last executing test programs: 8.858264622s ago: executing program 4 (id=1134): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='3', 0x1}], 0x1) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780080012400000000005001500", @ANYRES8=r3], 0x64}}, 0x0) getdents64(r0, &(0x7f0000000180)=""/61, 0x3d) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ff7afedf}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f00000003c0)=0x9, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, 0x5, 0x3, 0xc, 0x0, 0x70bd27, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x4d4, 0x6, 0x0, 0x90, 0x3, 0xe0000003}, @sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x6e6bbc, 0x5, {0x6, 0x32, 0x8c, 0xe, 0x0, 0x9, 0x0, @in6=@mcast1, @in6=@empty}}]}, 0x60}}, 0x400c010) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="d00000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003002001000000000000000000000000000114000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000003c000e800c00028005000104000000002c000180140003"], 0xd0}}, 0x0) 8.349164579s ago: executing program 4 (id=1136): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf3c4}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1e, 0x2, 0x3, 0x9, 0x2, 0xffffffff, 0x3}}, {0x4}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000000)=0x80, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r9, &(0x7f00000006c0)={0x50d, 0x7d, 0x0, {{0x500, 0x1f7, 0x0, 0x0, {}, 0x0, 0x0, 0xc, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\" \x83~\x01\b\xe2\xe7HP\x1cQHK\xa0/\x10\x9c\xaa\xf9\x15\t\xa2', 0x55, '\xf8\xf6i\xfbqk\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00'}, 0x301, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00'/769, 0xffffffffffffffff, 0xee01}}, 0x50d) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1816ebfff7ff03000000000083070400000000fc9074f97f005c5bd3905898affb4e548f853ca71732"], 0x18}, 0x0) 8.023196141s ago: executing program 4 (id=1140): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @random="94f0c5d4e816", @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, 'z?\x00', 0x10, 0x21, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "dba20d"}}}}}}}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x27) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/bus/input/devices\x00', 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, &(0x7f0000000040)={'#! ', '', [{0x20, ']\t'}]}, 0x7) close(r5) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x4000000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000140)={{0x8, 0x5}, 'port0\x00', 0x40, 0x400, 0x0, 0xc, 0x40, 0x7f, 0x401, 0x0, 0x2, 0x2}) 6.526623855s ago: executing program 4 (id=1145): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x80000000, 0xe67, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x8, 0xb50, 0x0, 0x800, 0x3, 0x0, 0x6, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0xb, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x7fff, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0x800, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x4, 0x6, 0xb, 0x4, 0x9, 0x101, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xae0, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0x4, 0x3, 0xff, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x6a6d06fb, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x4, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000000000000, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r2, 0x0, 0x1, 0x4}}, 0x20) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)="c0c957d020443ad68b", 0x9}, 0x1, 0x0, 0x0, 0x804}, 0x4048801) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)}, 0x48005) socket$inet_sctp(0x2, 0x1, 0x84) getpid() r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/4\x00') preadv(r5, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x0, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="d19b757a509b1b11c4befd8cadfe4c4a57", 0x11}, {0x0}], 0x2) 6.149530926s ago: executing program 3 (id=1148): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYRESHEX=r0], 0x20) r1 = epoll_create1(0x80000) r2 = socket$inet6(0x10, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x4000000a}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r4 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r5 = socket$netlink(0x10, 0x3, 0x0) unshare(0x2040400) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) pread64(r3, &(0x7f0000000080)=""/237, 0xed, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0xc, &(0x7f0000000040)=0x5, 0x4) sendto$inet(r6, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002b00)={0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$sock_cred(r8, 0x1, 0x4d, 0x0, &(0x7f0000000000)) setsockopt$inet_tcp_int(r7, 0x6, 0x2e, &(0x7f0000000080)=0x2800, 0x4) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000104c05c405000000000001090224000100000000090400000103000000092100020001220600"/54], 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000001c0)={0xe, @tick=0x4, 0xd5, {0x60, 0x2}, 0x66, 0x2, 0x9}) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="e0593c886d57f88120011316a719b6d34245"], 0x0}) 6.14936585s ago: executing program 4 (id=1149): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0xb140) poll(&(0x7f0000000200), 0x0, 0x80000000) (async) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002a00)='/sys/kernel/fscaps', 0x40000, 0x1) close_range(r2, r2, 0x2) (async) syz_usb_connect(0x6, 0x24, &(0x7f0000002e00)=ANY=[], 0x0) (async) ioctl$TCXONC(r2, 0x4004550d, 0x3) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001e18d851183ea93eeadcd6740000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f010063767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 6.133924734s ago: executing program 2 (id=1150): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = io_uring_setup(0x1afc, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x80000000, 0xfefffffb}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r1, 0x21, &(0x7f0000000340)={0x0, 0xebb9, 0x20, 0x3, 0xdf}, 0x1) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x60}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x6, 0x6, 0xff, 0xeb, 0x1}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e21, 0x7, @remote}}, 0xdeff, 0x5, 0x77a94818, 0x7, 0x1, 0x4, 0x7}, &(0x7f00000002c0)=0x9c) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 5.986049662s ago: executing program 2 (id=1151): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f00000006c0)=@v2={0x2000000, [{0x4e, 0x6}, {0x5, 0x2}]}, 0x14, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000004503"]) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/19, 0x13}, 0x10}], 0x1, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300000000000000000000000000000000010be50400ff0100000000000000002dc04408c1e0e8ca42b00000000000010c00028005000100000000003c0002802c00018014000312fe8000000000000000000000000000aa14000400fe800093d53b4f0000000000000002010c0002800500013169afb48212d1f002ce62000000000008000740000000001800068014000480ff0100000000"], 0xac}}, 0x0) fchown(r0, 0x0, 0x0) 5.782303895s ago: executing program 2 (id=1152): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000280)={0xc, r4, 0x80000}) ioctl$TCSETS(r5, 0x5402, &(0x7f00000005c0)={0x0, 0x3, 0x320a, 0xfffffffd, 0xb, "2eba682b7305d7cf52c1d2a89ce758fb976429"}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x2c, r6, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0xa8f0361232b039fb}]}]}]}, 0x2c}}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0xffffffffffffffff, &(0x7f00000003c0)) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a300000000008000440000000000900010073797a30000000000800034000000004"], 0x64}}, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) gettid() getpid() r8 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80000000}, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x18c, 0x15, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_OBJ_USERDATA={0xb0, 0x8, "5e3a47fdeb101702538d3e7e03cea15e679e0b213edd2366017e1236e8c7b4bd01df4092bedbe81898d8de130870d35fe745ff9ffee2125c0693717cce8aa89fd48751a2ebc9827209019f11556f6ff16d023acbf608d9ec22f111d63a53cb8b369702094246a0117d4b871287a3224de494febc5c54676309eb7f8ae3a9ed40a73f57bd54d9dc24760bd4fc648de6fecd8911340c2f916c83c517f62e0f41ad98e5c8d4fad6c0036624f0de"}, @NFTA_OBJ_USERDATA={0x1c, 0x8, "142f71d8a3230606069a9e3317d711822eeee7dee3740752"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x87, 0x8, "b6817c45945e5279e4900f43cd9c0430a7e9098bbb050f2e84b998127c2dafc03f40ebc5f6b30bb1c580cb7a5615bae010167d97b0ea5c0fd592497f586401a43cd94ecc452dd412fb1cd21225f3f3ccad3f132f86c69bcd8f7f884921d93abfc3f786cfcd5b5a366eb535127fcf08cfbd7b5f1d1eed37154c02759d0abc6f1aa51879"}]}, 0x18c}, 0x1, 0x0, 0x0, 0x431ea13cfacaa8da}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007008019000000000000000000000000af1e4ccfb7b3cad800", [0x0, 0x2000000000001]}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000680)=[@in6={0xa, 0x4e20, 0xfffffb0b, @loopback, 0x1}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x22, @local, 0x4}, @in6={0xa, 0x4e20, 0x8, @private0, 0xfff}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0xc4) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x38, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x38}}, 0x0) 5.676747601s ago: executing program 2 (id=1153): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a1180002000000000000000e1208000f0100810401a80016eaa40001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x38, 0x1, 0x2, 0x5, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x80) 5.566171906s ago: executing program 2 (id=1154): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002540)='./file0\x00', &(0x7f0000002580)='system.posix_acl_default\x00', &(0x7f00000021c0), 0x24, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000002100210100000000ffdbdf250a00000000100000000000000500160008000000080017008b"], 0x2c}}, 0x80) 5.429724425s ago: executing program 3 (id=1156): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc2c45513, &(0x7f0000002e00)={{0x8, 0x7, 0x3, 0x1ff, 'syz0\x00', 0x7f}, 0x0, [0x8, 0x8, 0x1000, 0x2000000, 0xb3d, 0xffffffff, 0x5, 0x901, 0xbbf, 0x7, 0x15b, 0x7, 0x5944, 0x5, 0x7, 0x4a7, 0x9, 0x5, 0xd, 0x3, 0x2c, 0x400, 0x40, 0x10000000, 0x6, 0x0, 0xffffffff, 0x800, 0x3, 0x3, 0x4, 0x6, 0x6, 0xfff, 0x3ff, 0x1, 0x5, 0x3, 0x5, 0x9, 0x7, 0x7fff, 0xffff8000, 0x80000001, 0xe, 0x0, 0x2, 0x0, 0xe, 0x4, 0x9, 0x5, 0x400, 0x3, 0x9, 0xfffff647, 0x8, 0x4, 0x5, 0x0, 0x9, 0x9, 0x5, 0x8, 0x98, 0xbe, 0x6, 0xa, 0x7, 0x80000000, 0x81, 0x10001, 0x2, 0x80000001, 0x69d, 0xb, 0x3, 0x1, 0x8, 0x9, 0x7, 0x9, 0x1, 0x3, 0x1, 0xffff, 0x6, 0x8, 0x7ff, 0x4, 0xef, 0xff, 0x6, 0x3, 0xf86, 0x589f, 0x3, 0x9, 0x895, 0xfff, 0x9, 0x89, 0x0, 0x1, 0xe0b2, 0x9, 0xfffff561, 0xe, 0x3, 0x3, 0xfffffffa, 0x3, 0x2, 0x1, 0x2ba, 0x1, 0xe, 0x0, 0xf, 0x2, 0xf2, 0x4, 0x0, 0x7, 0x2, 0x7, 0x6, 0x100]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000340)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) unshare(0x22020600) setreuid(0x0, 0xee01) fchdir(r8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, 0x0, &(0x7f0000000040)) r9 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r9, &(0x7f0000001680)={&(0x7f0000000080)={0x2c, 0xc, 0x0, 0x4}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000100)}, {&(0x7f00000001c0)="84ce771e0baf08142c6723008fca0a45ed1b29dcd507c1274f3c0eb2411b9ed2f4c3f1814371720abb75257c324c17c6b0421e5e4332b07086108e7e3df3d0672eabef49e1b6be4ca23df006a943bb84", 0x50}, {&(0x7f0000000240)="bca73996ad4769c7407b76dad389c8852bf4172b76b02751cf9dc659cd62d4c0fedcd45e646972e3cb29dfd438755e16cea9428d48a685be2671f1", 0x3b}, {&(0x7f0000000280)="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", 0xff8}, {&(0x7f0000001280)="bea97f13abbd8b764aa76a328a8fb45459b919574eb4afbc65f221c759054ead72ab553d514fb8a49e5ce18c875c79ecf28f264cfc5b5e0786a71b3832ba30102ee6ccb7c253355a658877794863ba6543b1765d77cb395990e4cc26f9a98769fdfa8b97e67238b82e8456324a8abc3651c8bcfda8130b96da931fa4c9bc7c70245fcdec6f6c92ca67efb05d0e2ea4915104ff0c48de51dde0549c47c8383a", 0x9f}, {&(0x7f0000001340)="724a0a4354231406267a215d59b42fccf94949972e24b53287845d426eb2178f69548f1117578e879f7be51cd3d80f716147f0", 0x33}, {&(0x7f0000001380)="27e3823f9d629ab44ae98ba92ca6969726fc3ff167b2ce58f96ae8f94fb4277e752fc5630b28f6df1173328c2112b943ba0391496291a82978b43b2d87fb92a9c26032e6", 0x44}, {&(0x7f0000001400)="7c687704885903777dde37d544f7650e0fa7458511d12d78c4af96c3458e8b14c3b689a74aa8b76c7e69eec92a9f4364bcaa796e8437a91bdbf9009e0d51fe7de23ee950d84f1603f419638741ce168adc5e6faa0c1d66022b0763902214fb19e61e3a1e698dea5a27919f0aede61e15cbcc6951c6bd2294c32902c0be047d95d02524d1e762a90d1d7d2d2906dd63352c8eb2e28e297cbadb21428718671e7cb144abc62929ce616bcf82bd714d38eeeacc73c342d8620c0709c7081d68c6968591a386106cff4156ff9485545789b2df917e5aeb5b97f304649f35669f2ead08ad7e26", 0xe4}, {&(0x7f0000001500)="3901e7ab6f926915f8e6127ef1e362d3202c7b5fdc144ea1f8c8b3e61d1213d3be02b216b323c136eb27c4411dbd84ee75fa1af12f07fe9587ba83345692ab5a09e3796d40425839499f390130117c334620d2c3a7e282edf81379106c8f4c90ae69886cabf44ba24d3686dc453164d6737ce00bf3ad8eca72e9e3e517c5445020323b364a5cd9d74e4e4184c295e3d54d148cd450814a5eea4f245d4d1dedb6cc1c2d26fc4b56ebefcd8954a8271aac33ca53cef5e504857740c268460233f239374c46", 0xc4}], 0x9, 0x0, 0x0, 0x8005}, 0x20000000) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000900)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 4.894264842s ago: executing program 1 (id=1157): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x14, r1, 0x605, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x1040) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000190c0), 0x121381, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, "4bad897e0716799a64be03008b78a3cddf00"}) write(r4, &(0x7f0000000640)='u', 0x1) r6 = syz_open_pts(r4, 0x0) timer_settime(r3, 0x0, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080)) r7 = dup(r6) read$FUSE(r7, &(0x7f0000004400)={0x2020}, 0x2020) ioperm(0x0, 0x11, 0x2) flock(0xffffffffffffffff, 0xa422928b49da8f69) 4.856983795s ago: executing program 1 (id=1158): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x10}}, 0x24000080) 4.760198749s ago: executing program 1 (id=1159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x20, r2}, 0x2a) 4.605300172s ago: executing program 1 (id=1160): socket$inet6(0xa, 0x3, 0x8000000003c) socket(0x3, 0x80000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="55000000100001040000000022000000000000006fdf04b5f02da85754a3c07bb41108270487bdcf6a70bc0b322d103eba4f9dc45d2ddeda1e4aa434c84ec453a5efc1c7f8f044007315fe5a9553cdf696359b95f49fe31a9d49f0892a18d735ace9bed27df0227cfa49ce34d4150afed855ce13e716497b63f74f762519027c065fa1bd1c9a6fd3bdec818a924ec96cfae50449d0e2e27011f7a614408ea0a59073d4eee0b2a33412c8a09cd9f58c793513148ae1d7c4e4d532105cfbaf71416ad7dda60370da37b26acfaf2122039c0a63bb9376a0", @ANYRES32=0x0, @ANYBLOB="21000000000000002000128008000100687372001400028008000100", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x4010804) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x2c, r7, 0x1, 0x0, 0x25dfdbfb, {0x23}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x2c}}, 0x2010) 4.601366752s ago: executing program 2 (id=1162): r0 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) flistxattr(r1, &(0x7f0000000700)=""/4096, 0x1000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendfile(r0, r3, &(0x7f0000005b00)=0x7, 0xd) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000140)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000080010000008e04be686f"], 0x48}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c000000000701010000000000000000050000000900010073797a30000000"], 0x6c}, 0x1, 0x0, 0x0, 0x6000041}, 0x20040040) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009f000040"]) accept4(r6, 0x0, 0x0, 0x800) recvmmsg(r6, &(0x7f00000059c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f0000000040)=""/18, 0x12}, {&(0x7f0000000100)=""/107, 0x6b}, {&(0x7f0000000180)=""/159, 0x9f}, {&(0x7f0000000240)=""/7, 0x7}, {&(0x7f0000000280)=""/158, 0x9e}, {&(0x7f0000000340)=""/100, 0x64}], 0x7, &(0x7f0000000400)=""/7, 0x7}, 0x101}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/197, 0xc5}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/245, 0xf5}, {&(0x7f0000002640)=""/14, 0xe}, {&(0x7f0000002680)=""/209, 0xd1}, {&(0x7f0000002780)=""/252, 0xfc}, {&(0x7f0000002880)=""/78, 0x4e}, {&(0x7f0000002900)=""/143, 0x8f}], 0x9}, 0x1}, {{&(0x7f0000002a40)=@isdn, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002ac0)=""/155, 0x9b}, {&(0x7f0000002b80)=""/63, 0x3f}, {&(0x7f0000002bc0)=""/58, 0x3a}, {&(0x7f0000002c00)=""/174, 0xae}, {&(0x7f0000002cc0)=""/191, 0xbf}], 0x5, &(0x7f0000002dc0)=""/22, 0x16}, 0xcb}, {{&(0x7f0000002e00)=@generic, 0x80, &(0x7f0000004040)=[{&(0x7f0000002e80)=""/103, 0x67}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000003f00)=""/180, 0xb4}, {&(0x7f0000003fc0)=""/91, 0x5b}], 0x4, &(0x7f0000004080)=""/178, 0xb2}, 0xffffffff}, {{&(0x7f0000004140)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000054c0)=[{&(0x7f00000041c0)=""/72, 0x48}, {&(0x7f0000004240)=""/236, 0xec}, {&(0x7f0000004340)=""/182, 0xb6}, {&(0x7f0000004400)=""/4096, 0x1000}, {&(0x7f0000005400)=""/156, 0x9c}], 0x5, &(0x7f0000005500)=""/179, 0xb3}, 0x7}, {{&(0x7f00000055c0)=@phonet, 0x80, &(0x7f00000057c0)=[{&(0x7f0000005640)=""/27, 0x1b}, {&(0x7f0000005680)=""/74, 0x4a}, {&(0x7f0000005700)=""/146, 0x92}], 0x3}}, {{&(0x7f0000005800)=@nfc, 0x80, &(0x7f0000005900)=[{&(0x7f0000005880)=""/118, 0x76}], 0x1, &(0x7f0000005940)=""/91, 0x5b}, 0xc37}], 0x7, 0x10022, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005ac0)) 3.934848228s ago: executing program 3 (id=1164): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000200)={'mangle\x00', 0x0, [0xffffffff, 0xfff, 0x517f, 0x4, 0x1]}, &(0x7f0000000280)=0x54) r1 = socket(0x11, 0x3, 0x0) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) fcntl$addseals(r1, 0x409, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xc, @multicast, 'ip6tnl0\x00'}}, 0x1e) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @remote, @void, {@llc={0x8864, {@snap={0x0, 0x0, '~', "3fab95", 0x892f}}}}}, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x143082, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r4, 0xc0045004, &(0x7f00000000c0)) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2bc, 0x128, 0x2b8, 0x182, 0x0, 0x0, 0x1f4, 0x3a8, 0x3a8, 0x1f4, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private2, @mcast2, [0xffffff00, 0xff, 0x0, 0xffffffff], [0xff000000, 0x0, 0xffffffff, 0xff], 'ipvlan1\x00', 'wlan1\x00', {0xff}, {0xff}, 0x84, 0x9}, 0x0, 0xe0, 0x128, 0x0, {0x0, 0x1800}, [@common=@unspec=@limit={{0x3c}, {0x12000000, 