last executing test programs: 20.036085466s ago: executing program 3 (id=2493): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @vbi={0x0, 0x0, 0x0, 0x34343452}}) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x9) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="484000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000410000020001280080001007674690014000280080004006401010108000200000000000800040000000000"], 0x48}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x24}, 0x2}, 0x1c) 15.942024812s ago: executing program 3 (id=2505): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r0, 0x18) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xfe) socket$kcm(0x11, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}]}, 0x48}}, 0x40800) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ce\x00'}, 0x58) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x10000, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r9, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r11, 0x80000001}}, 0xffffffffffffff51) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000000c0), 0x0) r12 = accept4(r7, 0x0, 0x0, 0x80000) sendmsg$alg(r12, 0x0, 0x0) recvmsg$can_raw(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/103, 0x67}], 0x1}, 0x40010022) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000180)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05", @ANYBLOB='88'], 0x0) socket(0x11, 0x3, 0xffffff4c) 13.215677179s ago: executing program 0 (id=2518): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vim2m(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x10, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x8000}, 0x0, {0x0, r6}}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r7, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x2, 0xffffffff}}, 0x50) chmod(&(0x7f0000000080)='./file0\x00', 0x1) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1bc, 0x194, 0x194, 0x1bc, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @empty, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x2}, 0x0, 0xc8, 0xec, 0x0, {0x0, 0x74020000}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x14, 0x1, 0x4, 0x800, 0x8, 0x10, 0x8, 0x8, 0x20}, {0x9}}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x14, 0x9, 0xa}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'veth1_virt_wifi\x00', {}, {}, 0x16}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x0, 0x3, 0x4, 0xb, 0x2, 0x7], 0x2, 0x3}, {0x2, [0x0, 0x3, 0x5a5f10ce25ae771f, 0x0, 0x2, 0x1], 0x3, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2ac) getsockopt$inet6_mreq(r8, 0x6, 0x14, 0x0, &(0x7f0000001840)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x78a0, 0x1, 0x80, 0x200, {{0x11, 0x4, 0x2, 0x5, 0x44, 0x67, 0x0, 0x4, 0x4, 0x0, @multicast1, @rand_addr=0x64010100, {[@lsrr={0x83, 0x1b, 0xee, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1, @rand_addr=0x64010102, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x14, 0xa0, 0x1, 0x1, [{@rand_addr=0x64010101, 0x9}, {@rand_addr=0x64010102, 0x3}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000100)={'syztnl2\x00', r10, 0x1, 0x8, 0xe2, 0xfffffff8, {{0x20, 0x4, 0x2, 0x16, 0x80, 0x67, 0x0, 0xff, 0x0, 0x0, @local, @broadcast, {[@timestamp_addr={0x44, 0x2c, 0x9e, 0x1, 0x9, [{@broadcast, 0xfffffffa}, {@rand_addr=0x64010100, 0x9}, {@local, 0x3}, {@remote, 0xfff}, {@local, 0x7fffffff}]}, @ssrr={0x89, 0x23, 0x9, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x23}, @dev={0xac, 0x14, 0x14, 0x1f}, @private=0xa010102, @broadcast, @multicast2, @remote]}, @end, @timestamp_prespec={0x44, 0x1c, 0xa2, 0x3, 0xe, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x116}, {@rand_addr=0x64010100, 0x40}, {@empty, 0x3}]}]}}}}}) r11 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r12 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r11) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000002c0)="0000000000000002ff6900000000000100000018009b3900000200861f4104bfeacdd5a9007d16dcdc2850b536f043ca", 0x30, r12) getpid() setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000340)='scalable\x00', 0x9) 12.592232208s ago: executing program 0 (id=2520): syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x2, {0x0, 0xf0, 0x3}}, 0x18) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x26c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf95}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x30000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc5e9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3e87000}]}]}, @TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "95a4dacb89f2cde4a2403014aa123ff9d2f52c1d79470ec55e1ee449"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_ID={0xb1, 0x3, "04ac634db6d9d421b29b652718335183c7da34fe68450de87fa5dfede2ad39e9eb2395b12af424a11b1f4608f1460b7c983e4731890dc782ca68e2910cf5137d7939be4163bfe6042dff319d91e88fde61d28d8aef0a84b14c54e264a11aaff9574b40858e4649579769a5f03d002ecfaf2bf50a50c8e616d1f008656552f95f7f7d873e154afbbccae1dfce32605f40abf769ee65cebd68518e6d1a281c682f25d885214c4c0fea5754b4136e"}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9a8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4293, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3377}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}]}]}, 0x26c}}, 0x0) 12.231919279s ago: executing program 3 (id=2521): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbmon(0x0, 0x6, 0x80) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSACTIVE(r2, 0x40087446, &(0x7f00000007c0)={0x1, &(0x7f0000000080)=[{0x15, 0xd, 0x1}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c100000000000224e0000", 0x58}], 0x1) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030500000000000700", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB="1840ceb295acb02a294bfa8cf044c8977d0f767c8de2b5202ee3e3290104cf800d115483c439be3814286005786f"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r7}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r8, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$KDADDIO(r7, 0x4b34, 0x6) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x77359400}, 0x0) 10.598207439s ago: executing program 0 (id=2526): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x1856, 0x4, 0xffff, 0xfffffff9, 0x11, "0e80706e6c06a79874342a0e0d13343972d01f"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) read$FUSE(r1, &(0x7f00000040c0)={0x2020}, 0xf4d) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000069000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/12, 0xc, 0x0, &(0x7f00000000c0)=""/100, 0x64}, &(0x7f0000000180)=0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x800000000000057, 0x20000000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r6, r5], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xd) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 10.330886884s ago: executing program 1 (id=2528): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064d1, &(0x7f0000000e00)={0x1}) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc714, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x42) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000300)={0x3979889e, 0xa}) syz_usb_control_io(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000120005ff"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f00000005c0)={0x1, 0x1}) r4 = openat$bsg(0xffffff9c, &(0x7f0000000340), 0x543040, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000380)=0xe4) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e24, 0x80, @mcast1, 0x2}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000e40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000680)={{0x4, @dev={0xac, 0x14, 0x14, 0x25}, 0x4e24, 0x2, 'dh\x00', 0x6, 0xffffffff, 0x6b}, {@broadcast, 0x4e23, 0x2000, 0x2, 0x4, 0x10000}}, 0x44) write$P9_RGETATTR(r4, &(0x7f0000000500)={0xa0, 0x19, 0x1, {0x400, {0x80, 0x1, 0x1}, 0x64, r5, r7, 0x7, 0x1, 0x1, 0x7, 0xe, 0xc5b00000, 0xc, 0x2, 0x49e7066a, 0x5920, 0x7, 0x0, 0x10, 0x9, 0x1}}, 0xa0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0185648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x98f90d, 0x9, '\x00', @string=&(0x7f0000000140)}}) r9 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000600)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000640)={r10}) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x5b6baca1, &(0x7f0000000100)=[{0xdd, 0x1, 0x8}, {0x100000001, 0xfffffffffffffffe, 0x7}, {0x2, 0xb25, 0xd}, {0x1000, 0x635, 0x5}, {0x6be, 0xad, 0x6}, {0x1000, 0xffffffffffffffff, 0x40000000000}, {0x1, 0x5, 0x5}], 0x7, 0x2, 0x1, 0x24, 0xa, 0x68}) r11 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000240), 0x660202, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r11, 0x800455d1, &(0x7f0000000280)) 9.255935973s ago: executing program 4 (id=2530): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x204, 0x8000) r1 = landlock_create_ruleset(&(0x7f0000000480)={0xa163}, 0x18, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f00000001c0)={0x0, 0x76c, [0x4, 0x3, 0x254, 0x7, 0x6, 0x4]}) landlock_restrict_self(r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0x80811501, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000280), &(0x7f0000000300)=0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ptrace$ARCH_SHSTK_LOCK(0x1e, r3, 0x2, 0x5003) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000ecffffffb5000040"]) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x503, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x80}]}}}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x8) tkill(r3, 0x2e) ptrace$peeksig(0x4209, r3, &(0x7f0000000340)={0x0, 0x0, 0x2e}, 0x0) r10 = creat(&(0x7f0000000040)='./file0\x00', 0x1a) ioctl$TUNATTACHFILTER(r10, 0x400854d5, &(0x7f0000000240)={0x4, &(0x7f0000000200)=[{0x5, 0x7, 0x3, 0x5}, {0x31, 0x80, 0x81, 0x4}, {0x0, 0x7f, 0x6e, 0x7261685f}, {0x58, 0xc, 0x7}]}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0xc3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x24008010) openat$cgroup(r10, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) 8.977404785s ago: executing program 4 (id=2531): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@nfc={0x27, 0x0, 0x0, 0x3}, 0x80, 0x0, 0xfffffffffffffee3}, 0x8000) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x7, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x8) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000032c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000003300)={0x54, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x5}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004804) ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f00000000c0)) 8.426158597s ago: executing program 3 (id=2532): socket$inet6(0xa, 0x3, 0x8000000003c) socket(0x3, 0x80000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000b4321f00000000000a00630018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000100b706000014000000b703000000060000850000002f000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0xa, 0x1000, &(0x7f0000001e40)=""/4096, 0x0, 0x8, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 7.739460316s ago: executing program 1 (id=2533): syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) read$FUSE(r4, &(0x7f0000000180)={0x2020}, 0x2020) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x2e, 0x1, @thr={0x0, &(0x7f0000000140)="a3e50e778ede12f92a3622754a72ac4c1e6a1209095b88139e5f99b4c409df1956bcb1dd7684a9f85219de5e35553524cea85bff65c56eff223cd563c97b34"}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000001b80)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000440)={0x1c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0xf}, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0xffffffffffffff29) r9 = io_uring_setup(0x1519, &(0x7f00000002c0)={0x0, 0x58e4, 0x10, 0x104, 0x333}) io_uring_register$IORING_REGISTER_FILES(r9, 0x1e, &(0x7f0000000000)=[r9], 0x1) close_range(r7, 0xffffffffffffffff, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r11 = accept4(r10, 0x0, 0x0, 0x80000) r12 = dup(r11) accept4(r12, 0x0, 0x0, 0x0) 7.173553642s ago: executing program 0 (id=2536): syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x2, {0x0, 0xf0, 0x3}}, 0x18) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x26c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf95}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x30000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc5e9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3e87000}]}]}, @TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "95a4dacb89f2cde4a2403014aa123ff9d2f52c1d79470ec55e1ee449"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_ID={0xb1, 0x3, "04ac634db6d9d421b29b652718335183c7da34fe68450de87fa5dfede2ad39e9eb2395b12af424a11b1f4608f1460b7c983e4731890dc782ca68e2910cf5137d7939be4163bfe6042dff319d91e88fde61d28d8aef0a84b14c54e264a11aaff9574b40858e4649579769a5f03d002ecfaf2bf50a50c8e616d1f008656552f95f7f7d873e154afbbccae1dfce32605f40abf769ee65cebd68518e6d1a281c682f25d885214c4c0fea5754b4136e"}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9a8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4293, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3377}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}]}]}, 0x26c}}, 0x0) 6.581810625s ago: executing program 2 (id=2537): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$evdev(r0, &(0x7f00000001c0)=[{{}, 0x2, 0x8, 0x3}], 0x18) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x402c582b, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="04000400000000004800128008000100677470"], 0x70}}, 0x0) io_setup(0x3ff, &(0x7f0000000500)) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x1c, 0x18, 0x309, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}, 0x1c}}, 0x1000c840) 6.501332897s ago: executing program 4 (id=2538): syz_open_dev$usbfs(&(0x7f0000000000), 0x204, 0x8000) (fail_nth: 4) 5.872574782s ago: executing program 4 (id=2539): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @vbi={0x0, 0x0, 0x0, 0x34343452}}) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x9) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000001c0)=0x2001) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r5, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="484000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000410000020001280080001007674690014000280080004006401010108000200000000000800040000000000"], 0x48}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x24}, 0x2}, 0x1c) 5.755422949s ago: executing program 2 (id=2540): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) 5.648191821s ago: executing program 2 (id=2541): socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x284200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) rt_sigsuspend(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32, @ANYBLOB="0800260090150000080057"], 0x2c}}, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x11, 0x2a, 0x3, 0xe, 0x2, 0xffff, 0x5, 0xe, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) lseek(0xffffffffffffffff, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 5.37851864s ago: executing program 2 (id=2542): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbmon(0x0, 0x6, 0x80) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSACTIVE(r2, 0x40087446, &(0x7f00000007c0)={0x1, &(0x7f0000000080)=[{0x15, 0xd, 0x1}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c100000000000224e0000", 0x58}], 0x1) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030500000000000700", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB="1840ceb295acb02a294bfa8cf044c8977d0f767c8de2b5202ee3e3290104cf800d115483c439be3814286005786f"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r7}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r8, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$KDADDIO(r7, 0x4b34, 0x6) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x77359400}, 0x0) 5.327951808s ago: executing program 0 (id=2543): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xee2, 0x0, 0x8, 0x76ed}, 0x0) syz_io_uring_setup(0x1000109, &(0x7f0000000400)={0x0, 0x43d4, 0x400, 0x3, 0x3e1}, &(0x7f00000003c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f00000000c0)={0x3, 0x3, 0x31dc}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r4 = syz_open_procfs(0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000580)={{0x2, 0x100, 0x7, 0x10, 0x7, 0x80000000}, 0x294, [0xfffffffa, 0x9, 0x3, 0x7, 0x3, 0x99, 0x1, 0xcec2, 0x0, 0xfffffffa, 0x5, 0xa, 0x330, 0x6, 0xffffffff, 0x10000, 0xc0000000, 0x1, 0x0, 0x81, 0x3ff, 0x0, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x0, 0x7fff, 0x7, 0x3, 0xa, 0x8, 0x2000, 0x1, 0x6, 0x3, 0xffffffff, 0xfff, 0xe, 0x8dae, 0x7, 0xfffffff8, 0x401, 0xa, 0x5, 0xd3, 0x6, 0xfff, 0xe970, 0x0, 0x7, 0x5, 0x7, 0x9, 0x4, 0xc05e, 0x101, 0x80000000, 0x4, 0x5, 0x1ff, 0x1, 0x401, 0x6482, 0x4, 0x400, 0x3, 0x0, 0x5, 0x6, 0xb, 0x3, 0x10, 0x9, 0xfffffffd, 0x2, 0x6, 0x10, 0xfffffffb, 0x40, 0x6, 0x3, 0xffff, 0x80000000, 0x8b, 0x80000000, 0x8, 0x101, 0xb0ce, 0xe0c, 0xce30, 0xfe, 0x5, 0x2, 0x6, 0x460, 0x6, 0x8, 0xf0d7, 0x200, 0x8, 0xe13, 0x67e, 0x5, 0x5, 0x9, 0x3, 0xcb, 0x1, 0x0, 0x85, 0xdba, 0x200005, 0x9, 0x1, 0x6, 0xfffffffd, 0xf, 0xa, 0x9, 0x1000, 0x480, 0xfffffffe, 0x100, 0x2, 0x7, 0x401, 0x529, 0x4, 0x8, 0x7, 0x12, 0x2, 0x401, 0xe, 0xb7e, 0x8, 0x8001, 0x2, 0x4, 0x200, 0x4, 0xd69, 0xfffffffb, 0x8, 0x5, 0x6, 0x5, 0x1ff, 0x90000, 0xfa47, 0xc, 0x5, 0x1, 0x7ff, 0xf, 0xcb3, 0xb, 0xffff7590, 0x0, 0x5, 0x2, 0x8000, 0xfffffffa, 0x2, 0x9, 0x4, 0x2, 0xff, 0x400, 0x80000001, 0xfffffc01, 0xff, 0x4, 0x5, 0x6, 0x7, 0xfffffffc, 0x6, 0x100, 0xfffffff7, 0x2, 0x9, 0x4, 0x5, 0x0, 0x5, 0x5db5, 0x7, 0x7, 0xf306, 0x2, 0x3, 0xfffffffe, 0x4, 0x200, 0x36dd, 0x0, 0x2, 0x4, 0xd9, 0x5, 0x2, 0x4, 0x1, 0xffff, 0x7, 0x10, 0x2, 0x6, 0x8, 0x100, 0x50000, 0x1, 0x800de9, 0x400, 0x4, 0x9, 0x1, 0xa1, 0x4, 0x6, 0x6, 0x401, 0x5, 0x8, 0x2, 0xc1, 0x4, 0x7, 0x2, 0xd, 0x3, 0x3, 0xd, 0x3, 0x3, 0x6, 0x9a, 0x1, 0x5, 0x3ff, 0x401000, 0x7, 0x7fff, 0x4, 0x9, 0x719, 0x8, 0x8, 0x3, 0x6, 0x8, 0x6, 0x5, 0x9, 0x9, 0x8, 0x2, 0x80000000, 0x2, 0x80000001, 0x8, 0xfc8d, 0x3, 0x5, 0x2, 0x7, 0x9d36, 0x0, 0x5, 0xc08, 0x3, 0xe809, 0xf402, 0x6, 0x5, 0xb72, 0x26f, 0x6f, 0x8, 0x4, 0x1, 0x967, 0x8, 0xffffffff, 0x33, 0xc14e, 0x3, 0x7, 0xfffffff0, 0x2, 0x9, 0x8f, 0x2, 0x1, 0x1, 0x9, 0x0, 0x3, 0x3, 0x0, 0x5, 0x8, 0x16, 0x3b8b7931, 0x4, 0x5, 0x5, 0x3349b29a, 0xa0b, 0x6, 0x1, 0x5, 0x4, 0x8, 0x487a, 0x4, 0x0, 0x6, 0x9, 0x1, 0x3, 0x7, 0xfffffffc, 0xfffffff7, 0x9, 0x2, 0x6, 0xff53, 0x8, 0x0, 0x2, 0x7, 0xfffffffd, 0x872c, 0x2, 0x4, 0x7, 0x3, 0x6, 0x0, 0x4, 0x1, 0x401, 0xa, 0x6504, 0xfffffff7, 0x5, 0x9, 0x2, 0x4, 0x10001, 0x5, 0xfff, 0x7, 0x3, 0x8, 0xd131, 0x4, 0xd, 0x5, 0x7, 0x1, 0x7fff, 0x8, 0x10001, 0xffffffff, 0x0, 0x5, 0x8, 0x9, 0x3, 0x3, 0x4, 0x4, 0x7, 0x1, 0xf, 0x2, 0x5, 0x3, 0x5, 0x186d, 0x55d, 0x10000, 0x8001, 0x7, 0x6, 0x401, 0xe, 0x18000, 0x7, 0x3, 0x18, 0x7, 0x444, 0x3, 0x3, 0x1000, 0x7, 0xd, 0x7, 0xf1, 0x0, 0xc, 0x1007, 0x7, 0x28950542, 0x4, 0x7, 0x4317, 0x5, 0xfff, 0x3, 0x0, 0x18, 0xfff, 0x4, 0x9c4, 0x7fe, 0x1, 0x7f, 0x8001, 0x7, 0xd22, 0x3, 0x7, 0x0, 0x9, 0x3, 0x200, 0x3, 0x401, 0x81, 0x4, 0x4, 0x34, 0x0, 0x7, 0x1426, 0x4, 0x8001, 0x6, 0x83, 0x3, 0x6, 0x9, 0x1, 0x3, 0xe7, 0x16c, 0x0, 0x10, 0x1, 0x8, 0x8000, 0x15be, 0x3, 0x0, 0x50, 0x9, 0x10001, 0x8, 0x1, 0x0, 0x1, 0x1, 0xf, 0xfffffffc, 0x0, 0x0, 0x2598a4d0, 0x3, 0x7, 0x5, 0x4, 0x1ff, 0x20000000, 0x4, 0x5, 0x3, 0x1, 0x1, 0x4, 0x1, 0x4, 0xff, 0x7ff, 0x0, 0x2, 0xf, 0x400, 0xef1b, 0x3ff, 0x3, 0xe3, 0x7, 0x6, 0x1, 0x5, 0xfffffff8, 0x6, 0x5, 0x8, 0x8, 0x1, 0x5, 0x0, 0x0, 0x2, 0x5, 