last executing test programs: 14.030227211s ago: executing program 3 (id=1513): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@lsrr={0x83, 0x3, 0xe9}]}}}}}}}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000040002800800", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 11.339784596s ago: executing program 3 (id=1521): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@lsrr={0x83, 0x3, 0xe9}]}}}}}}}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 10.784733804s ago: executing program 1 (id=1524): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x18, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x9, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "030000"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000fc0)={&(0x7f0000001200)=[{0x79, 0x2800, 0x700, 0x0}], 0x1}) 8.572860065s ago: executing program 3 (id=1529): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x44, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) r2 = mq_open(&(0x7f0000000040)='\x00', 0x80, 0xdd, &(0x7f0000000080)={0x4, 0x7, 0x8000000000000000, 0x9}) mq_timedreceive(r2, &(0x7f00000000c0)=""/133, 0x85, 0x9, &(0x7f00000001c0)={0x77359400}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc, 0x1, 0x0, 0xfffffffe}, 0x10) write(r8, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r6, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x4b}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4a874b2741cae054}, 0x801) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x2602}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 8.250259631s ago: executing program 3 (id=1530): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x3000000, 0x0, 0x0, 0x0, 0x1, 0x2}}) accept4(r1, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80, 0x80000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x9c, 0x4) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 7.828594196s ago: executing program 0 (id=1532): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) mount_setattr(0xffffffffffffffff, 0x0, 0x800000, &(0x7f0000000380), 0x8c) 7.592296633s ago: executing program 0 (id=1535): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000640)={0x0, @in={{0xa, 0x4e24}}, 0xffff, 0xffff}, 0x90) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x40, 0x0, 0x3, 0xb49, 0x9, 0x9, 0x0, 0xfff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030429bd70c7e8b4b47c515147b5", @ANYRES32=r5, @ANYRES64=r4], 0x3c}, 0x1, 0x2000000}, 0x24004890) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x10044854}, 0x20000800) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r8, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044064) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7.132355179s ago: executing program 1 (id=1536): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$update(0x2, r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000600)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x2e}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x3ff}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x14, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 6.989155498s ago: executing program 1 (id=1537): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r2 = open(0x0, 0x1031c2, 0x20) ftruncate(r2, 0x2007ffb) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbfc, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x9}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 6.695437153s ago: executing program 1 (id=1538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x28}}, 0x20000014) 6.428620564s ago: executing program 1 (id=1539): r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') getdents64(r1, 0xfffffffffffffffe, 0x64) r2 = getpid() r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x5, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000400)={0xf0f020}) read$FUSE(r1, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000002480)=0x1) setpgid(r0, r4) rt_tgsigqueueinfo(r2, r0, 0x0, &(0x7f0000000280)={0x8, 0x0, 0x4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x13, 0xff1}]}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003000000201805020040000102030109022400010104200409040004020301023a09210200c268c0050b090581030002040107"], &(0x7f0000000400)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0xa, 0x7f, 0x9, 0x40, 0x7}, 0x35, &(0x7f0000000300)=ANY=[@ANYBLOB="050f3500050b100104010003ffff01070b100108171cf2260100000c10010393842764ad53112c0b1001021000080105000703aa25"], 0x1, [{0x98, &(0x7f0000000340)=@string={0x98, 0x3, "4bc78c0a398ab4f3b1811da00c23fefb1b99a58eef39b360dd8262225120e768c420c375d1ec723f601978fae47506c453e7747a60aaa426cc2c99213b391173760294a0056e1d2e96464ee7c1a9fca89f0ca21aa21ac7c2eea53d676f97c8b3ac774c482990c6926e9fd84557420f64f9435b41ba21e8e70ac60174527788f0524b314b4e1243c5d713e1e0a3422cb762e874e372d0"}}]}) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x2, 0x4, 0xbf, 0x81, 0x8, 0x1000], 0x8, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, 0xf8) setns(r6, 0x8020000) 6.058380679s ago: executing program 3 (id=1540): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x44, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) r2 = mq_open(&(0x7f0000000040)='\x00', 0x80, 0xdd, &(0x7f0000000080)={0x4, 0x7, 0x8000000000000000, 0x9}) mq_timedreceive(r2, &(0x7f00000000c0)=""/133, 0x85, 0x9, &(0x7f00000001c0)={0x77359400}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc, 0x1, 0x0, 0xfffffffe}, 0x10) write(r8, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r6, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x4b}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4a874b2741cae054}, 0x801) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x2602}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 5.965090743s ago: executing program 4 (id=1541): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0xc8}}, 0x40000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a0000000000101040000000000000000020000002400018014000180080021006401010208000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000003c000f8008000340000000090800034000000002080002400000000508000140000000000800014000000302080002400000000308000140000000057c53e81b0377d321508e0800074000000007"], 0xa0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r4, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x7}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x2}, {}, {}, @connect={{0x6, 0x1}, {0x6, 0xf}}}, {0x13, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x80}, @raw8={"f81c703db135dc80a185eb39"}}, {0x0, 0x0, 0x0, 0x0, @time={0x6}, {}, {0x0, 0xfd}, @time}], 