397] ? do_raw_spin_unlock+0x122/0x240 [ 380.744983][ T9397] kobject_add_internal+0x59f/0xb40 [ 380.745018][ T9397] kobject_add+0x155/0x220 [ 380.745058][ T9397] ? __pfx_kobject_add+0x10/0x10 [ 380.745089][ T9397] ? get_device_parent+0x366/0x3a0 [ 380.745124][ T9397] device_add+0x408/0xb50 [ 380.745155][ T9397] ? device_initialize+0x24b/0x440 [ 380.745194][ T9397] netdev_register_kobject+0x156/0x2f0 [ 380.745222][ T9397] register_netdevice+0x126c/0x1ae0 [ 380.745260][ T9397] ? __pfx_register_netdevice+0x10/0x10 [ 380.745286][ T9397] ? __asan_memset+0x22/0x50 [ 380.745315][ T9397] ? dev_addr_mod+0x2ce/0x3d0 [ 380.745352][ T9397] macvlan_common_newlink+0x120a/0x1980 [ 380.745385][ T9397] ? alloc_netdev_mqs+0xc9e/0x11e0 [ 380.745419][ T9397] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 380.745459][ T9397] ? __pfx_macvlan_newlink+0x10/0x10 [ 380.745483][ T9397] rtnl_newlink_create+0x30d/0xb00 [ 380.745520][ T9397] ? __pfx_aa_get_newest_label+0x10/0x10 [ 380.745546][ T9397] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 380.745574][ T9397] ? rtnl_newlink+0x8db/0x1c70 [ 380.745604][ T9397] ? __pfx___mutex_lock+0x10/0x10 [ 380.745628][ T9397] ? ns_capable+0x8a/0xf0 [ 380.745648][ T9397] rtnl_newlink+0x16d6/0x1c70 [ 380.745669][ T9397] ? netlink_sendmsg+0x805/0xb30 [ 380.745699][ T9397] ? __pfx_rtnl_newlink+0x10/0x10 [ 380.745736][ T9397] ? kasan_quarantine_put+0xdd/0x220 [ 380.745755][ T9397] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.745775][ T9397] ? nlmon_xmit+0xb0/0x100 [ 380.745792][ T9397] ? kmem_cache_free+0x18f/0x400 [ 380.745819][ T9397] ? __local_bh_enable_ip+0x12d/0x1c0 [ 380.745837][ T9397] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.745853][ T9397] ? __local_bh_enable_ip+0x12d/0x1c0 [ 380.745870][ T9397] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 380.745890][ T9397] ? __dev_queue_xmit+0x27e/0x3a70 [ 380.745914][ T9397] ? __lock_acquire+0xab9/0xd20 [ 380.745948][ T9397] ? __pfx_rtnl_newlink+0x10/0x10 [ 380.745967][ T9397] rtnetlink_rcv_msg+0x7cc/0xb70 [ 380.745989][ T9397] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 380.746015][ T9397] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 380.746057][ T9397] ? ref_tracker_free+0x63a/0x7d0 [ 380.746081][ T9397] ? __copy_skb_header+0xa7/0x550 [ 380.746108][ T9397] ? __pfx_ref_tracker_free+0x10/0x10 [ 380.746126][ T9397] ? __skb_clone+0x63/0x7a0 [ 380.746146][ T9397] netlink_rcv_skb+0x205/0x470 [ 380.746169][ T9397] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 380.746199][ T9397] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 380.746230][ T9397] ? netlink_deliver_tap+0x2e/0x1b0 [ 380.746251][ T9397] ? netlink_deliver_tap+0x2e/0x1b0 [ 380.746277][ T9397] netlink_unicast+0x75c/0x8e0 [ 380.746305][ T9397] netlink_sendmsg+0x805/0xb30 [ 380.746334][ T9397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.746359][ T9397] ? aa_sock_msg_perm+0x94/0x160 [ 380.746376][ T9397] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 380.746393][ T9397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.746416][ T9397] __sock_sendmsg+0x219/0x270 [ 380.746438][ T9397] ____sys_sendmsg+0x52d/0x830 [ 380.746466][ T9397] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.746498][ T9397] ? import_iovec+0x74/0xa0 [ 380.746523][ T9397] ___sys_sendmsg+0x21f/0x2a0 [ 380.746549][ T9397] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.746601][ T9397] ? __fget_files+0x2a/0x420 [ 380.746615][ T9397] ? __fget_files+0x3a0/0x420 [ 380.746637][ T9397] __sys_sendmmsg+0x227/0x430 [ 380.746665][ T9397] ? __pfx___sys_sendmmsg+0x10/0x10 [ 380.746687][ T9397] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 380.746724][ T9397] ? ksys_write+0x22a/0x250 [ 380.746747][ T9397] ? __pfx_ksys_write+0x10/0x10 [ 380.746766][ T9397] ? rcu_is_watching+0x15/0xb0 [ 380.746790][ T9397] __x64_sys_sendmmsg+0xa0/0xc0 [ 380.746816][ T9397] do_syscall_64+0xfa/0x3b0 [ 380.746832][ T9397] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.746847][ T9397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.746863][ T9397] ? clear_bhb_loop+0x60/0xb0 [ 380.746882][ T9397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.746903][ T9397] RIP: 0033:0x7faf45b8e929 [ 380.746918][ T9397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.746932][ T9397] RSP: 002b:00007faf469b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 380.746949][ T9397] RAX: ffffffffffffffda RBX: 00007faf45db5fa0 RCX: 00007faf45b8e929 [ 380.746960][ T9397] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000c [ 380.746971][ T9397] RBP: 00007faf469b5090 R08: 0000000000000000 R09: 0000000000000000 [ 380.746981][ T9397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 380.746990][ T9397] R13: 0000000000000000 R14: 00007faf45db5fa0 R15: 00007faf45edfa28 [ 380.747013][ T9397] [ 380.747075][ T9397] kobject: kobject_add_internal failed for macvlan3 (error: -12 parent: net) [ 381.637369][ T1209] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 381.814399][ T1209] usb 2-1: Using ep0 maxpacket: 8 [ 381.840317][ T1209] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 381.865143][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.907805][ T1209] usb 2-1: Product: syz [ 381.916371][ T1209] usb 2-1: Manufacturer: syz [ 381.927818][ T1209] usb 2-1: SerialNumber: syz [ 381.958558][ T1209] usb 2-1: config 0 descriptor?? [ 382.219543][ T1209] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 382.897467][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.963'. [ 382.906438][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.963'. [ 383.504159][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 383.675287][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 383.687892][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.698413][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 383.707462][ T1209] usb write operation failed. (-71) [ 383.729431][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 383.739126][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.748152][ T10] usb 4-1: Product: syz [ 383.752409][ T10] usb 4-1: Manufacturer: syz [ 383.760103][ T10] usb 4-1: SerialNumber: syz [ 383.791082][ T1209] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 383.805690][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.812160][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.831488][ T1209] dvbdev: DVB: registering new adapter (Terratec H7) [ 383.846265][ T1209] usb 2-1: media controller created [ 383.857114][ T1209] usb read operation failed. (-71) [ 383.868311][ T1209] usb write operation failed. (-71) [ 383.886449][ T1209] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 383.933802][ T1209] usb 2-1: USB disconnect, device number 57 [ 384.559573][ T9444] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.968'. [ 384.629471][ T9447] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 384.751074][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.968'. [ 384.899677][ T9450] fuse: Unknown parameter 'group_i00000000000000000000' [ 384.913110][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.968'. [ 384.932905][ T9444] netlink: 'syz.4.968': attribute type 1 has an invalid length. [ 385.055438][ T9444] bond3: entered promiscuous mode [ 385.062666][ T9444] 8021q: adding VLAN 0 to HW filter on device bond3 [ 386.434110][ T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 386.615366][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 386.671444][ T9] usb 3-1: config 2 has an invalid interface number: 169 but max is 0 [ 386.720381][ T9] usb 3-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 386.766263][ T9477] FAULT_INJECTION: forcing a failure. [ 386.766263][ T9477] name failslab, interval 1, probability 0, space 0, times 0 [ 386.784284][ T9] usb 3-1: config 2 has no interface number 0 [ 386.792885][ T10] usb 4-1: 0:2 : does not exist [ 386.849637][ T9] usb 3-1: config 2 interface 169 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 386.862310][ T9] usb 3-1: config 2 interface 169 altsetting 0 endpoint 0x8B has an invalid bInterval 129, changing to 11 [ 386.875166][ T9477] CPU: 0 UID: 0 PID: 9477 Comm: syz.0.978 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 386.875189][ T9477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 386.875199][ T9477] Call Trace: [ 386.875205][ T9477] [ 386.875212][ T9477] dump_stack_lvl+0x189/0x250 [ 386.875235][ T9477] ? __pfx____ratelimit+0x10/0x10 [ 386.875251][ T9477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.875270][ T9477] ? __pfx__printk+0x10/0x10 [ 386.875295][ T9477] ? __pfx___might_resched+0x10/0x10 [ 386.875313][ T9477] ? fs_reclaim_acquire+0x7d/0x100 [ 386.875331][ T9477] should_fail_ex+0x414/0x560 [ 386.875351][ T9477] should_failslab+0xa8/0x100 [ 386.875376][ T9477] kmem_cache_alloc_noprof+0x73/0x3c0 [ 386.875397][ T9477] ? __kernfs_new_node+0xd7/0x7e0 [ 386.875416][ T9477] __kernfs_new_node+0xd7/0x7e0 [ 386.875432][ T9477] ? __lock_acquire+0xab9/0xd20 [ 386.875452][ T9477] ? __pfx___kernfs_new_node+0x10/0x10 [ 386.875469][ T9477] ? kernfs_root+0x1c/0x230 [ 386.875488][ T9477] ? kernfs_root+0x1c/0x230 [ 386.875502][ T9477] ? kernfs_root+0x1c/0x230 [ 386.875515][ T9477] ? kernfs_root+0x1c/0x230 [ 386.875532][ T9477] kernfs_new_node+0x102/0x210 [ 386.875552][ T9477] kernfs_create_dir_ns+0x44/0x130 [ 386.875571][ T9477] sysfs_create_dir_ns+0x123/0x280 [ 386.875598][ T9477] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 386.875623][ T9477] ? do_raw_spin_unlock+0x122/0x240 [ 386.875649][ T9477] kobject_add_internal+0x59f/0xb40 [ 386.875674][ T9477] kobject_add+0x155/0x220 [ 386.875695][ T9477] ? __pfx_kobject_add+0x10/0x10 [ 386.875712][ T9477] ? do_raw_spin_unlock+0x122/0x240 [ 386.875737][ T9477] ? get_device_parent+0x366/0x3a0 [ 386.875763][ T9477] device_add+0x408/0xb50 [ 386.875788][ T9477] device_create+0x25b/0x2f0 [ 386.875804][ T9477] ? format_decode+0x5ee/0xe30 [ 386.875824][ T9477] ? string+0x279/0x2b0 [ 386.875843][ T9477] ? widen_string+0x3b/0x2a0 [ 386.875865][ T9477] ? __pfx_device_create+0x10/0x10 [ 386.875889][ T9477] bdi_register_va+0x9c/0x740 [ 386.875910][ T9477] super_setup_bdi_name+0xe6/0x200 [ 386.875931][ T9477] ? fuse_dev_install+0x8d/0x1a0 [ 386.875949][ T9477] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 386.875983][ T9477] ? do_raw_spin_unlock+0x122/0x240 [ 386.876009][ T9477] fuse_fill_super_common+0x64a/0x1150 [ 386.876031][ T9477] ? __pfx_fuse_fill_super_common+0x10/0x10 [ 386.876047][ T9477] ? __init_swait_queue_head+0xa9/0x150 [ 386.876071][ T9477] ? shrinker_register+0x16b/0x230 [ 386.876089][ T9477] ? sget_fc+0x962/0xa40 [ 386.876108][ T9477] fuse_fill_super+0x176/0x1f0 [ 386.876124][ T9477] ? __pfx_fuse_fill_super+0x10/0x10 [ 386.876142][ T9477] get_tree_nodev+0xbb/0x150 [ 386.876164][ T9477] fuse_get_tree+0x2eb/0x4e0 [ 386.876184][ T9477] vfs_get_tree+0x8f/0x2b0 [ 386.876207][ T9477] do_new_mount+0x24a/0xa40 [ 386.876236][ T9477] __se_sys_mount+0x317/0x410 [ 386.876255][ T9477] ? __pfx___se_sys_mount+0x10/0x10 [ 386.876267][ T9477] ? rcu_is_watching+0x15/0xb0 [ 386.876288][ T9477] ? syscall_user_dispatch+0x4f/0x90 [ 386.876304][ T9477] ? __x64_sys_mount+0x20/0xc0 [ 386.876329][ T9477] do_syscall_64+0xfa/0x3b0 [ 386.876345][ T9477] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.876359][ T9477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.876375][ T9477] ? clear_bhb_loop+0x60/0xb0 [ 386.876393][ T9477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.876408][ T9477] RIP: 0033:0x7faf45b8e929 [ 386.876421][ T9477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.876435][ T9477] RSP: 002b:00007faf469b5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 386.876451][ T9477] RAX: ffffffffffffffda RBX: 00007faf45db5fa0 RCX: 00007faf45b8e929 [ 386.876462][ T9477] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 386.876472][ T9477] RBP: 00007faf469b5090 R08: 00002000000002c0 R09: 0000000000000000 [ 386.876482][ T9477] R10: 0000000000800010 R11: 0000000000000246 R12: 0000000000000002 [ 386.876492][ T9477] R13: 0000000000000000 R14: 00007faf45db5fa0 R15: 00007faf45edfa28 [ 386.876513][ T9477] [ 386.876537][ T9477] kobject: kobject_add_internal failed for 0:57 (error: -12 parent: bdi) [ 387.204381][ T5949] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 387.443625][ T9] usb 3-1: config 2 interface 169 altsetting 0 endpoint 0x8B has invalid maxpacket 58232, setting to 1024 [ 387.460256][ T10] usb 4-1: USB disconnect, device number 53 [ 387.544084][ T5949] usb 5-1: Using ep0 maxpacket: 8 [ 387.637143][ T9] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=aa.92 [ 387.660088][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.664288][ T43] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 387.816837][ T5949] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 387.833276][ T5949] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 387.866016][ T9] cypress_m8 3-1:2.169: DeLorme Earthmate USB converter detected [ 387.878689][ T5949] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 387.897395][ T5949] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 