0xb62, 0x5, 0xffff, 0x6, 0x9, 0x1, 0x800, 0x10, 0x7, 0x1, 0xfffffffb, 0x1ff, 0x3, 0x1, 0x4, 0x3, 0x22a, 0x8, 0x9, 0x9, 0x7, 0x4, 0xf951, 0xffffff27, 0x8, 0x6, 0x0, 0x7f69f165, 0x1, 0x5, 0x7f, 0x0, 0x800, 0x400, 0x6, 0xb8bb, 0x6, 0x8, 0x15c, 0x400, 0x4, 0xac, 0x1, 0x0, 0x200, 0x0, 0x9, 0x7, 0x7fffffff, 0x4, 0x2, 0x75bcc24b, 0xffff0da9, 0x1, 0x8, 0x2, 0xe0b0, 0x6, 0x2b24, 0xd, 0xa, 0x3, 0x9, 0xc19, 0x7026, 0x9, 0x3, 0x3, 0x3, 0x5, 0x7, 0x7, 0x5, 0x0, 0x14a6, 0x2, 0x3, 0x5, 0xf, 0x2, 0x2, 0x4a3, 0x4, 0xd180, 0x6, 0xfb, 0x83f2, 0x9, 0x1, 0x0, 0x86, 0xa4, 0x2, 0x9, 0xea6d, 0x2, 0xfffffa04, 0x9, 0x7fffffff, 0x50, 0x8, 0xfffffffd, 0x8, 0xff, 0x5, 0x2, 0x2, 0x0, 0x9, 0x3, 0x9b89, 0xd4, 0x7, 0x15b68069, 0x2, 0xf59b, 0x8, 0x4, 0x1, 0x4, 0x8000, 0x4, 0x4, 0x0, 0x6, 0x9, 0x5f1b, 0x1ff, 0x2, 0x4, 0x8b7c, 0x562, 0xd8, 0xffff8001, 0x4, 0x3a04, 0xfff00000, 0xd1e, 0x100, 0x0, 0x5, 0x1000000, 0x10001, 0x9, 0xc, 0x2, 0x1, 0xb152, 0x3, 0x5, 0xb, 0x91, 0x6, 0x46, 0x40000000, 0xa21, 0x6, 0xa, 0xa4, 0x100, 0x7fffffff, 0xb004, 0x7f, 0xf, 0x2, 0x0, 0x4, 0x9, 0x4, 0x8, 0xff, 0x401, 0x8, 0x9, 0x3fe, 0x5, 0x8001, 0x4, 0x29b, 0x1, 0x3ff, 0x7, 0x7ff, 0x7, 0xffffef2e, 0x5, 0x80, 0x8f000, 0x401, 0x7, 0xfdc00000, 0x6, 0x1000, 0xff, 0x8582, 0x10, 0x4, 0x7, 0x8b87, 0xa, 0x9, 0x4, 0x2, 0xfff, 0xffff, 0x7, 0x736b, 0x1, 0x8, 0xdd3, 0x9, 0x8, 0x0, 0xe7, 0x1, 0x4, 0x8, 0x1, 0xed, 0x3e, 0xa7b, 0x6, 0x6, 0x0, 0x4, 0x0, 0x6, 0x5, 0xb, 0xb804, 0x9, 0x1ff, 0xb, 0x1, 0xc6d5e4a, 0x1d, 0x4, 0x1, 0xffffffc0, 0xa, 0x100, 0x7, 0xdb4, 0xd1, 0x8, 0x1, 0x4, 0x1e61, 0x3, 0x72f, 0x6, 0x9, 0x4, 0x2, 0x0, 0x7, 0x0, 0x4, 0x0, 0xfff, 0x10001, 0x4, 0xcb, 0x9, 0x732, 0xea, 0x4, 0x8, 0x750d, 0x800, 0x5, 0x7fb, 0x10, 0x10001, 0x0, 0x6, 0xc57, 0x471bbcf5, 0x8, 0x9798, 0x5, 0x9, 0x0, 0xfffff001, 0x5, 0x3, 0x4, 0xf, 0x9, 0x9, 0x2, 0x779, 0x9, 0x1a, 0x9, 0xb, 0x0, 0x5, 0x3, 0xfc4, 0x4, 0x2, 0x2, 0x6, 0x9, 0xc, 0xdd40, 0x276c, 0x9, 0x3, 0x0, 0x3, 0x80000000, 0x7, 0x8001, 0x6, 0x4, 0x0, 0xffff, 0x8000, 0x1000, 0x10000, 0xe, 0x2, 0x7, 0xfffffffe, 0x8, 0x0, 0x6, 0x1, 0x7, 0xf, 0xf016, 0x9, 0x3, 0xfffffab2, 0x4, 0x4dd2627b, 0x40, 0x100, 0xb, 0xfd6, 0x5ab, 0x962, 0x1, 0x6, 0x6, 0x9, 0x40, 0x7, 0x7, 0x5, 0x8, 0x6, 0x1, 0xd8, 0x48, 0x5, 0x7ff, 0xb36, 0x5, 0x866f, 0x0, 0x5, 0x100, 0x6b12, 0x6, 0x7, 0x8, 0x1, 0x8, 0x2, 0x55, 0x98, 0x7, 0x6, 0x8, 0x70f, 0x4, 0x0, 0x4, 0x1, 0x0, 0xe, 0x2, 0x7, 0x2, 0x7, 0x46d1, 0x7fff, 0x1, 0x9, 0x3, 0x3, 0xfffffffd, 0x76, 0x7, 0x7, 0x4, 0x2, 0x1, 0x1, 0x4, 0x1, 0x5, 0x2, 0x2, 0x800, 0x9, 0xa, 0x800, 0x0, 0x3, 0x4, 0xa1f, 0x0, 0x6, 0x2c, 0x9b, 0xed, 0xfffffff9, 0x2, 0x10001, 0xc36a, 0x4, 0x81, 0x3, 0x4, 0xa, 0x0, 0x7, 0x200, 0x6, 0x4, 0x3, 0xffff, 0x7, 0x81, 0x401, 0x2, 0x9, 0x529, 0xf76, 0x7fffffff, 0x3, 0x2, 0x5, 0x7b9fe774, 0x9, 0x1, 0xb7, 0xc, 0x8d, 0xa63, 0xaeca, 0xb8, 0x10000, 0x7, 0x27078cce, 0x5, 0x4c5, 0xc, 0x4, 0x6, 0x1ff, 0x8, 0x5, 0x1, 0x100000, 0x0, 0xe6b7, 0x10000, 0x10, 0xffff, 0xfffffffc, 0x84b, 0xfffffff4, 0x8990, 0x2, 0x401, 0x2, 0x1, 0x1, 0x5ea, 0xc0aa, 0x6, 0x1fa840d7, 0x5, 0x200, 0x2, 0x5, 0x400, 0x1, 0xb32d, 0xffff, 0x3, 0x9, 0x6bc, 0x7fff, 0x8000, 0x4, 0x80, 0x2f7, 0x7, 0x9, 0x40, 0x7, 0xde3, 0x7, 0xd, 0x9]}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) unshare(0x200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000180)={{0x0, 0x0, 0xf45c}, 0x7, 0x9, 0x6}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r5, 0x541b, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) 4.395313982s ago: executing program 3 (id=2544): socket$kcm(0x10, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="02004000000000003a00000000001954e58b000000000000b9000200"/40]) socket$inet6(0xa, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r3 = openat$rtc(0xffffff9c, &(0x7f0000000140), 0x501000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) rt_sigsuspend(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\b', @ANYRES16, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32, @ANYBLOB="0800260090150000080057"], 0x2c}}, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000000)={0x11, 0x2a, 0x3, 0xe, 0x4, 0xfffc, 0x5, 0x13, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) lseek(0xffffffffffffffff, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffe1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='kmem_cache_free\x00', r5}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1075ffdded05df7166643d050be064917255d085e43e551b2f6acd827245aceeb99ddd83e0173e1867a47e002cdd25470d6d6b31698bab597a9adbff1d560b91d41ff6c39ccbbce5a7b8d8d55299073d002fb9d7427d1359a9194d3bb7f34eed729b8894e832946bd9564bdbbaf1355527b5035a7400e39c89b0a14fbe9d8430af000b0000006fefadf8008d5900"/153, @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x8, 0x0, 0x0, 0x0, 0x10000, 0x3ff}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x29) 4.004855998s ago: executing program 1 (id=2545): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000007c0)={0x0, 0x4000, &(0x7f0000000480)={&(0x7f0000000600)={0x20, r3, 0x65283e1aaa2ddbb1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x20}}, 0x0) 3.939566597s ago: executing program 3 (id=2546): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x1856, 0x4, 0xffff, 0xfffffff9, 0x11, "0e80706e6c06a79874342a0e0d13343972d01f"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) read$FUSE(r1, &(0x7f00000040c0)={0x2020}, 0xf4d) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000069000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/12, 0xc, 0x0, &(0x7f00000000c0)=""/100, 0x64}, &(0x7f0000000180)=0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x800000000000057, 0x20000000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r6, r5], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xd) r8 = dup(0xffffffffffffffff) write$UHID_INPUT(r8, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 3.107256204s ago: executing program 0 (id=2547): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @vbi={0x0, 0x0, 0x0, 0x34343452}}) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x9) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="484000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000410000020001280080001007674690014000280080004006401010108000200000000000800040000000000"], 0x48}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x24}, 0x2}, 0x1c) 2.228884944s ago: executing program 4 (id=2548): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r0, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x20, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="150000000000000000400000", @ANYRES32, @ANYBLOB="8cc929b272a68725990a4af736de9515b6a672a930", @ANYRES64=0x0], 0x10) close(r3) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="10000000120005"], 0x10}}, 0x20000810) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r9, 0x0, 0xffdd) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) lsetxattr$security_evm(0x0, &(0x7f0000000080), 0x0, 0x9, 0x0) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 1.520605841s ago: executing program 1 (id=2549): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e26, 0x80000, @mcast2, 0x2000000}, 0x1c, 0x0}, 0x4011) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xd9, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) 1.427917366s ago: executing program 4 (id=2550): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xee2, 0x0, 0x8, 0x76ed}, 0x0) syz_io_uring_setup(0x1000109, &(0x7f0000000400)={0x0, 0x43d4, 0x400, 0x3, 0x3e1}, &(0x7f00000003c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r4, 0xc00c4809, &(0x7f00000000c0)={0x3, 0x3, 0x31dc}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r6 = syz_open_procfs(0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000580)={{0x2, 0x100, 0x7, 0x10, 0x7, 0x80000000}, 0x294, [0xfffffffa, 0x9, 0x3, 0x7, 0x3, 0x99, 0x1, 0xcec2, 0x0, 0xfffffffa, 0x5, 0xa, 0x330, 0x6, 0xffffffff, 0x10000, 0xc0000000, 0x1, 0x0, 0x81, 0x3ff, 0x0, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x0, 0x7fff, 0x7, 0x3, 0xa, 0x8, 0x2000, 0x1, 0x6, 0x3, 0xffffffff, 0xfff, 0xe, 0x8dae, 0x7, 0xfffffff8, 0x401, 0xa, 0x5, 0xd3, 0x6, 0xfff, 0xe970, 0x0, 0x7, 0x5, 0x7, 0x9, 0x4, 0xc05e, 0x101, 0x80000000, 0x4, 0x5, 0x1ff, 0x1, 0x401, 0x6482, 0x4, 0x400, 0x3, 0x0, 0x5, 0x6, 0xb, 0x3, 0x10, 0x9, 0xfffffffd, 0x2, 0x6, 0x10, 0xfffffffb, 0x40, 0x6, 0x3, 0xffff, 0x80000000, 0x8b, 0x80000000, 0x8, 0x101, 0xb0ce, 0xe0c, 0xce30, 0xfe, 0x5, 0x2, 0x6, 0x460, 0x6, 0x8, 0xf0d7, 0x200, 0x8, 0xe13, 0x67e, 0x5, 0x5, 0x9, 0x3, 0xcb, 0x1, 0x0, 0x85, 0xdba, 0x200005, 0x9, 0x1, 0x6, 0xfffffffd, 0xf, 0xa, 0x9, 0x1000, 0x480, 0xfffffffe, 0x100, 0x2, 0x7, 0x401, 0x529, 0x4, 0x8, 0x7, 0x12, 0x2, 0x401, 0xe, 0xb7e, 0x8, 0x8001, 0x2, 0x4, 0x200, 0x4, 0xd69, 0xfffffffb, 0x8, 0x5, 0x6, 0x5, 0x1ff, 0x90000, 0xfa47, 0xc, 0x5, 0x1, 0x7ff, 0xf, 0xcb3, 0xb, 0xffff7590, 0x0, 0x5, 0x2, 0x8000, 0xfffffffa, 0x2, 0x9, 0x4, 0x2, 0xff, 0x400, 0x80000001, 0xfffffc01, 0xff, 0x4, 0x5, 0x6, 0x7, 0xfffffffc, 0x6, 0x100, 0xfffffff7, 0x2, 0x9, 0x4, 0x5, 0x0, 0x5, 0x5db5, 0x7, 0x7, 0xf306, 0x2, 0x3, 0xfffffffe, 0x4, 0x200, 0x36dd, 0x0, 0x2, 0x4, 0xd9, 0x5, 0x2, 0x4, 0x1, 0xffff, 0x7, 0x10, 0x2, 0x6, 0x8, 0x100, 0x50000, 0x1, 0x800de9, 0x400, 0x4, 0x9, 0x1, 0xa1, 0x4, 0x6, 0x6, 0x401, 0x5, 0x8, 0x2, 0xc1, 0x4, 0x7, 0x2, 0xd, 0x3, 0x3, 0xd, 0x3, 0x3, 0x6, 0x9a, 0x1, 0x5, 0x3ff, 0x401000, 0x7, 0x7fff, 0x4, 0x9, 0x719, 0x8, 0x8, 0x3, 0x6, 0x8, 0x6, 0x5, 0x9, 0x9, 0x8, 0x2, 0x80000000, 0x2, 0x80000001, 0x8, 0xfc8d, 0x3, 0x5, 0x2, 0x7, 0x9d36, 0x0, 0x5, 0xc08, 0x3, 0xe809, 0xf402, 0x6, 0x5, 0xb72, 0x26f, 0x6f, 0x8, 0x4, 0x1, 0x967, 0x8, 0xffffffff, 0x33, 0xc14e, 0x3, 0x7, 0xfffffff0, 0x2, 0x9, 0x8f, 0x2, 0x1, 0x1, 0x9, 0x0, 0x3, 0x3, 0x0, 0x5, 0x8, 0x16, 0x3b8b7931, 0x4, 0x5, 0x5, 0x3349b29a, 0xa0b, 0x6, 0x1, 0x5, 0x4, 0x8, 0x487a, 0x4, 0x0, 0x6, 0x9, 0x1, 0x3, 0x7, 0xfffffffc, 0xfffffff7, 0x9, 0x2, 0x6, 0xff53, 0x8, 0x0, 0x2, 0x7, 0xfffffffd, 0x872c, 0x2, 0x4, 0x7, 0x3, 0x6, 0x0, 0x4, 0x1, 0x401, 0xa, 0x6504, 0xfffffff7, 0x5, 0x9, 0x2, 0x4, 0x10001, 0x5, 0xfff, 0x7, 0x3, 0x8, 0xd131, 0x4, 0xd, 0x5, 0x7, 0x1, 0x7fff, 0x8, 0x10001, 0xffffffff, 0x0, 0x5, 0x8, 0x9, 0x3, 0x3, 0x4, 0x4, 0x7, 0x1, 0xf, 0x2, 0x5, 0x3, 0x5, 0x186d, 0x55d, 0x10000, 0x8001, 0x7, 0x6, 0x401, 0xe, 0x18000, 0x7, 0x3, 0x18, 0x7, 0x444, 0x3, 0x3, 0x1000, 0x7, 0xd, 0x7, 0xf1, 0x0, 0xc, 0x1007, 0x7, 0x28950542, 0x4, 0x7, 0x4317, 0x5, 0xfff, 0x3, 0x0, 0x18, 0xfff, 0x4, 0x9c4, 0x7fe, 0x1, 0x7f, 0x8001, 0x7, 0xd22, 0x3, 0x7, 0x0, 0x9, 0x3, 0x200, 0x3, 0x401, 0x81, 0x4, 0x4, 0x34, 0x0, 0x7, 0x1426, 0x4, 0x8001, 0x6, 0x83, 0x3, 0x6, 0x9, 0x1, 0x3, 0xe7, 0x16c, 0x0, 0x10, 0x1, 0x8, 0x8000, 0x15be, 0x3, 0x0, 0x50, 0x9, 0x10001, 0x8, 0x1, 0x0, 0x1, 0x1, 0xf, 0xfffffffc, 0x0, 0x0, 0x2598a4d0, 0x3, 0x7, 0x5, 0x4, 0x1ff, 0x20000000, 0x4, 0x5, 0x3, 0x1, 0x1, 0x4, 0x1, 0x4, 0xff, 0x7ff, 0x0, 0x2, 0xf, 0x400, 0xef1b, 0x3ff, 0x3, 0xe3, 0x7, 0x6, 0x1, 0x5, 0xfffffff8, 0x6, 0x5, 0x8, 0x8, 0x1, 0x5, 0x0, 0x0, 0x2, 0x5, 0xb62, 0x5, 0xffff, 0x6, 0x9, 0x1, 0x800, 0x10, 0x7, 0x1, 0xfffffffb, 0x1ff, 0x3, 0x1, 0x4, 0x3, 0x22a, 0x8, 0x9, 0x9, 0x7, 0x4, 0xf951, 0xffffff27, 0x8, 0x6, 0x0, 0x7f69f165, 0x1, 0x5, 0x7f, 0x0, 0x800, 0x400, 0x6, 0xb8bb, 0x6, 0x8, 0x15c, 0x400, 0x4, 0xac, 0x1, 0x0, 0x200, 0x0, 0x9, 0x7, 0x7fffffff, 0x4, 0x2, 0x75bcc24b, 0xffff0da9, 0x1, 0x8, 0x2, 0xe0b0, 0x6, 0x2b24, 0xd, 0xa, 0x3, 0x9, 0xc19, 0x7026, 0x9, 0x3, 0x3, 0x3, 0x5, 0x7, 0x7, 0x5, 0x0, 0x14a6, 0x2, 0x3, 0x5, 0xf, 0x2, 0x2, 0x4a3, 0x4, 0xd180, 0x6, 0xfb, 0x83f2, 0x9, 0x1, 0x0, 0x86, 0xa4, 0x2, 0x9, 0xea6d, 0x2, 0xfffffa04, 0x9, 0x7fffffff, 0x50, 0x8, 0xfffffffd, 0x8, 0xff, 0x5, 0x2, 0x2, 0x0, 0x9, 0x3, 0x9b89, 0xd4, 0x7, 0x15b68069, 0x2, 0xf59b, 0x8, 0x4, 0x1, 0x4, 0x8000, 0x4, 0x4, 0x0, 0x6, 0x9, 0x5f1b, 0x1ff, 0x2, 0x4, 0x8b7c, 0x562, 0xd8, 0xffff8001, 0x4, 0x3a04, 0xfff00000, 0xd1e, 0x100, 0x0, 0x5, 0x1000000, 0x10001, 0x9, 0xc, 0x2, 0x1, 0xb152, 0x3, 0x5, 0xb, 0x91, 0x6, 0x46, 0x40000000, 0xa21, 0x6, 0xa, 0xa4, 0x100, 0x7fffffff, 0xb004, 0x7f, 0xf, 0x2, 0x0, 0x4, 0x9, 0x4, 0x8, 0xff, 0x401, 0x8, 0x9, 0x3fe, 0x5, 0x8001, 0x4, 0x29b, 0x1, 0x3ff, 0x7, 0x7ff, 0x7, 0xffffef2e, 0x5, 0x80, 0x8f000, 0x401, 0x7, 0xfdc00000, 0x6, 0x1000, 0xff, 0x8582, 0x10, 0x4, 0x7, 0x8b87, 0xa, 0x9, 0x4, 0x2, 0xfff, 0xffff, 0x7, 0x736b, 0x1, 0x8, 0xdd3, 0x9, 0x8, 0x0, 0xe7, 0x1, 0x4, 0x8, 0x1, 0xed, 0x3e, 0xa7b, 0x6, 0x6, 0x0, 0x4, 0x0, 0x6, 0x5, 0xb, 0xb804, 0x9, 0x1ff, 0xb, 0x1, 0xc6d5e4a, 0x1d, 0x4, 0x1, 0xffffffc0, 0xa, 0x100, 0x7, 0xdb4, 0xd1, 0x8, 0x1, 0x4, 0x1e61, 0x3, 0x72f, 0x6, 0x9, 0x4, 0x2, 0x0, 0x7, 0x0, 0x4, 0x0, 0xfff, 0x10001, 0x4, 0xcb, 0x9, 0x732, 0xea, 0x4, 0x8, 0x750d, 0x800, 0x5, 0x7fb, 0x10, 0x10001, 0x0, 0x6, 0xc57, 0x471bbcf5, 0x8, 0x9798, 0x5, 0x9, 0x0, 0xfffff001, 0x5, 0x3, 0x4, 0xf, 0x9, 0x9, 0x2, 0x779, 0x9, 0x1a, 0x9, 0xb, 0x0, 0x5, 0x3, 0xfc4, 0x4, 0x2, 0x2, 0x6, 0x9, 0xc, 0xdd40, 0x276c, 0x9, 0x3, 0x0, 0x3, 0x80000000, 0x7, 0x8001, 0x6, 0x4, 0x0, 0xffff, 0x8000, 0x1000, 0x10000, 0xe, 0x2, 0x7, 0xfffffffe, 0x8, 0x0, 0x6, 0x1, 0x7, 0xf, 0xf016, 0x9, 0x3, 0xfffffab2, 0x4, 0x4dd2627b, 0x40, 0x100, 0xb, 0xfd6, 0x5ab, 0x962, 0x1, 0x6, 0x6, 0x9, 0x40, 0x7, 0x7, 0x5, 0x8, 0x6, 0x1, 0xd8, 0x48, 0x5, 0x7ff, 0xb36, 0x5, 0x866f, 0x0, 0x5, 0x100, 0x6b12, 0x6, 0x7, 0x8, 0x1, 0x8, 0x2, 0x55, 0x98, 0x7, 0x6, 0x8, 0x70f, 0x4, 0x0, 0x4, 0x1, 0x0, 0xe, 0x2, 0x7, 0x2, 0x7, 0x46d1, 0x7fff, 0x1, 0x9, 0x3, 0x3, 0xfffffffd, 0x76, 0x7, 0x7, 0x4, 0x2, 0x1, 0x1, 0x4, 0x1, 0x5, 0x2, 0x2, 0x800, 0x9, 0xa, 0x800, 0x0, 0x3, 0x4, 0xa1f, 0x0, 0x6, 0x2c, 0x9b, 0xed, 0xfffffff9, 0x2, 0x10001, 0xc36a, 0x4, 0x81, 0x3, 0x4, 0xa, 0x0, 0x7, 0x200, 0x6, 0x4, 0x3, 0xffff, 0x7, 0x81, 0x401, 0x2, 0x9, 0x529, 0xf76, 0x7fffffff, 0x3, 0x2, 0x5, 0x7b9fe774, 0x9, 0x1, 0xb7, 0xc, 0x8d, 0xa63, 0xaeca, 0xb8, 0x10000, 0x7, 0x27078cce, 0x5, 0x4c5, 0xc, 0x4, 0x6, 0x1ff, 0x8, 0x5, 0x1, 0x100000, 0x0, 0xe6b7, 0x10000, 0x10, 0xffff, 0xfffffffc, 0x84b, 0xfffffff4, 0x8990, 0x2, 0x401, 0x2, 0x1, 0x1, 0x5ea, 0xc0aa, 0x6, 0x1fa840d7, 0x5, 0x200, 0x2, 0x5, 0x400, 0x1, 0xb32d, 0xffff, 0x3, 0x9, 0x6bc, 0x7fff, 0x8000, 0x4, 0x80, 0x2f7, 0x7, 0x9, 0x40, 0x7, 0xde3, 0x7, 0xd, 0x9]}) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) unshare(0x200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f0000000180)={{0x0, 0x0, 0xf45c}, 0x7, 0x9, 0x6}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, 0x0) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r7, 0x541b, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4a, r8}) 1.403585168s ago: executing program 1 (id=2551): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$evdev(r0, &(0x7f00000001c0)=[{{}, 0x2, 0x8, 0x3}], 0x18) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x402c582b, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="04000400000000004800128008000100677470"], 0x70}}, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x1c, 0x18, 0x309, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}, 0x1c}}, 0x1000c840) 1.237700799s ago: executing program 2 (id=2552): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sched_setattr(0x0, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) getdents(r3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x300, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.225563268s ago: executing program 1 (id=2553): syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x2, {0x0, 0xf0, 0x3}}, 0x18) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x26c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf95}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x30000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc5e9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3e87000}]}]}, @TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "95a4dacb89f2cde4a2403014aa123ff9d2f52c1d79470ec55e1ee449"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_ID={0xb1, 0x3, "04ac634db6d9d421b29b652718335183c7da34fe68450de87fa5dfede2ad39e9eb2395b12af424a11b1f4608f1460b7c983e4731890dc782ca68e2910cf5137d7939be4163bfe6042dff319d91e88fde61d28d8aef0a84b14c54e264a11aaff9574b40858e4649579769a5f03d002ecfaf2bf50a50c8e616d1f008656552f95f7f7d873e154afbbccae1dfce32605f40abf769ee65cebd68518e6d1a281c682f25d885214c4c0fea5754b4136e"}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9a8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4293, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3377}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}]}]}, 0x26c}}, 0x0) 0s ago: executing program 2 (id=2554): r0 = socket$netlink(0x10, 0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000800)=""/4096) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') openat$cgroup_root(0xffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) kernel console output (not intermixed with test programs): 9629][T14604] RIP: 0023:0xf7f75539 [ 795.999646][T14604] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 795.999664][T14604] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 795.999685][T14604] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 795.999699][T14604] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 795.999711][T14604] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 795.999723][T14604] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 795.999735][T14604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 795.999763][T14604] [ 796.004042][T10684] usb 2-1: config 0 descriptor?? [ 796.067304][ T9710] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 796.072655][ T119] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 796.101743][ T9710] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 796.344844][ T9710] usb 1-1: USB disconnect, device number 113 [ 796.476501][ T119] usb 5-1: Using ep0 maxpacket: 8 [ 796.488726][ T119] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 796.501614][ T119] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 796.671584][T11906] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 796.679580][ T119] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 796.729052][ T119] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 796.763986][ T119] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 796.783186][ T119] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 796.792782][ T119] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 796.808680][ T119] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 796.824339][T14610] fuse: Unknown parameter 'fd0x0000000000000008' [ 796.983127][ T119] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 797.014361][ T119] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 797.064613][T14612] x_tables: ip_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD [ 797.076228][ T119] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 797.102412][ T119] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 797.130609][ T119] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 797.164243][ T119] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 797.182912][ T119] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 797.201280][ T119] usb 5-1: string descriptor 0 read error: -22 [ 797.217014][ T119] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 797.242981][ T119] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.287923][ T119] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 797.580794][T14602] netlink: 'syz.4.2373': attribute type 1 has an invalid length. [ 797.635487][T14619] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2373'. [ 797.654121][T14602] bond10: entered promiscuous mode [ 797.659943][T14602] 8021q: adding VLAN 0 to HW filter on device bond10 [ 797.927504][ T1009] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 