last executing test programs: 8.725292363s ago: executing program 4 (id=1103): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$FIONCLEX(r0, 0x5450) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9e46, &(0x7f0000006680)) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f00000000c0)={0x1c, 0x5, 0xd}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) fsopen(&(0x7f0000000100)='udf\x00', 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="01000000000000000000090000003000038014000200736974"], 0x44}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f80fc71a0f23f8c9b9490300000f60b932c00a00b9730200008d32328fe858b660002fb90d090000b800680000ba000000000f30", 0x63}], 0x1, 0x2c, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r6, 0xae80, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000046c0)={0x0, 0x989680}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 7.376400911s ago: executing program 2 (id=1109): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_connect$cdc_ncm(0x1, 0x7c, &(0x7f0000000480)=ANY=[@ANYBLOB="12010102020000ff2505a1a440000102030109026a0002010630050904000001020d0000052406000105240007000d240f01060000000080ff7f0906241ac0ff020e24070a060001810200ff000000090581030002090f040904010000020d00000904010102020d0000090592c257c9d48202000409800609050302e6c5b815e1c037b13dbc655861c305afcc790867a28333dc34e3b5063358f456c820e1e3908ea0a28aaa4a19f3e244f1181bc86b1b580625c97a5cebb667acaf"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x179c00, 0x80) syz_fuse_handle_req(r2, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700fbff, 0x4, 0x1, 0x0, r4, 0x0}]) dup3(r2, r4, 0x6700000000000000) syz_fuse_handle_req(r2, &(0x7f0000008340)="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", 0x2000, &(0x7f0000001500)={&(0x7f00000003c0)={0x50, 0x0, 0x8, {0x7, 0x2b, 0x1, 0x400202, 0x0, 0xff, 0x8000, 0x8, 0x0, 0x0, 0x4, 0x40000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket(0x11, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000110f00090000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04010000000000002800128009000100766c616e00000000180002800c0002001b0000001f000000060001000000000008000500", @ANYRES32=r10], 0x58}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000900)="2d36d6", 0x3}], 0x2) 7.115560876s ago: executing program 0 (id=1112): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000140)={0x81, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x683, 0x2, 0x1, 0x0, @msi={0x5, 0x101, 0x101, 0xffffff42}}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0xc0000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x275a, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x7, 0xc82) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000cc0)={0x0, 0x0, {0xfffff982, 0x8, 0x300f, 0x3, 0x9, 0x7, 0x2, 0x4}}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newtfilter={0x83, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xf}, {0xfff1}, {0xf, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040004}, 0x20084084) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) socket$alg(0x26, 0x5, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) ioctl$sock_SIOCINQ(r10, 0x541b, 0x0) 6.755698717s ago: executing program 4 (id=1114): setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="87bccef50dadd024aa6c2fbd994110fe33e83afa35e9d5f88153bae8184e26d00e4da31fe914ee43be60f5fd5b1dd45d98ae6d53254ecd45c46950dd63366609db098a9f5d2e3acd43dd2c1bc521f978f04de395941f362c062d41140b5440311248e21a27c60e99164f37962e6ba3afc3524ee5028223e2fd7efecf200b6ba40d72e66e880f514400342b804e37b4568988024fca3571279ad59ebe9655de6175ea6487c2bd30a0b74279ead7777eceacc117ab2d1eae87e3a53de2511f6e89a1", @ANYRES16=r2], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xbcb8, 0x0, 0x1, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r7, 0x100, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x1c}}, 0x40010) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r3, 0x0}) io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 6.002783135s ago: executing program 0 (id=1116): syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@private=0xa010100, 0x9}]}, @ssrr={0x89, 0x7, 0x77, [@multicast2]}, @generic={0x7, 0x2}]}}, {{0x4, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x207fff) recvmmsg(r2, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x30102, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000800)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') 5.048070601s ago: executing program 4 (id=1119): bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x21, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) 4.691298015s ago: executing program 0 (id=1120): syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) (async) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000003c0)={0x0, 0x0, "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"}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f0000000000)={r0, 0x6000000000000000, 0x4, 0x6}) ioctl$DRM_IOCTL_VERSION(r1, 0xc0246400, &(0x7f0000000040)={0xd78, 0x8, 0x9, 0xbf, &(0x7f00000001c0)=""/191, 0x6f, &(0x7f0000000100)=""/111, 0x1002, &(0x7f0000001500)=""/4098}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x9, 0x1, 0x1, 'queue1\x00', 0x9}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x9, 0x1, 0x1, 'queue1\x00', 0x9}) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) fcntl$setstatus(r2, 0x4, 0x2400) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)="390700117f", 0x5}, {0x0}], 0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000002, 0x100010, r2, 0x5e7c7000) 4.676343352s ago: executing program 3 (id=1121): write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000080)='1', 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) quotactl_fd$Q_SYNC(r1, 0xffffffff80000101, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x8, 0x20000) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000340)={r6, 0x1000000, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000140)={r7, 0x80000}) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000040)=[{}, {}], 0x2161, 0x0, 0x0, 0x0) 4.64278943s ago: executing program 4 (id=1122): set_mempolicy(0x2, 0x0, 0xf5) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x10000000000000, 0x0, 0xfffffffffffffffe, 0xfffffffc, 0x6}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket(0x2, 0x80805, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="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", 0x25d}, {&(0x7f0000000580)="1eac4d20f8509e8f36d2842c8fae7bbe58c5bf73985d5106bf5b5e7e5761716e35b468ea79633c916c4a8026f9408d0558de77df67c0e6fd0b1b3da5de5d003382ac95eade5dadad870ce3749452d2c1c3651ffff244be3078fdbfeb97d093bbbe0131e733d91c4ad38e7b52aa7afa9cb8e2351bd3f8a7a2a0425b071f6790992b8c2a51d964b0161c1856697820eb52f55c97fcdc19c2ef7c66ccc23c77a28a34b216c429444343ea056f171399dc03d56a1131ba74d31fc1012d3deff0e43309fc9e3b88bec90a7680aa74ccd581e02eb436a0009fa62097513d0c9533256d81978fae39288edcb833739d2988ccf5a564bc00edd1ab0853b873cbab3ef227f11325d72dbe2f435351610d09d0f74e180df6eaa94651336e7713414e49956fcb68a973e8239e343684255efba0d1b149b22c2d81f1ac5eaccaab01ab108178e97eb8a45d5d6cdeca0d6b9af9f88cfee58935be6902ac7c6915d60548367d164990b142d472b9b5700191b1f978fbe071de646385dcf5cb7adf1ec70baef4061d2da93d2f5eef8b1081374d58ab54532755c1b8bf303584296145e9aad2e3ccef93f30da9c109db5cfe", 0x1aa}], 0x2, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004000}, 0x80) read$alg(r2, &(0x7f0000003780)=""/4096, 0x1000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/sem\x00', 0x0, 0x0) pread64(r7, 0x0, 0x0, 0xf27b) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x555480, 0x2, 0x14}, 0x18) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="34000000000b01010000000000000000010000040800034000000000080002400000000408000340000000010800024000000001bc7e2ab28f00546cde1670d7a81250c6e7ba6a45642a6fbb25e8f0223feb12a6c816e399c0fab43bfce494be3e2d4352fb8f9bdaf591d6849bca"], 0x34}, 0x1, 0x0, 0x0, 0x40048d4}, 0x4004) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0xac}}, 0x0) 4.555864182s ago: executing program 1 (id=1123): socket(0xa, 0x3, 0x3a) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect$hid(0x59c7271563034cba, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x55, &(0x7f0000000080)=ANY=[@ANYBLOB="5503f34c2a690f9edebae6e528230fbc28a8648b019527eaa18106f93b2762db6c23ee51dd91b80c0423907b5013a6212e814d37637d351fcd98c90e4fdfaaf16079e116382e7c5d3d57b414c8649f24e88f26533d50ec64baa4"]}]}) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) (async) r2 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000400)=ANY=[], 0x1df) (async) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x3, {0x2a00, 0x80010000, 0x0, 0x2, 0x2, 0x0, 0x5, 0x0, 0x1c, "fee805000000000000000d04072000001ea89de2b7fb0000e60080b8785d9600010000000000000000a000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f30600300", [0x8, 0x1]}}) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x15) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x414000, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) ftruncate(r8, 0x3ff) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TCFLSH(r5, 0x540b, 0x2) (async) ioctl$KDSETLED(r5, 0x4b32, 0x9) 4.293517773s ago: executing program 3 (id=1124): set_mempolicy(0x2, 0x0, 0xf5) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x10000000000000, 0x0, 0xfffffffffffffffe, 0xfffffffc, 0x6}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket(0x2, 0x80805, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) (fail_nth: 1) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="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", 0x25d}, {&(0x7f0000000580)="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", 0x1aa}], 0x2, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004000}, 0x80) read$alg(r2, &(0x7f0000003780)=""/4096, 0x1000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/sem\x00', 0x0, 0x0) pread64(r7, 0x0, 0x0, 0xf27b) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x555480, 0x2, 0x14}, 0x18) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="34000000000b01010000000000000000010000040800034000000000080002400000000408000340000000010800024000000001bc7e2ab28f00546cde1670d7a81250c6e7ba6a45642a6fbb25e8f0223feb12a6c816e399c0fab43bfce494be3e2d4352fb8f9bdaf591d6849bca"], 0x34}, 0x1, 0x0, 0x0, 0x40048d4}, 0x4004) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0xac}}, 0x0) 4.249021267s ago: executing program 0 (id=1125): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7fff, 0x80, 0x240}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r4, 0x0, 0x0, 0x400c404) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6}]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20044011) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 4.107315349s ago: executing program 2 (id=1126): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000340)={0x8, 0x0, 0x1004, 0x2, 0x4000002, 0x10000}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000007c0)=[{{&(0x7f0000000400)=@qipcrtr, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000480)=""/96, 0x60}, {&(0x7f0000000140)=""/4, 0x4}, {&(0x7f0000000540)=""/123, 0x7b}, {0x0}, {&(0x7f0000000680)=""/104, 0x68}], 0x5, &(0x7f0000000700)=""/139, 0x8b}, 0x9}], 0x1, 0x2042, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private=0x80, @in6=@dev, 0x4e24, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2}, {0xffffffffffffffff}, 0x0, 0x0, 0x2a36530bc1475d6f}, {{@in=@local, 0x4d6, 0x6c}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x4}}, 0xe4) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) r7 = epoll_create(0x10d74f) epoll_pwait2(r7, &(0x7f0000000300)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000500)={0x1}) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0xe22, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}, 0x1c) r8 = socket$key(0xf, 0x3, 0x2) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xbe) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69619c"], 0x10}}, 0x0) r10 = timerfd_create(0x0, 0x80000) timerfd_settime(r10, 0x3, &(0x7f0000000040), 0x0) timerfd_gettime(r10, &(0x7f0000000800)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r11 = socket(0x10, 0x3, 0x0) write(r11, 0x0, 0x0) 3.683669531s ago: executing program 1 (id=1127): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0xffffff1f, 0x4, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x11ffffa, 0x10100, 0x3}, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x5, 0x600, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, '\t\x00'}}, 0x48}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffd, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x7fb2, @empty, 0x6, 0x2}, 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x48, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "f8ff00fa08"}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3.520311493s ago: executing program 1 (id=1128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000740)={0x3, 0x0, @ioapic={0x0, 0x10000, 0x5, 0x101, 0x0, [{0xf, 0x81, 0x6, '\x00', 0x6}, {0x3, 0x18, 0x6, '\x00', 0x10}, {0x5, 0x40, 0xd0, '\x00', 0x5}, {0x6, 0x5, 0x1, '\x00', 0xc}, {0xa, 0x9, 0x4e, '\x00', 0x57}, {0xfe, 0x4, 0x6, '\x00', 0x6}, {0xff, 0x4, 0x5, '\x00', 0x45}, {0x8, 0x3c, 0x81, '\x00', 0x10}, {0x8, 0x8, 0x0, '\x00', 0x7}, {0x28, 0x40, 0x9, '\x00', 0x3}, {0x7, 0x6, 0x7, '\x00', 0x5}, {0x9, 0x8, 0x2, '\x00', 0x73}, {0x30, 0x5, 0xe, '\x00', 0x7f}, {0x4, 0x3, 0x9, '\x00', 0x56}, {0x8, 0x9, 0x1, '\x00', 0x40}, {0x2f, 0x6, 0x2, '\x00', 0x80}, {0xfa, 0x5, 0xc, '\x00', 0x7}, {0xff, 0x9, 0xff, '\x00', 0x2}, {0x6, 0x2, 0x8, '\x00', 0xd}, {0x14, 0x2, 0x2, '\x00', 0x86}, {0x47, 0x9, 0xfd, '\x00', 0xf4}, {0x42, 0x5, 0x6, '\x00', 0x80}, {0xba, 0xf2, 0xfa, '\x00', 0x5}, {0x8, 0x8, 0x1, '\x00', 0x5}]}}) (async) r2 = socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) r3 = socket$packet(0x11, 0x3, 0x300) (async) r4 = openat$rdma_cm(0xffffff9c, &(0x7f00000022c0), 0x2, 0x0) writev(r4, &(0x7f0000003780)=[{&(0x7f0000002600)="9c4e018cd44c50ff0f", 0x9}], 0x1) (async) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) (rerun: 32) recvmsg$unix(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8e}, 0x0) recvmsg$unix(r5, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x2) (async) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) (async, rerun: 64) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) (async) setsockopt(r7, 0x84, 0x80, &(0x7f0000000040)="2153b0f110b8961b", 0x8) (async) syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io(r6, 0x0, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, 0x0, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x7, 0x3, 0x2, 0x0, 0x6}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000240)={r9, 0xff}, 0x8) 3.421000308s ago: executing program 3 (id=1129): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_buf(r4, 0x29, 0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000140)={r3, 0x0, 0x8, 0xaf0a, 0xe, 0x3c50, 0x0, 0xfffffffc, {0x0, @in={{0x2, 0x4e20, @remote}}, 0x2, 0xffffff2d, 0x3, 0x38de, 0x7}}, &(0x7f0000000200)=0xb0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) 3.270466965s ago: executing program 0 (id=1130): syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@private=0xa010100, 0x9}]}, @ssrr={0x89, 0x7, 0x77, [@multicast2]}, @generic={0x7, 0x2}]}}, {{0x4, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x207fff) recvmmsg(r2, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x30102, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000800)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') 3.190925104s ago: executing program 2 (id=1131): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000000c0)={'ip6gre0\x00', {0x2, 0x4e20, @rand_addr=0x64010102}}) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_cache\x00') syz_io_uring_setup(0x83f, 0x0, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) fcntl$getflags(0xffffffffffffffff, 0x408) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000180)={{0x2c, @rand_addr=0x44010101, 0x4e22, 0x0, 'wrr\x00', 0x1, 0x82, 0x5e}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x4e20, 0x0, 0x2f, 0x3, 0x21}}, 0x44) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000200)={0x4376ea830d56d49d}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f0000000140)=0x5000) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.980055196s ago: executing program 1 (id=1132): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, {0x0, 0x4e20, 0x8}}}}}, 0x0) (fail_nth: 4) 2.192767483s ago: executing program 1 (id=1133): sendmsg$tipc(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x40}, 0x24000010) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000006c0)={{{0x1, 0x1}}, 0x0, 0xfffffffa, 0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) accept4(r1, &(0x7f0000000000)=@alg, &(0x7f00000000c0)=0x80, 0x800) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0x9e, 0xb4, 0x10, 0x54c, 0x38, 0x16f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xc5, 0x38}}]}}]}}, 0x0) 2.191473044s ago: executing program 3 (id=1134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x8002}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) 2.188674765s ago: executing program 4 (id=1135): syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 2.126947903s ago: executing program 0 (id=1136): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004851) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockname$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, &(0x7f0000000280)=0x10) setsockopt(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8) socket(0x10, 