last executing test programs: 11.166724835s ago: executing program 4 (id=631): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) write$sndseq(r2, &(0x7f0000000700)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {0x0, 0x80}, @time=@time={0xffffffff, 0xa4e}}], 0x1c) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 10.810854726s ago: executing program 4 (id=635): r0 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) migrate_pages(0x0, 0x3d, 0x0, 0xfffffffffffffffe) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0xf6, r2, 0x1, 0x55, 0x6, @multicast}, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, 0x0, 0x0, 0x0, 0x135c}, 0x4) r3 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r3, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x2a, 0x0, 0x0, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='uid_map\x00') writev(r4, &(0x7f00000015c0)=[{&(0x7f00000004c0)='1', 0x1}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$watch_queue(&(0x7f0000000380), 0x80) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x4}, 0x40002, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1000001d, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x4, 0x49, 0x39cc191b, 0x5f, 0x9, 0x209, 0xffff2d33, 0xffffff01, 0x6, 0x3, 0x20000, 0x5, 0x4, 0xe4a1, 0x4, 0x3c5b, 0x1, 0x26, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x6, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x0, 0x71, 0x6, 0x7, 0x1, 0x7, 0x9, 0x403e, 0x408f, 0x3, 0x6, 0x0, 0x5, 0x4, 0x8, 0x20000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x80004, 0x1, 0x40], [0x10000007, 0xffff, 0x7, 0x8000, 0x10, 0x1, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x15a, 0x9, 0xfffffffc, 0x3, 0x0, 0xb, 0x5, 0x2f, 0xe, 0x312, 0x8be, 0xea4, 0x0, 0x4, 0x2, 0x8004, 0x2009, 0x3fc, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x42, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x81, 0x223], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x4005, 0xdf9, 0xfffffffc, 0x7, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x3, 0x9, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x8, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x9, 0xac8, 0xbf, 0x59, 0x3, 0x80000000, 0xfffffff9, 0x0, 0x9, 0xffff, 0xb0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x0, 0x938, 0x4, 0x6, 0x0, 0x5, 0xce7, 0x8001, 0x2, 0x7, 0x5, 0x3, 0x101, 0x0, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0xffffffff, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xfffffffc, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x7, 0xffff, 0x10, 0x7a, 0x100, 0x9602, 0x47, 0x2, 0x4, 0x6, 0x5, 0x80010080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x0, 0x200, 0xffff343e, 0xfff]}, 0x45c) unshare(0x22020600) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0, 0x0) set_mempolicy(0x2, 0x0, 0xf5) 9.702463534s ago: executing program 2 (id=642): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x25c, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0x0, 0x2}}}, {{@ipv6={@local, @mcast1, [0x0, 0xffffffff, 0x0, 0xffffffff], [0xff, 0xff, 0xff, 0xffffff00], 'veth0_to_bridge\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x6c, 0xe, 0x3, 0x32}, 0x0, 0xa4, 0xcc}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x5, 0x6}, {0x2, 0x4, 0x2}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2b8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x1, 0x2, 0x400, 0xa, 0x2, 0x4, 0x0, 0x8}}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x428, r6, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x404, 0x8, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x24c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x224, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x41, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549"}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000001a00)={0x73c, r6, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x6c8, 0x8, 0x0, 0x1, [{0x564, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fba7470f6553f7ed0bdc4c3027091d337f84fc8f24d96cfb598a9cd902cf65f0"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3bde32a8c434af2a83e3cb833d49788719b204e0f32daf0130a57b42dae6f63c"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x4a4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x43}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x3, @loopback, 0x9}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xbd8, @loopback, 0x3}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0xe4, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b3b6382be6fbe5ae9d66f0fda7c5bb90d8b5b5d06d37e6290a4177cf4e0e1e0c"}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x4, @local, 0x69579140}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x5, @local, 0x890}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x86, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x27}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x73c}, 0x1, 0x0, 0x0, 0x20000050}, 0x800) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r8], 0x0) io_setup(0x5, &(0x7f0000000e80)=0x0) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r10, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0xc7ea, @mcast2, 0x8000}}, 0x0, 0x6, 0x4, 0xe4, 0x1}, &(0x7f0000000100)=0x98) r11 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_submit(r9, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r11, &(0x7f0000000080)='d', 0x2}]) syz_emit_ethernet(0xde, &(0x7f0000001900)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast2, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2]}, @cipso={0x86, 0x48, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x1, 0xa, "2189ea43a2149b84"}, {0x0, 0x2}, {0x0, 0x12, "c944a6b21f22109ee302a20948fd7406"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x14, 0x56, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) 9.461388187s ago: executing program 0 (id=643): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000018dfde10351210822953050a0109a3430001000000000904000100"], 0x0) r1 = io_uring_setup(0xd1b, &(0x7f0000000300)={0x0, 0xa06c, 0x0, 0x5, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r1, 0x20, 0x0, 0x0) syz_usb_disconnect(r0) 7.98543739s ago: executing program 2 (id=646): r0 = socket$packet(0x11, 0x2, 0x300) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) read$FUSE(r1, &(0x7f0000000780)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f0000000240)={0x20, 0x0, r4, {0x6, 0x0, 0xf3, 0x80000001}}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x40082) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x401}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="9c", 0x1}], 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x8, 0x4, 0x4, 0xdf, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000000)={r7, 0x58, &(0x7f0000000180)}, 0x10) 7.597079136s ago: executing program 4 (id=647): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000fc0)={0x0, @vsock={0x28, 0x0, 0x2710, @host}, @llc={0x1a, 0x30a, 0x4, 0x6, 0x5, 0x8d, @remote}, @nfc={0x27, 0x0, 0x3, 0x6}, 0x9, 0x0, 0x0, 0x0, 0x2400, 0x0, 0xffffffff, 0x2, 0x14cd}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000080}}, {{&(0x7f0000000280)=@abs={0x1, 0x30, 0x4e30}, 0x6e, 0x0}}], 0x2, 0x40008004) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r4, r4) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x1, 0x2) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) preadv(r5, &(0x7f0000000140), 0x20000000000000b4, 0x2, 0x7f) r8 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r8, &(0x7f0000000340)=ANY=[@ANYBLOB='exec :'], 0x1e0) lsm_get_self_attr(0x65, 0x0, &(0x7f00000002c0), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) 6.290855074s ago: executing program 0 (id=649): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:\b\x00\x00\x000\xb0P\x03\x00\x00\x00\x00\x00N\x00\xfe,\x1c\xf1\xbci\x14(\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\x05Gj+kV', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) syz_emit_ethernet(0x52, 0x0, 0x0) (async) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) (async) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000000380)="67609f1bc76b660c7f522543621903dbd6dfb1322eb58ade49f7f6873e8c5b3a1e47a60fb805cbdca74d2ef9be337149a65b0c074f4b1001eff7a36fd2627258a02a3b46aba1f0f5f27cca55a28ffd26acca165107f55e8dfc020f192c7931515be26928a4af66540b951c34e67537616956b8022eaf08fef4a00257a4868b80ff3c2fcbe10ae082c9c4", 0x8a) (async) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$PTRACE_GETSIGMASK(0x420a, r6, 0x8, &(0x7f0000000100)) (async) request_key(&(0x7f0000000240)='encrypted\x00', 0x0, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r4) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x2, 0x2, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x202, 0x1, 0xcccd2000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x0, 0x5000, 0x2000, &(0x7f000002f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x4, 0x3, 0xf000, 0x1000, &(0x7f000002f000/0x1000)=nil}) (async) r9 = mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) 6.260713151s ago: executing program 3 (id=650): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x11, 0x3, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) migrate_pages(0x0, 0x3d, 0x0, 0xfffffffffffffffe) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0xf6, r3, 0x1, 0x55, 0x6, @multicast}, 0x14) sendmsg$kcm(r1, &(0x7f0000000400)={&(0x7f0000000300)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, 0x0, 0x0, 0x0, 0x135c}, 0x4) r4 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x401, 0x4f5, 0x4, 0x4}, &(0x7f0000000180)=0x14) bind$packet(r1, &(0x7f0000000080)={0x11, 0xf7, r3, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x14) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x20000001, 0x4, 0x0, 0x1, 0x5}) socket$kcm(0x2, 0x5, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SET_PTRACER(0x59616d61, 0x0) bind$inet(r7, 0x0, 0x0) connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) sendmsg$kcm(r6, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000000240)={{0xff, @dev={0xac, 0x14, 0x14, 0xf}, 0x4e23, 0x3, 'lblcr\x00', 0x10, 0x9, 0xe}, {@multicast2, 0x4e24, 0x2000, 0x1, 0x1ff}}, 0x44) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xef, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 5.902331293s ago: executing program 0 (id=652): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r3 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x28}}, 0x50) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x0, 0x0) 5.900993288s ago: executing program 2 (id=653): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x0, 0x5, 0x4) getsockopt(r2, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8004, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0cc5605, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x15, 0x5, 0x0) shutdown(r1, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdir(&(0x7f00000003c0)='./file0\x00', 0xffe9) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/251, 0xfb, 0xacab) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x60, 0x7, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) r10 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r10, 0x7003) 5.159050939s ago: executing program 3 (id=654): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x130, 0xfffffffffffffff5, 0x403, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x8, 0x8, 0x0, 0x0, 0x4000, '\x00', 0x1, 0x8, 0x100000000, 0x6, {0x6, 0x6}, {0x20000000000004}, {0x100000000, 0x9}, {0x8, 0xa04}, 0x4, 0x80000b, 0x4, 0x3}}}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000280)={0x80a0000, 0x14000}) close(r1) (fail_nth: 5) 4.636566531s ago: executing program 1 (id=655): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x11000000, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 4.573606717s ago: executing program 0 (id=656): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (fail_nth: 4) 4.426943414s ago: executing program 4 (id=657): r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300), 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/28, 0x1c}, {&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f00000002c0)=""/211, 0xd3}], 0x4}, 0x5}, {{&(0x7f0000000400)=@hci, 0x80, &(0x7f0000000800)=[{&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000003bc0)=""/210, 0xd2}, {&(0x7f0000000700)=""/244, 0xf4}], 0x3}, 0x81}, {{&(0x7f0000000840)=@vsock, 0x80, &(0x7f0000001e00)=[{&(0x7f00000008c0)=""/96, 0x60}, {&(0x7f0000000940)=""/86, 0x56}, {&(0x7f00000009c0)=""/235, 0xeb}, {&(0x7f0000000ac0)=""/149, 0x95}, {&(0x7f0000000b80)=""/151, 0x97}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/5, 0x5}, {&(0x7f0000001c80)=""/122, 0x7a}, {&(0x7f0000001d00)=""/55, 0x37}, {&(0x7f0000001d40)=""/131, 0x83}], 0xa, &(0x7f0000001e80)=""/16, 0x10}, 0x9}, {{&(0x7f0000003240)=@phonet, 0x80, &(0x7f0000003340)}, 0x3}], 0x4, 0x40, 0x0) 4.417379202s ago: executing program 3 (id=658): r0 = socket(0x1e, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x24004010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x226, 0xfa11}, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8100) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r8) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214001b0017"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="000000960f25cdc0256268639d6b832cd7c2d5f5033c333e2a55d18a9530fa47f4e37b9d1a28edb5aef09d48c9eaeb483dd7047845c42b0eae8aba0d34d81d4c2238c77ed6ac77e0b87bfcccdef85aaae7ff7b8f926280ab41727526f1f9", @ANYRES16=r9, @ANYBLOB="00022dbd7000fcdbdf250200000014002000fc010000000000000000000000000001050006000c00000005000d000100000006001c000600000008000a000200000005000d000100000006000e00ff070000140008006d6163767461703000000000000000000500070002000000"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000000)={r11, 0x3, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000200)={r10, 0x12}, &(0x7f00000002c0)=0x8) 4.27642884s ago: executing program 4 (id=659): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) add_key(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a00)={&(0x7f0000000180)={0x50, 0x0, 0xfffffffffffffffc, {0x7, 0x29, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, &(0x7f0000000100)={0x14}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x33eb4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x401, 0x6000, 0x104, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_IFALIAS={0x14, 0x14, 'veth0_virt_wifi\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4014}, 0x448d0) sendmmsg$inet(r4, &(0x7f0000003940)=[{{&(0x7f0000000140)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000980)=[{&(0x7f00000003c0)="af1b677d4d5f65dff712d454253212c62b9af48bc3fe280df21e0438459cc6aa3454c217feeb13fe1358dfecbc6a18827508bb991040df14500235770c9bbc0bb1bbef3d430a5d3e2abf758aa73e3fbbce98d88fc115ef084461a748de19d209803056e223d7fbf5bef02dc86178a7b2fca1503379cf3f5076a90276134a6f5b7cec19f6b7dc768962b23a064d2221b6d937b17f798adb40b9ed9547199bd5c45e988ed2709de265d31c96551d070281ad1c0678cebfa6a4fb2daee228a29daaed537c1b47bf371d0f74753e0f17dfe83019986c1e0b6d9a", 0xd8}, {&(0x7f00000004c0)="2c9d9e9affa6a64bbe8b98698651f111a019222654aa61e582a6984c912521547f485207a86a36fcd21081077c457f5d52dbcefb619c77a72fdb5c4d291acbb2f461135cdb267a3a18fd0a1d7fb3565de6561c6c112a94100275271a2b1799213211e9dc098447552b486be78adf805ab8abfdb310fc5106f095d6db5e818a6ad3deb5f65371ff7c3337cf0b975673f3900cadcb3177375ea9e3a76b2197074f5da41b7c1dc8ffd765", 0xa9}, {&(0x7f0000000580)="19455b2d7211102a9c1ef03050628d0d0119aa97b84b3a36cf3ed8a45d09365255b8e444169ddc9d449ebf5a2a9d403e0c09358e1d1e49a9c0d7222a0c68b1a76dd44960c9", 0x45}, {&(0x7f0000000600)="55bf63ba4bf392f38d060aa67548f961a43e47d1693752648f71135c1e2f3799d0f31fd5b8a33f5dd96b07031dcccbfa20c3bba74ab89c249a0fb07c26f32bef10140342c35db9b8", 0x48}, {&(0x7f0000000680)="9b530906b8715146ee7cba18a11a4319b056159e7cb077a832c86dda66149f6af649a0c85d250b2af20a349186959c9d6cbd624d91dd166d63eb9ed37ffd5b1077a70695d6632c63cf534ffbb5d37056df8f06f17b22ee668b3f315fdcfdb55bac382cd35700853a4f5d95f6a57f7976f40cc8bd9ef2268398e8a6d0b6951b7bd3390ecd1bdb570d2e735a", 0x8b}, {&(0x7f0000000740)="c18f353ef78af5056717686572f93f97b65f2d233070e51d74f4a27e019935fcfc37fdf096c5fba5612855a4dca7011d17d7c07314ac53", 0x37}, {&(0x7f0000000780)="5a72286a1c563f4011f4976ab03bdbf0c64af312931e7c075b75b904fbf86881f2465685a530f6015c2025ce4da83cca3376095e401fc7be93a4c890d6dd63911e8a8395d6c76281c9aa6be8efe88be9b30c8727b21486ed464ef5af9d2356c366bd60d761b706b10b106bc61c0887f0ad99a28023abb6f11cb50f6af5fb131240746ca54fc57cb962527501f773dad493abb09c24d09e234a40a363cca29d287e884a4edf8f541342035599e48294963cc484b021bc189ba906f6a5c7223a7baee1538e5b951676337e37c1de182d5efdc449361e4ec22b63", 0xd9}, {&(0x7f0000000880)="de6705e44a9f357e90950aaaf039d0fba25c55d39e85256dbbcd044c95a20b13e3c3a5398d474521c04678444ad1843e4871b5712abc00356c3501d7f95c2ece39ef147f4dd08146684c03c11df95157499ab7c3ac90869491af66841f7a6ace8f25ca67d79b27b0cc15682887d09d11e596411edc121c7722dcd108f712a4cd8c2d2f5c52eb5fecb62427e20b75858f7f90432c7c0afdbdb1ccbe09ced7db66e7e0c32f3a6535c71a335b321710e1ff7a0afe56d69e2d25935b50180c6b592d7348bac8504dc352b768ea4e7a60de1f13444acff0ec63b0637ffa4b5ce2cbb3bfefad87a171550a45be5a85580b", 0xee}], 0x8, &(0x7f0000000a80)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x4}}, @ip_ttl={{0x10, 0x0, 0x2, 0x800}}, @ip_ttl={{0x10, 0x0, 0x2, 0x1}}, @ip_ttl={{0x10, 0x0, 0x2, 0x8}}, @ip_ttl={{0x10, 0x0, 0x2, 0x6514}}], 0x50}}, {{&(0x7f00000009c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)="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", 0xfc}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="52fe7f65d367a6bdacf473bb00fe12207832fff8ad25edb963877e35c4ce4c3cba0deacf97da41cf0a6c78dcff7fc8dca3b5763397e8f93cdc9ecddc444376", 0x3f}, {&(0x7f0000001c40)="60d65d12c3098fb8076aa1a46397a0d4e5e8fc05718578b8b508752e7c21bece2a1469bbea95bc6bb01e378ff62d2fc1f0d8449cda6b142d62e550f03b0427e5bae52ebabea7", 0x46}, {&(0x7f0000001cc0)="4cb9e22b59cecb842f3815381ac138fbd683d52be3c95079dfb24445e95559e80e016e5198db09502471a007983568217f400bc2fb7c79ea97c91813", 0x3c}, {&(0x7f0000001d00)="3d8037c2378902c431558b2d5d90b015e75823d1dec5edb7afcb6abbdeaf095655bc38f167d183e6ada1bf1ed2d5920349d473d3964e864db22886af4395dadd6b977fcb3285d9f669c9392dbed92796c381d983dbaa9daadaae619d240dfd30772c323e605a46944f2ad8588f674de24f4ce39f62e2040a927187ee4f1a8e", 0x7f}, {&(0x7f0000001d80)="ee925d9fd71f5a9f494a1d28e0fc8a9206cb4fec22ac3039c22535552df80a8b9e7d1d31b8f14eab7e934b42e6e3c053f73ed10be46905831758387571447228b74e9fe27b6e94edc5e2bbd5b2a1fa9d099f0e2ec8e0048723498413ff8f77648afb4ca64bd357cf9119c9a17bd2373c97be2730c956a74e09eb0bcad128ac393b8ffb31e728", 0x86}, {&(0x7f0000001e40)="013738717075dd5b95b107fdffe3595c901f59c5c3a3caa617a98b3b2fc89966d46e23f31f8f8e254794021d892ee301e67d49e79ddabebd09dcbbea5b255148572450f03c7b93f627e352f9952897dd2e60a576975464aadca7238bb47e0c27897c2cb65c6e43db9dafe4210a1594d26160039296d03df917684d6191af403598fcc66a6f37cc1507d2af9d56852e06f008ca1d54b88b9019ecc81f22a4dd5fafdf99ddab2ecf59ebbad83ea3c0e586bf6255af5fbfc0d3bf1b74c15b9d9c6c109514133e21b66b2e68ff28dc45f2ff88eb4a8db90b9c426c37af03adc8008c95cefdccb498ec92071d0a7575e7c08a7b", 0xf1}], 0x8, &(0x7f0000001f80)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@noop, @end, @rr={0x7, 0x1b, 0xf2, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @multicast2, @multicast2]}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xc}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x31}}}}], 0x64}}, {{&(0x7f0000002000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000002480)=[{&(0x7f0000002040)="7342fe3ae86bbd4a13bb5a2526b3e806e1661616f1b68a0784d5d2a0ccdfdb9e2a2362e6eb513e86f5e057676f032b30f4e264dd3bb8b2dc8d6b43ab1ba83f24c269c7a09015193e9af7f62c765940d1248db4d70007dfaf562ef0c93f0ccd08d3086c0200b01c18f8d96c393b47878988954080b534b5161fc4a132d780b3485d31d27282e41f3b6277f4c1bff306caf5d2f7d7e64e2399e48d1191a1fa6792de5cf980e75938247a35887e92232e76072eaa6c9a4695", 0xb7}, {&(0x7f0000002140)="c8e3601bd56f344216773377190d7eb216feae6c4757a4ec433d8cd3bb655eb5a87c", 0x22}, {&(0x7f0000002180)="21c1dbcc", 0x4}, {&(0x7f00000021c0)="c4a45dcd295951695a099327b0fd62fe97b01970c25047ac33b3a3fc68aea57a8bb448aa4e71ef879e46c734333f8e8070707b6ce260faa27414aefe6814383d89456303a7fff6aefea374c6454faa0c32aa8200722e2d9f8295b04eca12910a44156ba2fb3af561481b20846fdd017b23433d497b0ebe2fabf081d7ffb7ebaf3723d801f83b52517d804f47e8d7f46c", 