0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x10, 'snmp\x00'}}}, {{@ipv6={@remote, @remote, [], [0x0, 0x0, 0x0, 0xff000000], 'macsec0\x00', 'netdevsim0\x00', {}, {}, 0x4b86ab3e5f0d3da7}, 0x0, 0xa4, 0xcc}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x9}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x318) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000207d1e512d00000000000109022400010000000904000a0103000000092105000001220700090581030000014003"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) socket(0x2a, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) close(r7) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000000)={0x18, &(0x7f0000000040)={0x0, 0x22, 0x6, {0x6, 0x2, '\x00\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000002100010000000000ecffffff020014000000000000d5275ffcd172aa86141434c808508b5cac9ecada5d8a81a66b19cdc5a0606127b6b8d5cf40983eb8878e0a55fcd31e0665a66ad3f608554ac3bd0d8cdc87632aa4a179d420c4b1292e7521f1d2c919580174e483fbba66c0488327e1890f60421b5e141b"], 0x24}}, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000180)=0x4) socket$kcm(0x29, 0x0, 0x0) 3.041263522s ago: executing program 4 (id=1167): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(0xffffffffffffffff, &(0x7f0000000940)={0x2020}, 0x2020) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000380)=""/128, 0x80, 0x0, 0x0, 0x2}}, 0x48) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES8=0x0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000200)={0x44, &(0x7f0000000180)={0x40, 0x3, 0x35, "01473d2087f7965d0a566e4648ce6e600968921ff7401359f65f4ff438212bb300f0ffff00ffff7d4ca19a2687a826000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x20, 0x2f, 0x1, "eb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 2.509050572s ago: executing program 0 (id=1168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x14, r1, 0x605, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x1040) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000190c0), 0x121381, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, "4bad897e0716799a64be03008b78a3cddf00"}) write(r4, &(0x7f0000000640)='u', 0x1) r6 = syz_open_pts(r4, 0x0) timer_settime(r3, 0x0, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080)) r7 = dup(r6) read$FUSE(r7, &(0x7f0000004400)={0x2020}, 0x2020) ioperm(0x0, 0x11, 0x2) flock(0xffffffffffffffff, 0xa422928b49da8f69) 2.414333078s ago: executing program 0 (id=1169): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x10}}, 0x24000080) 2.40160432s ago: executing program 0 (id=1170): r0 = socket(0x200000000000011, 0x2, 0x1) r1 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x3, 0x6, @random="518440db9de1"}, 0x14) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="e90c630faca23080c20000000800450000240000e0"], 0x0) 2.326815736s ago: executing program 0 (id=1171): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000200)="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", 0x137, 0x4000, &(0x7f0000000080)={0xa, 0x6e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c) shutdown(r0, 0x1) (async) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0xa}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0xa}, 0x8) openat$rtc(0xffffff9c, &(0x7f0000000080), 0x2b21c0, 0x0) r1 = inotify_init1(0x0) ioctl$int_in(r1, 0x541b, &(0x7f0000000c00)) (async) ioctl$int_in(r1, 0x541b, &(0x7f0000000c00)) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x6) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) (async) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x200, 0x0, 0x0, 0x0, r4}, 0x0, &(0x7f00000001c0)=0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0xffe0, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0xc}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xc2}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xde5}]}, 0x50}, 0x1, 0x0, 0x0, 0x44004}, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x440, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$sequencer(0xffffff9c, &(0x7f00000001c0), 0x8c00, 0x0) (async) openat$sequencer(0xffffff9c, &(0x7f00000001c0), 0x8c00, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) (async) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r9, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$sock_int(r9, 0x1, 0x8, 0x0, 0x0) sendto$inet(r9, 0x0, 0x0, 0x11, 0x0, 0x0) 2.250190663s ago: executing program 3 (id=1172): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{0xfffc, 0x8001}, 'syz1\x00', 0x2e}) r1 = add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @random="94f0c5d4e816", @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, 'z?\x00', 0x10, 0x21, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "dba20d"}}}}}}}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x27) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/bus/input/devices\x00', 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, &(0x7f0000000040)={'#! ', '', [{0x20, ']\t'}]}, 0x7) close(r5) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x4000000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000140)={{0x8, 0x5}, 'port0\x00', 0x40, 0x400, 0x0, 0xc, 0x40, 0x7f, 0x401, 0x0, 0x2, 0x2}) 1.351152359s ago: executing program 1 (id=1173): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x31}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = landlock_create_ruleset(&(0x7f0000000040)={0xb001, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5) sendmsg$DEVLINK_CMD_RATE_SET(r5, 0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x804) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000"], 0x34}, 0x1, 0x0, 0x0, 0x40080c0}, 0x40000) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) 1.350500673s ago: executing program 0 (id=1174): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb46, 0x8, 0x8, 0x0, 0x3}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r4) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x4}) r8 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r9 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r10 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000005c0)="cd", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000340)={r10, r8, r9}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 1.316130294s ago: executing program 3 (id=1175): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002c00010026bd70001bdbdfdc2d338a0008001a00576f6310d1519e3b4045fe177b96a9d38b5425d80ea3d5d694842790ec0b7a37cbdfb21d8bc4886de1ea8a0eb2648915344032c9d507c84712d79037f34b80e560bd1441787a7c88173590a0ff0f6aae3322ed5dbad1d2f411d946b8791a2dc2593a7f4d5f", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x40800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000206010200000000000000020000002305000400000000000900020073797a30000000000500010007000000050005000a0000000c000780080012000000000016000300686173683a6e65742c706f72742c6e6574000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x1, 0x8000, 0xd19, 0x0, {{0x6, 0x4, 0x1, 0x5, 0x18, 0x64, 0x0, 0xe, 0x4, 0x0, @broadcast, @loopback, {[@ra={0x94, 0x4}]}}}}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) openat$cgroup_root(0xffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x41808}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FLAGS={0x8, 0xd, 0x8}, @IFLA_GRE_OKEY={0x8, 0x5, 0x9}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x4}, @IFLA_GRE_IKEY={0x8, 0x4, 0xa}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0xc000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000300)={'wg0\x00'}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000640)=[@text16={0x10, 0x0}], 0x1, 0x14, &(0x7f0000000680)=[@cstype3={0x5, 0x5}], 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TARGET={0xfd3a, 0x1, 0x4}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x20, r9, 0x5, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}, 0x1, 0x0, 0x0, 0x40048}, 0x4048844) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x3c, r13, 0x1, 0x70bd25, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c46ef400"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000985}, 0x4e000) sendmsg$NL80211_CMD_TESTMODE(r5, &(0x7f0000001a40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a00)={&(0x7f0000000740)={0x1284, r9, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x55, 0x45, "407c7854bf6a1c1d35e16f0e4a606e534642609a83a4edc5ed3ef00edf8c45894f0dfea1965e33d019a195d02e50eea76631d616a815cc58d1bbced258de831aea8fd3f72ac686055116371d1b2072a9e2"}, @NL80211_ATTR_TESTDATA={0x4f, 0x45, "0e88dc490e28aa06655064ad9f3e96059df1004a5dcf36d09c8c4bca5d29625dfb281b9c22975939fca207c89560023ad4c21d55566315883c1af27412805fe7f9204493638aba70d258fa"}, @NL80211_ATTR_TESTDATA={0xc8, 0x45, "b8767d98533b86f3dc394ebcdb085ab67a870efb847f9b8206fbbaccb1837fc25e84355d330386fdbbbea7bef1b292ec1d297b00eedd5bcc8659476e190676744e2a3fec97cb501a2e1bcc97ba6ed0cb6d432b0975c54b20b8b7f807edee55fad8a52eac4d087464c4b31105e892b6229c1dcbed0ae46d6e348b7adde1fcd8c3e5cfbd2ebae64baef33cd0366db478042b5c415643c30ce033ecd6d9b311189b68a576482bf455339a599045b3c98d3ba54541aaf35b320a0c1de954801bc852da7ed77d"}, @NL80211_ATTR_TESTDATA={0x65, 0x45, "a587d3bc2c6ffd6ec0dba2549adf1e815ee8db064303a2843cdb1050861fd01c375a802b4e815a6e5593f2b7dcff5e38c02e9e5081ff05ac7cc923af3a74671336f17c88418f12d1856a703caa0765c01cb84a535a086198c7fb591336688923ed"}, @NL80211_ATTR_TESTDATA={0x89, 0x45, "9798cfcba225d4f736388d9f75998c3d6e57c892939362d9b7f6d92855bf78e2ba1cffbbfa22ed04a971cf98c80460fcd076dd996f8ea4f240cd1bbf8e348836933daef900066b9b79687545a0aa23ba4d29e799a7f6aff0c96c4cc6ccaf5efc3c3baf4d158be094fcc01278aa9bb29abd9d8265efc8aa0e7671938e2d16fc33f4eb430e74"}]}, 0x1284}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x4, 0x1000, 0x35, @private1, @empty, 0x80, 0x20, 0x64aa, 0x2}}) 474.266443ms ago: executing program 3 (id=1176): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x10, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) (async) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) write$binfmt_script(r1, 0x0, 0x0) (async) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000000)) 60.692624ms ago: executing program 1 (id=1177): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) socket(0x848000000015, 0x805, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x1e, 0x805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e000000040002800800", @ANYRES64=r1], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 0s ago: executing program 0 (id=1178): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x7}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000), 0x2ec4, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)) write$dsp(r2, &(0x7f0000000000)="81", 0x1) close(r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x4000, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x10, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x9, 0x0, 0x40, 0x0, 0x0, 0x6, 0x44a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x180d, 0x80000000, 0x9, 0x0, 0x0, 0xffff82ee, 0x2, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x80, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0xfffffff7], [0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) readv(r5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e1f, 0x0, @private0}, 0x1c) sendmsg$inet(r7, &(0x7f00000001c0)={0x0, 0x62, &(0x7f0000000680)=[{&(0x7f00000006c0)="c72e5e81d243ce4577fc96744f9952ebf6b1a2568391a429da5d76852a69457b832ab4e06adb1475c56671942a738e3763abd5086a6951f0fd52d26655a69328af65084e57b5cf0af353b8965a1fd4cfe8680d88d8d6c01aa70ac252bb4f1ac8fc99222b01e4117b810eb20d751c8b4863f74ca525d74f4351fe", 0x7a}, {&(0x7f00000005c0)="69d08a31962be11fafbb02ada76fafbd64afce32c81d45b5ca979e0ee3ad203934db54b8d64845ae59f1efd915c82a92a6f1063def6f895eaae9113e843d58b6a6b7dcc2fd5133ad9f90ca1dd24d75a4178ad0c67f6cb4ab8af08b3e5b907d5b7688cff5af0490c2b709e2e3ddc839cb4507a054e029d03726", 0x79}], 0x2}, 0x8080) kernel console output (not intermixed with test programs): 8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 273.544508][ T8348] Call Trace: [ 273.544516][ T8348] [ 273.544525][ T8348] dump_stack_lvl+0x241/0x360 [ 273.544568][ T8348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.544602][ T8348] ? __pfx__printk+0x10/0x10 [ 273.544648][ T8348] should_fail_ex+0x424/0x570 [ 273.544678][ T8348] _copy_from_iter+0x211/0x1c70 [ 273.544715][ T8348] ? __build_skb_around+0x247/0x3d0 [ 273.544742][ T8348] ? __alloc_skb+0x298/0x480 [ 273.544762][ T8348] ? __pfx__copy_from_iter+0x10/0x10 [ 273.544794][ T8348] ? __pfx___alloc_skb+0x10/0x10 [ 273.544818][ T8348] ? skb_put+0x114/0x1f0 [ 273.544850][ T8348] netlink_sendmsg+0x73c/0xcd0 [ 273.544898][ T8348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.544935][ T8348] ? __import_iovec+0x585/0x830 [ 273.544964][ T8348] ? aa_sock_msg_perm+0x91/0x160 [ 273.545002][ T8348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.545032][ T8348] __sock_sendmsg+0x221/0x270 [ 273.545065][ T8348] ____sys_sendmsg+0x523/0x860 [ 273.545099][ T8348] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.545143][ T8348] __sys_sendmsg+0x271/0x360 [ 273.545180][ T8348] ? __pfx___sys_sendmsg+0x10/0x10 [ 273.545273][ T8348] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 273.545302][ T8348] ? lockdep_hardirqs_on+0x9d/0x150 [ 273.545332][ T8348] __do_fast_syscall_32+0xb4/0x110 [ 273.545360][ T8348] ? exc_page_fault+0x5f8/0x920 [ 273.545392][ T8348] do_fast_syscall_32+0x34/0x80 [ 273.545420][ T8348] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.545448][ T8348] RIP: 0023:0xf7fa6579 [ 273.545467][ T8348] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 273.545485][ T8348] RSP: 002b:00000000f50a555c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 273.545507][ T8348] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 273.545522][ T8348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.545535][ T8348] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 273.545546][ T8348] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 273.545559][ T8348] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 273.545590][ T8348] [ 273.736354][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.824077][ T8346] vivid-000: RxSense Present: 0x00000000 [ 273.841039][ T8346] vivid-000: EDID Present: 0x00000000 [ 273.853310][ T8346] vivid-000: ================== END STATUS ================== [ 274.318801][ T8358] netlink: 148 bytes leftover after parsing attributes in process `syz.1.706'. [ 274.551542][ T8362] FAULT_INJECTION: forcing a failure. [ 274.551542][ T8362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.641910][ T8362] CPU: 0 UID: 0 PID: 8362 Comm: syz.4.708 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 274.641941][ T8362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 274.641953][ T8362] Call Trace: [ 274.641961][ T8362] [ 274.641970][ T8362] dump_stack_lvl+0x241/0x360 [ 274.642007][ T8362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.642038][ T8362] ? __pfx__printk+0x10/0x10 [ 274.642079][ T8362] should_fail_ex+0x424/0x570 [ 274.642105][ T8362] _copy_from_user+0x2d/0xb0 [ 274.642136][ T8362] get_compat_msghdr+0xb3/0x730 [ 274.642170][ T8362] ? __fget_files+0x2a/0x420 [ 274.642191][ T8362] ? __pfx_get_compat_msghdr+0x10/0x10 [ 274.642235][ T8362] __sys_sendmsg+0x23b/0x360 [ 274.642263][ T8362] ? __pfx___sys_sendmsg+0x10/0x10 [ 274.642337][ T8362] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 274.642363][ T8362] ? lockdep_hardirqs_on+0x9d/0x150 [ 274.642391][ T8362] __do_fast_syscall_32+0xb4/0x110 [ 274.642416][ T8362] ? exc_page_fault+0x5f8/0x920 [ 274.642445][ T8362] do_fast_syscall_32+0x34/0x80 [ 274.642471][ T8362] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 274.642496][ T8362] RIP: 0023:0xf747d579 [ 274.642513][ T8362] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 274.642530][ T8362] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 274.642551][ T8362] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 274.642564][ T8362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 274.642577][ T8362] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 274.642588][ T8362] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 274.642600][ T8362] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 274.642633][ T8362] [ 274.830620][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.083355][ T9] usb 3-1: USB disconnect, device number 46 [ 275.476347][ T5894] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 275.537615][ T8378] gtp0: entered promiscuous mode [ 275.842534][ T5894] usb 4-1: config 0 has no interfaces? [ 275.860179][ T5894] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 275.889134][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.916652][ T5894] usb 4-1: Product: syz [ 275.920876][ T5894] usb 4-1: Manufacturer: syz [ 275.941378][ T5894] usb 4-1: SerialNumber: syz [ 275.957187][ T5894] usb 4-1: config 0 descriptor?? [ 275.962534][ T8389] netlink: 148 bytes leftover after parsing attributes in process `syz.2.717'. [ 276.076442][ T5896] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 276.276258][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 276.299667][ T5896] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 276.328886][ T5896] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.374645][ T5896] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.522243][ T5896] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.537093][ T5896] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.555016][ T5896] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 276.564807][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.813132][ T8384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.846960][ T8384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.898825][ T8400] FAULT_INJECTION: forcing a failure. [ 276.898825][ T8400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.922796][ T5896] usb 1-1: usb_control_msg returned -71 [ 276.939242][ T5896] usbtmc 1-1:16.0: can't read capabilities [ 276.969863][ T8400] CPU: 1 UID: 0 PID: 8400 Comm: syz.1.721 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 276.969894][ T8400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 276.969908][ T8400] Call Trace: [ 276.969917][ T8400] [ 276.969926][ T8400] dump_stack_lvl+0x241/0x360 [ 276.969965][ T8400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.969996][ T8400] ? __pfx__printk+0x10/0x10 [ 276.970040][ T8400] should_fail_ex+0x424/0x570 [ 276.970068][ T8400] _copy_from_user+0x2d/0xb0 [ 276.970099][ T8400] snd_seq_write+0x323/0xac0 [ 276.970127][ T8400] ? __lock_acquire+0xad5/0xd80 [ 276.970164][ T8400] ? __pfx_snd_seq_write+0x10/0x10 [ 276.970194][ T8400] ? bpf_lsm_file_permission+0x9/0x10 [ 276.970219][ T8400] ? rw_verify_area+0x246/0x630 [ 276.970246][ T8400] vfs_writev+0x5ba/0xbc0 [ 276.970277][ T8400] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 276.970315][ T8400] ? __pfx_snd_seq_write+0x10/0x10 [ 276.970344][ T8400] ? __pfx_vfs_writev+0x10/0x10 [ 276.970395][ T8400] ? __fget_files+0x2a/0x420 [ 276.970417][ T8400] ? __fget_files+0x39d/0x420 [ 276.970435][ T8400] ? __fget_files+0x2a/0x420 [ 276.970465][ T8400] do_writev+0x1b8/0x360 [ 276.970504][ T8400] ? __pfx_do_writev+0x10/0x10 [ 276.970539][ T8400] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 276.970567][ T8400] ? lockdep_hardirqs_on+0x9d/0x150 [ 276.970597][ T8400] __do_fast_syscall_32+0xb4/0x110 [ 276.970624][ T8400] ? exc_page_fault+0x5f8/0x920 [ 276.970662][ T8400] do_fast_syscall_32+0x34/0x80 [ 276.970691][ T8400] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 276.970717][ T8400] RIP: 0023:0xf7fa6579 [ 276.970736][ T8400] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 276.970754][ T8400] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 276.970776][ T8400] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000580 [ 276.970791][ T8400] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 276.970803][ T8400] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 276.970816][ T8400] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 276.970828][ T8400] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 276.970863][ T8400] [ 276.979852][ T5896] usb 1-1: USB disconnect, device number 38 [ 278.156290][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 278.217932][ T5937] usb 4-1: USB disconnect, device number 36 [ 278.326963][ T9] usb 1-1: config 0 has no interfaces? [ 278.339044][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 278.348669][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.364260][ T9] usb 1-1: Product: syz [ 278.369262][ T9] usb 1-1: Manufacturer: syz [ 278.373911][ T9] usb 1-1: SerialNumber: syz [ 278.397008][ T9] usb 1-1: config 0 descriptor?? [ 278.476280][ T5894] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 278.615824][ T5937] usb 1-1: USB disconnect, device number 39 [ 278.676278][ T5894] usb 5-1: config 0 has no interfaces? [ 278.694048][ T5894] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 278.720511][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.746236][ T5894] usb 5-1: Product: syz [ 278.756501][ T5894] usb 5-1: Manufacturer: syz [ 278.757092][ T8418] netlink: 148 bytes leftover after parsing attributes in process `syz.2.729'. [ 278.766199][ T5894] usb 5-1: SerialNumber: syz [ 278.846066][ T5894] usb 5-1: config 0 descriptor?? [ 279.001787][ T8427] input: syz0 as /devices/virtual/input/input44 [ 279.069205][ T5894] usb 5-1: USB disconnect, device number 24 [ 279.096475][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 279.173061][ T8426] bond0: (slave vxlan1): Enslaving as an active interface with an up link [ 279.259039][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.273025][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.285344][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 279.314115][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 279.463786][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.489539][ T8434] input: syz0 as /devices/virtual/input/input45 [ 279.530387][ T9] usb 4-1: config 0 descriptor?? [ 279.960132][ T9] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 279.963040][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.735'. [ 280.009722][ T9] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 280.016314][ T8440] bridge: RTM_NEWNEIGH with invalid ether address [ 280.297632][ T8412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.310293][ T8412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.474563][ T8443] FAULT_INJECTION: forcing a failure. [ 280.474563][ T8443] name failslab, interval 1, probability 0, space 0, times 0 [ 280.556255][ T8443] CPU: 1 UID: 0 PID: 8443 Comm: syz.2.736 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 280.556289][ T8443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 280.556303][ T8443] Call Trace: [ 280.556311][ T8443] [ 280.556320][ T8443] dump_stack_lvl+0x241/0x360 [ 280.556359][ T8443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.556390][ T8443] ? __pfx__printk+0x10/0x10 [ 280.556437][ T8443] should_fail_ex+0x424/0x570 [ 280.556464][ T8443] should_failslab+0xac/0x100 [ 280.556495][ T8443] __kmalloc_cache_noprof+0x73/0x370 [ 280.556532][ T8443] ? sctp_add_bind_addr+0x89/0x3a0 [ 280.556558][ T8443] ? __pfx_sctp_get_port_local+0x10/0x10 [ 280.556583][ T8443] sctp_add_bind_addr+0x89/0x3a0 [ 280.556609][ T8443] ? sctp_v6_available+0x105/0x530 [ 280.556644][ T8443] sctp_do_bind+0x5d2/0x950 [ 280.556679][ T8443] sctp_setsockopt_bindx+0x29d/0x440 [ 280.556709][ T8443] sctp_setsockopt+0x7e7/0x11e0 [ 280.556732][ T8443] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 280.556763][ T8443] do_sock_setsockopt+0x3b1/0x710 [ 280.556792][ T8443] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 280.556812][ T8443] ? __fget_files+0x2a/0x420 [ 280.556833][ T8443] ? __fget_files+0x39d/0x420 [ 280.556850][ T8443] ? __fget_files+0x2a/0x420 [ 280.556876][ T8443] __ia32_sys_setsockopt+0x1f2/0x280 [ 280.556905][ T8443] __do_fast_syscall_32+0xb4/0x110 [ 280.556931][ T8443] ? exc_page_fault+0x5f8/0x920 [ 280.556961][ T8443] do_fast_syscall_32+0x34/0x80 [ 280.556988][ T8443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 280.557012][ T8443] RIP: 0023:0xf740d579 [ 280.557029][ T8443] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 280.557046][ T8443] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 280.557069][ T8443] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 280.557082][ T8443] RDX: 0000000000000064 RSI: 0000000080000600 RDI: 000000000000001c [ 280.557095][ T8443] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 280.557106][ T8443] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 280.557118][ T8443] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 280.557149][ T8443] [ 280.790771][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.416916][ T5894] usb 4-1: reset high-speed USB device number 37 using dummy_hcd [ 282.134054][ T8461] netlink: 148 bytes leftover after parsing attributes in process `syz.2.741'. [ 282.368770][ T5937] usb 4-1: USB disconnect, device number 37 [ 282.917605][ T5937] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 283.178800][ T5937] usb 4-1: config 0 has no interfaces? [ 283.197428][ T5937] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 283.206809][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.214881][ T5937] usb 4-1: Product: syz [ 283.264047][ T5937] usb 4-1: Manufacturer: syz [ 283.269018][ T5937] usb 4-1: SerialNumber: syz [ 283.287390][ T5937] usb 4-1: config 0 descriptor?? [ 283.315512][ T8472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.746'. [ 283.561076][ T52] usb 4-1: USB disconnect, device number 38 [ 283.586524][ T5896] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 283.936923][ T5896] usb 2-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 283.947627][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.966504][ T5896] usb 2-1: config 0 descriptor?? [ 283.985368][ T5896] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 283.996893][ T5896] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 284.641604][ T9] usb 2-1: USB disconnect, device number 37 [ 285.120164][ T8498] netlink: 148 bytes leftover after parsing attributes in process `syz.3.753'. [ 285.352251][ T8501] netlink: 40 bytes leftover after parsing attributes in process `syz.2.754'. [ 285.809561][ T5937] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 286.012124][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.048095][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.099508][ T5937] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 286.163938][ T5937] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 286.189105][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.228970][ T5937] usb 5-1: config 0 descriptor?? [ 286.291398][ T8522] netlink: 20 bytes leftover after parsing attributes in process `syz.3.760'. [ 286.650867][ T5937] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 286.722317][ T5937] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 286.917241][ T8494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.102587][ T8494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.688816][ T8543] netlink: 148 bytes leftover after parsing attributes in process `syz.0.765'. [ 287.950374][ T52] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 288.035197][ T30] audit: type=1326 audit(1744688219.367:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8554 comm="syz.1.771" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x0 [ 288.108172][ T52] usb 4-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 288.120741][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.135570][ T5937] usb 5-1: reset high-speed USB device number 25 using dummy_hcd [ 288.152868][ T52] usb 4-1: config 0 descriptor?? [ 288.165443][ T52] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 288.173940][ T52] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 288.384221][ T5897] usb 4-1: USB disconnect, device number 39 [ 288.712362][ T8562] netlink: 20 bytes leftover after parsing attributes in process `syz.2.774'. [ 288.876454][ T5937] usb 5-1: device descriptor read/64, error -71 [ 289.267779][ T5937] usb 5-1: reset high-speed USB device number 25 using dummy_hcd [ 289.857616][ T8583] FAULT_INJECTION: forcing a failure. [ 289.857616][ T8583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.870864][ T5937] usb 5-1: device descriptor read/64, error -71 [ 289.909939][ T8583] CPU: 0 UID: 0 PID: 8583 Comm: syz.3.780 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 289.909975][ T8583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 289.909997][ T8583] Call Trace: [ 289.910005][ T8583] [ 289.910014][ T8583] dump_stack_lvl+0x241/0x360 [ 289.910054][ T8583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.910086][ T8583] ? __pfx__printk+0x10/0x10 [ 289.910131][ T8583] should_fail_ex+0x424/0x570 [ 289.910160][ T8583] _copy_from_user+0x2d/0xb0 [ 289.910192][ T8583] ip_tunnel_parm_from_user+0xa5/0x4e0 [ 289.910219][ T8583] ? arch_stack_walk+0xff/0x150 [ 289.910246][ T8583] ? __pfx_ip_tunnel_parm_from_user+0x10/0x10 [ 289.910291][ T8583] ip_tunnel_siocdevprivate+0x9e/0x1a0 [ 289.910331][ T8583] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 289.910364][ T8583] ? __lock_acquire+0xad5/0xd80 [ 289.910395][ T8583] ipip6_tunnel_siocdevprivate+0x289/0x1930 [ 289.910433][ T8583] ? __pfx___mutex_trylock_common+0x10/0x10 [ 289.910463][ T8583] ? __pfx_ipip6_tunnel_siocdevprivate+0x10/0x10 [ 289.910497][ T8583] ? rcu_is_watching+0x15/0xb0 [ 289.910525][ T8583] ? trace_contention_end+0x3c/0x120 [ 289.910553][ T8583] ? __mutex_lock+0x380/0x10c0 [ 289.910586][ T8583] ? __lock_acquire+0xad5/0xd80 [ 289.910612][ T8583] ? dev_ioctl+0x8b0/0x1380 [ 289.910641][ T8583] ? full_name_hash+0x93/0xe0 [ 289.910670][ T8583] dev_ifsioc+0xc04/0x1010 [ 289.910703][ T8583] ? dev_load+0x21/0x1f0 [ 289.910734][ T8583] dev_ioctl+0x8c3/0x1380 [ 289.910767][ T8583] sock_ioctl+0x819/0x900 [ 289.910807][ T8583] ? __pfx_sock_ioctl+0x10/0x10 [ 289.910867][ T8583] compat_sock_ioctl+0x293/0xf50 [ 289.910901][ T8583] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 289.910933][ T8583] ? __fget_files+0x2a/0x420 [ 289.910953][ T8583] ? __fget_files+0x2a/0x420 [ 289.910986][ T8583] ? __fget_files+0x2a/0x420 [ 289.911015][ T8583] __se_compat_sys_ioctl+0x50e/0xc30 [ 289.911050][ T8583] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 289.911078][ T8583] ? __fget_files+0x2a/0x420 [ 289.911105][ T8583] ? fput+0x9b/0xd0 [ 289.911124][ T8583] ? ksys_write+0x275/0x2d0 [ 289.911158][ T8583] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 289.911185][ T8583] ? lockdep_hardirqs_on+0x9d/0x150 [ 289.911214][ T8583] __do_fast_syscall_32+0xb4/0x110 [ 289.911246][ T8583] ? exc_page_fault+0x5f8/0x920 [ 289.911277][ T8583] do_fast_syscall_32+0x34/0x80 [ 289.911304][ T8583] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 289.911330][ T8583] RIP: 0023:0xf7f17579 [ 289.911348][ T8583] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 289.911366][ T8583] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 289.911389][ T8583] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f3 [ 289.911403][ T8583] RDX: 0000000080000900 RSI: 0000000000000000 RDI: 0000000000000000 [ 289.911415][ T8583] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 289.911427][ T8583] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 289.911439][ T8583] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 289.911471][ T8583] [ 290.366481][ T5937] usb 5-1: reset high-speed USB device number 25 using dummy_hcd [ 290.426293][ T5937] usb 5-1: device descriptor read/8, error -71 [ 290.666689][ T5937] usb 5-1: reset high-speed USB device number 25 using dummy_hcd [ 290.687230][ T5937] usb 5-1: device descriptor read/8, error -71 [ 290.766451][ T5897] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 290.780469][ T8596] netlink: 20 bytes leftover after parsing attributes in process `syz.3.785'. [ 290.798718][ T3081] usb 5-1: USB disconnect, device number 25 [ 290.997790][ T3081] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 291.156222][ T3081] usb 5-1: device descriptor read/64, error -71 [ 291.206015][ T5897] usb 1-1: not running at top speed; connect to a high speed hub [ 291.215919][ T5897] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 291.296862][ T52] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 291.428768][ T3081] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 291.486741][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 291.536286][ T52] usb 4-1: Using ep0 maxpacket: 16 [ 291.551125][ T52] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 291.559388][ T52] usb 4-1: config 4 has no interface number 0 [ 291.565602][ T52] usb 4-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 291.587448][ T5897] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.632018][ T52] usb 4-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 291.635114][ T8608] netlink: 148 bytes leftover after parsing attributes in process `syz.4.789'. [ 291.642404][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.642434][ T5897] usb 1-1: Product: syz [ 291.642450][ T5897] usb 1-1: Manufacturer: syz [ 291.642468][ T5897] usb 1-1: SerialNumber: syz [ 291.652295][ T52] usb 4-1: config 4 interface 51 has no altsetting 0 [ 291.682987][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.685308][ T5897] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 291.706796][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.717123][ T5845] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 291.724794][ T52] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 291.731247][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 291.743630][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.765177][ T52] usb 4-1: Product: syz [ 291.776242][ T52] usb 4-1: Manufacturer: syz [ 291.780912][ T52] usb 4-1: SerialNumber: syz [ 291.810005][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 291.816020][ T8601] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 291.827151][ T8601] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 291.836074][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.855041][ T9] usb 2-1: config 0 descriptor?? [ 291.880187][ T5845] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 291.900050][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.916029][ T5845] usb 3-1: config 0 descriptor?? [ 291.932024][ T5845] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 291.943580][ T5845] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 292.051274][ T8601] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 292.075552][ T8601] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 292.135957][ T52] cdc_eem 4-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.3-1, CDC EEM Device, ba:07:e4:74:49:f4 [ 292.165729][ T5845] usb 3-1: USB disconnect, device number 47 [ 292.285209][ T9] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 292.322982][ T52] usb 4-1: USB disconnect, device number 40 [ 292.323445][ T9] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 292.348665][ T52] cdc_eem 4-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.3-1, CDC EEM Device [ 292.540055][ T8594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.577156][ T8594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.913202][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.791'. [ 293.223491][ T52] usb 1-1: USB disconnect, device number 40 [ 294.169613][ T5896] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 294.186223][ T9] usb 2-1: reset high-speed USB device number 38 using dummy_hcd [ 294.428463][ T5896] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 294.453976][ T5896] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 294.474643][ T5896] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 294.570047][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.900276][ T8636] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 295.000340][ T8650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.796'. [ 295.013604][ T5896] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 295.063180][ T5845] usb 2-1: USB disconnect, device number 38 [ 295.687807][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.798'. [ 295.714971][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.798'. [ 295.910947][ T8666] netlink: 148 bytes leftover after parsing attributes in process `syz.3.800'. [ 296.576225][ T5896] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 296.829001][ T5896] usb 4-1: config 0 has no interfaces? [ 296.930149][ T5896] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 296.940338][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.948997][ T5896] usb 4-1: Product: syz [ 296.953307][ T5896] usb 4-1: Manufacturer: syz [ 296.958729][ T5896] usb 4-1: SerialNumber: syz [ 296.972743][ T5896] usb 4-1: config 0 descriptor?? [ 297.014332][ T8694] FAULT_INJECTION: forcing a failure. [ 297.014332][ T8694] name failslab, interval 1, probability 0, space 0, times 0 [ 297.056938][ T8694] CPU: 1 UID: 0 PID: 8694 Comm: syz.2.803 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 297.056971][ T8694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 297.056984][ T8694] Call Trace: [ 297.056992][ T8694] [ 297.057002][ T8694] dump_stack_lvl+0x241/0x360 [ 297.057040][ T8694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.057071][ T8694] ? __pfx__printk+0x10/0x10 [ 297.057105][ T8694] ? __pfx___might_resched+0x10/0x10 [ 297.057137][ T8694] should_fail_ex+0x424/0x570 [ 297.057165][ T8694] should_failslab+0xac/0x100 [ 297.057197][ T8694] __kmalloc_noprof+0xdf/0x4d0 [ 297.057226][ T8694] ? tomoyo_encode+0x26f/0x540 [ 297.057263][ T8694] tomoyo_encode+0x26f/0x540 [ 297.057301][ T8694] tomoyo_realpath_from_path+0x59e/0x5e0 [ 297.057346][ T8694] tomoyo_path_number_perm+0x245/0x790 [ 297.057371][ T8694] ? __lock_acquire+0xad5/0xd80 [ 297.057396][ T8694] ? tomoyo_path_number_perm+0x215/0x790 [ 297.057426][ T8694] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 297.057493][ T8694] ? __fget_files+0x2a/0x420 [ 297.057513][ T8694] ? __fget_files+0x2a/0x420 [ 297.057543][ T8694] ? __fget_files+0x2a/0x420 [ 297.057568][ T8694] security_file_ioctl_compat+0xc6/0x2a0 [ 297.057598][ T8694] __se_compat_sys_ioctl+0xd8/0xc30 [ 297.057625][ T8694] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 297.057654][ T8694] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 297.057681][ T8694] ? __fget_files+0x2a/0x420 [ 297.057707][ T8694] ? fput+0x9b/0xd0 [ 297.057726][ T8694] ? ksys_write+0x275/0x2d0 [ 297.057759][ T8694] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 297.057786][ T8694] ? lockdep_hardirqs_on+0x9d/0x150 [ 297.057814][ T8694] __do_fast_syscall_32+0xb4/0x110 [ 297.057841][ T8694] ? exc_page_fault+0x5f8/0x920 [ 297.057872][ T8694] do_fast_syscall_32+0x34/0x80 [ 297.057899][ T8694] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 297.057925][ T8694] RIP: 0023:0xf740d579 [ 297.057942][ T8694] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 297.057959][ T8694] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 297.057982][ T8694] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000043403d05 [ 297.057996][ T8694] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 297.058007][ T8694] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 297.058018][ T8694] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 297.058030][ T8694] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 297.058058][ T8694] [ 297.058080][ T8694] ERROR: Out of memory at tomoyo_realpath_from_path. [ 297.389477][ T5894] usb 1-1: USB disconnect, device number 41 [ 297.550700][ T8703] FAULT_INJECTION: forcing a failure. [ 297.550700][ T8703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.639673][ T8705] FAULT_INJECTION: forcing a failure. [ 297.639673][ T8705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.670051][ T8703] CPU: 0 UID: 0 PID: 8703 Comm: syz.0.805 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 297.670075][ T8703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 297.670085][ T8703] Call Trace: [ 297.670091][ T8703] [ 297.670098][ T8703] dump_stack_lvl+0x241/0x360 [ 297.670126][ T8703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.670147][ T8703] ? __pfx__printk+0x10/0x10 [ 297.670177][ T8703] should_fail_ex+0x424/0x570 [ 297.670197][ T8703] _copy_from_iter+0x211/0x1c70 [ 297.670222][ T8703] ? __build_skb_around+0x247/0x3d0 [ 297.670240][ T8703] ? __alloc_skb+0x298/0x480 [ 297.670253][ T8703] ? __pfx__copy_from_iter+0x10/0x10 [ 297.670275][ T8703] ? __pfx___alloc_skb+0x10/0x10 [ 297.670291][ T8703] ? skb_put+0x114/0x1f0 [ 297.670309][ T8703] netlink_sendmsg+0x73c/0xcd0 [ 297.670341][ T8703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.670366][ T8703] ? __import_iovec+0x585/0x830 [ 297.670387][ T8703] ? aa_sock_msg_perm+0x91/0x160 [ 297.670412][ T8703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.670433][ T8703] __sock_sendmsg+0x221/0x270 [ 297.670457][ T8703] ____sys_sendmsg+0x523/0x860 [ 297.670480][ T8703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.670508][ T8703] __sys_sendmsg+0x271/0x360 [ 297.670528][ T8703] ? __pfx___sys_sendmsg+0x10/0x10 [ 297.670589][ T8703] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 297.670608][ T8703] ? lockdep_hardirqs_on+0x9d/0x150 [ 297.670628][ T8703] __do_fast_syscall_32+0xb4/0x110 [ 297.670646][ T8703] ? exc_page_fault+0x5f8/0x920 [ 297.670667][ T8703] do_fast_syscall_32+0x34/0x80 [ 297.670686][ T8703] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 297.670704][ T8703] RIP: 0023:0xf7f24579 [ 297.670717][ T8703] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 297.670730][ T8703] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 297.670753][ T8703] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 297.670763][ T8703] RDX: 0000000020008040 RSI: 0000000000000000 RDI: 0000000000000000 [ 297.670772][ T8703] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 297.670780][ T8703] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 297.670788][ T8703] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 297.670808][ T8703] [ 297.981912][ T8705] CPU: 1 UID: 0 PID: 8705 Comm: syz.2.807 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 297.981948][ T8705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 297.981961][ T8705] Call Trace: [ 297.981970][ T8705] [ 297.981979][ T8705] dump_stack_lvl+0x241/0x360 [ 297.982017][ T8705] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.982049][ T8705] ? __pfx__printk+0x10/0x10 [ 297.982092][ T8705] should_fail_ex+0x424/0x570 [ 297.982119][ T8705] _copy_from_user+0x2d/0xb0 [ 297.982151][ T8705] get_compat_msghdr+0xb3/0x730 [ 297.982191][ T8705] ? __pfx_get_compat_msghdr+0x10/0x10 [ 297.982238][ T8705] ? do_recvmmsg+0x566/0xab0 [ 297.982269][ T8705] do_recvmmsg+0x4d5/0xab0 [ 297.982305][ T8705] ? __pfx_do_recvmmsg+0x10/0x10 [ 297.982353][ T8705] ? rcu_read_lock_any_held+0xbb/0x160 [ 297.982404][ T8705] ? ksys_write+0x24e/0x2d0 [ 297.982460][ T8705] __sys_recvmmsg+0x1aa/0x280 [ 297.982485][ T8705] ? fput+0x9b/0xd0 [ 297.982503][ T8705] ? __pfx___sys_recvmmsg+0x10/0x10 [ 297.982524][ T8705] ? ksys_write+0x275/0x2d0 [ 297.982559][ T8705] __ia32_compat_sys_recvmmsg_time32+0xbf/0xd0 [ 297.982585][ T8705] __do_fast_syscall_32+0xb4/0x110 [ 297.982612][ T8705] ? exc_page_fault+0x5f8/0x920 [ 297.982643][ T8705] do_fast_syscall_32+0x34/0x80 [ 297.982670][ T8705] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 297.982695][ T8705] RIP: 0023:0xf740d579 [ 297.982712][ T8705] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 297.982730][ T8705] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 297.982752][ T8705] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080003700 [ 297.982768][ T8705] RDX: 0000000000000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 297.982780][ T8705] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 297.982792][ T8705] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 297.982805][ T8705] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 297.982834][ T8705] [ 299.065642][ T8742] netlink: 148 bytes leftover after parsing attributes in process `syz.2.811'. [ 299.776519][ T52] usb 4-1: USB disconnect, device number 41 [ 299.850262][ T8747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.810'. [ 299.877238][ T8755] FAULT_INJECTION: forcing a failure. [ 299.877238][ T8755] name failslab, interval 1, probability 0, space 0, times 0 [ 299.890290][ T8755] CPU: 1 UID: 0 PID: 8755 Comm: syz.3.814 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 299.890321][ T8755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 299.890332][ T8755] Call Trace: [ 299.890340][ T8755] [ 299.890347][ T8755] dump_stack_lvl+0x241/0x360 [ 299.890375][ T8755] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.890397][ T8755] ? __pfx__printk+0x10/0x10 [ 299.890428][ T8755] should_fail_ex+0x424/0x570 [ 299.890448][ T8755] should_failslab+0xac/0x100 [ 299.890470][ T8755] kmem_cache_alloc_noprof+0x78/0x390 [ 299.890491][ T8755] ? __inet_hash_connect+0xf03/0x25e0 [ 299.890517][ T8755] __inet_hash_connect+0xf03/0x25e0 [ 299.890543][ T8755] ? __pfx___inet6_check_established+0x10/0x10 [ 299.890574][ T8755] ? __inet_hash_connect+0x5e6/0x25e0 [ 299.890601][ T8755] ? __pfx___inet_hash_connect+0x10/0x10 [ 299.890629][ T8755] ? rcu_is_watching+0x15/0xb0 [ 299.890660][ T8755] ? inet6_hash_connect+0xe3/0x160 [ 299.890690][ T8755] dccp_v6_connect+0xcf8/0x14f0 [ 299.890727][ T8755] ? __pfx_dccp_v6_connect+0x10/0x10 [ 299.890750][ T8755] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 299.890778][ T8755] ? look_up_lock_class+0x7b/0x170 [ 299.890798][ T8755] ? register_lock_class+0x54/0x330 [ 299.890816][ T8755] __inet_stream_connect+0x2a7/0xfb0 [ 299.890841][ T8755] ? __local_bh_enable_ip+0x168/0x200 [ 299.890855][ T8755] ? lockdep_hardirqs_on+0x9d/0x150 [ 299.890873][ T8755] ? __pfx___inet_stream_connect+0x10/0x10 [ 299.890889][ T8755] ? __local_bh_enable_ip+0x168/0x200 [ 299.890904][ T8755] ? inet_stream_connect+0x50/0xa0 [ 299.890920][ T8755] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 299.890943][ T8755] inet_stream_connect+0x65/0xa0 [ 299.890962][ T8755] __sys_connect+0x28c/0x2d0 [ 299.890986][ T8755] ? __fget_files+0x2a/0x420 [ 299.891000][ T8755] ? __pfx___sys_connect+0x10/0x10 [ 299.891039][ T8755] __ia32_sys_connect+0x7a/0x90 [ 299.891063][ T8755] __do_fast_syscall_32+0xb4/0x110 [ 299.891082][ T8755] ? exc_page_fault+0x5f8/0x920 [ 299.891110][ T8755] do_fast_syscall_32+0x34/0x80 [ 299.891137][ T8755] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 299.891172][ T8755] RIP: 0023:0xf7f17579 [ 299.891191][ T8755] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 299.891208][ T8755] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 299.891230][ T8755] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 299.891247][ T8755] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 299.891256][ T8755] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 299.891267][ T8755] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 299.891276][ T8755] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 299.891299][ T8755] [ 300.716358][ T52] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 300.904219][ T52] usb 4-1: config 0 has no interfaces? [ 300.931846][ T52] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 300.941248][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.962564][ T52] usb 4-1: Product: syz [ 300.972922][ T52] usb 4-1: Manufacturer: syz [ 300.988856][ T52] usb 4-1: SerialNumber: syz [ 301.022879][ T52] usb 4-1: config 0 descriptor?? [ 301.379070][ T8780] syz.1.821(8780): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 302.844599][ T8806] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 302.851506][ T8806] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 302.984250][ T8806] vhci_hcd vhci_hcd.0: Device attached [ 303.051596][ T8803] FAULT_INJECTION: forcing a failure. [ 303.051596][ T8803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.102353][ T8803] CPU: 0 UID: 0 PID: 8803 Comm: syz.2.827 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 303.102387][ T8803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 303.102402][ T8803] Call Trace: [ 303.102412][ T8803] [ 303.102422][ T8803] dump_stack_lvl+0x241/0x360 [ 303.102463][ T8803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.102495][ T8803] ? __pfx__printk+0x10/0x10 [ 303.102537][ T8803] should_fail_ex+0x424/0x570 [ 303.102566][ T8803] _copy_to_user+0x31/0xb0 [ 303.102600][ T8803] simple_read_from_buffer+0xc4/0x170 [ 303.102637][ T8803] proc_fail_nth_read+0x1ef/0x260 [ 303.102663][ T8803] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 303.102690][ T8803] ? rw_verify_area+0x246/0x630 [ 303.102713][ T8803] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 303.102738][ T8803] vfs_read+0x21f/0xb90 [ 303.102768][ T8803] ? __pfx___mutex_lock+0x10/0x10 [ 303.102796][ T8803] ? __pfx_vfs_read+0x10/0x10 [ 303.102822][ T8803] ? __fget_files+0x2a/0x420 [ 303.102844][ T8803] ? __fget_files+0x39d/0x420 [ 303.102860][ T8803] ? __fget_files+0x2a/0x420 [ 303.102888][ T8803] ksys_read+0x19d/0x2d0 [ 303.102915][ T8803] ? __pfx_ksys_read+0x10/0x10 [ 303.102943][ T8803] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 303.102978][ T8803] ? lockdep_hardirqs_on+0x9d/0x150 [ 303.103008][ T8803] __do_fast_syscall_32+0xb4/0x110 [ 303.103035][ T8803] ? exc_page_fault+0x5f8/0x920 [ 303.103065][ T8803] do_fast_syscall_32+0x34/0x80 [ 303.103093][ T8803] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 303.103118][ T8803] RIP: 0023:0xf740d579 [ 303.103137][ T8803] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 303.103154][ T8803] RSP: 002b:00000000f5075590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 303.103178][ T8803] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5075620 [ 303.103193][ T8803] RDX: 000000000000000f RSI: 00000000f73fdff4 RDI: 0000000000000000 [ 303.103206][ T8803] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 303.103219][ T8803] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 303.103231][ T8803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 303.103262][ T8803] [ 303.330352][ T52] vhci_hcd: vhci_device speed not set [ 303.340629][ T8807] vhci_hcd: connection closed [ 303.396339][ T52] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 303.437648][ T53] vhci_hcd: stop threads [ 303.467180][ T53] vhci_hcd: release socket [ 303.519137][ T53] vhci_hcd: disconnect device [ 303.524072][ T5894] usb 4-1: USB disconnect, device number 42 [ 303.672177][ T8815] netlink: 20 bytes leftover after parsing attributes in process `syz.4.831'. [ 304.299127][ T8833] FAULT_INJECTION: forcing a failure. [ 304.299127][ T8833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.312531][ T8833] CPU: 1 UID: 0 PID: 8833 Comm: syz.4.836 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 304.312561][ T8833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 304.312575][ T8833] Call Trace: [ 304.312584][ T8833] [ 304.312593][ T8833] dump_stack_lvl+0x241/0x360 [ 304.312633][ T8833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.312665][ T8833] ? __pfx__printk+0x10/0x10 [ 304.312707][ T8833] should_fail_ex+0x424/0x570 [ 304.312736][ T8833] _copy_to_user+0x31/0xb0 [ 304.312770][ T8833] simple_read_from_buffer+0xc4/0x170 [ 304.312806][ T8833] proc_fail_nth_read+0x1ef/0x260 [ 304.312840][ T8833] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 304.312867][ T8833] ? rw_verify_area+0x246/0x630 [ 304.312891][ T8833] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 304.312915][ T8833] vfs_read+0x21f/0xb90 [ 304.312945][ T8833] ? __pfx___mutex_lock+0x10/0x10 [ 304.312974][ T8833] ? __pfx_vfs_read+0x10/0x10 [ 304.313002][ T8833] ? __fget_files+0x2a/0x420 [ 304.313024][ T8833] ? __fget_files+0x39d/0x420 [ 304.313042][ T8833] ? __fget_files+0x2a/0x420 [ 304.313070][ T8833] ksys_read+0x19d/0x2d0 [ 304.313095][ T8833] ? __pfx_ksys_read+0x10/0x10 [ 304.313130][ T8833] __do_fast_syscall_32+0xb4/0x110 [ 304.313157][ T8833] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 304.313177][ T8833] ? lockdep_hardirqs_on+0x9d/0x150 [ 304.313205][ T8833] do_fast_syscall_32+0x34/0x80 [ 304.313227][ T8833] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 304.313248][ T8833] RIP: 0023:0xf747d579 [ 304.313263][ T8833] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 304.313278][ T8833] RSP: 002b:00000000f50c4590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 304.313296][ T8833] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f50c4620 [ 304.313309][ T8833] RDX: 000000000000000f RSI: 00000000f746dff4 RDI: 0000000000000000 [ 304.313319][ T8833] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 304.313329][ T8833] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 304.313339][ T8833] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 304.313363][ T8833] [ 304.861978][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 305.069211][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 305.077080][ T8841] netlink: 20 bytes leftover after parsing attributes in process `syz.1.838'. [ 305.108355][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.135959][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.152566][ T9] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 305.162922][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.214635][ T9] usb 3-1: config 0 descriptor?? [ 305.417392][ T8851] input: syz0 as /devices/virtual/input/input50 [ 305.456604][ T8850] input: syz0 as /devices/virtual/input/input51 [ 306.093335][ T8858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.107803][ T8858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.206270][ T5845] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 307.349480][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.845'. [ 307.360561][ T8870] FAULT_INJECTION: forcing a failure. [ 307.360561][ T8870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.373846][ T8870] CPU: 1 UID: 0 PID: 8870 Comm: syz.0.845 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 307.373885][ T8870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 307.373899][ T8870] Call Trace: [ 307.373907][ T8870] [ 307.373916][ T8870] dump_stack_lvl+0x241/0x360 [ 307.373954][ T8870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.373984][ T8870] ? __pfx__printk+0x10/0x10 [ 307.374028][ T8870] should_fail_ex+0x424/0x570 [ 307.374056][ T8870] _copy_from_iter+0x211/0x1c70 [ 307.374092][ T8870] ? __build_skb_around+0x247/0x3d0 [ 307.374129][ T8870] ? __alloc_skb+0x298/0x480 [ 307.374148][ T8870] ? __pfx__copy_from_iter+0x10/0x10 [ 307.374179][ T8870] ? __pfx___alloc_skb+0x10/0x10 [ 307.374202][ T8870] ? skb_put+0x114/0x1f0 [ 307.374227][ T8870] netlink_sendmsg+0x73c/0xcd0 [ 307.374273][ T8870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.374308][ T8870] ? __import_iovec+0x585/0x830 [ 307.374336][ T8870] ? aa_sock_msg_perm+0x91/0x160 [ 307.374372][ T8870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.374402][ T8870] __sock_sendmsg+0x221/0x270 [ 307.374439][ T8870] ____sys_sendmsg+0x523/0x860 [ 307.374472][ T8870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.374513][ T8870] __sys_sendmsg+0x271/0x360 [ 307.374541][ T8870] ? __pfx___sys_sendmsg+0x10/0x10 [ 307.374613][ T8870] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 307.374640][ T8870] ? lockdep_hardirqs_on+0x9d/0x150 [ 307.374668][ T8870] __do_fast_syscall_32+0xb4/0x110 [ 307.374694][ T8870] ? exc_page_fault+0x5f8/0x920 [ 307.374721][ T8870] do_fast_syscall_32+0x34/0x80 [ 307.374748][ T8870] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 307.374774][ T8870] RIP: 0023:0xf7f24579 [ 307.374792][ T8870] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 307.374809][ T8870] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 307.374834][ T8870] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 307.374848][ T8870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.374860][ T8870] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 