0x803, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) close(0x3) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 1.795998003s ago: executing program 3 (id=1137): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000010000305000000010000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d61637365630000140002800500090003000000050008"], 0x4c}}, 0x0) 1.300070695s ago: executing program 2 (id=1138): r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x5}, {}, {0xa, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x9}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0xc010) 1.217815634s ago: executing program 3 (id=1139): syz_pidfd_open(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f0000004000)=0x2, 0x4, 0x0, 0x0, &(0x7f0000004000), 0xb201fffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x26, 0x0, 0x4, 0x78, 0xd, 0x3, 0x0, 0x3}, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r6, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) 995.683897ms ago: executing program 2 (id=1140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x6, 0x5fb, &(0x7f0000000940)={{0x12, 0x1, 0x310, 0xd0, 0xb7, 0x9e, 0x20, 0x4855, 0x91, 0xe99c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e9, 0x1, 0xb4, 0x81, 0x80, 0xff, [{{0x9, 0x4, 0x7a, 0x92, 0x10, 0xe3, 0x60, 0x5e, 0x80, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "e189e6fafbb4"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x200, 0x9, 0xfa}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x10, 0x9, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x8, 0x8}]}, @generic={0x28, 0x23, "1ad9652bc83c8502dc4d9c24f20d3c95e770b0fff5d97745ffb9938e2df91dbd2add6799578a"}], [{{0x9, 0x5, 0x0, 0x1, 0x10, 0xc, 0x2, 0x7f}}, {{0x9, 0x5, 0xe, 0x0, 0x38ca73dce1b62fa6, 0xf1, 0x0, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5b, 0x7}, @generic={0xee, 0x2, "4b565df92870acfde565f54e426a2ee022b33754dffc2e2160205c2756b0f420369b326037d285e4439de6595d4c2ecc45b7d0360e54aa613f5d16eebe8c5815aa201be3c83684da2ee6c7626db06ee8ac66fe5c2c1750f4990fda80cb82ebdfad919c0e1934c20a7382be751bdff670a1803c9821777d02cf1c54064554879f1254a90a698caacbe1931a2225eda4901bfdbc6605285653b7688f015c26653c9b2be127c690453f0ad820c61c897d4bdbf93991e95d396c6fcb80f24631ae88ccadd1d10f7e801a571188c867f3d36231b93ee6dbb1cadc690ca07758b4414182d3d0755d494746a2aecf24"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x2, 0x2, 0x7f, [@generic={0xe9, 0x7, "b5d312214565af8fed7bc1f1270281a323c374d988301b950185282c35e97bd363d4a0bef35bf6c088720c182f998c09e7797d9f2b44a6953d15d59d0286196c4b31ebffe4f1a018b5393cffa9b8b5300f5f8add249fba9c9b65bfb26083cf200dea570410dd6577ff28f238b90914e57dda215807e9ca18084aeba4caf290f8538308469e197ae2b0c2adede1ba784cbf232c826c6bdbeb6d302f47cf3e415e7a767a9ca9b0806fba4b09b81787e7d338244a23a7872bfcc2c90f79890e8311e18eb9dbd62d5fc504a38d35a0e84b92a311a3ee4fdf46593c9c4bc17dd66a4381745222be8ba1"}]}}, {{0x9, 0x5, 0xa, 0x9, 0x40, 0x6, 0x2, 0x3}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x53, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x67, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x100}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x8, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0x400}]}}, {{0x9, 0x5, 0xf, 0x11, 0x40, 0xc4, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x4}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x0, 0x22, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xfff7}]}}, {{0x9, 0x5, 0xb, 0x4, 0x20, 0xf9, 0x2, 0x6}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x6, 0x8, 0x3}}, {{0x9, 0x5, 0xe, 0xc, 0x20, 0x5, 0x2, 0x4, [@generic={0x73, 0x13, "59dafd671b788fc865ce1905f89d63963e6d4c32e2648658097bc1c47171b1c73efa3dcdac32a58869585aa5ac8aecd4159c96168c60da4e4e78c83404b598bfd618e1c276a27b92c581e83bceb2496176a46e1f7dd2fb836e7e405a1608aa36bcdce47c2cbb1ba21bd60b1183b4d79e37"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x600, 0x81, 0x6, 0x5, [@generic={0xef, 0x8, "0702c077e570fb736953b6afdd08f9f9d5792d3605f2808197e3042cd3a1f39569c926d4e899c4b77db80512896cbe21e71d826447d7f2e2003c6e6362cd040a0305712bdeb3654d844faf9a53776ff15bfe23592d302a6dfa34539338261ac92568c3bd2fc2f3f6769ebfed1c245375f955d231b1e34159f299c9b2480b5f34c424300d93574e985dee64b6faa478911e8643e7ea82a38e436a97c21bfe6c7ced1782956f37ba04f6b67da982373e5888d3c3b0f3debbb80b2d1b558c7748f6d8c7ab0afaf7263579b9763c4f6c5db97212df98a00f3675b37a1f2e0b06b08f97961966295c80149c59752d78"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x5b}]}}, {{0x9, 0x5, 0x8b, 0x1, 0x20, 0x0, 0x3, 0x2, [@generic={0xc7, 0xc, "d81490de835a66ed6c8761cd9ce28058425afb565aeff3baa3a9113b6b5965b62de87ae9c46ae4f1670c3b3aecd24c0c017c3c8c030fb0c7a95541f98bfca53bdd1e822c80cbf9338a026ac61860298f57bddb80d8f8d64d07b80c8723c80aae09699a487a778b615a350c3eee066395f5a5e403118e6f13c80dc9263752250cb8da8d4db8b91f26a6ab1ef14661fbd0650fa1396472685c1dfd9559e81f7ee483905fde0973435fadc5b6745e0a344320053a3ff9172a28b94f7cc7ea59d368f2e3a34167"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x9, 0x1, 0xcc, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x7}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x6, 0x9, 0xc}}, {{0x9, 0x5, 0x5, 0x3, 0x8, 0x4, 0x2, 0x8, [@generic={0xb6, 0x6, "1d3bad2ecf559c72e1e915014380c8b6d932c1001a721a289f24f6740e81076896ecd06fd11b669abb357140cd5c4786e85b2f7b797ec62e08369ac4b574abdff4925b2608146f26532468d7fa882c2e00e4311d9c31a7f73e69becfa6ab53e8d8eeb77d260a852bdef867f0d1c261cc1218a20dea07a5c2cb6e13026d4ddeda22c9c323f04c21b7d98f3cf443f0cda8d23c86bb1f732d9719e6c15ef973b7bc25fb86cf5d8b51d7588e84916aaed8394c225de9"}]}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x0, 0x8, 0x6, 0x8, 0x5}, 0x12, &(0x7f0000000080)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4, 0x1, 0x40a}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x300a}}]}) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}, {&(0x7f0000000400)='\aly', 0x3}], 0x2) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 755.246865ms ago: executing program 4 (id=1141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7fff, 0x80, 0x240}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r4, 0x0, 0x0, 0x400c404) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6}]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20044011) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 373.119619ms ago: executing program 2 (id=1142): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) (fail_nth: 4) 0s ago: executing program 1 (id=1143): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4, 0x1ff, @empty, 0x1}, 0x1c) connect$inet(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): he descriptor's value: 3 [ 261.244958][ T5924] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.347103][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.365373][ T5924] usb 1-1: Product: syz [ 261.371605][ T5924] usb 1-1: Manufacturer: syz [ 261.376408][ T5924] usb 1-1: SerialNumber: syz [ 261.631159][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 261.631180][ T30] audit: type=1326 audit(1755292572.801:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8542 comm="syz.2.749" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x0 [ 261.741119][ T8546] fuse: Bad value for 'fd' [ 261.793216][ T8535] syz_tun: left allmulticast mode [ 261.809822][ T5924] usb 1-1: 0:2 : does not exist [ 261.837446][ T30] audit: type=1326 audit(1755292572.911:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8542 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 261.860347][ T30] audit: type=1326 audit(1755292572.911:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8542 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 261.891213][ T5924] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 261.991759][ T30] audit: type=1326 audit(1755292572.911:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8542 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 262.016383][ T30] audit: type=1326 audit(1755292572.911:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8542 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 262.028021][ T5924] usb 1-1: USB disconnect, device number 22 [ 262.056512][ T30] audit: type=1326 audit(1755292572.911:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8542 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 262.079036][ T30] audit: type=1326 audit(1755292572.911:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8542 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 262.103599][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.123183][ T30] audit: type=1326 audit(1755292572.911:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8542 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 262.146177][ T30] audit: type=1326 audit(1755292572.911:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8542 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 262.173998][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.195198][ T30] audit: type=1326 audit(1755292572.911:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8542 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 262.826793][ T8565] netlink: 32 bytes leftover after parsing attributes in process `syz.0.753'. [ 262.893536][ T8565] fuse: Bad value for 'rootmode' [ 263.051331][ T8561] tipc: Enabled bearer , priority 0 [ 263.067532][ T8564] syzkaller0: entered promiscuous mode [ 263.134424][ T8564] syzkaller0: entered allmulticast mode [ 263.175601][ T8561] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 263.236679][ T8575] FAULT_INJECTION: forcing a failure. [ 263.236679][ T8575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.242789][ T8564] tipc: Resetting bearer [ 263.250104][ T8575] CPU: 1 UID: 0 PID: 8575 Comm: syz.3.758 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 263.250133][ T8575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.250145][ T8575] Call Trace: [ 263.250154][ T8575] [ 263.250164][ T8575] dump_stack_lvl+0x189/0x250 [ 263.250194][ T8575] ? __pfx____ratelimit+0x10/0x10 [ 263.250225][ T8575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.250250][ T8575] ? __pfx__printk+0x10/0x10 [ 263.250293][ T8575] should_fail_ex+0x414/0x560 [ 263.250327][ T8575] _copy_to_user+0x31/0xb0 [ 263.250362][ T8575] simple_read_from_buffer+0xe1/0x170 [ 263.250400][ T8575] proc_fail_nth_read+0x1b3/0x220 [ 263.250428][ T8575] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 263.250456][ T8575] ? rw_verify_area+0x2a6/0x4d0 [ 263.250482][ T8575] ? __lock_acquire+0xab9/0xd20 [ 263.250510][ T8575] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 263.250535][ T8575] vfs_read+0x1fd/0xa30 [ 263.250562][ T8575] ? fdget_pos+0x247/0x320 [ 263.250584][ T8575] ? __pfx___mutex_lock+0x10/0x10 [ 263.250615][ T8575] ? __pfx_vfs_read+0x10/0x10 [ 263.250645][ T8575] ? __fget_files+0x2a/0x420 [ 263.250668][ T8575] ? __fget_files+0x3a0/0x420 [ 263.250685][ T8575] ? __fget_files+0x2a/0x420 [ 263.250725][ T8575] ksys_read+0x145/0x250 [ 263.250754][ T8575] ? __pfx_ksys_read+0x10/0x10 [ 263.250783][ T8575] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.250813][ T8575] __do_fast_syscall_32+0xb6/0x2b0 [ 263.250843][ T8575] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.250874][ T8575] do_fast_syscall_32+0x34/0x80 [ 263.250921][ T8575] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 263.250947][ T8575] RIP: 0023:0xf703e539 [ 263.250964][ T8575] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 263.250982][ T8575] RSP: 002b:00000000f542e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 263.251007][ T8575] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f542e620 [ 263.251022][ T8575] RDX: 000000000000000f RSI: 00000000f73a4ff4 RDI: 0000000000000000 [ 263.251036][ T8575] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 263.251047][ T8575] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 263.251059][ T8575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 263.251092][ T8575] [ 263.438053][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.743293][ T8559] tipc: Resetting bearer [ 263.803117][ T8559] tipc: Disabling bearer [ 264.084889][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.760'. [ 264.285503][ T8590] syz_tun: entered allmulticast mode [ 264.414816][ T8592] program syz.2.762 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.451137][ T8592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.762'. [ 264.597080][ T1211] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 264.771269][ T1211] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.809939][ T1211] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.840259][ T1211] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 264.881547][ T1211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.900294][ T1211] usb 4-1: Product: syz [ 264.909733][ T1211] usb 4-1: Manufacturer: syz [ 264.920082][ T1211] usb 4-1: SerialNumber: syz [ 265.155117][ T8589] syz_tun: left allmulticast mode [ 265.169896][ T1211] usb 4-1: 0:2 : does not exist [ 265.191430][ T1211] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 265.270653][ T1211] usb 4-1: USB disconnect, device number 20 [ 265.711432][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.768'. [ 265.793407][ T8615] tipc: Enabled bearer , priority 0 [ 265.805242][ T8615] syzkaller0: entered promiscuous mode [ 265.811368][ T8615] syzkaller0: entered allmulticast mode [ 265.831745][ T8615] tipc: Resetting bearer [ 265.843343][ T8614] tipc: Resetting bearer [ 265.876644][ T8614] tipc: Disabling bearer [ 265.978035][ T1211] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 266.228518][ T1211] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 266.257211][ T1211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 266.268810][ T1211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 266.280186][ T1211] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 266.293235][ T1211] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 266.304430][ T1211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.411764][ T1211] usb 2-1: config 0 descriptor?? [ 266.508037][ T8612] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 266.830235][ T8629] netlink: 161716 bytes leftover after parsing attributes in process `syz.2.774'. [ 266.862983][ T8629] net_ratelimit: 14 callbacks suppressed [ 266.862996][ T8629] netlink: zone id is out of range [ 266.888717][ T8629] netlink: zone id is out of range [ 266.896308][ T8629] netlink: zone id is out of range [ 266.902954][ T8629] netlink: zone id is out of range [ 266.908472][ T8629] netlink: zone id is out of range [ 266.914086][ T8629] netlink: zone id is out of range [ 266.919667][ T8629] netlink: zone id is out of range [ 266.928180][ T8629] netlink: zone id is out of range [ 266.934769][ T8629] netlink: zone id is out of range [ 266.941325][ T8629] netlink: zone id is out of range [ 267.037656][ T8632] FAULT_INJECTION: forcing a failure. [ 267.037656][ T8632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.066029][ T8632] CPU: 0 UID: 0 PID: 8632 Comm: syz.4.775 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 267.066068][ T8632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.066080][ T8632] Call Trace: [ 267.066087][ T8632] [ 267.066096][ T8632] dump_stack_lvl+0x189/0x250 [ 267.066124][ T8632] ? __pfx____ratelimit+0x10/0x10 [ 267.066151][ T8632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.066174][ T8632] ? __pfx__printk+0x10/0x10 [ 267.066214][ T8632] should_fail_ex+0x414/0x560 [ 267.066245][ T8632] _copy_to_user+0x31/0xb0 [ 267.066269][ T8632] simple_read_from_buffer+0xe1/0x170 [ 267.066302][ T8632] proc_fail_nth_read+0x1b3/0x220 [ 267.066327][ T8632] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 267.066352][ T8632] ? rw_verify_area+0x2a6/0x4d0 [ 267.066375][ T8632] ? __lock_acquire+0xab9/0xd20 [ 267.066401][ T8632] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 267.066424][ T8632] vfs_read+0x1fd/0xa30 [ 267.066448][ T8632] ? fdget_pos+0x247/0x320 [ 267.066469][ T8632] ? __pfx___mutex_lock+0x10/0x10 [ 267.066497][ T8632] ? __pfx_vfs_read+0x10/0x10 [ 267.066524][ T8632] ? __fget_files+0x2a/0x420 [ 267.066545][ T8632] ? __fget_files+0x3a0/0x420 [ 267.066560][ T8632] ? __fget_files+0x2a/0x420 [ 267.066586][ T8632] ksys_read+0x145/0x250 [ 267.066613][ T8632] ? __pfx_ksys_read+0x10/0x10 [ 267.066641][ T8632] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.066670][ T8632] __do_fast_syscall_32+0xb6/0x2b0 [ 267.066698][ T8632] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.066728][ T8632] do_fast_syscall_32+0x34/0x80 [ 267.066755][ T8632] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.066777][ T8632] RIP: 0023:0xf7f76539 [ 267.066793][ T8632] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 267.066809][ T8632] RSP: 002b:00000000f5496590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 267.066828][ T8632] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5496620 [ 267.066844][ T8632] RDX: 000000000000000f RSI: 00000000f7404ff4 RDI: 0000000000000000 [ 267.066854][ T8632] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 267.066865][ T8632] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 267.066876][ T8632] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.066903][ T8632] [ 267.552058][ T8636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.777'. [ 267.836935][ T5924] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 267.934294][ T8645] syz.3.779: attempt to access beyond end of device [ 267.934294][ T8645] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 268.227213][ T5924] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 268.237150][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.289363][ T5924] usb 5-1: config 0 descriptor?? [ 268.731206][ T1211] usbhid 2-1:0.0: can't add