387.955373][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 387.977408][ T5949] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 388.031627][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.075562][ T9] usb 3-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 388.130115][ T9] usb 3-1: USB disconnect, device number 53 [ 388.137122][ T9493] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 388.142501][ T10] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 388.198048][ T9] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 388.211685][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.229633][ T9] cypress_m8 3-1:2.169: device disconnected [ 388.236644][ T10] usb 4-1: Product: syz [ 388.240862][ T10] usb 4-1: Manufacturer: syz [ 388.258981][ T10] usb 4-1: SerialNumber: syz [ 388.281659][ T10] usb 4-1: config 0 descriptor?? [ 388.295807][ T5949] usb 5-1: GET_CAPABILITIES returned 0 [ 388.299952][ T10] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 388.301405][ T5949] usbtmc 5-1:16.0: can't read capabilities [ 388.511121][ T10] gspca_sunplus: reg_r err -71 [ 388.519727][ T10] usb 4-1: USB disconnect, device number 54 [ 389.325459][ T1209] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 389.410932][ T30] audit: type=1326 audit(1752781835.072:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.2.984" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f071558e929 code=0x0 [ 389.432690][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.586803][ T1209] usb 4-1: config 0 has an invalid interface number: 189 but max is 0 [ 389.598712][ T1209] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.700709][ T1209] usb 4-1: config 0 has no interface number 0 [ 389.874184][ T1209] usb 4-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 389.934878][ T1209] usb 4-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xCB, changing to 0x8B [ 389.954116][ T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 389.968637][ T1209] usb 4-1: config 0 interface 189 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 389.981443][ T1209] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 389.995582][ T1209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.003711][ T1209] usb 4-1: Product: syz [ 390.010212][ T1209] usb 4-1: Manufacturer: syz [ 390.019216][ T10] usb 5-1: USB disconnect, device number 49 [ 390.054078][ T1209] usb 4-1: SerialNumber: syz [ 390.076078][ T1209] usb 4-1: config 0 descriptor?? [ 390.114386][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 390.129902][ T1209] ums-alauda 4-1:0.189: USB Mass Storage device detected [ 390.161622][ T9] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 390.171736][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.180523][ T9] usb 2-1: Product: syz [ 390.188515][ T9] usb 2-1: Manufacturer: syz [ 390.193160][ T9] usb 2-1: SerialNumber: syz [ 390.220443][ T9] usb 2-1: config 0 descriptor?? [ 390.430981][ T5949] usb 4-1: USB disconnect, device number 55 [ 390.794073][ T1209] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 391.133016][ T1209] usb 5-1: config 0 has no interfaces? [ 391.148526][ T1209] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 391.320813][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.334093][ T1209] usb 5-1: Product: syz [ 391.338526][ T1209] usb 5-1: Manufacturer: syz [ 391.353461][ T1209] usb 5-1: SerialNumber: syz [ 391.369960][ T1209] usb 5-1: config 0 descriptor?? [ 391.714197][ T5917] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 391.912627][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 392.324414][ T5917] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.334875][ T5917] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 392.379766][ T5917] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 392.394046][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.412468][ T5917] usb 4-1: Product: syz [ 392.427144][ T5917] usb 4-1: Manufacturer: syz [ 392.440737][ T5917] usb 4-1: SerialNumber: syz [ 392.617655][ T9544] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 393.884268][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.998'. [ 393.924805][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'. [ 394.518821][ T9560] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1000'. [ 394.584061][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 394.766218][ T9] usb 2-1: USB disconnect, device number 59 [ 394.814294][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 394.927454][ T5917] usb 4-1: 0:2 : does not exist [ 395.069323][ T5917] usb 4-1: USB disconnect, device number 56 [ 395.411138][ T43] usb 5-1: USB disconnect, device number 50 [ 395.430568][ T6962] udevd[6962]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 395.546403][ T9575] ÿ: renamed from veth1_to_bridge (while UP) [ 396.443640][ T9582] 8021q: adding VLAN 0 to HW filter on device bond2 [ 396.552834][ T9582] bond0: (slave bond2): Enslaving as an active interface with an up link [ 397.178471][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 397.214058][ T10] usb 3-1: no configurations [ 397.214205][ T5949] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 397.236584][ T10] usb 3-1: can't read configurations, error -22 [ 397.300213][ T9601] FAULT_INJECTION: forcing a failure. [ 397.300213][ T9601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.394204][ T5949] usb 4-1: Using ep0 maxpacket: 16 [ 397.405703][ T5949] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.416540][ T5949] usb 4-1: config 0 has no interfaces? [ 397.426928][ T5949] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 397.439364][ T5949] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 397.451438][ T5949] usb 4-1: Manufacturer: syz [ 397.466087][ T5949] usb 4-1: config 0 descriptor?? [ 397.485779][ T9601] CPU: 1 UID: 0 PID: 9601 Comm: syz.2.1010 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 397.485810][ T9601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 397.485825][ T9601] Call Trace: [ 397.485834][ T9601] [ 397.485843][ T9601] dump_stack_lvl+0x189/0x250 [ 397.485876][ T9601] ? __pfx____ratelimit+0x10/0x10 [ 397.485902][ T9601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.485929][ T9601] ? __pfx__printk+0x10/0x10 [ 397.485958][ T9601] ? __might_fault+0xb0/0x130 [ 397.486000][ T9601] should_fail_ex+0x414/0x560 [ 397.486027][ T9601] _copy_from_user+0x2d/0xb0 [ 397.486059][ T9601] do_sys_poll+0x242/0x1070 [ 397.486108][ T9601] ? __pfx_do_sys_poll+0x10/0x10 [ 397.486213][ T9601] ? rcu_read_lock_any_held+0xb3/0x120 [ 397.486241][ T9601] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 397.486272][ T9601] ? vfs_write+0x8d8/0xa90 [ 397.486327][ T9601] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 397.486351][ T9601] ? set_user_sigmask+0xc7/0x1b0 [ 397.486376][ T9601] ? __pfx_set_user_sigmask+0x10/0x10 [ 397.486401][ T9601] ? __fget_files+0x3a0/0x420 [ 397.486429][ T9601] __se_sys_ppoll+0x1ff/0x260 [ 397.486464][ T9601] ? __pfx___se_sys_ppoll+0x10/0x10 [ 397.486495][ T9601] ? __pfx_ksys_write+0x10/0x10 [ 397.486521][ T9601] ? rcu_is_watching+0x15/0xb0 [ 397.486552][ T9601] ? do_syscall_64+0xbe/0x3b0 [ 397.486574][ T9601] ? __x64_sys_ppoll+0x20/0xc0 [ 397.486607][ T9601] do_syscall_64+0xfa/0x3b0 [ 397.486629][ T9601] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.486650][ T9601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.486672][ T9601] ? clear_bhb_loop+0x60/0xb0 [ 397.486698][ T9601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.486719][ T9601] RIP: 0033:0x7f071558e929 [ 397.486749][ T9601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.486768][ T9601] RSP: 002b:00007f07163fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 397.486790][ T9601] RAX: ffffffffffffffda RBX: 00007f07157b5fa0 RCX: 00007f071558e929 [ 397.486806][ T9601] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 397.486821][ T9601] RBP: 00007f07163fa090 R08: 0000000000000000 R09: 0000000000000000 [ 397.486834][ T9601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.486847][ T9601] R13: 0000000000000000 R14: 00007f07157b5fa0 R15: 00007f07158dfa28 [ 397.486879][ T9601] [ 397.733548][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.678654][ T5917] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 399.014098][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 399.331057][ T5917] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 399.365258][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.413988][ T5917] usb 2-1: Product: syz [ 399.427970][ T5917] usb 2-1: Manufacturer: syz [ 399.486038][ T5917] usb 2-1: SerialNumber: syz [ 399.665638][ T5917] usb 2-1: config 0 descriptor?? [ 400.403489][ T5931] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 400.594269][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 400.721747][ T5931] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.031525][ T5931] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 401.073557][ T9625] kAFS: unable to lookup cell '' [ 401.128701][ T5949] usb 4-1: USB disconnect, device number 57 [ 401.185937][ T5931] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 401.208022][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.358070][ T5931] usb 5-1: Product: syz [ 401.465665][ T9625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1016'. [ 401.502586][ T30] audit: type=1800 audit(1752781847.162:1189): pid=9625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1016" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 401.544323][ T5931] usb 5-1: Manufacturer: syz [ 401.549079][ T5931] usb 5-1: SerialNumber: syz [ 402.062682][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1014'. [ 402.344657][ T9] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 402.428182][ T5917] usb 2-1: USB disconnect, device number 60 [ 402.542381][ T9] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 402.576822][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.592280][ T9] usb 3-1: Product: syz [ 402.627754][ T9] usb 3-1: Manufacturer: syz [ 402.663514][ T9] usb 3-1: SerialNumber: syz [ 402.761907][ T9] usb 3-1: config 0 descriptor?? [ 402.809085][ T9] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 403.008801][ T9] gspca_sunplus: reg_r err -71 [ 403.017169][ T9] usb 3-1: USB disconnect, device number 56 [ 403.382973][ T9654] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 403.490628][ T5931] usb 5-1: 0:2 : does not exist [ 403.538170][ T5931] usb 5-1: USB disconnect, device number 51 [ 403.718141][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1025'. [ 403.775749][ T6962] udevd[6962]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 404.044145][ T5917] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 404.224524][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 404.258498][ T9643] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1021'. [ 404.270372][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1021'. [ 404.385125][ T9643] vxcan3: entered promiscuous mode [ 404.422983][ T9643] vxcan3: entered allmulticast mode [ 404.472126][ T5917] usb 2-1: unable to get BOS descriptor or descriptor too short [ 404.489406][ T5917] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 404.525411][ T5917] usb 2-1: can't read configurations, error -71 [ 404.722856][ T9673] kAFS: unable to lookup cell '' [ 404.795222][ T9673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1029'. [ 404.819818][ T30] audit: type=1800 audit(1752781850.482:1190): pid=9673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1029" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 404.884318][ T5949] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 405.047882][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.062198][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.077830][ T5949] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 405.087584][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.144391][ T5949] usb 4-1: config 0 descriptor?? [ 405.478253][ T9640] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 405.596452][ T5949] aquacomputer_d5next 0003:0C70:F00D.000A: unknown main item tag 0x0 [ 405.600988][ T9683] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1032'. [ 405.644262][ T9640] usb 3-1: Using ep0 maxpacket: 8 [ 405.662970][ T5949] aquacomputer_d5next 0003:0C70:F00D.000A: unknown main item tag 0x0 [ 405.681792][ T5949] aquacomputer_d5next 0003:0C70:F00D.000A: unknown main item tag 0x0 [ 405.681823][ T9640] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 405.700493][ T9640] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.708710][ T5949] aquacomputer_d5next 0003:0C70:F00D.000A: unknown main item tag 0x0 [ 405.725055][ T9640] usb 3-1: Product: syz [ 405.734324][ T9640] usb 3-1: Manufacturer: syz [ 405.737937][ T5949] aquacomputer_d5next 0003:0C70:F00D.000A: unknown main item tag 0x0 [ 405.738999][ T9640] usb 3-1: SerialNumber: syz [ 405.759731][ T9683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1032'. [ 405.810795][ T5949] aquacomputer_d5next 0003:0C70:F00D.000A: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.3-1/input0 [ 405.838549][ T9683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1032'. [ 405.851338][ T9640] usb 3-1: config 0 descriptor?? [ 405.895575][ T9683] ip6gretap0: entered promiscuous mode [ 405.948278][ T9683] ip6gretap0: left promiscuous mode [ 406.021613][ T9670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.057670][ T9670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.448845][ T5939] usb 4-1: USB disconnect, device number 58 [ 406.594327][ T9696] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1037'. [ 407.567208][ T5917] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 407.745462][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 407.848403][ T9709] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1040'. [ 407.919732][ T5917] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.930427][ T5917] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 408.047906][ T5917] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 408.064873][ T5931] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 408.147839][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.181578][ T5917] usb 2-1: Product: syz [ 408.203682][ T5917] usb 2-1: Manufacturer: syz [ 408.231438][ T5931] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 408.243659][ T5931] usb 5-1: config 0 has an invalid descriptor of length 199, skipping remainder of the config [ 408.265768][ T5931] usb 5-1: config 0 has no interface number 0 [ 408.287971][ T5917] usb 2-1: SerialNumber: syz [ 408.313667][ T9713] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1043'. [ 408.321395][ T5931] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 408.338807][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.358241][ T5931] usb 5-1: Product: syz [ 408.377790][ T5931] usb 5-1: Manufacturer: syz [ 408.388405][ T5931] usb 5-1: SerialNumber: syz [ 408.409975][ T5931] usb 5-1: config 0 descriptor?? [ 408.422542][ T5931] ims_pcu 5-1:0.41: probe with driver ims_pcu failed with error -22 [ 408.670978][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1034'. [ 408.694992][ T9717] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1041'. [ 408.714295][ T9716] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1044'. [ 408.735118][ T9] usb 5-1: USB disconnect, device number 52 [ 409.060842][ T9640] usb 3-1: USB disconnect, device number 57 [ 409.814064][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'. [ 409.835312][ T9726] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 410.490638][ T5917] usb 2-1: 0:2 : does not exist [ 410.577490][ T5917] usb 2-1: USB disconnect, device number 63 [ 410.634458][ T9742] netlink: 'syz.2.1053': attribute type 1 has an invalid length. [ 410.677041][ C0] vkms_vblank_simulate: vblank timer overrun [ 410.731485][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 411.236086][ T9750] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1055'. [ 411.342329][ T9751] x_tables: duplicate underflow at hook 3 [ 411.785573][ T5939] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 412.122425][ T5939] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 412.146752][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.165470][ T5939] usb 5-1: Product: syz [ 412.169706][ T5939] usb 5-1: Manufacturer: syz [ 412.179245][ T5939] usb 5-1: SerialNumber: syz [ 412.189495][ T5939] usb 5-1: config 0 descriptor?? [ 412.217148][ T5939] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 412.754362][ T5939] gspca_sunplus: reg_r err -110 [ 413.169125][ T9778] netlink: 'syz.3.1065': attribute type 1 has an invalid length. [ 413.204104][ T9779] kAFS: unable to lookup cell '' [ 413.386591][ T9779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1064'. [ 413.439724][ T30] audit: type=1800 audit(1752781859.102:1191): pid=9780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1064" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 413.685853][ T30] audit: type=1326 audit(1752781859.322:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0bf8e929 code=0x7ffc0000 [ 413.844118][ T30] audit: type=1326 audit(1752781859.322:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d0bf8e929 code=0x7ffc0000 [ 413.916841][ T30] audit: type=1326 audit(1752781859.322:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0bf8e929 code=0x7ffc0000 [ 413.964469][ T9640] usb 4-1: new low-speed USB device number 59 using dummy_hcd [ 413.982797][ T30] audit: type=1326 audit(1752781859.322:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f1d0bf8e929 code=0x7ffc0000 [ 414.005258][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.108579][ T9640] usb 4-1: device descriptor read/64, error -71 [ 414.139053][ T30] audit: type=1326 audit(1752781859.322:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0bf8e929 code=0x7ffc0000 [ 414.257848][ T9797] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1069'. [ 414.279487][ T30] audit: type=1326 audit(1752781859.332:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d0bf8d290 code=0x7ffc0000 [ 414.301906][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.309039][ T30] audit: type=1326 audit(1752781859.332:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0bf8e929 code=0x7ffc0000 [ 414.404105][ T9640] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 414.489777][ T30] audit: type=1326 audit(1752781859.332:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d0bf8d290 code=0x7ffc0000 [ 414.564060][ T9640] usb 4-1: device descriptor read/64, error -71 [ 414.577798][ T5939] usb 5-1: USB disconnect, device number 53 [ 414.765169][ T9640] usb usb4-port1: attempt power cycle [ 414.832353][ T30] audit: type=1326 audit(1752781859.332:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1d0bf8e52b code=0x7ffc0000 [ 414.854732][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.181731][ T9808] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 415.284077][ T9640] usb 4-1: new low-speed USB device number 61 using dummy_hcd [ 415.321297][ T9640] usb 4-1: device descriptor read/8, error -71 [ 415.580860][ T9640] usb 4-1: new low-speed USB device number 62 using dummy_hcd [ 415.638392][ T9640] usb 4-1: device descriptor read/8, error -71 [ 415.765447][ T9640] usb usb4-port1: unable to enumerate USB device [ 416.703672][ T9826] syzkaller1: entered promiscuous mode [ 416.710977][ T9826] syzkaller1: entered allmulticast mode [ 416.744706][ T9826] FAULT_INJECTION: forcing a failure. [ 416.744706][ T9826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.758104][ T9826] CPU: 1 UID: 0 PID: 9826 Comm: syz.2.1075 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 416.758128][ T9826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 416.758138][ T9826] Call Trace: [ 416.758144][ T9826] [ 416.758151][ T9826] dump_stack_lvl+0x189/0x250 [ 416.758176][ T9826] ? __pfx____ratelimit+0x10/0x10 [ 416.758193][ T9826] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.758212][ T9826] ? __pfx__printk+0x10/0x10 [ 416.758233][ T9826] ? __might_fault+0xb0/0x130 [ 416.758263][ T9826] should_fail_ex+0x414/0x560 [ 416.758283][ T9826] _copy_from_iter+0x1db/0x16f0 [ 416.758311][ T9826] ? __pfx__copy_from_iter+0x10/0x10 [ 416.758328][ T9826] ? sock_alloc_send_pskb+0x875/0x990 [ 416.758356][ T9826] ? __pfx__copy_from_iter+0x10/0x10 [ 416.758377][ T9826] ? page_copy_sane+0x16a/0x280 [ 416.758398][ T9826] copy_page_from_iter+0xdd/0x170 [ 416.758421][ T9826] skb_copy_datagram_from_iter+0x306/0x720 [ 416.758446][ T9826] tun_get_user+0x15c3/0x3ce0 [ 416.758480][ T9826] ? aa_file_perm+0x11f/0xed0 [ 416.758499][ T9826] ? __pfx_tun_get_user+0x10/0x10 [ 416.758518][ T9826] ? aa_file_perm+0x11f/0xed0 [ 416.758535][ T9826] ? aa_file_perm+0x3e7/0xed0 [ 416.758561][ T9826] ? ref_tracker_alloc+0x318/0x460 [ 416.758578][ T9826] ? __lock_acquire+0xab9/0xd20 [ 416.758595][ T9826] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 416.758617][ T9826] ? tun_get+0x1c/0x2f0 [ 416.758640][ T9826] ? tun_get+0x1c/0x2f0 [ 416.758658][ T9826] ? tun_get+0x1c/0x2f0 [ 416.758681][ T9826] tun_chr_write_iter+0x113/0x200 [ 416.758702][ T9826] vfs_write+0x548/0xa90 [ 416.758727][ T9826] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 416.758747][ T9826] ? __pfx_vfs_write+0x10/0x10 [ 416.758776][ T9826] ? __fget_files+0x2a/0x420 [ 416.758797][ T9826] ksys_write+0x145/0x250 [ 416.758819][ T9826] ? __pfx_ksys_write+0x10/0x10 [ 416.758838][ T9826] ? rcu_is_watching+0x15/0xb0 [ 416.758861][ T9826] ? do_syscall_64+0xbe/0x3b0 [ 416.758880][ T9826] do_syscall_64+0xfa/0x3b0 [ 416.758896][ T9826] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.758912][ T9826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.758927][ T9826] ? clear_bhb_loop+0x60/0xb0 [ 416.758946][ T9826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.758961][ T9826] RIP: 0033:0x7f071558e929 [ 416.758975][ T9826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.758988][ T9826] RSP: 002b:00007f07163fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 416.759005][ T9826] RAX: ffffffffffffffda RBX: 00007f07157b5fa0 RCX: 00007f071558e929 [ 416.759016][ T9826] RDX: 000000000000ffbf RSI: 00002000000000c0 RDI: 0000000000000004 [ 416.759026][ T9826] RBP: 00007f07163fa090 R08: 0000000000000000 R09: 0000000000000000 [ 416.759036][ T9826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.759045][ T9826] R13: 0000000000000000 R14: 00007f07157b5fa0 R15: 00007f07158dfa28 [ 416.759068][ T9826] [ 417.231653][ T5949] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 417.373132][ T9832] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1078'. [ 417.384141][ T5949] usb 4-1: Using ep0 maxpacket: 32 [ 417.391641][ T5949] usb 4-1: config 253 has an invalid interface number: 74 but max is 2 [ 417.400690][ T5949] usb 4-1: config 253 has an invalid descriptor of length 132, skipping remainder of the config [ 417.411830][ T5949] usb 4-1: config 253 has 1 interface, different from the descriptor's value: 3 [ 417.420975][ T5949] usb 4-1: config 253 has no interface number 0 [ 417.427650][ T5949] usb 4-1: config 253 interface 74 altsetting 11 bulk endpoint 0x8 has invalid maxpacket 64 [ 417.437999][ T5949] usb 4-1: config 253 interface 74 altsetting 11 bulk endpoint 0x9 has invalid maxpacket 1024 [ 417.448936][ T5949] usb 4-1: config 253 interface 74 altsetting 11 has a duplicate endpoint with address 0xC, skipping [ 417.460512][ T5949] usb 4-1: config 253 interface 74 altsetting 11 has a duplicate endpoint with address 0x5, skipping [ 417.472279][ T5949] usb 4-1: config 253 interface 74 altsetting 11 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 417.514397][ T5949] usb 4-1: config 253 interface 74 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 417.546122][ T5949] usb 4-1: config 253 interface 74 altsetting 11 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 417.569614][ T5949] usb 4-1: config 253 interface 74 altsetting 11 has a duplicate endpoint with address 0x5, skipping [ 417.581137][ T5949] usb 4-1: config 253 interface 74 altsetting 11 has 11 endpoint descriptors, different from the interface descriptor's value: 14 [ 417.618295][ T5949] usb 4-1: config 253 interface 74 has no altsetting 0 [ 417.632192][ T5949] usb 4-1: New USB device found, idVendor=152d, idProduct=9561, bcdDevice=94.22 [ 417.632216][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.632233][ T5949] usb 4-1: Product: syz [ 417.632246][ T5949] usb 4-1: Manufacturer: syz [ 417.632259][ T5949] usb 4-1: SerialNumber: syz [ 417.644163][ T9827] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 417.644268][ T9827] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 417.854049][ T5949] usb-storage 4-1:253.74: USB Mass Storage device detected [ 417.870408][ T5949] usb-storage 4-1:253.74: Quirks match for vid 152d pid 9561: 4000000 [ 417.934827][ T43] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 417.955352][ T5949] usb 4-1: USB disconnect, device number 63 [ 418.118755][ T43] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 418.146052][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.170311][ T43] usb 5-1: Product: syz [ 418.179064][ T9852] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 418.200607][ T43] usb 5-1: Manufacturer: syz [ 418.215445][ T43] usb 5-1: SerialNumber: syz [ 418.234466][ T43] usb 5-1: config 0 descriptor?? [ 418.251894][ T43] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 418.766052][ T43] gspca_sunplus: reg_r err -110 [ 419.024136][ T5924] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 419.025428][ T9858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1085'. [ 419.041444][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1085'. [ 419.184131][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 419.192328][ T5924] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 419.209507][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.240243][ T5924] usb 4-1: config 0 descriptor?? [ 419.268629][ T9862] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1087'. [ 419.284695][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 419.284714][ T30] audit: type=1326 audit(1752781864.952:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.1.