307.374871][ T8870] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 307.374886][ T8870] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 307.374913][ T8870] [ 307.660725][ T5845] usb 4-1: config 0 has no interfaces? [ 307.794018][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 307.836505][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 307.846799][ T5845] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 307.900502][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.954524][ T9] usb 3-1: USB disconnect, device number 48 [ 307.960758][ T5845] usb 4-1: Product: syz [ 307.964960][ T5845] usb 4-1: Manufacturer: syz [ 307.995068][ T5845] usb 4-1: SerialNumber: syz [ 308.029240][ T5845] usb 4-1: config 0 descriptor?? [ 308.486568][ T5845] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 308.613412][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 308.686355][ T52] vhci_hcd: vhci_device speed not set [ 308.708794][ T5845] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 308.720839][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 308.720877][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 308.749792][ T5845] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 308.777277][ T9] usb 3-1: device descriptor read/64, error -71 [ 308.867048][ T5845] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 308.906300][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.059844][ T5845] usb 2-1: config 0 descriptor?? [ 309.206980][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 309.348954][ T9] usb 3-1: device descriptor read/64, error -71 [ 309.466889][ T9] usb usb3-port1: attempt power cycle [ 309.605617][ T5845] usbhid 2-1:0.0: can't add hid device: -71 [ 309.612283][ T5845] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 309.652761][ T5845] usb 2-1: USB disconnect, device number 39 [ 309.774606][ T8895] netlink: 20 bytes leftover after parsing attributes in process `syz.1.851'. [ 309.826324][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 309.868140][ T9] usb 3-1: device descriptor read/8, error -71 [ 310.196257][ T9] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 310.217228][ T9] usb 3-1: device descriptor read/8, error -71 [ 310.237863][ T8903] FAULT_INJECTION: forcing a failure. [ 310.237863][ T8903] name failslab, interval 1, probability 0, space 0, times 0 [ 310.327095][ T9] usb usb3-port1: unable to enumerate USB device [ 310.355399][ T8903] CPU: 0 UID: 0 PID: 8903 Comm: syz.1.853 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 310.355432][ T8903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 310.355446][ T8903] Call Trace: [ 310.355454][ T8903] [ 310.355464][ T8903] dump_stack_lvl+0x241/0x360 [ 310.355504][ T8903] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.355537][ T8903] ? __pfx__printk+0x10/0x10 [ 310.355573][ T8903] ? __pfx___might_resched+0x10/0x10 [ 310.355605][ T8903] should_fail_ex+0x424/0x570 [ 310.355633][ T8903] should_failslab+0xac/0x100 [ 310.355675][ T8903] kmem_cache_alloc_noprof+0x78/0x390 [ 310.355701][ T8903] ? ptlock_alloc+0x20/0x70 [ 310.355733][ T8903] ptlock_alloc+0x20/0x70 [ 310.355761][ T8903] pte_alloc_one+0x6d/0x160 [ 310.355789][ T8903] __pte_alloc+0x7b/0x240 [ 310.355813][ T8903] ? __pfx___pte_alloc+0x10/0x10 [ 310.355836][ T8903] ? kasan_save_track+0x51/0x80 [ 310.355858][ T8903] ? __kasan_slab_alloc+0x66/0x80 [ 310.355880][ T8903] ? kmem_cache_alloc_noprof+0x1e1/0x390 [ 310.355906][ T8903] ? __pmd_alloc+0x118/0x440 [ 310.355938][ T8903] handle_pte_fault+0x4ede/0x61c0 [ 310.355969][ T8903] ? __mod_memcg_lruvec_state+0x301/0x4f0 [ 310.356011][ T8903] ? __pfx_handle_pte_fault+0x10/0x10 [ 310.356032][ T8903] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 310.356068][ T8903] ? __lock_acquire+0xad5/0xd80 [ 310.356095][ T8903] ? do_raw_spin_lock+0x151/0x370 [ 310.356136][ T8903] ? do_raw_spin_unlock+0x13c/0x8b0 [ 310.356176][ T8903] ? _raw_spin_unlock+0x28/0x50 [ 310.356198][ T8903] ? __pmd_alloc+0x37f/0x440 [ 310.356231][ T8903] ? __pfx___pmd_alloc+0x10/0x10 [ 310.356275][ T8903] handle_mm_fault+0x1129/0x1bf0 [ 310.356305][ T8903] ? mt_find+0x28a/0x8f0 [ 310.356362][ T8903] ? __pfx_handle_mm_fault+0x10/0x10 [ 310.356420][ T8903] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 310.356453][ T8903] exc_page_fault+0x2bb/0x920 [ 310.356489][ T8903] asm_exc_page_fault+0x26/0x30 [ 310.356509][ T8903] RIP: 0010:__get_user_4+0x14/0x20 [ 310.356531][ T8903] Code: 00 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 310.356549][ T8903] RSP: 0018:ffffc90003e9fd58 EFLAGS: 00050283 [ 310.356570][ T8903] RAX: 0000000080000080 RBX: 0000000080000080 RCX: 0000000000000000 [ 310.356584][ T8903] RDX: 00007ffffffff000 RSI: ffffffff8e4fde72 RDI: ffffffff8ca1b760 [ 310.356600][ T8903] RBP: ffffc90003e9fea0 R08: 0000000000000001 R09: 0000000000000000 [ 310.356613][ T8903] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 310.356627][ T8903] R13: ffffc90003e9fde0 R14: 000000000000000f R15: 1ffff920007d3fc4 [ 310.356662][ T8903] security_getselfattr+0x106/0x6b0 [ 310.356707][ T8903] ? __pfx_security_getselfattr+0x10/0x10 [ 310.356740][ T8903] ? ksys_write+0x275/0x2d0 [ 310.356772][ T8903] __ia32_sys_lsm_get_self_attr+0x9a/0xb0 [ 310.356800][ T8903] __do_fast_syscall_32+0xb4/0x110 [ 310.356823][ T8903] ? exc_page_fault+0x5f8/0x920 [ 310.356850][ T8903] do_fast_syscall_32+0x34/0x80 [ 310.356874][ T8903] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 310.356895][ T8903] RIP: 0023:0xf7fa6579 [ 310.356911][ T8903] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 310.356926][ T8903] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 00000000000001cb [ 310.356944][ T8903] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 0000000000000000 [ 310.356956][ T8903] RDX: 0000000080000080 RSI: 0000000000000001 RDI: 0000000000000000 [ 310.356967][ T8903] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 310.356977][ T8903] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 310.356988][ T8903] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 310.357015][ T8903] [ 310.751250][ T3081] usb 4-1: USB disconnect, device number 43 [ 311.601477][ T8922] input: syz0 as /devices/virtual/input/input52 [ 312.145047][ T8925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.702541][ T8938] input: syz0 as /devices/virtual/input/input53 [ 312.851568][ T8940] gtp0: left promiscuous mode [ 313.936640][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 314.244934][ T8957] FAULT_INJECTION: forcing a failure. [ 314.244934][ T8957] name failslab, interval 1, probability 0, space 0, times 0 [ 314.309251][ T8960] input: syz0 as /devices/virtual/input/input54 [ 314.329873][ T8957] CPU: 1 UID: 0 PID: 8957 Comm: syz.0.867 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 314.329903][ T8957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 314.329917][ T8957] Call Trace: [ 314.329925][ T8957] [ 314.329934][ T8957] dump_stack_lvl+0x241/0x360 [ 314.329970][ T8957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.330001][ T8957] ? __pfx__printk+0x10/0x10 [ 314.330034][ T8957] ? __pfx___might_resched+0x10/0x10 [ 314.330066][ T8957] should_fail_ex+0x424/0x570 [ 314.330094][ T8957] should_failslab+0xac/0x100 [ 314.330125][ T8957] kmem_cache_alloc_noprof+0x78/0x390 [ 314.330153][ T8957] ? ptlock_alloc+0x20/0x70 [ 314.330189][ T8957] ptlock_alloc+0x20/0x70 [ 314.330220][ T8957] pte_alloc_one+0x6d/0x160 [ 314.330247][ T8957] __pte_alloc+0x7b/0x240 [ 314.330274][ T8957] ? __pfx___pte_alloc+0x10/0x10 [ 314.330297][ T8957] ? kasan_save_track+0x51/0x80 [ 314.330320][ T8957] ? __kasan_slab_alloc+0x66/0x80 [ 314.330342][ T8957] ? kmem_cache_alloc_noprof+0x1e1/0x390 [ 314.330368][ T8957] ? __pmd_alloc+0x118/0x440 [ 314.330402][ T8957] handle_pte_fault+0x4ede/0x61c0 [ 314.330441][ T8957] ? __mod_memcg_lruvec_state+0x301/0x4f0 [ 314.330485][ T8957] ? __pfx_handle_pte_fault+0x10/0x10 [ 314.330506][ T8957] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 314.330543][ T8957] ? __lock_acquire+0xad5/0xd80 [ 314.330571][ T8957] ? do_raw_spin_lock+0x151/0x370 [ 314.330609][ T8957] ? do_raw_spin_unlock+0x13c/0x8b0 [ 314.330646][ T8957] ? _raw_spin_unlock+0x28/0x50 [ 314.330667][ T8957] ? __pmd_alloc+0x37f/0x440 [ 314.330701][ T8957] ? __pfx___pmd_alloc+0x10/0x10 [ 314.330740][ T8957] handle_mm_fault+0x1129/0x1bf0 [ 314.330770][ T8957] ? mt_find+0x28a/0x8f0 [ 314.330824][ T8957] ? __pfx_handle_mm_fault+0x10/0x10 [ 314.330879][ T8957] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 314.330912][ T8957] exc_page_fault+0x2bb/0x920 [ 314.330946][ T8957] asm_exc_page_fault+0x26/0x30 [ 314.330965][ T8957] RIP: 0010:__put_user_8+0xd/0x20 [ 314.330992][ T8957] Code: 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 66 0f 1f 44 00 00 90 90 90 [ 314.331010][ T8957] RSP: 0018:ffffc9000486f6d8 EFLAGS: 00050206 [ 314.331029][ T8957] RAX: 00000000f50c997d RBX: 0000000000000000 RCX: 0000000080001300 [ 314.331043][ T8957] RDX: 0000000000000001 RSI: ffffffff8e4fde72 RDI: ffffffff8ca1b760 [ 314.331057][ T8957] RBP: ffffc9000486f7d0 R08: 0000000000000001 R09: 0000000000000000 [ 314.331071][ T8957] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802a3e8000 [ 314.331084][ T8957] R13: ffff88802a3e8028 R14: ffffc9000486f760 R15: ffffffff819cb153 [ 314.331100][ T8957] ? sched_core_share_pid+0x113/0x840 [ 314.331143][ T8957] sched_core_share_pid+0x397/0x840 [ 314.331194][ T8957] ? cap_task_prctl+0x1e9/0xaf0 [ 314.331222][ T8957] ? __pfx_sched_core_share_pid+0x10/0x10 [ 314.331247][ T8957] ? static_key_count+0x41/0x70 [ 314.331269][ T8957] ? security_task_prctl+0x13c/0x160 [ 314.331307][ T8957] __se_sys_prctl+0x21d/0x4190 [ 314.331332][ T8957] ? page_table_check_set+0x164/0x700 [ 314.331357][ T8957] ? page_table_check_set+0x4d2/0x700 [ 314.331383][ T8957] ? page_table_check_set+0x164/0x700 [ 314.331429][ T8957] ? _parse_integer_limit+0x1b4/0x200 [ 314.331461][ T8957] ? kstrtoull+0x1d3/0x2f0 [ 314.331486][ T8957] ? __pfx_kstrtoull+0x10/0x10 [ 314.331510][ T8957] ? __pfx___se_sys_prctl+0x10/0x10 [ 314.331541][ T8957] ? kstrtouint+0xfc/0x190 [ 314.331573][ T8957] ? __lock_acquire+0xad5/0xd80 [ 314.331628][ T8957] ? rcu_read_lock_any_held+0xbb/0x160 [ 314.331657][ T8957] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 314.331688][ T8957] ? vfs_write+0xb29/0xd10 [ 314.331724][ T8957] ? ksys_write+0x24e/0x2d0 [ 314.331752][ T8957] ? __mutex_unlock_slowpath+0x229/0x800 [ 314.331790][ T8957] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 314.331815][ T8957] ? __fget_files+0x2a/0x420 [ 314.331839][ T8957] ? __fget_files+0x2a/0x420 [ 314.331864][ T8957] ? fput+0x9b/0xd0 [ 314.331883][ T8957] ? ksys_write+0x275/0x2d0 [ 314.331915][ T8957] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 314.331940][ T8957] ? lockdep_hardirqs_on+0x9d/0x150 [ 314.331963][ T8957] ? __ia32_sys_prctl+0x20/0xc0 [ 314.331985][ T8957] __do_fast_syscall_32+0xb4/0x110 [ 314.332012][ T8957] ? exc_page_fault+0x5f8/0x920 [ 314.332042][ T8957] do_fast_syscall_32+0x34/0x80 [ 314.332069][ T8957] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 314.332095][ T8957] RIP: 0023:0xf7f24579 [ 314.332112][ T8957] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 314.332130][ T8957] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 00000000000000ac [ 314.332151][ T8957] RAX: ffffffffffffffda RBX: 000000000000003e RCX: 0000000000000000 [ 314.332165][ T8957] RDX: 0000000000000236 RSI: 0000000000000000 RDI: 0000000080001300 [ 314.332177][ T8957] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 314.332189][ T8957] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 314.332201][ T8957] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.332232][ T8957] [ 314.836722][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.492996][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.869'. [ 315.782510][ T8987] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 315.786399][ T5897] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 315.891835][ T8987] netlink: 24 bytes leftover after parsing attributes in process `syz.3.875'. [ 316.037480][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 316.096362][ T5845] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 316.104933][ T5897] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 316.166202][ T5896] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 316.216229][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 316.229743][ T5897] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 316.231524][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 316.266747][ T5845] usb 5-1: Using ep0 maxpacket: 32 [ 316.277706][ T5845] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 316.292474][ T5845] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 316.306345][ T9] usb 1-1: string descriptor 0 read error: -22 [ 316.312610][ T9] usb 1-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.40 [ 316.337009][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.347074][ T5896] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 316.355285][ T5896] usb 4-1: config 0 has no interface number 0 [ 316.360691][ T5897] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 316.366359][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 316.402193][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.405328][ T5896] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 316.448069][ T8983] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 316.459854][ T5897] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 316.516700][ T5845] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 316.553239][ T5896] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 316.598693][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 316.629682][ T5896] usb 4-1: config 0 interface 255 has no altsetting 0 [ 316.650066][ T5845] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 316.669665][ T5896] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 316.689137][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.698225][ T5845] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 316.721638][ T5896] usb 4-1: Product: syz [ 316.736195][ T5896] usb 4-1: Manufacturer: syz [ 316.744345][ T5845] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 316.770856][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.782385][ T5896] usb 4-1: SerialNumber: syz [ 316.810440][ T5896] usb 4-1: config 0 descriptor?? [ 316.819728][ T5845] usb 5-1: Product: syz [ 316.829825][ T5845] usb 5-1: Manufacturer: syz [ 316.842049][ T5896] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 316.872335][ T5845] usb 5-1: SerialNumber: syz [ 316.965774][ T5845] usb 5-1: config 0 descriptor?? [ 317.018459][ T8990] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 317.172706][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.179417][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.239133][ T5845] hdpvr 5-1:0.0: unexpected answer of status request, len -71 [ 317.301784][ T8987] netlink: 'syz.3.875': attribute type 11 has an invalid length. [ 317.384300][ T5845] hdpvr 5-1:0.0: device init failed [ 317.396660][ T5845] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 317.471085][ T5845] usb 5-1: USB disconnect, device number 29 [ 318.351688][ T9] usbhid 1-1:1.0: can't add hid device: -71 [ 318.364193][ T9] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 318.398654][ T9] usb 1-1: USB disconnect, device number 42 [ 319.691168][ T52] usb 3-1: USB disconnect, device number 53 [ 320.263518][ T9023] input: syz0 as /devices/virtual/input/input56 [ 321.867012][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 322.056268][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 322.177166][ T9] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 322.201562][ T9] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 322.220785][ T9] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 322.238418][ T9] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 322.255063][ T9046] FAULT_INJECTION: forcing a failure. [ 322.255063][ T9046] name failslab, interval 1, probability 0, space 0, times 0 [ 322.266192][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 322.276669][ T9046] CPU: 1 UID: 0 PID: 9046 Comm: syz.0.891 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 322.276699][ T9046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 322.276713][ T9046] Call Trace: [ 322.276721][ T9046] [ 322.276729][ T9046] dump_stack_lvl+0x241/0x360 [ 322.276768][ T9046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.276798][ T9046] ? __pfx__printk+0x10/0x10 [ 322.276832][ T9046] ? __pfx___might_resched+0x10/0x10 [ 322.276864][ T9046] should_fail_ex+0x424/0x570 [ 322.276899][ T9046] should_failslab+0xac/0x100 [ 322.276929][ T9046] __kmalloc_cache_noprof+0x73/0x370 [ 322.276957][ T9046] ? sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 322.276993][ T9046] sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 322.277032][ T9046] sctp_association_new+0x15ad/0x2540 [ 322.277070][ T9046] sctp_connect_new_asoc+0x31c/0x700 [ 322.277096][ T9046] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 322.277118][ T9046] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 322.277143][ T9046] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 322.277161][ T9046] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 322.277179][ T9046] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 322.277206][ T9046] sctp_sendmsg+0x2009/0x3620 [ 322.277249][ T9046] ? __pfx_sctp_sendmsg+0x10/0x10 [ 322.277274][ T9046] ? aa_sk_perm+0x96f/0xac0 [ 322.277322][ T9046] ? inet_sendmsg+0x330/0x390 [ 322.277351][ T9046] __sock_sendmsg+0x1a6/0x270 [ 322.277383][ T9046] __sys_sendto+0x365/0x4c0 [ 322.277411][ T9046] ? __pfx___sys_sendto+0x10/0x10 [ 322.277446][ T9046] ? __fget_files+0x2a/0x420 [ 322.277476][ T9046] ? ksys_write+0x275/0x2d0 [ 322.277510][ T9046] __ia32_sys_sendto+0xdd/0x100 [ 322.277534][ T9046] __do_fast_syscall_32+0xb4/0x110 [ 322.277562][ T9046] ? exc_page_fault+0x5f8/0x920 [ 322.277591][ T9046] do_fast_syscall_32+0x34/0x80 [ 322.277617][ T9046] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.277643][ T9046] RIP: 0023:0xf7f24579 [ 322.277660][ T9046] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 322.277678][ T9046] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 322.277702][ T9046] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080847fff [ 322.277718][ T9046] RDX: 0000000000034000 RSI: 000000000000cc03 RDI: 000000008005ffe4 [ 322.277733][ T9046] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 322.277747][ T9046] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 322.277761][ T9046] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.277796][ T9046] [ 322.552290][ T9] usb 2-1: config 0 has no interface number 0 [ 322.560807][ T9054] netlink: 144 bytes leftover after parsing attributes in process `syz.4.894'. [ 322.620869][ T9] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 322.649105][ T9] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 322.659212][ T9] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 322.670280][ T9] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 322.751621][ T9] usb 2-1: config 0 interface 125 has no altsetting 2 [ 322.956292][ T5896] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 322.997285][ T9] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 323.007078][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.024481][ T9] usb 2-1: Product: syz [ 323.172941][ T5896] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 323.206055][ T5896] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 323.271330][ T5896] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 323.289943][ T9] usb 2-1: Manufacturer: syz [ 323.295011][ T9] usb 2-1: SerialNumber: syz [ 323.303056][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.430997][ T9070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.440534][ T9070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.535821][ T9] usb 2-1: config 0 descriptor?? [ 323.540078][ T9] usb 2-1: selecting invalid altsetting 2 [ 323.762613][ T9058] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 323.827602][ T5896] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 323.842989][ T9] usb 2-1: USB disconnect, device number 40 [ 324.951375][ T9082] input: syz0 as /devices/virtual/input/input58 [ 326.346638][ T9] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 326.553100][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 326.569582][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.609907][ T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 326.699948][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 326.733463][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.783806][ T9] usb 2-1: Product: syz [ 326.860201][ T9] usb 2-1: Manufacturer: syz [ 326.876549][ T9] usb 2-1: SerialNumber: syz [ 326.893360][ T5896] usb 1-1: USB disconnect, device number 43 [ 327.045777][ T9111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.910'. [ 327.511880][ T9099] xt_hashlimit: max too large, truncated to 1048576 [ 327.523618][ T9099] xt_hashlimit: overflow, rate too high: 0 [ 329.316359][ T5896] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 329.506924][ T5896] usb 3-1: config 0 has no interfaces? [ 329.523966][ T5897] usb 2-1: USB disconnect, device number 41 [ 329.615609][ T5896] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 329.696273][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.716262][ T52] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 329.725683][ T5896] usb 3-1: Product: syz [ 329.739844][ T5896] usb 3-1: Manufacturer: syz [ 329.757331][ T5896] usb 3-1: SerialNumber: syz [ 329.775258][ T5896] usb 3-1: config 0 descriptor?? [ 329.876451][ T52] usb 5-1: Using ep0 maxpacket: 16 [ 329.883219][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.902792][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.929238][ T52] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 329.951268][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.007811][ T9148] netlink: 28 bytes leftover after parsing attributes in process `syz.3.923'. [ 330.093700][ T52] usb 5-1: config 0 descriptor?? [ 330.520079][ T52] playstation 0003:054C:05C4.000E: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.4-1/input0 [ 330.964424][ T9162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.994511][ T9162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.005546][ T52] playstation 0003:054C:05C4.000E: Failed to retrieve feature with reportID 18: -71 [ 331.032881][ T52] playstation 0003:054C:05C4.000E: Failed to retrieve DualShock4 pairing info: -71 [ 331.047589][ T52] playstation 0003:054C:05C4.000E: Failed to get MAC address from DualShock4 [ 331.058659][ T52] playstation 0003:054C:05C4.000E: Failed to create dualshock4. [ 331.501000][ T52] playstation 0003:054C:05C4.000E: probe with driver playstation failed with error -71 [ 331.555025][ T52] usb 5-1: USB disconnect, device number 30 [ 331.776208][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 331.949803][ T9] usb 1-1: config 0 has no interfaces? [ 331.973449][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 331.983532][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.991935][ T9] usb 1-1: Product: syz [ 331.997861][ T9] usb 1-1: Manufacturer: syz [ 332.002566][ T9] usb 1-1: SerialNumber: syz [ 332.011317][ T9] usb 1-1: config 0 descriptor?? [ 332.372218][ T9165] macsec1: entered allmulticast mode [ 332.444326][ T9166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.510110][ T9166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.074198][ T9] usb 3-1: USB disconnect, device number 54 [ 333.099567][ T9179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.123894][ T9179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.257274][ T9183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.935'. [ 333.439694][ T9185] netlink: 20 bytes leftover after parsing attributes in process `syz.1.936'. [ 333.590592][ T9195] vlan2: entered promiscuous mode [ 333.598208][ T9195] bridge0: entered promiscuous mode [ 333.604856][ T9195] vlan2: entered allmulticast mode [ 333.614186][ T9195] bridge0: entered allmulticast mode [ 333.648750][ T9195] bridge_slave_0: left allmulticast mode [ 333.654773][ T9195] bridge_slave_0: left promiscuous mode [ 333.668217][ T9195] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.702968][ T9195] bridge_slave_1: left allmulticast mode [ 333.721391][ T9195] bridge_slave_1: left promiscuous mode [ 333.742051][ T9195] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.789514][ T9195] bond0: (slave bond_slave_0): Releasing backup interface [ 333.839474][ T9195] bond0: (slave bond_slave_1): Releasing backup interface [ 333.894909][ T9195] team0: Port device team_slave_0 removed [ 333.920307][ T9195] team0: Port device team_slave_1 removed [ 333.939931][ T9195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.949792][ T9195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.970485][ T9195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.993449][ T9195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.049846][ T9195] bond0: (slave vxlan1): Releasing backup interface [ 334.210711][ T9209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.223238][ T9209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.401823][ T9220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.948'. [ 334.499029][ T9219] input: syz0 as /devices/virtual/input/input60 [ 334.724842][ T5897] usb 1-1: USB disconnect, device number 44 [ 334.838451][ T9225] netlink: 20 bytes leftover after parsing attributes in process `syz.2.950'. [ 335.507025][ T9] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 335.848055][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 335.859817][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 335.933451][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 335.959844][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 144, setting to 64 [ 335.985840][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 336.023291][ T9] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 336.033166][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.047237][ T9] usb 5-1: Product: syz [ 336.052909][ T9] usb 5-1: Manufacturer: syz [ 336.057912][ T5845] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 336.071884][ T9] usb 5-1: SerialNumber: syz [ 336.092739][ T9] usb 5-1: config 0 descriptor?? [ 336.105107][ T9235] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 336.161003][ T9] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input62 [ 336.230353][ T5845] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 336.242041][ T5845] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 336.253680][ T5845] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 336.284311][ T5845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.360465][ T9248] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 336.379643][ T5845] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 336.594295][ T9] rc_core: IR keymap rc-imon-pad not found [ 336.609378][ T9255] netlink: 28 bytes leftover after parsing attributes in process `syz.2.960'. [ 336.622280][ T9] Registered IR keymap rc-empty [ 336.659355][ T9] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 336.681627][ T9257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.700209][ T9] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 336.848735][ T9257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.877795][ T9] imon:send_packet: packet tx failed (-71) [ 336.958864][ T9] imon 5-1:0.0: remote input dev register failed [ 337.047669][ T9263] syzkaller1: entered promiscuous mode [ 337.054929][ T9] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 337.058943][ T9263] syzkaller1: entered allmulticast mode [ 337.203380][ T9] imon 5-1:0.0: unable to initialize intf0, err 0 [ 337.227044][ T9] imon:imon_probe: failed to initialize context! [ 337.237076][ T9] imon 5-1:0.0: unable to register, err -19 [ 337.268111][ T9] usb 5-1: USB disconnect, device number 31 [ 337.802591][ T9271] netlink: 20 bytes leftover after parsing attributes in process `syz.1.964'. [ 338.179012][ T9282] kvm: kvm [9281]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x40000004) = 0x0 [ 339.159200][ T5897] usb 1-1: USB disconnect, device number 45 [ 339.331318][ T9298] FAULT_INJECTION: forcing a failure. [ 339.331318][ T9298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.391088][ T9298] CPU: 0 UID: 0 PID: 9298 Comm: syz.0.975 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 339.391122][ T9298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 339.391134][ T9298] Call Trace: [ 339.391142][ T9298] [ 339.391152][ T9298] dump_stack_lvl+0x241/0x360 [ 339.391192][ T9298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.391222][ T9298] ? __pfx__printk+0x10/0x10 [ 339.391263][ T9298] should_fail_ex+0x424/0x570 [ 339.391292][ T9298] _copy_to_user+0x31/0xb0 [ 339.391325][ T9298] simple_read_from_buffer+0xc4/0x170 [ 339.391361][ T9298] proc_fail_nth_read+0x1ef/0x260 [ 339.391387][ T9298] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 339.391413][ T9298] ? rw_verify_area+0x246/0x630 [ 339.391436][ T9298] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 339.391466][ T9298] vfs_read+0x21f/0xb90 [ 339.391496][ T9298] ? __pfx___mutex_lock+0x10/0x10 [ 339.391524][ T9298] ? __pfx_vfs_read+0x10/0x10 [ 339.391551][ T9298] ? __fget_files+0x2a/0x420 [ 339.391572][ T9298] ? __fget_files+0x39d/0x420 [ 339.391590][ T9298] ? __fget_files+0x2a/0x420 [ 339.391616][ T9298] ksys_read+0x19d/0x2d0 [ 339.391642][ T9298] ? __pfx_ksys_read+0x10/0x10 [ 339.391666][ T9298] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 339.391690][ T9298] ? lockdep_hardirqs_on+0x9d/0x150 [ 339.391718][ T9298] __do_fast_syscall_32+0xb4/0x110 [ 339.391743][ T9298] ? exc_page_fault+0x5f8/0x920 [ 339.391772][ T9298] do_fast_syscall_32+0x34/0x80 [ 339.391798][ T9298] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 339.391822][ T9298] RIP: 0023:0xf7f24579 [ 339.391839][ T9298] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 339.391856][ T9298] RSP: 002b:00000000f5046590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 339.391877][ T9298] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5046620 [ 339.391891][ T9298] RDX: 000000000000000f RSI: 00000000f73adff4 RDI: 0000000000000000 [ 339.391904][ T9298] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 339.391915][ T9298] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 339.391926][ T9298] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 339.391954][ T9298] [ 339.954580][ T9312] input: syz0 as /devices/virtual/input/input64 [ 340.516415][ T52] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 340.736534][ T52] usb 2-1: Using ep0 maxpacket: 32 [ 340.743514][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.757672][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.777418][ T52] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 340.792445][ T9330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.801822][ T9330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.249194][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.317779][ T52] usb 2-1: config 0 descriptor?? [ 341.911749][ T9323] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.931632][ T52] usbhid 2-1:0.0: can't add hid device: -71 [ 341.941280][ T52] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 341.960598][ T52] usb 2-1: USB disconnect, device number 42 [ 342.139143][ T9] IPVS: starting estimator thread 0... [ 342.227406][ T9337] IPVS: using max 26 ests per chain, 62400 per kthread [ 342.661204][ T9356] FAULT_INJECTION: forcing a failure. [ 342.661204][ T9356] name failslab, interval 1, probability 0, space 0, times 0 [ 342.678219][ T9356] CPU: 0 UID: 0 PID: 9356 Comm: syz.0.995 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 342.678252][ T9356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 342.678266][ T9356] Call Trace: [ 342.678275][ T9356] [ 342.678285][ T9356] dump_stack_lvl+0x241/0x360 [ 342.678324][ T9356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.678346][ T9356] ? __pfx__printk+0x10/0x10 [ 342.678369][ T9356] ? radix_tree_lookup+0x23b/0x290 [ 342.678386][ T9356] ? __pfx___might_resched+0x10/0x10 [ 342.678410][ T9356] should_fail_ex+0x424/0x570 [ 342.678431][ T9356] should_failslab+0xac/0x100 [ 342.678453][ T9356] __kmalloc_cache_noprof+0x73/0x370 [ 342.678474][ T9356] ? drm_mode_setcrtc+0x826/0x1dc0 [ 342.678493][ T9356] drm_mode_setcrtc+0x826/0x1dc0 [ 342.678511][ T9356] ? kasan_save_track+0x3f/0x80 [ 342.678527][ T9356] ? __kasan_slab_free+0x59/0x70 [ 342.678545][ T9356] ? security_file_ioctl_compat+0xc6/0x2a0 [ 342.678584][ T9356] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 342.678602][ T9356] ? __lock_acquire+0xad5/0xd80 [ 342.678637][ T9356] ? _raw_spin_unlock+0x28/0x50 [ 342.678656][ T9356] drm_ioctl_kernel+0x34e/0x450 [ 342.678681][ T9356] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 342.678696][ T9356] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 342.678727][ T9356] drm_ioctl+0x687/0xbb0 [ 342.678750][ T9356] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 342.678771][ T9356] ? __pfx_drm_ioctl+0x10/0x10 [ 342.678804][ T9356] ? __fget_files+0x2a/0x420 [ 342.678816][ T9356] ? drm_compat_ioctl+0x11c/0x340 [ 342.678839][ T9356] __se_compat_sys_ioctl+0x50e/0xc30 [ 342.678860][ T9356] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 342.678881][ T9356] ? __fget_files+0x2a/0x420 [ 342.678899][ T9356] ? fput+0x9b/0xd0 [ 342.678912][ T9356] ? ksys_write+0x275/0x2d0 [ 342.678936][ T9356] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 342.678956][ T9356] ? lockdep_hardirqs_on+0x9d/0x150 [ 342.678977][ T9356] __do_fast_syscall_32+0xb4/0x110 [ 342.678996][ T9356] ? exc_page_fault+0x5f8/0x920 [ 342.679018][ T9356] do_fast_syscall_32+0x34/0x80 [ 342.679037][ T9356] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 342.679056][ T9356] RIP: 0023:0xf7f24579 [ 342.679070][ T9356] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 342.679083][ T9356] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 342.679100][ T9356] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c06864a2 [ 342.679111][ T9356] RDX: 0000000080000580 RSI: 0000000000000000 RDI: 0000000000000000 [ 342.679121][ T9356] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 342.679130][ T9356] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 342.679140][ T9356] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 342.679161][ T9356] [ 342.966345][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.080776][ T9359] IPv6: NLM_F_REPLACE set, but no existing node found! [ 343.269707][ T9366] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 343.301177][ T9367] sctp: [Deprecated]: syz.4.1000 (pid 9367) Use of int in max_burst socket option deprecated. [ 343.301177][ T9367] Use struct sctp_assoc_value instead [ 343.371427][ T9371] trusted_key: encrypted_key: master key parameter 'dåfauer:syz' is invalid [ 343.494125][ T9374] input: syz0 as /devices/virtual/input/input66 [ 345.446914][ T9397] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 345.938334][ T9413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.947616][ T9413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.986319][ T52] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 346.168404][ T52] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.227922][ T52] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 346.249128][ T52] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 346.265485][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 346.271115][ T9419] hsr0: entered promiscuous mode [ 346.276703][ T52] usb 1-1: SerialNumber: syz [ 346.435076][ T5897] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 346.523095][ T52] usb 1-1: 0:2 : does not exist [ 346.579831][ T9422] gtp0: entered promiscuous mode [ 346.593202][ T52] usb 1-1: USB disconnect, device number 46 [ 346.609865][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.625132][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.671493][ T5897] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 346.694980][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.718219][ T5897] usb 3-1: config 0 descriptor?? [ 346.818000][ T8062] udevd[8062]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 347.070343][ T9430] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 347.162520][ T5897] usbhid 3-1:0.0: can't add hid device: -71 [ 347.186404][ T5897] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 347.216278][ T52] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 347.276080][ T5897] usb 3-1: USB disconnect, device number 55 [ 347.372363][ T52] usb 2-1: config 0 has no interfaces? [ 347.387210][ T52] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 347.396808][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.404853][ T52] usb 2-1: Product: syz [ 347.415444][ T52] usb 2-1: Manufacturer: syz [ 347.516284][ T3081] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 347.542900][ T52] usb 2-1: SerialNumber: syz [ 347.573297][ T52] usb 2-1: config 0 descriptor?? [ 347.676558][ T3081] usb 1-1: Invalid ep0 maxpacket: 64 [ 347.860298][ T3081] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 