0x70) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x6, [@float={0xa, 0x0, 0x0, 0x10, 0x8}, @fwd={0x9}, @enum64={0x2, 0x1, 0x0, 0x13, 0x0, 0x5, [{0x9, 0x3f97, 0x6}]}, @var={0x4, 0x0, 0x0, 0xe, 0x5}, @enum={0x9, 0x3, 0x0, 0x6, 0x4, [{0x0, 0x8}, {0x5, 0x400}, {0x0, 0x4}]}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x5b, 0x0, 0x7c, 0x1}]}, {0x0, [0x0, 0x61, 0x0, 0x5f]}}, &(0x7f0000000300)=""/178, 0x92, 0xb2, 0x1, 0xf64}, 0x28) r5 = io_uring_setup(0x3adf, &(0x7f0000003580)) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xd, &(0x7f0000000040)={0x60, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x20) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) 5.880365665s ago: executing program 3 (id=1542): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="2017cc"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002480)={&(0x7f0000002440)=[{0x4, 0x2800, 0xdf, &(0x7f00000059c0)="40bda32247968c6139126ec0900855252430ae872defa11473d63346447419885614679af1b21c19f78f62a564a68869c5a8b86f15c9c8165cf8f5cd6c0f5e96258cca71b0defac3b59a3d541d2b4e7a5a8dd8d41264c7d031820d68c2d913a53f12e4ff4c3dd42f29dc12237e3323c0574a81733302ea0708d315785b02dd492ccc5234efbc206c58ed6d57f63304584af4515b49ee44dfb7336259377e65bbe957133e4e6f3289c86bf33b14df8385477c66e9676052bcf06536fb29d93248223bc9e60d9503b1a553159e32f2e677346f77c2f64115b4d97581eff5eb22"}], 0x1}) 5.73654648s ago: executing program 0 (id=1543): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d80ff0008000200", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0) accept4(r0, &(0x7f0000000200)=@qipcrtr, &(0x7f0000000100)=0x80, 0x800) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x20000000) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x5, 0xed, 0x20b1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @empty}}}, 0x90) 5.706903044s ago: executing program 0 (id=1544): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket(0x2b, 0x1, 0x1) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) ioctl$FBIOGET_FSCREENINFO(r4, 0x4602, &(0x7f00000000c0)) syz_fuse_handle_req(r0, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004080)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x7, {0xfffffffffffffffe, 0x1, 0x0, {0x3, 0x69ec2dea, 0x1, 0x201, 0x6dc6, 0x7651, 0x5, 0x7, 0xe000, 0xa000, 0xcd35, 0xee01, 0xffffffffffffffff, 0x1008, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"}) r5 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) 5.70273649s ago: executing program 4 (id=1545): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0xdddd0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x30) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) 5.528442072s ago: executing program 0 (id=1547): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = io_uring_setup(0x1fc3, &(0x7f00000002c0)={0x0, 0x4bb2, 0x8, 0x2, 0x27}) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.528001349s ago: executing program 4 (id=1548): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8010, 0xffffffffffffffff, 0xa9028000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000080), &(0x7f0000000180)=0x4) syz_open_dev$tty1(0xc, 0x4, 0x4) dup(0xffffffffffffffff) r3 = socket$inet6(0xa, 0x400000000001, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000440)={'mangle\x00', 0x2, [{}, {}]}, 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000040), 0x12) openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/275, 0x14d}], 0x1}, 0x13000) futex(&(0x7f0000000000)=0x1, 0x8, 0x82, 0x0, 0x0, 0x0) r7 = dup(0xffffffffffffffff) write$UHID_INPUT(r7, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r8, 0xc008551b, 0x0) 5.314272125s ago: executing program 0 (id=1550): socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_emit_ethernet(0x56, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffffffffffe9d}}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080), 0x7, 0x200) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c0016805800018054000c80140001"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000011c0)="28603b61ddd562888b6fb5e59d2578f901e2b7cce2bc095b91ef", 0x1a, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xa, {"a2e3ad21ed0d52f91b38090987f70e06d038e7ff7fc6e5539b3244078b089b3407326d090890e0878f0e1ac6e7049b336d959b659a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec97a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f11f46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f1b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83cd06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803335ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c134b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3765b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b33c5260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000001080)={0x0, 0x1, r1}) userfaultfd(0x1) close(0x3) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) syz_io_uring_setup(0x0, 0xfffffffffffffffe, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x7, 0x4200, 0x0, 0x0}, {0x794, 0xd201, 0x0, 0x0}], 0x2}) 4.696703828s ago: executing program 4 (id=1551): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@lsrr={0x83, 0xf, 0xe9, [@multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x2a}]}]}}}}}}}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team0\x00'}) sendmsg$nl_route(r5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 3.068751677s ago: executing program 1 (id=1553): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = epoll_create1(0x0) fcntl$dupfd(r3, 0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r2, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b0001010000000904000002070101"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_disconnect(r7) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 2.696386691s ago: executing program 2 (id=1554): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x20}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1a0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x164, 0x2, [@TCA_BPF_POLICE={0x38, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x549}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9a2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_BPF_ACT={0x120, 0x1, [@m_simple={0xe8, 0x1e, 0x0, 0x0, {{0xb}, {0xbc, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x7, 0x8, 0x1, 0xeb}}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0xd62, 0x0, 0x20000000, 0x8000, 0x6607f5ed}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x4a66, 0x4, 0x3, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x10001, 0xbc7, 