hid device: -71 [ 268.739060][ T1211] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 268.769156][ T1211] usb 2-1: USB disconnect, device number 26 [ 268.784950][ T8653] syz_tun: entered allmulticast mode [ 269.176979][ T1211] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 269.362734][ T1211] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.405327][ T1211] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.454413][ T1211] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.484202][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.523565][ T1211] usb 2-1: Product: syz [ 269.543877][ T1211] usb 2-1: Manufacturer: syz [ 269.549239][ T5924] pegasus 5-1:0.0: probe with driver pegasus failed with error -32 [ 269.567258][ T1211] usb 2-1: SerialNumber: syz [ 269.763088][ T8659] tipc: Enabled bearer , priority 0 [ 269.770915][ T8659] syzkaller0: entered promiscuous mode [ 269.776417][ T8659] syzkaller0: entered allmulticast mode [ 269.812959][ T1211] usb 2-1: 0:2 : does not exist [ 269.824069][ T1211] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 269.865856][ T8652] syz_tun: left allmulticast mode [ 269.876574][ T8659] tipc: Resetting bearer [ 269.948294][ T8658] tipc: Resetting bearer [ 269.955677][ T1211] usb 2-1: USB disconnect, device number 27 [ 269.995837][ T8658] tipc: Disabling bearer [ 270.022750][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.048451][ T5955] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 270.217174][ T5955] usb 1-1: Using ep0 maxpacket: 8 [ 270.231537][ T5955] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 270.284450][ T5955] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 270.923768][ T5955] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 270.986353][ T5955] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.034349][ T5955] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 271.035780][ T8676] tipc: Failed to remove unknown binding: 66,1,1/0:2837113472/2837113474 [ 271.065800][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.328293][ T8676] tipc: Failed to remove unknown binding: 66,1,1/0:2837113472/2837113474 [ 271.357797][ T8676] tipc: Failed to remove unknown binding: 66,1,1/0:2837113472/2837113474 [ 271.453876][ T5955] usb 1-1: GET_CAPABILITIES returned 0 [ 271.463054][ T5955] usbtmc 1-1:16.0: can't read capabilities [ 271.578328][ T8681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.611465][ T8684] syz_tun: entered allmulticast mode [ 271.620697][ T8681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.662581][ T8684] netlink: 'syz.1.791': attribute type 4 has an invalid length. [ 271.688703][ T8682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.774137][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 271.784173][ T8682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.798091][ T8682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.808003][ T8686] dvmrp1: entered allmulticast mode [ 271.821447][ T8687] usbtmc 1-1:16.0: Unable to send data, error -71 [ 271.830914][ T8682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.866753][ T8683] syz_tun: left allmulticast mode [ 271.895839][ T8682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.957512][ T8682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.022243][ T8682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.031279][ T8682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.041375][ T8682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.127122][ T5946] usb 1-1: USB disconnect, device number 23 [ 272.138210][ T8682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.517902][ T8706] netlink: 'syz.3.794': attribute type 30 has an invalid length. [ 272.814110][ T5924] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 273.111248][ T5955] usb 5-1: USB disconnect, device number 15 [ 273.776617][ T8711] dvmrp1: left allmulticast mode [ 274.556980][ T5924] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 274.788264][ T5924] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.817202][ T5924] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.828588][ T5924] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 274.837847][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.845837][ T5924] usb 2-1: Product: syz [ 274.850078][ T5924] usb 2-1: Manufacturer: syz [ 274.854690][ T5924] usb 2-1: SerialNumber: syz [ 275.088355][ T5924] usb 2-1: 0:2 : does not exist [ 275.158868][ T5924] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 275.281568][ T5924] usb 2-1: USB disconnect, device number 29 [ 275.729255][ T8739] dlm: plock device version mismatch: kernel (1.2.0), user (2175015169.800446392.1344628884) [ 275.975427][ T8747] FAULT_INJECTION: forcing a failure. [ 275.975427][ T8747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.237237][ T8747] CPU: 1 UID: 0 PID: 8747 Comm: syz.2.805 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 276.237265][ T8747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.237276][ T8747] Call Trace: [ 276.237284][ T8747] [ 276.237291][ T8747] dump_stack_lvl+0x189/0x250 [ 276.237316][ T8747] ? __pfx____ratelimit+0x10/0x10 [ 276.237341][ T8747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.237362][ T8747] ? __pfx__printk+0x10/0x10 [ 276.237386][ T8747] ? __might_fault+0xb0/0x130 [ 276.237420][ T8747] should_fail_ex+0x414/0x560 [ 276.237447][ T8747] _copy_from_iter+0x1db/0x16f0 [ 276.237468][ T8747] ? rcu_is_watching+0x15/0xb0 [ 276.237487][ T8747] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 276.237513][ T8747] ? __pfx__copy_from_iter+0x10/0x10 [ 276.237532][ T8747] ? __build_skb_around+0x257/0x3e0 [ 276.237561][ T8747] ? netlink_sendmsg+0x642/0xb30 [ 276.237584][ T8747] ? skb_put+0x11b/0x210 [ 276.237603][ T8747] netlink_sendmsg+0x6b2/0xb30 [ 276.237636][ T8747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.237664][ T8747] ? __import_iovec+0x5d4/0x7f0 [ 276.237681][ T8747] ? aa_sock_msg_perm+0xf1/0x1d0 [ 276.237710][ T8747] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 276.237728][ T8747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.237754][ T8747] __sock_sendmsg+0x21c/0x270 [ 276.237779][ T8747] ____sys_sendmsg+0x505/0x830 [ 276.237801][ T8747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.237835][ T8747] ___sys_sendmsg+0x21f/0x2a0 [ 276.237854][ T8747] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.237904][ T8747] ? __fget_files+0x2a/0x420 [ 276.237918][ T8747] ? __fget_files+0x3a0/0x420 [ 276.237943][ T8747] __sys_sendmsg+0x164/0x220 [ 276.237962][ T8747] ? __pfx___sys_sendmsg+0x10/0x10 [ 276.237994][ T8747] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.238020][ T8747] __do_fast_syscall_32+0xb6/0x2b0 [ 276.238045][ T8747] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.238080][ T8747] do_fast_syscall_32+0x34/0x80 [ 276.238105][ T8747] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 276.238126][ T8747] RIP: 0023:0xf7f48539 [ 276.238141][ T8747] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 276.238156][ T8747] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 276.238175][ T8747] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 276.238187][ T8747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 276.238196][ T8747] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 276.238206][ T8747] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 276.238216][ T8747] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 276.238240][ T8747] [ 276.514467][ C1] vkms_vblank_simulate: vblank timer overrun [ 276.662624][ T8750] FAULT_INJECTION: forcing a failure. [ 276.662624][ T8750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.725537][ T8750] CPU: 1 UID: 0 PID: 8750 Comm: syz.2.807 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 276.725573][ T8750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.725585][ T8750] Call Trace: [ 276.725592][ T8750] [ 276.725601][ T8750] dump_stack_lvl+0x189/0x250 [ 276.725630][ T8750] ? __pfx____ratelimit+0x10/0x10 [ 276.725658][ T8750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.725683][ T8750] ? __pfx__printk+0x10/0x10 [ 276.725712][ T8750] ? __might_fault+0xb0/0x130 [ 276.725752][ T8750] should_fail_ex+0x414/0x560 [ 276.725821][ T8750] _copy_from_iter+0x1db/0x16f0 [ 276.725845][ T8750] ? rcu_is_watching+0x15/0xb0 [ 276.725865][ T8750] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 276.725892][ T8750] ? __pfx__copy_from_iter+0x10/0x10 [ 276.725913][ T8750] ? __build_skb_around+0x257/0x3e0 [ 276.725944][ T8750] ? netlink_sendmsg+0x642/0xb30 [ 276.725970][ T8750] ? skb_put+0x11b/0x210 [ 276.725989][ T8750] netlink_sendmsg+0x6b2/0xb30 [ 276.726025][ T8750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.726055][ T8750] ? __import_iovec+0x5d4/0x7f0 [ 276.726073][ T8750] ? aa_sock_msg_perm+0xf1/0x1d0 [ 276.726104][ T8750] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 276.726124][ T8750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.726152][ T8750] __sock_sendmsg+0x21c/0x270 [ 276.726178][ T8750] ____sys_sendmsg+0x505/0x830 [ 276.726204][ T8750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.726238][ T8750] ___sys_sendmsg+0x21f/0x2a0 [ 276.726260][ T8750] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.726312][ T8750] ? __fget_files+0x2a/0x420 [ 276.726328][ T8750] ? __fget_files+0x3a0/0x420 [ 276.726355][ T8750] __sys_sendmsg+0x164/0x220 [ 276.726375][ T8750] ? __pfx___sys_sendmsg+0x10/0x10 [ 276.726410][ T8750] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.726438][ T8750] __do_fast_syscall_32+0xb6/0x2b0 [ 276.726466][ T8750] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.726495][ T8750] do_fast_syscall_32+0x34/0x80 [ 276.726522][ T8750] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 276.726545][ T8750] RIP: 0023:0xf7f48539 [ 276.726561][ T8750] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 276.726577][ T8750] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 276.726597][ T8750] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 276.726610][ T8750] RDX: 0000000004008810 RSI: 0000000000000000 RDI: 0000000000000000 [ 276.726621][ T8750] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 276.726631][ T8750] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 276.726642][ T8750] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 276.726668][ T8750] [ 276.994677][ C1] vkms_vblank_simulate: vblank timer overrun [ 277.552950][ T8771] netlink: 'syz.2.810': attribute type 1 has an invalid length. [ 277.580600][ T8771] netlink: 36 bytes leftover after parsing attributes in process `syz.2.810'. [ 277.740931][ T8774] FAULT_INJECTION: forcing a failure. [ 277.740931][ T8774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.787074][ T8774] CPU: 0 UID: 0 PID: 8774 Comm: syz.1.812 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 277.787105][ T8774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 277.787118][ T8774] Call Trace: [ 277.787127][ T8774] [ 277.787135][ T8774] dump_stack_lvl+0x189/0x250 [ 277.787164][ T8774] ? __pfx____ratelimit+0x10/0x10 [ 277.787194][ T8774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.787218][ T8774] ? __pfx__printk+0x10/0x10 [ 277.787248][ T8774] ? __might_fault+0xb0/0x130 [ 277.787286][ T8774] should_fail_ex+0x414/0x560 [ 277.787318][ T8774] _copy_from_iter+0x3f5/0x16f0 [ 277.787344][ T8774] ? rcu_is_watching+0x15/0xb0 [ 277.787370][ T8774] ? __pfx__copy_from_iter+0x10/0x10 [ 277.787392][ T8774] ? __build_skb_around+0x257/0x3e0 [ 277.787431][ T8774] ? netlink_sendmsg+0x642/0xb30 [ 277.787459][ T8774] ? skb_put+0x11b/0x210 [ 277.787481][ T8774] netlink_sendmsg+0x6b2/0xb30 [ 277.787521][ T8774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.787553][ T8774] ? __import_iovec+0x40e/0x7f0 [ 277.787574][ T8774] ? aa_sock_msg_perm+0xf1/0x1d0 [ 277.787609][ T8774] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 277.787631][ T8774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.787662][ T8774] __sock_sendmsg+0x21c/0x270 [ 277.787692][ T8774] ____sys_sendmsg+0x505/0x830 [ 277.787718][ T8774] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.787755][ T8774] ___sys_sendmsg+0x21f/0x2a0 [ 277.787779][ T8774] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.787838][ T8774] ? __fget_files+0x2a/0x420 [ 277.787855][ T8774] ? __fget_files+0x3a0/0x420 [ 277.787884][ T8774] __sys_sendmsg+0x164/0x220 [ 277.787915][ T8774] ? __pfx___sys_sendmsg+0x10/0x10 [ 277.787953][ T8774] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.787984][ T8774] __do_fast_syscall_32+0xb6/0x2b0 [ 277.788015][ T8774] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.788047][ T8774] do_fast_syscall_32+0x34/0x80 [ 277.788077][ T8774] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 277.788103][ T8774] RIP: 0023:0xf70de539 [ 277.788121][ T8774] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 277.788138][ T8774] RSP: 002b:00000000f54ce55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 277.788160][ T8774] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 277.788174][ T8774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 277.788186][ T8774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 277.788197][ T8774] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 277.788209][ T8774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 277.788240][ T8774] [ 278.475873][ T8778] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.813'. [ 278.660902][ T8778] net_ratelimit: 2 callbacks suppressed [ 278.663201][ T8778] netlink: zone id is out of range [ 278.675187][ T8778] netlink: zone id is out of range [ 278.712463][ T8778] netlink: zone id is out of range [ 278.719221][ T8778] netlink: zone id is out of range [ 278.729136][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.814'. [ 278.845822][ T8786] syz_tun: entered allmulticast mode [ 279.117147][ T5955] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 279.303705][ T5955] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.315928][ T5955] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 279.336550][ T8797] loop6: detected capacity change from 0 to 7 [ 279.348241][ T5955] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 279.349844][ T8797] Dev loop6: unable to read RDB block 7 [ 279.365549][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.373112][ T8797] loop6: unable to read partition table [ 279.385942][ T8797] loop6: partition table beyond EOD, truncated [ 279.386562][ T5955] usb 4-1: Product: syz [ 279.461078][ T8797] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 279.481573][ T5955] usb 4-1: Manufacturer: syz [ 279.538082][ T5955] usb 4-1: SerialNumber: syz [ 279.868595][ T8781] syz_tun: left allmulticast mode [ 279.889112][ T5955] usb 4-1: 0:2 : does not exist [ 279.903690][ T5955] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 280.304344][ T5955] usb 4-1: USB disconnect, device number 21 [ 280.391601][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 281.507801][ T8826] tipc: Started in network mode [ 281.533149][ T8826] tipc: Node identity 8afdd4e6af94, cluster identity 4711 [ 281.667197][ T8826] tipc: Enabled bearer , priority 0 [ 281.699786][ T8831] syzkaller0: entered promiscuous mode [ 281.715513][ T8831] syzkaller0: entered allmulticast mode [ 282.003284][ T8834] loop9: detected capacity change from 0 to 7 [ 282.013234][ T8836] netlink: 'syz.0.827': attribute type 21 has an invalid length. [ 282.099924][ T8823] tipc: Resetting bearer [ 282.123886][ T8823] tipc: Disabling bearer [ 282.140132][ T5864] Dev loop9: unable to read RDB block 7 [ 282.145789][ T5864] loop9: unable to read partition table [ 282.163173][ T5864] loop9: partition table beyond EOD, truncated [ 282.183425][ T8834] Dev loop9: unable to read RDB block 7 [ 282.196941][ T8834] loop9: unable to read partition table [ 282.230986][ T8836] netlink: 'syz.0.827': attribute type 1 has an invalid length. [ 282.241788][ T8836] netlink: 144 bytes leftover after parsing attributes in process `syz.0.827'. [ 282.261122][ T8834] loop9: partition table beyond EOD, truncated [ 282.299422][ T8834] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿÿ ) failed (rc=-5) [ 283.057736][ T5955] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 283.166773][ T8850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.833'. [ 283.249442][ T5955] usb 2-1: Using ep0 maxpacket: 16 [ 283.277900][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.277925][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.277953][ T5955] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 283.277970][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.279962][ T5955] usb 2-1: config 0 descriptor?? [ 283.338441][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.834'. [ 283.378874][ T8853] FAULT_INJECTION: forcing a failure. [ 283.378874][ T8853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.378909][ T8853] CPU: 0 UID: 0 PID: 8853 Comm: syz.3.834 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 283.378933][ T8853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 283.378942][ T8853] Call Trace: [ 283.378948][ T8853] [ 283.378955][ T8853] dump_stack_lvl+0x189/0x250 [ 283.378977][ T8853] ? __pfx____ratelimit+0x10/0x10 [ 283.379008][ T8853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.379032][ T8853] ? __pfx__printk+0x10/0x10 [ 283.379060][ T8853] ? __might_fault+0xb0/0x130 [ 283.379095][ T8853] should_fail_ex+0x414/0x560 [ 283.379118][ T8853] _copy_from_iter+0x1db/0x16f0 [ 283.379136][ T8853] ? rcu_is_watching+0x15/0xb0 [ 283.379161][ T8853] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 283.379192][ T8853] ? __pfx__copy_from_iter+0x10/0x10 [ 283.379212][ T8853] ? __build_skb_around+0x257/0x3e0 [ 