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d138e929 code=0x7ffc0000 [ 419.319194][ T9862] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 419.337405][ T9862] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 419.494454][ T30] audit: type=1326 audit(1752781864.982:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.1.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d138e929 code=0x7ffc0000 [ 419.516977][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.588628][ T30] audit: type=1326 audit(1752781864.982:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.1.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f46d138e929 code=0x7ffc0000 [ 419.611442][ T30] audit: type=1326 audit(1752781864.982:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.1.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d138e929 code=0x7ffc0000 [ 419.634601][ T30] audit: type=1326 audit(1752781864.982:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.1.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d138e929 code=0x7ffc0000 [ 419.677264][ T30] audit: type=1326 audit(1752781864.982:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.1.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f46d138e929 code=0x7ffc0000 [ 419.700467][ T30] audit: type=1326 audit(1752781864.982:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.1.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d138e929 code=0x7ffc0000 [ 419.703186][ T9862] syzkaller0: entered promiscuous mode [ 419.723028][ T30] audit: type=1326 audit(1752781864.982:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.1.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f46d138e929 code=0x7ffc0000 [ 419.723085][ T30] audit: type=1326 audit(1752781865.082:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9859 comm="syz.2.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 419.723129][ T30] audit: type=1326 audit(1752781865.082:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9859 comm="syz.2.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 419.806184][ T43] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 419.848640][ T9862] syzkaller0: entered allmulticast mode [ 419.885587][ T5924] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 419.946331][ T5924] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 419.970065][ T5924] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 420.034049][ T43] usb 3-1: device descriptor read/64, error -71 [ 420.264161][ T43] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 420.404153][ T43] usb 3-1: device descriptor read/64, error -71 [ 420.515642][ T43] usb usb3-port1: attempt power cycle [ 420.984133][ T43] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 421.008454][ T43] usb 3-1: device descriptor read/8, error -71 [ 421.110267][ T9877] FAULT_INJECTION: forcing a failure. [ 421.110267][ T9877] name failslab, interval 1, probability 0, space 0, times 0 [ 421.144156][ T9877] CPU: 0 UID: 0 PID: 9877 Comm: syz.0.1090 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 421.144191][ T9877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 421.144205][ T9877] Call Trace: [ 421.144214][ T9877] [ 421.144223][ T9877] dump_stack_lvl+0x189/0x250 [ 421.144256][ T9877] ? __pfx____ratelimit+0x10/0x10 [ 421.144279][ T9877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.144304][ T9877] ? __pfx__printk+0x10/0x10 [ 421.144336][ T9877] ? __pfx___might_resched+0x10/0x10 [ 421.144355][ T9877] ? fs_reclaim_acquire+0x7d/0x100 [ 421.144374][ T9877] should_fail_ex+0x414/0x560 [ 421.144394][ T9877] should_failslab+0xa8/0x100 [ 421.144419][ T9877] __kmalloc_node_noprof+0xd1/0x4e0 [ 421.144441][ T9877] ? qdisc_alloc+0x97/0xaa0 [ 421.144466][ T9877] qdisc_alloc+0x97/0xaa0 [ 421.144493][ T9877] qdisc_create_dflt+0x8e/0x4e0 [ 421.144517][ T9877] taprio_init+0x3e5/0xbd0 [ 421.144549][ T9877] ? __pfx_taprio_init+0x10/0x10 [ 421.144572][ T9877] ? lockdep_rtnl_is_held+0x26/0x40 [ 421.144586][ T9877] ? qdisc_lookup+0x36d/0x6d0 [ 421.144601][ T9877] ? __pfx_taprio_init+0x10/0x10 [ 421.144622][ T9877] qdisc_create+0x7ac/0xea0 [ 421.144646][ T9877] tc_modify_qdisc+0x1538/0x20e0 [ 421.144677][ T9877] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 421.144737][ T9877] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 421.144753][ T9877] rtnetlink_rcv_msg+0x779/0xb70 [ 421.144777][ T9877] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 421.144796][ T9877] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 421.144815][ T9877] ? ref_tracker_free+0x63a/0x7d0 [ 421.144831][ T9877] ? __copy_skb_header+0xa7/0x550 [ 421.144857][ T9877] ? __pfx_ref_tracker_free+0x10/0x10 [ 421.144874][ T9877] ? __skb_clone+0x63/0x7a0 [ 421.144893][ T9877] netlink_rcv_skb+0x205/0x470 [ 421.144917][ T9877] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 421.144938][ T9877] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 421.144971][ T9877] ? netlink_deliver_tap+0x2e/0x1b0 [ 421.144992][ T9877] ? netlink_deliver_tap+0x2e/0x1b0 [ 421.145018][ T9877] netlink_unicast+0x75c/0x8e0 [ 421.145046][ T9877] netlink_sendmsg+0x805/0xb30 [ 421.145075][ T9877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.145100][ T9877] ? aa_sock_msg_perm+0x94/0x160 [ 421.145118][ T9877] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 421.145135][ T9877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.145158][ T9877] __sock_sendmsg+0x219/0x270 [ 421.145179][ T9877] ____sys_sendmsg+0x505/0x830 [ 421.145207][ T9877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.145238][ T9877] ? import_iovec+0x74/0xa0 [ 421.145269][ T9877] ___sys_sendmsg+0x21f/0x2a0 [ 421.145304][ T9877] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.145363][ T9877] ? __fget_files+0x2a/0x420 [ 421.145377][ T9877] ? __fget_files+0x3a0/0x420 [ 421.145399][ T9877] __x64_sys_sendmsg+0x19b/0x260 [ 421.145425][ T9877] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 421.145456][ T9877] ? __pfx_ksys_write+0x10/0x10 [ 421.145476][ T9877] ? rcu_is_watching+0x15/0xb0 [ 421.145499][ T9877] ? do_syscall_64+0xbe/0x3b0 [ 421.145518][ T9877] do_syscall_64+0xfa/0x3b0 [ 421.145534][ T9877] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.145550][ T9877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.145565][ T9877] ? clear_bhb_loop+0x60/0xb0 [ 421.145584][ T9877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.145599][ T9877] RIP: 0033:0x7faf45b8e929 [ 421.145613][ T9877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.145627][ T9877] RSP: 002b:00007faf469b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.145643][ T9877] RAX: ffffffffffffffda RBX: 00007faf45db5fa0 RCX: 00007faf45b8e929 [ 421.145655][ T9877] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 421.145664][ T9877] RBP: 00007faf469b5090 R08: 0000000000000000 R09: 0000000000000000 [ 421.145674][ T9877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 421.145683][ T9877] R13: 0000000000000000 R14: 00007faf45db5fa0 R15: 00007faf45edfa28 [ 421.145706][ T9877] [ 421.541416][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.617255][ T43] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 421.740943][ T5939] usb 5-1: USB disconnect, device number 54 [ 421.812740][ T43] usb 3-1: device descriptor read/8, error -71 [ 422.084501][ T43] usb usb3-port1: unable to enumerate USB device [ 423.097135][ T9893] netlink: 'syz.4.1095': attribute type 1 has an invalid length. [ 423.284249][ T9891] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1092'. [ 424.021087][ T9911] input: syz0 as /devices/virtual/input/input21 [ 424.394593][ T9640] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 424.554031][ T5853] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 424.802169][ T9640] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 424.811567][ T9640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.870799][ T9640] usb 2-1: Product: syz [ 424.887778][ T5853] usb 5-1: Using ep0 maxpacket: 16 [ 424.893512][ T9640] usb 2-1: Manufacturer: syz [ 424.900660][ T5853] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.914512][ T5853] usb 5-1: config 0 has no interfaces? [ 424.929491][ T9640] usb 2-1: SerialNumber: syz [ 424.934442][ T5853] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 424.950755][ T5853] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 424.959503][ T5853] usb 5-1: Manufacturer: syz [ 424.980635][ T5853] usb 5-1: config 0 descriptor?? [ 425.056535][ T9640] usb 2-1: config 0 descriptor?? [ 425.138458][ T9640] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 425.854553][ T9640] gspca_sunplus: reg_r err -110 [ 427.147622][ T9940] FAULT_INJECTION: forcing a failure. [ 427.147622][ T9940] name failslab, interval 1, probability 0, space 0, times 0 [ 427.190824][ T9940] CPU: 0 UID: 0 PID: 9940 Comm: syz.2.1107 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 427.190857][ T9940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 427.190870][ T9940] Call Trace: [ 427.190879][ T9940] [ 427.190888][ T9940] dump_stack_lvl+0x189/0x250 [ 427.190920][ T9940] ? __pfx____ratelimit+0x10/0x10 [ 427.190942][ T9940] ? __pfx_dump_stack_lvl+0x10/0x10 [ 427.190969][ T9940] ? __pfx__printk+0x10/0x10 [ 427.191004][ T9940] ? __pfx___might_resched+0x10/0x10 [ 427.191029][ T9940] ? fs_reclaim_acquire+0x7d/0x100 [ 427.191056][ T9940] should_fail_ex+0x414/0x560 [ 427.191083][ T9940] should_failslab+0xa8/0x100 [ 427.191117][ T9940] kmem_cache_alloc_noprof+0x73/0x3c0 [ 427.191147][ T9940] ? __kernfs_new_node+0xd7/0x7e0 [ 427.191175][ T9940] __kernfs_new_node+0xd7/0x7e0 [ 427.191196][ T9940] ? __lock_acquire+0xab9/0xd20 [ 427.191226][ T9940] ? __pfx___kernfs_new_node+0x10/0x10 [ 427.191250][ T9940] ? kernfs_root+0x1c/0x230 [ 427.191280][ T9940] ? kernfs_root+0x1c/0x230 [ 427.191300][ T9940] ? kernfs_root+0x1c/0x230 [ 427.191319][ T9940] ? kernfs_root+0x1c/0x230 [ 427.191346][ T9940] kernfs_new_node+0x102/0x210 [ 427.191375][ T9940] __kernfs_create_file+0x4b/0x2e0 [ 427.191409][ T9940] sysfs_add_file_mode_ns+0x238/0x300 [ 427.191452][ T9940] sysfs_create_file_ns+0x128/0x1a0 [ 427.191484][ T9940] ? __pfx___up_read+0x10/0x10 [ 427.191521][ T9940] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 427.191558][ T9940] ? __dev_fwnode+0x50/0x80 [ 427.191589][ T9940] ? device_create_file+0xf4/0x1c0 [ 427.191624][ T9940] device_add+0x440/0xb50 [ 427.191662][ T9940] device_create+0x25b/0x2f0 [ 427.191686][ T9940] ? format_decode+0x5ee/0xe30 [ 427.191716][ T9940] ? string+0x279/0x2b0 [ 427.191744][ T9940] ? widen_string+0x3b/0x2a0 [ 427.191777][ T9940] ? __pfx_device_create+0x10/0x10 [ 427.191818][ T9940] bdi_register_va+0x9c/0x740 [ 427.191850][ T9940] super_setup_bdi_name+0xe6/0x200 [ 427.191882][ T9940] ? fuse_dev_install+0x8d/0x1a0 [ 427.191909][ T9940] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 427.191949][ T9940] ? do_raw_spin_unlock+0x122/0x240 [ 427.191986][ T9940] fuse_fill_super_common+0x64a/0x1150 [ 427.192020][ T9940] ? __pfx_fuse_fill_super_common+0x10/0x10 [ 427.192042][ T9940] ? __init_swait_queue_head+0xa9/0x150 [ 427.192078][ T9940] ? shrinker_register+0x16b/0x230 [ 427.192106][ T9940] ? sget_fc+0x962/0xa40 [ 427.192135][ T9940] fuse_fill_super+0x176/0x1f0 [ 427.192160][ T9940] ? __pfx_fuse_fill_super+0x10/0x10 [ 427.192186][ T9940] get_tree_nodev+0xbb/0x150 [ 427.192219][ T9940] fuse_get_tree+0x2eb/0x4e0 [ 427.192249][ T9940] vfs_get_tree+0x8f/0x2b0 [ 427.192284][ T9940] do_new_mount+0x24a/0xa40 [ 427.192328][ T9940] __se_sys_mount+0x317/0x410 [ 427.192355][ T9940] ? __pfx___se_sys_mount+0x10/0x10 [ 427.192374][ T9940] ? rcu_is_watching+0x15/0xb0 [ 427.192406][ T9940] ? syscall_user_dispatch+0x4f/0x90 [ 427.192429][ T9940] ? __x64_sys_mount+0x20/0xc0 [ 427.192465][ T9940] do_syscall_64+0xfa/0x3b0 [ 427.192500][ T9940] ? lockdep_hardirqs_on+0x9c/0x150 [ 427.192523][ T9940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.192545][ T9940] ? clear_bhb_loop+0x60/0xb0 [ 427.192573][ T9940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.192595][ T9940] RIP: 0033:0x7f071558e929 [ 427.192614][ T9940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.192634][ T9940] RSP: 002b:00007f07163fa038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 427.192656][ T9940] RAX: ffffffffffffffda RBX: 00007f07157b5fa0 RCX: 00007f071558e929 [ 427.192674][ T9940] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 427.192689][ T9940] RBP: 00007f07163fa090 R08: 00002000000002c0 R09: 0000000000000000 [ 427.192703][ T9940] R10: 0000000000800010 R11: 0000000000000246 R12: 0000000000000002 [ 427.192717][ T9940] R13: 0000000000000000 R14: 00007f07157b5fa0 R15: 00007f07158dfa28 [ 427.192750][ T9940] [ 428.001790][ T9640] usb 2-1: USB disconnect, device number 64 [ 428.453367][ T5853] usb 5-1: USB disconnect, device number 55 [ 429.834814][ T9975] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1116'. [ 430.744202][ T43] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 430.916312][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 430.977209][ T43] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 