0x7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xc50}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.22370539s ago: executing program 2 (id=1555): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0xc8}}, 0x40000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a0000000000101040000000000000000020000002400018014000180080021006401010208000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000003c000f8008000340000000090800034000000002080002400000000508000140000000000800014000000302080002400000000308000140000000057c53e81b0377d321508e0800074000000007"], 0xa0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r4, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x7}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x2}, {}, {}, @connect={{0x6, 0x1}, {0x6, 0xf}}}, {0x13, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x80}, @raw8={"f81c703db135dc80a185eb39"}}, {0x0, 0x0, 0x0, 0x0, @time={0x6}, {}, {0x0, 0xfd}, @time}], 0x70) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x6, [@float={0xa, 0x0, 0x0, 0x10, 0x8}, @fwd={0x9}, @enum64={0x2, 0x1, 0x0, 0x13, 0x0, 0x5, [{0x9, 0x3f97, 0x6}]}, @var={0x4, 0x0, 0x0, 0xe, 0x5}, @enum={0x9, 0x3, 0x0, 0x6, 0x4, [{0x0, 0x8}, {0x5, 0x400}, {0x0, 0x4}]}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x5b, 0x0, 0x7c, 0x1}]}, {0x0, [0x0, 0x61, 0x0, 0x5f]}}, &(0x7f0000000300)=""/178, 0x92, 0xb2, 0x1, 0xf64}, 0x28) r5 = io_uring_setup(0x3adf, &(0x7f0000003580)) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xd, &(0x7f0000000040)={0x60, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x20) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) 2.176211404s ago: executing program 4 (id=1556): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f00000190c0)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402", @ANYRESOCT, @ANYRESDEC], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x83, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c800, 0x8, 0xc1}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, 0x0) 1.996022722s ago: executing program 2 (id=1557): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0xa0, 0x0, 0x1, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xe70, 0x6, 0x3, 0x7ca, 0x6960, 0xff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) write$FUSE_NOTIFY_POLL(r4, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x9}}, 0x18) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009500", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x2100039, 0x0, 0x0, 0x1, 0x57, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x1000, {0x6, 0xcbff, 0x0, {0x5, 0x5, 0x200000003, 0x6c, 0x7, 0x6, 0x1, 0x6, 0x101, 0x4000, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 669.250881ms ago: executing program 2 (id=1558): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x810, r1, 0x7000) 364.688129ms ago: executing program 4 (id=1559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x1c) syz_emit_vhci(0x0, 0x7) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, 0x0, 0x0}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b05, &(0x7f00000004c0)={'wlan0\x00'}) keyctl$read(0x1f, 0x0, &(0x7f0000000080)=""/61, 0x3d) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380)) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r6, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x5, 0x0, r6, 0x3, 0x9, 0x3ffc}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0800080006000900000014000000451a001400640049836653e6000b32907864010104ffffffff6280bfed92a7069212147efbee989574c6ea7e928da26c29f5ea5162fd83cc899a1878f447fbd661b7c886837edc2e09a87c0f06ea70ec0b3ade82fbbfad2891176d7a0a79e23b46a7ddf8302c3785b47d8274ca1d9c4c095389d2cd37e1ac1eae05444934946d58e08970a5dcab232e7ad6becf456140a44b89bb3b938b15303302d5d860a82eebf09b1c6a733ce1a4a1433c4679fca7e5fe2e6c070c2de604d755a7a855be1c4ce8446e3d2589"], 0x22) 112.159396ms ago: executing program 2 (id=1560): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x4048044) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x703, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0) 0s ago: executing program 2 (id=1561): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x1, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x20000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x54}}, 0x0) kernel console output (not intermixed with test programs): _skb: 20 callbacks suppressed [ 428.183783][ T30] audit: type=1326 audit(1754418063.143:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.2.1266" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56c378eb69 code=0x0 [ 428.292854][T10731] 8021q: adding VLAN 0 to HW filter on device bond4 [ 428.510482][T10185] hid_parser_main: 4 callbacks suppressed [ 428.510505][T10185] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 428.564585][T10185] cp2112 0003:10C4:EA90.0017: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 428.706051][T10185] cp2112 0003:10C4:EA90.0017: Part Number: 0x00 Device Version: 0x00 [ 428.954124][ T1214] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 429.136811][ T1214] usb 1-1: config index 0 descriptor too short (expected 41076, got 116) [ 429.145336][ T1214] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.164213][ T1214] usb 1-1: config 0 has no interfaces? [ 429.172998][ T1214] usb 1-1: config index 1 descriptor too short (expected 41076, got 116) [ 429.211032][ T5867] usb 5-1: USB disconnect, device number 47 [ 429.264276][ T1214] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.312078][T10185] cp2112 0003:10C4:EA90.0017: error reading lock byte: -71 [ 429.329105][ T1214] usb 1-1: config 0 has no interfaces? [ 429.353450][ T1214] usb 1-1: config index 2 descriptor too short (expected 41076, got 116) [ 429.406839][T10185] usb 2-1: USB disconnect, device number 40 [ 429.416639][ T1214] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.447192][ T1214] usb 1-1: config 0 has no interfaces? [ 429.503423][ T1214] usb 1-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 429.544802][ T1214] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 429.599484][ T1214] usb 1-1: Product: syz [ 429.603681][ T1214] usb 1-1: Manufacturer: syz [ 429.628618][ T1214] usb 1-1: SerialNumber: syz [ 429.660053][ T1214] usb 1-1: config 0 descriptor?? [ 429.998174][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1267'. [ 430.007645][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1267'. [ 430.230831][T10185] usb 1-1: USB disconnect, device number 51 [ 431.160667][T10764] netlink: 'syz.4.1275': attribute type 1 has an invalid length. [ 431.660666][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1277'. [ 431.696219][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1277'. [ 