0x90}, {&(0x7f0000002280)="0134a11134b2ef0afe1e7a3da6800b4ee9987cf6c1ed6e8d8d89f0cd5d3e8ef9832475379283af2769fef25a0e57e09023896ecc24183609907674177c19b06a001ac9dc9cfa2d562b9615d189e5e55ab07ec78b12f40688e64896933ad24ff3fb4594fea5cd9478e20a1e5b9cad793f1b61ed4cfefdbef7", 0x78}, {&(0x7f0000002300)="e9ab35960efc388c0e7526287ddbe57673ee86f1a0cce3", 0x17}, {&(0x7f0000002340)="3e2ae7f065551c38e23a14e23c867b923fadfec9147abbf94070f9fb17e40829cd2880b106b188fb75a52bc53e6dc38104de7c577c04e0bd86cad1b2776df889584323", 0x43}, {&(0x7f00000023c0)="c7c913349222bc92df9519bb5e1ebf5849bfc637ff986fa2c1a7368c5798eef16d76b6bbf9aba2c51a2defa7a4b12ed32833f369f4d069a4a43c65a7d26edb5933ef830d769295b42535e6b0d8542e1905e69cd986f0b09ace7764a83ddc41fefa3abead0f80ecc97b992deb3e769377253395128ad7395610632683c396ab4b4a879f04aafce355473e5a52375b58ca7ab37634c7e8bc0488046fc2676fb9f06d7f35910650ad03e7b490db1bf084657121d0afcc977bcbb0", 0xb9}], 0x8}}, {{&(0x7f00000024c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000002a40)=[{&(0x7f0000002500)="354660ec2ae0ebf2c3eae3994207a04d775e9e25a1785c0e0d4a8e034de1ce424da0d273551f8fd71d8a98062c55de02776da03b9302bf192c3cfb3f8ccce433527e5cdfe193ac1a7edce0f0915d4ed9b92f42a4e2f86a4536bce58abfac272ef7bb1abea0ab987318d1646eea00d8e05bdd756a67ff964327d115f59c816c637705efaf72cd8a166d51063448322f95292ada2302fe6eca7967e6803d932dad315d97af07bb3f1af81a7c33274d88e399470d14be794a8bc2523081e211e9f2cb93eeee4379d91735ade7df", 0xcc}, {&(0x7f0000002600)="28b94270b7eb5df3970cb4972c656214ffc55fc5b58fbf7927ffeb9a6c91659ce18ad23ab0", 0x25}, {&(0x7f0000002640)="68ab6a4259ee3d1908a2eea6c192303c569f3d3c5ab594fbd39f853a5c32bfdf90c05762c6a361623cfbf09dba868ec55a0bcb42938165ca7a78e4afcfabe22d05fd460774eba3c8cd89690e6d1e226403585624eca4e1", 0x57}, {&(0x7f00000026c0)="8d923e1c670f3f5a2bdbaa040c19471929283ebbc6", 0x15}, {&(0x7f0000002700)="5e3c9691713522a49de7e0fd0e6e1978f74dbc", 0x13}, {&(0x7f0000002740)="966625ae28e1d4f7209b6af5333355483677ac98116c05ac202f29af25f3a07bee5c61297293a4c0160106be7e6f2e01a364ed574251cdd66d0aa0bf2e61fb76bbd6023cde7d621e86f069249f5c3c44d875d80a8183f79e0efde5863c0ddb520cc493c86068862c6bfcb4f2736e645c4ebe726e46a1593a1354eb2a1000098acf769d5c11e93d70ba8e2e2dd8053988a1a8a698a2a4e8787bb0f17597b3800faf49d34c22193648e40083bfd27f94cfe2718cf7ee67897679eae7e63218e7d6ec4a28b0464a779269f12b9d2fbc6b60d119997e781d62ce9bb7ccc323543dad1e", 0xe1}, {&(0x7f0000002840)="bd1f075ad2293dc41db2a45a91a5b84ecab617d50edea26289785fb482c376103cff8de58ca411fd7a11c9f159030760422aa1ee235c97a981ff17889bb4d38c79a4191f2afc10194183417a341d9e050c6bfeeaf7d2e6907e2a965cf85e7eacf8edea41ee3f6f0ea92e3adbd1984c6ca4dd14a64558055fc020", 0x7a}, {&(0x7f00000028c0)="de64887c4e0e0e0c5f041ace6e3c707c369fb7ca5ed751a6d2e2352f079b118eac55227602e173322ed01e515e88ec231784b11a8a33c8330cbfaf10eaee2c53349694db1b7effae2898d036e3d8a9c9f1ba8b387f0cce549897af243493949441374187ade1b1766484537797b4c861be84d897a6a1df3ed333858b6dd67302bfbf5b10a85ab86dd9f32679b850114ca49dd3ac7dfe981a2a8b04687f15e055814373d5597b71e1d92035e3ee43d92d667346bc1e2c93e3d2ac85e9", 0xbc}, {&(0x7f0000002980)="7ac312747f658ea4467a81834e62e8349e294712a8e1b3587955d7bb1d4d9d88945e46dcc0d36c91fd560e7d22f060b90095465eaa065b04bae68c2bf99810d042f747744e78d43441b04d38921669ff17697676f582fa2e3d350f290e6fea2bcddd60114a6f1fed52ac9160a45e083e767c03987343d84f7dd3edff804dd443c32654622e7da8bab99d315e0c4c2ec7a12b3e1818d3ba", 0x97}], 0x9, &(0x7f0000002c40)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @multicast1, @multicast2}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xfff}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x4}}], 0x38}}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000002c80)="53d301e1613fad1b18db303e8b6c9d2384e1701578659e5ff78e08e9d504551c7ca93e60541efbfb2abded2e45508f7c1e5ff398b861fddb0ee3191af8109b91409d695714d1ee10d6002dc71f316cef27deb3c9af57e7998b285e25409474ebca5606370af463add70e97a49811efaa2f9fe7ea707d24063a6b9722fae4eae80606e0c7b017a7e8756fb80d86d324093df083778d805c6bc51fc13e90e429c3d16f4b54c1040052d914b02527f97d9cf5d4324814e1f3996a407ec379f3de29a39be33a03a55213e422674c687e2761a94e9553204fdf2a309321a2c40b196e7050b922", 0xe4}, {&(0x7f0000002d80)="afb7343542287753d101304f0c54e9d394f7752e457907cb2ba0db7be9634af52566ace0a4ce70343d66b10beec80a0b9122569fbaa75fb6f5ad23d1d70d093ef82e2f38a7ee89ef4a0c97b8e0857f6c4a4bd80dd74d8ebc72e99ba84cae779b3beb991dd41b9505c48dc6faef1ea2bed0a804bb576dfb42ffe76722d7b7c115e38b0afe4a11e69a28a7317ce7fef7f5122a1b291a56b41e042fa96af63bbb2a62c14c253242888d140e86cb33e2d3ee27c9674b26542198d43f5ee521c2f6ac78", 0xc1}, {&(0x7f0000002e80)="b3863d9767f64fee4323bf0630d748c753b7180f29c534cde463901241a8fc5810a7b27d02288257f47f5d856e4ace25fb735726560f0980a8428a08742679acea22307a89c0a43c53c35b3ffb66155cd39fd3ad3b218462986205f690156cf8d0432a798bae0aeac473b6dbcac1eee53b761860f29f083bd6bd835f5c5e466ef9bfd44674cc9c5166857f1c9aa0605018e51c85eee9dd66", 0x98}, {&(0x7f0000002f40)}, {&(0x7f0000002f80)="e923e655cb1e05152a8482a21b45519aeb851190b27958988fa75c2eccbdd7abd84246c30a1fc7e1577c9a3c55210d7293f3d44f660217d1e592d106f9f21fcf18496f6ae6313d632241225839973846db661d42de1acdb177dedf05d0e3c427f72f6a58c110bfb3f2289478aa9037a1dce1d847fa2861bdfd86f837876cdd3f6fec5f64a7c33fc9ac1e3e6187974cad3f1f53f5919a84080849070b2745fadd03dcabcf9760644693810e289ff6cd93e8b73dce4bf3", 0xb6}, {&(0x7f0000003040)="f8fd57c3ad190f173a83cd", 0xb}, {&(0x7f0000003080)="1053cc767a559f61d0943072c322531c269144ed6ac5cabfed293a4eb99e790940355b5c269cad8ff080e83304d842b7c485bea957462fd4cfd6a2798f38ee871f38e9ba09d09478eae42f9cee21f6bee09013e8cd9740acfd7b905381c5efe009a37d70673a5ddf2e4a92eaa579ffcdeab22f8aa47a4e503cab3be15e3fb10eaf8ac5185072443ef7dcef96fe26581bd90c6ef099f37482d264af81b348a3a794ac", 0xa2}, {&(0x7f0000003140)="c4a08bc8e34e9c669ac0f727d5c9df568e8e1c42a027f3bee223d0933ae585f02c9997f86889431482abf2e833a359f98cea5999d27162dc82a5a90ad43c2bdbfa4e0e62292a30cc676ca0c22bb54304d51874892c9c3e7a65b3ea9be74e1cbd5df38561d76af29cdc4735d6dd372f068c97475d29a5d72441247b9e7e85c44aef33", 0x82}, {&(0x7f0000003200)="24ada5dff48913c0de9ee62f10d4099d6a0a", 0x12}, {&(0x7f0000003240)="035b00d98104974196e92ba9424d3d730f0b81d04cc0ff60aae5e3b472c667aca4c9ca55869fa962029ae2b6076ce1b78fe9457a3af3c696bc269d4452bfecedcb6a3c18b409c015eeb08dc320fee32d9aec15aac118d1e7fa281ac245611c2b6d45", 0x62}], 0xa, &(0x7f00000034c0)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @multicast1, @multicast1}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x9}}, @ip_retopts={{0x10, 0x0, 0x7, {[@end]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @dev={0xac, 0x14, 0x14, 0xf}}}}], 0x50}}, {{&(0x7f0000003540)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000003840)=[{&(0x7f0000003580)="d3360db8bf4b69694f2bd53070a5e5ebf8c544a1a1d7a056873d0ed0492b01a3b25128e56ffa3995e4c553065358ed6b4cd3d6d0b391ac4ad2df58b7b06657da0cfe58465ca84c8c4289ffabf705240eaadfb4ab70d0271eca97f7f5cf8ba6544c547e2d148083c7d8aceb18d3b50acfa97f7a3d5b5ec22144459fd8d61a8161991b831a", 0x84}, {&(0x7f0000003640)="139794e481a4", 0x6}, {&(0x7f0000003680)="e40388e636069c4b8759542efa1db2d44ef65cca17bd7cb14f5a775ec3c75c735aaacca8d0b33dc1339b7d924b5145520444864e1525a0f67217f8df581d0e68cf01c113618b3a9e4b3a429c8a5cb2a60666d2d8d3dc555186d058ff559e094168425d6fbb8e3937122817174c53a6f2b6619a07fed739a6bf5ae4ec7ab9b9952351bcd202af7f7ef7615083d6509a6ffeb9a3e288d0e8745f24a81933c9", 0x9e}, {&(0x7f0000003740)="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", 0xfe}, {&(0x7f00000066c0)="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", 0x1000}], 0x5, &(0x7f0000003880)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xf9}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @multicast2, @multicast2}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r5, @multicast2, @rand_addr=0x64010101}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xa1}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x3}}], 0x88}}], 0x6, 0x800) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x8000) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in6=@remote, 0x4e22, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xc241}, {0x0, 0x0, 0x6, 0x4}}, {{@in=@empty, 0x0, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0xb7, 0xffffffff}}, 0xe8) close(r0) 3.875095808s ago: executing program 1 (id=660): r0 = openat$mixer(0xffffff9c, &(0x7f00000001c0), 0x80002, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d03, &(0x7f0000000180)=0x3f) (fail_nth: 5) 3.848044716s ago: executing program 0 (id=661): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9000, 0x600a8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x5}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0xff}]}}}]}, 0x44}}, 0x24008050) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYRES64=r3, @ANYRES64=0x0, @ANYRESHEX=r3], 0x20) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x9f, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9000, 0x600a8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x5}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0xff}]}}}]}, 0x44}}, 0x24008050) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYRES64=r3, @ANYRES64=0x0, @ANYRESHEX=r3], 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x9f, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) (async) 3.266938157s ago: executing program 2 (id=662): r0 = socket$kcm(0x10, 0x7, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@private0, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@multicast1}}, &(0x7f0000000440)=0xe4) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x10080000001) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="ec0000001000130728bd7000fcdbdf25ac1e0101000000000000000000000000ac1414aa0000000000000000000000004e23000100000000020000003a000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="ac1414aa000000000000000000000000000000003200000020600100000000000000000000000000010000000007000000000000000200000008000000000000000100000001000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b70c000000000000000000fcffffffffffffff0c000000a3b700000000000028bd70000000000002000000000000"], 0xec}, 0x1, 0x0, 0x0, 0x88c2}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtaction={0x104, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0xf0, 0x1, [@m_ife={0xec, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xfff}, @IFE_META_PRIO={0x8, 0x3, @val=0x6fd}]}]}, {0x98, 0x6, "a88ae40b648be9b3bec7310b34a46f7196540c9943cbf9a482f1b10db779988fa3faeda83cfceb86afd47599f6fb7a8fda39dee3475d281eceb396d1282791c2293c33613adec4bf00e28922278895d788d93fcfa56195ba890f024692cd83e3f206436cfa1fbca07b2b687e32d374d0faa2e3d213646179fd3b733ab2f42a3087726fbf8bc3641dbc4bd736c6c581ffcc72362f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x104}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000054000100010000000000000007008000fbfb872a3eb82fc75e9a9a839a8b1a0ae26fd1530f914e8f41c1986bc4bc0d8f923cea50874caf3c8e8945fcb06e710ad4098320bc4497210b23cf8b1ababb3829a9a2d8bc8312c88bc0e2c56f7646092a98f2ba5379cfd7cea4", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x20000000000001fc}, 0x9) r3 = socket$packet(0x11, 0x3, 0x300) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000901, r1, &(0x7f00000004c0)) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000080)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00'}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000340)={0x0, 0x4}, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket(0x29, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x212028100, 0x0, 0x0, 0x0, {0xfffffffd}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000140)=0xc) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="200000f40f0011009796000000de3580cdcc334c8123b8509800000000000000"], 0x20}}, 0x0) 3.167157807s ago: executing program 1 (id=663): fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000001000000", @ANYRES32, @ANYBLOB="000000000040000000ebffffffdfff0e0000000008df4d672cb186c5d4f6562efd53e10ad7879f7adc3b"]) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.946833467s ago: executing program 0 (id=664): r0 = socket$packet(0x11, 0x2, 0x300) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) read$FUSE(r1, &(0x7f0000000780)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f0000000240)={0x20, 0x0, r4, {0x6, 0x0, 0xf3, 0x80000001}}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x18557f, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x40082) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x401}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="9c", 0x1}], 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x8, 0x4, 0x4, 0xdf, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000000)={r7, 0x58, &(0x7f0000000180)}, 0x10) 2.94642956s ago: executing program 2 (id=665): unshare(0x6a040000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000140)=0xec62, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) modify_ldt$write(0x1, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sw_sync(0xffffff9c, 0x0, 0x80, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000000c0)={0x6, "89698ab74a98235749a9a89924cc7208716bde2e9da33997943b7e3eafdabafb"}) syz_emit_ethernet(0x46, &(0x7f0000002e80)=ANY=[], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000001440)={'veth1_to_bond\x00', &(0x7f00000005c0)=@ethtool_dump={0x3e, 0x1, 0x900000a}}) r3 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0185648, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x100}, 0x10}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) quotactl_fd$Q_SYNC(r4, 0x80000305, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70300001eb100008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b702000000000000850000008500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd26, 0x0, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.894505832s ago: executing program 1 (id=666): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r3 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8b3300000000"], 0x28}}, 0x50) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x0, 0x0) 2.48243225s ago: executing program 1 (id=667): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r1 = io_uring_setup(0x73cf, &(0x7f0000000080)={0x0, 0x23ad, 0x800, 0x8000002, 0x217}) (async) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x5d, 0xba, 0xfc, 0x40, 0xbfd, 0x10c, 0x2d16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x21, 0xef, 0xb0, 0x0, [], [{{0x9, 0x5, 0x2, 0x2}}, {{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x1, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.426684524s ago: executing program 1 (id=668): r0 = io_uring_setup(0xf83, &(0x7f0000001700)={0x0, 0xc5cb, 0x800, 0x0, 0xc0}) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000034276d20402002c68e010000000109021200010000000009040001", @ANYRES64=r0], 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, 0x0, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000cf8bed20d90f250040290000000109021200010000e700090400"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) rt_tgsigqueueinfo(0x0, 0x0, 0x1a, &(0x7f00000005c0)={0x9, 0xdf9a, 0x7fffffff}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000003c0)={0x1, 0x29, 0x1, &(0x7f0000000380)={0x12, "a0acac25062cff010000000000000014e1539402bb225c00"}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900010073797a30000000000900020073797a3200000000300004802c0001800b00010065787468647200001c000280080007400000000e08000640000000010800014000000004140000001100010000000000000000000000000a21d393b100"], 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r9 = syz_open_dev$hidraw(&(0x7f0000000140), 0x6, 0x40081) ioctl$HIDIOCSFEATURE(r9, 0xc0404806, &(0x7f0000000500)="f48e87cd71f3aa52a234699e95376ff3fdf849c0282d23ac359ca38bf4466229d4c02b5735aa7a29d503ab62450975c06ce9567417e553cf05bd93265ce47901fbcf00e9ba4f554ad5a4536aa57e0124dfb77a2ff26036ac767e5265a8486efb63") sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) syz_clone3(&(0x7f00000007c0)={0x1800200, 0x0, 0x0, 0x0, {0x6}, &(0x7f00000005c0), 0x0, 0x0, 0x0}, 0x58) r10 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r10, 0x0, 0x0) r11 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r11, 0x707, &(0x7f0000000040)={&(0x7f0000000740)=[{0x3e, 0x10, 0x0, 0x0}, {0x3c, 0x6810, 0x0, 0x0}], 0x2}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x47, 0x6, 0x3, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmmsg$inet(r2, &(0x7f0000000380)=[{{&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x0) 1.001617697s ago: executing program 3 (id=669): r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300), 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/28, 0x1c}, {&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f00000002c0)=""/211, 0xd3}], 0x4}, 0x5}, {{&(0x7f0000000400)=@hci, 0x80, &(0x7f0000000800)=[{&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000003bc0)=""/210, 0xd2}, {&(0x7f0000000700)=""/244, 0xf4}], 0x3}, 0x81}, {{&(0x7f0000000840)=@vsock, 0x80, &(0x7f0000001e00)=[{&(0x7f00000008c0)=""/96, 0x60}, {&(0x7f0000000940)=""/86, 0x56}, {&(0x7f00000009c0)=""/235, 0xeb}, {&(0x7f0000000ac0)=""/149, 0x95}, {&(0x7f0000000b80)=""/151, 0x97}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/5, 0x5}, {&(0x7f0000001c80)=""/122, 0x7a}, {&(0x7f0000001d00)=""/55, 0x37}, {&(0x7f0000001d40)=""/131, 0x83}], 0xa, &(0x7f0000001e80)=""/16, 0x10}, 0x9}, {{&(0x7f0000003240)=@phonet, 0x80, &(0x7f0000003340)}, 0x3}], 0x4, 0x40, 0x0) 784.818563ms ago: executing program 2 (id=670): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) pipe(0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000bd8000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) r3 = openat$sndtimer(0xffffff9c, 0x0, 0x8000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000280)={0x1, 0x3, 0x2, 0x2, 0x5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x11c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xea}, {0x6, 0x11, 0x9e}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0xf801}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xba8}, {0x6, 0x11, 0x6}}]}, 0x11c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}]}]}], {0x14}}, 0x80}}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r8, &(0x7f0000000a00)=""/126, 0x7e, 0x7) r9 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2a803) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r9, 0xc10c5541, &(0x7f0000000280)={0x2, 0x100004, 0x20}) bind$netlink(r8, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500000000000000000021000000080003006a86c96bc0cf7a04865d666aae5cd6000ec620eee21f2590c21eb9e894933e1820348fbff27ad185644ad3f1a9ce1156216bbe5ca76dac0d9365016e2fbe62341224de414cd56763bc004b4af2f5decc6e47f7c8095f3f3e91f23bfdc97cc3dfd551d74274238fb1e3bb3149b4a3672a270c8cc8fcd37d", @ANYRES32=r6, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x35) 666.973079ms ago: executing program 3 (id=671): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x99, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7fffffff}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0, 0x1200}}], 0x1, 0x40002003, 0x0) 459.596931ms ago: executing program 3 (id=672): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x0, 0x5, 0x4) getsockopt(r2, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8004, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0cc5605, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x15, 0x5, 0x0) shutdown(r1, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdir(&(0x7f00000003c0)='./file0\x00', 0xffe9) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/251, 0xfb, 0xacab) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x60, 0x7, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) r10 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r10, 0x7003) 0s ago: executing program 4 (id=673): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x6a, 0x3, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 213.977959][ T7296] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 213.977977][ T7296] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 213.977989][ T7296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 213.977999][ T7296] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 213.978008][ T7296] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 213.978018][ T7296] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.978042][ T7296] [ 217.249483][ T5181] Bluetooth: hci0: command 0x0406 tx timeout [ 217.255670][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 217.255699][ T5873] Bluetooth: hci3: command 0x0406 tx timeout [ 217.261856][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 217.261943][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 219.070408][ T7349] loop6: detected capacity change from 0 to 7 [ 219.110629][ T7349] Dev loop6: unable to read RDB block 7 [ 219.376301][ T7349] loop6: unable to read partition table [ 219.392362][ T7352] netlink: 72 bytes leftover after parsing attributes in process `syz.1.326'. [ 219.424200][ T7352] netlink: 'syz.1.326': attribute type 27 has an invalid length. [ 219.459427][ T7349] loop6: partition table beyond EOD, truncated [ 219.496287][ T7349] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 219.799378][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.329'. [ 220.444654][ T7358] caif0: Master is either lo or non-ether device [ 220.578834][ T7363] netlink: 51 bytes leftover after parsing attributes in process `syz.0.330'. [ 223.720545][ T7396] could not allocate digest TFM handle sha256-ce [ 224.216823][ T979] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 224.397281][ T979] usb 5-1: Using ep0 maxpacket: 16 [ 224.418216][ T979] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 224.451185][ T979] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.496912][ T979] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.526645][ T7423] fuse: root generation should be zero [ 224.552810][ T979] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.566328][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.594060][ T979] usb 5-1: Product: syz [ 224.618245][ T979] usb 5-1: Manufacturer: syz [ 224.632912][ T979] usb 5-1: SerialNumber: syz [ 224.893197][ T7440] netlink: 72 bytes leftover after parsing attributes in process `syz.2.349'. [ 224.925515][ T7440] netlink: 'syz.2.349': attribute type 27 has an invalid length. [ 225.084451][ T979] usb 5-1: 0:2 : does not exist [ 225.155082][ T7444] FAULT_INJECTION: forcing a failure. [ 225.155082][ T7444] name failslab, interval 1, probability 0, space 0, times 0 [ 225.169782][ T7444] CPU: 0 UID: 0 PID: 7444 Comm: syz.3.351 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 225.169813][ T7444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 225.169827][ T7444] Call Trace: [ 225.169837][ T7444] [ 225.169846][ T7444] dump_stack_lvl+0x189/0x250 [ 225.169879][ T7444] ? __pfx____ratelimit+0x10/0x10 [ 225.169905][ T7444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.169948][ T7444] ? __pfx__printk+0x10/0x10 [ 225.169987][ T7444] ? __pfx___might_resched+0x10/0x10 [ 225.170008][ T7444] ? fs_reclaim_acquire+0x7d/0x100 [ 225.170048][ T7444] should_fail_ex+0x414/0x560 [ 225.170078][ T7444] should_failslab+0xa8/0x100 [ 225.170112][ T7444] __kmalloc_cache_noprof+0x70/0x3d0 [ 225.170143][ T7444] ? cls_bpf_change+0x22a/0xde0 [ 225.170177][ T7444] cls_bpf_change+0x22a/0xde0 [ 225.170224][ T7444] ? __pfx_cls_bpf_change+0x10/0x10 [ 225.170281][ T7444] tc_new_tfilter+0xdca/0x15b0 [ 225.170345][ T7444] ? __pfx_tc_new_tfilter+0x10/0x10 [ 225.170416][ T7444] ? __pfx_tc_new_tfilter+0x10/0x10 [ 225.170447][ T7444] rtnetlink_rcv_msg+0x7cf/0xb70 [ 225.170481][ T7444] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 225.170508][ T7444] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 225.170539][ T7444] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 225.170570][ T7444] ? __skb_clone+0x63/0x7a0 [ 225.170611][ T7444] netlink_rcv_skb+0x208/0x470 [ 225.170641][ T7444] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 225.170671][ T7444] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 225.170713][ T7444] ? netlink_deliver_tap+0x2e/0x1b0 [ 225.170754][ T7444] netlink_unicast+0x82f/0x9e0 [ 225.170789][ T7444] ? __pfx_netlink_unicast+0x10/0x10 [ 225.170817][ T7444] ? netlink_sendmsg+0x642/0xb30 [ 225.170844][ T7444] ? skb_put+0x11b/0x210 [ 225.170877][ T7444] netlink_sendmsg+0x805/0xb30 [ 225.170916][ T7444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.170947][ T7444] ? __import_iovec+0x5d4/0x7f0 [ 225.170966][ T7444] ? aa_sock_msg_perm+0xf1/0x1d0 [ 225.170999][ T7444] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 225.171022][ T7444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.171052][ T7444] __sock_sendmsg+0x21c/0x270 [ 225.171081][ T7444] ____sys_sendmsg+0x505/0x830 [ 225.171121][ T7444] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.171173][ T7444] ___sys_sendmsg+0x21f/0x2a0 [ 225.171215][ T7444] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.171289][ T7444] ? __fget_files+0x2a/0x420 [ 225.171322][ T7444] ? __fget_files+0x3a0/0x420 [ 225.171367][ T7444] __sys_sendmsg+0x164/0x220 [ 225.171403][ T7444] ? __pfx___sys_sendmsg+0x10/0x10 [ 225.171454][ T7444] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.171486][ T7444] __do_fast_syscall_32+0xb6/0x2b0 [ 225.171518][ T7444] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.171549][ T7444] do_fast_syscall_32+0x34/0x80 [ 225.171578][ T7444] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.171605][ T7444] RIP: 0023:0xf7f11539 [ 225.171625][ T7444] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 225.171645][ T7444] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 225.171667][ T7444] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 225.171681][ T7444] RDX: 0000000020004804 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.171694][ T7444] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 225.171706][ T7444] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 225.171719][ T7444] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.171749][ T7444] [ 226.297662][ T979] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 226.446968][ T979] usb 5-1: USB disconnect, device number 17 [ 226.625328][ T6070] udevd[6070]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.996289][ T5951] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 227.171942][ T5951] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 227.279657][ T5951] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 227.494850][ T5951] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 227.590816][ T5951] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 227.710002][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.823487][ T5951] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 227.847793][ T5951] usb 1-1: invalid MIDI out EP 0 [ 227.876372][ T5857] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 227.937210][ T7484] netlink: 72 bytes leftover after parsing attributes in process `syz.3.362'. [ 227.975758][ T7484] netlink: 'syz.3.362': attribute type 27 has an invalid length. [ 228.118211][ T5857] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 228.177874][ T5857] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 228.295371][ T5857] usb 2-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 228.338044][ T6070] udevd[6070]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.354718][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.405662][ T5951] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 228.424659][ T7476] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 228.459558][ T5857] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 228.759385][ T5857] usb 2-1: USB disconnect, device number 14 [ 229.509962][ T7495] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 229.536753][ T5857] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 229.609279][ T5951] usb 1-1: USB disconnect, device number 8 [ 229.696298][ T5857] usb 5-1: Using ep0 maxpacket: 8 [ 229.713651][ T5857] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 229.742516][ T5857] usb 5-1: config 0 has no interface number 0 [ 229.770969][ T5857] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 229.819162][ T5857] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 229.832358][ T5857] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 229.860995][ T5857] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 229.887825][ T5857] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 229.918047][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.971116][ T7507] netlink: 'syz.0.368': attribute type 27 has an invalid length. [ 229.999061][ T5857] usb 5-1: config 0 descriptor?? [ 230.097911][ T5951] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 230.110584][ T7510] netlink: 'syz.1.369': attribute type 27 has an invalid length. [ 230.127024][ T5857] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 230.280748][ T5951] usb 3-1: Using ep0 maxpacket: 32 [ 230.307253][ T5951] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 230.370404][ T5951] usb 3-1: config 0 has no interface number 0 [ 230.387960][ T5951] usb 3-1: config 0 interface 12 has no altsetting 0 [ 230.399462][ T5951] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 230.416562][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.425969][ T5951] usb 3-1: Product: syz [ 230.432775][ T5951] usb 3-1: Manufacturer: syz [ 230.443440][ T5951] usb 3-1: SerialNumber: syz [ 230.480114][ T982] usb 5-1: USB disconnect, device number 18 [ 230.499168][ T982] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 230.648184][ T5951] usb 3-1: config 0 descriptor?? [ 231.696340][ T982] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 231.822220][ T7521] syzkaller1: entered promiscuous mode [ 231.840945][ T7521] syzkaller1: entered allmulticast mode [ 232.136450][ T5857] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 232.327332][ T5857] usb 2-1: too many configurations: 227, using maximum allowed: 8 [ 232.336437][ T5951] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 232.343974][ T5951] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 232.359007][ T5951] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 232.409914][ T5857] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 232.427119][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.446601][ T5951] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 232.525157][ T5857] usb 2-1: config 0 descriptor?? [ 232.559233][ T5857] pwc: Samsung MPC-C10 USB webcam detected. [ 232.583579][ T5951] usb 3-1: USB disconnect, device number 16 [ 232.616090][ T5857] pwc: Warning: more than 1 configuration available. [ 232.789269][ T5857] pwc: send_video_command error -71 [ 232.820893][ T5857] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 232.850435][ T5857] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 232.946925][ T5857] usb 2-1: USB disconnect, device number 15 [ 234.776640][ T7551] netlink: 20 bytes leftover after parsing attributes in process `syz.3.379'. [ 235.108731][ T7557] netlink: 72 bytes leftover after parsing attributes in process `syz.3.380'. [ 235.158663][ T7557] netlink: 'syz.3.380': attribute type 27 has an invalid length. [ 235.377842][ T7560] capability: warning: `syz.4.378' uses 32-bit capabilities (legacy support in use) [ 236.416467][ T5928] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 236.580726][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 236.609222][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.623660][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.671443][ T5928] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 236.727853][ T5928] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 236.766342][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.804381][ T5928] usb 3-1: config 0 descriptor?? [ 237.278349][ T5928] usbhid 3-1:0.0: can't add hid device: -71 [ 237.293505][ T5928] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 237.343734][ T5928] usb 3-1: USB disconnect, device number 17 [ 238.006623][ T5928] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 238.266207][ T5928] usb 4-1: config 0 has no interfaces? [ 238.289649][ T5928] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 238.318475][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.348123][ T5928] usb 4-1: Product: syz [ 238.376269][ T5928] usb 4-1: Manufacturer: syz [ 238.446243][ T5928] usb 4-1: SerialNumber: syz [ 238.472529][ T5928] usb 4-1: config 0 descriptor?? [ 240.482848][ T7602] netlink: 20 bytes leftover after parsing attributes in process `syz.4.390'. [ 241.046265][ T5951] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 241.092271][ T5928] usb 4-1: USB disconnect, device number 6 [ 241.186415][ T5951] usb 5-1: device descriptor read/64, error -71 [ 241.496339][ T5951] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 241.700904][ T5951] usb 5-1: device descriptor read/64, error -71 [ 241.881804][ T5951] usb usb5-port1: attempt power cycle [ 242.486334][ T5951] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 242.802613][ T5951] usb 5-1: device descriptor read/8, error -71 [ 243.158641][ T5951] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 243.222474][ T5951] usb 5-1: device descriptor read/8, error -71 [ 243.416852][ T5951] usb usb5-port1: unable to enumerate USB device [ 243.759792][ T7636] netlink: 'syz.1.397': attribute type 27 has an invalid length. [ 244.724998][ T7651] netlink: 28 bytes leftover after parsing attributes in process `syz.3.402'. [ 245.223261][ T7656] netlink: 20 bytes leftover after parsing attributes in process `syz.0.403'. [ 246.458159][ T5951] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 246.586861][ T979] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 246.658292][ T5951] usb 4-1: config 0 has no interfaces? [ 246.670158][ T5951] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 246.681158][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.735587][ T5951] usb 4-1: Product: syz [ 246.760003][ T5951] usb 4-1: Manufacturer: syz [ 246.775860][ T5951] usb 4-1: SerialNumber: syz [ 246.804096][ T5951] usb 4-1: config 0 descriptor?? [ 246.845408][ T979] usb 1-1: config 0 has no interfaces? [ 246.904584][ T979] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 246.940547][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.979401][ T979] usb 1-1: Product: syz [ 246.983686][ T979] usb 1-1: Manufacturer: syz [ 247.041987][ T979] usb 1-1: SerialNumber: syz [ 247.081881][ T979] usb 1-1: config 0 descriptor?? [ 247.910627][ T7684] netlink: 'syz.2.410': attribute type 1 has an invalid length. [ 248.318501][ T5936] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 248.342352][ T7687] gretap1: entered promiscuous mode [ 248.497143][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'. [ 248.539115][ T5936] usb 3-1: Using ep0 maxpacket: 16 [ 248.599217][ T5936] usb 3-1: config 3 has an invalid interface number: 100 but max is 2 [ 248.644821][ T5936] usb 3-1: config 3 has an invalid descriptor of length 197, skipping remainder of the config [ 248.752870][ T5951] usb 4-1: USB disconnect, device number 7 [ 248.894921][ T5936] usb 3-1: config 3 has 1 interface, different from the descriptor's value: 3 [ 249.174678][ T5936] usb 3-1: config 3 has no interface number 0 [ 249.385972][ T5936] usb 3-1: config 3 interface 100 altsetting 129 has an invalid endpoint descriptor of length 2, skipping [ 249.436735][ T5936] usb 3-1: config 3 interface 100 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.464221][ T5936] usb 3-1: config 3 interface 100 has no altsetting 0 [ 249.555527][ T5936] usb 3-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=1e.7a [ 249.612797][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.663782][ T5936] usb 3-1: Product: 缬됱━쎉믁觵⇑䠃첐횬✈℺쫫욍䙈횣ﵾㄚ坯騒厸ߵ욋ꏘ䲁禬崺ᶯ꺜곢ڳ揣쬛숫㛴ᑂ뿶쿃啤萤癚轸⼼逸糘縭 [ 249.696273][ T5936] usb 3-1: Manufacturer: 玢಴蓬ﯔ䠲嬊ⳁꃀ艋䨟汇齱ꨓ짤❼鲈ള㾖쬈ˬ導ുꙉ蹨᠃잀鮹惃୕竃ㅨ뙎퇳轉⊤ﲢ⒩䷺酀張炯⼽빅ꖎ鼀灞艭ꎖ纝ಃ︽쪙㤠돓측⬪앴턂마릎 [ 249.855165][ T5936] usb 3-1: SerialNumber: syz [ 250.031870][ T979] usb 1-1: USB disconnect, device number 9 [ 250.161760][ T7684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.181427][ T7684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.272950][ T5936] usb 3-1: can't set first interface for hiFace device. [ 250.285674][ T5936] snd-usb-hiface 3-1:3.100: probe with driver snd-usb-hiface failed with error -5 [ 250.334774][ T5936] usb 3-1: USB disconnect, device number 18 [ 250.659800][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.416'. [ 251.229830][ T7728] netlink: 72 bytes leftover after parsing attributes in process `syz.1.418'. [ 251.262251][ T7728] netlink: 'syz.1.418': attribute type 27 has an invalid length. [ 252.057201][ T7736] syzkaller1: entered promiscuous mode [ 252.106454][ T7736] syzkaller1: entered allmulticast mode [ 252.117891][ T7739] netlink: 'syz.3.422': attribute type 27 has an invalid length. [ 252.616659][ T5936] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 252.704276][ T7746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.419'. [ 252.713422][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'. [ 252.823123][ T5936] usb 4-1: Using ep0 maxpacket: 32 [ 252.830296][ T5936] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 252.838711][ T5936] usb 4-1: config 0 has no interface number 0 [ 252.855374][ T5936] usb 4-1: config 0 interface 12 has no altsetting 0 [ 252.901495][ T5936] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 252.911639][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.927008][ T5936] usb 4-1: Product: syz [ 252.932591][ T5936] usb 4-1: Manufacturer: syz [ 252.942720][ T5936] usb 4-1: SerialNumber: syz [ 252.953928][ T5936] usb 4-1: config 0 descriptor?? [ 253.177723][ T7754] FAULT_INJECTION: forcing a failure. [ 253.177723][ T7754] name failslab, interval 1, probability 0, space 0, times 0 [ 253.298160][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 253.394369][ T7754] CPU: 0 UID: 0 PID: 7754 Comm: syz.1.427 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 253.394402][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 253.394431][ T7754] Call Trace: [ 253.394440][ T7754] [ 253.394449][ T7754] dump_stack_lvl+0x189/0x250 [ 253.394483][ T7754] ? __pfx____ratelimit+0x10/0x10 [ 253.394510][ T7754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.394537][ T7754] ? __pfx__printk+0x10/0x10 [ 253.394570][ T7754] ? __pfx___might_resched+0x10/0x10 [ 253.394592][ T7754] ? fs_reclaim_acquire+0x7d/0x100 [ 253.394633][ T7754] should_fail_ex+0x414/0x560 [ 253.394663][ T7754] should_failslab+0xa8/0x100 [ 253.394697][ T7754] __kmalloc_noprof+0xcb/0x4f0 [ 253.394725][ T7754] ? tomoyo_encode+0x28b/0x550 [ 253.394763][ T7754] tomoyo_encode+0x28b/0x550 [ 253.394802][ T7754] tomoyo_realpath_from_path+0x58d/0x5d0 [ 253.394846][ T7754] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 253.394873][ T7754] tomoyo_path_number_perm+0x1e8/0x5a0 [ 253.394904][ T7754] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 253.394951][ T7754] ? __lock_acquire+0xab9/0xd20 [ 253.395006][ T7754] ? __fget_files+0x2a/0x420 [ 253.395045][ T7754] ? __fget_files+0x3a0/0x420 [ 253.395090][ T7754] ? __fget_files+0x2a/0x420 [ 253.395127][ T7754] security_file_ioctl_compat+0xcb/0x2d0 [ 253.395157][ T7754] __ia32_compat_sys_ioctl+0x128/0x840 [ 253.395189][ T7754] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 253.395218][ T7754] ? __fget_files+0x3a0/0x420 [ 253.395259][ T7754] ? fput+0xa0/0xd0 [ 253.395282][ T7754] ? ksys_write+0x22a/0x250 [ 253.395330][ T7754] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.395361][ T7754] __do_fast_syscall_32+0xb6/0x2b0 [ 253.395391][ T7754] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.395422][ T7754] do_fast_syscall_32+0x34/0x80 [ 253.395451][ T7754] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 253.395480][ T7754] RIP: 0023:0xf70ee539 [ 253.395498][ T7754] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 253.395517][ T7754] RSP: 002b:00000000f54de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 253.395539][ T7754] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c2c45513 [ 253.395554][ T7754] RDX: 0000000080002e00 RSI: 0000000000000000 RDI: 0000000000000000 [ 253.395567][ T7754] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 253.395579][ T7754] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 253.395592][ T7754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 253.395623][ T7754] [ 253.395646][ T7754] ERROR: Out of memory at tomoyo_realpath_from_path. [ 254.214092][ T7768] syz.4.429 uses obsolete (PF_INET,SOCK_PACKET) [ 254.548557][ T5936] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 254.573562][ T5936] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 254.618104][ T7772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.431'. [ 254.643024][ T7772] caif0: Master is either lo or non-ether device [ 254.647241][ T5936] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 254.715702][ T5936] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 254.790282][ T5936] usb 4-1: USB disconnect, device number 8 [ 254.970555][ T7778] FAULT_INJECTION: forcing a failure. [ 254.970555][ T7778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.984063][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'. [ 255.052862][ T7778] CPU: 1 UID: 0 PID: 7778 Comm: syz.4.432 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 255.052914][ T7778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 255.052928][ T7778] Call Trace: [ 255.052936][ T7778] [ 255.052946][ T7778] dump_stack_lvl+0x189/0x250 [ 255.052979][ T7778] ? __pfx____ratelimit+0x10/0x10 [ 255.053017][ T7778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.053044][ T7778] ? __pfx__printk+0x10/0x10 [ 255.053090][ T7778] should_fail_ex+0x414/0x560 [ 255.053127][ T7778] _copy_to_user+0x31/0xb0 [ 255.053152][ T7778] simple_read_from_buffer+0xe1/0x170 [ 255.053191][ T7778] proc_fail_nth_read+0x1b3/0x220 [ 255.053220][ T7778] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 255.053250][ T7778] ? rw_verify_area+0x2a6/0x4d0 [ 255.053276][ T7778] ? __lock_acquire+0xab9/0xd20 [ 255.053306][ T7778] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 255.053333][ T7778] vfs_read+0x200/0x980 [ 255.053360][ T7778] ? fdget_pos+0x247/0x320 [ 255.053384][ T7778] ? __pfx___mutex_lock+0x10/0x10 [ 255.053415][ T7778] ? __pfx_vfs_read+0x10/0x10 [ 255.053445][ T7778] ? __fget_files+0x2a/0x420 [ 255.053489][ T7778] ? __fget_files+0x3a0/0x420 [ 255.053521][ T7778] ? __fget_files+0x2a/0x420 [ 255.053564][ T7778] ksys_read+0x145/0x250 [ 255.053596][ T7778] ? __pfx_ksys_read+0x10/0x10 [ 255.053628][ T7778] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.053660][ T7778] __do_fast_syscall_32+0xb6/0x2b0 [ 255.053690][ T7778] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.053722][ T7778] do_fast_syscall_32+0x34/0x80 [ 255.053752][ T7778] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 255.053780][ T7778] RIP: 0023:0xf7f15539 [ 255.053798][ T7778] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 255.053817][ T7778] RSP: 002b:00000000f5436590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 255.053841][ T7778] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5436620 [ 255.053855][ T7778] RDX: 000000000000000f RSI: 00000000f73a4ff4 RDI: 0000000000000000 [ 255.053868][ T7778] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 255.053881][ T7778] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 255.053893][ T7778] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 255.053924][ T7778] [ 255.820660][ T7785] netlink: 36 bytes leftover after parsing attributes in process `syz.2.433'. [ 255.833223][ T7785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.853076][ T7785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.006725][ T7793] netlink: 'syz.4.436': attribute type 27 has an invalid length. [ 256.262331][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'. [ 257.076392][ T979] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 257.267021][ T979] usb 4-1: Using ep0 maxpacket: 16 [ 257.298209][ T979] usb 4-1: config 0 has no interfaces? [ 257.318104][ T979] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 257.337806][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.345967][ T979] usb 4-1: Product: syz [ 257.401161][ T979] usb 4-1: Manufacturer: syz [ 257.431744][ T979] usb 4-1: SerialNumber: syz [ 257.640981][ T979] usb 4-1: config 0 descriptor?? [ 257.792948][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.445'. [ 257.812907][ T7829] caif0: Master is either lo or non-ether device [ 257.948783][ T7816] ptrace attach of "./syz-executor exec"[5876] was attempted by "./syz-executor exec"[7816] [ 259.006652][ T7835] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 259.746288][ T979] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 260.028966][ T979] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 260.039987][ T979] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 260.071965][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 64 [ 260.146632][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 260.182744][ T979] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 260.288437][ T979] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 260.298832][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.322459][ T979] usb 5-1: Product: syz [ 260.346299][ T979] usb 5-1: Manufacturer: syz [ 260.366397][ T979] usb 5-1: SerialNumber: syz [ 260.401799][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.450'. [ 260.417573][ T979] usb 5-1: config 0 descriptor?? [ 260.442264][ T7842] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 260.456441][ T979] iuu_phoenix 5-1:0.0: iuu_phoenix converter detected [ 260.486126][ T5921] usb 4-1: USB disconnect, device number 9 [ 260.543731][ T979] usb 5-1: iuu_phoenix converter now attached to ttyUSB0 [ 260.669457][ T5921] usb 5-1: USB disconnect, device number 24 [ 260.689386][ T5921] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 260.766934][ T5921] iuu_phoenix 5-1:0.0: device disconnected [ 260.829060][ T7850] tap0: tun_chr_ioctl cmd 21731 [ 261.136282][ T979] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 261.170909][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.191774][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.361929][ T979] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 261.371628][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.383267][ T979] usb 2-1: Product: syz [ 261.713977][ T7871] netlink: 'syz.0.455': attribute type 27 has an invalid length. [ 261.876984][ T979] usb 2-1: Manufacturer: syz [ 261.881651][ T979] usb 2-1: SerialNumber: syz [ 261.893388][ T979] usb 2-1: config 0 descriptor?? [ 262.367860][ T979] usb 2-1: ignoring: probably an ADSL modem [ 262.784725][ T979] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 263.066655][ T5928] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 263.469536][ T30] audit: type=1326 audit(1754681209.065:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 263.741510][ T982] usb 2-1: USB disconnect, device number 16 [ 263.745859][ T5928] usb 5-1: config 0 has no interfaces? [ 263.764401][ T5928] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 263.803620][ T30] audit: type=1326 audit(1754681209.065:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 263.846735][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.854850][ T5928] usb 5-1: Product: syz [ 263.927233][ T5928] usb 5-1: Manufacturer: syz [ 263.955387][ T5928] usb 5-1: SerialNumber: syz [ 263.963785][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 263.994847][ T5928] usb 5-1: config 0 descriptor?? [ 263.996316][ T5951] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 264.008656][ T30] audit: type=1326 audit(1754681209.065:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 264.240627][ T30] audit: type=1326 audit(1754681209.065:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 264.315848][ T30] audit: type=1326 audit(1754681209.065:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=162 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 264.377171][ T5951] usb 3-1: config 0 has no interfaces? [ 264.394556][ T5951] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 264.405366][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.791836][ T30] audit: type=1326 audit(1754681209.065:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 264.821455][ T5951] usb 3-1: Product: syz [ 264.826078][ T5951] usb 3-1: Manufacturer: syz [ 264.849972][ T5951] usb 3-1: SerialNumber: syz [ 264.868346][ T30] audit: type=1326 audit(1754681209.065:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 264.891927][ T5951] usb 3-1: config 0 descriptor?? [ 265.568133][ T30] audit: type=1326 audit(1754681209.065:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 265.670871][ T30] audit: type=1326 audit(1754681209.065:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 265.825826][ T30] audit: type=1326 audit(1754681209.065:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 266.573308][ T7890] veth0_vlan: left promiscuous mode [ 266.584251][ T7890] veth0_vlan: entered promiscuous mode [ 266.788541][ T7890] syz.2.460 (7890) used greatest stack depth: 19032 bytes left [ 266.879592][ T5928] usb 5-1: USB disconnect, device number 25 [ 266.913721][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.465'. [ 267.022850][ T7913] bridge_slave_1: left allmulticast mode [ 267.033154][ T7913] bridge_slave_1: left promiscuous mode [ 267.091273][ T7913] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.154484][ T7913] bridge_slave_0: left allmulticast mode [ 267.177289][ T7921] FAULT_INJECTION: forcing a failure. [ 267.177289][ T7921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.196313][ T7913] bridge_slave_0: left promiscuous mode [ 267.205255][ T7913] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.243536][ T7921] CPU: 1 UID: 0 PID: 7921 Comm: syz.0.467 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 267.243567][ T7921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.243582][ T7921] Call Trace: [ 267.243591][ T7921] [ 267.243601][ T7921] dump_stack_lvl+0x189/0x250 [ 267.243632][ T7921] ? __pfx____ratelimit+0x10/0x10 [ 267.243660][ T7921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.243687][ T7921] ? __pfx__printk+0x10/0x10 [ 267.243718][ T7921] ? __might_fault+0xb0/0x130 [ 267.243761][ T7921] should_fail_ex+0x414/0x560 [ 267.243792][ T7921] _copy_from_iter+0x1db/0x16f0 [ 267.243827][ T7921] ? rcu_is_watching+0x15/0xb0 [ 267.243851][ T7921] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 267.243883][ T7921] ? __pfx__copy_from_iter+0x10/0x10 [ 267.243917][ T7921] ? __build_skb_around+0x257/0x3e0 [ 267.243950][ T7921] ? netlink_sendmsg+0x642/0xb30 [ 267.243979][ T7921] ? skb_put+0x11b/0x210 [ 267.244012][ T7921] netlink_sendmsg+0x6b2/0xb30 [ 267.244051][ T7921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.244084][ T7921] ? __import_iovec+0x5d4/0x7f0 [ 267.244103][ T7921] ? aa_sock_msg_perm+0xf1/0x1d0 [ 267.244136][ T7921] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 267.244161][ T7921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.244191][ T7921] __sock_sendmsg+0x21c/0x270 [ 267.244230][ T7921] ____sys_sendmsg+0x505/0x830 [ 267.244268][ T7921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.244319][ T7921] ___sys_sendmsg+0x21f/0x2a0 [ 267.244354][ T7921] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.244426][ T7921] ? __fget_files+0x2a/0x420 [ 267.244458][ T7921] ? __fget_files+0x3a0/0x420 [ 267.244502][ T7921] __sys_sendmsg+0x164/0x220 [ 267.244536][ T7921] ? __pfx___sys_sendmsg+0x10/0x10 [ 267.244587][ T7921] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.244617][ T7921] __do_fast_syscall_32+0xb6/0x2b0 [ 267.244647][ T7921] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.244678][ T7921] do_fast_syscall_32+0x34/0x80 [ 267.244708][ T7921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.244735][ T7921] RIP: 0023:0xf7f92539 [ 267.244753][ T7921] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 267.244774][ T7921] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 267.244796][ T7921] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 267.244812][ T7921] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 267.244824][ T7921] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.244837][ T7921] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 267.244849][ T7921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.244881][ T7921] [ 267.514333][ C1] vkms_vblank_simulate: vblank timer overrun [ 267.537779][ T5928] usb 3-1: USB disconnect, device number 19 [ 268.014328][ T7932] netlink: 36 bytes leftover after parsing attributes in process `syz.2.469'. [ 268.124991][ T7940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.157567][ T7932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.374765][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.473'. [ 268.557960][ T7947] netlink: 'syz.0.471': attribute type 27 has an invalid length. [ 269.204432][ T5857] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 269.826084][ T5857] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 269.835496][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.885432][ T5857] usb 2-1: Product: syz [ 269.900379][ T5857] usb 2-1: Manufacturer: syz [ 269.951866][ T5857] usb 2-1: SerialNumber: syz [ 269.975585][ T5857] usb 2-1: config 0 descriptor?? [ 270.039099][ T5857] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 270.267224][ T5857] gspca_sunplus: reg_r err -32 [ 270.272628][ T5857] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 270.532472][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.476'. [ 270.622491][ T7956] caif0: Master is either lo or non-ether device [ 270.936086][ T7964] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 272.005751][ T7975] bridge_slave_0: left allmulticast mode [ 272.025546][ T7975] bridge_slave_0: left promiscuous mode [ 272.048644][ T7975] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.159243][ T7975] bridge_slave_1: left allmulticast mode [ 272.218117][ T7975] bridge_slave_1: left promiscuous mode [ 272.250891][ T7975] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.436826][ T7975] bond0: (slave bond_slave_0): Releasing backup interface [ 272.490609][ T7975] bond0: (slave bond_slave_1): Releasing backup interface [ 272.590053][ T982] usb 2-1: USB disconnect, device number 17 [ 272.685734][ T7975] team0: Port device team_slave_0 removed [ 272.754141][ T7975] team0: Port device team_slave_1 removed [ 272.768087][ T7975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.780088][ T7975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.797985][ T7975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.813322][ T7975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.855528][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'. [ 272.876007][ T7975] bond1: (slave veth3): Releasing active interface [ 272.884982][ T7975] bond1: (slave veth3): the permanent HWaddr of slave - fa:9d:aa:3b:65:97 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 272.908300][ T7975] vlan2: entered promiscuous mode [ 272.924842][ T7975] bond1: (slave vlan2): Releasing active interface [ 272.938021][ T7975] vlan2: left promiscuous mode [ 272.949781][ T7975] veth1: left promiscuous mode [ 272.976392][ T7977] FAULT_INJECTION: forcing a failure. [ 272.976392][ T7977] name failslab, interval 1, probability 0, space 0, times 0 [ 272.994744][ T7977] CPU: 0 UID: 0 PID: 7977 Comm: syz.4.482 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 272.994775][ T7977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 272.994787][ T7977] Call Trace: [ 272.994796][ T7977] [ 272.994805][ T7977] dump_stack_lvl+0x189/0x250 [ 272.994835][ T7977] ? __pfx____ratelimit+0x10/0x10 [ 272.994862][ T7977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.994888][ T7977] ? __pfx__printk+0x10/0x10 [ 272.994926][ T7977] ? __pfx___might_resched+0x10/0x10 [ 272.994952][ T7977] should_fail_ex+0x414/0x560 [ 272.994983][ T7977] should_failslab+0xa8/0x100 [ 272.995018][ T7977] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 272.995051][ T7977] ? __alloc_skb+0x112/0x2d0 [ 272.995086][ T7977] __alloc_skb+0x112/0x2d0 [ 272.995119][ T7977] cfg80211_del_sta_sinfo+0x19c/0x5d0 [ 272.995155][ T7977] ? __pfx_cfg80211_del_sta_sinfo+0x10/0x10 [ 272.995184][ T7977] ? sta_set_tidstats+0x6cf/0xa80 [ 272.995286][ T7977] ? __kasan_kmalloc+0x93/0xb0 [ 272.995318][ T7977] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 272.995356][ T7977] __sta_info_destroy_part2+0x342/0x450 [ 272.995390][ T7977] __sta_info_flush+0x5e4/0x710 [ 272.995434][ T7977] ? __pfx___sta_info_flush+0x10/0x10 [ 272.995474][ T7977] ieee80211_ibss_disconnect+0x2da/0x7c0 [ 272.995509][ T7977] ieee80211_ibss_leave+0x47/0x150 [ 272.995541][ T7977] cfg80211_leave_ibss+0x1e7/0x410 [ 272.995573][ T7977] genl_family_rcv_msg_doit+0x212/0x300 [ 272.995603][ T7977] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 272.995640][ T7977] ? bpf_lsm_capable+0x9/0x20 [ 272.995669][ T7977] ? security_capable+0x7e/0x2e0 [ 272.995704][ T7977] genl_rcv_msg+0x60e/0x790 [ 272.995730][ T7977] ? __pfx_genl_rcv_msg+0x10/0x10 [ 272.995750][ T7977] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 272.995781][ T7977] ? __pfx_nl80211_leave_ibss+0x10/0x10 [ 272.995806][ T7977] ? __pfx_nl80211_post_doit+0x10/0x10 [ 272.995841][ T7977] ? __asan_memcpy+0x40/0x70 [ 272.995865][ T7977] ? __pfx_ref_tracker_free+0x10/0x10 [ 272.995902][ T7977] netlink_rcv_skb+0x208/0x470 [ 272.995928][ T7977] ? __lock_acquire+0xab9/0xd20 [ 272.995961][ T7977] ? __pfx_genl_rcv_msg+0x10/0x10 [ 272.995984][ T7977] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 272.996031][ T7977] ? down_read+0x1ad/0x2e0 [ 272.996065][ T7977] genl_rcv+0x28/0x40 [ 272.996096][ T7977] netlink_unicast+0x82f/0x9e0 [ 272.996141][ T7977] ? __pfx_netlink_unicast+0x10/0x10 [ 272.996168][ T7977] ? netlink_sendmsg+0x642/0xb30 [ 272.996196][ T7977] ? skb_put+0x11b/0x210 [ 272.996230][ T7977] netlink_sendmsg+0x805/0xb30 [ 272.996270][ T7977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.996301][ T7977] ? __import_iovec+0x5d4/0x7f0 [ 272.996319][ T7977] ? aa_sock_msg_perm+0xf1/0x1d0 [ 272.996352][ T7977] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 272.996375][ T7977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.996406][ T7977] __sock_sendmsg+0x21c/0x270 [ 272.996435][ T7977] ____sys_sendmsg+0x505/0x830 [ 272.996472][ T7977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.996520][ T7977] ___sys_sendmsg+0x21f/0x2a0 [ 272.996559][ T7977] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.996628][ T7977] ? __fget_files+0x2a/0x420 [ 272.996660][ T7977] ? __fget_files+0x3a0/0x420 [ 272.996704][ T7977] __sys_sendmsg+0x164/0x220 [ 272.996735][ T7977] ? __pfx___sys_sendmsg+0x10/0x10 [ 272.996784][ T7977] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.996814][ T7977] __do_fast_syscall_32+0xb6/0x2b0 [ 272.996844][ T7977] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.996874][ T7977] do_fast_syscall_32+0x34/0x80 [ 272.996903][ T7977] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 272.996931][ T7977] RIP: 0023:0xf7f15539 [ 272.996950][ T7977] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 272.996970][ T7977] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 272.996992][ T7977] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 272.997006][ T7977] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 272.997018][ T7977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 272.997031][ T7977] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 272.997041][ T7977] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 272.997063][ T7977] [ 273.781697][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 273.889047][ T8000] caif0: Master is either lo or non-ether device [ 273.916938][ T8004] netlink: 72 bytes leftover after parsing attributes in process `syz.2.486'. [ 273.956469][ T8007] netlink: 72 bytes leftover after parsing attributes in process `syz.3.488'. [ 274.054292][ T8004] netlink: 'syz.2.486': attribute type 27 has an invalid length. [ 274.201990][ T979] hid (null): invalid report_size 28520 [ 274.220546][ T979] hid-generic 00A0:0006:0003.0001: invalid report_size 28520 [ 274.232193][ T979] hid-generic 00A0:0006:0003.0001: item 0 2 1 7 parsing failed [ 274.242612][ T979] hid-generic 00A0:0006:0003.0001: probe with driver hid-generic failed with error -22 [ 274.577543][ T5928] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 274.919425][ T8020] netlink: 'syz.0.491': attribute type 27 has an invalid length. [ 275.109149][ T5928] usb 2-1: config 0 has no interfaces? [ 275.115141][ T5928] usb 2-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 