348.087592][ T3081] usb 1-1: Invalid ep0 maxpacket: 64 [ 348.096147][ T3081] usb usb1-port1: attempt power cycle [ 348.406670][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 348.446770][ T3081] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 348.467929][ T3081] usb 1-1: Invalid ep0 maxpacket: 64 [ 348.546589][ T9] usb 5-1: device descriptor read/64, error -71 [ 348.596452][ T3081] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 348.629372][ T3081] usb 1-1: Invalid ep0 maxpacket: 64 [ 348.636428][ T3081] usb usb1-port1: unable to enumerate USB device [ 348.676568][ T5845] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 348.786473][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 348.839734][ T5845] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 348.850034][ T5845] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 348.875974][ T5845] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 348.913479][ T5845] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 348.932759][ T9] usb 5-1: device descriptor read/64, error -71 [ 348.951078][ T5845] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 348.985062][ T5845] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 348.994478][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 349.008245][ T5845] usb 3-1: Product: syz [ 349.012653][ T5845] usb 3-1: Manufacturer: syz [ 349.040278][ T9452] gtp0: entered promiscuous mode [ 349.040583][ T5845] cdc_wdm 3-1:1.0: skipping garbage [ 349.051967][ T9] usb usb5-port1: attempt power cycle [ 349.073140][ T5845] cdc_wdm 3-1:1.0: skipping garbage [ 349.135323][ T5845] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 349.151570][ T5845] cdc_wdm 3-1:1.0: Unknown control protocol [ 349.344228][ T9456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.353745][ T9456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.456612][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 349.488326][ T9] usb 5-1: device descriptor read/8, error -71 [ 349.741435][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 349.768502][ T9] usb 5-1: device descriptor read/8, error -71 [ 349.876707][ T9] usb usb5-port1: unable to enumerate USB device [ 350.839220][ T9] usb 2-1: USB disconnect, device number 43 [ 350.903507][ T9463] trusted_key: encrypted_key: key user:syz not found [ 351.024270][ T9471] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1032'. [ 351.116760][ T9473] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1033'. [ 351.335269][ T9] usb 3-1: USB disconnect, device number 56 [ 351.442396][ T9485] input: syz0 as /devices/virtual/input/input68 [ 351.532642][ T9492] FAULT_INJECTION: forcing a failure. [ 351.532642][ T9492] name failslab, interval 1, probability 0, space 0, times 0 [ 351.567586][ T9492] CPU: 0 UID: 0 PID: 9492 Comm: syz.2.1039 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 351.567628][ T9492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 351.567642][ T9492] Call Trace: [ 351.567651][ T9492] [ 351.567660][ T9492] dump_stack_lvl+0x241/0x360 [ 351.567701][ T9492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.567732][ T9492] ? __pfx__printk+0x10/0x10 [ 351.567761][ T9492] ? __lock_acquire+0xad5/0xd80 [ 351.567796][ T9492] should_fail_ex+0x424/0x570 [ 351.567824][ T9492] should_failslab+0xac/0x100 [ 351.567856][ T9492] kmem_cache_alloc_noprof+0x78/0x390 [ 351.567886][ T9492] ? skb_clone+0x20c/0x390 [ 351.567917][ T9492] skb_clone+0x20c/0x390 [ 351.567945][ T9492] __netlink_deliver_tap+0x3c4/0x7f0 [ 351.567994][ T9492] ? netlink_deliver_tap+0x2e/0x1b0 [ 351.568024][ T9492] netlink_deliver_tap+0x19d/0x1b0 [ 351.568056][ T9492] netlink_unicast+0x7c6/0x9a0 [ 351.568094][ T9492] ? __pfx_netlink_unicast+0x10/0x10 [ 351.568125][ T9492] ? skb_put+0x114/0x1f0 [ 351.568151][ T9492] netlink_sendmsg+0x8c3/0xcd0 [ 351.568197][ T9492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.568233][ T9492] ? aa_sock_msg_perm+0x91/0x160 [ 351.568270][ T9492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.568300][ T9492] __sock_sendmsg+0x221/0x270 [ 351.568333][ T9492] sock_sendmsg+0x16e/0x250 [ 351.568369][ T9492] ? __pfx_sock_sendmsg+0x10/0x10 [ 351.568412][ T9492] ? __lock_acquire+0xad5/0xd80 [ 351.568434][ T9492] ? iov_iter_bvec+0x4e/0x180 [ 351.568465][ T9492] splice_to_socket+0xa2b/0x10e0 [ 351.568521][ T9492] ? __pfx_splice_to_socket+0x10/0x10 [ 351.568600][ T9492] ? bpf_lsm_file_permission+0x9/0x10 [ 351.568633][ T9492] ? rw_verify_area+0x246/0x630 [ 351.568659][ T9492] ? __pfx_splice_to_socket+0x10/0x10 [ 351.568687][ T9492] do_splice+0xda7/0x1920 [ 351.568719][ T9492] ? __lock_acquire+0xad5/0xd80 [ 351.568765][ T9492] ? pipe_clear_nowait+0x1ad/0x250 [ 351.568800][ T9492] ? __pfx_do_splice+0x10/0x10 [ 351.568827][ T9492] ? __fget_files+0x2a/0x420 [ 351.568858][ T9492] __se_sys_splice+0x2dc/0x450 [ 351.568897][ T9492] ? __pfx___se_sys_splice+0x10/0x10 [ 351.568932][ T9492] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 351.568959][ T9492] ? __ia32_sys_splice+0x21/0xf0 [ 351.568994][ T9492] __do_fast_syscall_32+0xb4/0x110 [ 351.569021][ T9492] ? exc_page_fault+0x5f8/0x920 [ 351.569052][ T9492] do_fast_syscall_32+0x34/0x80 [ 351.569080][ T9492] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 351.569105][ T9492] RIP: 0023:0xf740d579 [ 351.569123][ T9492] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 351.569141][ T9492] RSP: 002b:00000000f507555c EFLAGS: 00000206 ORIG_RAX: 0000000000000139 [ 351.569164][ T9492] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 351.569178][ T9492] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 000000000004ffe6 [ 351.569191][ T9492] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 351.569203][ T9492] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 351.569215][ T9492] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 351.569247][ T9492] [ 351.570665][ T9492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1039'. [ 352.278999][ T9497] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 352.326320][ T9500] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1043'. [ 352.610272][ T9507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.647999][ T9507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.691215][ T9507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.718679][ T9507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.738885][ T9507] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1046'. [ 352.748539][ T9507] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1046'. [ 352.775523][ T9507] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 352.810452][ T9507] team0: entered promiscuous mode [ 352.842205][ T9507] team_slave_0: entered promiscuous mode [ 352.870359][ T9507] team_slave_1: entered promiscuous mode [ 354.127649][ T52] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 354.257256][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 354.290207][ T52] usb 1-1: Using ep0 maxpacket: 16 [ 354.303549][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.344691][ T52] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 354.373614][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.390945][ T52] usb 1-1: config 0 descriptor?? [ 354.396295][ T9] usb 2-1: device descriptor read/64, error -71 [ 354.425833][ T9538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.436255][ T9538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.651855][ T52] apple 0003:05AC:024B.000F: item fetching failed at offset 2/69 [ 354.662992][ T52] apple 0003:05AC:024B.000F: parse failed [ 354.671868][ T52] apple 0003:05AC:024B.000F: probe with driver apple failed with error -22 [ 354.696200][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 354.846885][ T9] usb 2-1: device descriptor read/64, error -71 [ 354.863891][ T52] usb 1-1: USB disconnect, device number 51 [ 354.956754][ T9] usb usb2-port1: attempt power cycle [ 355.306282][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 355.328614][ T9] usb 2-1: device descriptor read/8, error -71 [ 355.586284][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 355.621220][ T9] usb 2-1: device descriptor read/8, error -71 [ 355.653925][ T9543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1056'. [ 355.664910][ T9548] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1057'. [ 355.748027][ T9] usb usb2-port1: unable to enumerate USB device [ 356.210334][ T9557] fuse: Bad value for 'fd' [ 356.357000][ T9] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 356.357419][ T3081] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 356.518430][ T9] usb 3-1: device descriptor read/64, error -71 [ 356.548422][ T3081] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 356.560553][ T3081] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.631392][ T3081] usb 1-1: config 0 descriptor?? [ 356.789807][ T9] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 356.996337][ T9] usb 3-1: device descriptor read/64, error -71 [ 357.116658][ T9] usb usb3-port1: attempt power cycle [ 357.458970][ T9] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 357.524676][ T9] usb 3-1: device descriptor read/8, error -71 [ 358.446772][ T9] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 358.576335][ T9] usb 3-1: device descriptor read/8, error -71 [ 358.694776][ T9] usb usb3-port1: unable to enumerate USB device [ 358.732466][ T3081] pegasus 1-1:0.0: can't reset MAC [ 358.738322][ T3081] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 358.798051][ T3081] usb 1-1: USB disconnect, device number 52 [ 359.334871][ T9584] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1070'. [ 359.827979][ T5842] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 359.952241][ T9598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1075'. [ 360.248263][ T9605] input: syz0 as /devices/virtual/input/input70 [ 362.037069][ T9624] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1082'. [ 362.991565][ T9640] netlink: 'syz.4.1087': attribute type 21 has an invalid length. [ 362.999604][ T9640] netlink: 'syz.4.1087': attribute type 6 has an invalid length. [ 363.008073][ T9640] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1087'. [ 363.100771][ T9643] vlan0: entered promiscuous mode [ 363.105838][ T9643] bridge0: entered promiscuous mode [ 363.192053][ T9643] vlan0: entered allmulticast mode [ 363.242295][ T9643] bridge0: entered allmulticast mode [ 363.314354][ T9647] bridge_slave_0: left allmulticast mode [ 363.321129][ T9647] bridge_slave_0: left promiscuous mode [ 363.328506][ T9647] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.346033][ T9647] bridge_slave_1: left allmulticast mode [ 363.354924][ T9647] bridge_slave_1: left promiscuous mode [ 363.364735][ T9647] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.385807][ T9647] bond0: (slave bond_slave_0): Releasing backup interface [ 363.440641][ T9647] bond0: (slave bond_slave_1): Releasing backup interface [ 363.565496][ T9647] team0: Port device team_slave_0 removed [ 363.602552][ T9647] team0: Port device team_slave_1 removed [ 363.611329][ T9647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.621040][ T9647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.635252][ T9647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.656663][ T9647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.698997][ T9652] sit0: entered promiscuous mode [ 363.739569][ T9652] netlink: 'syz.4.1090': attribute type 1 has an invalid length. [ 363.777255][ T9652] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1090'. [ 363.808883][ T9644] FAULT_INJECTION: forcing a failure. [ 363.808883][ T9644] name fail_futex, interval 1, probability 0, space 0, times 1 [ 363.832209][ T5897] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 363.850247][ T9644] CPU: 1 UID: 0 PID: 9644 Comm: syz.2.1086 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 363.850280][ T9644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 363.850294][ T9644] Call Trace: [ 363.850303][ T9644] [ 363.850313][ T9644] dump_stack_lvl+0x241/0x360 [ 363.850351][ T9644] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.850382][ T9644] ? __pfx__printk+0x10/0x10 [ 363.850407][ T9644] ? is_valid_gup_args+0x124/0x200 [ 363.850442][ T9644] ? get_user_pages_fast+0xd2/0x160 [ 363.850477][ T9644] ? __pfx_get_user_pages_fast+0x10/0x10 [ 363.850511][ T9644] should_fail_ex+0x424/0x570 [ 363.850539][ T9644] get_futex_key+0x9b5/0xf50 [ 363.850578][ T9644] ? __pfx_get_futex_key+0x10/0x10 [ 363.850621][ T9644] futex_wake+0x12c/0x5d0 [ 363.850653][ T9644] ? __pfx_futex_wake+0x10/0x10 [ 363.850693][ T9644] do_futex+0x3d5/0x5a0 [ 363.850730][ T9644] ? __pfx_do_futex+0x10/0x10 [ 363.850764][ T9644] ? __might_fault+0xaa/0x120 [ 363.850800][ T9644] mm_release+0x195/0x430 [ 363.850827][ T9644] ? __pfx_mm_release+0x10/0x10 [ 363.850846][ T9644] ? _raw_spin_unlock_irq+0x23/0x50 [ 363.850884][ T9644] exit_mm+0xb7/0x310 [ 363.850914][ T9644] ? __pfx_exit_mm+0x10/0x10 [ 363.850940][ T9644] ? taskstats_exit+0x326/0xa60 [ 363.850964][ T9644] ? lockdep_hardirqs_on+0x9d/0x150 [ 363.850994][ T9644] do_exit+0x994/0x27f0 [ 363.851036][ T9644] ? do_raw_spin_lock+0x151/0x370 [ 363.851071][ T9644] ? __pfx_do_exit+0x10/0x10 [ 363.851098][ T9644] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 363.851149][ T9644] do_group_exit+0x207/0x2c0 [ 363.851176][ T9644] ? _raw_spin_unlock_irq+0x23/0x50 [ 363.851197][ T9644] ? lockdep_hardirqs_on+0x9d/0x150 [ 363.851226][ T9644] get_signal+0x1696/0x1730 [ 363.851264][ T9644] ? __pfx_get_signal+0x10/0x10 [ 363.851295][ T9644] arch_do_signal_or_restart+0x98/0x840 [ 363.851334][ T9644] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 363.851385][ T9644] ? syscall_exit_to_user_mode+0xa3/0x340 [ 363.851416][ T9644] syscall_exit_to_user_mode+0xce/0x340 [ 363.851446][ T9644] __do_fast_syscall_32+0xc1/0x110 [ 363.851473][ T9644] ? exc_page_fault+0x5f8/0x920 [ 363.851504][ T9644] do_fast_syscall_32+0x34/0x80 [ 363.851532][ T9644] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 363.851558][ T9644] RIP: 0023:0xf740d579 [ 363.851577][ T9644] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 363.851595][ T9644] RSP: 002b:00000000f507555c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 363.851618][ T9644] RAX: fffffffffffffe00 RBX: 0000000000000005 RCX: 0000000080002980 [ 363.851633][ T9644] RDX: 0000000000000239 RSI: 0000000000000000 RDI: 0000000000000000 [ 363.851646][ T9644] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 363.851658][ T9644] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 363.851671][ T9644] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 363.851702][ T9644] [ 364.148581][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.334723][ T5842] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 364.343819][ T5842] Bluetooth: hci1: Injecting HCI hardware error event [ 364.352246][ T5842] Bluetooth: hci1: hardware error 0x00 [ 364.497076][ T9658] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1091'. [ 364.618189][ T5897] usb 5-1: device descriptor read/64, error -71 [ 364.835841][ T9675] FAULT_INJECTION: forcing a failure. [ 364.835841][ T9675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.853680][ T9675] CPU: 0 UID: 0 PID: 9675 Comm: syz.2.1097 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 364.853721][ T9675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 364.853735][ T9675] Call Trace: [ 364.853743][ T9675] [ 364.853752][ T9675] dump_stack_lvl+0x241/0x360 [ 364.853792][ T9675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.853823][ T9675] ? __pfx__printk+0x10/0x10 [ 364.853866][ T9675] should_fail_ex+0x424/0x570 [ 364.853894][ T9675] _copy_from_iter+0x211/0x1c70 [ 364.853928][ T9675] ? __build_skb_around+0x247/0x3d0 [ 364.853954][ T9675] ? __alloc_skb+0x298/0x480 [ 364.853974][ T9675] ? __pfx__copy_from_iter+0x10/0x10 [ 364.854005][ T9675] ? __pfx___alloc_skb+0x10/0x10 [ 364.854028][ T9675] ? skb_put+0x114/0x1f0 [ 364.854053][ T9675] netlink_sendmsg+0x73c/0xcd0 [ 364.854099][ T9675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.854134][ T9675] ? __import_iovec+0x585/0x830 [ 364.854162][ T9675] ? aa_sock_msg_perm+0x91/0x160 [ 364.854198][ T9675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.854227][ T9675] __sock_sendmsg+0x221/0x270 [ 364.854260][ T9675] ____sys_sendmsg+0x523/0x860 [ 364.854292][ T9675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.854334][ T9675] __sys_sendmsg+0x271/0x360 [ 364.854362][ T9675] ? __pfx___sys_sendmsg+0x10/0x10 [ 364.854439][ T9675] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 364.854467][ T9675] ? lockdep_hardirqs_on+0x9d/0x150 [ 364.854495][ T9675] __do_fast_syscall_32+0xb4/0x110 [ 364.854523][ T9675] ? exc_page_fault+0x5f8/0x920 [ 364.854553][ T9675] do_fast_syscall_32+0x34/0x80 [ 364.854581][ T9675] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.854606][ T9675] RIP: 0023:0xf740d579 [ 364.854625][ T9675] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 364.854643][ T9675] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 364.854666][ T9675] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 364.854681][ T9675] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 364.854694][ T9675] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 364.854714][ T9675] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 364.854727][ T9675] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 364.854758][ T9675] [ 365.091626][ T5897] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 365.171913][ T9678] batman_adv: batadv0: Adding interface: ip6gretap1 [ 365.179811][ T9678] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 365.202106][ T9678] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 365.236480][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 365.276583][ T5897] usb 5-1: device descriptor read/64, error -71 [ 365.376212][ T9] usb 2-1: device descriptor read/64, error -71 [ 365.395258][ T5897] usb usb5-port1: attempt power cycle [ 365.626530][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 365.756299][ T5897] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 365.776669][ T9] usb 2-1: device descriptor read/64, error -71 [ 365.886813][ T9] usb usb2-port1: attempt power cycle [ 366.006886][ T5897] usb 5-1: device descriptor read/8, error -71 [ 366.292191][ T5897] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 366.300017][ T5845] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 366.370789][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 366.380546][ T5897] usb 5-1: device descriptor read/8, error -71 [ 366.387012][ T5842] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 366.408734][ T9] usb 2-1: device descriptor read/8, error -71 [ 