431.722643][T10779] 8021q: adding VLAN 0 to HW filter on device batadv16 [ 431.741877][T10779] team0: Port device batadv16 added [ 431.759604][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1277'. [ 431.985554][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1277'. [ 432.095679][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1277'. [ 432.225389][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1277'. [ 432.344270][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1277'. [ 432.514253][T10185] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 432.684192][T10185] usb 5-1: Using ep0 maxpacket: 8 [ 432.695552][T10185] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 432.707923][T10185] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 432.774036][ T1214] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 432.790985][T10185] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 432.826383][T10185] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 432.981770][ T1214] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.994320][T10185] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 433.024309][ T1214] usb 1-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 433.037532][T10185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.084283][ T1214] usb 1-1: config 0 interface 0 has no altsetting 0 [ 433.090941][ T1214] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 433.100158][T10185] usb 5-1: Product: syz [ 433.119175][T10185] usb 5-1: Manufacturer: syz [ 433.212331][T10185] usb 5-1: SerialNumber: syz [ 433.252568][ T1214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.282198][ T1214] usb 1-1: config 0 descriptor?? [ 433.324818][ T1214] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input20 [ 433.360751][T10784] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 433.448250][T10185] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 433.486860][T10185] usbtest 5-1:1.0: Linux user mode ISO test driver [ 433.511059][T10185] usbtest 5-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 433.788644][T10788] loop2: detected capacity change from 0 to 7 [ 433.859876][T10185] usb 5-1: USB disconnect, device number 48 [ 434.092292][ T5218] bcm5974 1-1:0.0: could not read from device [ 434.157363][ T1214] usb 1-1: USB disconnect, device number 52 [ 434.182676][ T5983] bcm5974 1-1:0.0: could not read from device [ 436.937864][T10854] 8021q: adding VLAN 0 to HW filter on device batadv20 [ 437.019676][T10854] team0: Port device batadv20 added [ 437.373297][ T1214] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 437.546905][ T1214] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.577223][ T1214] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 437.620582][ T1214] usb 3-1: config 0 interface 0 has no altsetting 0 [ 437.648141][ T1214] usb 3-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 437.674309][ T1214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.692040][ T1214] usb 3-1: config 0 descriptor?? [ 437.707331][T10861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1296'. [ 437.731594][ T1214] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input21 [ 437.788237][T10861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1296'. [ 438.111909][T10870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1297'. [ 438.459603][ T5218] bcm5974 3-1:0.0: could not read from device [ 438.508328][ T5218] bcm5974 3-1:0.0: could not read from device [ 438.591278][ T1214] usb 3-1: USB disconnect, device number 48 [ 438.680474][ T5983] bcm5974 3-1:0.0: could not read from device [ 438.755078][T10880] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1301'. [ 438.780764][T10880] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 438.834858][T10880] openvswitch: netlink: Message has 1 unknown bytes. [ 439.268767][T10893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1302'. [ 439.277975][T10893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1302'. [ 439.941316][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.973516][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.057870][T10893] hub 9-0:1.0: USB hub found [ 440.064112][T10893] hub 9-0:1.0: 1 port detected [ 440.654055][ T10] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 441.216793][ T10] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 441.248427][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.274036][ T10] usb 5-1: config 0 has no interface number 0 [ 441.294066][ T10] usb 5-1: config 0 interface 255 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 441.357032][ T10] usb 5-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 441.385848][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.393870][ T10] usb 5-1: Product: syz [ 441.464071][ T10] usb 5-1: Manufacturer: syz [ 441.499934][ T10] usb 5-1: SerialNumber: syz [ 441.569573][ T10] usb 5-1: config 0 descriptor?? [ 441.626465][ T10] vmk80xx 5-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 441.789359][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1312'. [ 441.833361][T10925] bridge_slave_1: left allmulticast mode [ 441.880229][T10925] bridge_slave_1: left promiscuous mode [ 441.886330][T10925] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.058670][T10925] bridge_slave_0: left allmulticast mode [ 442.078946][T10925] bridge_slave_0: left promiscuous mode [ 442.087686][T10925] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.353415][ T9] usb 5-1: USB disconnect, device number 49 [ 443.054279][ T9] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 443.207193][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.217714][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 443.231425][ T9] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 443.257209][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 443.277046][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.356216][ T9] usb 5-1: Product: syz [ 443.377947][ T9] usb 5-1: Manufacturer: syz [ 443.391364][ T9] usb 5-1: SerialNumber: syz [ 443.415115][ T9] usb 5-1: config 0 descriptor?? [ 443.426002][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.457183][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.858383][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 443.879884][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 443.889142][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.909691][ T10] usb 2-1: config 0 descriptor?? [ 444.471270][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 444.479335][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 444.536443][ T9] usb 5-1: USB disconnect, device number 50 [ 444.559033][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 444.594048][ T1214] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 444.606924][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 444.762553][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 444.784613][ T1214] usb 1-1: Using ep0 maxpacket: 8 [ 444.798957][ T1214] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 444.809096][ T1214] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 44809, setting to 1024 [ 444.823412][ T1214] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 444.853877][ T1214] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 444.888744][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 444.898581][ T1214] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 444.909106][ T1214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.918600][ T1214] usb 1-1: Product: syz [ 444.929331][ T1214] usb 1-1: Manufacturer: syz [ 444.939506][ T1214] usb 1-1: SerialNumber: syz [ 444.955705][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 444.976916][T10948] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 444.984870][T10948] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 445.003429][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 445.033270][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 445.131995][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 445.228341][ T30] audit: type=1326 audit(1754418080.193:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10952 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736b18eb69 code=0x7ffc0000 [ 445.250785][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.304555][ T10] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 445.326508][T10957] loop2: detected capacity change from 0 to 7 [ 445.386630][ T30] audit: type=1326 audit(1754418080.233:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10952 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736b18eb69 code=0x7ffc0000 [ 445.411318][T10965] FAULT_INJECTION: forcing a failure. [ 445.411318][T10965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.436949][ T10] usb 2-1: USB disconnect, device number 41 [ 445.469259][T10965] CPU: 0 UID: 0 PID: 10965 Comm: syz.4.1323 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 445.469283][T10965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 445.469293][T10965] Call Trace: [ 445.469300][T10965] [ 445.469307][T10965] dump_stack_lvl+0x189/0x250 [ 445.469328][T10965] ? __pfx____ratelimit+0x10/0x10 [ 445.469345][T10965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.469360][T10965] ? __pfx__printk+0x10/0x10 [ 445.469381][T10965] ? __might_fault+0xb0/0x130 [ 445.469408][T10965] should_fail_ex+0x414/0x560 [ 445.469426][T10965] _copy_from_user+0x2d/0xb0 [ 445.469440][T10965] memdup_user+0x5e/0xd0 [ 445.469455][T10965] strndup_user+0x68/0xd0 [ 445.469470][T10965] __se_sys_mount+0x9c/0x410 [ 445.469488][T10965] ? ksys_write+0x22a/0x250 [ 445.469509][T10965] ? __pfx___se_sys_mount+0x10/0x10 [ 445.469528][T10965] ? rcu_is_watching+0x15/0xb0 [ 445.469546][T10965] ? do_syscall_64+0xbe/0x3b0 [ 445.469566][T10965] ? __x64_sys_mount+0x20/0xc0 [ 445.469585][T10965] do_syscall_64+0xfa/0x3b0 [ 445.469600][T10965] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.469624][T10965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.469638][T10965] ? clear_bhb_loop+0x60/0xb0 [ 445.469658][T10965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.469671][T10965] RIP: 0033:0x7f8bab38eb69 [ 445.469683][T10965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.469695][T10965] RSP: 002b:00007f8bac1a0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 445.469710][T10965] RAX: ffffffffffffffda RBX: 00007f8bab5b5fa0 RCX: 00007f8bab38eb69 [ 445.469720][T10965] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000200000000040 [ 445.469729][T10965] RBP: 00007f8bac1a0090 R08: 0000200000000440 R09: 0000000000000000 [ 445.469739][T10965] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 445.469748][T10965] R13: 0000000000000000 R14: 00007f8bab5b5fa0 R15: 00007f8bab6dfa28 [ 445.469769][T10965] [ 445.723248][ T30] audit: type=1326 audit(1754418080.243:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10952 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f736b18eb69 code=0x7ffc0000 [ 445.746215][ T30] audit: type=1326 audit(1754418080.243:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10952 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736b18eb69 code=0x7ffc0000 [ 445.768752][ T30] audit: type=1326 audit(1754418080.243:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10952 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736b18eb69 code=0x7ffc0000 [ 445.791530][ T30] audit: type=1326 audit(1754418080.243:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10952 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f736b18eb69 code=0x7ffc0000 [ 445.814109][ T30] audit: type=1326 audit(1754418080.243:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10952 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736b18eb69 code=0x7ffc0000 [ 445.836561][ T30] audit: type=1326 audit(1754418080.243:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10952 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f736b18eb69 code=0x7ffc0000 [ 445.858936][ T30] audit: type=1326 audit(1754418080.243:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10952 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736b18eb69 code=0x7ffc0000 [ 445.884039][ T30] audit: type=1326 audit(1754418080.243:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10952 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f736b18eb69 code=0x7ffc0000 [ 445.915062][T10185] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 446.001970][T10966] fido_id[10966]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 446.291306][T10185] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 446.472305][T10185] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 446.492045][T10185] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 446.535465][T10185] usb 3-1: Product: syz [ 446.554965][T10185] usb 3-1: Manufacturer: syz [ 446.569893][T10185] usb 3-1: SerialNumber: syz [ 446.955026][ T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 447.080796][T10185] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 49 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 447.146607][ T9] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 447.178215][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 