275.156338][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.301348][ T5928] usb 2-1: config 0 descriptor?? [ 275.562127][ T8012] netlink: 5 bytes leftover after parsing attributes in process `syz.1.490'. [ 275.578061][ T8012] 0XD: renamed from macvtap0 (while UP) [ 275.636934][ T8014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.668723][ T8014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.678316][ T8025] netlink: 72 bytes leftover after parsing attributes in process `syz.3.492'. [ 275.778882][ T8025] netlink: 'syz.3.492': attribute type 27 has an invalid length. [ 275.809854][ T8012] 0XD: entered allmulticast mode [ 275.815140][ T8012] veth0_macvtap: entered allmulticast mode [ 275.825113][ T8012] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 276.720949][ T8037] netlink: 'syz.2.495': attribute type 33 has an invalid length. [ 276.776450][ T8037] netlink: 152 bytes leftover after parsing attributes in process `syz.2.495'. [ 277.056517][ T5936] usb 2-1: USB disconnect, device number 18 [ 277.363235][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'. [ 278.426357][ T982] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 278.566553][ T5936] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 278.620272][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.631480][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.656274][ T982] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.700274][ T982] usb 5-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 278.732229][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.746467][ T5936] usb 4-1: Using ep0 maxpacket: 8 [ 278.768023][ T5936] usb 4-1: config 129 has an invalid interface number: 209 but max is 0 [ 278.779547][ T982] usb 5-1: config 0 descriptor?? [ 278.798089][ T5936] usb 4-1: config 129 has no interface number 0 [ 278.814269][ T5936] usb 4-1: config 129 interface 209 altsetting 189 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 278.826029][ T5936] usb 4-1: config 129 interface 209 altsetting 189 bulk endpoint 0xE has invalid maxpacket 1024 [ 278.845501][ T5936] usb 4-1: config 129 interface 209 has no altsetting 0 [ 278.873308][ T5936] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=3e.cc [ 278.890841][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.986328][ T5936] usb 4-1: Product: syz [ 279.020076][ T5936] usb 4-1: Manufacturer: syz [ 279.026663][ T5936] usb 4-1: SerialNumber: syz [ 279.032120][ T982] usbhid 5-1:0.0: can't add hid device: -71 [ 279.039478][ T982] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 279.095994][ T8065] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 279.207328][ T982] usb 5-1: USB disconnect, device number 26 [ 279.743248][ T8084] process 'syz.3.503' launched './file1' with NULL argv: empty string added [ 279.780228][ T8083] FAULT_INJECTION: forcing a failure. [ 279.780228][ T8083] name failslab, interval 1, probability 0, space 0, times 0 [ 279.825885][ T8083] CPU: 0 UID: 0 PID: 8083 Comm: syz.4.508 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 279.825916][ T8083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 279.825931][ T8083] Call Trace: [ 279.825940][ T8083] [ 279.825951][ T8083] dump_stack_lvl+0x189/0x250 [ 279.826090][ T8083] ? __pfx____ratelimit+0x10/0x10 [ 279.826127][ T8083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.826154][ T8083] ? __pfx__printk+0x10/0x10 [ 279.826190][ T8083] ? __pfx___might_resched+0x10/0x10 [ 279.826218][ T8083] should_fail_ex+0x414/0x560 [ 279.826248][ T8083] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 279.826279][ T8083] should_failslab+0xa8/0x100 [ 279.826315][ T8083] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 279.826343][ T8083] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 279.826374][ T8083] ? alloc_inode+0x6a/0x1b0 [ 279.826404][ T8083] ? __pfx_simple_start_creating+0x10/0x10 [ 279.826442][ T8083] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 279.826471][ T8083] alloc_inode+0x6a/0x1b0 [ 279.826504][ T8083] new_inode+0x22/0x170 [ 279.826543][ T8083] __debugfs_create_file+0x14d/0x4f0 [ 279.826643][ T8083] debugfs_create_file_full+0x3f/0x60 [ 279.826679][ T8083] ref_tracker_dir_debugfs+0x14e/0x270 [ 279.826708][ T8083] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 279.826768][ T8083] ? rcu_is_watching+0x15/0xb0 [ 279.826790][ T8083] ? alloc_netdev_mqs+0xa3/0x1170 [ 279.826820][ T8083] ? __raw_spin_lock_init+0x45/0x100 [ 279.826848][ T8083] alloc_netdev_mqs+0x26f/0x1170 [ 279.826869][ T8083] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 279.826907][ T8083] rtnl_create_link+0x31f/0xd10 [ 279.826938][ T8083] rtnl_newlink_create+0x25c/0xb00 [ 279.826971][ T8083] ? __pfx___nla_validate_parse+0x10/0x10 [ 279.827004][ T8083] ? __lock_acquire+0xab9/0xd20 [ 279.827043][ T8083] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 279.827080][ T8083] ? __pfx___mutex_lock+0x10/0x10 [ 279.827121][ T8083] ? ns_capable+0x8a/0xf0 [ 279.827149][ T8083] rtnl_newlink+0x16d6/0x1c70 [ 279.827181][ T8083] ? netlink_sendmsg+0x805/0xb30 [ 279.827222][ T8083] ? __pfx_rtnl_newlink+0x10/0x10 [ 279.827267][ T8083] ? kasan_quarantine_put+0xdd/0x220 [ 279.827297][ T8083] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.827332][ T8083] ? nlmon_xmit+0xb0/0x100 [ 279.827359][ T8083] ? kmem_cache_free+0x18f/0x400 [ 279.827394][ T8083] ? __local_bh_enable_ip+0x12d/0x1c0 [ 279.827410][ T8083] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.827431][ T8083] ? __local_bh_enable_ip+0x12d/0x1c0 [ 279.827456][ T8083] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 279.827483][ T8083] ? __dev_queue_xmit+0x27b/0x3b50 [ 279.827504][ T8083] ? __dev_queue_xmit+0x27b/0x3b50 [ 279.827523][ T8083] ? __dev_queue_xmit+0x27b/0x3b50 [ 279.827543][ T8083] ? __dev_queue_xmit+0x1d79/0x3b50 [ 279.827563][ T8083] ? __lock_acquire+0xab9/0xd20 [ 279.827637][ T8083] ? __pfx_rtnl_newlink+0x10/0x10 [ 279.827665][ T8083] rtnetlink_rcv_msg+0x7cf/0xb70 [ 279.827697][ T8083] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 279.827717][ T8083] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 279.827736][ T8083] ? ref_tracker_free+0x63a/0x7d0 [ 279.827765][ T8083] ? __asan_memcpy+0x40/0x70 [ 279.827790][ T8083] ? __pfx_ref_tracker_free+0x10/0x10 [ 279.827814][ T8083] ? __skb_clone+0x63/0x7a0 [ 279.827854][ T8083] netlink_rcv_skb+0x208/0x470 [ 279.827883][ T8083] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 279.827914][ T8083] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 279.827957][ T8083] ? netlink_deliver_tap+0x2e/0x1b0 [ 279.827994][ T8083] netlink_unicast+0x82f/0x9e0 [ 279.828028][ T8083] ? __pfx_netlink_unicast+0x10/0x10 [ 279.828056][ T8083] ? netlink_sendmsg+0x642/0xb30 [ 279.828084][ T8083] ? skb_put+0x11b/0x210 [ 279.828118][ T8083] netlink_sendmsg+0x805/0xb30 [ 279.828164][ T8083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.828197][ T8083] ? __import_iovec+0x5d4/0x7f0 [ 279.828217][ T8083] ? aa_sock_msg_perm+0xf1/0x1d0 [ 279.828252][ T8083] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 279.828274][ T8083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.828310][ T8083] __sock_sendmsg+0x21c/0x270 [ 279.828331][ T8083] ____sys_sendmsg+0x505/0x830 [ 279.828365][ T8083] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.828418][ T8083] ___sys_sendmsg+0x21f/0x2a0 [ 279.828455][ T8083] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.828509][ T8083] ? __fget_files+0x2a/0x420 [ 279.828545][ T8083] ? __fget_files+0x3a0/0x420 [ 279.828596][ T8083] __sys_sendmsg+0x164/0x220 [ 279.828626][ T8083] ? __pfx___sys_sendmsg+0x10/0x10 [ 279.828664][ T8083] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.828699][ T8083] __do_fast_syscall_32+0xb6/0x2b0 [ 279.828728][ T8083] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.828761][ T8083] do_fast_syscall_32+0x34/0x80 [ 279.828784][ T8083] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 279.828805][ T8083] RIP: 0023:0xf7f15539 [ 279.828824][ T8083] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 279.828845][ T8083] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 279.828868][ T8083] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 279.828882][ T8083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 279.828895][ T8083] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 279.828906][ T8083] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 279.828920][ T8083] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 279.828942][ T8083] [ 280.401810][ T8083] debugfs: out of free dentries, can not create file 'netdev@ffff888057eda610' [ 281.628081][ T5936] ath6kl: Failed to submit usb control message: -71 [ 281.634888][ T5936] ath6kl: unable to send the bmi data to the device: -71 [ 281.673418][ T5936] ath6kl: Unable to send get target info: -71 [ 281.706811][ T5936] ath6kl: Failed to init ath6kl core: -71 [ 281.723327][ T5936] ath6kl_usb 4-1:129.209: probe with driver ath6kl_usb failed with error -71 [ 281.792781][ T5936] usb 4-1: USB disconnect, device number 10 [ 282.157172][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.510'. [ 282.799758][ T8109] netlink: 72 bytes leftover after parsing attributes in process `syz.0.513'. [ 282.836841][ T8109] netlink: 'syz.0.513': attribute type 27 has an invalid length. [ 284.725811][ T8125] ptrace attach of "./syz-executor exec"[5874] was attempted by "./syz-executor exec"[8125] [ 286.506263][ T979] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 286.684059][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 286.720909][ T979] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 286.814317][ T979] usb 5-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 286.856237][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.918354][ T979] usb 5-1: config 0 descriptor?? [ 286.926887][ T8140] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 287.471516][ T8153] netlink: 60 bytes leftover after parsing attributes in process `syz.4.521'. [ 287.514633][ T8140] netlink: 60 bytes leftover after parsing attributes in process `syz.4.521'. [ 287.653890][ T979] smartjoyplus 0003:0925:8866.0002: hidraw0: USB HID vff.fa Device [HID 0925:8866] on usb-dummy_hcd.4-1/input0 [ 287.730295][ T979] smartjoyplus 0003:0925:8866.0002: Force feedback for SmartJoy PLUS PS2/USB adapter [ 287.780645][ T979] usb 5-1: USB disconnect, device number 27 [ 288.122779][ T8159] fido_id[8159]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 288.196456][ T5928] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 288.285065][ T8166] netlink: 72 bytes leftover after parsing attributes in process `syz.2.526'. [ 288.506250][ T5928] usb 2-1: config 0 has no interfaces? [ 288.539297][ T5928] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 288.550586][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.566692][ T5928] usb 2-1: Product: syz [ 288.571131][ T5928] usb 2-1: Manufacturer: syz [ 288.654050][ T8166] netlink: 'syz.2.526': attribute type 27 has an invalid length. [ 288.692710][ T5928] usb 2-1: SerialNumber: syz [ 288.722713][ T5928] usb 2-1: config 0 descriptor?? [ 290.785558][ T8186] netlink: 'syz.2.531': attribute type 11 has an invalid length. [ 290.936939][ T8191] netlink: 72 bytes leftover after parsing attributes in process `syz.0.532'. [ 290.969396][ T8191] netlink: 'syz.0.532': attribute type 27 has an invalid length. [ 291.382211][ T5928] usb 2-1: USB disconnect, device number 19 [ 291.848370][ T8204] FAULT_INJECTION: forcing a failure. [ 291.848370][ T8204] name failslab, interval 1, probability 0, space 0, times 0 [ 291.932033][ T8204] CPU: 1 UID: 0 PID: 8204 Comm: syz.1.537 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 291.932064][ T8204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 291.932078][ T8204] Call Trace: [ 291.932087][ T8204] [ 291.932097][ T8204] dump_stack_lvl+0x189/0x250 [ 291.932130][ T8204] ? __pfx____ratelimit+0x10/0x10 [ 291.932159][ T8204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.932186][ T8204] ? __pfx__printk+0x10/0x10 [ 291.932220][ T8204] ? __lock_acquire+0xab9/0xd20 [ 291.932263][ T8204] should_fail_ex+0x414/0x560 [ 291.932294][ T8204] should_failslab+0xa8/0x100 [ 291.932329][ T8204] kmem_cache_alloc_noprof+0x73/0x3c0 [ 291.932360][ T8204] ? skb_clone+0x212/0x3a0 [ 291.932392][ T8204] skb_clone+0x212/0x3a0 [ 291.932418][ T8204] __netlink_deliver_tap+0x404/0x850 [ 291.932462][ T8204] ? netlink_deliver_tap+0x2e/0x1b0 [ 291.932493][ T8204] netlink_deliver_tap+0x19c/0x1b0 [ 291.932524][ T8204] netlink_unicast+0x7fa/0x9e0 [ 291.932559][ T8204] ? __pfx_netlink_unicast+0x10/0x10 [ 291.932588][ T8204] ? netlink_sendmsg+0x642/0xb30 [ 291.932614][ T8204] ? skb_put+0x11b/0x210 [ 291.932649][ T8204] netlink_sendmsg+0x805/0xb30 [ 291.932689][ T8204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.932721][ T8204] ? __import_iovec+0x5d4/0x7f0 [ 291.932739][ T8204] ? aa_sock_msg_perm+0xf1/0x1d0 [ 291.932772][ T8204] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 291.932796][ T8204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.932826][ T8204] __sock_sendmsg+0x21c/0x270 [ 291.932855][ T8204] ____sys_sendmsg+0x505/0x830 [ 291.932893][ T8204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.932943][ T8204] ___sys_sendmsg+0x21f/0x2a0 [ 291.932975][ T8204] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.933025][ T8204] ? __fget_files+0x2a/0x420 [ 291.933054][ T8204] ? __fget_files+0x3a0/0x420 [ 291.933085][ T8204] __sys_sendmsg+0x164/0x220 [ 291.933110][ T8204] ? __pfx___sys_sendmsg+0x10/0x10 [ 291.933146][ T8204] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.933169][ T8204] __do_fast_syscall_32+0xb6/0x2b0 [ 291.933191][ T8204] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.933214][ T8204] do_fast_syscall_32+0x34/0x80 [ 291.933235][ T8204] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 291.933255][ T8204] RIP: 0023:0xf70ee539 [ 291.933269][ T8204] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 291.933283][ T8204] RSP: 002b:00000000f54de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 291.933301][ T8204] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 291.933311][ T8204] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 291.933320][ T8204] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 291.933329][ T8204] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 291.933338][ T8204] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 291.933359][ T8204] [ 292.224263][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.583353][ T8207] netlink: 36 bytes leftover after parsing attributes in process `syz.2.539'. [ 292.852805][ T8216] netlink: 36 bytes leftover after parsing attributes in process `syz.4.540'. [ 292.866833][ T8216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.892489][ T8216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.957453][ T8207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.004344][ T8208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.735237][ T8232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.758751][ T8232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.946302][ T5936] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 294.086285][ T5928] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 294.176729][ T5936] usb 3-1: Using ep0 maxpacket: 8 [ 294.199402][ T5936] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 294.254943][ T5936] usb 3-1: config 0 has no interface number 0 [ 294.275072][ T5928] usb 1-1: config 0 has no interfaces? [ 294.295834][ T5936] usb 3-1: New USB device found, idVendor=05ac, idProduct=3d58, bcdDevice=88.ce [ 294.332071][ T5928] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 294.390953][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.460234][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.474819][ T5928] usb 1-1: Product: syz [ 294.480443][ T5936] usb 3-1: config 0 descriptor?? [ 294.491679][ T5928] usb 1-1: Manufacturer: syz [ 294.656195][ T5928] usb 1-1: SerialNumber: syz [ 294.723151][ T5857] usb 3-1: USB disconnect, device number 20 [ 294.766344][ T5928] usb 1-1: config 0 descriptor?? [ 294.921075][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.549'. [ 295.197210][ T8247] team_slave_0: entered promiscuous mode [ 295.203277][ T8247] team_slave_1: entered promiscuous mode [ 295.310156][ T8247] macsec1: entered promiscuous mode [ 295.316847][ T8247] team0: entered promiscuous mode [ 295.322894][ T8247] macsec1: entered allmulticast mode [ 295.353817][ T8247] team0: entered allmulticast mode [ 295.359830][ T8247] team_slave_0: entered allmulticast mode [ 295.366089][ T8247] team_slave_1: entered allmulticast mode [ 295.389957][ T8247] team0: Device macsec1 is already an upper device of the team interface [ 295.427140][ T8247] team0: left allmulticast mode [ 295.482892][ T8247] team_slave_0: left allmulticast mode [ 295.499514][ T8247] team_slave_1: left allmulticast mode [ 295.509506][ T8247] team0: left promiscuous mode [ 295.525936][ T8247] team_slave_0: left promiscuous mode [ 295.531530][ T8247] team_slave_1: left promiscuous mode [ 297.247946][ T5928] usb 1-1: USB disconnect, device number 10 [ 297.464904][ T8270] netlink: 72 bytes leftover after parsing attributes in process `syz.0.554'. [ 297.507199][ T8270] netlink: 'syz.0.554': attribute type 27 has an invalid length. [ 297.686441][ T5857] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 297.989967][ T5857] usb 2-1: Using ep0 maxpacket: 16 [ 298.085623][ T5857] usb 2-1: unable to get BOS descriptor or descriptor too short [ 298.100939][ T5857] usb 2-1: config 128 has an invalid interface number: 147 but max is 0 [ 298.110618][ T5857] usb 2-1: config 128 has no interface number 0 [ 298.119545][ T5857] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=9f.d1 [ 298.129534][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.233635][ T5857] usb 2-1: Product: syz [ 298.241049][ T5857] usb 2-1: Manufacturer: syz [ 298.251761][ T5857] usb 2-1: SerialNumber: syz [ 298.717938][ T982] usb 2-1: USB disconnect, device number 20 [ 298.725309][ T982] f81534a_ctrl 2-1:128.147: failed to set register 0x116: -19 [ 298.802547][ T982] f81534a_ctrl 2-1:128.147: failed to enable ports: -19 [ 300.714569][ T8310] netlink: 'syz.2.563': attribute type 27 has an invalid length. [ 301.419927][ T8319] netlink: 'syz.4.564': attribute type 27 has an invalid length. [ 301.977022][ T5936] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 302.248922][ T5936] usb 3-1: config 0 has no interfaces? [ 302.273976][ T5936] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 302.315055][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.346197][ T5936] usb 3-1: Product: syz [ 302.350443][ T5936] usb 3-1: Manufacturer: syz [ 302.375761][ T5936] usb 3-1: SerialNumber: syz [ 302.406650][ T5936] usb 3-1: config 0 descriptor?? [ 304.031628][ T5928] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 304.246241][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 304.284703][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 304.314956][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 304.346928][ T5928] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 304.360522][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 304.681205][ T8346] netlink: 72 bytes leftover after parsing attributes in process `syz.3.569'. [ 304.760490][ T5928] usb 2-1: Product: syz [ 304.781914][ T8346] netlink: 'syz.3.569': attribute type 27 has an invalid length. [ 304.827548][ T5928] usb 2-1: SerialNumber: syz [ 304.841058][ T5928] usb 2-1: config 0 descriptor?? [ 305.042532][ T8350] netlink: 32 bytes leftover after parsing attributes in process `syz.4.570'. [ 305.254306][ T8352] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 305.450608][ T5936] usb 3-1: USB disconnect, device number 21 [ 305.578976][ T8357] program syz.2.