431.062477][ T43] usb 2-1: config 0 has no interface number 0 [ 431.065339][ T9993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'. [ 431.098726][ T9993] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1125'. [ 431.139900][ T43] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 431.149332][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'. [ 431.169489][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.184132][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 431.212042][ T43] usb 2-1: Product: syz [ 431.232405][ T43] usb 2-1: Manufacturer: syz [ 431.262579][ T43] usb 2-1: SerialNumber: syz [ 431.264025][ T9994] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1125'. [ 431.328303][ T43] usb 2-1: config 0 descriptor?? [ 431.344914][ T43] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 431.354090][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 431.399598][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.519382][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.569625][ T43] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 431.589746][ T43] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 431.601745][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 431.650190][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.753020][ T9] usb 5-1: config 0 descriptor?? [ 431.995726][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 432.004892][ T43] usb 2-1: USB disconnect, device number 65 [ 432.043861][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 432.112387][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 432.135545][ T43] quatech2 2-1:0.51: device disconnected [ 432.317867][ T9] kone 0003:1E7D:2CED.000B: unknown main item tag 0x0 [ 432.369366][ T9] kone 0003:1E7D:2CED.000B: unknown main item tag 0x0 [ 432.459313][ T9991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.470326][ T9991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.484464][ T9991] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1123'. [ 432.498254][ T9] kone 0003:1E7D:2CED.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 432.778240][ T9] kone 0003:1E7D:2CED.000B: couldn't init struct kone_device [ 432.785964][ T9] kone 0003:1E7D:2CED.000B: couldn't install mouse [ 432.917445][T10014] fuse: Bad value for 'group_id' [ 432.928490][ T9] kone 0003:1E7D:2CED.000B: probe with driver kone failed with error -5 [ 432.959404][T10014] fuse: Bad value for 'group_id' [ 433.085654][ T9] usb 5-1: USB disconnect, device number 56 [ 433.684844][T10006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.975998][ T5853] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 434.224056][ T5853] usb 5-1: Using ep0 maxpacket: 16 [ 434.556846][ T5853] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 434.582509][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.600928][ T5853] usb 5-1: Product: syz [ 434.614877][T10030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.623447][ T5853] usb 5-1: Manufacturer: syz [ 434.628802][ T5853] usb 5-1: SerialNumber: syz [ 434.639109][T10030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.658946][ T5853] usb 5-1: config 0 descriptor?? [ 434.691154][T10030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.701607][ T5853] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 434.715482][ T5853] usb 5-1: Detected FT232H [ 434.721398][T10030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.736445][T10030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.747499][T10030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.901044][ T5853] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 435.321960][ T5853] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 435.811888][T10047] FAULT_INJECTION: forcing a failure. [ 435.811888][T10047] name failslab, interval 1, probability 0, space 0, times 0 [ 435.848678][T10048] fuse: Unknown parameter '1Ò' [ 435.897846][T10047] CPU: 0 UID: 0 PID: 10047 Comm: syz.0.1138 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 435.897876][T10047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 435.897889][T10047] Call Trace: [ 435.897897][T10047] [ 435.897905][T10047] dump_stack_lvl+0x189/0x250 [ 435.897935][T10047] ? __pfx____ratelimit+0x10/0x10 [ 435.897956][T10047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.897979][T10047] ? __pfx__printk+0x10/0x10 [ 435.898011][T10047] ? __pfx___might_resched+0x10/0x10 [ 435.898033][T10047] ? fs_reclaim_acquire+0x7d/0x100 [ 435.898056][T10047] should_fail_ex+0x414/0x560 [ 435.898082][T10047] should_failslab+0xa8/0x100 [ 435.898112][T10047] __kmalloc_noprof+0xcb/0x4f0 [ 435.898139][T10047] ? do_sys_poll+0x2ac/0x1070 [ 435.898172][T10047] do_sys_poll+0x2ac/0x1070 [ 435.898216][T10047] ? __pfx_do_sys_poll+0x10/0x10 [ 435.898314][T10047] ? rcu_read_lock_any_held+0xb3/0x120 [ 435.898339][T10047] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 435.898367][T10047] ? vfs_write+0x8d8/0xa90 [ 435.898418][T10047] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 435.898440][T10047] ? set_user_sigmask+0xc7/0x1b0 [ 435.898463][T10047] ? __pfx_set_user_sigmask+0x10/0x10 [ 435.898485][T10047] ? __fget_files+0x3a0/0x420 [ 435.898510][T10047] __se_sys_ppoll+0x1ff/0x260 [ 435.898542][T10047] ? __pfx___se_sys_ppoll+0x10/0x10 [ 435.898571][T10047] ? __pfx_ksys_write+0x10/0x10 [ 435.898594][T10047] ? rcu_is_watching+0x15/0xb0 [ 435.898622][T10047] ? do_syscall_64+0xbe/0x3b0 [ 435.898641][T10047] ? __x64_sys_ppoll+0x20/0xc0 [ 435.898681][T10047] do_syscall_64+0xfa/0x3b0 [ 435.898700][T10047] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.898719][T10047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.898738][T10047] ? clear_bhb_loop+0x60/0xb0 [ 435.898763][T10047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.898781][T10047] RIP: 0033:0x7faf45b8e929 [ 435.898799][T10047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.898817][T10047] RSP: 002b:00007faf469b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 435.898837][T10047] RAX: ffffffffffffffda RBX: 00007faf45db5fa0 RCX: 00007faf45b8e929 [ 435.898852][T10047] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 435.898870][T10047] RBP: 00007faf469b5090 R08: 0000000000000000 R09: 0000000000000000 [ 435.898882][T10047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.898893][T10047] R13: 0000000000000000 R14: 00007faf45db5fa0 R15: 00007faf45edfa28 [ 435.898922][T10047] [ 436.633322][ T9640] usb 5-1: USB disconnect, device number 57 [ 436.692605][ T9640] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 436.740943][ T9640] ftdi_sio 5-1:0.0: device disconnected [ 436.740971][T10053] fuse: Bad value for 'group_id' [ 436.796956][T10053] fuse: Bad value for 'group_id' [ 437.874109][ T5931] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 438.026847][ T5931] usb 2-1: device descriptor read/64, error -71 [ 438.324236][ T5931] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 438.474215][ T5931] usb 2-1: device descriptor read/64, error -71 [ 438.584634][ T5931] usb usb2-port1: attempt power cycle [ 438.708969][ T9] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 438.880692][ T9] usb 3-1: config 0 has no interfaces? [ 438.944048][ T5931] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 439.039850][ T5931] usb 2-1: device descriptor read/8, error -71 [ 439.055676][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 439.330768][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.436913][ T9] usb 3-1: Product: syz [ 439.493714][ T9] usb 3-1: Manufacturer: syz [ 439.535102][ T5931] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 439.797163][ T5931] usb 2-1: device descriptor read/8, error -71 [ 439.804227][ T9] usb 3-1: SerialNumber: syz [ 439.850637][ T9] usb 3-1: config 0 descriptor?? [ 439.969793][ T5931] usb usb2-port1: unable to enumerate USB device [ 440.234373][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 440.234397][ T30] audit: type=1326 audit(1752781885.892:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.2.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 440.441414][ T30] audit: type=1326 audit(1752781885.892:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.2.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 440.512910][ T30] audit: type=1326 audit(1752781885.892:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.2.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 440.580514][ T30] audit: type=1326 audit(1752781885.892:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.2.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 440.669344][ T30] audit: type=1326 audit(1752781885.892:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.2.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 440.692550][ T30] audit: type=1326 audit(1752781885.892:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.2.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 440.749661][ T30] audit: type=1326 audit(1752781885.892:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.2.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 441.126635][T10104] netlink: zone id is out of range [ 441.140919][T10104] netlink: zone id is out of range [ 441.153540][T10104] netlink: zone id is out of range [ 441.219816][ T30] audit: type=1326 audit(1752781885.892:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.2.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 441.269870][ T9] usb 3-1: USB disconnect, device number 62 [ 441.286293][T10104] netlink: zone id is out of range [ 441.308492][T10104] netlink: zone id is out of range [ 441.322467][T10104] netlink: zone id is out of range [ 441.356058][T10104] netlink: zone id is out of range [ 441.361248][T10104] netlink: zone id is out of range [ 441.407321][ T30] audit: type=1326 audit(1752781885.892:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.2.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 441.526881][T10104] netlink: zone id is out of range [ 441.532331][T10104] netlink: zone id is out of range [ 441.624169][ T30] audit: type=1326 audit(1752781885.892:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.2.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 442.114787][T10115] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1154'. [ 442.516482][T10117] mmap: syz.0.1155 (10117): VmData 37478400 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 442.594698][T10117] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1155'. [ 442.916482][T10121] netlink: 'syz.0.1157': attribute type 1 has an invalid length. [ 444.674801][T10157] netlink: 'syz.2.1169': attribute type 1 has an invalid length. [ 444.724371][ T5939] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 445.224859][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.231310][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.444329][T10165] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1170'. [ 445.487482][T10165] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1170'. [ 445.513064][ T5939] usb 5-1: config 0 has no interfaces? [ 445.572827][ T5939] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 445.622956][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.841736][ T5939] usb 5-1: Product: syz [ 446.101055][ T5939] usb 5-1: Manufacturer: syz [ 446.214275][ T5939] usb 5-1: SerialNumber: syz [ 446.456482][ T5939] usb 5-1: config 0 descriptor?? [ 446.753482][T10152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.763319][T10152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.072766][ T30] audit: type=1326 audit(1752781892.412:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1058e929 code=0x7ffc0000 [ 447.112880][ T30] audit: type=1326 audit(1752781892.412:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b1058e929 code=0x7ffc0000 [ 447.695614][ T30] audit: type=1326 audit(1752781892.412:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1058e929 code=0x7ffc0000 [ 447.754284][ T5939] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 447.833332][ T5917] usb 5-1: USB disconnect, device number 58 [ 447.896824][ T30] audit: type=1326 audit(1752781892.412:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f6b1058e929 code=0x7ffc0000 [ 447.944212][ T5939] usb 3-1: Using ep0 maxpacket: 16 [ 447.958636][ T30] audit: type=1326 audit(1752781892.412:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1058e929 code=0x7ffc0000 [ 448.141533][ T5939] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.218725][ T5939] usb 3-1: config 0 has no interfaces? [ 448.258555][ T30] audit: type=1326 audit(1752781892.412:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b1058d290 code=0x7ffc0000 [ 448.355656][ T5939] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 448.357112][ T30] audit: type=1326 audit(1752781892.412:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1058e929 code=0x7ffc0000 [ 448.791180][ T30] audit: type=1326 audit(1752781892.412:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b1058d290 code=0x7ffc0000 [ 448.848030][ T5939] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 448.898507][ T30] audit: type=1326 