798.159848][T14628] FAULT_INJECTION: forcing a failure. [ 798.159848][T14628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.357737][T14628] CPU: 1 UID: 0 PID: 14628 Comm: syz.2.2380 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 798.357781][T14628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 798.357793][T14628] Call Trace: [ 798.357802][T14628] [ 798.357811][T14628] dump_stack_lvl+0x189/0x250 [ 798.357844][T14628] ? __lock_acquire+0xaac/0xd20 [ 798.357894][T14628] ? __pfx_dump_stack_lvl+0x10/0x10 [ 798.357924][T14628] ? __pfx__printk+0x10/0x10 [ 798.357945][T14628] ? __might_fault+0xb0/0x130 [ 798.357983][T14628] should_fail_ex+0x414/0x560 [ 798.358022][T14628] _copy_from_user+0x2d/0xb0 [ 798.358052][T14628] get_compat_msghdr+0xad/0x4a0 [ 798.358084][T14628] ? __pfx_get_compat_msghdr+0x10/0x10 [ 798.358125][T14628] ___sys_sendmsg+0x193/0x2a0 [ 798.358156][T14628] ? __pfx____sys_sendmsg+0x10/0x10 [ 798.358221][T14628] ? __fget_files+0x2a/0x420 [ 798.358247][T14628] ? __fget_files+0x3a0/0x420 [ 798.358284][T14628] __sys_sendmsg+0x164/0x220 [ 798.358313][T14628] ? __pfx___sys_sendmsg+0x10/0x10 [ 798.358337][T14628] ? irqentry_exit+0x74/0x90 [ 798.358384][T14628] __do_fast_syscall_32+0xb4/0x110 [ 798.358411][T14628] ? lockdep_hardirqs_on+0x9c/0x150 [ 798.358439][T14628] do_fast_syscall_32+0x34/0x80 [ 798.358465][T14628] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 798.358489][T14628] RIP: 0023:0xf7f75539 [ 798.358520][T14628] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 798.358537][T14628] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 798.358558][T14628] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 798.358571][T14628] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 798.358582][T14628] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 798.358593][T14628] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 798.358605][T14628] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 798.358633][T14628] [ 798.568241][ C1] vkms_vblank_simulate: vblank timer overrun [ 798.892840][ T5885] usb 2-1: USB disconnect, device number 93 [ 799.036296][ T9710] usb 5-1: USB disconnect, device number 116 [ 799.277209][T14651] FAULT_INJECTION: forcing a failure. [ 799.277209][T14651] name failslab, interval 1, probability 0, space 0, times 0 [ 799.300942][T14645] tipc: Enabled bearer , priority 10 [ 799.307350][T14651] CPU: 1 UID: 0 PID: 14651 Comm: syz.4.2388 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 799.307371][T14651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 799.307380][T14651] Call Trace: [ 799.307387][T14651] [ 799.307394][T14651] dump_stack_lvl+0x189/0x250 [ 799.307422][T14651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 799.307443][T14651] ? __pfx__printk+0x10/0x10 [ 799.307463][T14651] ? ref_tracker_alloc+0x318/0x460 [ 799.307480][T14651] should_fail_ex+0x414/0x560 [ 799.307507][T14651] should_failslab+0xa8/0x100 [ 799.307528][T14651] kmem_cache_alloc_noprof+0x73/0x3c0 [ 799.307546][T14651] ? skb_clone+0x212/0x3a0 [ 799.307569][T14651] skb_clone+0x212/0x3a0 [ 799.307591][T14651] __netlink_deliver_tap+0x404/0x850 [ 799.307616][T14651] ? netlink_deliver_tap+0x2e/0x1b0 [ 799.307633][T14651] netlink_deliver_tap+0x19c/0x1b0 [ 799.307649][T14651] netlink_unicast+0x72f/0x8d0 [ 799.307680][T14651] netlink_sendmsg+0x805/0xb30 [ 799.307702][T14651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 799.307720][T14651] ? __import_iovec+0x5d4/0x7f0 [ 799.307738][T14651] ? aa_sock_msg_perm+0x94/0x160 [ 799.307754][T14651] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 799.307771][T14651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 799.307787][T14651] __sock_sendmsg+0x219/0x270 [ 799.307812][T14651] ____sys_sendmsg+0x505/0x830 [ 799.307835][T14651] ? __pfx_____sys_sendmsg+0x10/0x10 [ 799.307873][T14651] ___sys_sendmsg+0x21f/0x2a0 [ 799.307894][T14651] ? __pfx____sys_sendmsg+0x10/0x10 [ 799.307939][T14651] ? __fget_files+0x2a/0x420 [ 799.307957][T14651] ? __fget_files+0x3a0/0x420 [ 799.307983][T14651] __sys_sendmsg+0x164/0x220 [ 799.308003][T14651] ? __pfx___sys_sendmsg+0x10/0x10 [ 799.308032][T14651] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 799.308051][T14651] ? lockdep_hardirqs_on+0x9c/0x150 [ 799.308069][T14651] __do_fast_syscall_32+0xb4/0x110 [ 799.308087][T14651] ? lockdep_hardirqs_on+0x9c/0x150 [ 799.308106][T14651] do_fast_syscall_32+0x34/0x80 [ 799.308124][T14651] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 799.308142][T14651] RIP: 0023:0xf7f53539 [ 799.308154][T14651] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 799.308167][T14651] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 799.308183][T14651] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 799.308193][T14651] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 799.308202][T14651] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 799.308210][T14651] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 799.308220][T14651] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 799.308240][T14651] [ 799.466967][ T5885] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 799.471659][ C1] vkms_vblank_simulate: vblank timer overrun [ 799.580040][ T7214] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 799.586633][ C1] vkms_vblank_simulate: vblank timer overrun [ 799.616998][ C1] hrtimer: interrupt took 301078743 ns [ 799.648153][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 799.648167][ T30] audit: type=1326 audit(1746335512.959:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14640 comm="syz.3.2386" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f43539 code=0x0 [ 799.675664][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.727364][T14652] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2386'. [ 799.923156][ T3453] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 800.002867][ T5885] usb 2-1: config 0 has no interfaces? [ 800.021369][ T5885] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 800.031957][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.063362][ T5885] usb 2-1: Product: syz [ 800.117431][ T3453] usb 3-1: config 0 has no interfaces? [ 800.123304][ T5885] usb 2-1: Manufacturer: syz [ 800.139324][ T5885] usb 2-1: SerialNumber: syz [ 800.181845][ T5885] usb 2-1: config 0 descriptor?? [ 800.212859][T14658] fuse: Unknown parameter 'fd0x0000000000000008' [ 800.334262][ T3453] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 800.366242][ T3453] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.389021][T14658] x_tables: ip_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD [ 800.420941][ T3453] usb 3-1: Product: syz [ 800.459582][ T3453] usb 3-1: Manufacturer: syz [ 800.472850][ T3453] usb 3-1: SerialNumber: syz [ 800.542520][T14661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2391'. [ 800.558245][ T3453] usb 3-1: config 0 descriptor?? [ 800.571185][T14661] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2391'. [ 800.919939][ T8485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 801.026015][ T3453] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 801.344442][ T3453] usb 4-1: Using ep0 maxpacket: 8 [ 801.351494][ T3453] usb 4-1: config 0 has an invalid interface number: 176 but max is 1 [ 801.398067][ T3453] usb 4-1: config 0 has no interface number 1 [ 801.434385][ T3453] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 801.524364][ T3453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.572967][ T3453] usb 4-1: config 0 descriptor?? [ 801.614537][ T3453] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 801.634926][ T3453] usb 4-1: unknown number of interfaces: 2 [ 801.696290][T10684] usb 5-1: new low-speed USB device number 117 using dummy_hcd [ 801.740521][T14672] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2395'. [ 801.796508][T14672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2395'. [ 801.846373][T10684] usb 5-1: device descriptor read/64, error -71 [ 801.899556][ T9710] usb 4-1: USB disconnect, device number 99 [ 802.023711][T14672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2395'. [ 802.096228][T10684] usb 5-1: new low-speed USB device number 118 using dummy_hcd [ 802.208821][ T8485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 802.226179][T10684] usb 5-1: device descriptor read/64, error -71 [ 802.322618][ T5891] usb 3-1: USB disconnect, device number 98 [ 802.339347][T10684] usb usb5-port1: attempt power cycle [ 802.406658][ T9710] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 802.566504][ T9710] usb 1-1: Using ep0 maxpacket: 32 [ 802.591042][ T9710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.613035][ T9710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.623394][ T9710] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 802.633384][ T9710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.661092][ T9710] usb 1-1: config 0 descriptor?? [ 802.696419][T10684] usb 5-1: new low-speed USB device number 119 using dummy_hcd [ 802.728527][T10684] usb 5-1: device descriptor read/8, error -71 [ 802.924535][ T3453] usb 2-1: USB disconnect, device number 94 [ 802.976144][T10684] usb 5-1: new low-speed USB device number 120 using dummy_hcd [ 802.997737][ T119] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 803.017743][T10684] usb 5-1: device descriptor read/8, error -71 [ 803.114966][ T9710] savu 0003:1E7D:2D5A.0063: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 803.127253][T10684] usb usb5-port1: unable to enumerate USB device [ 803.168583][ T119] usb 3-1: Using ep0 maxpacket: 32 [ 803.175494][ T119] usb 3-1: config 0 has an invalid interface number: 7 but max is 0 [ 803.184289][ T119] usb 3-1: config 0 has no interface number 0 [ 803.190837][ T119] usb 3-1: config 0 interface 7 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 803.203798][ T119] usb 3-1: config 0 interface 7 has no altsetting 0 [ 803.213141][ T119] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 803.227178][ T119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.235231][ T119] usb 3-1: Product: syz [ 803.240458][ T119] usb 3-1: Manufacturer: syz [ 803.245164][ T119] usb 3-1: SerialNumber: syz [ 803.260152][ T119] usb 3-1: config 0 descriptor?? [ 803.287307][ T119] smsc75xx v1.0.0 [ 803.291161][ T119] smsc75xx 3-1:0.7 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 803.309761][ T119] smsc75xx 3-1:0.7: probe with driver smsc75xx failed with error -22 [ 803.336276][ T3453] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 803.348518][ T1009] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 803.382441][ T24] usb 1-1: USB disconnect, device number 114 [ 803.528841][ T3453] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 803.537181][ T3453] usb 2-1: config 0 has no interface number 0 [ 803.551157][ T3453] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 803.562822][ T3453] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.573620][ T3453] usb 2-1: Product: syz [ 803.579302][ T3453] usb 2-1: Manufacturer: syz [ 803.583999][ T3453] usb 2-1: SerialNumber: syz [ 803.607955][ T3453] usb 2-1: config 0 descriptor?? [ 803.695067][ T30] audit: type=1326 audit(1746335516.999:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14689 comm="syz.3.2402" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x0 [ 803.821385][T14686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.830340][T14686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.036943][ T24] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 804.118831][T14695] fuse: Unknown parameter 'fd0x0000000000000008' [ 804.138152][T14695] x_tables: ip_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD [ 804.222620][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 804.234028][T14686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.259056][T14686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.277389][ T24] usb 4-1: config 8 has an invalid interface number: 203 but max is 0 [ 804.301127][T14686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.306282][ T24] usb 4-1: config 8 has no interface number 0 [ 804.325439][T14686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.329082][ T24] usb 4-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 804.358219][ T3453] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 804.386062][ T24] usb 4-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 804.408445][ T3453] usb 2-1: USB disconnect, device number 95 [ 804.426100][ T24] usb 4-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023 [ 804.450090][ T24] usb 4-1: config 8 interface 203 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 804.476266][ T24] usb 4-1: config 8 interface 203 has no altsetting 0 [ 804.497633][ T8485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 804.504117][ T24] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 804.535478][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.576172][ T24] usb 4-1: Product: syz [ 804.584970][ T24] usb 4-1: Manufacturer: syz [ 804.602929][ T24] usb 4-1: SerialNumber: syz [ 804.631534][T14691] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 804.666446][T14691] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 804.859026][T14709] fuse: Bad value for 'fd' [ 805.066141][ T119] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 805.246133][ T119] usb 5-1: Using ep0 maxpacket: 16 [ 805.286504][ T119] usb 5-1: config index 0 descriptor too short (expected 1828, got 36) [ 805.313989][ T119] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 805.361622][ T119] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.379259][ T5891] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 805.403144][ T119] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 805.418350][ T119] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 805.428746][ T119] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 805.452974][ T119] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 805.463317][ T119] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.536738][ T119] usb 5-1: Product: syz [ 805.541576][ T119] usb 5-1: Manufacturer: syz [ 805.553290][ T119] usb 5-1: SerialNumber: syz [ 805.576575][ T119] usb 5-1: config 0 descriptor?? [ 805.627538][ T5891] usb 2-1: config 0 has no interfaces? [ 805.642597][ T119] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 805.676470][ T5891] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 805.694072][ T7214] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 805.702324][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.703654][ T119] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 805.729048][ T119] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 805.742326][ T119] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 805.773065][ T119] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 805.790194][ T5891] usb 2-1: Product: syz [ 805.798538][ T119] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 805.806515][ T119] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 805.815267][ T119] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 805.828712][ T119] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 805.867933][T14710] tipc: Started in network mode [ 805.873037][T14710] tipc: Node identity , cluster identity 4711 [ 805.887704][ T5891] usb 2-1: Manufacturer: syz [ 805.888434][ T119] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 805.892616][ T5891] usb 2-1: SerialNumber: syz [ 805.917545][ T119] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 805.925797][ T119] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 805.935872][T14710] tipc: Failed to obtain node identity [ 805.946353][T14710] tipc: Enabling of bearer rejected, failed to enable media [ 805.949560][ T119] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 806.097995][ T5891] usb 2-1: config 0 descriptor?? [ 806.118515][T14710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.129955][T14710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.156112][ T119] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 806.238961][T14719] FAULT_INJECTION: forcing a failure. [ 806.238961][T14719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 806.299515][ T119] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 806.308388][T14719] CPU: 1 UID: 0 PID: 14719 Comm: syz.0.2409 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 806.308415][T14719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 806.308428][T14719] Call Trace: [ 806.308436][T14719] [ 806.308445][T14719] dump_stack_lvl+0x189/0x250 [ 806.308483][T14719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 806.308510][T14719] ? __pfx__printk+0x10/0x10 [ 806.308560][T14719] should_fail_ex+0x414/0x560 [ 806.308598][T14719] _copy_to_user+0x31/0xb0 [ 806.308639][T14719] simple_read_from_buffer+0xe1/0x170 [ 806.308669][T14719] proc_fail_nth_read+0x1df/0x250 [ 806.308717][T14719] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 806.308749][T14719] ? rw_verify_area+0x258/0x650 [ 806.308769][T14719] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 806.308799][T14719] vfs_read+0x1fd/0x980 [ 806.308827][T14719] ? __pfx___mutex_lock+0x10/0x10 [ 806.308852][T14719] ? __pfx_vfs_read+0x10/0x10 [ 806.308876][T14719] ? __fget_files+0x2a/0x420 [ 806.308904][T14719] ? __fget_files+0x3a0/0x420 [ 806.308928][T14719] ? __fget_files+0x2a/0x420 [ 806.308961][T14719] ksys_read+0x145/0x250 [ 806.308983][T14719] ? rcu_is_watching+0x15/0xb0 [ 806.309014][T14719] ? __pfx_ksys_read+0x10/0x10 [ 806.309038][T14719] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 806.309073][T14719] ? lockdep_hardirqs_on+0x9c/0x150 [ 806.309099][T14719] __do_fast_syscall_32+0xb4/0x110 [ 806.309126][T14719] ? lockdep_hardirqs_on+0x9c/0x150 [ 806.309153][T14719] do_fast_syscall_32+0x34/0x80 [ 806.309178][T14719] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 806.309203][T14719] RIP: 0023:0xf703e539 [ 806.309222][T14719] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 806.309240][T14719] RSP: 002b:00000000f502e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 806.309261][T14719] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 00000000f502e620 [ 806.309275][T14719] RDX: 000000000000000f RSI: 00000000f73a2ff4 RDI: 0000000000000000 [ 806.309288][T14719] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 806.309300][T14719] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 806.309311][T14719] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 806.309340][T14719] [ 806.714088][ T5891] usb 3-1: USB disconnect, device number 99 [ 806.831163][ C1] port100 4-1:8.203: NFC: Urb failure (status -71) [ 806.840533][ C1] port100 4-1:8.203: NFC: Urb failure (status -71) [ 806.848570][ T24] port100 4-1:8.203: NFC: Could not get supported command types [ 806.871220][ T24] usb 4-1: USB disconnect, device number 100 [ 807.027150][ T30] audit: type=1326 audit(1746335520.319:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14713 comm="syz.1.2408" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 807.051061][ T30] audit: type=1326 audit(1746335520.319:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14713 comm="syz.1.2408" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 807.075528][ T30] audit: type=1326 audit(1746335520.319:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14713 comm="syz.1.2408" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 807.099112][ T30] audit: type=1326 audit(1746335520.319:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14713 comm="syz.1.2408" exe="/root/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 