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 305.916407][ T5936] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 306.000205][ T8367] overlayfs: missing 'lowerdir' [ 306.086793][ T5936] usb 3-1: Using ep0 maxpacket: 8 [ 306.096205][ T5936] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 306.111389][ T5936] usb 3-1: config 0 has no interface number 0 [ 306.256476][ T5936] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 306.284127][ T5936] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 306.297814][ T5936] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 306.313494][ T5936] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 306.327736][ T5936] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 306.337866][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.368249][ T5936] usb 3-1: config 0 descriptor?? [ 306.383379][ T5936] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 306.679403][ T982] usb 2-1: USB disconnect, device number 21 [ 306.698142][ T5951] usb 3-1: USB disconnect, device number 22 [ 306.715326][ T5951] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 307.475793][ T8378] netlink: 36 bytes leftover after parsing attributes in process `syz.0.576'. [ 307.508432][ T8376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.536725][ T8376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.477097][ T8391] FAULT_INJECTION: forcing a failure. [ 308.477097][ T8391] name failslab, interval 1, probability 0, space 0, times 0 [ 308.489933][ T8391] CPU: 0 UID: 0 PID: 8391 Comm: syz.3.581 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 308.489963][ T8391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.489977][ T8391] Call Trace: [ 308.489986][ T8391] [ 308.489996][ T8391] dump_stack_lvl+0x189/0x250 [ 308.490028][ T8391] ? __pfx____ratelimit+0x10/0x10 [ 308.490056][ T8391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.490084][ T8391] ? __pfx__printk+0x10/0x10 [ 308.490120][ T8391] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 308.490158][ T8391] should_fail_ex+0x414/0x560 [ 308.490189][ T8391] should_failslab+0xa8/0x100 [ 308.490221][ T8391] ? __pfx_ip6_dst_gc+0x10/0x10 [ 308.490251][ T8391] kmem_cache_alloc_noprof+0x73/0x3c0 [ 308.490280][ T8391] ? dst_alloc+0x105/0x170 [ 308.490302][ T8391] ? __pfx_ip6_dst_gc+0x10/0x10 [ 308.490333][ T8391] dst_alloc+0x105/0x170 [ 308.490359][ T8391] ip6_pol_route+0xa21/0x1180 [ 308.490392][ T8391] ? ip6_pol_route+0x162/0x1180 [ 308.490431][ T8391] ? __pfx_ip6_pol_route+0x10/0x10 [ 308.490473][ T8391] ? __page_table_check_zero+0xba/0x530 [ 308.490506][ T8391] ? __page_table_check_zero+0xba/0x530 [ 308.490539][ T8391] fib6_rule_lookup+0x1fc/0x6f0 [ 308.490563][ T8391] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 308.490598][ T8391] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 308.490635][ T8391] ? dev_get_by_index_rcu+0xf4/0x110 [ 308.490666][ T8391] ip6_route_output_flags+0x364/0x5d0 [ 308.490688][ T8391] ? ip6_route_output_flags+0x2e/0x5d0 [ 308.490713][ T8391] ip6_dst_lookup_tail+0x299/0x1510 [ 308.490753][ T8391] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 308.490780][ T8391] ? txopt_get+0x7a/0x3f0 [ 308.490806][ T8391] ? txopt_get+0x7a/0x3f0 [ 308.490833][ T8391] ? __pfx__copy_from_iter+0x10/0x10 [ 308.490862][ T8391] ? txopt_get+0x335/0x3f0 [ 308.490890][ T8391] ? txopt_get+0x7a/0x3f0 [ 308.490924][ T8391] ? __pfx_txopt_get+0x10/0x10 [ 308.490957][ T8391] ip6_dst_lookup_flow+0x47/0xe0 [ 308.490986][ T8391] rawv6_sendmsg+0xdab/0x1820 [ 308.491033][ T8391] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 308.491091][ T8391] ? __pfx_aa_sk_perm+0x10/0x10 [ 308.491124][ T8391] ? sock_rps_record_flow+0x19/0x410 [ 308.491151][ T8391] ? inet_sendmsg+0x2f4/0x370 [ 308.491172][ T8391] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 308.491201][ T8391] __sock_sendmsg+0x19c/0x270 [ 308.491229][ T8391] __sys_sendto+0x3bd/0x520 [ 308.491261][ T8391] ? __pfx___sys_sendto+0x10/0x10 [ 308.491288][ T8391] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 308.491332][ T8391] ? __fget_files+0x3a0/0x420 [ 308.491378][ T8391] ? ksys_write+0x22a/0x250 [ 308.491418][ T8391] __ia32_sys_sendto+0xdd/0x100 [ 308.491452][ T8391] __do_fast_syscall_32+0xb6/0x2b0 [ 308.491483][ T8391] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.491515][ T8391] do_fast_syscall_32+0x34/0x80 [ 308.491545][ T8391] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 308.491573][ T8391] RIP: 0023:0xf7f11539 [ 308.491592][ T8391] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 308.491612][ T8391] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 308.491635][ T8391] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 308.491649][ T8391] RDX: 00000000000005dc RSI: 0000000020000880 RDI: 0000000000000000 [ 308.491662][ T8391] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 308.491675][ T8391] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 308.491687][ T8391] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 308.491718][ T8391] [ 309.770328][ T8410] FAULT_INJECTION: forcing a failure. [ 309.770328][ T8410] name failslab, interval 1, probability 0, space 0, times 0 [ 309.783140][ T8410] CPU: 1 UID: 0 PID: 8410 Comm: syz.1.584 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 309.783171][ T8410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 309.783183][ T8410] Call Trace: [ 309.783191][ T8410] [ 309.783200][ T8410] dump_stack_lvl+0x189/0x250 [ 309.783231][ T8410] ? __pfx____ratelimit+0x10/0x10 [ 309.783258][ T8410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.783285][ T8410] ? __pfx__printk+0x10/0x10 [ 309.783319][ T8410] ? __pfx___might_resched+0x10/0x10 [ 309.783345][ T8410] should_fail_ex+0x414/0x560 [ 309.783375][ T8410] should_failslab+0xa8/0x100 [ 309.783409][ T8410] __kmalloc_noprof+0xcb/0x4f0 [ 309.783437][ T8410] ? __kasan_kmalloc+0x93/0xb0 [ 309.783462][ T8410] ? nla_strdup+0x9d/0x140 [ 309.783503][ T8410] nla_strdup+0x9d/0x140 [ 309.783533][ T8410] nf_tables_newtable+0x491/0x1890 [ 309.783569][ T8410] ? nfnetlink_has_listeners+0x32/0x50 [ 309.783613][ T8410] nfnetlink_rcv+0x112f/0x2520 [ 309.783671][ T8410] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 309.783713][ T8410] ? ref_tracker_free+0x63a/0x7d0 [ 309.783771][ T8410] ? __netlink_deliver_tap+0x807/0x850 [ 309.783800][ T8410] ? netlink_deliver_tap+0x2e/0x1b0 [ 309.783858][ T8410] netlink_unicast+0x82f/0x9e0 [ 309.783892][ T8410] ? __pfx_netlink_unicast+0x10/0x10 [ 309.783920][ T8410] ? netlink_sendmsg+0x642/0xb30 [ 309.783945][ T8410] ? skb_put+0x11b/0x210 [ 309.783978][ T8410] netlink_sendmsg+0x805/0xb30 [ 309.784015][ T8410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.784046][ T8410] ? __import_iovec+0x5d4/0x7f0 [ 309.784065][ T8410] ? aa_sock_msg_perm+0xf1/0x1d0 [ 309.784094][ T8410] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 309.784117][ T8410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.784147][ T8410] __sock_sendmsg+0x21c/0x270 [ 309.784175][ T8410] ____sys_sendmsg+0x505/0x830 [ 309.784214][ T8410] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.784266][ T8410] ___sys_sendmsg+0x21f/0x2a0 [ 309.784300][ T8410] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.784372][ T8410] ? __fget_files+0x2a/0x420 [ 309.784405][ T8410] ? __fget_files+0x3a0/0x420 [ 309.784449][ T8410] __sys_sendmsg+0x164/0x220 [ 309.784483][ T8410] ? __pfx___sys_sendmsg+0x10/0x10 [ 309.784531][ T8410] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.784563][ T8410] __do_fast_syscall_32+0xb6/0x2b0 [ 309.784595][ T8410] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.784627][ T8410] do_fast_syscall_32+0x34/0x80 [ 309.784656][ T8410] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 309.784684][ T8410] RIP: 0023:0xf70ee539 [ 309.784704][ T8410] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 309.784723][ T8410] RSP: 002b:00000000f54de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 309.784745][ T8410] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080005780 [ 309.784759][ T8410] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 309.784772][ T8410] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 309.784784][ T8410] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 309.784796][ T8410] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.784834][ T8410] [ 310.099405][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.330947][ T5928] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 310.522650][ T5928] usb 4-1: config 0 has no interfaces? [ 310.534224][ T5928] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 310.637993][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.684444][ T5928] usb 4-1: Product: syz [ 310.706595][ T5928] usb 4-1: Manufacturer: syz [ 310.746417][ T5928] usb 4-1: SerialNumber: syz [ 310.786645][ T5928] usb 4-1: config 0 descriptor?? [ 311.365099][ T8430] FAULT_INJECTION: forcing a failure. [ 311.365099][ T8430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.383831][ T8430] CPU: 0 UID: 0 PID: 8430 Comm: syz.1.591 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 311.383862][ T8430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 311.383878][ T8430] Call Trace: [ 311.383887][ T8430] [ 311.383897][ T8430] dump_stack_lvl+0x189/0x250 [ 311.383928][ T8430] ? __pfx____ratelimit+0x10/0x10 [ 311.383955][ T8430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.383981][ T8430] ? __pfx__printk+0x10/0x10 [ 311.384027][ T8430] should_fail_ex+0x414/0x560 [ 311.384059][ T8430] _copy_to_user+0x31/0xb0 [ 311.384082][ T8430] simple_read_from_buffer+0xe1/0x170 [ 311.384121][ T8430] proc_fail_nth_read+0x1b3/0x220 [ 311.384151][ T8430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 311.384181][ T8430] ? rw_verify_area+0x2a6/0x4d0 [ 311.384209][ T8430] ? __lock_acquire+0xab9/0xd20 [ 311.384238][ T8430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 311.384264][ T8430] vfs_read+0x200/0x980 [ 311.384289][ T8430] ? fdget_pos+0x247/0x320 [ 311.384322][ T8430] ? __pfx___mutex_lock+0x10/0x10 [ 311.384354][ T8430] ? __pfx_vfs_read+0x10/0x10 [ 311.384384][ T8430] ? __fget_files+0x2a/0x420 [ 311.384434][ T8430] ? __fget_files+0x3a0/0x420 [ 311.384466][ T8430] ? __fget_files+0x2a/0x420 [ 311.384509][ T8430] ksys_read+0x145/0x250 [ 311.384541][ T8430] ? __pfx_ksys_read+0x10/0x10 [ 311.384574][ T8430] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.384607][ T8430] __do_fast_syscall_32+0xb6/0x2b0 [ 311.384638][ T8430] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.384669][ T8430] do_fast_syscall_32+0x34/0x80 [ 311.384698][ T8430] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 311.384726][ T8430] RIP: 0023:0xf70ee539 [ 311.384746][ T8430] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 311.384767][ T8430] RSP: 002b:00000000f54de590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 311.384789][ T8430] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54de620 [ 311.384804][ T8430] RDX: 000000000000000f RSI: 00000000f7454ff4 RDI: 0000000000000000 [ 311.384817][ T8430] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 311.384829][ T8430] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 311.384842][ T8430] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.384873][ T8430] [ 312.499998][ T8441] FAULT_INJECTION: forcing a failure. [ 312.499998][ T8441] name failslab, interval 1, probability 0, space 0, times 0 [ 312.582732][ T8441] CPU: 0 UID: 0 PID: 8441 Comm: syz.0.594 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 312.582764][ T8441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 312.582778][ T8441] Call Trace: [ 312.582786][ T8441] [ 312.582796][ T8441] dump_stack_lvl+0x189/0x250 [ 312.582828][ T8441] ? __pfx____ratelimit+0x10/0x10 [ 312.582857][ T8441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.582885][ T8441] ? __pfx__printk+0x10/0x10 [ 312.582923][ T8441] ? __pfx___might_resched+0x10/0x10 [ 312.582950][ T8441] should_fail_ex+0x414/0x560 [ 312.582981][ T8441] should_failslab+0xa8/0x100 [ 312.583017][ T8441] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 312.583050][ T8441] ? __alloc_skb+0x112/0x2d0 [ 312.583085][ T8441] __alloc_skb+0x112/0x2d0 [ 312.583119][ T8441] tipc_nl_compat_dumpit+0x34d/0x7b0 [ 312.583152][ T8441] tipc_nl_compat_recv+0x802/0xbe0 [ 312.583179][ T8441] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 312.583201][ T8441] ? __mutex_trylock_common+0x153/0x260 [ 312.583224][ T8441] ? __pfx_tipc_nl_sk_dump+0x10/0x10 [ 312.583243][ T8441] ? __pfx_tipc_nl_compat_sk_dump+0x10/0x10 [ 312.583276][ T8441] ? __pfx___mutex_trylock_common+0x10/0x10 [ 312.583300][ T8441] ? __local_bh_enable_ip+0x12d/0x1c0 [ 312.583332][ T8441] ? trace_contention_end+0x39/0x120 [ 312.583368][ T8441] genl_family_rcv_msg_doit+0x212/0x300 [ 312.583400][ T8441] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 312.583450][ T8441] genl_rcv_msg+0x60e/0x790 [ 312.583479][ T8441] ? __pfx_genl_rcv_msg+0x10/0x10 [ 312.583499][ T8441] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 312.583525][ T8441] ? __asan_memcpy+0x40/0x70 [ 312.583549][ T8441] ? __pfx_ref_tracker_free+0x10/0x10 [ 312.583586][ T8441] netlink_rcv_skb+0x208/0x470 [ 312.583613][ T8441] ? __lock_acquire+0xab9/0xd20 [ 312.583645][ T8441] ? __pfx_genl_rcv_msg+0x10/0x10 [ 312.583669][ T8441] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 312.583718][ T8441] ? down_read+0x1ad/0x2e0 [ 312.583757][ T8441] genl_rcv+0x28/0x40 [ 312.583789][ T8441] netlink_unicast+0x82f/0x9e0 [ 312.583825][ T8441] ? __pfx_netlink_unicast+0x10/0x10 [ 312.583853][ T8441] ? netlink_sendmsg+0x642/0xb30 [ 312.583880][ T8441] ? skb_put+0x11b/0x210 [ 312.583914][ T8441] netlink_sendmsg+0x805/0xb30 [ 312.583955][ T8441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.583997][ T8441] ? __import_iovec+0x5d4/0x7f0 [ 312.584016][ T8441] ? aa_sock_msg_perm+0xf1/0x1d0 [ 312.584050][ T8441] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 312.584074][ T8441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.584104][ T8441] __sock_sendmsg+0x21c/0x270 [ 312.584134][ T8441] ____sys_sendmsg+0x505/0x830 [ 312.584174][ T8441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.584227][ T8441] ___sys_sendmsg+0x21f/0x2a0 [ 312.584269][ T8441] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.584345][ T8441] ? __fget_files+0x2a/0x420 [ 312.584378][ T8441] ? __fget_files+0x3a0/0x420 [ 312.584424][ T8441] __sys_sendmsg+0x164/0x220 [ 312.584460][ T8441] ? __pfx___sys_sendmsg+0x10/0x10 [ 312.584511][ T8441] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.584543][ T8441] __do_fast_syscall_32+0xb6/0x2b0 [ 312.584575][ T8441] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.584607][ T8441] do_fast_syscall_32+0x34/0x80 [ 312.584637][ T8441] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 312.584664][ T8441] RIP: 0023:0xf7f92539 [ 312.584682][ T8441] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 312.584703][ T8441] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 312.584726][ T8441] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800016c0 [ 312.584741][ T8441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.584754][ T8441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 312.584766][ T8441] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 312.584778][ T8441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 312.584810][ T8441] [ 313.489053][ T5928] usb 4-1: USB disconnect, device number 11 [ 313.647282][ T8444] netlink: 36 bytes leftover after parsing attributes in process `syz.1.592'. [ 313.659721][ T8444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.681015][ T8444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.031989][ T8454] netlink: 'syz.0.595': attribute type 27 has an invalid length. [ 314.300615][ T8455] netlink: 36 bytes leftover after parsing attributes in process `syz.3.596'. [ 314.401051][ T8455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.941675][ T8471] netlink: 72 bytes leftover after parsing attributes in process `syz.2.598'. [ 314.970541][ T8471] netlink: 'syz.2.598': attribute type 27 has an invalid length. [ 315.756349][ T43] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 315.920502][ T8479] tipc: Started in network mode [ 315.921625][ T43] usb 5-1: config index 0 descriptor too short (expected 2084, got 36) [ 315.925602][ T8479] tipc: Node identity 6a3df1a7eefb, cluster identity 4711 [ 315.945433][ T8479] tipc: Enabled bearer , priority 0 [ 315.956435][ T8479] syzkaller0: entered promiscuous mode [ 315.964324][ T8479] syzkaller0: entered allmulticast mode [ 315.987270][ T8479] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 316.007585][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.039762][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.040192][ T8479] tipc: Resetting bearer [ 316.084764][ T43] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 316.121618][ T8478] tipc: Resetting bearer [ 316.154269][ T8478] tipc: Disabling bearer [ 316.170336][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.213938][ T43] usb 5-1: config 0 descriptor?? [ 316.502253][ T8483] FAULT_INJECTION: forcing a failure. [ 316.502253][ T8483] name failslab, interval 1, probability 0, space 0, times 0 [ 316.519253][ T8483] CPU: 0 UID: 0 PID: 8483 Comm: syz.2.604 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 316.519287][ T8483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 316.519301][ T8483] Call Trace: [ 316.519309][ T8483] [ 316.519319][ T8483] dump_stack_lvl+0x189/0x250 [ 316.519351][ T8483] ? __pfx____ratelimit+0x10/0x10 [ 316.519379][ T8483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.519405][ T8483] ? __pfx__printk+0x10/0x10 [ 316.519444][ T8483] ? __pfx___might_resched+0x10/0x10 [ 316.519465][ T8483] ? fs_reclaim_acquire+0x7d/0x100 [ 316.519510][ T8483] should_fail_ex+0x414/0x560 [ 316.519542][ T8483] should_failslab+0xa8/0x100 [ 316.519577][ T8483] __kmalloc_cache_noprof+0x70/0x3d0 [ 316.519605][ T8483] ? allocate_file_region_entries+0x1e7/0x5a0 [ 316.519638][ T8483] allocate_file_region_entries+0x1e7/0x5a0 [ 316.519677][ T8483] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 316.519718][ T8483] region_chg+0x2c4/0x3c0 [ 316.519761][ T8483] __vma_reservation_common+0x328/0x6e0 [ 316.519794][ T8483] alloc_hugetlb_folio+0x2d2/0x16a0 [ 316.519826][ T8483] ? filemap_get_entry+0xad/0x2f0 [ 316.519849][ T8483] ? filemap_get_entry+0xad/0x2f0 [ 316.519882][ T8483] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 316.519920][ T8483] ? hugetlb_fault+0x4a9/0x2970 [ 316.519961][ T8483] ? __filemap_get_folio+0x9a6/0xaf0 [ 316.519985][ T8483] ? huge_pte_alloc+0x3f3/0x620 [ 316.520021][ T8483] hugetlb_fault+0x1dc2/0x2970 [ 316.520071][ T8483] ? __pfx_hugetlb_fault+0x10/0x10 [ 316.520123][ T8483] ? __up_read+0x280/0x680 [ 316.520153][ T8483] handle_mm_fault+0x740/0x8e0 [ 316.520196][ T8483] __get_user_pages+0x1699/0x2ce0 [ 316.520221][ T8483] ? __lock_acquire+0xab9/0xd20 [ 316.520293][ T8483] __gup_longterm_locked+0x3dc/0x1660 [ 316.520352][ T8483] gup_fast_fallback+0x1e6a/0x2010 [ 316.520417][ T8483] ? __pfx_gup_fast_fallback+0x10/0x10 [ 316.520449][ T8483] ? rcu_is_watching+0x15/0xb0 [ 316.520474][ T8483] ? io_pin_pages+0x9a/0x1a0 [ 316.520501][ T8483] ? rcu_is_watching+0x15/0xb0 [ 316.520521][ T8483] ? io_pin_pages+0x9a/0x1a0 [ 316.520549][ T8483] ? is_valid_gup_args+0x11f/0x200 [ 316.520579][ T8483] ? pin_user_pages_fast+0x4d/0xb0 [ 316.520609][ T8483] io_pin_pages+0xb5/0x1a0 [ 316.520640][ T8483] io_sqe_buffer_register+0x16f/0x20a0 [ 316.520665][ T8483] ? __lock_acquire+0xab9/0xd20 [ 316.520708][ T8483] ? __might_fault+0xb0/0x130 [ 316.520739][ T8483] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 316.520790][ T8483] __io_register_rsrc_update+0x55e/0x11b0 [ 316.520845][ T8483] ? __pfx___io_register_rsrc_update+0x10/0x10 [ 316.520950][ T8483] io_register_rsrc_update+0x196/0x1a0 [ 316.520989][ T8483] ? __pfx_io_register_rsrc_update+0x10/0x10 [ 316.521027][ T8483] ? __fget_files+0x2a/0x420 [ 316.521071][ T8483] ? io_is_uring_fops+0xd/0x50 [ 316.521097][ T8483] __se_sys_io_uring_register+0x795/0x11b0 [ 316.521136][ T8483] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 316.521164][ T8483] ? ksys_write+0x22a/0x250 [ 316.521206][ T8483] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.521236][ T8483] __do_fast_syscall_32+0xb6/0x2b0 [ 316.521265][ T8483] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.521295][ T8483] do_fast_syscall_32+0x34/0x80 [ 316.521325][ T8483] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 316.521353][ T8483] RIP: 0023:0xf7f93539 [ 316.521373][ T8483] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 316.521391][ T8483] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 00000000000001ab [ 316.521415][ T8483] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000010 [ 316.521429][ T8483] RDX: 0000000080000600 