283.379257][ T8853] ? netlink_sendmsg+0x642/0xb30 [ 283.379275][ T8853] ? skb_put+0x11b/0x210 [ 283.379292][ T8853] netlink_sendmsg+0x6b2/0xb30 [ 283.379345][ T8853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.379371][ T8853] ? __import_iovec+0x5d4/0x7f0 [ 283.379387][ T8853] ? aa_sock_msg_perm+0xf1/0x1d0 [ 283.379411][ T8853] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 283.379429][ T8853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.379454][ T8853] __sock_sendmsg+0x21c/0x270 [ 283.379480][ T8853] ____sys_sendmsg+0x505/0x830 [ 283.379501][ T8853] ? __pfx_____sys_sendmsg+0x10/0x10 [ 283.379532][ T8853] ___sys_sendmsg+0x21f/0x2a0 [ 283.379546][ T8853] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.379580][ T8853] ? __fget_files+0x2a/0x420 [ 283.379594][ T8853] ? __fget_files+0x3a0/0x420 [ 283.379619][ T8853] __sys_sendmsg+0x164/0x220 [ 283.379638][ T8853] ? __pfx___sys_sendmsg+0x10/0x10 [ 283.379669][ T8853] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.379691][ T8853] __do_fast_syscall_32+0xb6/0x2b0 [ 283.379710][ T8853] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.379728][ T8853] do_fast_syscall_32+0x34/0x80 [ 283.379753][ T8853] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.379775][ T8853] RIP: 0023:0xf703e539 [ 283.379789][ T8853] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 283.379802][ T8853] RSP: 002b:00000000f542e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 283.379820][ T8853] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000580 [ 283.379831][ T8853] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 283.379838][ T8853] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 283.379844][ T8853] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 283.379851][ T8853] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 283.379869][ T8853] [ 283.849703][ T8860] syz.3.836: attempt to access beyond end of device [ 283.849703][ T8860] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 283.977137][ T24] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 284.132573][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.407382][ T5955] usbhid 2-1:0.0: can't add hid device: -71 [ 284.427146][ T5955] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 284.506185][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 284.537427][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 284.553848][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.596995][ T24] usb 5-1: Product: syz [ 284.608754][ T5955] usb 2-1: USB disconnect, device number 30 [ 284.627933][ T8870] netlink: 161716 bytes leftover after parsing attributes in process `syz.2.838'. [ 284.633931][ T24] usb 5-1: Manufacturer: syz [ 284.689749][ T24] usb 5-1: SerialNumber: syz [ 284.928623][ T24] usb 5-1: 0:2 : does not exist [ 284.955343][ T24] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 285.014432][ T24] usb 5-1: USB disconnect, device number 16 [ 285.166726][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.834783][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 286.834798][ T30] audit: type=1326 audit(1755292598.011:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.1.847" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x0 [ 287.208617][ T8910] netlink: 16 bytes leftover after parsing attributes in process `syz.4.849'. [ 287.667782][ T8912] tipc: Enabled bearer , priority 0 [ 287.685197][ T8912] syzkaller0: entered promiscuous mode [ 287.704203][ T8912] syzkaller0: entered allmulticast mode [ 287.834713][ T8912] tipc: Resetting bearer [ 287.853048][ T8911] tipc: Resetting bearer [ 287.939845][ T8911] tipc: Disabling bearer [ 288.277016][ T5924] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 288.533257][ T5924] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.631140][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'. [ 288.646791][ T8927] netlink: 3 bytes leftover after parsing attributes in process `syz.2.855'. [ 288.757626][ T5924] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 288.787486][ T8927] batadv1: entered promiscuous mode [ 288.801906][ T5924] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 288.814513][ T8927] batadv1: entered allmulticast mode [ 288.930860][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.483520][ T5924] usb 2-1: Product: syz [ 289.487832][ T5924] usb 2-1: Manufacturer: syz [ 289.492452][ T5924] usb 2-1: SerialNumber: syz [ 289.722537][ T5924] usb 2-1: 0:2 : does not exist [ 289.742685][ T5924] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 289.924733][ T5924] usb 2-1: USB disconnect, device number 31 [ 290.062493][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.532991][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'. [ 290.618403][ T8942] netlink: 3 bytes leftover after parsing attributes in process `syz.2.858'. [ 290.713732][ T8942] batadv2: entered promiscuous mode [ 290.743578][ T8942] batadv2: entered allmulticast mode [ 290.837023][ T30] audit: type=1326 audit(1755292602.011:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.1.861" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x0 [ 290.987099][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 291.213320][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 291.230327][ T24] usb 4-1: config 6 has an invalid interface number: 158 but max is 0 [ 291.238987][ T24] usb 4-1: config 6 has no interface number 0 [ 291.248631][ T24] usb 4-1: config 6 interface 158 has no altsetting 0 [ 291.267521][ T24] usb 4-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 291.279258][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.302113][ T24] usb 4-1: Product: syz [ 291.368682][ T24] usb 4-1: Manufacturer: syz [ 291.378165][ T24] usb 4-1: SerialNumber: syz [ 291.572237][ T8961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.589604][ T8961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.062067][ T24] rtsx_usb 4-1:6.158: probe with driver rtsx_usb failed with error -110 [ 293.101704][ T5946] usb 4-1: USB disconnect, device number 22 [ 293.197216][ T44] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 293.336172][ T8983] FAULT_INJECTION: forcing a failure. [ 293.336172][ T8983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.336193][ T8983] CPU: 0 UID: 0 PID: 8983 Comm: syz.1.872 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 293.336218][ T8983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 293.336226][ T8983] Call Trace: [ 293.336231][ T8983] [ 293.336236][ T8983] dump_stack_lvl+0x189/0x250 [ 293.336255][ T8983] ? __pfx____ratelimit+0x10/0x10 [ 293.336273][ T8983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.336289][ T8983] ? __pfx__printk+0x10/0x10 [ 293.336306][ T8983] ? __might_fault+0xb0/0x130 [ 293.336331][ T8983] should_fail_ex+0x414/0x560 [ 293.336351][ T8983] _copy_from_iter+0x1db/0x16f0 [ 293.336366][ T8983] ? rcu_is_watching+0x15/0xb0 [ 293.336380][ T8983] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 293.336398][ T8983] ? __pfx__copy_from_iter+0x10/0x10 [ 293.336411][ T8983] ? __build_skb_around+0x257/0x3e0 [ 293.336433][ T8983] ? netlink_sendmsg+0x642/0xb30 [ 293.336450][ T8983] ? skb_put+0x11b/0x210 [ 293.336464][ T8983] netlink_sendmsg+0x6b2/0xb30 [ 293.336488][ T8983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.336507][ T8983] ? __import_iovec+0x5d4/0x7f0 [ 293.336520][ T8983] ? aa_sock_msg_perm+0xf1/0x1d0 [ 293.336544][ T8983] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 293.336557][ T8983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.336576][ T8983] __sock_sendmsg+0x21c/0x270 [ 293.336593][ T8983] ____sys_sendmsg+0x505/0x830 [ 293.336609][ T8983] ? __pfx_____sys_sendmsg+0x10/0x10 [ 293.336631][ T8983] ___sys_sendmsg+0x21f/0x2a0 [ 293.336644][ T8983] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.336678][ T8983] ? __fget_files+0x2a/0x420 [ 293.336688][ T8983] ? __fget_files+0x3a0/0x420 [ 293.336705][ T8983] __sys_sendmsg+0x164/0x220 [ 293.336718][ T8983] ? __pfx___sys_sendmsg+0x10/0x10 [ 293.336740][ T8983] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.336759][ T8983] __do_fast_syscall_32+0xb6/0x2b0 [ 293.336777][ T8983] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.336796][ T8983] do_fast_syscall_32+0x34/0x80 [ 293.336814][ T8983] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 293.336831][ T8983] RIP: 0023:0xf70de539 [ 293.336846][ T8983] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 293.336861][ T8983] RSP: 002b:00000000f54ce55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 293.336878][ T8983] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800002c0 [ 293.336889][ T8983] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 293.336900][ T8983] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 293.336909][ T8983] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 293.336919][ T8983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 293.336942][ T8983] [ 293.386410][ T44] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.386440][ T44] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.391019][ T44] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 293.391047][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.391069][ T44] usb 1-1: Product: syz [ 293.391085][ T44] usb 1-1: Manufacturer: syz [ 293.391100][ T44] usb 1-1: SerialNumber: syz [ 293.570172][ T8990] netlink: 'syz.1.874': attribute type 1 has an invalid length. [ 293.570855][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.874'. [ 293.609677][ T44] usb 1-1: 0:2 : does not exist [ 293.624508][ T44] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 293.735020][ T44] usb 1-1: USB disconnect, device number 24 [ 293.862021][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.979986][ T30] audit: type=1326 audit(1755292605.161:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8995 comm="syz.3.877" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x0 [ 294.304129][ T8985] tty tty4: ldisc open failed (-12), clearing slot 3 [ 294.589451][ T30] audit: type=1800 audit(1755292605.761:168): pid=9011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.881" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 294.630850][ T9016] FAULT_INJECTION: forcing a failure. [ 294.630850][ T9016] name failslab, interval 1, probability 0, space 0, times 0 [ 294.643715][ T9016] CPU: 1 UID: 0 PID: 9016 Comm: syz.2.882 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 294.643740][ T9016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.643752][ T9016] Call Trace: [ 294.643759][ T9016] [ 294.643767][ T9016] dump_stack_lvl+0x189/0x250 [ 294.643794][ T9016] ? __pfx____ratelimit+0x10/0x10 [ 294.643820][ T9016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.643843][ T9016] ? __pfx__printk+0x10/0x10 [ 294.643875][ T9016] ? __pfx___might_resched+0x10/0x10 [ 294.643893][ T9016] ? fs_reclaim_acquire+0x7d/0x100 [ 294.643928][ T9016] should_fail_ex+0x414/0x560 [ 294.643958][ T9016] should_failslab+0xa8/0x100 [ 294.643988][ T9016] __kmalloc_noprof+0xcb/0x4f0 [ 294.644012][ T9016] ? kfree+0x4d/0x440 [ 294.644032][ T9016] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 294.644064][ T9016] tomoyo_realpath_from_path+0xe3/0x5d0 [ 294.644086][ T9016] ? tomoyo_domain+0xd9/0x130 [ 294.644111][ T9016] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 294.644137][ T9016] tomoyo_path_number_perm+0x1e8/0x5a0 [ 294.644166][ T9016] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 294.644210][ T9016] ? __lock_acquire+0xab9/0xd20 [ 294.644258][ T9016] ? __fget_files+0x2a/0x420 [ 294.644280][ T9016] ? __fget_files+0x3a0/0x420 [ 294.644295][ T9016] ? __fget_files+0x2a/0x420 [ 294.644316][ T9016] security_file_ioctl_compat+0xcb/0x2d0 [ 294.644344][ T9016] __ia32_compat_sys_ioctl+0x128/0x840 [ 294.644372][ T9016] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 294.644398][ T9016] ? __fget_files+0x3a0/0x420 [ 294.644422][ T9016] ? fput+0xa0/0xd0 [ 294.644441][ T9016] ? ksys_write+0x22a/0x250 [ 294.644476][ T9016] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.644506][ T9016] __do_fast_syscall_32+0xb6/0x2b0 [ 294.644534][ T9016] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.644564][ T9016] do_fast_syscall_32+0x34/0x80 [ 294.644593][ T9016] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 294.644635][ T9016] RIP: 0023:0xf7f48539 [ 294.644653][ T9016] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 294.644672][ T9016] RSP: 002b:00000000f542455c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 294.644694][ T9016] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000c0045103 [ 294.644708][ T9016] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 294.644721][ T9016] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 294.644733][ T9016] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 294.644745][ T9016] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 294.644776][ T9016] [ 294.644793][ T9016] ERROR: Out of memory at tomoyo_realpath_from_path. [ 294.855646][ C1] vkms_vblank_simulate: vblank timer overrun [ 294.921084][ T5924] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 295.167361][ T5924] usb 2-1: config 0 has no interfaces? [ 295.172887][ T5924] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 295.217016][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.317453][ T5924] usb 2-1: config 0 descriptor?? [ 296.034663][ T9030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.045460][ T9030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.257117][ T1211] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 296.460674][ T1211] usb 1-1: device descriptor read/64, error -71 [ 296.717024][ T1211] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 296.857995][ T9040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.891457][ T9039] syz_tun: entered allmulticast mode [ 296.896970][ T1211] usb 1-1: device descriptor read/64, error -71 [ 296.912009][ T9039] syz_tun: left allmulticast mode [ 296.925937][ T9040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.953630][ T9039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.003137][ T9039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.007571][ T1211] usb usb1-port1: attempt power cycle [ 297.375337][ T5946] usb 2-1: USB disconnect, device number 32 [ 297.398149][ T9046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.891'. [ 297.426939][ T1211] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 297.520083][ T1211] usb 1-1: device descriptor read/8, error -71 [ 297.654445][ T9052] tipc: Enabled bearer , priority 0 [ 297.665211][ T9052] syzkaller0: entered promiscuous mode [ 297.673271][ T9052] syzkaller0: entered allmulticast mode [ 297.696319][ T9052] tipc: Resetting bearer [ 297.744483][ T9051] tipc: Resetting bearer [ 297.778515][ T1211] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 297.819564][ T30] audit: type=1800 audit(1755292609.001:169): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.895" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 297.858025][ T1211] usb 1-1: device descriptor read/8, error -71 [ 297.867789][ T9051] tipc: Disabling bearer [ 298.179242][ T1211] usb usb1-port1: unable to enumerate USB device [ 298.424793][ T9061] bridge0: entered allmulticast mode [ 298.452416][ T9064] FAULT_INJECTION: forcing a failure. [ 298.452416][ T9064] name failslab, interval 1, probability 0, space 0, times 0 [ 298.494883][ T9064] CPU: 0 UID: 0 PID: 9064 Comm: syz.1.898 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 298.494914][ T9064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 298.494927][ T9064] Call Trace: [ 298.494935][ T9064] [ 298.494944][ T9064] dump_stack_lvl+0x189/0x250 [ 298.494975][ T9064] ? __pfx____ratelimit+0x10/0x10 [ 298.495004][ T9064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.495029][ T9064] ? __pfx__printk+0x10/0x10 [ 298.495063][ T9064] ? __pfx___might_resched+0x10/0x10 [ 298.495088][ T9064] should_fail_ex+0x414/0x560 [ 298.495120][ T9064] should_failslab+0xa8/0x100 [ 298.495153][ T9064] __kmalloc_noprof+0xcb/0x4f0 [ 298.495180][ T9064] ? io_cache_alloc_new+0x40/0x100 [ 298.495207][ T9064] io_cache_alloc_new+0x40/0x100 [ 298.495228][ T9064] io_msg_alloc_async+0x1b2/0x2d0 [ 298.495259][ T9064] io_recvmsg_prep+0x7f5/0x10d0 [ 298.495298][ T9064] ? __pfx_io_recvmsg_prep+0x10/0x10 [ 298.495323][ T9064] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 298.495342][ T9064] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 298.495375][ T9064] ? io_task_refs_refill+0xbb/0x180 [ 298.495395][ T9064] io_submit_sqes+0x8f6/0x1d10 [ 298.495442][ T9064] __se_sys_io_uring_enter+0x2df/0x2b20 [ 298.495480][ T9064] ? ksys_write+0x1cb/0x250 [ 298.495506][ T9064] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 298.495526][ T9064] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 298.495550][ T9064] ? __pfx_vfs_write+0x10/0x10 [ 298.495574][ T9064] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 298.495601][ T9064] ? __fget_files+0x3a0/0x420 [ 298.495621][ T9064] ? fput+0xa0/0xd0 [ 298.495639][ T9064] ? ksys_write+0x22a/0x250 [ 298.495668][ T9064] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 298.495693][ T9064] __do_fast_syscall_32+0xb6/0x2b0 [ 298.495726][ T9064] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.495752][ T9064] do_fast_syscall_32+0x34/0x80 [ 298.495777][ T9064] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.495797][ T9064] RIP: 0023:0xf70de539 [ 298.495812][ T9064] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 298.495838][ T9064] RSP: 002b:00000000f54ce55c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 298.495860][ T9064] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000003516 [ 298.495871][ T9064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.495880][ T9064] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.495889][ T9064] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 298.495898][ T9064] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.495921][ T9064] [ 299.207795][ T9077] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.902'. [ 299.234247][ T9077] netlink: zone id is out of range [ 299.242424][ T9080] netlink: 'syz.2.903': attribute type 1 has an invalid length. [ 299.261264][ T9077] netlink: zone id is out of range [ 299.266417][ T9077] netlink: zone id is out of range [ 299.284182][ T9077] netlink: zone id is out of range [ 299.295511][ T9080] 8021q: adding VLAN 0 to HW filter on device bond3 [ 299.309406][ T9081] netlink: 161716 bytes leftover after parsing attributes in process `syz.4.904'. [ 299.386548][ T9081] netlink: zone id is out of range [ 299.394906][ T9081] netlink: zone id is out of range [ 299.400447][ T9081] netlink: zone id is out of range [ 299.406951][ T9081] netlink: zone id is out of range [ 299.447291][ T9085] netlink: 'syz.3.905': attribute type 1 has an invalid length. [ 299.486621][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.905'. [ 299.564728][ T9087] syz_tun: entered allmulticast mode [ 299.572008][ T9087] syz_tun: left allmulticast mode [ 299.603448][ T9089] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 299.610276][ T9089] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 299.623488][ T9089] vhci_hcd vhci_hcd.0: Device attached [ 299.633647][ T9092] vhci_hcd: connection closed [ 299.635425][ T37] vhci_hcd: stop threads [ 299.645211][ T37] vhci_hcd: release socket [ 299.650434][ T37] vhci_hcd: disconnect device [ 299.669719][ T30] audit: type=1800 audit(1755292610.851:170): pid=9095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.909" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 299.817173][ T5946] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 299.970871][ T5946] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.000071][ T5946] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 300.012934][ T5946] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 300.024021][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.098749][ T5946] usb 2-1: Product: syz [ 300.103073][ T5946] usb 2-1: Manufacturer: syz [ 300.371734][ T5946] usb 2-1: SerialNumber: syz [ 300.941644][ T5946] usb 2-1: 0:2 : does not exist [ 300.953646][ T5946] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 300.967518][ T9109] FAULT_INJECTION: forcing a failure. [ 300.967518][ T9109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.018490][ T5946] usb 2-1: USB disconnect, device number 33 [ 301.027058][ T9109] CPU: 1 UID: 0 PID: 9109 Comm: syz.4.913 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 301.027083][ T9109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 301.027093][ T9109] Call Trace: [ 301.027101][ T9109] [ 301.027108][ T9109] dump_stack_lvl+0x189/0x250 [ 301.027133][ T9109] ? __pfx____ratelimit+0x10/0x10 [ 301.027156][ T9109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.027176][ T9109] ? __pfx__printk+0x10/0x10 [ 301.027211][ T9109] should_fail_ex+0x414/0x560 [ 301.027239][ T9109] _copy_to_user+0x31/0xb0 [ 301.027260][ T9109] simple_read_from_buffer+0xe1/0x170 [ 301.027290][ T9109] proc_fail_nth_read+0x1b3/0x220 [ 301.027313][ T9109] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 301.027336][ T9109] ? rw_verify_area+0x2a6/0x4d0 [ 301.027357][ T9109] ? __lock_acquire+0xab9/0xd20 [ 301.027380][ T9109] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 301.027402][ T9109] vfs_read+0x1fd/0xa30 [ 301.027423][ T9109] ? fdget_pos+0x247/0x320 [ 301.027442][ T9109] ? __pfx___mutex_lock+0x10/0x10 [ 301.027474][ T9109] ? __pfx_vfs_read+0x10/0x10 [ 301.027498][ T9109] ? __fget_files+0x2a/0x420 [ 301.027517][ T9109] ? __fget_files+0x3a0/0x420 [ 301.027531][ T9109] ? __fget_files+0x2a/0x420 [ 301.027555][ T9109] ksys_read+0x145/0x250 [ 301.027580][ T9109] ? __pfx_ksys_read+0x10/0x10 [ 301.027606][ T9109] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.027632][ T9109] __do_fast_syscall_32+0xb6/0x2b0 [ 301.027659][ T9109] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.027686][ T9109] do_fast_syscall_32+0x34/0x80 [ 301.027711][ T9109] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 301.027732][ T9109] RIP: 0023:0xf7f76539 [ 301.027747][ T9109] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 301.027763][ T9109] RSP: 002b:00000000f5496590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 301.027781][ T9109] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5496620 [ 301.027792][ T9109] RDX: 000000000000000f RSI: 00000000f7404ff4 RDI: 0000000000000000 [ 301.027803][ T9109] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 301.027813][ T9109] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 301.027823][ T9109] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 301.027849][ T9109] [ 301.267714][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.300578][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 301.573857][ T9118] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.917'. [ 301.701064][ T9118] netlink: zone id is out of range [ 301.706208][ T9118] netlink: zone id is out of range [ 302.105486][ T9124] FAULT_INJECTION: forcing a failure. [ 302.105486][ T9124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.151163][ T9124] CPU: 0 UID: 0 PID: 9124 Comm: syz.2.919 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 302.151184][ T9124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 302.151193][ T9124] Call Trace: [ 302.151199][ T9124] [ 302.151206][ T9124] dump_stack_lvl+0x189/0x250 [ 302.151226][ T9124] ? __pfx____ratelimit+0x10/0x10 [ 302.151264][ T9124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.151281][ T9124] ? __pfx__printk+0x10/0x10 [ 302.151311][ T9124] should_fail_ex+0x414/0x560 [ 302.151340][ T9124] strncpy_from_user+0x36/0x290 [ 302.151361][ T9124] getname_flags+0xf3/0x540 [ 302.151379][ T9124] __se_sys_move_mount+0x25b/0x5d0 [ 302.151393][ T9124] ? fput+0xa0/0xd0 [ 302.151410][ T9124] ? __pfx___se_sys_move_mount+0x10/0x10 [ 302.151429][ T9124] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.151460][ T9124] ? __ia32_sys_move_mount+0x20/0xc0 [ 302.151475][ T9124] __do_fast_syscall_32+0xb6/0x2b0 [ 302.151496][ T9124] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.151518][ T9124] do_fast_syscall_32+0x34/0x80 [ 302.151539][ T9124] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 302.151556][ T9124] RIP: 0023:0xf7f48539 [ 302.151568][ T9124] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 302.151581][ T9124] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 00000000000001ad [ 302.151596][ T9124] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 302.151606][ T9124] RDX: 00000000ffffff9c RSI: 0000000080000300 RDI: 0000000000000100 [ 302.151615][ T9124] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 302.151623][ T9124] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 302.151631][ T9124] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 302.151663][ T9124] [ 302.552362][ T9132] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 302.885596][ T30] audit: type=1326 audit(1755292614.061:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 302.907555][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.915272][ T30] audit: type=1326 audit(1755292614.061:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 302.975043][ T30] audit: type=1326 audit(1755292614.151:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e558 code=0x7ffc0000 [ 303.031882][ T30] audit: type=1326 audit(1755292614.151:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=141 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 303.058242][ T30] audit: type=1326 audit(1755292614.151:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e558 code=0x7ffc0000 [ 303.134613][ T30] audit: type=1326 audit(1755292614.151:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 303.156677][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.178341][ T30] audit: type=1326 audit(1755292614.151:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e558 code=0x7ffc0000 [ 303.202690][ T30] audit: type=1326 audit(1755292614.151:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 303.224506][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.244246][ T30] audit: type=1326 audit(1755292614.151:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e558 code=0x7ffc0000 [ 304.024293][ T9161] FAULT_INJECTION: forcing a failure. [ 304.024293][ T9161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.098076][ T9161] CPU: 0 UID: 0 PID: 9161 Comm: syz.0.932 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 304.098107][ T9161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 304.098120][ T9161] Call Trace: [ 304.098129][ T9161] [ 304.098137][ T9161] dump_stack_lvl+0x189/0x250 [ 304.098166][ T9161] ? __pfx____ratelimit+0x10/0x10 [ 304.098195][ T9161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.098219][ T9161] ? __pfx__printk+0x10/0x10 [ 304.098247][ T9161] ? __might_fault+0xb0/0x130 [ 304.098287][ T9161] should_fail_ex+0x414/0x560 [ 304.098319][ T9161] _copy_from_iter+0x1db/0x16f0 [ 304.098343][ T9161] ? sock_alloc_send_pskb+0x875/0x990 [ 304.098380][ T9161] ? __pfx__copy_from_iter+0x10/0x10 [ 304.098409][ T9161] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 304.098434][ T9161] skb_copy_datagram_from_iter+0xf5/0x720 [ 304.098459][ T9161] ? __asan_memcpy+0x40/0x70 [ 304.098483][ T9161] ? eth_header+0x11b/0x200 [ 304.098505][ T9161] packet_sendmsg+0x3797/0x5080 [ 304.098539][ T9161] ? audit_net_cb+0x611/0x970 [ 304.098586][ T9161] ? __pfx___might_resched+0x10/0x10 [ 304.098604][ T9161] ? __lock_acquire+0xab9/0xd20 [ 304.098648][ T9161] ? __pfx_packet_sendmsg+0x10/0x10 [ 304.098668][ T9161] ? aa_sk_perm+0x81e/0x950 [ 304.098703][ T9161] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 304.098729][ T9161] ? aa_sock_msg_perm+0xf1/0x1d0 [ 304.098761][ T9161] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 304.098782][ T9161] ? __pfx_packet_sendmsg+0x10/0x10 [ 304.098805][ T9161] __sock_sendmsg+0x21c/0x270 [ 304.098834][ T9161] __sys_sendto+0x3bd/0x520 [ 304.098866][ T9161] ? __pfx___sys_sendto+0x10/0x10 [ 304.098892][ T9161] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 304.098935][ T9161] ? __fget_files+0x3a0/0x420 [ 304.098964][ T9161] ? ksys_write+0x22a/0x250 [ 304.099000][ T9161] __ia32_sys_sendto+0xdd/0x100 [ 304.099033][ T9161] __do_fast_syscall_32+0xb6/0x2b0 [ 304.099062][ T9161] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.099093][ T9161] do_fast_syscall_32+0x34/0x80 [ 304.099122][ T9161] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 304.099146][ T9161] RIP: 0023:0xf7f91539 [ 304.099163][ T9161] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 304.099179][ T9161] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 304.099200][ T9161] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 304.099214][ T9161] RDX: 0000000000000004 RSI: 00000000040040c5 RDI: 0000000080000080 [ 304.099226][ T9161] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 304.099237][ T9161] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 304.099249][ T9161] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 304.099277][ T9161] [ 304.128604][ T9164] syz_tun: entered allmulticast mode [ 304.335621][ T9167] net_ratelimit: 2 callbacks suppressed [ 304.335643][ T9167] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 304.339580][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.613073][ T9164] syz_tun: left allmulticast mode [ 304.803701][ T9182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.837535][ T9182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.846947][ T5946] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 304.965062][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.941'. [ 304.985511][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 304.985529][ T30] audit: type=1326 audit(1755292616.161:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9186 comm="syz.3.940" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x0 [ 305.031987][ T5946] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.043788][ T5946] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 305.064354][ T5946] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 305.073979][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.084290][ T5946] usb 5-1: Product: syz [ 305.088851][ T5946] usb 5-1: Manufacturer: syz [ 305.096171][ T5946] usb 5-1: SerialNumber: syz [ 305.331757][ T5946] usb 5-1: 0:2 : does not exist [ 305.359866][ T5946] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 305.393089][ T5946] usb 5-1: USB disconnect, device number 17 [ 305.444705][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.908053][ T1211] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 307.089057][ T1211] usb 4-1: config 0 has an invalid interface number: 182 but max is 1 [ 307.107079][ T1211] usb 4-1: config 0 has an invalid interface number: 9 but max is 1 [ 307.117692][ T1211] usb 4-1: config 0 has no interface number 0 [ 307.123950][ T1211] usb 4-1: config 0 has no interface number 1 [ 307.130705][ T1211] usb 4-1: too many endpoints for config 0 interface 9 altsetting 255: 255, using maximum allowed: 30 [ 307.142578][ T1211] usb 4-1: config 0 interface 9 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 307.186998][ T1211] usb 4-1: config 0 interface 9 has no altsetting 0 [ 307.194603][ T1211] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 307.207016][ T1211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.233767][ T1211] usb 4-1: config 0 descriptor?? [ 307.243417][ T1211] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 307.267779][ T1211] snd-usb-audio 4-1:0.182: probe with driver snd-usb-audio failed with error -2 [ 307.280876][ T1211] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 307.394522][ T1211] snd-usb-audio 4-1:0.9: probe with driver snd-usb-audio failed with error -2 [ 307.442163][ T6062] udevd[6062]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.9/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.467349][ T9216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.519311][ T9216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.538129][ T9216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.593815][ T9216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.691647][ T9216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.709280][ T9216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.733676][ T9216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.744899][ T9216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.753916][ T9216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.773589][ T9216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.910266][ T1211] usb 4-1: USB disconnect, device number 23 [ 308.696610][ T9247] netlink: 'syz.3.956': attribute type 1 has an invalid length. [ 308.762490][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.956'. [ 308.803609][ T30] audit: type=1326 audit(1755292619.981:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9249 comm="syz.0.957" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x0 [ 309.744866][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.960'. [ 309.827104][ T5924] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 310.008933][ T5924] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 310.148684][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.209792][ T5924] usb 4-1: config 0 descriptor?? [ 310.261894][ T5924] gspca_main: spca508-2.14.0 probing 8086:0110 [ 310.395606][ T9283] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.966'. [ 310.426187][ T5924] gspca_spca508: reg_read err -32 [ 310.433316][ T5924] gspca_spca508: reg_read err -32 [ 311.253713][ T5924] gspca_spca508: reg_read err -110 [ 311.269572][ T5924] gspca_spca508: reg_read err -32 [ 311.277294][ T5924] gspca_spca508: reg_read err -32 [ 311.308640][ T5924] gspca_spca508: reg write: error -32 [ 311.314088][ T5924] spca508 4-1:0.0: probe with driver spca508 failed with error -32 [ 312.416084][ T30] audit: type=1326 audit(1755292623.591:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f91558 code=0x7ffc0000 [ 312.535791][ T30] audit: type=1326 audit(1755292623.621:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 312.631044][ T30] audit: type=1326 audit(1755292623.621:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f91558 code=0x7ffc0000 [ 312.786969][ T30] audit: type=1326 audit(1755292623.621:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f91558 code=0x7ffc0000 [ 312.832078][ T30] audit: type=1326 audit(1755292623.621:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 312.857898][ T30] audit: type=1326 audit(1755292623.651:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f91558 code=0x7ffc0000 [ 312.887250][ T30] audit: type=1326 audit(1755292623.651:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 312.918792][ T30] audit: type=1326 audit(1755292623.651:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 312.946759][ T30] audit: type=1326 audit(1755292623.651:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f91558 code=0x7ffc0000 [ 312.973440][ T30] audit: type=1326 audit(1755292623.651:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f91558 code=0x7ffc0000 [ 314.095758][ T9327] FAULT_INJECTION: forcing a failure. [ 314.095758][ T9327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.121808][ T44] usb 4-1: USB disconnect, device number 24 [ 314.182440][ T9327] CPU: 