366.496456][ T5897] usb usb5-port1: unable to enumerate USB device [ 366.668325][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 366.741811][ T9] usb 2-1: device descriptor read/8, error -71 [ 366.877252][ T5845] usb 1-1: config 0 has no interfaces? [ 366.903364][ T9] usb usb2-port1: unable to enumerate USB device [ 366.921866][ T5845] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 366.983412][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.026967][ T5845] usb 1-1: Product: syz [ 367.031196][ T5845] usb 1-1: Manufacturer: syz [ 367.321241][ T5845] usb 1-1: SerialNumber: syz [ 367.388696][ T5845] usb 1-1: config 0 descriptor?? [ 368.216556][ T9709] input: syz0 as /devices/virtual/input/input73 [ 368.283864][ T9712] hsr0: left promiscuous mode [ 368.356779][ T9713] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1107'. [ 368.389964][ T9712] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 368.512012][ T9712] gtp0: left promiscuous mode [ 368.735152][ T9720] FAULT_INJECTION: forcing a failure. [ 368.735152][ T9720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.771112][ T9720] CPU: 1 UID: 0 PID: 9720 Comm: syz.2.1110 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 368.771147][ T9720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 368.771161][ T9720] Call Trace: [ 368.771170][ T9720] [ 368.771180][ T9720] dump_stack_lvl+0x241/0x360 [ 368.771220][ T9720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.771252][ T9720] ? __pfx__printk+0x10/0x10 [ 368.771296][ T9720] should_fail_ex+0x424/0x570 [ 368.771325][ T9720] _copy_from_iter+0x211/0x1c70 [ 368.771361][ T9720] ? __build_skb_around+0x247/0x3d0 [ 368.771387][ T9720] ? __alloc_skb+0x298/0x480 [ 368.771407][ T9720] ? __pfx__copy_from_iter+0x10/0x10 [ 368.771444][ T9720] ? __pfx___alloc_skb+0x10/0x10 [ 368.771468][ T9720] ? skb_put+0x114/0x1f0 [ 368.771494][ T9720] netlink_sendmsg+0x73c/0xcd0 [ 368.771541][ T9720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.771578][ T9720] ? __import_iovec+0x585/0x830 [ 368.771606][ T9720] ? aa_sock_msg_perm+0x91/0x160 [ 368.771644][ T9720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.771673][ T9720] __sock_sendmsg+0x221/0x270 [ 368.771707][ T9720] ____sys_sendmsg+0x523/0x860 [ 368.771740][ T9720] ? __pfx_____sys_sendmsg+0x10/0x10 [ 368.771789][ T9720] __sys_sendmsg+0x271/0x360 [ 368.771819][ T9720] ? __pfx___sys_sendmsg+0x10/0x10 [ 368.771896][ T9720] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 368.771925][ T9720] ? lockdep_hardirqs_on+0x9d/0x150 [ 368.771955][ T9720] __do_fast_syscall_32+0xb4/0x110 [ 368.771982][ T9720] ? exc_page_fault+0x5f8/0x920 [ 368.772014][ T9720] do_fast_syscall_32+0x34/0x80 [ 368.772042][ T9720] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 368.772068][ T9720] RIP: 0023:0xf740d579 [ 368.772087][ T9720] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 368.772106][ T9720] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 368.772128][ T9720] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 368.772144][ T9720] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 368.772156][ T9720] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 368.772169][ T9720] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 368.772181][ T9720] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 368.772212][ T9720] [ 369.556488][ T52] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 369.696182][ T52] usb 2-1: device descriptor read/64, error -71 [ 369.782437][ T3081] usb 1-1: USB disconnect, device number 53 [ 369.872464][ T9743] input: syz0 as /devices/virtual/input/input74 [ 369.970034][ T52] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 370.106914][ T52] usb 2-1: device descriptor read/64, error -71 [ 370.202340][ T9749] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1121'. [ 370.232462][ T52] usb usb2-port1: attempt power cycle [ 371.006371][ T52] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 371.305440][ T52] usb 2-1: device descriptor read/8, error -71 [ 371.616200][ T52] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 371.676977][ T52] usb 2-1: device descriptor read/8, error -71 [ 371.846723][ T52] usb usb2-port1: unable to enumerate USB device [ 372.086379][ T3081] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 372.318614][ T3081] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 372.585484][ T3081] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 372.645198][ T3081] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 372.666176][ T3081] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.984158][ T9782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.997619][ T9782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.266407][ T5845] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 373.346373][ T3081] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 373.509277][ T3081] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 373.523862][ T3081] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 373.528947][ T5845] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 373.543345][ T3081] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 373.550065][ T5845] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 373.553961][ T3081] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.573574][ T5845] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 373.583163][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.952366][ T9790] input: syz0 as /devices/virtual/input/input75 [ 374.740066][ T3081] usb 2-1: USB disconnect, device number 56 [ 374.781169][ T52] usb 3-1: USB disconnect, device number 61 [ 375.454205][ T5845] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 375.716248][ T5845] usb 2-1: device descriptor read/64, error -71 [ 375.956472][ T5845] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 376.096571][ T5845] usb 2-1: device descriptor read/64, error -71 [ 376.108428][ T9823] FAULT_INJECTION: forcing a failure. [ 376.108428][ T9823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.121734][ T9823] CPU: 1 UID: 0 PID: 9823 Comm: syz.2.1141 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 376.121755][ T9823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 376.121764][ T9823] Call Trace: [ 376.121771][ T9823] [ 376.121778][ T9823] dump_stack_lvl+0x241/0x360 [ 376.121807][ T9823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.121829][ T9823] ? __pfx__printk+0x10/0x10 [ 376.121859][ T9823] should_fail_ex+0x424/0x570 [ 376.121879][ T9823] _copy_from_iter+0x211/0x1c70 [ 376.121904][ T9823] ? __build_skb_around+0x247/0x3d0 [ 376.121922][ T9823] ? __alloc_skb+0x298/0x480 [ 376.121949][ T9823] ? __pfx__copy_from_iter+0x10/0x10 [ 376.121971][ T9823] ? __pfx___alloc_skb+0x10/0x10 [ 376.121987][ T9823] ? skb_put+0x114/0x1f0 [ 376.122006][ T9823] netlink_sendmsg+0x73c/0xcd0 [ 376.122039][ T9823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.122063][ T9823] ? __import_iovec+0x585/0x830 [ 376.122084][ T9823] ? aa_sock_msg_perm+0x91/0x160 [ 376.122109][ T9823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.122130][ T9823] __sock_sendmsg+0x221/0x270 [ 376.122153][ T9823] ____sys_sendmsg+0x523/0x860 [ 376.122176][ T9823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.122204][ T9823] __sys_sendmsg+0x271/0x360 [ 376.122224][ T9823] ? __pfx___sys_sendmsg+0x10/0x10 [ 376.122282][ T9823] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 376.122302][ T9823] ? lockdep_hardirqs_on+0x9d/0x150 [ 376.122323][ T9823] __do_fast_syscall_32+0xb4/0x110 [ 376.122342][ T9823] ? exc_page_fault+0x5f8/0x920 [ 376.122364][ T9823] do_fast_syscall_32+0x34/0x80 [ 376.122383][ T9823] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 376.122402][ T9823] RIP: 0023:0xf740d579 [ 376.122415][ T9823] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 376.122428][ T9823] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 376.122445][ T9823] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 376.122456][ T9823] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 376.122465][ T9823] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 376.122474][ T9823] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 376.122483][ T9823] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 376.122505][ T9823] [ 376.359904][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.383403][ T5845] usb usb2-port1: attempt power cycle [ 376.443569][ T3081] usb 1-1: USB disconnect, device number 54 [ 376.521817][ T9830] input: syz0 as /devices/virtual/input/input76 [ 376.675240][ T9834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1146'. [ 376.738395][ T5845] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 376.778911][ T5845] usb 2-1: device descriptor read/8, error -71 [ 376.895703][ T9849] sit0: entered promiscuous mode [ 376.915261][ T9849] netlink: 'syz.3.1148': attribute type 1 has an invalid length. [ 376.923385][ T9849] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1148'. [ 376.958852][ T9849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.968686][ T9849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.026547][ T5845] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 377.051265][ T5845] usb 2-1: device descriptor read/8, error -71 [ 377.061354][ T9851] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1151'. [ 377.071346][ T9851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1151'. [ 377.082081][ T9851] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1151'. [ 377.167907][ T5845] usb usb2-port1: unable to enumerate USB device [ 377.211322][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1152'. [ 377.558215][ T9865] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1156'. [ 378.578996][ T9883] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1162'. [ 378.612022][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.618564][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.816409][ T3081] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 378.934597][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1163'. [ 379.092315][ T3081] usb 2-1: config 0 has no interfaces? [ 379.110146][ T3081] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 379.123259][ T3081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.145242][ T3081] usb 2-1: Product: syz [ 379.157283][ T3081] usb 2-1: Manufacturer: syz [ 379.173739][ T3081] usb 2-1: SerialNumber: syz [ 379.204687][ T3081] usb 2-1: config 0 descriptor?? [ 379.219969][ T9888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.228840][ T9888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.281682][ T9889] xt_CT: No such helper "snmp" [ 379.599045][ T9896] KVM: debugfs: duplicate directory 9896-6 [ 379.781302][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1164'. [ 380.226192][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 380.376262][ T9] usb 5-1: device descriptor read/64, error -71 [ 380.616373][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 380.773186][ T9] usb 5-1: device descriptor read/64, error -71 [ 380.946793][ T9] usb usb5-port1: attempt power cycle [ 381.453159][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 381.517174][ T9] usb 5-1: device descriptor read/8, error -71 [ 381.561474][ T3081] usb 2-1: USB disconnect, device number 61 [ 381.715924][ T9925] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1175'. [ 381.795292][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 382.408163][ T9] usb 5-1: device descriptor read/8, error -71 [ 382.522379][ T9] usb usb5-port1: unable to enumerate USB device [ 382.567837][ T9933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.579356][ T9933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.986001][ T9936] netlink: 'syz.1.1177': attribute type 16 has an invalid length. [ 382.994410][ T9936] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000055: 0000 [#1] SMP KASAN PTI [ 383.006398][ T9936] KASAN: null-ptr-deref in range [0x00000000000002a8-0x00000000000002af] [ 383.014829][ T9936] CPU: 0 UID: 0 PID: 9936 Comm: syz.1.1177 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 383.026820][ T9936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 383.036891][ T9936] RIP: 0010:rtnl_create_link+0x6af/0xea0 [ 383.042564][ T9936] Code: 24 20 42 80 3c 28 00 74 08 48 89 df e8 ea fa 3a f8 4c 89 64 24 28 bd a8 02 00 00 48 89 5c 24 08 48 03 2b 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 ef e8 c2 fa 3a f8 45 31 e4 48 83 7d 00 [ 383.062290][ T9936] RSP: 0018:ffffc9001bfd6e50 EFLAGS: 00010206 [ 383.068398][ T9936] RAX: 0000000000000055 RBX: ffff888022be8008 RCX: 0000000000080000 [ 383.076394][ T9936] RDX: ffffc9000b9d9000 RSI: 00000000000028fc RDI: 00000000000028fd [ 383.084381][ T9936] RBP: 00000000000002a8 R08: ffffffff89f29319 R09: 1ffff920037fadf6 [ 383.092364][ T9936] R10: dffffc0000000000 R11: fffff520037fadf7 R12: ffff888032009080 [ 383.100353][ T9936] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888022be8000 [ 383.108512][ T9936] FS: 0000000000000000(0000) GS:ffff888124f93000(0063) knlGS:00000000f50c6b40 [ 383.117461][ T9936] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 383.124143][ T9936] CR2: 000000000c316fad CR3: 0000000027e96000 CR4: 00000000003526f0 [ 383.132132][ T9936] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 383.140130][ T9936] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 383.148110][ T9936] Call Trace: [ 383.151393][ T9936] [ 383.154330][ T9936] rtnl_newlink_create+0x2f2/0xcb0 [ 383.159767][ T9936] ? __mutex_lock+0x380/0x10c0 [ 383.164545][ T9936] ? __pfx_aa_get_newest_label+0x10/0x10 [ 383.170197][ T9936] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 383.175839][ T9936] ? __pfx___mutex_lock+0x10/0x10 [ 383.180968][ T9936] ? ns_capable+0x8a/0xf0 [ 383.185306][ T9936] rtnl_newlink+0x18b0/0x1fe0 [ 383.190003][ T9936] ? stack_depot_save_flags+0x44/0x940 [ 383.195481][ T9936] ? __pfx_rtnl_newlink+0x10/0x10 [ 383.200533][ T9936] ? __netlink_deliver_tap+0x561/0x7f0 [ 383.206008][ T9936] ? netlink_deliver_tap+0x19d/0x1b0 [ 383.211344][ T9936] ? netlink_unicast+0x7c6/0x9a0 [ 383.216299][ T9936] ? netlink_sendmsg+0x8c3/0xcd0 [ 383.221249][ T9936] ? __sock_sendmsg+0x221/0x270 [ 383.226285][ T9936] ? ____sys_sendmsg+0x523/0x860 [ 383.231228][ T9936] ? __sys_sendmsg+0x271/0x360 [ 383.235996][ T9936] ? __do_fast_syscall_32+0xb4/0x110 [ 383.241294][ T9936] ? do_fast_syscall_32+0x34/0x80 [ 383.246331][ T9936] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 383.252856][ T9936] ? kasan_quarantine_put+0xdc/0x230 [ 383.258145][ T9936] ? lockdep_hardirqs_on+0x9d/0x150 [ 383.263354][ T9936] ? nlmon_xmit+0xaf/0x100 [ 383.267872][ T9936] ? __local_bh_enable_ip+0x168/0x200 [ 383.273246][ T9936] ? lockdep_hardirqs_on+0x9d/0x150 [ 383.278453][ T9936] ? aa_get_newest_label+0x101/0x6f0 [ 383.283758][ T9936] ? __lock_acquire+0xad5/0xd80 [ 383.288626][ T9936] ? __pfx_rtnl_newlink+0x10/0x10 [ 383.293662][ T9936] rtnetlink_rcv_msg+0x80f/0xd70 [ 383.298612][ T9936] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 383.303741][ T9936] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 383.309211][ T9936] ? ref_tracker_free+0x63e/0x7e0 [ 383.314246][ T9936] netlink_rcv_skb+0x208/0x480 [ 383.319023][ T9936] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 383.324491][ T9936] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 383.329796][ T9936] ? netlink_deliver_tap+0x2e/0x1b0 [ 383.335006][ T9936] ? netlink_deliver_tap+0x2e/0x1b0 [ 383.340216][ T9936] netlink_unicast+0x7f8/0x9a0 [ 383.344997][ T9936] ? __pfx_netlink_unicast+0x10/0x10 [ 383.350294][ T9936] ? skb_put+0x114/0x1f0 [ 383.354547][ T9936] netlink_sendmsg+0x8c3/0xcd0 [ 383.359326][ T9936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.364645][ T9936] ? __import_iovec+0x585/0x830 [ 383.369532][ T9936] ? aa_sock_msg_perm+0x91/0x160 [ 383.374503][ T9936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.379799][ T9936] __sock_sendmsg+0x221/0x270 [ 383.384494][ T9936] ____sys_sendmsg+0x523/0x860 [ 383.389278][ T9936] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.394573][ T9936] __sys_sendmsg+0x271/0x360 [ 383.399176][ T9936] ? __pfx_futex_wake+0x10/0x10 [ 383.404054][ T9936] ? __pfx___sys_sendmsg+0x10/0x10 [ 383.409301][ T9936] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 383.415897][ T9936] ? lockdep_hardirqs_on+0x9d/0x150 [ 383.421105][ T9936] __do_fast_syscall_32+0xb4/0x110 [ 383.426223][ T9936] ? ret_from_fork_asm+0x1a/0x30 [ 383.431162][ T9936] ? lockdep_hardirqs_on+0x9d/0x150 [ 383.436456][ T9936] do_fast_syscall_32+0x34/0x80 [ 383.441315][ T9936] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 383.447654][ T9936] RIP: 0023:0xf7fa6579 [ 383.451733][ T9936] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 383.471345][ T9936] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 383.479772][ T9936] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000800000c0 [ 383.487757][ T9936] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 383.495739][ T9936] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 383.503718][ T9936] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 383.511691][ T9936] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 383.519678][ T9936] [ 383.522713][ T9936] Modules linked in: [ 383.528256][ T9936] ---[ end trace 0000000000000000 ]--- [ 383.537397][ T9936] RIP: 0010:rtnl_create_link+0x6af/0xea0 [ 383.543101][ T9936] Code: 24 20 42 80 3c 28 00 74 08 48 89 df e8 ea fa 3a f8 4c 89 64 24 28 bd a8 02 00 00 48 89 5c 24 08 48 03 2b 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 ef e8 c2 fa 3a f8 45 31 e4 48 83 7d 00 [ 383.565416][ T9936] RSP: 0018:ffffc9001bfd6e50 EFLAGS: 00010206 [ 383.574211][ T9936] RAX: 0000000000000055 RBX: ffff888022be8008 RCX: 0000000000080000 [ 383.583954][ T9936] RDX: ffffc9000b9d9000 RSI: 00000000000028fc RDI: 00000000000028fd [ 383.593453][ T9936] RBP: 00000000000002a8 R08: ffffffff89f29319 R09: 1ffff920037fadf6 [ 383.605490][ T9936] R10: dffffc0000000000 R11: fffff520037fadf7 R12: ffff888032009080 [ 383.613651][ T9936] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888022be8000 [ 383.623173][ T9936] FS: 0000000000000000(0000) GS:ffff888125093000(0063) knlGS:00000000f50c6b40 [ 383.632362][ T9936] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 383.643671][ T9940] input: syz0 as /devices/virtual/input/input78 [ 383.676443][ T9936] CR2: 000000000c43df81 CR3: 0000000027e96000 CR4: 00000000003526f0 [ 383.684823][ T9936] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 383.695427][ T9936] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 383.704106][ T9936] Kernel panic - not syncing: Fatal exception [ 383.710614][ T9936] Kernel Offset: disabled [ 383.714967][ T9936] Rebooting in 86400 seconds..