RSI: 0000000000000020 RDI: 0000000000000000 [ 316.521442][ T8483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 316.521454][ T8483] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 316.521466][ T8483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 316.521500][ T8483] [ 317.199375][ T8474] trusted_key: encrypted_key: insufficient parameters specified [ 317.386603][ T8474] trusted_key: encrypted_key: master key parameter 'ݾ̙Wu' is invalid [ 317.440360][ T43] dragonrise 0003:0079:0006.0003: unknown main item tag 0x0 [ 317.440422][ T43] dragonrise 0003:0079:0006.0003: unknown main item tag 0x0 [ 317.447237][ T43] dragonrise 0003:0079:0006.0003: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.4-1/input0 [ 317.447275][ T43] dragonrise 0003:0079:0006.0003: no inputs found [ 317.447292][ T43] dragonrise 0003:0079:0006.0003: force feedback init failed [ 317.565796][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.605'. [ 317.587742][ T43] usb 5-1: USB disconnect, device number 28 [ 317.596397][ T8489] bridge_slave_1: left allmulticast mode [ 317.596428][ T8489] bridge_slave_1: left promiscuous mode [ 317.596670][ T8489] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.689985][ T8489] bridge_slave_0: left allmulticast mode [ 317.690019][ T8489] bridge_slave_0: left promiscuous mode [ 317.691047][ T8489] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.061718][ T8496] fido_id[8496]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 318.896285][ T982] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 319.054934][ T982] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 319.071297][ T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.071360][ T982] usb 5-1: Product: syz [ 319.071378][ T982] usb 5-1: Manufacturer: syz [ 319.071393][ T982] usb 5-1: SerialNumber: syz [ 319.122743][ T982] usb 5-1: config 0 descriptor?? [ 319.158496][ T982] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 319.425349][ T8517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.612'. [ 319.449546][ T8517] FAULT_INJECTION: forcing a failure. [ 319.449546][ T8517] name failslab, interval 1, probability 0, space 0, times 0 [ 319.463509][ T8517] CPU: 1 UID: 0 PID: 8517 Comm: syz.1.612 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 319.463541][ T8517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 319.463555][ T8517] Call Trace: [ 319.463564][ T8517] [ 319.463574][ T8517] dump_stack_lvl+0x189/0x250 [ 319.463615][ T8517] ? __pfx____ratelimit+0x10/0x10 [ 319.463642][ T8517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.463670][ T8517] ? __pfx__printk+0x10/0x10 [ 319.463709][ T8517] ? __pfx___might_resched+0x10/0x10 [ 319.463734][ T8517] should_fail_ex+0x414/0x560 [ 319.463762][ T8517] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 319.463789][ T8517] should_failslab+0xa8/0x100 [ 319.463813][ T8517] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 319.463839][ T8517] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 319.463871][ T8517] ? alloc_inode+0x6a/0x1b0 [ 319.463899][ T8517] ? __pfx_simple_start_creating+0x10/0x10 [ 319.463935][ T8517] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 319.463956][ T8517] alloc_inode+0x6a/0x1b0 [ 319.463980][ T8517] new_inode+0x22/0x170 [ 319.464020][ T8517] __debugfs_create_file+0x14d/0x4f0 [ 319.464054][ T8517] debugfs_create_file_full+0x3f/0x60 [ 319.464086][ T8517] ref_tracker_dir_debugfs+0x14e/0x270 [ 319.464107][ T8517] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 319.464155][ T8517] ? rcu_is_watching+0x15/0xb0 [ 319.464177][ T8517] ? alloc_netdev_mqs+0xa3/0x1170 [ 319.464205][ T8517] ? __raw_spin_lock_init+0x45/0x100 [ 319.464236][ T8517] alloc_netdev_mqs+0x26f/0x1170 [ 319.464251][ T8517] ? __pfx_vlan_setup+0x10/0x10 [ 319.464278][ T8517] rtnl_create_link+0x31f/0xd10 [ 319.464306][ T8517] rtnl_newlink_create+0x25c/0xb00 [ 319.464339][ T8517] ? __pfx___nla_validate_parse+0x10/0x10 [ 319.464370][ T8517] ? __lock_acquire+0xab9/0xd20 [ 319.464404][ T8517] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 319.464431][ T8517] ? __pfx___mutex_lock+0x10/0x10 [ 319.464470][ T8517] ? ns_capable+0x8a/0xf0 [ 319.464497][ T8517] rtnl_newlink+0x16d6/0x1c70 [ 319.464525][ T8517] ? netlink_sendmsg+0x805/0xb30 [ 319.464568][ T8517] ? __pfx_rtnl_newlink+0x10/0x10 [ 319.464663][ T8517] ? kasan_quarantine_put+0xdd/0x220 [ 319.464692][ T8517] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.464726][ T8517] ? nlmon_xmit+0xb0/0x100 [ 319.464754][ T8517] ? kmem_cache_free+0x18f/0x400 [ 319.464793][ T8517] ? __local_bh_enable_ip+0x12d/0x1c0 [ 319.464815][ T8517] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.464843][ T8517] ? __local_bh_enable_ip+0x12d/0x1c0 [ 319.464930][ T8517] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 319.464965][ T8517] ? __dev_queue_xmit+0x27b/0x3b50 [ 319.465008][ T8517] ? __dev_queue_xmit+0x27b/0x3b50 [ 319.465030][ T8517] ? __dev_queue_xmit+0x27b/0x3b50 [ 319.465055][ T8517] ? __dev_queue_xmit+0x1d79/0x3b50 [ 319.465085][ T8517] ? __lock_acquire+0xab9/0xd20 [ 319.465144][ T8517] ? __pfx_rtnl_newlink+0x10/0x10 [ 319.465177][ T8517] rtnetlink_rcv_msg+0x7cf/0xb70 [ 319.465216][ T8517] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 319.465246][ T8517] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 319.465274][ T8517] ? ref_tracker_free+0x63a/0x7d0 [ 319.465297][ T8517] ? __asan_memcpy+0x40/0x70 [ 319.465321][ T8517] ? __pfx_ref_tracker_free+0x10/0x10 [ 319.465358][ T8517] ? __skb_clone+0x63/0x7a0 [ 319.465407][ T8517] netlink_rcv_skb+0x208/0x470 [ 319.465438][ T8517] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 319.465463][ T8517] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 319.465510][ T8517] ? netlink_deliver_tap+0x2e/0x1b0 [ 319.465560][ T8517] netlink_unicast+0x82f/0x9e0 [ 319.465595][ T8517] ? __pfx_netlink_unicast+0x10/0x10 [ 319.465624][ T8517] ? netlink_sendmsg+0x642/0xb30 [ 319.465653][ T8517] ? skb_put+0x11b/0x210 [ 319.465692][ T8517] netlink_sendmsg+0x805/0xb30 [ 319.465737][ T8517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.465773][ T8517] ? __import_iovec+0x5d4/0x7f0 [ 319.465791][ T8517] ? aa_sock_msg_perm+0xf1/0x1d0 [ 319.465840][ T8517] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 319.465868][ T8517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.465904][ T8517] __sock_sendmsg+0x21c/0x270 [ 319.465938][ T8517] ____sys_sendmsg+0x505/0x830 [ 319.465983][ T8517] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.466044][ T8517] ___sys_sendmsg+0x21f/0x2a0 [ 319.466085][ T8517] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.466176][ T8517] ? __fget_files+0x2a/0x420 [ 319.466213][ T8517] ? __fget_files+0x3a0/0x420 [ 319.466265][ T8517] __sys_sendmsg+0x164/0x220 [ 319.466307][ T8517] ? __pfx___sys_sendmsg+0x10/0x10 [ 319.466365][ T8517] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.466402][ T8517] __do_fast_syscall_32+0xb6/0x2b0 [ 319.466437][ T8517] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.466472][ T8517] do_fast_syscall_32+0x34/0x80 [ 319.466506][ T8517] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 319.466614][ T8517] RIP: 0023:0xf70ee539 [ 319.466639][ T8517] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 319.466663][ T8517] RSP: 002b:00000000f54de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 319.466690][ T8517] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000280 [ 319.466707][ T8517] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 319.466721][ T8517] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 319.466735][ T8517] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 319.466749][ T8517] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.466788][ T8517] [ 319.856570][ T982] gspca_sunplus: reg_w_riv err -110 [ 319.856874][ C1] vkms_vblank_simulate: vblank timer overrun [ 319.862182][ T982] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 320.020263][ T8517] debugfs: out of free dentries, can not create file 'netdev@ffff88804719a610' [ 320.049865][ T8517] vlan2: entered allmulticast mode [ 320.056048][ T8517] bridge0: entered allmulticast mode [ 320.063183][ T8517] bridge0: port 1(vlan2) entered blocking state [ 320.069821][ T8517] bridge0: port 1(vlan2) entered disabled state [ 320.162036][ T8520] loop6: detected capacity change from 0 to 7 [ 320.188053][ T8520] Dev loop6: unable to read RDB block 7 [ 320.193864][ T8520] loop6: unable to read partition table [ 320.242881][ T8520] loop6: partition table beyond EOD, truncated [ 320.249598][ T8520] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 320.622560][ T8533] FAULT_INJECTION: forcing a failure. [ 320.622560][ T8533] name failslab, interval 1, probability 0, space 0, times 0 [ 320.636544][ T8528] netlink: 72 bytes leftover after parsing attributes in process `syz.1.614'. [ 320.663905][ T8528] netlink: 'syz.1.614': attribute type 27 has an invalid length. [ 320.759431][ T8533] CPU: 1 UID: 0 PID: 8533 Comm: syz.3.617 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 320.759454][ T8533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 320.759464][ T8533] Call Trace: [ 320.759470][ T8533] [ 320.759477][ T8533] dump_stack_lvl+0x189/0x250 [ 320.759501][ T8533] ? __pfx____ratelimit+0x10/0x10 [ 320.759521][ T8533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.759541][ T8533] ? __pfx__printk+0x10/0x10 [ 320.759567][ T8533] ? __pfx___might_resched+0x10/0x10 [ 320.759582][ T8533] ? fs_reclaim_acquire+0x7d/0x100 [ 320.759611][ T8533] should_fail_ex+0x414/0x560 [ 320.759633][ T8533] should_failslab+0xa8/0x100 [ 320.759658][ T8533] __kmalloc_noprof+0xcb/0x4f0 [ 320.759679][ T8533] ? nf_conncount_list_init+0x36/0x100 [ 320.759701][ T8533] ? nft_set_elem_init+0xa8/0x7e0 [ 320.759722][ T8533] nft_set_elem_init+0xa8/0x7e0 [ 320.759739][ T8533] ? nft_set_elem_expr_clone+0x96b/0xa90 [ 320.759764][ T8533] nf_tables_newsetelem+0x220e/0x4340 [ 320.759821][ T8533] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 320.759864][ T8533] ? nla_validate_array+0xfc/0x260 [ 320.759908][ T8533] ? __pfx___nla_validate_parse+0x10/0x10 [ 320.759933][ T8533] ? __lock_acquire+0xab9/0xd20 [ 320.759964][ T8533] ? nfnl_pernet+0x23/0x240 [ 320.759988][ T8533] ? __nla_parse+0x40/0x60 [ 320.760011][ T8533] nfnetlink_rcv+0x112f/0x2520 [ 320.760053][ T8533] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 320.760083][ T8533] ? ref_tracker_free+0x63a/0x7d0 [ 320.760123][ T8533] ? __netlink_deliver_tap+0x807/0x850 [ 320.760143][ T8533] ? netlink_deliver_tap+0x2e/0x1b0 [ 320.760177][ T8533] netlink_unicast+0x82f/0x9e0 [ 320.760202][ T8533] ? __pfx_netlink_unicast+0x10/0x10 [ 320.760221][ T8533] ? netlink_sendmsg+0x642/0xb30 [ 320.760240][ T8533] ? skb_put+0x11b/0x210 [ 320.760265][ T8533] netlink_sendmsg+0x805/0xb30 [ 320.760293][ T8533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.760316][ T8533] ? __import_iovec+0x5d4/0x7f0 [ 320.760329][ T8533] ? aa_sock_msg_perm+0xf1/0x1d0 [ 320.760352][ T8533] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 320.760369][ T8533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.760391][ T8533] __sock_sendmsg+0x21c/0x270 [ 320.760421][ T8533] ____sys_sendmsg+0x505/0x830 [ 320.760453][ T8533] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.760489][ T8533] ___sys_sendmsg+0x21f/0x2a0 [ 320.760514][ T8533] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.760565][ T8533] ? __fget_files+0x2a/0x420 [ 320.760588][ T8533] ? __fget_files+0x3a0/0x420 [ 320.760620][ T8533] __sys_sendmsg+0x164/0x220 [ 320.760645][ T8533] ? __pfx___sys_sendmsg+0x10/0x10 [ 320.760681][ T8533] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.760703][ T8533] __do_fast_syscall_32+0xb6/0x2b0 [ 320.760726][ T8533] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.760748][ T8533] do_fast_syscall_32+0x34/0x80 [ 320.760769][ T8533] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.760789][ T8533] RIP: 0023:0xf7f11539 [ 320.760803][ T8533] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 320.760817][ T8533] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 320.760833][ T8533] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 320.760844][ T8533] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 320.760852][ T8533] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 320.760861][ T8533] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 320.760869][ T8533] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.760890][ T8533] [ 321.116632][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.637550][ T8545] FAULT_INJECTION: forcing a failure. [ 321.637550][ T8545] name failslab, interval 1, probability 0, space 0, times 0 [ 321.664781][ T8545] CPU: 1 UID: 0 PID: 8545 Comm: syz.1.621 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 321.664813][ T8545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 321.664832][ T8545] Call Trace: [ 321.664841][ T8545] [ 321.664850][ T8545] dump_stack_lvl+0x189/0x250 [ 321.664882][ T8545] ? __pfx____ratelimit+0x10/0x10 [ 321.664910][ T8545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.664937][ T8545] ? __pfx__printk+0x10/0x10 [ 321.664969][ T8545] ? __pfx___might_resched+0x10/0x10 [ 321.664986][ T8545] ? fs_reclaim_acquire+0x7d/0x100 [ 321.665018][ T8545] should_fail_ex+0x414/0x560 [ 321.665043][ T8545] should_failslab+0xa8/0x100 [ 321.665071][ T8545] __kmalloc_noprof+0xcb/0x4f0 [ 321.665094][ T8545] ? kfree+0x4d/0x440 [ 321.665114][ T8545] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 321.665145][ T8545] tomoyo_realpath_from_path+0xe3/0x5d0 [ 321.665173][ T8545] ? tomoyo_domain+0xd9/0x130 [ 321.665205][ T8545] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 321.665227][ T8545] tomoyo_path_number_perm+0x1e8/0x5a0 [ 321.665251][ T8545] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 321.665288][ T8545] ? __lock_acquire+0xab9/0xd20 [ 321.665339][ T8545] ? __fget_files+0x2a/0x420 [ 321.665369][ T8545] ? __fget_files+0x3a0/0x420 [ 321.665396][ T8545] ? __fget_files+0x2a/0x420 [ 321.665426][ T8545] security_file_ioctl_compat+0xcb/0x2d0 [ 321.665450][ T8545] __ia32_compat_sys_ioctl+0x128/0x840 [ 321.665476][ T8545] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 321.665500][ T8545] ? __fget_files+0x3a0/0x420 [ 321.665532][ T8545] ? fput+0xa0/0xd0 [ 321.665552][ T8545] ? ksys_write+0x22a/0x250 [ 321.665584][ T8545] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.665609][ T8545] __do_fast_syscall_32+0xb6/0x2b0 [ 321.665634][ T8545] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.665659][ T8545] do_fast_syscall_32+0x34/0x80 [ 321.665683][ T8545] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.665705][ T8545] RIP: 0023:0xf70ee539 [ 321.665721][ T8545] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 321.665737][ T8545] RSP: 002b:00000000f54de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 321.665756][ T8545] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080e05411 [ 321.665768][ T8545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 321.665778][ T8545] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 321.665787][ T8545] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 321.665798][ T8545] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 321.665822][ T8545] [ 321.665898][ T8545] ERROR: Out of memory at tomoyo_realpath_from_path. [ 321.692555][ T982] usb 5-1: USB disconnect, device number 29 [ 321.947542][ T5857] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 322.128636][ T5857] usb 3-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 322.138094][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.158911][ T5857] usb 3-1: config 0 descriptor?? [ 322.316365][ T982] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 322.478692][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.490628][ T982] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 322.501887][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.516035][ T982] usb 5-1: config 0 descriptor?? [ 322.604588][ T5857] kye 0003:0458:5017.0004: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 322.624273][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.624367][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.699848][ T5857] kye 0003:0458:5017.0004: hidraw0: USB HID v0.00 Device [HID 0458:5017] on usb-dummy_hcd.2-1/input0 [ 322.714131][ T5857] kye 0003:0458:5017.0004: tablet-enabling feature report not found [ 322.724205][ T5857] kye 0003:0458:5017.0004: tablet enabling failed [ 322.741761][ T982] usbhid 5-1:0.0: can't add hid device: -71 [ 322.786305][ T982] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 322.941858][ T982] usb 5-1: USB disconnect, device number 30 [ 323.267535][ T5857] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 323.336460][ T982] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 323.396231][ T5936] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 323.482251][ T5857] usb 1-1: config 0 has no interfaces? [ 323.491717][ T982] usb 5-1: device descriptor read/64, error -71 [ 323.514260][ T5857] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 323.528011][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.538228][ T5857] usb 1-1: Product: syz [ 323.542781][ T5857] usb 1-1: Manufacturer: syz [ 323.550012][ T5857] usb 1-1: SerialNumber: syz [ 323.571859][ T5936] usb 2-1: config 0 has an invalid descriptor of length 191, skipping remainder of the config [ 323.573839][ T5857] usb 1-1: config 0 descriptor?? [ 323.590880][ T5936] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 323.615488][ T5936] usb 2-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 323.616328][ T5951] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 323.625236][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.676607][ T5936] usb 2-1: config 0 descriptor?? [ 323.694764][ T5936] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 323.756273][ T982] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 323.788820][ T5951] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 323.804439][ T5951] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 323.814959][ T5951] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 323.825992][ T5951] usb 4-1: config 220 has no interface number 2 [ 323.833270][ T5951] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 323.847643][ T5951] usb 4-1: config 220 interface 0 has no altsetting 0 [ 323.860298][ T5951] usb 4-1: config 220 interface 76 has no altsetting 0 [ 323.867848][ T5951] usb 4-1: config 220 interface 1 has no altsetting 0 [ 323.881626][ T5951] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 323.882546][ T5936] usb 3-1: USB disconnect, device number 23 [ 323.907943][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'. [ 323.917584][ T982] usb 5-1: device descriptor read/64, error -71 [ 323.940721][ T8566] capability: warning: `syz.0.627' uses deprecated v2 capabilities in a way that may be insecure [ 323.986319][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.005602][ T5951] usb 4-1: Product: syz [ 324.061352][ T982] usb usb5-port1: attempt power cycle [ 324.072406][ T5951] usb 4-1: Manufacturer: syz [ 324.084108][ T5951] usb 4-1: SerialNumber: syz [ 324.260038][ T8576] netlink: 72 bytes leftover after parsing attributes in process `syz.2.630'. [ 324.392746][ T8576] netlink: 'syz.2.630': attribute type 27 has an invalid length. [ 324.441531][ T982] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 324.467455][ T5951] usb 4-1: selecting invalid altsetting 0 [ 324.489756][ T982] usb 5-1: device descriptor read/8, error -71 [ 324.501490][ T5951] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 324.511113][ T5951] usb 4-1: No valid video chain found. [ 324.535052][ T5951] usb 4-1: selecting invalid altsetting 0 [ 324.551685][ T5951] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 324.588789][ T5951] usb 4-1: USB disconnect, device number 12 [ 324.787051][ T982] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 324.828719][ T982] usb 5-1: device descriptor read/8, error -71 [ 325.018525][ T982] usb usb5-port1: unable to enumerate USB device [ 325.199014][ T8582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.631'. [ 325.267890][ T8582] vlan3: entered allmulticast mode [ 325.273311][ T8582] bridge0: entered allmulticast mode [ 325.280494][ T8582] bridge1: port 1(vlan3) entered blocking state [ 