audit(1752781892.412:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b1058e52b code=0x7ffc0000 [ 448.934557][ T5939] usb 3-1: Manufacturer: syz [ 448.951884][ T5939] usb 3-1: config 0 descriptor?? [ 448.984323][ T9] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 449.167442][ T30] audit: type=1326 audit(1752781892.412:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b1058e52b code=0x7ffc0000 [ 449.314124][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 449.322597][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.341851][ T9] usb 5-1: config 0 has no interfaces? [ 449.357796][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 449.366947][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 449.490553][ T9] usb 5-1: Manufacturer: syz [ 449.567125][ T9] usb 5-1: config 0 descriptor?? [ 450.166992][T10208] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 35171 - 0 [ 450.201860][T10208] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 35171 - 0 [ 450.239420][T10208] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 35171 - 0 [ 450.249980][T10208] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 35171 - 0 [ 450.266134][T10208] geneve2: entered promiscuous mode [ 450.472005][ T5939] usb 3-1: can't set config #0, error -71 [ 450.636366][ T5939] usb 3-1: USB disconnect, device number 63 [ 450.878977][T10212] fuse: Unknown parameter 'qroup_id' [ 451.873002][ T9] usb 5-1: USB disconnect, device number 59 [ 452.024134][T10229] netlink: 'syz.3.1188': attribute type 10 has an invalid length. [ 452.032052][T10229] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 452.364086][ T9] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 452.505718][T10250] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 452.516763][ T5917] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 452.589883][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 452.639105][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 452.676449][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.703786][ T9] usb 5-1: Product: syz [ 452.747272][ T9] usb 5-1: Manufacturer: syz [ 452.776711][ T9] usb 5-1: SerialNumber: syz [ 452.792139][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 452.850080][ T9] usb 5-1: config 0 descriptor?? [ 452.956965][ T5917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.992816][ T5917] usb 3-1: config 0 has no interfaces? [ 453.028110][ T5917] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 453.080419][ T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 453.127118][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 453.184006][ T5917] usb 3-1: Product: syz [ 453.198555][ T5917] usb 3-1: Manufacturer: syz [ 453.208749][ T5917] usb 3-1: SerialNumber: syz [ 453.225398][ T5917] usb 3-1: config 0 descriptor?? [ 453.304433][ T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 453.370023][ T9] usb 5-1: USB disconnect, device number 60 [ 453.794127][ T9] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 453.964337][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 453.979225][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 453.989750][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 454.012293][ T9] usb 5-1: can't read configurations, error -71 [ 454.103007][ T5939] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 454.318610][ T5939] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 454.333493][ T5939] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 454.369242][ T5939] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 454.381764][ T5939] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 454.398699][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 454.494247][ T5939] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 454.536169][ T5939] usb 2-1: string descriptor 0 read error: -22 [ 454.544111][ T5939] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 454.554042][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.574203][ T5939] usb 2-1: config 0 descriptor?? [ 454.587259][T10262] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 454.610968][ T5939] hub 2-1:0.0: bad descriptor, ignoring hub [ 454.647981][ T5939] hub 2-1:0.0: probe with driver hub failed with error -5 [ 454.681551][ T5939] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input23 [ 455.704057][ T9] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 455.854173][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 455.896260][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.940974][ T9] usb 5-1: config 0 has no interfaces? [ 456.048086][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 456.084043][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 456.109745][ T9] usb 5-1: Manufacturer: syz [ 456.159603][ T9] usb 5-1: config 0 descriptor?? [ 456.379172][ T5917] usb 2-1: USB disconnect, device number 70 [ 456.529575][ T5931] usb 3-1: USB disconnect, device number 64 [ 457.084220][ T5939] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 457.396816][ T5939] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 457.449504][ T5939] usb 3-1: config 0 has no interface number 0 [ 457.595419][ T5939] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 457.619247][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.656617][ T5939] usb 3-1: Product: syz [ 457.677953][ T5939] usb 3-1: Manufacturer: syz [ 457.688221][ T5939] usb 3-1: SerialNumber: syz [ 457.703133][ T5939] usb 3-1: config 0 descriptor?? [ 457.924715][ T5939] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 457.947381][ T5939] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 458.017923][ T5939] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 458.039834][ T5939] usb 3-1: media controller created [ 458.145309][ T5853] IPVS: starting estimator thread 0... [ 458.196956][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 458.234117][T10302] IPVS: using max 28 ests per chain, 67200 per kthread [ 458.795241][ T9] usb 5-1: USB disconnect, device number 63 [ 459.360154][ T5939] usb 3-1: USB disconnect, device number 65 [ 459.624130][ T5949] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 459.754215][ T5949] usb 5-1: device descriptor read/64, error -71 [ 460.024106][ T5949] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 460.168247][ T5949] usb 5-1: device descriptor read/64, error -71 [ 460.344761][ T5949] usb usb5-port1: attempt power cycle [ 460.489292][T10325] kAFS: unable to lookup cell '' [ 460.552540][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 460.552559][ T30] audit: type=1800 audit(1752781906.212:1354): pid=10325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1215" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 460.694278][ T5949] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 460.754802][ T5949] usb 5-1: device descriptor read/8, error -71 [ 461.014910][ T5949] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 461.028981][T10327] loop2: detected capacity change from 0 to 7 [ 461.072113][ T5949] usb 5-1: device descriptor read/8, error -71 [ 461.139505][T10338] pim6reg: entered allmulticast mode [ 461.194393][ T5949] usb usb5-port1: unable to enumerate USB device [ 461.206056][T10339] syzkaller1: entered promiscuous mode [ 461.211652][T10339] syzkaller1: entered allmulticast mode [ 463.124634][ T5917] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 463.243258][T10357] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 463.249944][T10357] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 463.284446][ T5917] usb 5-1: Using ep0 maxpacket: 8 [ 463.297438][T10357] vhci_hcd vhci_hcd.0: Device attached [ 463.311558][ T5917] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 463.325986][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.337338][ T5917] usb 5-1: Product: syz [ 463.343074][ T5917] usb 5-1: Manufacturer: syz [ 463.534067][ T5949] vhci_hcd: vhci_device speed not set [ 463.604404][ T5949] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 463.669048][ T5917] usb 5-1: SerialNumber: syz [ 463.703503][ T5917] usb 5-1: config 0 descriptor?? [ 464.227144][T10358] vhci_hcd: connection reset by peer [ 464.268896][ T13] vhci_hcd: stop threads [ 464.336555][ T13] vhci_hcd: release socket [ 464.351889][ T13] vhci_hcd: disconnect device [ 464.366767][T10337] pim6reg: left allmulticast mode [ 465.467520][T10380] FAULT_INJECTION: forcing a failure. [ 465.467520][T10380] name failslab, interval 1, probability 0, space 0, times 0 [ 465.513106][T10380] CPU: 1 UID: 0 PID: 10380 Comm: syz.0.1230 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 465.513139][T10380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 465.513154][T10380] Call Trace: [ 465.513163][T10380] [ 465.513174][T10380] dump_stack_lvl+0x189/0x250 [ 465.513208][T10380] ? __pfx____ratelimit+0x10/0x10 [ 465.513232][T10380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.513259][T10380] ? __pfx__printk+0x10/0x10 [ 465.513296][T10380] ? __pfx___might_resched+0x10/0x10 [ 465.513323][T10380] ? fs_reclaim_acquire+0x7d/0x100 [ 465.513349][T10380] should_fail_ex+0x414/0x560 [ 465.513379][T10380] should_failslab+0xa8/0x100 [ 465.513415][T10380] __kmalloc_node_noprof+0xd1/0x4e0 [ 465.513447][T10380] ? qdisc_alloc+0x97/0xaa0 [ 465.513483][T10380] qdisc_alloc+0x97/0xaa0 [ 465.513524][T10380] qdisc_create_dflt+0x8e/0x4e0 [ 465.513558][T10380] taprio_init+0x3e5/0xbd0 [ 465.513605][T10380] ? __pfx_taprio_init+0x10/0x10 [ 465.513639][T10380] ? lockdep_rtnl_is_held+0x26/0x40 [ 465.513660][T10380] ? qdisc_lookup+0x36d/0x6d0 [ 465.513681][T10380] ? __pfx_taprio_init+0x10/0x10 [ 465.513711][T10380] qdisc_create+0x7ac/0xea0 [ 465.513748][T10380] tc_modify_qdisc+0x1538/0x20e0 [ 465.513791][T10380] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 465.513851][T10380] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 465.513882][T10380] rtnetlink_rcv_msg+0x779/0xb70 [ 465.513919][T10380] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 465.513946][T10380] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 465.513971][T10380] ? ref_tracker_free+0x63a/0x7d0 [ 465.513994][T10380] ? __copy_skb_header+0xa7/0x550 [ 465.514032][T10380] ? __pfx_ref_tracker_free+0x10/0x10 [ 465.514057][T10380] ? __skb_clone+0x63/0x7a0 [ 465.514087][T10380] netlink_rcv_skb+0x205/0x470 [ 465.514119][T10380] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 465.514150][T10380] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 465.514197][T10380] ? netlink_deliver_tap+0x2e/0x1b0 [ 465.514227][T10380] ? netlink_deliver_tap+0x2e/0x1b0 [ 465.514264][T10380] netlink_unicast+0x75c/0x8e0 [ 465.514305][T10380] netlink_sendmsg+0x805/0xb30 [ 465.514347][T10380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.514382][T10380] ? aa_sock_msg_perm+0x94/0x160 [ 465.514408][T10380] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 465.514432][T10380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.514465][T10380] __sock_sendmsg+0x219/0x270 [ 465.514495][T10380] ____sys_sendmsg+0x505/0x830 [ 465.514537][T10380] ? __pfx_____sys_sendmsg+0x10/0x10 [ 465.514582][T10380] ? import_iovec+0x74/0xa0 [ 465.514619][T10380] ___sys_sendmsg+0x21f/0x2a0 [ 465.514656][T10380] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.514732][T10380] ? __fget_files+0x2a/0x420 [ 465.514752][T10380] ? __fget_files+0x3a0/0x420 [ 465.514784][T10380] __x64_sys_sendmsg+0x19b/0x260 [ 465.514822][T10380] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 465.514874][T10380] ? __pfx_ksys_write+0x10/0x10 [ 465.514903][T10380] ? rcu_is_watching+0x15/0xb0 [ 465.514936][T10380] ? do_syscall_64+0xbe/0x3b0 [ 465.514965][T10380] do_syscall_64+0xfa/0x3b0 [ 465.514988][T10380] ? lockdep_hardirqs_on+0x9c/0x150 [ 465.515011][T10380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.515033][T10380] ? clear_bhb_loop+0x60/0xb0 [ 465.515061][T10380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.515083][T10380] RIP: 0033:0x7faf45b8e929 [ 465.515103][T10380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.515124][T10380] RSP: 002b:00007faf469b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.515148][T10380] RAX: ffffffffffffffda RBX: 00007faf45db5fa0 RCX: 00007faf45b8e929 [ 465.515165][T10380] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 465.515179][T10380] RBP: 00007faf469b5090 R08: 0000000000000000 R09: 0000000000000000 [ 465.515193][T10380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 465.515206][T10380] R13: 0000000000000000 R14: 00007faf45db5fa0 R15: 00007faf45edfa28 [ 465.515240][T10380] [ 465.903520][ C1] vkms_vblank_simulate: vblank timer overrun [ 466.709026][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1233'. [ 466.724212][ T5917] usb 5-1: USB disconnect, device number 68 [ 466.740225][T10387] FAULT_INJECTION: forcing a failure. [ 466.740225][T10387] name failslab, interval 1, probability 0, space 0, times 0 [ 466.842105][T10387] CPU: 1 UID: 0 PID: 10387 Comm: syz.0.1233 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 466.842138][T10387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 466.842151][T10387] Call Trace: [ 466.842159][T10387] [ 466.842169][T10387] dump_stack_lvl+0x189/0x250 [ 466.842201][T10387] ? __pfx____ratelimit+0x10/0x10 [ 466.842223][T10387] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.842248][T10387] ? __pfx__printk+0x10/0x10 [ 466.842284][T10387] ? __pfx___might_resched+0x10/0x10 [ 466.842311][T10387] ? fs_reclaim_acquire+0x7d/0x100 [ 466.842337][T10387] should_fail_ex+0x414/0x560 [ 466.842366][T10387] should_failslab+0xa8/0x100 [ 466.842399][T10387] kmem_cache_alloc_noprof+0x73/0x3c0 [ 466.842429][T10387] ? __kernfs_new_node+0xd7/0x7e0 [ 466.842456][T10387] __kernfs_new_node+0xd7/0x7e0 [ 466.842490][T10387] ? __pfx___kernfs_new_node+0x10/0x10 [ 466.842514][T10387] ? kernfs_root+0x1c/0x230 [ 466.842542][T10387] ? kernfs_root+0x1c/0x230 [ 466.842563][T10387] ? kernfs_root+0x1c/0x230 [ 466.842590][T10387] kernfs_new_node+0x102/0x210 [ 466.842619][T10387] kernfs_create_link+0xa7/0x200 [ 466.842652][T10387] sysfs_do_create_link_sd+0x83/0x110 [ 466.842677][T10387] device_add_class_symlinks+0xb6/0x240 [ 466.842714][T10387] device_add+0x475/0xb50 [ 466.842753][T10387] ? device_initialize+0x24b/0x440 [ 466.842788][T10387] netdev_register_kobject+0x156/0x2f0 [ 466.842816][T10387] register_netdevice+0x126c/0x1ae0 [ 466.842857][T10387] ? __pfx_register_netdevice+0x10/0x10 [ 466.842883][T10387] ? __asan_memset+0x22/0x50 [ 466.842909][T10387] ? dev_addr_mod+0x2ce/0x3d0 [ 466.842949][T10387] macvlan_common_newlink+0x120a/0x1980 [ 466.842985][T10387] ? alloc_netdev_mqs+0xc9e/0x11e0 [ 466.843021][T10387] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 466.843061][T10387] ? __pfx_macvlan_newlink+0x10/0x10 [ 466.843087][T10387] rtnl_newlink_create+0x30d/0xb00 [ 466.843127][T10387] ? __pfx_aa_get_newest_label+0x10/0x10 [ 466.843155][T10387] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 466.843184][T10387] ? rtnl_newlink+0x8db/0x1c70 [ 466.843216][T10387] ? __pfx___mutex_lock+0x10/0x10 [ 466.843257][T10387] ? ns_capable+0x8a/0xf0 [ 466.843287][T10387] rtnl_newlink+0x16d6/0x1c70 [ 466.843318][T10387] ? netlink_sendmsg+0x805/0xb30 [ 466.843363][T10387] ? __pfx_rtnl_newlink+0x10/0x10 [ 466.843419][T10387] ? kasan_quarantine_put+0xdd/0x220 [ 466.843446][T10387] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.843477][T10387] ? nlmon_xmit+0xb0/0x100 [ 466.843502][T10387] ? kmem_cache_free+0x18f/0x400 [ 466.843542][T10387] ? __local_bh_enable_ip+0x12d/0x1c0 [ 466.843568][T10387] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.843591][T10387] ? __local_bh_enable_ip+0x12d/0x1c0 [ 466.843615][T10387] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 466.843645][T10387] ? __dev_queue_xmit+0x27e/0x3a70 [ 466.843682][T10387] ? __lock_acquire+0xab9/0xd20 [ 466.843740][T10387] ? __pfx_rtnl_newlink+0x10/0x10 [ 466.843769][T10387] rtnetlink_rcv_msg+0x7cc/0xb70 [ 466.843802][T10387] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 466.843829][T10387] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 466.843856][T10387] ? ref_tracker_free+0x63a/0x7d0 [ 466.843879][T10387] ? __copy_skb_header+0xa7/0x550 [ 466.843918][T10387] ? __pfx_ref_tracker_free+0x10/0x10 [ 466.843943][T10387] ? __skb_clone+0x63/0x7a0 [ 466.843971][T10387] netlink_rcv_skb+0x205/0x470 [ 466.844003][T10387] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 466.844034][T10387] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 466.844079][T10387] ? netlink_deliver_tap+0x2e/0x1b0 [ 466.844108][T10387] ? netlink_deliver_tap+0x2e/0x1b0 [ 466.844145][T10387] netlink_unicast+0x75c/0x8e0 [ 466.844183][T10387] netlink_sendmsg+0x805/0xb30 [ 466.844223][T10387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.844258][T10387] ? aa_sock_msg_perm+0x94/0x160 [ 466.844281][T10387] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 466.844300][T10387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.844326][T10387] __sock_sendmsg+0x219/0x270 [ 466.844352][T10387] ____sys_sendmsg+0x52d/0x830 [ 466.844389][T10387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.844426][T10387] ? import_iovec+0x74/0xa0 [ 466.844453][T10387] ___sys_sendmsg+0x21f/0x2a0 [ 466.844481][T10387] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.844539][T10387] ? __fget_files+0x2a/0x420 [ 466.844553][T10387] ? __fget_files+0x3a0/0x420 [ 466.844578][T10387] __sys_sendmmsg+0x227/0x430 [ 466.844610][T10387] ? __pfx___sys_sendmmsg+0x10/0x10 [ 466.844634][T10387] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 466.844677][T10387] ? ksys_write+0x22a/0x250 [ 466.844703][T10387] ? __pfx_ksys_write+0x10/0x10 [ 466.844724][T10387] ? rcu_is_watching+0x15/0xb0 [ 466.844761][T10387] __x64_sys_sendmmsg+0xa0/0xc0 [ 466.844789][T10387] do_syscall_64+0xfa/0x3b0 [ 466.844808][T10387] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.844824][T10387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.844842][T10387] ? clear_bhb_loop+0x60/0xb0 [ 466.844862][T10387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.844880][T10387] RIP: 0033:0x7faf45b8e929 [ 466.844895][T10387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.844912][T10387] RSP: 002b:00007faf469b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 466.844931][T10387] RAX: ffffffffffffffda RBX: 00007faf45db5fa0 RCX: 00007faf45b8e929 [ 466.844945][T10387] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000c [ 466.844957][T10387] RBP: 00007faf469b5090 R08: 0000000000000000 R09: 0000000000000000 [ 466.844968][T10387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 466.844979][T10387] R13: 0000000000000000 R14: 00007faf45db5fa0 R15: 00007faf45edfa28 [ 466.845009][T10387] [ 467.392452][ C1] vkms_vblank_simulate: vblank timer overrun [ 467.608067][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 467.672509][T10395] fuse: Unknown parameter 'grou00000000000000000000' [ 467.871483][T10396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.005049][T10396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.104933][ T5853] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 468.274287][ T5853] usb 2-1: device descriptor read/64, error -71 [ 468.555693][ T5853] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 468.718470][ T5853] usb 2-1: device descriptor read/64, error -71 [ 468.728330][ T5949] vhci_hcd: vhci_device speed not set [ 468.854405][ T5853] usb usb2-port1: attempt power cycle [ 469.064347][ T5939] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 469.090194][ T30] audit: type=1326 audit(1752781914.722:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10416 comm="syz.0.1245" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf45b8e929 code=0x0 [ 469.214314][ T5853] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 469.237472][ T5939] usb 3-1: config 1 has an invalid descriptor of length 149, skipping remainder of the config [ 469.254043][ T5853] usb 2-1: device descriptor read/8, error -71 [ 469.260580][ T5939] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 469.283224][ T5939] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 7.40 [ 469.293097][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 469.304679][ T5939] usb 3-1: Product: syz [ 469.309025][ T5939] usb 3-1: SerialNumber: syz [ 469.613548][ T5853] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 469.655893][ T5853] usb 2-1: device descriptor read/8, error -71 [ 469.764380][ T5853] usb usb2-port1: unable to enumerate USB device [ 470.219927][ T5939] usb 3-1: 0:2 : does not exist [ 470.296314][ T5939] usb 3-1: USB disconnect, device number 66 [ 470.385396][T10439] fuse: Unknown parameter 'group_i00000000000000000000' [ 471.072218][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 471.948853][ T30] audit: type=1326 audit(1752781917.612:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 472.020204][ T30] audit: type=1326 audit(1752781917.642:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 472.052821][T10454] syzkaller1: entered promiscuous mode [ 472.058639][T10454] syzkaller1: entered allmulticast mode [ 472.074798][ T30] audit: type=1326 audit(1752781917.642:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 472.138271][ T30] audit: type=1326 audit(1752781917.642:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 472.166062][ T30] audit: type=1326 audit(1752781917.642:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 472.198488][ T30] audit: type=1326 audit(1752781917.652:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 472.223822][ T30] audit: type=1326 audit(1752781917.652:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 472.246951][ T30] audit: type=1326 audit(1752781917.652:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 472.280133][ T30] audit: type=1326 audit(1752781917.652:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 472.565900][T10467] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 472.722134][T10471] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1261'. [ 473.113106][T10476] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 473.774152][ T5917] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 473.798953][T10497] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 473.934244][ T5931] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 473.978044][ T5917] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 473.992972][ T5917] usb 2-1: config 0 interface 0 has no altsetting 0 [ 474.002675][ T5917] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 474.039050][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 474.049165][ T5917] usb 2-1: Product: syz [ 474.053385][ T5917] usb 2-1: Manufacturer: syz [ 474.061971][ T5917] usb 2-1: SerialNumber: syz [ 474.071179][ T5917] usb 2-1: config 0 descriptor?? [ 474.091453][ T5917] usb 2-1: selecting invalid altsetting 0 [ 474.103998][ T5939] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 474.138376][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.164244][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.178303][ T5931] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 474.190696][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.244308][ T5931] usb 3-1: config 0 descriptor?? [ 474.287397][ T5939] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 474.326830][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.365489][ T5939] usb 5-1: config 0 descriptor?? [ 474.381793][ T5939] usb 5-1: selecting invalid altsetting 1 [ 474.428635][ T5939] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 474.543220][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 474.543266][ T30] audit: type=1326 audit(1752781920.202:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10508 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf45b8e929 code=0x7ffc0000 [ 474.600929][ T30] audit: type=1326 audit(1752781920.202:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10508 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7faf45b8e929 code=0x7ffc0000 [ 474.602332][ T3094] usb 5-1: USB disconnect, device number 69 [ 474.629606][ T30] audit: type=1326 audit(1752781920.202:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10508 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf45b8e929 code=0x7ffc0000 [ 474.629687][ T30] audit: type=1326 audit(1752781920.202:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10508 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf45b8e929 code=0x7ffc0000 [ 474.805355][ T30] audit: type=1326 audit(1752781920.202:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10508 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf45b8e929 code=0x7ffc0000 [ 474.806641][ T5939] usb 2-1: USB disconnect, device number 75 [ 474.942222][ T30] audit: type=1326 audit(1752781920.202:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10508 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faf45b90847 code=0x7ffc0000 [ 474.965817][ T30] audit: type=1326 audit(1752781920.202:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10508 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7faf45b907bc code=0x7ffc0000 [ 474.994332][ T30] audit: type=1326 audit(1752781920.202:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10508 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7faf45b906f4 code=0x7ffc0000 [ 475.026002][ T30] audit: type=1326 audit(1752781920.202:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10508 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7faf45b906f4 code=0x7ffc0000 [ 475.049997][ T30] audit: type=1326 audit(1752781920.202:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10508 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7faf45b8d58a code=0x7ffc0000 [ 475.507164][T10523] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1277'. [ 475.679545][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'. [ 476.257605][T10529] netlink: 'syz.4.1277': attribute type 1 has an invalid length. [ 476.590324][T10534] netlink: 736 bytes leftover after parsing attributes in process `syz.0.1280'. [ 476.704590][ T5931] usbhid 3-1:0.0: can't add hid device: -71 [ 476.824100][ T5931] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 476.901496][ T5931] usb 3-1: USB disconnect, device number 67 [ 477.125713][T10548] FAULT_INJECTION: forcing a failure. [ 477.125713][T10548] name failslab, interval 1, probability 0, space 0, times 0 [ 477.155023][T10548] CPU: 1 UID: 0 PID: 10548 Comm: syz.2.1284 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 477.155054][T10548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 477.155069][T10548] Call Trace: [ 477.155077][T10548] [ 477.155086][T10548] dump_stack_lvl+0x189/0x250 [ 477.155119][T10548] ? __pfx____ratelimit+0x10/0x10 [ 477.155141][T10548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.155167][T10548] ? __pfx__printk+0x10/0x10 [ 477.155212][T10548] should_fail_ex+0x414/0x560 [ 477.155240][T10548] should_failslab+0xa8/0x100 [ 477.155275][T10548] __kmalloc_cache_noprof+0x70/0x3d0 [ 477.155305][T10548] ? sctp_add_bind_addr+0x8c/0x370 [ 477.155335][T10548] sctp_add_bind_addr+0x8c/0x370 [ 477.155364][T10548] sctp_copy_local_addr_list+0x30b/0x4e0 [ 477.155394][T10548] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 477.155419][T10548] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 477.155449][T10548] ? sctp_v4_is_any+0x35/0x60 [ 477.155473][T10548] ? sctp_copy_one_addr+0x93/0x360 [ 477.155502][T10548] sctp_bind_addr_copy+0xb3/0x3c0 [ 477.155528][T10548] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 477.155567][T10548] sctp_connect_new_asoc+0x2e0/0x690 [ 477.155602][T10548] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 477.155634][T10548] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 477.155664][T10548] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 477.155693][T10548] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 477.155724][T10548] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 477.155749][T10548] ? security_sctp_bind_connect+0x7e/0x2e0 [ 477.155785][T10548] sctp_sendmsg+0x155c/0x2810 [ 477.155845][T10548] ? __pfx_sctp_sendmsg+0x10/0x10 [ 477.155884][T10548] ? aa_sk_perm+0x81e/0x950 [ 477.155910][T10548] ? __pfx_aa_sk_perm+0x10/0x10 [ 477.155934][T10548] ? sock_rps_record_flow+0x19/0x410 [ 477.155961][T10548] ? inet_sendmsg+0x2f4/0x370 [ 477.155983][T10548] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 477.156011][T10548] __sock_sendmsg+0x19c/0x270 [ 477.156040][T10548] ____sys_sendmsg+0x505/0x830 [ 477.156080][T10548] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.156122][T10548] ? import_iovec+0x74/0xa0 [ 477.156157][T10548] ___sys_sendmsg+0x21f/0x2a0 [ 477.156192][T10548] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.156266][T10548] ? __fget_files+0x2a/0x420 [ 477.156284][T10548] ? __fget_files+0x3a0/0x420 [ 477.156316][T10548] __x64_sys_sendmsg+0x19b/0x260 [ 477.156352][T10548] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 477.156395][T10548] ? __pfx_ksys_write+0x10/0x10 [ 477.156421][T10548] ? rcu_is_watching+0x15/0xb0 [ 477.156452][T10548] ? do_syscall_64+0xbe/0x3b0 [ 477.156480][T10548] do_syscall_64+0xfa/0x3b0 [ 477.156501][T10548] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.156522][T10548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.156543][T10548] ? clear_bhb_loop+0x60/0xb0 [ 477.156569][T10548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.156590][T10548] RIP: 0033:0x7f071558e929 [ 477.156609][T10548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.156628][T10548] RSP: 002b:00007f07163fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.156651][T10548] RAX: ffffffffffffffda RBX: 00007f07157b5fa0 RCX: 00007f071558e929 [ 477.156667][T10548] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 477.156681][T10548] RBP: 00007f07163fa090 R08: 0000000000000000 R09: 0000000000000000 [ 477.156694][T10548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 477.156707][T10548] R13: 0000000000000000 R14: 00007f07157b5fa0 R15: 00007f07158dfa28 [ 477.156740][T10548] [ 477.514251][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.609648][ T43] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 477.641157][T10557] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 477.811905][ T43] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 477.820396][ T43] usb 5-1: config 0 has no interface number 0 [ 477.826620][ T43] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 477.837756][ T43] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 477.849730][ T43] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 477.861302][ T43] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 477.871234][ T43] usb 5-1: config 0 interface 146 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 477.896101][ T43] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=44.8b [ 477.906739][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.914869][ T43] usb 5-1: Product: syz [ 477.919577][ T43] usb 5-1: Manufacturer: syz [ 477.924349][ T43] usb 5-1: SerialNumber: syz [ 477.940217][ T43] usb 5-1: config 0 descriptor?? [ 477.952546][T10541] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 477.986699][ T43] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.146/input/input27 [ 478.015486][ T5203] ------------[ cut here ]------------ [ 478.021293][ T5203] usb 5-1: BOGUS urb xfer, pipe 1 != type 3 [ 478.029554][T10566] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1289'. [ 478.042964][ T5203] WARNING: CPU: 0 PID: 5203 at drivers/usb/core/urb.c:504 usb_submit_urb+0xc82/0x1890 [ 478.054306][ T5203] Modules linked in: [ 478.058481][ T5203] CPU: 0 UID: 0 PID: 5203 Comm: acpid Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 478.070645][ T5203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 478.080830][ T5203] RIP: 0010:usb_submit_urb+0xc82/0x1890 [ 478.086448][ T5203] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 6d 08 00 00 45 8b 04 24 48 c7 c7 40 32 34 8c 4c 89 f6 4c 89 fa e8 cf 51 64 fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 d0 14 de 8e e8 35 [ 478.106235][ T5203] RSP: 0018:ffffc900031b75d0 EFLAGS: 00010246 [ 478.112330][ T5203] RAX: 853a5e4077a81a00 RBX: ffff888145bb4b00 RCX: ffff88807e8e3c00 [ 478.120616][ T5203] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 478.128705][ T5203] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 478.136754][ T5203] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: ffffffff8c343028 [ 478.144794][ T5203] R13: dffffc0000000000 R14: ffffffff8c349b20 R15: ffff8880787d8280 [ 478.152798][ T5203] FS: 00007fc2acd70740(0000) GS:ffff888125c23000(0000) knlGS:0000000000000000 [ 478.161788][ T5203] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.168625][ T5203] CR2: 000000110c25309e CR3: 000000007eaee000 CR4: 00000000003526f0 [ 478.176800][ T5203] Call Trace: [ 478.180113][ T5203] [ 478.183063][ T5203] bcm5974_start_traffic+0xd7/0x140 [ 478.188331][ T5203] bcm5974_open+0x92/0x120 [ 478.192824][ T5203] input_open_device+0x1c5/0x360 [ 478.197837][ T5203] mousedev_open_device+0xcc/0x150 [ 478.202970][ T5203] mousedev_open+0x2ec/0x4a0 [ 478.207627][ T5203] chrdev_open+0x4cc/0x5e0 [ 478.212099][ T5203] ? __pfx_chrdev_open+0x10/0x10 [ 478.217122][ T5203] ? __pfx_chrdev_open+0x10/0x10 [ 478.222097][ T5203] do_dentry_open+0xdf3/0x1970 [ 478.226986][ T5203] vfs_open+0x3b/0x340 [ 478.231100][ T5203] ? path_openat+0x2ecd/0x3830 [ 478.235970][ T5203] path_openat+0x2ee5/0x3830 [ 478.240599][ T5203] ? arch_stack_walk+0xfc/0x150 [ 478.245684][ T5203] ? __pfx_path_openat+0x10/0x10 [ 478.250687][ T5203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.256861][ T5203] do_filp_open+0x1fa/0x410 [ 478.261395][ T5203] ? __lock_acquire+0xab9/0xd20 [ 478.266292][ T5203] ? __pfx_do_filp_open+0x10/0x10 [ 478.271373][ T5203] ? _raw_spin_unlock+0x28/0x50 [ 478.276364][ T5203] ? alloc_fd+0x64c/0x6c0 [ 478.280726][ T5203] do_sys_openat2+0x121/0x1c0 [ 478.285470][ T5203] ? __pfx_do_sys_openat2+0x10/0x10 [ 478.290685][ T5203] ? ksys_read+0x1e1/0x250 [ 478.295181][ T5203] ? __pfx_ksys_read+0x10/0x10 [ 478.299996][ T5203] ? rcu_is_watching+0x15/0xb0 [ 478.304868][ T5203] __x64_sys_openat+0x138/0x170 [ 478.309738][ T5203] do_syscall_64+0xfa/0x3b0 [ 478.314286][ T5203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.320371][ T5203] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 478.326583][ T5203] ? clear_bhb_loop+0x60/0xb0 [ 478.331274][ T5203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.337203][ T5203] RIP: 0033:0x7fc2acdfa407 [ 478.341642][ T5203] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 478.361335][ T5203] RSP: 002b:00007fff4020ec30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 478.369842][ T5203] RAX: ffffffffffffffda RBX: 00007fc2acd70740 RCX: 00007fc2acdfa407 [ 478.377864][ T5203] RDX: 0000000000080800 RSI: 00007fff4020ee40 RDI: ffffffffffffff9c [ 478.385867][ T5203] RBP: 00007fff4020ee40 R08: 0000000000000000 R09: 0000000000000000 [ 478.393849][ T5203] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000040 [ 478.401896][ T5203] R13: 00007fff4020ef40 R14: 00005572621117fe R15: 00007fff4020ef40 [ 478.409937][ T5203] [ 478.413012][ T5203] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 478.420302][ T5203] CPU: 0 UID: 0 PID: 5203 Comm: acpid Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 478.431859][ T5203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 478.441919][ T5203] Call Trace: [ 478.445226][ T5203] [ 478.448163][ T5203] dump_stack_lvl+0x99/0x250 [ 478.452769][ T5203] ? __asan_memcpy+0x40/0x70 [ 478.457373][ T5203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.462591][ T5203] ? __pfx__printk+0x10/0x10 [ 478.467207][ T5203] panic+0x2db/0x790 [ 478.471114][ T5203] ? __pfx_panic+0x10/0x10 [ 478.475578][ T5203] __warn+0x31b/0x4b0 [ 478.479565][ T5203] ? usb_submit_urb+0xc82/0x1890 [ 478.484520][ T5203] ? usb_submit_urb+0xc82/0x1890 [ 478.489480][ T5203] report_bug+0x2be/0x4f0 [ 478.493838][ T5203] ? usb_submit_urb+0xc82/0x1890 [ 478.498798][ T5203] ? usb_submit_urb+0xc82/0x1890 [ 478.503752][ T5203] ? usb_submit_urb+0xc84/0x1890 [ 478.508706][ T5203] handle_bug+0x84/0x160 [ 478.512966][ T5203] exc_invalid_op+0x1a/0x50 [ 478.517576][ T5203] asm_exc_invalid_op+0x1a/0x20 [ 478.522438][ T5203] RIP: 0010:usb_submit_urb+0xc82/0x1890 [ 478.528003][ T5203] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 6d 08 00 00 45 8b 04 24 48 c7 c7 40 32 34 8c 4c 89 f6 4c 89 fa e8 cf 51 64 fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 d0 14 de 8e e8 35 [ 478.547641][ T5203] RSP: 0018:ffffc900031b75d0 EFLAGS: 00010246 [ 478.553739][ T5203] RAX: 853a5e4077a81a00 RBX: ffff888145bb4b00 RCX: ffff88807e8e3c00 [ 478.561728][ T5203] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 478.569715][ T5203] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 478.577692][ T5203] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: ffffffff8c343028 [ 478.585675][ T5203] R13: dffffc0000000000 R14: ffffffff8c349b20 R15: ffff8880787d8280 [ 478.593685][ T5203] bcm5974_start_traffic+0xd7/0x140 [ 478.598910][ T5203] bcm5974_open+0x92/0x120 [ 478.603349][ T5203] input_open_device+0x1c5/0x360 [ 478.608304][ T5203] mousedev_open_device+0xcc/0x150 [ 478.613442][ T5203] mousedev_open+0x2ec/0x4a0 [ 478.618060][ T5203] chrdev_open+0x4cc/0x5e0 [ 478.622499][ T5203] ? __pfx_chrdev_open+0x10/0x10 [ 478.627465][ T5203] ? __pfx_chrdev_open+0x10/0x10 [ 478.632437][ T5203] do_dentry_open+0xdf3/0x1970 [ 478.637234][ T5203] vfs_open+0x3b/0x340 [ 478.641322][ T5203] ? path_openat+0x2ecd/0x3830 [ 478.646108][ T5203] path_openat+0x2ee5/0x3830 [ 478.650717][ T5203] ? arch_stack_walk+0xfc/0x150 [ 478.655652][ T5203] ? __pfx_path_openat+0x10/0x10 [ 478.660714][ T5203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.666820][ T5203] do_filp_open+0x1fa/0x410 [ 478.671334][ T5203] ? __lock_acquire+0xab9/0xd20 [ 478.676197][ T5203] ? __pfx_do_filp_open+0x10/0x10 [ 478.681264][ T5203] ? _raw_spin_unlock+0x28/0x50 [ 478.686194][ T5203] ? alloc_fd+0x64c/0x6c0 [ 478.690545][ T5203] do_sys_openat2+0x121/0x1c0 [ 478.695237][ T5203] ? __pfx_do_sys_openat2+0x10/0x10 [ 478.700451][ T5203] ? ksys_read+0x1e1/0x250 [ 478.704883][ T5203] ? __pfx_ksys_read+0x10/0x10 [ 478.709656][ T5203] ? rcu_is_watching+0x15/0xb0 [ 478.714436][ T5203] __x64_sys_openat+0x138/0x170 [ 478.719310][ T5203] do_syscall_64+0xfa/0x3b0 [ 478.723823][ T5203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.729895][ T5203] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 478.736060][ T5203] ? clear_bhb_loop+0x60/0xb0 [ 478.740763][ T5203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.746662][ T5203] RIP: 0033:0x7fc2acdfa407 [ 478.751090][ T5203] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 478.770805][ T5203] RSP: 002b:00007fff4020ec30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 478.779231][ T5203] RAX: ffffffffffffffda RBX: 00007fc2acd70740 RCX: 00007fc2acdfa407 [ 478.787210][ T5203] RDX: 0000000000080800 RSI: 00007fff4020ee40 RDI: ffffffffffffff9c [ 478.795198][ T5203] RBP: 00007fff4020ee40 R08: 0000000000000000 R09: 0000000000000000 [ 478.803174][ T5203] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000040 [ 478.811155][ T5203] R13: 00007fff4020ef40 R14: 00005572621117fe R15: 00007fff4020ef40 [ 478.819152][ T5203] [ 478.822530][ T5203] Kernel Offset: disabled [ 478.826864][ T5203] Rebooting in 86400 seconds..