1 UID: 0 PID: 9327 Comm: syz.4.977 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 314.182468][ T9327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 314.182480][ T9327] Call Trace: [ 314.182488][ T9327] [ 314.182496][ T9327] dump_stack_lvl+0x189/0x250 [ 314.182523][ T9327] ? __pfx____ratelimit+0x10/0x10 [ 314.182549][ T9327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.182572][ T9327] ? __pfx__printk+0x10/0x10 [ 314.182611][ T9327] should_fail_ex+0x414/0x560 [ 314.182641][ T9327] _copy_from_user+0x2d/0xb0 [ 314.182663][ T9327] snd_ctl_elem_add_compat+0x70/0x430 [ 314.182689][ T9327] snd_ctl_ioctl_compat+0x59e/0xe00 [ 314.182715][ T9327] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 314.182746][ T9327] ? __fget_files+0x2a/0x420 [ 314.182766][ T9327] ? __fget_files+0x3a0/0x420 [ 314.182780][ T9327] ? __fget_files+0x2a/0x420 [ 314.182798][ T9327] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 314.182824][ T9327] __ia32_compat_sys_ioctl+0x543/0x840 [ 314.182849][ T9327] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 314.182873][ T9327] ? __fget_files+0x3a0/0x420 [ 314.182893][ T9327] ? fput+0xa0/0xd0 [ 314.182912][ T9327] ? ksys_write+0x22a/0x250 [ 314.182943][ T9327] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.182971][ T9327] __do_fast_syscall_32+0xb6/0x2b0 [ 314.182997][ T9327] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.183023][ T9327] do_fast_syscall_32+0x34/0x80 [ 314.183049][ T9327] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 314.183077][ T9327] RIP: 0023:0xf7f76539 [ 314.183091][ T9327] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 314.183123][ T9327] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 314.183143][ T9327] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c1105518 [ 314.183156][ T9327] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.183227][ T9327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 314.183239][ T9327] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 314.183253][ T9327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.183281][ T9327] [ 314.746287][ T9335] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.979'. [ 315.185218][ T9346] FAULT_INJECTION: forcing a failure. [ 315.185218][ T9346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.225760][ T9346] CPU: 0 UID: 0 PID: 9346 Comm: syz.0.985 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 315.225790][ T9346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 315.225803][ T9346] Call Trace: [ 315.225822][ T9346] [ 315.225830][ T9346] dump_stack_lvl+0x189/0x250 [ 315.225858][ T9346] ? __pfx____ratelimit+0x10/0x10 [ 315.225895][ T9346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.225917][ T9346] ? __pfx__printk+0x10/0x10 [ 315.225942][ T9346] ? __might_fault+0xb0/0x130 [ 315.225977][ T9346] should_fail_ex+0x414/0x560 [ 315.226006][ T9346] _copy_from_iter+0x1db/0x16f0 [ 315.226028][ T9346] ? rcu_is_watching+0x15/0xb0 [ 315.226048][ T9346] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 315.226073][ T9346] ? __pfx__copy_from_iter+0x10/0x10 [ 315.226093][ T9346] ? __build_skb_around+0x257/0x3e0 [ 315.226132][ T9346] ? netlink_sendmsg+0x642/0xb30 [ 315.226156][ T9346] ? skb_put+0x11b/0x210 [ 315.226175][ T9346] netlink_sendmsg+0x6b2/0xb30 [ 315.226209][ T9346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.226236][ T9346] ? __import_iovec+0x5d4/0x7f0 [ 315.226253][ T9346] ? aa_sock_msg_perm+0xf1/0x1d0 [ 315.226282][ T9346] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 315.226302][ T9346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.226329][ T9346] __sock_sendmsg+0x21c/0x270 [ 315.226356][ T9346] ____sys_sendmsg+0x505/0x830 [ 315.226379][ T9346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.226412][ T9346] ___sys_sendmsg+0x21f/0x2a0 [ 315.226433][ T9346] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.226486][ T9346] ? __fget_files+0x2a/0x420 [ 315.226501][ T9346] ? __fget_files+0x3a0/0x420 [ 315.226528][ T9346] __sys_sendmsg+0x164/0x220 [ 315.226547][ T9346] ? __pfx___sys_sendmsg+0x10/0x10 [ 315.226586][ T9346] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.226614][ T9346] __do_fast_syscall_32+0xb6/0x2b0 [ 315.226660][ T9346] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.226691][ T9346] do_fast_syscall_32+0x34/0x80 [ 315.226720][ T9346] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 315.226743][ T9346] RIP: 0023:0xf7f91539 [ 315.226759][ T9346] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 315.226774][ T9346] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 315.226794][ T9346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 315.226807][ T9346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 315.226818][ T9346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 315.226829][ T9346] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 315.226840][ T9346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 315.226867][ T9346] [ 315.692690][ T9352] FAULT_INJECTION: forcing a failure. [ 315.692690][ T9352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.706925][ T5924] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 315.722148][ T9352] CPU: 0 UID: 0 PID: 9352 Comm: syz.3.987 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 315.722169][ T9352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 315.722178][ T9352] Call Trace: [ 315.722185][ T9352] [ 315.722191][ T9352] dump_stack_lvl+0x189/0x250 [ 315.722213][ T9352] ? __pfx____ratelimit+0x10/0x10 [ 315.722233][ T9352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.722250][ T9352] ? __pfx__printk+0x10/0x10 [ 315.722280][ T9352] should_fail_ex+0x414/0x560 [ 315.722303][ T9352] _copy_to_user+0x31/0xb0 [ 315.722322][ T9352] simple_read_from_buffer+0xe1/0x170 [ 315.722347][ T9352] proc_fail_nth_read+0x1b3/0x220 [ 315.722367][ T9352] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 315.722385][ T9352] ? rw_verify_area+0x2a6/0x4d0 [ 315.722403][ T9352] ? __lock_acquire+0xab9/0xd20 [ 315.722422][ T9352] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 315.722439][ T9352] vfs_read+0x1fd/0xa30 [ 315.722457][ T9352] ? fdget_pos+0x247/0x320 [ 315.722472][ T9352] ? __pfx___mutex_lock+0x10/0x10 [ 315.722494][ T9352] ? __pfx_vfs_read+0x10/0x10 [ 315.722513][ T9352] ? __fget_files+0x2a/0x420 [ 315.722529][ T9352] ? __fget_files+0x3a0/0x420 [ 315.722540][ T9352] ? __fget_files+0x2a/0x420 [ 315.722560][ T9352] ksys_read+0x145/0x250 [ 315.722580][ T9352] ? __pfx_ksys_read+0x10/0x10 [ 315.722602][ T9352] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.722624][ T9352] __do_fast_syscall_32+0xb6/0x2b0 [ 315.722646][ T9352] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.722668][ T9352] do_fast_syscall_32+0x34/0x80 [ 315.722688][ T9352] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 315.722706][ T9352] RIP: 0023:0xf703e539 [ 315.722719][ T9352] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 315.722732][ T9352] RSP: 002b:00000000f542e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 315.722747][ T9352] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f542e620 [ 315.722756][ T9352] RDX: 000000000000000f RSI: 00000000f73a4ff4 RDI: 0000000000000000 [ 315.722764][ T9352] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 315.722772][ T9352] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 315.722780][ T9352] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 315.722802][ T9352] [ 316.069394][ T5924] usb 2-1: config 7 has an invalid interface number: 78 but max is 0 [ 316.077674][ T5924] usb 2-1: config 7 has no interface number 0 [ 316.083839][ T5924] usb 2-1: config 7 interface 78 has no altsetting 0 [ 316.095394][ T5924] usb 2-1: New USB device found, idVendor=19d2, idProduct=7936, bcdDevice=ca.b6 [ 316.104993][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.113759][ T5924] usb 2-1: Product: syz [ 316.118416][ T5924] usb 2-1: Manufacturer: syz [ 316.123040][ T5924] usb 2-1: SerialNumber: syz [ 316.419529][ T5924] usb 2-1: bad CDC descriptors [ 316.428046][ T5924] usb 2-1: USB disconnect, device number 34 [ 316.537075][ T24] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 316.683714][ T9370] FAULT_INJECTION: forcing a failure. [ 316.683714][ T9370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.692557][ T9369] syzkaller1: entered promiscuous mode [ 316.706963][ T9369] syzkaller1: entered allmulticast mode [ 316.722446][ T9370] CPU: 0 UID: 0 PID: 9370 Comm: syz.1.994 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 316.722471][ T9370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 316.722483][ T9370] Call Trace: [ 316.722490][ T9370] [ 316.722498][ T9370] dump_stack_lvl+0x189/0x250 [ 316.722524][ T9370] ? __pfx____ratelimit+0x10/0x10 [ 316.722550][ T9370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.722572][ T9370] ? __pfx__printk+0x10/0x10 [ 316.722598][ T9370] ? __might_fault+0xb0/0x130 [ 316.722652][ T9370] should_fail_ex+0x414/0x560 [ 316.722682][ T9370] _copy_from_iter+0x1db/0x16f0 [ 316.722707][ T9370] ? rcu_is_watching+0x15/0xb0 [ 316.722729][ T9370] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 316.722758][ T9370] ? __pfx__copy_from_iter+0x10/0x10 [ 316.722779][ T9370] ? __build_skb_around+0x257/0x3e0 [ 316.722812][ T9370] ? netlink_sendmsg+0x642/0xb30 [ 316.722839][ T9370] ? skb_put+0x11b/0x210 [ 316.722861][ T9370] netlink_sendmsg+0x6b2/0xb30 [ 316.722899][ T9370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.722938][ T9370] ? __import_iovec+0x5d4/0x7f0 [ 316.722958][ T9370] ? aa_sock_msg_perm+0xf1/0x1d0 [ 316.722990][ T9370] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 316.723012][ T9370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.723042][ T9370] __sock_sendmsg+0x21c/0x270 [ 316.723069][ T9370] ____sys_sendmsg+0x505/0x830 [ 316.723095][ T9370] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.723131][ T9370] ___sys_sendmsg+0x21f/0x2a0 [ 316.723153][ T9370] ? __pfx____sys_sendmsg+0x10/0x10 [ 316.723210][ T9370] ? __fget_files+0x2a/0x420 [ 316.723226][ T9370] ? __fget_files+0x3a0/0x420 [ 316.723254][ T9370] __sys_sendmsg+0x164/0x220 [ 316.723277][ T9370] ? __pfx___sys_sendmsg+0x10/0x10 [ 316.723324][ T9370] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.723353][ T9370] __do_fast_syscall_32+0xb6/0x2b0 [ 316.723380][ T9370] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.723408][ T9370] do_fast_syscall_32+0x34/0x80 [ 316.723435][ T9370] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 316.723458][ T9370] RIP: 0023:0xf70de539 [ 316.723474][ T9370] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 316.723490][ T9370] RSP: 002b:00000000f54ce55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 316.723509][ T9370] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001800 [ 316.723521][ T9370] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.723532][ T9370] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 316.723542][ T9370] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 316.723554][ T9370] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 316.723581][ T9370] [ 317.062525][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.069255][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.077503][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.129888][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 317.189778][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 317.486922][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.505325][ T24] usb 1-1: Product: syz [ 317.509779][ T24] usb 1-1: Manufacturer: syz [ 317.514407][ T24] usb 1-1: SerialNumber: syz [ 317.747343][ T24] usb 1-1: 0:2 : does not exist [ 317.762375][ T24] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 317.817945][ T24] usb 1-1: USB disconnect, device number 29 [ 317.890658][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 318.066553][ T9389] netlink: 152 bytes leftover after parsing attributes in process `syz.1.999'. [ 318.384826][ T9395] syzkaller1: entered promiscuous mode [ 318.393833][ T9395] syzkaller1: entered allmulticast mode [ 318.506272][ T9400] netlink: 'syz.3.1002': attribute type 1 has an invalid length. [ 318.546111][ T9400] 8021q: adding VLAN 0 to HW filter on device bond3 [ 318.695113][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 318.695135][ T30] audit: type=1326 audit(1755292629.871:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.0.1003" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x0 [ 319.174841][ T9411] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.1005'. [ 319.568865][ T9421] fuse: Unknown parameter '' [ 319.987110][ T44] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 320.399229][ T44] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 320.414745][ T44] usb 5-1: config 0 has no interface number 0 [ 320.436420][ T44] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 320.510949][ T9436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1014'. [ 320.561349][ T44] usb 5-1: config 0 interface 200 has no altsetting 0 [ 320.576258][ T44] usb 5-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 320.586058][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.594334][ T44] usb 5-1: Product: syz [ 320.598992][ T44] usb 5-1: Manufacturer: syz [ 320.603593][ T44] usb 5-1: SerialNumber: syz [ 320.625857][ T44] usb 5-1: config 0 descriptor?? [ 320.718641][ T9439] FAULT_INJECTION: forcing a failure. [ 320.718641][ T9439] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 320.743089][ T9439] CPU: 1 UID: 0 PID: 9439 Comm: syz.2.1013 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 320.743121][ T9439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 320.743134][ T9439] Call Trace: [ 320.743142][ T9439] [ 320.743151][ T9439] dump_stack_lvl+0x189/0x250 [ 320.743190][ T9439] ? __pfx____ratelimit+0x10/0x10 [ 320.743211][ T9439] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.743229][ T9439] ? __pfx__printk+0x10/0x10 [ 320.743251][ T9439] ? fs_reclaim_acquire+0x7d/0x100 [ 320.743281][ T9439] should_fail_ex+0x414/0x560 [ 320.743304][ T9439] prepare_alloc_pages+0x213/0x610 [ 320.743325][ T9439] __alloc_frozen_pages_noprof+0x123/0x370 [ 320.743344][ T9439] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 320.743362][ T9439] ? __lock_acquire+0xab9/0xd20 [ 320.743392][ T9439] alloc_pages_mpol+0x232/0x4a0 [ 320.743418][ T9439] alloc_pages_noprof+0xa9/0x190 [ 320.743441][ T9439] pte_alloc_one+0x21/0x170 [ 320.743459][ T9439] __pte_alloc+0x25/0x1a0 [ 320.743476][ T9439] __handle_mm_fault+0x49b3/0x5440 [ 320.743509][ T9439] ? __pfx___handle_mm_fault+0x10/0x10 [ 320.743543][ T9439] ? find_vma+0xe7/0x160 [ 320.743568][ T9439] ? __pfx_find_vma+0x10/0x10 [ 320.743588][ T9439] handle_mm_fault+0x40a/0x8e0 [ 320.743615][ T9439] do_user_addr_fault+0x764/0x1390 [ 320.743650][ T9439] exc_page_fault+0x76/0xf0 [ 320.743671][ T9439] asm_exc_page_fault+0x26/0x30 [ 320.743685][ T9439] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 320.743702][ T9439] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 0a 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 320.743715][ T9439] RSP: 0018:ffffc90003057d58 EFLAGS: 00050206 [ 320.743728][ T9439] RAX: 00007ffffffff001 RBX: 000000000000001c RCX: 000000000000001c [ 320.743738][ T9439] RDX: 0000000000000001 RSI: 0000000080000100 RDI: ffffc90003057dc0 [ 320.743748][ T9439] RBP: ffffc90003057ea8 R08: ffffc90003057ddb R09: 1ffff9200060afbb [ 320.743759][ T9439] R10: dffffc0000000000 R11: fffff5200060afbc R12: 0000000080000100 [ 320.743770][ T9439] R13: ffff8880557bb600 R14: ffffc90003057dc0 R15: 0000000080000100 [ 320.743794][ T9439] _copy_from_user+0x7a/0xb0 [ 320.743812][ T9439] __sys_bind+0x199/0x3e0 [ 320.743831][ T9439] ? count_memcg_event_mm+0x21/0x260 [ 320.743851][ T9439] ? __pfx___sys_bind+0x10/0x10 [ 320.743887][ T9439] __ia32_sys_bind+0x7a/0x90 [ 320.743908][ T9439] __do_fast_syscall_32+0xb6/0x2b0 [ 320.743931][ T9439] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.743953][ T9439] do_fast_syscall_32+0x34/0x80 [ 320.743974][ T9439] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.743991][ T9439] RIP: 0023:0xf7f48539 [ 320.744003][ T9439] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 320.744015][ T9439] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 320.744028][ T9439] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 320.744038][ T9439] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 320.744046][ T9439] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 320.744054][ T9439] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 320.744062][ T9439] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.744083][ T9439] [ 321.075142][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.381361][ T9441] FAULT_INJECTION: forcing a failure. [ 321.381361][ T9441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.394921][ T9441] CPU: 1 UID: 0 PID: 9441 Comm: syz.1.1015 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 321.394943][ T9441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 321.394952][ T9441] Call Trace: [ 321.394958][ T9441] [ 321.394964][ T9441] dump_stack_lvl+0x189/0x250 [ 321.394987][ T9441] ? __pfx____ratelimit+0x10/0x10 [ 321.395008][ T9441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.395026][ T9441] ? __pfx__printk+0x10/0x10 [ 321.395060][ T9441] should_fail_ex+0x414/0x560 [ 321.395084][ T9441] _copy_to_user+0x31/0xb0 [ 321.395103][ T9441] video_usercopy+0xeb2/0x14f0 [ 321.395126][ T9441] ? __pfx___video_do_ioctl+0x10/0x10 [ 321.395140][ T9441] ? __pfx_video_usercopy+0x10/0x10 [ 321.395168][ T9441] ? __fget_files+0x2a/0x420 [ 321.395183][ T9441] v4l2_ioctl+0x18a/0x1e0 [ 321.395209][ T9441] v4l2_compat_ioctl32+0x1d7/0x260 [ 321.395231][ T9441] __ia32_compat_sys_ioctl+0x543/0x840 [ 321.395252][ T9441] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 321.395272][ T9441] ? __fget_files+0x3a0/0x420 [ 321.395290][ T9441] ? fput+0xa0/0xd0 [ 321.395306][ T9441] ? ksys_write+0x22a/0x250 [ 321.395332][ T9441] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.395355][ T9441] __do_fast_syscall_32+0xb6/0x2b0 [ 321.395377][ T9441] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.395400][ T9441] do_fast_syscall_32+0x34/0x80 [ 321.395422][ T9441] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.395440][ T9441] RIP: 0023:0xf70de539 [ 321.395453][ T9441] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 321.395466][ T9441] RSP: 002b:00000000f54ce55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 321.395487][ T9441] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0405602 [ 321.395498][ T9441] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 321.395507][ T9441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 321.395516][ T9441] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 321.395525][ T9441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 321.395546][ T9441] [ 321.608541][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.313358][ T9444] fuse: Bad value for 'fd' [ 322.536755][ T9451] netlink: 'syz.2.1019': attribute type 1 has an invalid length. [ 322.614408][ T9451] 8021q: adding VLAN 0 to HW filter on device bond4 [ 322.745741][ T44] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input13 [ 322.781497][ T44] usb 5-1: USB disconnect, device number 18 [ 323.022361][ T30] audit: type=1326 audit(1755292634.191:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9460 comm="syz.0.1022" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x0 [ 323.253971][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1023'. [ 324.479208][ T9485] FAULT_INJECTION: forcing a failure. [ 324.479208][ T9485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.606908][ T9485] CPU: 1 UID: 0 PID: 9485 Comm: syz.3.1028 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 324.606940][ T9485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 324.606963][ T9485] Call Trace: [ 324.606971][ T9485] [ 324.606980][ T9485] dump_stack_lvl+0x189/0x250 [ 324.607007][ T9485] ? __pfx____ratelimit+0x10/0x10 [ 324.607033][ T9485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.607055][ T9485] ? __pfx__printk+0x10/0x10 [ 324.607082][ T9485] ? __might_fault+0xb0/0x130 [ 324.607120][ T9485] should_fail_ex+0x414/0x560 [ 324.607160][ T9485] _copy_from_iter+0x1db/0x16f0 [ 324.607184][ T9485] ? rcu_is_watching+0x15/0xb0 [ 324.607205][ T9485] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 324.607234][ T9485] ? __pfx__copy_from_iter+0x10/0x10 [ 324.607254][ T9485] ? __build_skb_around+0x257/0x3e0 [ 324.607290][ T9485] ? netlink_sendmsg+0x642/0xb30 [ 324.607315][ T9485] ? skb_put+0x11b/0x210 [ 324.607336][ T9485] netlink_sendmsg+0x6b2/0xb30 [ 324.607373][ T9485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.607403][ T9485] ? __import_iovec+0x5d4/0x7f0 [ 324.607423][ T9485] ? aa_sock_msg_perm+0xf1/0x1d0 [ 324.607453][ T9485] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 324.607475][ T9485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.607502][ T9485] __sock_sendmsg+0x21c/0x270 [ 324.607531][ T9485] ____sys_sendmsg+0x505/0x830 [ 324.607555][ T9485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 324.607591][ T9485] ___sys_sendmsg+0x21f/0x2a0 [ 324.607612][ T9485] ? __pfx____sys_sendmsg+0x10/0x10 [ 324.607667][ T9485] ? __fget_files+0x2a/0x420 [ 324.607684][ T9485] ? __fget_files+0x3a0/0x420 [ 324.607711][ T9485] __sys_sendmsg+0x164/0x220 [ 324.607732][ T9485] ? __pfx___sys_sendmsg+0x10/0x10 [ 324.607786][ T9485] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.607817][ T9485] __do_fast_syscall_32+0xb6/0x2b0 [ 324.607848][ T9485] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.607880][ T9485] do_fast_syscall_32+0x34/0x80 [ 324.607909][ T9485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 324.607935][ T9485] RIP: 0023:0xf703e539 [ 324.607953][ T9485] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 324.607971][ T9485] RSP: 002b:00000000f542e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 324.607992][ T9485] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000400 [ 324.608005][ T9485] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 324.608017][ T9485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 324.608028][ T9485] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 324.608040][ T9485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 324.608068][ T9485] [ 324.884541][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.335043][ T9494] FAULT_INJECTION: forcing a failure. [ 325.335043][ T9494] name failslab, interval 1, probability 0, space 0, times 0 [ 325.348278][ T9495] netlink: 'syz.3.1031': attribute type 1 has an invalid length. [ 325.391022][ T9494] CPU: 1 UID: 0 PID: 9494 Comm: syz.4.1030 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 325.391048][ T9494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 325.391058][ T9494] Call Trace: [ 325.391074][ T9494] [ 325.391083][ T9494] dump_stack_lvl+0x189/0x250 [ 325.391110][ T9494] ? __pfx____ratelimit+0x10/0x10 [ 325.391137][ T9494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.391159][ T9494] ? __pfx__printk+0x10/0x10 [ 325.391189][ T9494] ? __pfx___might_resched+0x10/0x10 [ 325.391207][ T9494] ? fs_reclaim_acquire+0x7d/0x100 [ 325.391241][ T9494] should_fail_ex+0x414/0x560 [ 325.391269][ T9494] should_failslab+0xa8/0x100 [ 325.391294][ T9494] __kmalloc_noprof+0xcb/0x4f0 [ 325.391315][ T9494] ? tomoyo_encode+0x28b/0x550 [ 325.391334][ T9494] tomoyo_encode+0x28b/0x550 [ 325.391353][ T9494] tomoyo_realpath_from_path+0x58d/0x5d0 [ 325.391377][ T9494] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 325.391398][ T9494] tomoyo_path_number_perm+0x1e8/0x5a0 [ 325.391421][ T9494] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 325.391456][ T9494] ? __lock_acquire+0xab9/0xd20 [ 325.391493][ T9494] ? __fget_files+0x2a/0x420 [ 325.391510][ T9494] ? __fget_files+0x3a0/0x420 [ 325.391523][ T9494] ? __fget_files+0x2a/0x420 [ 325.391539][ T9494] security_file_ioctl_compat+0xcb/0x2d0 [ 325.391562][ T9494] __ia32_compat_sys_ioctl+0x128/0x840 [ 325.391585][ T9494] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 325.391605][ T9494] ? __fget_files+0x3a0/0x420 [ 325.391623][ T9494] ? fput+0xa0/0xd0 [ 325.391639][ T9494] ? ksys_write+0x22a/0x250 [ 325.391666][ T9494] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.391690][ T9494] __do_fast_syscall_32+0xb6/0x2b0 [ 325.391714][ T9494] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.391737][ T9494] do_fast_syscall_32+0x34/0x80 [ 325.391760][ T9494] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 325.391779][ T9494] RIP: 0023:0xf7f76539 [ 325.391793][ T9494] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 325.391806][ T9494] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 325.391823][ T9494] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c040565f [ 325.391834][ T9494] RDX: 0000000080000940 RSI: 0000000000000000 RDI: 0000000000000000 [ 325.391843][ T9494] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 325.391852][ T9494] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 325.391862][ T9494] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 325.391883][ T9494] [ 325.392052][ T9494] ERROR: Out of memory at tomoyo_realpath_from_path. [ 326.937422][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 327.096927][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 327.120143][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 327.151342][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 327.247031][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 327.311151][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.473820][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 327.620259][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.945683][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 327.955761][ T9] usbtmc 5-1:16.0: can't read capabilities [ 329.075091][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1042'. [ 330.321495][ T9555] netlink: 'syz.3.1046': attribute type 1 has an invalid length. [ 330.380049][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1045'. [ 330.703749][ T24] usb 5-1: USB disconnect, device number 19 [ 330.872523][ T9562] FAULT_INJECTION: forcing a failure. [ 330.872523][ T9562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.941586][ T9562] CPU: 0 UID: 0 PID: 9562 Comm: syz.4.1049 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 330.941616][ T9562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 330.941628][ T9562] Call Trace: [ 330.941636][ T9562] [ 330.941645][ T9562] dump_stack_lvl+0x189/0x250 [ 330.941674][ T9562] ? __pfx____ratelimit+0x10/0x10 [ 330.941700][ T9562] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.941723][ T9562] ? __pfx__printk+0x10/0x10 [ 330.941750][ T9562] ? __might_fault+0xb0/0x130 [ 330.941785][ T9562] should_fail_ex+0x414/0x560 [ 330.941816][ T9562] _copy_from_iter+0x1db/0x16f0 [ 330.941839][ T9562] ? rcu_is_watching+0x15/0xb0 [ 330.941861][ T9562] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 330.941889][ T9562] ? __pfx__copy_from_iter+0x10/0x10 [ 330.941922][ T9562] ? __build_skb_around+0x257/0x3e0 [ 330.941952][ T9562] ? netlink_sendmsg+0x642/0xb30 [ 330.941977][ T9562] ? skb_put+0x11b/0x210 [ 330.941996][ T9562] netlink_sendmsg+0x6b2/0xb30 [ 330.942030][ T9562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.942059][ T9562] ? __import_iovec+0x5d4/0x7f0 [ 330.942077][ T9562] ? aa_sock_msg_perm+0xf1/0x1d0 [ 330.942105][ T9562] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 330.942125][ T9562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.942151][ T9562] __sock_sendmsg+0x21c/0x270 [ 330.942177][ T9562] ____sys_sendmsg+0x505/0x830 [ 330.942200][ T9562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.942233][ T9562] ___sys_sendmsg+0x21f/0x2a0 [ 330.942253][ T9562] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.942304][ T9562] ? __fget_files+0x2a/0x420 [ 330.942319][ T9562] ? __fget_files+0x3a0/0x420 [ 330.942344][ T9562] __sys_sendmsg+0x164/0x220 [ 330.942364][ T9562] ? __pfx___sys_sendmsg+0x10/0x10 [ 330.942415][ T9562] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.942444][ T9562] __do_fast_syscall_32+0xb6/0x2b0 [ 330.942473][ T9562] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.942502][ T9562] do_fast_syscall_32+0x34/0x80 [ 330.942536][ T9562] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 330.942559][ T9562] RIP: 0023:0xf7f76539 [ 330.942575][ T9562] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 330.942591][ T9562] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 330.942610][ T9562] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 330.942624][ T9562] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 330.942635][ T9562] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 330.942645][ T9562] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 330.942656][ T9562] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 330.942682][ T9562] [ 331.264787][ T9564] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1050'. [ 331.397116][ T9564] netlink: zone id is out of range [ 331.402696][ T9564] netlink: zone id is out of range [ 331.408644][ T9564] netlink: get zone limit has 8 unknown bytes [ 331.504376][ T9569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.547474][ T9569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.729218][ T9582] FAULT_INJECTION: forcing a failure. [ 331.729218][ T9582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.742693][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056f25c00: rx timeout, send abort [ 331.757626][ T9582] CPU: 1 UID: 0 PID: 9582 Comm: syz.1.1057 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 331.757651][ T9582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 331.757663][ T9582] Call Trace: [ 331.757671][ T9582] [ 331.757680][ T9582] dump_stack_lvl+0x189/0x250 [ 331.757709][ T9582] ? __pfx____ratelimit+0x10/0x10 [ 331.757735][ T9582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.757758][ T9582] ? __pfx__printk+0x10/0x10 [ 331.757794][ T9582] ? __might_fault+0xb0/0x130 [ 331.757831][ T9582] should_fail_ex+0x414/0x560 [ 331.757861][ T9582] _copy_from_iter+0x1db/0x16f0 [ 331.757884][ T9582] ? rcu_is_watching+0x15/0xb0 [ 331.757905][ T9582] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 331.757933][ T9582] ? __pfx__copy_from_iter+0x10/0x10 [ 331.757954][ T9582] ? __build_skb_around+0x257/0x3e0 [ 331.757986][ T9582] ? netlink_sendmsg+0x642/0xb30 [ 331.758011][ T9582] ? skb_put+0x11b/0x210 [ 331.758030][ T9582] netlink_sendmsg+0x6b2/0xb30 [ 331.758064][ T9582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.758094][ T9582] ? __import_iovec+0x5d4/0x7f0 [ 331.758113][ T9582] ? aa_sock_msg_perm+0xf1/0x1d0 [ 331.758144][ T9582] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 331.758164][ T9582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.758192][ T9582] __sock_sendmsg+0x21c/0x270 [ 331.758218][ T9582] ____sys_sendmsg+0x505/0x830 [ 331.758242][ T9582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.758276][ T9582] ___sys_sendmsg+0x21f/0x2a0 [ 331.758297][ T9582] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.758349][ T9582] ? __fget_files+0x2a/0x420 [ 331.758365][ T9582] ? __fget_files+0x3a0/0x420 [ 331.758392][ T9582] __sys_sendmsg+0x164/0x220 [ 331.758413][ T9582] ? __pfx___sys_sendmsg+0x10/0x10 [ 331.758446][ T9582] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.758494][ T9582] __do_fast_syscall_32+0xb6/0x2b0 [ 331.758543][ T9582] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.758576][ T9582] do_fast_syscall_32+0x34/0x80 [ 331.758606][ T9582] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.758631][ T9582] RIP: 0023:0xf70de539 [ 331.758649][ T9582] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 331.758668][ T9582] RSP: 002b:00000000f54ce55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 331.758690][ T9582] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 331.758705][ T9582] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 331.758717][ T9582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 331.758729][ T9582] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 331.758741][ T9582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 331.758782][ T9582] [ 332.082423][ T9585] syz_tun: entered allmulticast mode [ 332.089320][ T9588] misc userio: Can't change port type on an already running userio instance [ 332.232035][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056f25400: rx timeout, send abort [ 332.242795][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056f25c00: abort rx timeout. Force session deactivation [ 332.359343][ T9] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 332.381681][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1060'. [ 332.541469][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.577261][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 332.621499][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 332.640955][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.682687][ T9] usb 4-1: Product: syz [ 332.718126][ T9] usb 4-1: Manufacturer: syz [ 332.740309][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056f25400: abort rx timeout. Force session deactivation [ 332.741278][ T9] usb 4-1: SerialNumber: syz [ 333.034202][ T9584] syz_tun: left allmulticast mode [ 333.041336][ T9] usb 4-1: 0:2 : does not exist [ 333.256368][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 333.411474][ T9] usb 4-1: USB disconnect, device number 25 [ 333.473479][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 333.518247][ T9606] netlink: 'syz.0.1064': attribute type 1 has an invalid length. [ 334.493916][ T9625] FAULT_INJECTION: forcing a failure. [ 334.493916][ T9625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.525508][ T9625] CPU: 0 UID: 0 PID: 9625 Comm: syz.4.1071 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 334.525540][ T9625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.525553][ T9625] Call Trace: [ 334.525562][ T9625] [ 334.525572][ T9625] dump_stack_lvl+0x189/0x250 [ 334.525603][ T9625] ? __pfx____ratelimit+0x10/0x10 [ 334.525632][ T9625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.525658][ T9625] ? __pfx__printk+0x10/0x10 [ 334.525688][ T9625] ? __might_fault+0xb0/0x130 [ 334.525730][ T9625] should_fail_ex+0x414/0x560 [ 334.525762][ T9625] _copy_from_iter+0x1db/0x16f0 [ 334.525788][ T9625] ? rcu_is_watching+0x15/0xb0 [ 334.525811][ T9625] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 334.525860][ T9625] ? __pfx__copy_from_iter+0x10/0x10 [ 334.525881][ T9625] ? __build_skb_around+0x257/0x3e0 [ 334.525915][ T9625] ? netlink_sendmsg+0x642/0xb30 [ 334.525942][ T9625] ? skb_put+0x11b/0x210 [ 334.525964][ T9625] netlink_sendmsg+0x6b2/0xb30 [ 334.526004][ T9625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.526036][ T9625] ? __import_iovec+0x5d4/0x7f0 [ 334.526056][ T9625] ? aa_sock_msg_perm+0xf1/0x1d0 [ 334.526090][ T9625] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 334.526112][ T9625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.526143][ T9625] __sock_sendmsg+0x21c/0x270 [ 334.526172][ T9625] ____sys_sendmsg+0x505/0x830 [ 334.526199][ T9625] ? __pfx_____sys_sendmsg+0x10/0x10 [ 334.526237][ T9625] ___sys_sendmsg+0x21f/0x2a0 [ 334.526271][ T9625] ? __pfx____sys_sendmsg+0x10/0x10 [ 