325.291524][ T8582] bridge1: port 1(vlan3) entered disabled state [ 325.303758][ T8582] vlan3: entered promiscuous mode [ 325.550540][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'. [ 325.564500][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'. [ 325.713717][ T43] usb 1-1: USB disconnect, device number 11 [ 326.183723][ T982] usb 2-1: USB disconnect, device number 22 [ 326.519327][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'. [ 326.573694][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'. [ 326.596436][ T982] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 326.780736][ T982] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 326.794344][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.808100][ T982] usb 2-1: config 0 descriptor?? [ 326.890731][ T5928] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 327.037364][ T982] chicony 0003:04F2:1236.0005: unknown main item tag 0x4 [ 327.047610][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 327.053117][ T982] chicony 0003:04F2:1236.0005: item fetching failed at offset 4/5 [ 327.063013][ T5928] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 327.064266][ T982] chicony 0003:04F2:1236.0005: Chicony hid parse failed: -22 [ 327.071846][ T5928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.109424][ T43] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 327.123008][ T982] chicony 0003:04F2:1236.0005: probe with driver chicony failed with error -22 [ 327.243154][ T5928] usb 3-1: config 0 has no interface number 0 [ 327.253069][ T5928] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 327.262524][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.270827][ T5928] usb 3-1: Product: syz [ 327.275200][ T5928] usb 3-1: Manufacturer: syz [ 327.276872][ T982] usb 2-1: USB disconnect, device number 23 [ 327.280701][ T5928] usb 3-1: SerialNumber: syz [ 327.306257][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 327.312355][ T43] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 327.324996][ T43] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 327.337654][ T5928] usb 3-1: config 0 descriptor?? [ 327.346215][ T43] usb 1-1: can't read configurations, error -61 [ 327.369270][ T5928] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 327.375750][ T5928] usb 3-1: No valid video chain found. [ 327.476256][ T43] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 327.564339][ T982] usb 3-1: USB disconnect, device number 24 [ 327.628981][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 327.639033][ T43] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 327.660442][ T43] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 327.668397][ T43] usb 1-1: can't read configurations, error -61 [ 327.675268][ T43] usb usb1-port1: attempt power cycle [ 327.761089][ T8620] netlink: 72 bytes leftover after parsing attributes in process `syz.3.644'. [ 327.789151][ T8620] netlink: 'syz.3.644': attribute type 27 has an invalid length. [ 328.036218][ T43] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 328.176953][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 328.183390][ T43] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 328.200318][ T43] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 328.289769][ T43] usb 1-1: can't read configurations, error -61 [ 328.632491][ T43] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 328.816673][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 329.008443][ T43] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 329.096395][ T43] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 329.104209][ T43] usb 1-1: can't read configurations, error -61 [ 329.111018][ T43] usb usb1-port1: unable to enumerate USB device [ 329.823162][ T8638] tipc: Enabling of bearer rejected, failed to enable media [ 330.122366][ T8642] IPVS: set_ctl: invalid protocol: 255 172.20.20.15:20003 [ 330.135928][ T8642] netlink: 'syz.3.650': attribute type 10 has an invalid length. [ 330.356053][ T8642] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.395996][ T8642] bond0: (slave team0): Enslaving as an active interface with an up link [ 331.160756][ T8662] FAULT_INJECTION: forcing a failure. [ 331.160756][ T8662] name failslab, interval 1, probability 0, space 0, times 0 [ 331.200589][ T8662] CPU: 1 UID: 0 PID: 8662 Comm: syz.3.654 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 331.200621][ T8662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 331.200634][ T8662] Call Trace: [ 331.200643][ T8662] [ 331.200652][ T8662] dump_stack_lvl+0x189/0x250 [ 331.200683][ T8662] ? __pfx____ratelimit+0x10/0x10 [ 331.200709][ T8662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.200735][ T8662] ? __pfx__printk+0x10/0x10 [ 331.200769][ T8662] ? __pfx___might_resched+0x10/0x10 [ 331.200789][ T8662] ? fs_reclaim_acquire+0x7d/0x100 [ 331.200828][ T8662] should_fail_ex+0x414/0x560 [ 331.200859][ T8662] should_failslab+0xa8/0x100 [ 331.200893][ T8662] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 331.200923][ T8662] ? __alloc_skb+0x112/0x2d0 [ 331.200956][ T8662] __alloc_skb+0x112/0x2d0 [ 331.200994][ T8662] alloc_uevent_skb+0x7d/0x230 [ 331.201033][ T8662] kobject_uevent_net_broadcast+0x2fa/0x560 [ 331.201074][ T8662] kobject_uevent_env+0x55b/0x8c0 [ 331.201118][ T8662] kvm_uevent_notify_change+0x301/0x3a0 [ 331.201142][ T8662] ? __pfx_kvm_vm_release+0x10/0x10 [ 331.201166][ T8662] kvm_put_kvm+0xa8/0x1670 [ 331.201190][ T8662] ? _raw_spin_unlock_irq+0x2e/0x50 [ 331.201213][ T8662] ? kvm_irqfd_release+0x196/0x1c0 [ 331.201243][ T8662] ? evm_file_release+0x108/0x1e0 [ 331.201264][ T8662] ? __pfx_kvm_vm_release+0x10/0x10 [ 331.201287][ T8662] kvm_vm_release+0x43/0x50 [ 331.201309][ T8662] __fput+0x44c/0xa70 [ 331.201353][ T8662] fput_close_sync+0x119/0x200 [ 331.201379][ T8662] ? dnotify_flush+0x1db/0x5e0 [ 331.201402][ T8662] ? __pfx_fput_close_sync+0x10/0x10 [ 331.201425][ T8662] ? do_raw_spin_unlock+0x122/0x240 [ 331.201462][ T8662] __ia32_sys_close+0x7f/0x110 [ 331.201487][ T8662] __do_fast_syscall_32+0xb6/0x2b0 [ 331.201518][ T8662] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.201550][ T8662] do_fast_syscall_32+0x34/0x80 [ 331.201579][ T8662] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.201607][ T8662] RIP: 0023:0xf7f11539 [ 331.201624][ T8662] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 331.201644][ T8662] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000006 [ 331.201667][ T8662] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 331.201680][ T8662] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 331.201692][ T8662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 331.201704][ T8662] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 331.201717][ T8662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 331.201748][ T8662] [ 331.469805][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.856503][ T8665] netlink: 'syz.1.655': attribute type 4 has an invalid length. [ 331.958159][ T8671] FAULT_INJECTION: forcing a failure. [ 331.958159][ T8671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.006454][ T8671] CPU: 0 UID: 0 PID: 8671 Comm: syz.0.656 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 332.006485][ T8671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 332.006499][ T8671] Call Trace: [ 332.006507][ T8671] [ 332.006516][ T8671] dump_stack_lvl+0x189/0x250 [ 332.006549][ T8671] ? __pfx____ratelimit+0x10/0x10 [ 332.006586][ T8671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.006612][ T8671] ? __pfx__printk+0x10/0x10 [ 332.006644][ T8671] ? __might_fault+0xb0/0x130 [ 332.006687][ T8671] should_fail_ex+0x414/0x560 [ 332.006717][ T8671] _copy_from_iter+0x1db/0x16f0 [ 332.006753][ T8671] ? rcu_is_watching+0x15/0xb0 [ 332.006777][ T8671] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 332.006809][ T8671] ? __pfx__copy_from_iter+0x10/0x10 [ 332.006843][ T8671] ? __build_skb_around+0x257/0x3e0 [ 332.006877][ T8671] ? netlink_sendmsg+0x642/0xb30 [ 332.006903][ T8671] ? skb_put+0x11b/0x210 [ 332.006937][ T8671] netlink_sendmsg+0x6b2/0xb30 [ 332.006977][ T8671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.007008][ T8671] ? __import_iovec+0x5d4/0x7f0 [ 332.007026][ T8671] ? aa_sock_msg_perm+0xf1/0x1d0 [ 332.007059][ T8671] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 332.007082][ T8671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.007113][ T8671] __sock_sendmsg+0x21c/0x270 [ 332.007142][ T8671] ____sys_sendmsg+0x505/0x830 [ 332.007180][ T8671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.007231][ T8671] ___sys_sendmsg+0x21f/0x2a0 [ 332.007267][ T8671] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.007354][ T8671] ? __fget_files+0x2a/0x420 [ 332.007386][ T8671] ? __fget_files+0x3a0/0x420 [ 332.007431][ T8671] __sys_sendmsg+0x164/0x220 [ 332.007465][ T8671] ? __pfx___sys_sendmsg+0x10/0x10 [ 332.007515][ T8671] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.007546][ T8671] __do_fast_syscall_32+0xb6/0x2b0 [ 332.007583][ T8671] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.007614][ T8671] do_fast_syscall_32+0x34/0x80 [ 332.007643][ T8671] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 332.007670][ T8671] RIP: 0023:0xf7f92539 [ 332.007689][ T8671] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 332.007710][ T8671] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 332.007732][ T8671] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 332.007748][ T8671] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 332.007760][ T8671] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 332.007772][ T8671] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 332.007784][ T8671] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 332.007814][ T8671] [ 332.157762][ T8676] netlink: 72 bytes leftover after parsing attributes in process `syz.3.658'. [ 332.471857][ T8679] FAULT_INJECTION: forcing a failure. [ 332.471857][ T8679] name failslab, interval 1, probability 0, space 0, times 0 [ 332.527962][ T8679] CPU: 1 UID: 0 PID: 8679 Comm: syz.1.660 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 332.527994][ T8679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 332.528007][ T8679] Call Trace: [ 332.528016][ T8679] [ 332.528026][ T8679] dump_stack_lvl+0x189/0x250 [ 332.528067][ T8679] ? __pfx____ratelimit+0x10/0x10 [ 332.528094][ T8679] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.528125][ T8679] ? __pfx__printk+0x10/0x10 [ 332.528163][ T8679] ? __pfx___might_resched+0x10/0x10 [ 332.528184][ T8679] ? fs_reclaim_acquire+0x7d/0x100 [ 332.528224][ T8679] should_fail_ex+0x414/0x560 [ 332.528254][ T8679] should_failslab+0xa8/0x100 [ 332.528288][ T8679] __kmalloc_cache_noprof+0x70/0x3d0 [ 332.528318][ T8679] ? snd_mixer_oss_put_volume1_sw+0xbe/0x3f0 [ 332.528349][ T8679] snd_mixer_oss_put_volume1_sw+0xbe/0x3f0 [ 332.528380][ T8679] snd_mixer_oss_put_volume1+0x38e/0x8b0 [ 332.528409][ T8679] snd_mixer_oss_ioctl1+0x6ab/0x19f0 [ 332.528452][ T8679] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 332.528521][ T8679] ? __fget_files+0x2a/0x420 [ 332.528559][ T8679] ? __fget_files+0x3a0/0x420 [ 332.528600][ T8679] snd_mixer_oss_ioctl_compat+0x46/0x60 [ 332.528637][ T8679] __ia32_compat_sys_ioctl+0x540/0x840 [ 332.528669][ T8679] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 332.528698][ T8679] ? __fget_files+0x3a0/0x420 [ 332.528739][ T8679] ? fput+0xa0/0xd0 [ 332.528762][ T8679] ? ksys_write+0x22a/0x250 [ 332.528800][ T8679] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.528831][ T8679] __do_fast_syscall_32+0xb6/0x2b0 [ 332.528861][ T8679] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.528891][ T8679] do_fast_syscall_32+0x34/0x80 [ 332.528919][ T8679] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 332.528946][ T8679] RIP: 0023:0xf70ee539 [ 332.528964][ T8679] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 332.528984][ T8679] RSP: 002b:00000000f54de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 332.529006][ T8679] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0044d03 [ 332.529020][ T8679] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 332.529033][ T8679] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 332.529044][ T8679] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 332.529056][ T8679] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 332.529085][ T8679] [ 332.778320][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.003288][ T8675] netlink: 'syz.3.658': attribute type 27 has an invalid length. [ 335.216437][ T982] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 335.456917][ T982] usb 2-1: Using ep0 maxpacket: 32 [ 335.495107][ T982] usb 2-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.511751][ T982] usb 2-1: config 0 interface 0 has no altsetting 0 [ 335.522444][ T982] usb 2-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 335.804477][ T8719] netlink: 36 bytes leftover after parsing attributes in process `syz.2.670'. [ 335.851632][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.881819][ T8718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.905833][ T982] usb 2-1: config 0 descriptor?? [ 335.922018][ T8718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.942954][ T982] usb 2-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 336.003467][ T982] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 336.107110][ T982] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 336.113945][ T982] usb 2-1: media controller created [ 336.182669][ T8714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.192443][ T8714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.259882][ T8714] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] SMP KASAN PTI [ 336.271911][ T8714] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 336.280344][ T8714] CPU: 0 UID: 0 PID: 8714 Comm: syz.1.668 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 336.291890][ T8714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.302038][ T8714] RIP: 0010:__mutex_lock+0x13b/0x1360 [ 336.307440][ T8714] Code: 20 43 ab 99 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 3d 10 00 00 83 3d 03 1f 31 0e 00 75 23 49 8d 7c 24 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 19 f2 a8 f6 4d 39 64 24 60 0f 85 3f 0f 00 [ 336.327281][ T8714] RSP: 0018:ffffc9001dbfeec0 EFLAGS: 00010202 [ 336.333392][ T8714] RAX: 0000000000000019 RBX: ffffc9001dbfefa0 RCX: ffffffff99ab4303 [ 336.341399][ T8714] RDX: ffff888029f48000 RSI: ffffffff8dba3778 RDI: 00000000000000c8 [ 336.349409][ T8714] RBP: ffffc9001dbff078 R08: ffffc9001dbfefe7 R09: 0000000000000000 [ 336.357501][ T8714] R10: ffffc9001dbfefc0 R11: fffff52003b7fdfd R12: 0000000000000068 [ 336.365507][ T8714] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 336.373516][ T8714] FS: 0000000000000000(0000) GS:ffff888125c21000(0063) knlGS:00000000f54deb40 [ 336.382509][ T8714] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 336.389133][ T8714] CR2: 000000005720999c CR3: 000000007fb34000 CR4: 00000000003526f0 [ 336.397250][ T8714] Call Trace: [ 336.400561][ T8714] [ 336.403530][ T8714] ? __mutex_lock+0x335/0x1360 [ 336.408340][ T8714] ? __mutex_trylock_common+0x153/0x260 [ 336.413925][ T8714] ? dvb_usbv2_generic_write+0x26/0x60 [ 336.419431][ T8714] ? mxl111sf_ctrl_msg+0xad/0x2e0 [ 336.424513][ T8714] ? __pfx___mutex_lock+0x10/0x10 [ 336.429582][ T8714] ? __pfx___mutex_lock+0x10/0x10 [ 336.434733][ T8714] ? rcu_is_watching+0x15/0xb0 [ 336.439540][ T8714] dvb_usbv2_generic_write+0x26/0x60 [ 336.444952][ T8714] mxl111sf_ctrl_msg+0x16a/0x2e0 [ 336.449940][ T8714] mxl111sf_write_reg+0xa0/0x180 [ 336.454919][ T8714] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 336.460512][ T8714] mxl111sf_i2c_xfer+0x461/0x4f00 [ 336.465623][ T8714] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 336.471208][ T8714] ? __lock_acquire+0xab9/0xd20 [ 336.476102][ T8714] ? __lock_acquire+0xab9/0xd20 [ 336.481017][ T8714] ? __lock_acquire+0xab9/0xd20 [ 336.485919][ T8714] ? __lock_acquire+0xab9/0xd20 [ 336.490872][ T8714] ? is_bpf_text_address+0x26/0x2b0 [ 336.496128][ T8714] ? is_bpf_text_address+0x292/0x2b0 [ 336.501583][ T8714] ? is_bpf_text_address+0x26/0x2b0 [ 336.506841][ T8714] ? kernel_text_address+0xa5/0xe0 [ 336.512096][ T8714] ? __kernel_text_address+0xd/0x40 [ 336.517338][ T8714] ? unwind_get_return_address+0x4d/0x90 [ 336.523010][ T8714] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 336.529206][ T8714] __i2c_transfer+0x871/0x2170 [ 336.534026][ T8714] ? stack_depot_save_flags+0x40/0x860 [ 336.539539][ T8714] ? __pfx___i2c_transfer+0x10/0x10 [ 336.544804][ T8714] ? look_up_lock_class+0x74/0x170 [ 336.550056][ T8714] __i2c_smbus_xfer+0xfb0/0x1e50 [ 336.555035][ T8714] ? __lock_acquire+0xab9/0xd20 [ 336.559941][ T8714] ? do_raw_spin_lock+0x121/0x290 [ 336.565010][ T8714] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 336.570420][ T8714] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 336.576363][ T8714] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 336.582300][ T8714] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 336.588766][ T8714] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 336.594198][ T8714] i2c_smbus_xfer+0x275/0x3c0 [ 336.598916][ T8714] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 336.604158][ T8714] ? __lock_acquire+0xab9/0xd20 [ 336.609066][ T8714] i2cdev_ioctl_smbus+0x43d/0x6d0 [ 336.614154][ T8714] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 336.619764][ T8714] compat_i2cdev_ioctl+0x299/0x5c0 [ 336.624955][ T8714] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 336.630638][ T8714] ? __fget_files+0x3a0/0x420 [ 336.635391][ T8714] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 336.641015][ T8714] __ia32_compat_sys_ioctl+0x540/0x840 [ 336.646531][ T8714] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 336.652561][ T8714] ? __se_sys_futex_time32+0x360/0x3e0 [ 336.658079][ T8714] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.663326][ T8714] __do_fast_syscall_32+0xb6/0x2b0 [ 336.668515][ T8714] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.673762][ T8714] do_fast_syscall_32+0x34/0x80 [ 336.678666][ T8714] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 336.685049][ T8714] RIP: 0023:0xf70ee539 [ 336.689151][ T8714] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 336.708791][ T8714] RSP: 002b:00000000f54de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 336.717267][ T8714] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000720 [ 336.725279][ T8714] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 336.733281][ T8714] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 336.741284][ T8714] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 336.749287][ T8714] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 336.757469][ T8714] [ 336.760501][ T8714] Modules linked in: [ 336.765122][ T8714] ---[ end trace 0000000000000000 ]--- [ 336.775140][ T982] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 336.776293][ T8714] RIP: 0010:__mutex_lock+0x13b/0x1360 [ 336.852067][ T8714] Code: 20 43 ab 99 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 3d 10 00 00 83 3d 03 1f 31 0e 00 75 23 49 8d 7c 24 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 19 f2 a8 f6 4d 39 64 24 60 0f 85 3f 0f 00 [ 336.906702][ T8714] RSP: 0018:ffffc9001dbfeec0 EFLAGS: 00010202 [ 336.924501][ T8714] RAX: 0000000000000019 RBX: ffffc9001dbfefa0 RCX: ffffffff99ab4303 [ 336.966225][ T8714] RDX: ffff888029f48000 RSI: ffffffff8dba3778 RDI: 00000000000000c8 [ 336.989582][ T8728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.023058][ T8728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.063498][ T8714] RBP: ffffc9001dbff078 R08: ffffc9001dbfefe7 R09: 0000000000000000 [ 337.095258][ T8714] R10: ffffc9001dbfefc0 R11: fffff52003b7fdfd R12: 0000000000000068 [ 337.110913][ T8714] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 337.123740][ T8714] FS: 0000000000000000(0000) GS:ffff888125d21000(0063) knlGS:00000000f54deb40 [ 337.140297][ T8714] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 337.147776][ T8714] CR2: 0000000032d22ff8 CR3: 000000007fb34000 CR4: 00000000003526f0 [ 337.158399][ T8714] Kernel panic - not syncing: Fatal exception [ 337.171064][ T8714] Kernel Offset: disabled [ 337.175421][ T8714] Rebooting in 86400 seconds..