807.107441][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 807.165753][ T30] audit: type=1326 audit(1746335520.319:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14713 comm="syz.1.2408" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 807.290439][ T30] audit: type=1326 audit(1746335520.319:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14713 comm="syz.1.2408" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 807.435130][ T30] audit: type=1326 audit(1746335520.329:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14713 comm="syz.1.2408" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 807.523198][ T30] audit: type=1326 audit(1746335520.329:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14713 comm="syz.1.2408" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 807.606365][ T30] audit: type=1326 audit(1746335520.329:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14713 comm="syz.1.2408" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 807.686167][T14735] fuse: Unknown parameter 'fd0x0000000000000008' [ 807.694974][ T30] audit: type=1326 audit(1746335520.329:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14713 comm="syz.1.2408" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 807.734417][T14736] x_tables: ip_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD [ 807.822642][ T5885] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 807.873026][ T5891] usb 5-1: USB disconnect, device number 121 [ 807.882842][ T5891] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 807.932865][ T5891] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 807.960163][ T5891] keyspan 5-1:0.0: device disconnected [ 807.993207][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 808.030542][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.087314][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.112889][ T5885] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 808.130938][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.147909][ T5885] usb 3-1: config 0 descriptor?? [ 808.334521][ T8485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 808.390063][T14748] bridge0: port 3(erspan0) entered blocking state [ 808.409267][T14748] bridge0: port 3(erspan0) entered disabled state [ 808.453216][T14749] netlink: 'syz.4.2417': attribute type 11 has an invalid length. [ 808.457056][T14748] erspan0: entered allmulticast mode [ 808.474320][T14748] erspan0: entered promiscuous mode [ 808.605738][ T5885] savu 0003:1E7D:2D5A.0064: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 808.671120][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.678804][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.726034][T10684] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 808.806085][ T119] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 808.853494][ T5885] usb 3-1: USB disconnect, device number 100 [ 808.876019][T10684] usb 4-1: Using ep0 maxpacket: 16 [ 808.894774][T10684] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 808.904130][T10684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.930396][T10684] usb 4-1: Product: syz [ 808.939775][T10684] usb 4-1: Manufacturer: syz [ 808.944487][T10684] usb 4-1: SerialNumber: syz [ 808.971173][T10684] usb 4-1: config 0 descriptor?? [ 808.981197][ T119] usb 5-1: config 0 has an invalid interface number: 114 but max is 0 [ 809.028480][ T119] usb 5-1: config 0 has no interface number 0 [ 809.053281][ T5891] usb 2-1: USB disconnect, device number 96 [ 809.053404][ T119] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=13.67 [ 809.156777][ T119] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.175401][ T119] usb 5-1: Product: syz [ 809.179827][ T119] usb 5-1: Manufacturer: syz [ 809.185381][ T119] usb 5-1: SerialNumber: syz [ 809.210362][ T119] usb 5-1: config 0 descriptor?? [ 809.243619][T10684] usb 4-1: Limiting number of CPorts to U8_MAX [ 809.255533][T10684] usb 4-1: Not enough endpoints found in device, aborting! [ 809.425170][T14748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.440271][T14748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.459655][T14748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.466996][ T8485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 809.471876][T14748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.492350][ T9710] usb 4-1: USB disconnect, device number 101 [ 809.526167][ T5891] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 809.688291][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.704400][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.726623][ T5891] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 809.739638][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.754937][ T5891] usb 2-1: config 0 descriptor?? [ 809.986233][ T9710] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 810.166115][ T9710] usb 3-1: Using ep0 maxpacket: 32 [ 810.174872][ T5891] cp2112 0003:10C4:EA90.0065: unknown main item tag 0x0 [ 810.205894][ T9710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.233301][ T5891] cp2112 0003:10C4:EA90.0065: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 810.256109][ T9710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.284069][ T9710] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 810.315291][ T9710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.345284][ T9710] usb 3-1: config 0 descriptor?? [ 810.372779][ T5891] cp2112 0003:10C4:EA90.0065: Part Number: 0x82 Device Version: 0xFE [ 810.448232][T14766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 810.596205][ T8485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 810.817384][ T9710] savu 0003:1E7D:2D5A.0066: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 810.983708][T14754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.992905][T14754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.007794][ T5891] cp2112 0003:10C4:EA90.0065: error reading lock byte: -71 [ 811.030493][ T5891] usb 2-1: USB disconnect, device number 97 [ 811.461609][ T9710] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 811.584867][ T119] cdc_subset 5-1:0.114: probe with driver cdc_subset failed with error -71 [ 811.601093][ T119] usb 5-1: USB disconnect, device number 122 [ 811.676232][ T9710] usb 4-1: Using ep0 maxpacket: 16 [ 811.727340][ T1108] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 811.736430][ T9710] usb 4-1: config index 0 descriptor too short (expected 1828, got 36) [ 811.791726][ T9710] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 811.802749][ T9710] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.848978][ T9710] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 811.863044][T14775] fuse: Unknown parameter 'fd0x0000000000000008' [ 811.912767][ T9710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 811.932089][T14775] x_tables: ip_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD [ 811.969872][ T9710] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 811.999622][ T9710] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 812.010496][ T9710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.018882][ T9710] usb 4-1: Product: syz [ 812.023503][ T9710] usb 4-1: Manufacturer: syz [ 812.029267][ T9710] usb 4-1: SerialNumber: syz [ 812.041155][ T9710] usb 4-1: config 0 descriptor?? [ 812.052039][ T9710] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 812.060151][ T9710] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 812.085238][ T9710] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 812.094631][ T9710] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 812.102800][ T9710] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 812.110784][ T9710] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 812.120797][ T9710] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 812.128851][ T9710] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 812.145081][ T9710] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 812.156332][ T9710] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 812.170341][ T9710] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 812.192780][ T9710] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 812.212131][ T9710] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 812.235748][ T9710] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 812.253936][T14770] tipc: Enabled bearer , priority 22 [ 812.266308][ T119] usb 3-1: reset high-speed USB device number 101 using dummy_hcd [ 812.289952][ T9710] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 812.317555][T14770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.328983][T14770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.510817][T14783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2429'. [ 812.667051][T14786] FAULT_INJECTION: forcing a failure. [ 812.667051][T14786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.725344][T14786] CPU: 0 UID: 0 PID: 14786 Comm: syz.1.2431 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 812.725368][T14786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 812.725377][T14786] Call Trace: [ 812.725383][T14786] [ 812.725390][T14786] dump_stack_lvl+0x189/0x250 [ 812.725422][T14786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 812.725443][T14786] ? __pfx__printk+0x10/0x10 [ 812.725467][T14786] should_fail_ex+0x414/0x560 [ 812.725495][T14786] _copy_to_user+0x31/0xb0 [ 812.725517][T14786] simple_read_from_buffer+0xe1/0x170 [ 812.725539][T14786] proc_fail_nth_read+0x1df/0x250 [ 812.725562][T14786] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 812.725585][T14786] ? rw_verify_area+0x258/0x650 [ 812.725600][T14786] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 812.725623][T14786] vfs_read+0x1fd/0x980 [ 812.725643][T14786] ? __pfx___mutex_lock+0x10/0x10 [ 812.725661][T14786] ? __pfx_vfs_read+0x10/0x10 [ 812.725678][T14786] ? __fget_files+0x2a/0x420 [ 812.725701][T14786] ? __fget_files+0x3a0/0x420 [ 812.725718][T14786] ? __fget_files+0x2a/0x420 [ 812.725743][T14786] ksys_read+0x145/0x250 [ 812.725760][T14786] ? __pfx_ksys_read+0x10/0x10 [ 812.725778][T14786] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 812.725796][T14786] ? lockdep_hardirqs_on+0x9c/0x150 [ 812.725814][T14786] __do_fast_syscall_32+0xb4/0x110 [ 812.725833][T14786] ? lockdep_hardirqs_on+0x9c/0x150 [ 812.725852][T14786] do_fast_syscall_32+0x34/0x80 [ 812.725878][T14786] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 812.725896][T14786] RIP: 0023:0xf706e539 [ 812.725912][T14786] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 812.725930][T14786] RSP: 002b:00000000f505e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 812.725950][T14786] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f505e620 [ 812.725964][T14786] RDX: 000000000000000f RSI: 00000000f73d2ff4 RDI: 0000000000000000 [ 812.725976][T14786] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 812.725988][T14786] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 812.725999][T14786] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 812.726027][T14786] [ 812.949191][ C0] vkms_vblank_simulate: vblank timer overrun [ 813.272997][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 814.016089][ T119] usb 3-1: device descriptor read/64, error -71 [ 814.146007][T10684] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 814.297097][ T119] usb 3-1: reset high-speed USB device number 101 using dummy_hcd [ 814.390980][T10684] usb 2-1: config 0 has no interfaces? [ 814.400684][T10684] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 814.411167][T10684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.422144][T10684] usb 2-1: Product: syz [ 814.428914][T10684] usb 2-1: Manufacturer: syz [ 814.433942][T10684] usb 2-1: SerialNumber: syz [ 814.457966][T10684] usb 2-1: config 0 descriptor?? [ 814.589899][ T1108] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 814.755098][ T9710] usb 4-1: USB disconnect, device number 102 [ 814.806255][ T9710] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 814.844745][ T9710] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 814.891571][ T9710] keyspan 4-1:0.0: device disconnected [ 815.663500][T14805] FAULT_INJECTION: forcing a failure. [ 815.663500][T14805] name failslab, interval 1, probability 0, space 0, times 0 [ 815.678461][T14805] CPU: 1 UID: 0 PID: 14805 Comm: syz.0.2436 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 815.678492][T14805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 815.678505][T14805] Call Trace: [ 815.678514][T14805] [ 815.678535][T14805] dump_stack_lvl+0x189/0x250 [ 815.678572][T14805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 815.678602][T14805] ? __pfx__printk+0x10/0x10 [ 815.678647][T14805] ? ref_tracker_alloc+0x318/0x460 [ 815.678673][T14805] should_fail_ex+0x414/0x560 [ 815.678710][T14805] should_failslab+0xa8/0x100 [ 815.678738][T14805] kmem_cache_alloc_noprof+0x73/0x3c0 [ 815.678760][T14805] ? skb_clone+0x212/0x3a0 [ 815.678783][T14805] skb_clone+0x212/0x3a0 [ 815.678814][T14805] __netlink_deliver_tap+0x404/0x850 [ 815.678850][T14805] ? netlink_deliver_tap+0x2e/0x1b0 [ 815.678873][T14805] netlink_deliver_tap+0x19c/0x1b0 [ 815.678896][T14805] netlink_unicast+0x72f/0x8d0 [ 815.678927][T14805] netlink_sendmsg+0x805/0xb30 [ 815.678954][T14805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 815.678981][T14805] ? __import_iovec+0x5d4/0x7f0 [ 815.679017][T14805] ? aa_sock_msg_perm+0x94/0x160 [ 815.679039][T14805] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 815.679058][T14805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 815.679074][T14805] __sock_sendmsg+0x219/0x270 [ 815.679099][T14805] ____sys_sendmsg+0x505/0x830 [ 815.679132][T14805] ? __pfx_____sys_sendmsg+0x10/0x10 [ 815.679174][T14805] ___sys_sendmsg+0x21f/0x2a0 [ 815.679216][T14805] ? __pfx____sys_sendmsg+0x10/0x10 [ 815.679270][T14805] ? __fget_files+0x2a/0x420 [ 815.679296][T14805] ? __fget_files+0x3a0/0x420 [ 815.679331][T14805] __sys_sendmsg+0x164/0x220 [ 815.679357][T14805] ? __pfx___sys_sendmsg+0x10/0x10 [ 815.679387][T14805] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 815.679410][T14805] ? lockdep_hardirqs_on+0x9c/0x150 [ 815.679444][T14805] __do_fast_syscall_32+0xb4/0x110 [ 815.679471][T14805] ? lockdep_hardirqs_on+0x9c/0x150 [ 815.679499][T14805] do_fast_syscall_32+0x34/0x80 [ 815.679525][T14805] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 815.679550][T14805] RIP: 0023:0xf703e539 [ 815.679567][T14805] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 815.679584][T14805] RSP: 002b:00000000f502e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 815.679607][T14805] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800003c0 [ 815.679621][T14805] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 815.679632][T14805] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 815.679644][T14805] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 815.679655][T14805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 815.679685][T14805] [ 815.683631][T14804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 816.036059][ T9710] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 816.088242][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 816.186059][ T9710] usb 4-1: Using ep0 maxpacket: 16 [ 816.197014][ T9710] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 816.207744][ T9710] usb 4-1: config 0 has no interface number 0 [ 816.214076][ T9710] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 816.226085][ T9710] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 816.240295][ T9710] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 816.251300][ T9710] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 816.261614][ T9710] usb 4-1: Product: syz [ 816.269074][ T9710] usb 4-1: SerialNumber: syz [ 816.280483][ T9710] usb 4-1: config 0 descriptor?? [ 816.295035][ T9710] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 816.311385][ T9710] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input45 [ 816.526011][ T5885] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 816.538739][T14802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.551509][T14802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.579278][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 816.590950][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 816.593646][ T5887] usb 4-1: USB disconnect, device number 103 [ 816.597934][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 816.644927][T10684] usb 2-1: USB disconnect, device number 98 [ 816.700708][ T5887] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 816.755584][ T5885] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 816.773837][T14809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2438'. [ 816.789139][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.803761][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2438'. [ 816.814727][ T5885] usb 5-1: config 0 descriptor?? [ 816.866928][ T3453] usb 3-1: USB disconnect, device number 101 [ 816.968295][T14809] bridge0: port 3(syz_tun) entered blocking state [ 816.975139][T14809] bridge0: port 3(syz_tun) entered disabled state [ 816.987847][T14809] syz_tun: entered allmulticast mode [ 817.020045][T14814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2438'. [ 817.131286][ T5885] kaweth 5-1:0.0: Firmware present in device. [ 817.147247][T14809] syz_tun: entered promiscuous mode [ 817.266486][ T5885] kaweth 5-1:0.0: Statistics collection: 0 [ 817.278185][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 817.336060][ T5885] kaweth 5-1:0.0: Multicast filter limit: 0 [ 817.400197][ T5885] kaweth 5-1:0.0: MTU: 0 [ 817.425351][ T5885] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 817.586036][ T3453] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 817.666057][ T5887] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 817.877195][ T5885] kaweth 5-1:0.0: Error setting receive filter [ 817.892866][ T5885] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 817.901876][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 817.910304][T14822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 817.930419][ T5887] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 817.971337][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.982826][ T5885] usb 5-1: USB disconnect, device number 123 [ 818.024529][ T5887] usb 4-1: config 0 descriptor?? [ 818.258890][T14821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.275261][T14821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.311900][ T5887] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 818.340382][ T5887] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 818.376314][ T5887] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 818.396786][ T5887] usb 4-1: media controller created [ 818.456638][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 818.507333][T11906] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 819.019289][ T119] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 819.077456][T14832] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2443'. [ 819.157148][ T3453] usb 3-1: unable to get BOS descriptor or descriptor too short [ 819.174843][ T3453] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 819.214108][ T3453] usb 3-1: can't read configurations, error -71 [ 819.261967][T14838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2444'. [ 819.290484][ T119] usb 1-1: Using ep0 maxpacket: 32 [ 819.305422][ T119] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.333873][ T119] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.345144][ T119] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 819.364887][ T119] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.503544][ T119] usb 1-1: config 0 descriptor?? [ 819.712893][T14843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2445'. [ 819.836422][T11906] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 820.388455][ T119] savu 0003:1E7D:2D5A.0067: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 820.411903][ T5887] az6027: usb out operation failed. (-71) [ 820.443644][ T5887] az6027: usb out operation failed. (-71) [ 820.469333][ T5887] stb0899_attach: Driver disabled by Kconfig [ 820.511039][ T5887] az6027: no front-end attached [ 820.511039][ T5887] [ 820.565482][ T5887] az6027: usb out operation failed. (-71) [ 820.573496][ T5887] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 820.675367][ T5887] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input46 [ 820.739703][ T5887] dvb-usb: schedule remote query interval to 400 msecs. [ 820.776417][ T5887] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 820.855356][ T5887] usb 4-1: USB disconnect, device number 104 [ 820.967574][T11906] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 821.093600][ T5887] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 821.562469][ T5885] usb 1-1: USB disconnect, device number 115 [ 822.106184][ T5885] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 822.108625][ T8485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 822.146117][ T3453] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 822.343019][ T3453] usb 4-1: config 0 has no interfaces? [ 822.466050][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 822.479562][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.606025][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.655220][ T5885] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 822.721950][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.730153][ T119] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 822.760049][ T3453] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 822.800754][ T3453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.812229][ T5885] usb 1-1: config 0 descriptor?? [ 822.830031][ T3453] usb 4-1: Product: syz [ 822.834515][ T3453] usb 4-1: Manufacturer: syz [ 822.984010][ T3453] usb 4-1: SerialNumber: syz [ 823.052776][ T3453] usb 4-1: config 0 descriptor?? [ 823.071356][ T119] usb 2-1: config 0 has no interfaces? [ 823.122153][ T119] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 823.135060][ T119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.172426][ T119] usb 2-1: Product: syz [ 823.181070][ T119] usb 2-1: Manufacturer: syz [ 823.191953][ T119] usb 2-1: SerialNumber: syz [ 823.224131][ T119] usb 2-1: config 0 descriptor?? [ 823.301351][ T5885] savu 0003:1E7D:2D5A.0068: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 823.328070][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 823.940179][T10684] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 824.117840][T10684] usb 5-1: Using ep0 maxpacket: 16 [ 824.149212][T10684] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 824.169036][T10684] usb 5-1: config 0 has no interface number 0 [ 824.175361][T10684] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 824.214032][T10684] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 824.235426][T10684] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 824.250003][T10684] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 824.259310][T10684] usb 5-1: Product: syz [ 824.263647][T10684] usb 5-1: SerialNumber: syz [ 824.288873][T10684] usb 5-1: config 0 descriptor?? [ 824.301227][T10684] cm109 5-1:0.8: invalid payload size 1024, expected 4 [ 824.324188][T10684] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input47 [ 824.612790][T14869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.666517][T14869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.711307][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 824.718657][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 824.725843][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 824.734320][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 824.741531][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 824.748848][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 824.756087][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 824.763643][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 824.770835][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 824.778076][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 824.788980][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 824.808894][ T9710] usb 5-1: USB disconnect, device number 124 [ 824.808902][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 824.982299][ T9710] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 825.012312][T10684] usb 1-1: USB disconnect, device number 116 [ 825.442616][T10684] usb 4-1: USB disconnect, device number 105 [ 825.590998][T14887] FAULT_INJECTION: forcing a failure. [ 825.590998][T14887] name failslab, interval 1, probability 0, space 0, times 0 [ 825.662823][T14890] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2458'. [ 825.676005][T14887] CPU: 1 UID: 0 PID: 14887 Comm: syz.3.2457 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 825.676034][T14887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 825.676048][T14887] Call Trace: [ 825.676056][T14887] [ 825.676066][T14887] dump_stack_lvl+0x189/0x250 [ 825.676104][T14887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 825.676134][T14887] ? __pfx__printk+0x10/0x10 [ 825.676157][T14887] ? __pfx___might_resched+0x10/0x10 [ 825.676176][T14887] ? fs_reclaim_acquire+0x7d/0x100 [ 825.676211][T14887] should_fail_ex+0x414/0x560 [ 825.676248][T14887] should_failslab+0xa8/0x100 [ 825.676276][T14887] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 825.676301][T14887] ? __alloc_skb+0x112/0x2d0 [ 825.676329][T14887] __alloc_skb+0x112/0x2d0 [ 825.676357][T14887] alloc_skb_with_frags+0xca/0x890 [ 825.676388][T14887] ? __might_fault+0xb0/0x130 [ 825.676420][T14887] sock_alloc_send_pskb+0x857/0x990 [ 825.676474][T14887] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 825.676504][T14887] ? __lock_acquire+0xaac/0xd20 [ 825.676545][T14887] queue_oob+0xe6/0x4e0 [ 825.676571][T14887] ? __pfx_queue_oob+0x10/0x10 [ 825.676598][T14887] ? sock_def_readable+0x30f/0x550 [ 825.676614][T14887] ? sock_def_readable+0xbe/0x550 [ 825.676635][T14887] unix_stream_sendmsg+0xa41/0xb60 [ 825.676673][T14887] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 825.676699][T14887] ? __asan_memset+0x22/0x50 [ 825.676718][T14887] ? __import_iovec+0x40e/0x7f0 [ 825.676742][T14887] ? aa_sock_msg_perm+0x94/0x160 [ 825.676767][T14887] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 825.676788][T14887] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 825.676811][T14887] __sock_sendmsg+0x219/0x270 [ 825.676846][T14887] ____sys_sendmsg+0x505/0x830 [ 825.676878][T14887] ? __pfx_____sys_sendmsg+0x10/0x10 [ 825.676921][T14887] ___sys_sendmsg+0x21f/0x2a0 [ 825.676960][T14887] ? __pfx____sys_sendmsg+0x10/0x10 [ 825.677023][T14887] ? __fget_files+0x2a/0x420 [ 825.677048][T14887] ? __fget_files+0x3a0/0x420 [ 825.677085][T14887] __sys_sendmsg+0x164/0x220 [ 825.677114][T14887] ? __pfx___sys_sendmsg+0x10/0x10 [ 825.677155][T14887] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 825.677181][T14887] ? lockdep_hardirqs_on+0x9c/0x150 [ 825.677206][T14887] __do_fast_syscall_32+0xb4/0x110 [ 825.677233][T14887] ? lockdep_hardirqs_on+0x9c/0x150 [ 825.677260][T14887] do_fast_syscall_32+0x34/0x80 [ 825.677285][T14887] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 825.677309][T14887] RIP: 0023:0xf7f43539 [ 825.677326][T14887] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 825.677344][T14887] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 825.677366][T14887] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000800 [ 825.677381][T14887] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000000 [ 825.677394][T14887] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 825.677406][T14887] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 825.677418][T14887] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 825.677448][T14887] [ 825.995991][ C1] vkms_vblank_simulate: vblank timer overrun [ 826.326020][ T9710] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 826.457402][ T1009] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 826.476047][ T9710] usb 5-1: device descriptor read/64, error -71 [ 826.596381][T10684] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 826.689140][T14900] FAULT_INJECTION: forcing a failure. [ 826.689140][T14900] name failslab, interval 1, probability 0, space 0, times 0 [ 826.765443][ T5885] usb 2-1: USB disconnect, device number 99 [ 826.766037][ T9710] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 826.773136][T10684] usb 1-1: Using ep0 maxpacket: 32 [ 826.797278][T14900] CPU: 1 UID: 0 PID: 14900 Comm: syz.2.2461 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 826.797308][T14900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 826.797322][T14900] Call Trace: [ 826.797331][T14900] [ 826.797340][T14900] dump_stack_lvl+0x189/0x250 [ 826.797379][T14900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 826.797408][T14900] ? __pfx__printk+0x10/0x10 [ 826.797435][T14900] ? __pfx___might_resched+0x10/0x10 [ 826.797454][T14900] ? fs_reclaim_acquire+0x7d/0x100 [ 826.797489][T14900] should_fail_ex+0x414/0x560 [ 826.797528][T14900] should_failslab+0xa8/0x100 [ 826.797557][T14900] __kmalloc_noprof+0xcb/0x4f0 [ 826.797580][T14900] ? kfree+0x4d/0x440 [ 826.797600][T14900] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 826.797637][T14900] tomoyo_realpath_from_path+0xe3/0x5d0 [ 826.797678][T14900] tomoyo_check_open_permission+0x1c1/0x3b0 [ 826.797708][T14900] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 826.797733][T14900] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 826.797765][T14900] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 826.797796][T14900] ? __ia32_compat_sys_openat+0x131/0x160 [ 826.797868][T14900] ? tomoyo_file_open+0x166/0x220 [ 826.797900][T14900] security_file_open+0xb1/0x270 [ 826.797931][T14900] do_dentry_open+0x35e/0x1970 [ 826.797977][T14900] vfs_open+0x3b/0x340 [ 826.798003][T14900] ? path_openat+0x2ecd/0x3830 [ 826.798026][T14900] path_openat+0x2ee5/0x3830 [ 826.798044][T14900] ? arch_stack_walk+0xfc/0x150 [ 826.798107][T14900] ? __pfx_path_openat+0x10/0x10 [ 826.798124][T14900] ? do_fast_syscall_32+0x34/0x80 [ 826.798149][T14900] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 826.798192][T14900] do_filp_open+0x1fa/0x410 [ 826.798215][T14900] ? __pfx_do_filp_open+0x10/0x10 [ 826.798260][T14900] ? _raw_spin_unlock+0x28/0x50 [ 826.798280][T14900] ? alloc_fd+0x64c/0x6c0 [ 826.798320][T14900] do_sys_openat2+0x121/0x1c0 [ 826.798355][T14900] ? __pfx_do_sys_openat2+0x10/0x10 [ 826.798390][T14900] ? ksys_write+0x1f0/0x250 [ 826.798420][T14900] __ia32_compat_sys_openat+0x131/0x160 [ 826.798459][T14900] __do_fast_syscall_32+0xb4/0x110 [ 826.798484][T14900] ? lockdep_hardirqs_on+0x9c/0x150 [ 826.798511][T14900] do_fast_syscall_32+0x34/0x80 [ 826.798534][T14900] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 826.798558][T14900] RIP: 0023:0xf7f75539 [ 826.798575][T14900] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 826.798592][T14900] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 826.798613][T14900] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000180 [ 826.798636][T14900] RDX: 0000000000024c01 RSI: 0000000000000000 RDI: 0000000000000000 [ 826.798646][T14900] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 826.798655][T14900] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 826.798665][T14900] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 826.798688][T14900] [ 826.801205][T14900] ERROR: Out of memory at tomoyo_realpath_from_path. [ 827.156022][T10684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.202709][T10684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.236121][ T9710] usb 5-1: device descriptor read/64, error -71 [ 827.310742][T10684] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 827.346651][ T9710] usb usb5-port1: attempt power cycle [ 827.349423][T10684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.392393][T10684] usb 1-1: config 0 descriptor?? [ 827.686073][ T9710] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 827.706958][ T9710] usb 5-1: device descriptor read/8, error -71 [ 827.889158][ T8485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 827.917458][T10684] savu 0003:1E7D:2D5A.0069: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 827.956722][ T9710] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 828.016226][ T47] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 828.028003][ T9710] usb 5-1: device descriptor read/8, error -71 [ 828.146537][ T9710] usb usb5-port1: unable to enumerate USB device [ 828.186333][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 828.201694][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.230034][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.249847][ T47] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 828.259254][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.276842][ T47] usb 4-1: config 0 descriptor?? [ 828.722674][ T47] savu 0003:1E7D:2D5A.006A: hiddev1,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 829.018185][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 829.197707][T14922] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2468'. [ 829.286338][T10684] usb 1-1: reset high-speed USB device number 117 using dummy_hcd [ 830.067209][ T5887] usb 1-1: USB disconnect, device number 117 [ 830.167585][T11906] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 830.296126][ T5885] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 830.457756][ T5885] usb 5-1: config 0 has no interfaces? [ 830.532499][ T5885] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 830.566979][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.604635][ T5885] usb 5-1: Product: syz [ 830.648607][ T5885] usb 5-1: Manufacturer: syz [ 830.658294][ T5885] usb 5-1: SerialNumber: syz [ 830.691816][ T5885] usb 5-1: config 0 descriptor?? [ 830.755657][ T5885] usb 4-1: USB disconnect, device number 106 [ 830.924935][ T119] usb 5-1: USB disconnect, device number 3 [ 830.937551][T14945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2475'. [ 830.953618][T14945] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2475'. [ 831.050065][T14947] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2477'. [ 831.136406][ T5887] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 831.153149][T14949] FAULT_INJECTION: forcing a failure. [ 831.153149][T14949] name failslab, interval 1, probability 0, space 0, times 0 [ 831.175026][T14949] CPU: 1 UID: 0 PID: 14949 Comm: syz.1.2478 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 831.175055][T14949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 831.175068][T14949] Call Trace: [ 831.175076][T14949] [ 831.175085][T14949] dump_stack_lvl+0x189/0x250 [ 831.175122][T14949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 831.175151][T14949] ? __pfx__printk+0x10/0x10 [ 831.175175][T14949] ? ref_tracker_alloc+0x318/0x460 [ 831.175199][T14949] should_fail_ex+0x414/0x560 [ 831.175235][T14949] should_failslab+0xa8/0x100 [ 831.175262][T14949] kmem_cache_alloc_noprof+0x73/0x3c0 [ 831.175346][T14949] ? skb_clone+0x212/0x3a0 [ 831.175378][T14949] skb_clone+0x212/0x3a0 [ 831.175407][T14949] __netlink_deliver_tap+0x404/0x850 [ 831.175441][T14949] ? netlink_deliver_tap+0x2e/0x1b0 [ 831.175464][T14949] netlink_deliver_tap+0x19c/0x1b0 [ 831.175486][T14949] netlink_unicast+0x72f/0x8d0 [ 831.175528][T14949] netlink_sendmsg+0x805/0xb30 [ 831.175559][T14949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.175583][T14949] ? __import_iovec+0x5d4/0x7f0 [ 831.175607][T14949] ? aa_sock_msg_perm+0x94/0x160 [ 831.175630][T14949] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 831.175653][T14949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.175692][T14949] __sock_sendmsg+0x219/0x270 [ 831.175728][T14949] ____sys_sendmsg+0x505/0x830 [ 831.175760][T14949] ? __pfx_____sys_sendmsg+0x10/0x10 [ 831.175804][T14949] ___sys_sendmsg+0x21f/0x2a0 [ 831.175833][T14949] ? __pfx____sys_sendmsg+0x10/0x10 [ 831.175898][T14949] ? __fget_files+0x2a/0x420 [ 831.175928][T14949] ? __fget_files+0x3a0/0x420 [ 831.175964][T14949] __sys_sendmsg+0x164/0x220 [ 831.175991][T14949] ? __pfx___sys_sendmsg+0x10/0x10 [ 831.176031][T14949] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 831.176056][T14949] ? lockdep_hardirqs_on+0x9c/0x150 [ 831.176081][T14949] __do_fast_syscall_32+0xb4/0x110 [ 831.176106][T14949] ? lockdep_hardirqs_on+0x9c/0x150 [ 831.176132][T14949] do_fast_syscall_32+0x34/0x80 [ 831.176155][T14949] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 831.176179][T14949] RIP: 0023:0xf706e539 [ 831.176197][T14949] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 831.176214][T14949] RSP: 002b:00000000f505e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 831.176234][T14949] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000080000000 [ 831.176249][T14949] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 831.176261][T14949] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 831.176272][T14949] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 831.176294][T14949] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 831.176324][T14949] [ 831.476155][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 831.487929][T14949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2478'. [ 831.528746][T14949] ipvlan0: entered promiscuous mode [ 831.545533][T14949] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 831.553661][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 831.560777][ T5887] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 831.570611][T14949] team0: Device ipvlan0 is already an upper device of the team interface [ 831.580655][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.593805][ T5887] usb 3-1: config 0 descriptor?? [ 831.689328][T14958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2480'. [ 831.830241][ T5887] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 832.657028][ T7214] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 832.787744][T10684] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 833.036050][T10684] usb 2-1: Using ep0 maxpacket: 8 [ 833.044020][T10684] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 833.054943][T10684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.099844][T10684] pvrusb2: Hardware description: Terratec Grabster AV400 [ 833.124086][T10684] pvrusb2: ********** [ 833.136046][T10684] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 833.165353][T10684] pvrusb2: Important functionality might not be entirely working. [ 833.234427][T10684] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 833.307663][T10684] pvrusb2: ********** [ 833.342821][ T2341] pvrusb2: Invalid write control endpoint [ 833.467622][ T5887] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 833.480873][ T5887] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 833.525292][ T47] usb 2-1: USB disconnect, device number 100 [ 833.598566][ T5887] asix 3-1:0.0: probe with driver asix failed with error -71 [ 833.599189][ T2341] pvrusb2: Invalid write control endpoint [ 833.640853][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 833.669477][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 833.676329][ T5887] usb 3-1: USB disconnect, device number 104 [ 833.689333][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 833.708919][ T2341] pvrusb2: Device being rendered inoperable [ 833.784987][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 833.806920][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 833.833080][ T2341] pvrusb2: Attached sub-driver cx25840 [ 833.842555][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 833.856101][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 834.003046][ T7214] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 834.426327][ T5887] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 834.466097][ T5885] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 834.598661][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 834.608560][ T5887] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 834.622521][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.634181][ T5887] usb 3-1: config 0 descriptor?? [ 834.647993][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 834.663697][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.693465][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.710076][ T5885] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 834.731614][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.747935][ T5885] usb 2-1: config 0 descriptor?? [ 834.829144][T14991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2490'. [ 834.840759][T14991] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2490'. [ 834.868038][T14984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.877155][T14984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.891022][ T5887] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 834.902941][ T5887] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 834.920566][ T5887] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 834.928280][ T5887] usb 3-1: media controller created [ 834.964018][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 835.042252][T14993] FAULT_INJECTION: forcing a failure. [ 835.042252][T14993] name failslab, interval 1, probability 0, space 0, times 0 [ 835.055518][T14993] CPU: 0 UID: 0 PID: 14993 Comm: syz.4.2491 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 835.055548][T14993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 835.055558][T14993] Call Trace: [ 835.055565][T14993] [ 835.055571][T14993] dump_stack_lvl+0x189/0x250 [ 835.055603][T14993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 835.055625][T14993] ? __pfx__printk+0x10/0x10 [ 835.055641][T14993] ? __pfx___might_resched+0x10/0x10 [ 835.055655][T14993] ? fs_reclaim_acquire+0x7d/0x100 [ 835.055680][T14993] should_fail_ex+0x414/0x560 [ 835.055707][T14993] should_failslab+0xa8/0x100 [ 835.055727][T14993] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 835.055746][T14993] ? __alloc_skb+0x112/0x2d0 [ 835.055766][T14993] __alloc_skb+0x112/0x2d0 [ 835.055785][T14993] alloc_skb_with_frags+0xca/0x890 [ 835.055807][T14993] ? is_bpf_text_address+0x26/0x2b0 [ 835.055832][T14993] sock_alloc_send_pskb+0x857/0x990 [ 835.055866][T14993] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 835.055885][T14993] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 835.055905][T14993] ? lockdep_hardirqs_on+0x9c/0x150 [ 835.055930][T14993] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 835.055951][T14993] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 835.055971][T14993] ? stack_depot_save_flags+0x40/0x910 [ 835.055991][T14993] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 835.056019][T14993] __ip_append_data+0x2cf6/0x40f0 [ 835.056068][T14993] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 835.056115][T14993] ? ipv4_mtu+0x23/0x5c0 [ 835.056142][T14993] ? __pfx___ip_append_data+0x10/0x10 [ 835.056166][T14993] ? ipv4_mtu+0x23/0x5c0 [ 835.056192][T14993] ? ip_setup_cork+0x579/0x9b0 [ 835.056221][T14993] ip_make_skb+0x1de/0x3f0 [ 835.056253][T14993] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 835.056280][T14993] ? __pfx_ip_make_skb+0x10/0x10 [ 835.056327][T14993] udp_sendmsg+0x18f6/0x22e0 [ 835.056359][T14993] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 835.056393][T14993] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 835.056419][T14993] ? __pfx_udp_sendmsg+0x10/0x10 [ 835.056476][T14993] ? __pfx_aa_sk_perm+0x10/0x10 [ 835.056517][T14993] ? inet_sendmsg+0x29c/0x370 [ 835.056544][T14993] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 835.056571][T14993] __sock_sendmsg+0x19c/0x270 [ 835.056605][T14993] ____sys_sendmsg+0x52d/0x830 [ 835.056637][T14993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 835.056680][T14993] ___sys_sendmsg+0x21f/0x2a0 [ 835.056709][T14993] ? __pfx____sys_sendmsg+0x10/0x10 [ 835.056771][T14993] ? __fget_files+0x2a/0x420 [ 835.056796][T14993] ? __fget_files+0x3a0/0x420 [ 835.056832][T14993] __sys_sendmmsg+0x28e/0x430 [ 835.056864][T14993] ? __pfx___sys_sendmmsg+0x10/0x10 [ 835.056900][T14993] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 835.056943][T14993] ? ksys_write+0x1f0/0x250 [ 835.056964][T14993] ? rcu_is_watching+0x15/0xb0 [ 835.057005][T14993] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 835.057033][T14993] __do_fast_syscall_32+0xb4/0x110 [ 835.057059][T14993] ? lockdep_hardirqs_on+0x9c/0x150 [ 835.057093][T14993] do_fast_syscall_32+0x34/0x80 [ 835.057118][T14993] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 835.057142][T14993] RIP: 0023:0xf7f53539 [ 835.057160][T14993] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 835.057178][T14993] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 835.057199][T14993] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000500 [ 835.057214][T14993] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 835.057225][T14993] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 835.057237][T14993] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 835.057248][T14993] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 835.057277][T14993] [ 835.429666][ C0] vkms_vblank_simulate: vblank timer overrun [ 835.440453][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 835.568366][ T5885] savu 0003:1E7D:2D5A.006B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 835.628716][ T5887] az6027: usb out operation failed. (-71) [ 835.635521][ T5887] az6027: usb out operation failed. (-71) [ 835.641381][ T5887] stb0899_attach: Driver disabled by Kconfig [ 835.647723][ T5887] az6027: no front-end attached [ 835.647723][ T5887] [ 835.655887][ T5887] az6027: usb out operation failed. (-71) [ 835.662224][ T5887] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 835.674781][ T5887] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input48 [ 835.707476][ T5887] dvb-usb: schedule remote query interval to 400 msecs. [ 835.714449][ T5887] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 835.725498][ T5887] usb 3-1: USB disconnect, device number 105 [ 835.867567][ T5887] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 836.166399][ T47] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 836.373238][ T47] usb 4-1: config 0 has no interfaces? [ 836.507446][ T47] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 836.539105][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.577657][ T8485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 836.591223][ T47] usb 4-1: Product: syz [ 836.609697][ T47] usb 4-1: Manufacturer: syz [ 836.649950][ T47] usb 4-1: SerialNumber: syz [ 836.702802][ T47] usb 4-1: config 0 descriptor?? [ 836.930396][ T5885] usb 2-1: reset high-speed USB device number 101 using dummy_hcd [ 837.496033][ T47] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 837.570664][ T3453] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 837.591546][T15025] FAULT_INJECTION: forcing a failure. [ 837.591546][T15025] name failslab, interval 1, probability 0, space 0, times 0 [ 837.635687][T15025] CPU: 1 UID: 0 PID: 15025 Comm: syz.1.2500 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 837.635716][T15025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 837.635729][T15025] Call Trace: [ 837.635738][T15025] [ 837.635748][T15025] dump_stack_lvl+0x189/0x250 [ 837.635785][T15025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 837.635815][T15025] ? __pfx__printk+0x10/0x10 [ 837.635844][T15025] ? ref_tracker_alloc+0x318/0x460 [ 837.635876][T15025] should_fail_ex+0x414/0x560 [ 837.635918][T15025] should_failslab+0xa8/0x100 [ 837.635947][T15025] kmem_cache_alloc_noprof+0x73/0x3c0 [ 837.635971][T15025] ? skb_clone+0x212/0x3a0 [ 837.636004][T15025] skb_clone+0x212/0x3a0 [ 837.636035][T15025] __netlink_deliver_tap+0x404/0x850 [ 837.636071][T15025] ? netlink_deliver_tap+0x2e/0x1b0 [ 837.636095][T15025] netlink_deliver_tap+0x19c/0x1b0 [ 837.636120][T15025] netlink_unicast+0x72f/0x8d0 [ 837.636163][T15025] netlink_sendmsg+0x805/0xb30 [ 837.636195][T15025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 837.636220][T15025] ? __import_iovec+0x5d4/0x7f0 [ 837.636245][T15025] ? aa_sock_msg_perm+0x94/0x160 [ 837.636268][T15025] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 837.636291][T15025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 837.636314][T15025] __sock_sendmsg+0x219/0x270 [ 837.636350][T15025] ____sys_sendmsg+0x505/0x830 [ 837.636383][T15025] ? __pfx_____sys_sendmsg+0x10/0x10 [ 837.636426][T15025] ___sys_sendmsg+0x21f/0x2a0 [ 837.636455][T15025] ? __pfx____sys_sendmsg+0x10/0x10 [ 837.636518][T15025] ? __fget_files+0x2a/0x420 [ 837.636543][T15025] ? __fget_files+0x3a0/0x420 [ 837.636580][T15025] __sys_sendmsg+0x164/0x220 [ 837.636608][T15025] ? __pfx___sys_sendmsg+0x10/0x10 [ 837.636650][T15025] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 837.636676][T15025] ? lockdep_hardirqs_on+0x9c/0x150 [ 837.636702][T15025] __do_fast_syscall_32+0xb4/0x110 [ 837.636729][T15025] ? lockdep_hardirqs_on+0x9c/0x150 [ 837.636755][T15025] do_fast_syscall_32+0x34/0x80 [ 837.636781][T15025] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 837.636806][T15025] RIP: 0023:0xf706e539 [ 837.636824][T15025] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 837.636841][T15025] RSP: 002b:00000000f505e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 837.636869][T15025] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 837.636883][T15025] RDX: 0000000000000840 RSI: 0000000000000000 RDI: 0000000000000000 [ 837.636896][T15025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 837.636907][T15025] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 837.636919][T15025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 837.636949][T15025] [ 837.913275][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031d17800: rx timeout, send abort [ 837.937617][T15025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2500'. [ 837.948965][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2501'. [ 837.958231][T15027] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2501'. [ 838.216889][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 838.225395][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.244913][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.276339][ T3453] usb 1-1: Using ep0 maxpacket: 8 [ 838.289008][ T3453] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 838.298507][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 838.311895][ T3453] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 838.323585][ T3453] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 838.328103][ T8485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 838.350599][ T47] usb 5-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 838.366009][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.378521][ T3453] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 838.408503][ T47] usb 5-1: config 0 descriptor?? [ 838.416632][ T5887] usb 2-1: USB disconnect, device number 101 [ 838.425480][ T3453] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 838.481935][ T3453] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 838.490034][ T3453] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 838.502591][ T3453] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 838.515073][ T3453] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 838.558337][ T3453] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 838.588343][ T3453] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 838.597204][ T3453] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 838.611135][T15029] netlink: 'syz.2.2502': attribute type 3 has an invalid length. [ 838.620029][ T3453] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 838.646060][ T3453] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 838.666645][ T3453] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 838.722424][ T3453] usb 1-1: string descriptor 0 read error: -22 [ 838.730198][ T3453] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 838.753375][ T3453] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.794028][ T3453] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 838.820934][ T47] ryos 0003:1E7D:31CE.006C: unbalanced delimiter at end of report description [ 838.837385][ T47] ryos 0003:1E7D:31CE.006C: parse failed [ 838.850679][ T47] ryos 0003:1E7D:31CE.006C: probe with driver ryos failed with error -22 [ 838.994518][T15022] netlink: 'syz.0.2499': attribute type 1 has an invalid length. [ 839.026329][ T5887] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 839.072770][T15036] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2499'. [ 839.088223][T15022] bond5: entered promiscuous mode [ 839.111422][ T47] usb 5-1: USB disconnect, device number 4 [ 839.125315][T15022] 8021q: adding VLAN 0 to HW filter on device bond5 [ 839.176653][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 839.183617][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.194988][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.206505][ T5887] usb 3-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 839.215607][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.234841][ T5887] usb 3-1: config 0 descriptor?? [ 839.466745][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 839.615800][ T47] usb 4-1: USB disconnect, device number 107 [ 839.648933][ T5887] nzxt-kraken2 0003:1E71:170E.006D: collection stack underflow [ 839.657105][ T5887] nzxt-kraken2 0003:1E71:170E.006D: item 0 4 0 12 parsing failed [ 839.667094][ T5887] nzxt-kraken2 0003:1E71:170E.006D: hid parse failed with -22 [ 839.674729][ T5887] nzxt-kraken2 0003:1E71:170E.006D: probe with driver nzxt-kraken2 failed with error -22 [ 839.879310][ T119] usb 3-1: USB disconnect, device number 106 [ 840.136029][ T5885] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 840.296141][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 840.303307][ T5885] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 840.312518][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.324526][ T5885] usb 5-1: config 0 descriptor?? [ 840.329786][ T5887] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 840.488174][ T5887] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 840.500020][T15050] fuse: Unknown parameter 'fd0x0000000000000008' [ 840.506061][ T5887] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 840.513342][T15050] x_tables: ip_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD [ 840.535761][ T5887] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 840.548679][T15043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.557232][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 840.565721][T15043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.579049][ T5887] usb 4-1: SerialNumber: syz [ 840.586389][ T5885] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 840.614713][ T5885] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 840.653074][ T5885] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 840.666093][ T5885] usb 5-1: media controller created [ 840.718980][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 840.728587][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 840.825057][ T5885] az6027: usb out operation failed. (-71) [ 840.854923][ T5885] az6027: usb out operation failed. (-71) [ 840.872891][ T5885] stb0899_attach: Driver disabled by Kconfig [ 840.888076][ T5885] az6027: no front-end attached [ 840.888076][ T5885] [ 840.911458][ T5885] az6027: usb out operation failed. (-71) [ 840.936462][ T5885] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 840.985813][ T5885] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input49 [ 841.032822][ T5885] dvb-usb: schedule remote query interval to 400 msecs. [ 841.055145][ T5885] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 841.083279][ T5885] usb 5-1: USB disconnect, device number 5 [ 841.276657][ T3453] usb 1-1: USB disconnect, device number 118 [ 841.350537][ T5885] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 841.484056][T15061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2512'. [ 841.493750][T15061] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2512'. [ 841.533564][T15063] FAULT_INJECTION: forcing a failure. [ 841.533564][T15063] name failslab, interval 1, probability 0, space 0, times 0 [ 841.548371][T15063] CPU: 0 UID: 0 PID: 15063 Comm: syz.0.2513 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 841.548392][T15063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 841.548402][T15063] Call Trace: [ 841.548409][T15063] [ 841.548415][T15063] dump_stack_lvl+0x189/0x250 [ 841.548446][T15063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 841.548468][T15063] ? __pfx__printk+0x10/0x10 [ 841.548487][T15063] ? __pfx___might_resched+0x10/0x10 [ 841.548501][T15063] ? fs_reclaim_acquire+0x7d/0x100 [ 841.548526][T15063] should_fail_ex+0x414/0x560 [ 841.548554][T15063] should_failslab+0xa8/0x100 [ 841.548576][T15063] __kmalloc_noprof+0xcb/0x4f0 [ 841.548593][T15063] ? kfree+0x4d/0x440 [ 841.548607][T15063] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 841.548629][T15063] tomoyo_realpath_from_path+0xe3/0x5d0 [ 841.548648][T15063] ? tomoyo_domain+0xda/0x130 [ 841.548669][T15063] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 841.548693][T15063] tomoyo_path_number_perm+0x1e8/0x5a0 [ 841.548718][T15063] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 841.548771][T15063] ? __fget_files+0x2a/0x420 [ 841.548793][T15063] ? __fget_files+0x3a0/0x420 [ 841.548817][T15063] ? __fget_files+0x2a/0x420 [ 841.548839][T15063] security_file_ioctl_compat+0xcb/0x2d0 [ 841.548863][T15063] __ia32_compat_sys_ioctl+0x128/0x840 [ 841.548882][T15063] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 841.548898][T15063] ? __fget_files+0x3a0/0x420 [ 841.548921][T15063] ? fput+0xa0/0xd0 [ 841.548942][T15063] ? ksys_write+0x1f0/0x250 [ 841.548963][T15063] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 841.548982][T15063] ? lockdep_hardirqs_on+0x9c/0x150 [ 841.549000][T15063] __do_fast_syscall_32+0xb4/0x110 [ 841.549019][T15063] ? lockdep_hardirqs_on+0x9c/0x150 [ 841.549038][T15063] do_fast_syscall_32+0x34/0x80 [ 841.549056][T15063] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 841.549073][T15063] RIP: 0023:0xf703e539 [ 841.549086][T15063] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 841.549099][T15063] RSP: 002b:00000000f502e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 841.549115][T15063] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c02c564a [ 841.549125][T15063] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 841.549134][T15063] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 841.549142][T15063] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 841.549152][T15063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 841.549172][T15063] [ 841.549211][T15063] ERROR: Out of memory at tomoyo_realpath_from_path. [ 841.816104][ T47] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 841.968237][T15067] bridge0: port 3(hsr0) entered blocking state [ 841.986124][ T8485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 841.993980][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 842.002782][T15067] bridge0: port 3(hsr0) entered disabled state [ 842.020369][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.036154][T15067] hsr0: entered allmulticast mode [ 842.043164][T15067] hsr_slave_0: entered allmulticast mode [ 842.052836][T15067] hsr_slave_1: entered allmulticast mode [ 842.072123][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.094900][T15067] hsr0: entered promiscuous mode [ 842.103929][ T47] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 842.116226][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.134576][ T47] usb 3-1: config 0 descriptor?? [ 842.176172][ T119] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 842.346038][ T119] usb 5-1: Using ep0 maxpacket: 32 [ 842.360022][ T119] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 842.374528][ T119] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 842.388460][ T119] usb 5-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 842.397832][ T119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.427681][ T119] usb 5-1: config 0 descriptor?? [ 842.471127][T15076] fuse: Unknown parameter 'fd0x0000000000000008' [ 842.491222][T15076] x_tables: ip_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD [ 842.536202][ T3453] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 842.581813][ T47] savu 0003:1E7D:2D5A.006E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 842.686206][ T3453] usb 2-1: Using ep0 maxpacket: 8 [ 842.695127][ T119] usbhid 5-1:0.0: can't add hid device: -71 [ 842.705062][ T3453] usb 2-1: config 162 has an invalid interface number: 45 but max is 1 [ 842.713760][ T119] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 842.742690][ T3453] usb 2-1: config 162 has an invalid interface number: 87 but max is 1 [ 842.759756][ T3453] usb 2-1: config 162 has no interface number 0 [ 842.779251][ T119] usb 5-1: USB disconnect, device number 6 [ 842.789093][ T3453] usb 2-1: config 162 has no interface number 1 [ 842.795580][ T3453] usb 2-1: config 162 interface 45 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 842.815169][ T3453] usb 2-1: config 162 interface 87 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 842.872266][ T3453] usb 2-1: config 162 interface 87 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 842.892978][ T3453] usb 2-1: config 162 interface 87 altsetting 1 endpoint 0x86 has invalid wMaxPacketSize 0 [ 842.957923][T15084] FAULT_INJECTION: forcing a failure. [ 842.957923][T15084] name failslab, interval 1, probability 0, space 0, times 0 [ 842.976346][T15084] CPU: 0 UID: 0 PID: 15084 Comm: syz.4.2519 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 842.976376][T15084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 842.976390][T15084] Call Trace: [ 842.976399][T15084] [ 842.976410][T15084] dump_stack_lvl+0x189/0x250 [ 842.976453][T15084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 842.976483][T15084] ? __pfx__printk+0x10/0x10 [ 842.976512][T15084] ? ref_tracker_alloc+0x318/0x460 [ 842.976538][T15084] should_fail_ex+0x414/0x560 [ 842.976575][T15084] should_failslab+0xa8/0x100 [ 842.976605][T15084] kmem_cache_alloc_noprof+0x73/0x3c0 [ 842.976631][T15084] ? skb_clone+0x212/0x3a0 [ 842.976676][T15084] skb_clone+0x212/0x3a0 [ 842.976708][T15084] __netlink_deliver_tap+0x404/0x850 [ 842.976745][T15084] ? netlink_deliver_tap+0x2e/0x1b0 [ 842.976770][T15084] netlink_deliver_tap+0x19c/0x1b0 [ 842.976794][T15084] netlink_unicast+0x72f/0x8d0 [ 842.976839][T15084] netlink_sendmsg+0x805/0xb30 [ 842.976872][T15084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 842.976898][T15084] ? __import_iovec+0x5d4/0x7f0 [ 842.976925][T15084] ? aa_sock_msg_perm+0x94/0x160 [ 842.976949][T15084] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 842.976972][T15084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 842.976996][T15084] __sock_sendmsg+0x219/0x270 [ 842.977032][T15084] ____sys_sendmsg+0x505/0x830 [ 842.977066][T15084] ? __pfx_____sys_sendmsg+0x10/0x10 [ 842.977111][T15084] ___sys_sendmsg+0x21f/0x2a0 [ 842.977140][T15084] ? __pfx____sys_sendmsg+0x10/0x10 [ 842.977205][T15084] ? __fget_files+0x2a/0x420 [ 842.977231][T15084] ? __fget_files+0x3a0/0x420 [ 842.977268][T15084] __sys_sendmsg+0x164/0x220 [ 842.977298][T15084] ? __pfx___sys_sendmsg+0x10/0x10 [ 842.977340][T15084] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 842.977367][T15084] ? lockdep_hardirqs_on+0x9c/0x150 [ 842.977393][T15084] __do_fast_syscall_32+0xb4/0x110 [ 842.977420][T15084] ? lockdep_hardirqs_on+0x9c/0x150 [ 842.977448][T15084] do_fast_syscall_32+0x34/0x80 [ 842.977474][T15084] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 842.977499][T15084] RIP: 0023:0xf7f53539 [ 842.977516][T15084] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 842.977534][T15084] RSP: 002b:00000000f503455c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 842.977556][T15084] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800007c0 [ 842.977570][T15084] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 842.977582][T15084] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 842.977594][T15084] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 842.977607][T15084] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 842.977637][T15084] [ 843.304701][ T3453] usb 2-1: config 162 interface 87 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 0 [ 843.315185][ T3453] usb 2-1: config 162 interface 87 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 843.354229][ T3453] usb 2-1: config 162 interface 45 has no altsetting 0 [ 843.377172][ T3453] usb 2-1: config 162 interface 87 has no altsetting 0 [ 843.403362][T11906] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 843.445442][ T3453] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=32.4e [ 843.474435][ T3453] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.544005][ T5887] usb 4-1: 0:2 : does not exist [ 843.562321][ T5887] usb 4-1: USB disconnect, device number 108 [ 843.644285][ T3453] usb 2-1: Product: syz [ 843.663474][ T6029] udevd[6029]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 843.683588][ T3453] usb 2-1: Manufacturer: syz [ 843.703279][ T3453] usb 2-1: SerialNumber: syz [ 843.943172][T15073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.969343][T15073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.986037][ T9710] usb 3-1: reset high-speed USB device number 107 using dummy_hcd [ 843.996054][ T5887] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 844.025593][ T3453] pl2303 2-1:162.45: required endpoints missing [ 844.064846][ T3453] pl2303 2-1:162.87: required interrupt-in endpoint missing [ 844.097932][ T3453] usb 2-1: USB disconnect, device number 102 [ 844.160591][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 844.174972][ T5887] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 844.194419][ T5887] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 844.211870][ T5887] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 844.228839][ T5887] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 844.241280][ T5887] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 844.260180][ T5887] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 844.271978][ T5887] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 844.288924][ T5887] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 844.303476][ T5887] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 844.314860][ T5887] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 844.366155][ T5887] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 844.384642][ T5887] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 844.415666][ T5887] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 844.431877][ T5887] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 844.445044][ T5887] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 844.462238][ T5887] usb 4-1: string descriptor 0 read error: -22 [ 844.476128][ T5887] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 844.485237][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.526244][ T5887] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 844.586385][ T3453] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 844.607222][ T8485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 844.634032][T15095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2525'. [ 844.643354][T15095] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2525'. [ 844.758857][ T3453] usb 5-1: Using ep0 maxpacket: 32 [ 844.767990][ T3453] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 844.794904][T15099] netlink: 'syz.3.2521': attribute type 1 has an invalid length. [ 844.806291][ T3453] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.846508][T15087] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2521'. [ 844.862148][T15099] bond6: entered promiscuous mode [ 844.867671][T15099] 8021q: adding VLAN 0 to HW filter on device bond6 [ 844.965408][ T3453] usb 5-1: config 0 descriptor?? [ 845.228000][ T9710] usb 3-1: device descriptor read/64, error -71 [ 845.284211][T15089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.305236][T15089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.348226][ T3453] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 845.363858][ T3453] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 845.485735][ T3453] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 845.503628][ T3453] usb 5-1: media controller created [ 845.516076][ T9710] usb 3-1: reset high-speed USB device number 107 using dummy_hcd [ 845.531279][ T9710] usb 3-1: device reset changed ep0 maxpacket size! [ 845.572017][ T47] usb 3-1: USB disconnect, device number 107 [ 845.644050][ T3453] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 845.727018][ T1009] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 845.745845][ T3453] az6027: usb out operation failed. (-71) [ 845.760955][ T47] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 845.769314][ T3453] az6027: usb out operation failed. (-71) [ 845.790402][ T3453] stb0899_attach: Driver disabled by Kconfig [ 845.798967][ T3453] az6027: no front-end attached [ 845.798967][ T3453] [ 845.842864][ T3453] az6027: usb out operation failed. (-71) [ 845.865001][ T3453] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 845.916076][ T9710] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 845.925476][ T3453] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input50 [ 845.956696][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 845.975992][ T47] usb 3-1: config 0 has no interfaces? [ 845.979523][ T47] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 845.979556][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.979577][ T47] usb 3-1: Product: syz [ 845.979594][ T47] usb 3-1: Manufacturer: syz [ 845.979611][ T47] usb 3-1: SerialNumber: syz [ 845.982291][ T47] usb 3-1: config 0 descriptor?? [ 846.045045][ T3453] dvb-usb: schedule remote query interval to 400 msecs. [ 846.072600][ T3453] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 846.111756][ T3453] usb 5-1: USB disconnect, device number 7 [ 846.176202][ T9710] usb 2-1: Using ep0 maxpacket: 16 [ 846.184791][ T9710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.212142][ T9710] usb 2-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 846.249059][ T9710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.272291][ T3453] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 846.297872][ T9710] usb 2-1: config 0 descriptor?? [ 846.495951][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 846.495969][ T30] audit: type=1326 audit(1746335559.799:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.4.2530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 846.524352][ C1] vkms_vblank_simulate: vblank timer overrun [ 846.614982][ T30] audit: type=1326 audit(1746335559.849:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.4.2530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 846.637123][ C1] vkms_vblank_simulate: vblank timer overrun [ 846.691554][T15096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.693946][ T30] audit: type=1326 audit(1746335559.849:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.4.2530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 846.722302][ C1] vkms_vblank_simulate: vblank timer overrun [ 846.736819][ T30] audit: type=1326 audit(1746335559.849:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.4.2530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 846.747089][T15107] usb usb8: usbfs: process 15107 (syz.1.2528) did not claim interface 0 before use [ 846.760170][ T30] audit: type=1326 audit(1746335559.849:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.4.2530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 846.790614][ C1] vkms_vblank_simulate: vblank timer overrun [ 846.819785][ T30] audit: type=1326 audit(1746335559.849:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.4.2530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 846.843732][ T30] audit: type=1326 audit(1746335559.849:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.4.2530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 846.867500][T15096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.884383][ T8485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 846.913579][ T30] audit: type=1326 audit(1746335559.859:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.4.2530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 847.041310][ T30] audit: type=1326 audit(1746335559.859:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.4.2530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=238 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 847.066305][ T30] audit: type=1326 audit(1746335559.859:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.4.2530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 847.116067][ T3453] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 847.131223][ T5887] usb 4-1: USB disconnect, device number 109 [ 847.231262][ T9710] usbhid 2-1:0.0: can't add hid device: -71 [ 847.237708][ T9710] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 847.249578][ T9710] usb 2-1: USB disconnect, device number 103 [ 847.268899][ T3453] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.281084][ T3453] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.293589][ T3453] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 847.308676][ T3453] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 847.321247][ T3453] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.379871][ T3453] usb 5-1: config 0 descriptor?? [ 847.656103][ T5887] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 847.819431][ T3453] plantronics 0003:047F:FFFF.006F: No inputs registered, leaving [ 847.822605][ T5887] usb 4-1: config 0 has no interfaces? [ 847.854499][ T5887] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 847.868766][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.885223][ T5887] usb 4-1: Product: syz [ 847.890732][ T5887] usb 4-1: Manufacturer: syz [ 847.892031][ T3453] plantronics 0003:047F:FFFF.006F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 847.950568][ T119] usb 3-1: USB disconnect, device number 108 [ 848.017306][ T5887] usb 4-1: SerialNumber: syz [ 848.028258][T15116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.036281][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 848.052238][ T5887] usb 4-1: config 0 descriptor?? [ 848.144727][T15116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.423190][ T5885] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 848.433552][T15130] FAULT_INJECTION: forcing a failure. [ 848.433552][T15130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 848.535426][T15130] CPU: 1 UID: 0 PID: 15130 Comm: syz.2.2535 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 848.535457][T15130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 848.535470][T15130] Call Trace: [ 848.535481][T15130] [ 848.535488][T15130] dump_stack_lvl+0x189/0x250 [ 848.535512][T15130] ? __lock_acquire+0xaac/0xd20 [ 848.535534][T15130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 848.535555][T15130] ? __pfx__printk+0x10/0x10 [ 848.535568][T15130] ? __might_fault+0xb0/0x130 [ 848.535594][T15130] should_fail_ex+0x414/0x560 [ 848.535620][T15130] _copy_from_iter+0x1db/0x15a0 [ 848.535642][T15130] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 848.535658][T15130] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 848.535676][T15130] ? __pfx__copy_from_iter+0x10/0x10 [ 848.535694][T15130] ? __build_skb_around+0x257/0x3e0 [ 848.535713][T15130] ? netlink_sendmsg+0x642/0xb30 [ 848.535727][T15130] ? skb_put+0x11b/0x210 [ 848.535746][T15130] netlink_sendmsg+0x6b2/0xb30 [ 848.535768][T15130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 848.535785][T15130] ? __import_iovec+0x5d4/0x7f0 [ 848.535802][T15130] ? aa_sock_msg_perm+0x94/0x160 [ 848.535818][T15130] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 848.535834][T15130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 848.535850][T15130] __sock_sendmsg+0x219/0x270 [ 848.535885][T15130] ____sys_sendmsg+0x505/0x830 [ 848.535918][T15130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 848.535957][T15130] ___sys_sendmsg+0x21f/0x2a0 [ 848.535984][T15130] ? __pfx____sys_sendmsg+0x10/0x10 [ 848.536059][T15130] ? __fget_files+0x2a/0x420 [ 848.536085][T15130] ? __fget_files+0x3a0/0x420 [ 848.536121][T15130] __sys_sendmsg+0x164/0x220 [ 848.536149][T15130] ? __pfx___sys_sendmsg+0x10/0x10 [ 848.536192][T15130] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 848.536220][T15130] ? lockdep_hardirqs_on+0x9c/0x150 [ 848.536244][T15130] __do_fast_syscall_32+0xb4/0x110 [ 848.536271][T15130] ? lockdep_hardirqs_on+0x9c/0x150 [ 848.536299][T15130] do_fast_syscall_32+0x34/0x80 [ 848.536325][T15130] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 848.536361][T15130] RIP: 0023:0xf7f75539 [ 848.536380][T15130] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 848.536398][T15130] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 848.536421][T15130] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 848.536435][T15130] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 848.536452][T15130] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 848.536465][T15130] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 848.536477][T15130] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 848.536507][T15130] [ 848.576019][ T5885] usb 2-1: device descriptor read/64, error -71 [ 849.051077][T15135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2537'. [ 849.106886][ T119] usb 5-1: USB disconnect, device number 8 [ 849.256080][T15135] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2537'. [ 849.325681][T15138] FAULT_INJECTION: forcing a failure. [ 849.325681][T15138] name failslab, interval 1, probability 0, space 0, times 0 [ 849.352281][T15138] CPU: 1 UID: 0 PID: 15138 Comm: syz.4.2538 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 849.352314][T15138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 849.352327][T15138] Call Trace: [ 849.352335][T15138] [ 849.352345][T15138] dump_stack_lvl+0x189/0x250 [ 849.352381][T15138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 849.352411][T15138] ? __pfx__printk+0x10/0x10 [ 849.352434][T15138] ? __pfx___might_resched+0x10/0x10 [ 849.352453][T15138] ? fs_reclaim_acquire+0x7d/0x100 [ 849.352486][T15138] should_fail_ex+0x414/0x560 [ 849.352522][T15138] should_failslab+0xa8/0x100 [ 849.352551][T15138] kmem_cache_alloc_noprof+0x73/0x3c0 [ 849.352574][T15138] ? security_file_alloc+0x34/0x330 [ 849.352607][T15138] security_file_alloc+0x34/0x330 [ 849.352638][T15138] init_file+0x93/0x2f0 [ 849.352670][T15138] alloc_empty_file+0x6e/0x1d0 [ 849.352700][T15138] path_openat+0x107/0x3830 [ 849.352718][T15138] ? arch_stack_walk+0xfc/0x150 [ 849.352757][T15138] ? stack_trace_save+0x9c/0xe0 [ 849.352781][T15138] ? stack_depot_save_flags+0x40/0x910 [ 849.352809][T15138] ? kasan_save_track+0x4f/0x80 [ 849.352830][T15138] ? __kasan_slab_alloc+0x6c/0x80 [ 849.352850][T15138] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 849.352872][T15138] ? getname_flags+0xb8/0x540 [ 849.352899][T15138] ? __pfx_path_openat+0x10/0x10 [ 849.352916][T15138] ? do_fast_syscall_32+0x34/0x80 [ 849.352940][T15138] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 849.352985][T15138] do_filp_open+0x1fa/0x410 [ 849.353008][T15138] ? __pfx_do_filp_open+0x10/0x10 [ 849.353049][T15138] ? _raw_spin_unlock+0x28/0x50 [ 849.353068][T15138] ? alloc_fd+0x64c/0x6c0 [ 849.353103][T15138] do_sys_openat2+0x121/0x1c0 [ 849.353137][T15138] ? __pfx_do_sys_openat2+0x10/0x10 [ 849.353170][T15138] ? ksys_write+0x1f0/0x250 [ 849.353200][T15138] __ia32_compat_sys_openat+0x131/0x160 [ 849.353245][T15138] __do_fast_syscall_32+0xb4/0x110 [ 849.353272][T15138] ? lockdep_hardirqs_on+0x9c/0x150 [ 849.353299][T15138] do_fast_syscall_32+0x34/0x80 [ 849.353324][T15138] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 849.353348][T15138] RIP: 0023:0xf7f53539 [ 849.353366][T15138] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 849.353383][T15138] RSP: 002b:00000000f5076100 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 849.353405][T15138] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5076150 [ 849.353419][T15138] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 00000000f73e2ff4 [ 849.353432][T15138] RBP: 0000000000008000 R08: 0000000000000000 R09: 0000000000000000 [ 849.353445][T15138] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 849.353457][T15138] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 849.353487][T15138] [ 849.650074][T11906] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 849.828214][ T5885] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 849.926431][T15144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2541'. [ 849.935656][T15144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2541'. [ 849.993876][T15144] bridge0: entered promiscuous mode [ 850.001555][T15144] ip6gretap0: entered promiscuous mode [ 850.086272][ T5885] usb 2-1: device descriptor read/64, error -71 [ 850.196790][ T5885] usb usb2-port1: attempt power cycle [ 850.326138][ T47] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 850.490970][ T47] usb 5-1: config 0 has no interfaces? [ 850.515148][ T47] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 850.525853][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.539910][ T47] usb 5-1: Product: syz [ 850.544342][ T47] usb 5-1: Manufacturer: syz [ 850.549356][ T47] usb 5-1: SerialNumber: syz [ 850.557505][ T5887] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 850.559202][ T47] usb 5-1: config 0 descriptor?? [ 850.566219][ T5885] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 850.586067][ T9710] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 850.591678][ T5885] usb 2-1: device descriptor read/8, error -71 [ 850.736007][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 850.746027][ T9710] usb 3-1: Using ep0 maxpacket: 8 [ 850.751567][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.771422][ T9710] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 850.825255][ T9710] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 850.828898][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.846869][ T9710] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 850.858753][ T5885] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 850.858920][ T5887] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 850.858947][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.927669][ T5885] usb 2-1: device descriptor read/8, error -71 [ 850.978117][ T8485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 851.016532][ T5887] usb 1-1: config 0 descriptor?? [ 851.046421][ T5885] usb usb2-port1: unable to enumerate USB device [ 851.058952][ T47] usb 4-1: USB disconnect, device number 110 [ 851.148773][ T9710] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 851.204124][ T9710] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 851.252590][T15153] fuse: Unknown parameter 'uÿÝíßqfd' [ 851.384165][ T9710] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 851.416748][ T9710] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 851.452509][ T5887] savu 0003:1E7D:2D5A.0070: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 851.496261][ T9710] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 851.542175][ T9710] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 851.561996][ T9710] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 851.605200][ T9710] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 851.613542][ T9710] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 851.625208][ T9710] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 851.638572][ T9710] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 851.650246][ T9710] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 851.675162][ T9710] usb 3-1: string descriptor 0 read error: -22 [ 851.686284][ T9710] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 851.697211][ T9710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.739707][ T47] usb 1-1: USB disconnect, device number 119 [ 851.753698][ T9710] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 852.109002][T15150] netlink: 'syz.2.2542': attribute type 1 has an invalid length. [ 852.169090][T15162] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2542'. [ 852.207857][T15150] bond13: entered promiscuous mode [ 852.240806][T15150] 8021q: adding VLAN 0 to HW filter on device bond13 [ 852.262268][ T8485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 853.280058][ T3453] usb 5-1: USB disconnect, device number 9 [ 854.119515][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 854.133401][T15177] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255) [ 854.208569][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2551'. [ 854.219941][T15182] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2551'. [ 854.301093][ T5887] usb 3-1: USB disconnect, device number 109 [ 854.306040][ T47] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 854.470128][ T47] usb 1-1: config 0 has no interfaces? [ 854.478195][ T47] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 854.493168][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.496157][ T5885] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 854.501344][ T47] usb 1-1: Product: syz [ 854.513217][ T47] usb 1-1: Manufacturer: syz [ 854.535154][ T47] usb 1-1: SerialNumber: syz [ 854.561689][T15189] xfrm0: left promiscuous mode [ 854.580136][T15189] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 854.588935][T15189] bond6: left promiscuous mode [ 854.596902][T15189] bond8: left promiscuous mode [ 854.602875][T15189] bond11: left promiscuous mode [ 854.609202][T15189] bond12: left promiscuous mode [ 854.616326][T15189] bond13: left promiscuous mode [ 854.700417][ T5887] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 854.733159][ T47] usb 1-1: config 0 descriptor?? [ 854.786465][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 854.794049][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.810936][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.824543][ T5885] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 854.835971][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.848644][ T5885] usb 5-1: config 0 descriptor?? [ 855.017750][ T5887] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 855.329572][ T5885] savu 0003:1E7D:2D5A.0071: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 855.378327][ T7214] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 855.624138][T15193] bridge0: port 4(hsr0) entered blocking state [ 855.631292][T15193] bridge0: port 4(hsr0) entered disabled state [ 855.638992][T15193] hsr0: entered allmulticast mode [ 855.644325][T15193] hsr_slave_0: entered allmulticast mode [ 855.650334][T15193] hsr_slave_1: entered allmulticast mode [ 855.658557][T15193] hsr0: entered promiscuous mode [ 855.663912][T15193] bridge0: port 4(hsr0) entered blocking state [ 855.670298][T15193] bridge0: port 4(hsr0) entered forwarding state [ 855.707848][ T5885] [ 855.710224][ T5885] ============================================ [ 855.716378][ T5885] WARNING: possible recursive locking detected [ 855.722551][ T5885] 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 Not tainted [ 855.729683][ T5885] -------------------------------------------- [ 855.735873][ T5885] kworker/0:4/5885 is trying to acquire lock: [ 855.741959][ T5885] ffff88807bb7cf30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 855.751061][ T5885] [ 855.751061][ T5885] but task is already holding lock: [ 855.758431][ T5885] ffff888023d34f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 855.767512][ T5885] [ 855.767512][ T5885] other info that might help us debug this: [ 855.775582][ T5885] Possible unsafe locking scenario: [ 855.775582][ T5885] [ 855.783033][ T5885] CPU0 [ 855.786318][ T5885] ---- [ 855.789604][ T5885] lock(&hsr->seqnr_lock); [ 855.794111][ T5885] lock(&hsr->seqnr_lock); [ 855.798617][ T5885] [ 855.798617][ T5885] *** DEADLOCK *** [ 855.798617][ T5885] [ 855.806761][ T5885] May be due to missing lock nesting notation [ 855.806761][ T5885] [ 855.815078][ T5885] 11 locks held by kworker/0:4/5885: [ 855.820368][ T5885] #0: ffff88814e090548 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 855.831092][ T5885] #1: ffffc9000412fc60 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 855.844237][ T5885] #2: ffff888027808538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xde0 [ 855.853467][ T5885] #3: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x1de/0xd80 [ 855.862706][ T5885] #4: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x16a0 [ 855.872552][ T5885] #5: ffffffff8df3b8c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 855.882504][ T5885] #6: ffff888023d34f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 855.892011][ T5885] #7: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860 [ 855.901504][ T5885] #8: ffffffff8df3b8c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 855.911454][ T5885] #9: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x185/0x1840 [ 855.920697][ T5885] #10: ffffffff8df3b8c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 855.930804][ T5885] [ 855.930804][ T5885] stack backtrace: [ 855.936787][ T5885] CPU: 0 UID: 0 PID: 5885 Comm: kworker/0:4 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 855.936807][ T5885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 855.936820][ T5885] Workqueue: mld mld_ifc_work [ 855.936837][ T5885] Call Trace: [ 855.936846][ T5885] [ 855.936853][ T5885] dump_stack_lvl+0x189/0x250 [ 855.936878][ T5885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 855.936901][ T5885] ? __pfx__printk+0x10/0x10 [ 855.936921][ T5885] print_deadlock_bug+0x28b/0x2a0 [ 855.936938][ T5885] validate_chain+0x1a3f/0x2140 [ 855.936954][ T5885] ? kvm_sched_clock_read+0x11/0x20 [ 855.936970][ T5885] ? sched_clock+0x3f/0x60 [ 855.936993][ T5885] ? sched_clock_cpu+0x74/0x430 [ 855.937017][ T5885] ? psi_task_switch+0x318/0x6d0 [ 855.937033][ T5885] ? __switch_to+0xd70/0x1600 [ 855.937059][ T5885] __lock_acquire+0xaac/0xd20 [ 855.937083][ T5885] ? hsr_dev_xmit+0x19a/0x220 [ 855.937106][ T5885] lock_acquire+0x120/0x360 [ 855.937127][ T5885] ? hsr_dev_xmit+0x19a/0x220 [ 855.937155][ T5885] ? hsr_dev_xmit+0x19a/0x220 [ 855.937178][ T5885] _raw_spin_lock_bh+0x36/0x50 [ 855.937194][ T5885] ? hsr_dev_xmit+0x19a/0x220 [ 855.937217][ T5885] hsr_dev_xmit+0x19a/0x220 [ 855.937242][ T5885] dev_hard_start_xmit+0x2ff/0x880 [ 855.937269][ T5885] __dev_queue_xmit+0x1adf/0x3a70 [ 855.937295][ T5885] ? __dev_queue_xmit+0x27e/0x3a70 [ 855.937319][ T5885] ? __local_bh_enable_ip+0x12d/0x1c0 [ 855.937343][ T5885] ? lockdep_hardirqs_on+0x9c/0x150 [ 855.937362][ T5885] ? __pfx___dev_queue_xmit+0x10/0x10 [ 855.937386][ T5885] ? do_raw_read_unlock+0x3d/0x80 [ 855.937405][ T5885] ? ebt_do_table+0x265b/0x2820 [ 855.937435][ T5885] br_dev_queue_push_xmit+0x6c5/0x890 [ 855.937460][ T5885] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 855.937485][ T5885] ? NF_HOOK+0x9e/0x3c0 [ 855.937513][ T5885] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 855.937535][ T5885] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 855.937558][ T5885] NF_HOOK+0x31d/0x3c0 [ 855.937581][ T5885] ? NF_HOOK+0x9e/0x3c0 [ 855.937602][ T5885] ? __pfx_NF_HOOK+0x10/0x10 [ 855.937625][ T5885] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 855.937652][ T5885] br_forward_finish+0xd3/0x130 [ 855.937673][ T5885] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 855.937696][ T5885] ? __pfx_br_forward_finish+0x10/0x10 [ 855.937718][ T5885] ? __pfx_br_forward_finish+0x10/0x10 [ 855.937740][ T5885] NF_HOOK+0x31d/0x3c0 [ 855.937762][ T5885] ? br_vlan_lookup+0x8f/0x710 [ 855.937783][ T5885] ? NF_HOOK+0x9e/0x3c0 [ 855.937804][ T5885] ? __pfx_NF_HOOK+0x10/0x10 [ 855.937826][ T5885] ? __pfx_br_forward_finish+0x10/0x10 [ 855.937849][ T5885] ? br_switchdev_frame_uses_tx_fwd_offload+0x14/0x70 [ 855.937870][ T5885] __br_forward+0x41e/0x600 [ 855.937892][ T5885] ? __pfx_br_forward_finish+0x10/0x10 [ 855.937916][ T5885] ? __pfx___br_forward+0x10/0x10 [ 855.937940][ T5885] ? skb_clone+0x246/0x3a0 [ 855.937962][ T5885] maybe_deliver+0xb5/0x160 [ 855.937986][ T5885] br_flood+0x31a/0x6a0 [ 855.938010][ T5885] ? br_dev_xmit+0x185/0x1840 [ 855.938027][ T5885] br_dev_xmit+0x11b3/0x1840 [ 855.938044][ T5885] ? arch_stack_walk+0x11c/0x150 [ 855.938064][ T5885] ? br_dev_xmit+0x185/0x1840 [ 855.938083][ T5885] ? __pfx_br_dev_xmit+0x10/0x10 [ 855.938100][ T5885] ? __pfx_skb_network_protocol+0x10/0x10 [ 855.938122][ T5885] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 855.938144][ T5885] ? __pfx_passthru_features_check+0x10/0x10 [ 855.938170][ T5885] dev_hard_start_xmit+0x2ff/0x880 [ 855.938197][ T5885] __dev_queue_xmit+0x1adf/0x3a70 [ 855.938222][ T5885] ? __dev_queue_xmit+0x27e/0x3a70 [ 855.938246][ T5885] ? rcu_is_watching+0x15/0xb0 [ 855.938270][ T5885] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 855.938288][ T5885] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 855.938309][ T5885] ? __pfx___dev_queue_xmit+0x10/0x10 [ 855.938331][ T5885] ? __copy_skb_header+0xa7/0x550 [ 855.938352][ T5885] ? __asan_memcpy+0x40/0x70 [ 855.938367][ T5885] ? __pskb_copy_fclone+0x960/0xf90 [ 855.938389][ T5885] ? __asan_memcpy+0x40/0x70 [ 855.938404][ T5885] ? __pskb_copy_fclone+0x960/0xf90 [ 855.938428][ T5885] ? hsr_create_tagged_frame+0x449/0xc30 [ 855.938446][ T5885] ? __asan_memmove+0x40/0x70 [ 855.938461][ T5885] ? hsr_addr_subst_dest+0x307/0xac0 [ 855.938488][ T5885] hsr_forward_skb+0x158b/0x2860 [ 855.938515][ T5885] ? hsr_forward_skb+0x9e/0x2860 [ 855.938532][ T5885] ? __pfx_hsr_forward_skb+0x10/0x10 [ 855.938549][ T5885] ? do_raw_spin_lock+0x121/0x290 [ 855.938567][ T5885] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 855.938587][ T5885] ? hsr_dev_xmit+0x19a/0x220 [ 855.938611][ T5885] hsr_dev_xmit+0x1a5/0x220 [ 855.938636][ T5885] dev_hard_start_xmit+0x2ff/0x880 [ 855.938662][ T5885] __dev_queue_xmit+0x1adf/0x3a70 [ 855.938688][ T5885] ? __dev_queue_xmit+0x27e/0x3a70 [ 855.938715][ T5885] ? __pfx___dev_queue_xmit+0x10/0x10 [ 855.938737][ T5885] ? read_seqbegin+0x122/0x250 [ 855.938751][ T5885] ? neigh_connected_output+0x1ea/0x460 [ 855.938768][ T5885] ? lockdep_hardirqs_on+0x9c/0x150 [ 855.938786][ T5885] ? read_seqbegin+0x1ac/0x250 [ 855.938800][ T5885] ? __pfx_read_seqbegin+0x10/0x10 [ 855.938815][ T5885] ? eth_header+0x11b/0x200 [ 855.938834][ T5885] ? __asan_memcpy+0x40/0x70 [ 855.938849][ T5885] ? eth_header+0x11b/0x200 [ 855.938866][ T5885] ? __pfx_eth_header+0x10/0x10 [ 855.938885][ T5885] ? neigh_connected_output+0x3b6/0x460 [ 855.938907][ T5885] ip6_finish_output2+0x11fb/0x16a0 [ 855.938928][ T5885] ? ip6_finish_output2+0x701/0x16a0 [ 855.938949][ T5885] ? __pfx_ip6_finish_output2+0x10/0x10 [ 855.938967][ T5885] ? ip6_mtu+0x7d/0x3f0 [ 855.938984][ T5885] ? ip6_mtu+0x7d/0x3f0 [ 855.938999][ T5885] ip6_finish_output+0x234/0x7d0 [ 855.939017][ T5885] NF_HOOK+0x9e/0x380 [ 855.939033][ T5885] ? NF_HOOK+0x101/0x380 [ 855.939049][ T5885] ? __pfx_NF_HOOK+0x10/0x10 [ 855.939065][ T5885] ? __pfx_dst_output+0x10/0x10 [ 855.939081][ T5885] ? icmp6_dst_alloc+0x3a5/0x420 [ 855.939097][ T5885] ? icmp6_dst_alloc+0x3a5/0x420 [ 855.939114][ T5885] mld_sendpack+0x800/0xd80 [ 855.939137][ T5885] ? mld_sendpack+0x1de/0xd80 [ 855.939154][ T5885] ? __pfx_mld_sendpack+0x10/0x10 [ 855.939177][ T5885] mld_ifc_work+0x835/0xde0 [ 855.939194][ T5885] ? _raw_spin_unlock_irq+0x23/0x50 [ 855.939209][ T5885] ? process_scheduled_works+0x9ec/0x17a0 [ 855.939235][ T5885] process_scheduled_works+0xadb/0x17a0 [ 855.939269][ T5885] ? __pfx_process_scheduled_works+0x10/0x10 [ 855.939299][ T5885] worker_thread+0x8a0/0xda0 [ 855.939315][ T5885] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 855.939334][ T5885] ? __kthread_parkme+0x7b/0x200 [ 855.939353][ T5885] kthread+0x70e/0x8a0 [ 855.939372][ T5885] ? __pfx_worker_thread+0x10/0x10 [ 855.939386][ T5885] ? __pfx_kthread+0x10/0x10 [ 855.939404][ T5885] ? __pfx_kthread+0x10/0x10 [ 855.939422][ T5885] ? _raw_spin_unlock_irq+0x23/0x50 [ 855.939436][ T5885] ? lockdep_hardirqs_on+0x9c/0x150 [ 855.939453][ T5885] ? __pfx_kthread+0x10/0x10 [ 855.939471][ T5885] ret_from_fork+0x4b/0x80 [ 855.939486][ T5885] ? __pfx_kthread+0x10/0x10 [ 855.939508][ T5885] ret_from_fork_asm+0x1a/0x30 [ 855.939529][ T5885] [ 855.949103][T15196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2555'. [ 856.672760][ T5887] usb 1-1: USB disconnect, device number 120 [ 856.723930][T15196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2555'. [ 856.806023][ T9] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 857.396363][ T7214] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 857.957721][ T5885] usb 5-1: USB disconnect, device number 10 [ 858.506125][ T1009] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 859.626116][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 860.746522][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 861.866625][ T1009] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 862.986157][ T8485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 864.106566][ T1009] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 865.206905][ T8485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!