334.526326][ T9625] ? __fget_files+0x2a/0x420 [ 334.526341][ T9625] ? __fget_files+0x3a0/0x420 [ 334.526368][ T9625] __sys_sendmsg+0x164/0x220 [ 334.526390][ T9625] ? __pfx___sys_sendmsg+0x10/0x10 [ 334.526431][ T9625] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.526461][ T9625] __do_fast_syscall_32+0xb6/0x2b0 [ 334.526489][ T9625] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.526516][ T9625] do_fast_syscall_32+0x34/0x80 [ 334.526543][ T9625] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 334.526567][ T9625] RIP: 0023:0xf7f76539 [ 334.526582][ T9625] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 334.526598][ T9625] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 334.526618][ T9625] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 334.526630][ T9625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 334.526657][ T9625] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 334.526669][ T9625] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 334.526681][ T9625] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 334.526709][ T9625] [ 334.795200][ C0] vkms_vblank_simulate: vblank timer overrun [ 334.811052][ T9] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 334.997468][ T9] usb 4-1: device descriptor read/64, error -71 [ 335.150449][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1073'. [ 335.257090][ T9] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 335.436920][ T9] usb 4-1: device descriptor read/64, error -71 [ 335.595277][ T9] usb usb4-port1: attempt power cycle [ 336.306959][ T9] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 336.383012][ T9] usb 4-1: device descriptor read/8, error -71 [ 336.525583][ T9662] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1083'. [ 336.637056][ T9] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 336.668728][ T9] usb 4-1: device descriptor read/8, error -71 [ 336.711522][ T9672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 336.736428][ T9672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.755905][ T9672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.787891][ T9] usb usb4-port1: unable to enumerate USB device [ 337.688055][ T9688] kernel profiling enabled (shift: 17) [ 337.830621][ T9698] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1093'. [ 337.864058][ T9701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.872613][ T9702] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1092'. [ 337.886782][ T9701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.152053][ T9705] tipc: Enabled bearer , priority 0 [ 338.213425][ T9710] syz_tun: entered allmulticast mode [ 338.241879][ T9705] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 338.371952][ T9705] tipc: Resetting bearer [ 338.444904][ T9703] tipc: Disabling bearer [ 338.486928][ T44] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 338.650944][ T44] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.668035][ T44] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.683829][ T30] audit: type=1800 audit(1755292649.861:315): pid=9717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1099" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 338.757411][ T44] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 338.809172][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.830163][ T44] usb 1-1: Product: syz [ 338.837912][ T44] usb 1-1: Manufacturer: syz [ 338.852110][ T44] usb 1-1: SerialNumber: syz [ 339.059747][ T9724] macsec0: entered promiscuous mode [ 339.065437][ T9724] macsec0: entered allmulticast mode [ 339.070940][ T9724] veth1_macvtap: entered allmulticast mode [ 339.149432][ T9724] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1101'. [ 339.217384][ T44] usb 1-1: 0:2 : does not exist [ 339.273190][ T44] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 339.285831][ T9724] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 339.409215][ T9708] syz_tun: left allmulticast mode [ 339.430170][ T44] usb 1-1: USB disconnect, device number 30 [ 339.645568][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 340.381812][ T9742] netlink: 'syz.2.1105': attribute type 1 has an invalid length. [ 340.434195][ T9746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1105'. [ 340.462973][ T9747] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1106'. [ 341.045873][ T9758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.061391][ T9758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.075019][ T9758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.085802][ T9758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.175447][ T30] audit: type=1326 audit(1755292652.351:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.3.1110" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x0 [ 341.336803][ T9769] netlink: 'syz.2.1109': attribute type 1 has an invalid length. [ 341.370960][ T9769] 8021q: adding VLAN 0 to HW filter on device bond5 [ 342.681571][ T9791] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1117'. [ 344.162313][ T30] audit: type=1326 audit(1755292655.341:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9842 comm="syz.0.1125" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x0 [ 344.708395][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1127'. [ 345.645236][ T9876] FAULT_INJECTION: forcing a failure. [ 345.645236][ T9876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.786987][ T9876] CPU: 0 UID: 0 PID: 9876 Comm: syz.1.1132 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 345.787009][ T9876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 345.787019][ T9876] Call Trace: [ 345.787025][ T9876] [ 345.787032][ T9876] dump_stack_lvl+0x189/0x250 [ 345.787054][ T9876] ? __pfx____ratelimit+0x10/0x10 [ 345.787074][ T9876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.787092][ T9876] ? __pfx__printk+0x10/0x10 [ 345.787121][ T9876] should_fail_ex+0x414/0x560 [ 345.787144][ T9876] _copy_to_user+0x31/0xb0 [ 345.787162][ T9876] simple_read_from_buffer+0xe1/0x170 [ 345.787188][ T9876] proc_fail_nth_read+0x1b3/0x220 [ 345.787207][ T9876] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 345.787227][ T9876] ? rw_verify_area+0x2a6/0x4d0 [ 345.787244][ T9876] ? __lock_acquire+0xab9/0xd20 [ 345.787266][ T9876] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 345.787283][ T9876] vfs_read+0x1fd/0xa30 [ 345.787301][ T9876] ? fdget_pos+0x247/0x320 [ 345.787317][ T9876] ? __pfx___mutex_lock+0x10/0x10 [ 345.787339][ T9876] ? __pfx_vfs_read+0x10/0x10 [ 345.787359][ T9876] ? __fget_files+0x2a/0x420 [ 345.787375][ T9876] ? __fget_files+0x3a0/0x420 [ 345.787387][ T9876] ? __fget_files+0x2a/0x420 [ 345.787406][ T9876] ksys_read+0x145/0x250 [ 345.787433][ T9876] ? __pfx_ksys_read+0x10/0x10 [ 345.787454][ T9876] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.787477][ T9876] __do_fast_syscall_32+0xb6/0x2b0 [ 345.787499][ T9876] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.787521][ T9876] do_fast_syscall_32+0x34/0x80 [ 345.787542][ T9876] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 345.787560][ T9876] RIP: 0023:0xf70de539 [ 345.787573][ T9876] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 345.787585][ T9876] RSP: 002b:00000000f54ce590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 345.787600][ T9876] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54ce620 [ 345.787611][ T9876] RDX: 000000000000000f RSI: 00000000f7444ff4 RDI: 0000000000000000 [ 345.787619][ T9876] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 345.787628][ T9876] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 345.787637][ T9876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 345.787658][ T9876] [ 346.307992][ T9879] netlink: 'syz.4.1135': attribute type 1 has an invalid length. [ 346.487297][ T9879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.747010][ T1211] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 347.097117][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1137'. [ 347.157337][ T1211] usb 2-1: Using ep0 maxpacket: 16 [ 347.205415][ T1211] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 347.215262][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.239495][ T1211] usb 2-1: Product: syz [ 347.243711][ T1211] usb 2-1: Manufacturer: syz [ 347.249979][ T1211] usb 2-1: SerialNumber: syz [ 347.267481][ T1211] usb 2-1: config 0 descriptor?? [ 347.274963][ T1211] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 347.506147][ T1211] usb 2-1: clie_3_5_startup: get config number failed: -71 [ 347.555701][ T1211] visor 2-1:0.0: probe with driver visor failed with error -71 [ 347.642254][ T1211] usb 2-1: USB disconnect, device number 35 [ 347.705783][ T30] audit: type=1326 audit(1755292658.881:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.4.1141" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x0 [ 347.727240][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.030175][ T9906] FAULT_INJECTION: forcing a failure. [ 348.030175][ T9906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.043707][ T9906] CPU: 0 UID: 0 PID: 9906 Comm: syz.2.1142 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 348.043732][ T9906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 348.043744][ T9906] Call Trace: [ 348.043752][ T9906] [ 348.043761][ T9906] dump_stack_lvl+0x189/0x250 [ 348.043786][ T9906] ? __pfx____ratelimit+0x10/0x10 [ 348.043812][ T9906] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.043833][ T9906] ? __pfx__printk+0x10/0x10 [ 348.043865][ T9906] ? __might_fault+0xb0/0x130 [ 348.043900][ T9906] should_fail_ex+0x414/0x560 [ 348.043928][ T9906] _copy_from_iter+0x1db/0x16f0 [ 348.043950][ T9906] ? rcu_is_watching+0x15/0xb0 [ 348.043970][ T9906] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 348.043996][ T9906] ? __pfx__copy_from_iter+0x10/0x10 [ 348.044016][ T9906] ? __build_skb_around+0x257/0x3e0 [ 348.044046][ T9906] ? netlink_sendmsg+0x642/0xb30 [ 348.044070][ T9906] ? skb_put+0x11b/0x210 [ 348.044090][ T9906] netlink_sendmsg+0x6b2/0xb30 [ 348.044124][ T9906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.044153][ T9906] ? __import_iovec+0x5d4/0x7f0 [ 348.044170][ T9906] ? aa_sock_msg_perm+0xf1/0x1d0 [ 348.044200][ T9906] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 348.044219][ T9906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.044246][ T9906] __sock_sendmsg+0x21c/0x270 [ 348.044270][ T9906] ____sys_sendmsg+0x505/0x830 [ 348.044294][ T9906] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.044327][ T9906] ___sys_sendmsg+0x21f/0x2a0 [ 348.044347][ T9906] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.044398][ T9906] ? __fget_files+0x2a/0x420 [ 348.044413][ T9906] ? __fget_files+0x3a0/0x420 [ 348.044438][ T9906] __sys_sendmsg+0x164/0x220 [ 348.044459][ T9906] ? __pfx___sys_sendmsg+0x10/0x10 [ 348.044492][ T9906] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.044519][ T9906] __do_fast_syscall_32+0xb6/0x2b0 [ 348.044546][ T9906] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.044574][ T9906] do_fast_syscall_32+0x34/0x80 [ 348.044605][ T9906] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 348.044627][ T9906] RIP: 0023:0xf7f48539 [ 348.044664][ T9906] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 348.044684][ T9906] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 348.044706][ T9906] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000000 [ 348.044721][ T9906] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 348.044733][ T9906] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 348.044746][ T9906] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 348.044759][ T9906] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 348.044790][ T9906] [ 348.427944][ T31] INFO: task kworker/1:5:5975 blocked for more than 143 seconds. [ 348.456963][ T31] Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 [ 348.479299][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 348.597046][ T31] task:kworker/1:5 state:D stack:19272 pid:5975 tgid:5975 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 348.626947][ T31] Workqueue: usb_hub_wq hub_event [ 348.632701][ T31] Call Trace: [ 348.636012][ T31] [ 348.639154][ T31] __schedule+0x1798/0x4cc0 [ 348.643717][ T31] ? __pfx___schedule+0x10/0x10 [ 348.648870][ T31] ? schedule+0x91/0x360 [ 348.653215][ T31] schedule+0x165/0x360 [ 348.657596][ T31] schedule_timeout+0x9a/0x270 [ 348.662610][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 348.668266][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 348.673572][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.678920][ T31] ? wait_for_completion+0x267/0x5d0 [ 348.684317][ T31] wait_for_completion+0x2bf/0x5d0 [ 348.689746][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 348.695508][ T31] i2c_del_adapter+0x581/0x6e0 [ 348.700525][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 348.705865][ T31] ? rcu_is_watching+0x15/0xb0 [ 348.710760][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 348.716077][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 348.721858][ T31] dvb_usb_device_exit+0x1be/0x350 [ 348.727109][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 348.733895][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 348.739948][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.745216][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 348.751298][ T31] cxusb_probe+0x603/0x700 [ 348.755753][ T31] ? __pfx_cxusb_probe+0x10/0x10 [ 348.760852][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 348.766504][ T31] usb_probe_interface+0x665/0xc30 [ 348.771781][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 348.777510][ T31] really_probe+0x26a/0x9e0 [ 348.782040][ T31] __driver_probe_device+0x18c/0x2f0 [ 348.787445][ T31] driver_probe_device+0x4f/0x430 [ 348.792517][ T31] __device_attach_driver+0x2ce/0x530 [ 348.797956][ T31] bus_for_each_drv+0x251/0x2e0 [ 348.802860][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 348.809108][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 348.814529][ T31] __device_attach+0x2b8/0x400 [ 348.819789][ T31] ? __pfx___device_attach+0x10/0x10 [ 348.825271][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 348.831026][ T31] bus_probe_device+0x185/0x260 [ 348.836549][ T31] device_add+0x7b6/0xb50 [ 348.841211][ T31] usb_set_configuration+0x1a87/0x20e0 [ 348.846860][ T31] usb_generic_driver_probe+0x8d/0x150 [ 348.852476][ T31] usb_probe_device+0x1c4/0x390 [ 348.857606][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 348.862999][ T31] really_probe+0x26a/0x9e0 [ 348.867695][ T31] __driver_probe_device+0x18c/0x2f0 [ 348.873042][ T31] driver_probe_device+0x4f/0x430 [ 348.878252][ T31] __device_attach_driver+0x2ce/0x530 [ 348.883657][ T31] bus_for_each_drv+0x251/0x2e0 [ 348.888699][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 348.894825][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 348.900403][ T31] __device_attach+0x2b8/0x400 [ 348.905202][ T31] ? __pfx___device_attach+0x10/0x10 [ 348.910654][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 348.915885][ T31] bus_probe_device+0x185/0x260 [ 348.920906][ T31] device_add+0x7b6/0xb50 [ 348.925286][ T31] usb_new_device+0xa39/0x16f0 [ 348.930146][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 348.935452][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 348.941267][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.946521][ T31] hub_event+0x2958/0x4a20 [ 348.951048][ T31] ? __pfx_hub_event+0x10/0x10 [ 348.955854][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 348.961674][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 348.966967][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 348.972709][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 348.978519][ T31] process_scheduled_works+0xade/0x17b0 [ 348.984115][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 348.990184][ T31] worker_thread+0x8a0/0xda0 [ 348.994805][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 349.001228][ T31] ? __kthread_parkme+0x7b/0x200 [ 349.006199][ T31] kthread+0x70e/0x8a0 [ 349.010329][ T31] ? __pfx_worker_thread+0x10/0x10 [ 349.015463][ T31] ? __pfx_kthread+0x10/0x10 [ 349.020143][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 349.025369][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.030620][ T31] ? __pfx_kthread+0x10/0x10 [ 349.035240][ T31] ret_from_fork+0x3f9/0x770 [ 349.040524][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 349.045677][ T31] ? __switch_to_asm+0x39/0x70 [ 349.050533][ T31] ? __switch_to_asm+0x33/0x70 [ 349.055320][ T31] ? __pfx_kthread+0x10/0x10 [ 349.060101][ T31] ret_from_fork_asm+0x1a/0x30 [ 349.064917][ T31] [ 349.068067][ T31] [ 349.068067][ T31] Showing all locks held in the system: [ 349.075839][ T31] 1 lock held by khungtaskd/31: [ 349.081695][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 349.092129][ T31] 3 locks held by kworker/u8:3/37: [ 349.097421][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 349.112555][ T31] #1: ffffc90000ad7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 349.124889][ T31] #2: ffffffff8f537d88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 349.134492][ T31] 2 locks held by getty/5629: [ 349.139851][ T31] #0: ffff88814ce320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 349.150742][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 349.162298][ T31] 4 locks held by udevd/5879: [ 349.169901][ T31] #0: ffff88802fcab790 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 349.182153][ T31] #1: ffff888058b1ec88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 349.191801][ T31] #2: ffff888078170788 (kn->active#28){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0