447.227148][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 447.263759][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 447.295000][ T9] usb 5-1: SerialNumber: syz [ 447.418760][ T10] usb 3-1: USB disconnect, device number 49 [ 447.428287][ T10] usblp0: removed [ 447.549422][ T9] usb 5-1: 0:2 : does not exist [ 447.576379][ T9] usb 5-1: unit 5: unexpected type 0x09 [ 447.655453][ T9] usb 5-1: USB disconnect, device number 51 [ 447.792518][ T7774] udevd[7774]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.828671][ T1214] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 447.884631][ T1214] usbtest 1-1:1.0: Linux user mode ISO test driver [ 447.904250][T10185] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 447.934512][ T1214] usbtest 1-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 447.974233][ T1214] usb 1-1: USB disconnect, device number 53 [ 448.096096][T10185] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 448.124372][T10185] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.150468][T10185] usb 3-1: config 0 interface 0 has no altsetting 0 [ 448.165973][T10185] usb 3-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 448.198555][T10185] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.224176][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 448.227285][T10185] usb 3-1: config 0 descriptor?? [ 448.387957][ T9] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 448.407362][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 448.434165][ T9] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 448.454571][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.495290][ T9] usb 2-1: config 0 descriptor?? [ 448.658653][T10998] FAULT_INJECTION: forcing a failure. [ 448.658653][T10998] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 448.672343][T10998] CPU: 0 UID: 0 PID: 10998 Comm: syz.4.1334 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 448.672376][T10998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 448.672387][T10998] Call Trace: [ 448.672395][T10998] [ 448.672403][T10998] dump_stack_lvl+0x189/0x250 [ 448.672427][T10998] ? __pfx____ratelimit+0x10/0x10 [ 448.672447][T10998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.672471][T10998] ? __pfx__printk+0x10/0x10 [ 448.672495][T10998] ? fs_reclaim_acquire+0x7d/0x100 [ 448.672528][T10998] should_fail_ex+0x414/0x560 [ 448.672552][T10998] prepare_alloc_pages+0x213/0x610 [ 448.672577][T10998] __alloc_frozen_pages_noprof+0x123/0x370 [ 448.672599][T10998] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 448.672621][T10998] ? _copy_from_iter+0x24c/0x16f0 [ 448.672642][T10998] ? kasan_save_track+0x3e/0x80 [ 448.672665][T10998] ? policy_nodemask+0x27c/0x720 [ 448.672684][T10998] ? ___sys_sendmsg+0x21f/0x2a0 [ 448.672706][T10998] ? __x64_sys_sendmsg+0x19b/0x260 [ 448.672726][T10998] ? do_syscall_64+0xfa/0x3b0 [ 448.672750][T10998] alloc_pages_mpol+0x232/0x4a0 [ 448.672779][T10998] alloc_pages_noprof+0xa9/0x190 [ 448.672804][T10998] rds_page_remainder_alloc+0x54/0x1340 [ 448.672826][T10998] ? page_copy_sane+0x4e/0x280 [ 448.672850][T10998] ? copy_page_from_iter+0x14a/0x170 [ 448.672876][T10998] rds_message_copy_from_user+0x32f/0xaa0 [ 448.672908][T10998] ? __pfx_rds_message_copy_from_user+0x10/0x10 [ 448.672929][T10998] ? __asan_memset+0x22/0x50 [ 448.672950][T10998] ? rds_message_alloc_sgs+0xab/0x180 [ 448.672972][T10998] rds_sendmsg+0xd74/0x1f00 [ 448.673008][T10998] ? __pfx_rds_sendmsg+0x10/0x10 [ 448.673025][T10998] ? aa_sk_perm+0x81e/0x950 [ 448.673050][T10998] ? __pfx_aa_sk_perm+0x10/0x10 [ 448.673067][T10998] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 448.673096][T10998] ? aa_sock_msg_perm+0xf1/0x1d0 [ 448.673119][T10998] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 448.673137][T10998] ? __pfx_rds_sendmsg+0x10/0x10 [ 448.673157][T10998] __sock_sendmsg+0x219/0x270 [ 448.673179][T10998] ____sys_sendmsg+0x505/0x830 [ 448.673207][T10998] ? __pfx_____sys_sendmsg+0x10/0x10 [ 448.673238][T10998] ? import_iovec+0x74/0xa0 [ 448.673258][T10998] ___sys_sendmsg+0x21f/0x2a0 [ 448.673282][T10998] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.673339][T10998] ? __fget_files+0x2a/0x420 [ 448.673366][T10998] ? __fget_files+0x3a0/0x420 [ 448.673399][T10998] __x64_sys_sendmsg+0x19b/0x260 [ 448.673423][T10998] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 448.673456][T10998] ? __pfx_ksys_write+0x10/0x10 [ 448.673475][T10998] ? rcu_is_watching+0x15/0xb0 [ 448.673497][T10998] ? do_syscall_64+0xbe/0x3b0 [ 448.673521][T10998] do_syscall_64+0xfa/0x3b0 [ 448.673542][T10998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.673558][T10998] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 448.673575][T10998] ? clear_bhb_loop+0x60/0xb0 [ 448.673595][T10998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.673611][T10998] RIP: 0033:0x7f8bab38eb69 [ 448.673627][T10998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.673644][T10998] RSP: 002b:00007f8bac1a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.673663][T10998] RAX: ffffffffffffffda RBX: 00007f8bab5b5fa0 RCX: 00007f8bab38eb69 [ 448.673677][T10998] RDX: 0000000000000040 RSI: 00002000000001c0 RDI: 0000000000000004 [ 448.673689][T10998] RBP: 00007f8bac1a0090 R08: 0000000000000000 R09: 0000000000000000 [ 448.673700][T10998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 448.673710][T10998] R13: 0000000000000000 R14: 00007f8bab5b5fa0 R15: 00007f8bab6dfa28 [ 448.673739][T10998] [ 449.332461][ T9] corsair-psu 0003:1B1C:1C03.001A: hidraw0: USB HID v4.06 Device [HID 1b1c:1c03] on usb-dummy_hcd.1-1/input0 [ 449.404113][ T9] corsair-psu 0003:1B1C:1C03.001A: unable to initialize device (-38) [ 449.417674][ T9] corsair-psu 0003:1B1C:1C03.001A: probe with driver corsair-psu failed with error -38 [ 449.529632][T10185] usb 2-1: USB disconnect, device number 42 [ 449.567665][T11011] syzkaller1: entered promiscuous mode [ 449.573258][T11011] syzkaller1: entered allmulticast mode [ 449.643774][T10315] usb 3-1: USB disconnect, device number 50 [ 450.384163][ T1214] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 450.421330][T11017] syzkaller1: entered promiscuous mode [ 450.427072][T11017] syzkaller1: entered allmulticast mode [ 450.564207][ T1214] usb 1-1: Using ep0 maxpacket: 16 [ 450.580285][ T1214] usb 1-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 450.589717][ T1214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.705690][ T1214] usb 1-1: Product: syz [ 450.734218][ T1214] usb 1-1: Manufacturer: syz [ 450.762387][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 450.762404][ T30] audit: type=1326 audit(1754418085.723:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c478eb69 code=0x7ffc0000 [ 450.790960][ C1] vkms_vblank_simulate: vblank timer overrun [ 450.822253][ T1214] usb 1-1: SerialNumber: syz [ 450.839684][ T1214] usb 1-1: config 0 descriptor?? [ 450.869534][ T1214] usb 1-1: Found UVC 0.00 device syz (046d:0721) [ 450.877984][ T1214] usb 1-1: No valid video chain found. [ 450.883563][ T30] audit: type=1326 audit(1754418085.723:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c478eb69 code=0x7ffc0000 [ 450.906321][ C1] vkms_vblank_simulate: vblank timer overrun [ 450.950553][ T30] audit: type=1326 audit(1754418085.723:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff1c478eb69 code=0x7ffc0000 [ 450.973866][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.044280][ T30] audit: type=1326 audit(1754418085.723:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c478eb69 code=0x7ffc0000 [ 451.086022][ T9] usb 1-1: USB disconnect, device number 54 [ 451.207856][ T30] audit: type=1326 audit(1754418085.723:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c478eb69 code=0x7ffc0000 [ 451.299168][ T30] audit: type=1326 audit(1754418085.723:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7ff1c478eb69 code=0x7ffc0000 [ 451.321449][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.400106][ T30] audit: type=1326 audit(1754418085.723:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c478eb69 code=0x7ffc0000 [ 451.422447][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.491994][T11033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.594289][ T30] audit: type=1326 audit(1754418085.723:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff1c478eb69 code=0x7ffc0000 [ 451.705374][ T30] audit: type=1326 audit(1754418085.723:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c478eb69 code=0x7ffc0000 [ 451.974428][ T30] audit: type=1326 audit(1754418085.723:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1c478eb69 code=0x7ffc0000 [ 452.285587][T11048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1346'. [ 452.501721][T11048] netlink: 'syz.0.1346': attribute type 6 has an invalid length. [ 452.520068][T11048] netlink: 'syz.0.1346': attribute type 1 has an invalid length. [ 452.591774][T11048] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1346'. [ 453.270333][T11060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1349'. [ 453.279353][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1349'. [ 453.347220][T11060] hub 9-0:1.0: USB hub found [ 453.353429][T11060] hub 9-0:1.0: 1 port detected [ 454.513824][T11082] ALSA: mixer_oss: invalid OSS volume 'nl0' [ 454.534246][T11082] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 454.544063][ T9] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 454.563023][T11082] ALSA: mixer_oss: invalid OSS volume '3' [ 454.576390][T11082] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 454.604213][T11082] ALSA: mixer_oss: invalid OSS volume '4' [ 454.609999][T11082] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 454.684254][ T9] usb 5-1: device descriptor read/64, error -71 [ 454.934103][T11091] 8021q: adding VLAN 0 to HW filter on device bond5 [ 455.034436][ T1214] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 455.114794][T10315] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 455.124202][ T9] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 455.204856][ T1214] usb 2-1: Using ep0 maxpacket: 32 [ 455.216329][ T1214] usb 2-1: config 0 has an invalid interface number: 205 but max is 0 [ 455.224862][ T1214] usb 2-1: config 0 has no interface number 0 [ 455.232119][ T1214] usb 2-1: config 0 interface 205 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 455.243026][ T1214] usb 2-1: config 0 interface 205 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 455.264388][T10315] usb 4-1: Using ep0 maxpacket: 8 [ 455.271540][T10315] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 455.284603][T10315] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 455.285096][ T9] usb 5-1: device descriptor read/64, error -71 [ 455.299073][ T1214] usb 2-1: New USB device found, idVendor=066b, idProduct=400b, bcdDevice=dd.51 [ 455.310012][ T1214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.319292][T10315] usb 4-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 455.336251][ T1214] usb 2-1: Product: syz [ 455.443286][ T9] usb usb5-port1: attempt power cycle [ 455.443366][T10315] usb 4-1: Product: syz [ 455.456747][ T1214] usb 2-1: Manufacturer: syz [ 455.470734][ T1214] usb 2-1: SerialNumber: syz [ 455.478408][T10315] usb 4-1: Manufacturer: syz [ 455.565576][T10315] usb 4-1: SerialNumber: syz [ 455.575358][ T1214] usb 2-1: config 0 descriptor?? [ 455.586737][T10315] usb 4-1: config 0 descriptor?? [ 455.793566][ T1214] pegasus 2-1:0.205: probe with driver pegasus failed with error -71 [ 455.805630][T10315] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 455.844115][ T9] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 455.862739][ T1214] usb 2-1: USB disconnect, device number 43 [ 455.874637][ T9] usb 5-1: device descriptor read/8, error -71 [ 456.111967][T11104] tipc: Started in network mode [ 456.124245][ T9] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 456.142097][T11104] tipc: Node identity b6b73fff6e1d, cluster identity 4711 [ 456.155458][T11104] tipc: Enabled bearer , priority 0 [ 456.167948][T11105] syzkaller0: entered promiscuous mode [ 456.172558][ T9] usb 5-1: device descriptor read/8, error -71 [ 456.173454][T11105] syzkaller0: entered allmulticast mode [ 456.272070][T11104] tipc: Resetting bearer [ 456.283442][T11103] tipc: Resetting bearer [ 456.295636][ T9] usb usb5-port1: unable to enumerate USB device [ 456.333560][T11103] tipc: Disabling bearer [ 456.484707][T11113] FAULT_INJECTION: forcing a failure. [ 456.484707][T11113] name failslab, interval 1, probability 0, space 0, times 0 [ 456.504674][T11113] CPU: 1 UID: 0 PID: 11113 Comm: syz.0.1368 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 456.504704][T11113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 456.504715][T11113] Call Trace: [ 456.504723][T11113] [ 456.504731][T11113] dump_stack_lvl+0x189/0x250 [ 456.504757][T11113] ? __pfx____ratelimit+0x10/0x10 [ 456.504784][T11113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.504804][T11113] ? __pfx__printk+0x10/0x10 [ 456.504841][T11113] should_fail_ex+0x414/0x560 [ 456.504867][T11113] should_failslab+0xa8/0x100 [ 456.504893][T11113] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 456.504916][T11113] ? __alloc_skb+0x112/0x2d0 [ 456.504942][T11113] __alloc_skb+0x112/0x2d0 [ 456.504968][T11113] xfrm_alloc_compat+0x1a6/0x16f0 [ 456.504993][T11113] ? xfrm_get_translator+0x1b/0x240 [ 456.505012][T11113] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 456.505032][T11113] xfrm_nlmsg_multicast+0xda/0x1f0 [ 456.505060][T11113] xfrm_send_state_notify+0xc5f/0x18b0 [ 456.505091][T11113] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 456.505112][T11113] ? km_state_notify+0x25/0x1f0 [ 456.505144][T11113] ? km_state_notify+0x25/0x1f0 [ 456.505166][T11113] ? km_state_notify+0x25/0x1f0 [ 456.505188][T11113] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 456.505212][T11113] km_state_notify+0x10d/0x1f0 [ 456.505239][T11113] xfrm_add_sa+0x3752/0x4070 [ 456.505266][T11113] ? __pfx_xfrm_add_sa+0x10/0x10 [ 456.505287][T11113] ? apparmor_capable+0x137/0x1b0 [ 456.505311][T11113] ? __nla_parse+0x40/0x60 [ 456.505337][T11113] xfrm_user_rcv_msg+0x7a0/0xab0 [ 456.505368][T11113] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 456.505430][T11113] ? __pfx___mutex_trylock_common+0x10/0x10 [ 456.505455][T11113] ? rcu_is_watching+0x15/0xb0 [ 456.505473][T11113] ? trace_contention_end+0x39/0x120 [ 456.505492][T11113] ? __mutex_lock+0x335/0x1360 [ 456.505519][T11113] netlink_rcv_skb+0x205/0x470 [ 456.505538][T11113] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 456.505564][T11113] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 456.505600][T11113] ? netlink_deliver_tap+0x2e/0x1b0 [ 456.505620][T11113] ? netlink_deliver_tap+0x2e/0x1b0 [ 456.505643][T11113] xfrm_netlink_rcv+0x79/0x90 [ 456.505668][T11113] netlink_unicast+0x82c/0x9e0 [ 456.505696][T11113] ? __pfx_netlink_unicast+0x10/0x10 [ 456.505717][T11113] ? netlink_sendmsg+0x642/0xb30 [ 456.505735][T11113] ? skb_put+0x11b/0x210 [ 456.505760][T11113] netlink_sendmsg+0x805/0xb30 [ 456.505866][T11113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.505893][T11113] ? aa_sock_msg_perm+0xf1/0x1d0 [ 456.505917][T11113] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 456.505936][T11113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.505958][T11113] __sock_sendmsg+0x219/0x270 [ 456.505981][T11113] ____sys_sendmsg+0x505/0x830 [ 456.506010][T11113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.506043][T11113] ? import_iovec+0x74/0xa0 [ 456.506064][T11113] ___sys_sendmsg+0x21f/0x2a0 [ 456.506090][T11113] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.506151][T11113] ? __fget_files+0x2a/0x420 [ 456.506174][T11113] ? __fget_files+0x3a0/0x420 [ 456.506208][T11113] __x64_sys_sendmsg+0x19b/0x260 [ 456.506234][T11113] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 456.506268][T11113] ? __pfx_ksys_write+0x10/0x10 [ 456.506287][T11113] ? rcu_is_watching+0x15/0xb0 [ 456.506310][T11113] ? do_syscall_64+0xbe/0x3b0 [ 456.506333][T11113] do_syscall_64+0xfa/0x3b0 [ 456.506350][T11113] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.506369][T11113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.506385][T11113] ? clear_bhb_loop+0x60/0xb0 [ 456.506406][T11113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.506421][T11113] RIP: 0033:0x7f9206d8eb69 [ 456.506437][T11113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.506452][T11113] RSP: 002b:00007f9207c75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.506470][T11113] RAX: ffffffffffffffda RBX: 00007f9206fb5fa0 RCX: 00007f9206d8eb69 [ 456.506484][T11113] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 456.506495][T11113] RBP: 00007f9207c75090 R08: 0000000000000000 R09: 0000000000000000 [ 456.506507][T11113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 456.506518][T11113] R13: 0000000000000000 R14: 00007f9206fb5fa0 R15: 00007f92070dfa28 [ 456.506547][T11113] [ 456.507453][T10298] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 456.718293][T10315] gspca_sunplus: reg_w_riv err -110 [ 457.003754][T10298] usb 3-1: device descriptor read/64, error -71 [ 457.054322][T10315] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 457.264054][T10298] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 457.394033][T10298] usb 3-1: device descriptor read/64, error -71 [ 457.478057][T11127] FAULT_INJECTION: forcing a failure. [ 457.478057][T11127] name failslab, interval 1, probability 0, space 0, times 0 [ 457.514448][T10298] usb usb3-port1: attempt power cycle [ 457.514913][T11127] CPU: 1 UID: 0 PID: 11127 Comm: syz.1.1371 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 457.514937][T11127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 457.514948][T11127] Call Trace: [ 457.514956][T11127] [ 457.514965][T11127] dump_stack_lvl+0x189/0x250 [ 457.514989][T11127] ? __pfx____ratelimit+0x10/0x10 [ 457.515009][T11127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.515029][T11127] ? __pfx__printk+0x10/0x10 [ 457.515065][T11127] should_fail_ex+0x414/0x560 [ 457.515088][T11127] should_failslab+0xa8/0x100 [ 457.515113][T11127] __kmalloc_cache_noprof+0x70/0x3d0 [ 457.515134][T11127] ? sctp_add_bind_addr+0x8c/0x370 [ 457.515157][T11127] sctp_add_bind_addr+0x8c/0x370 [ 457.515179][T11127] sctp_copy_local_addr_list+0x30b/0x4e0 [ 457.515201][T11127] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 457.515220][T11127] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 457.515239][T11127] ? sctp_v6_is_any+0x64/0x80 [ 457.515259][T11127] ? sctp_copy_one_addr+0x93/0x360 [ 457.515281][T11127] sctp_bind_addr_copy+0xb3/0x3c0 [ 457.515300][T11127] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 457.515328][T11127] sctp_connect_new_asoc+0x2e0/0x690 [ 457.515352][T11127] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 457.515381][T11127] ? sctp_inet6_send_verify+0x23a/0x300 [ 457.515398][T11127] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 457.515421][T11127] __sctp_connect+0x5ba/0xd50 [ 457.515452][T11127] ? __pfx___sctp_connect+0x10/0x10 [ 457.515471][T11127] ? __local_bh_enable_ip+0x12d/0x1c0 [ 457.515488][T11127] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.515507][T11127] ? __local_bh_enable_ip+0x12d/0x1c0 [ 457.515522][T11127] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 457.515541][T11127] ? security_sctp_bind_connect+0x7e/0x2e0 [ 457.515563][T11127] sctp_setsockopt_connectx+0x100/0x1b0 [ 457.515591][T11127] sctp_setsockopt+0x6d9/0x1200 [ 457.515611][T11127] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 457.515633][T11127] do_sock_setsockopt+0x179/0x1b0 [ 457.515660][T11127] __x64_sys_setsockopt+0x13f/0x1b0 [ 457.515693][T11127] do_syscall_64+0xfa/0x3b0 [ 457.515711][T11127] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.515729][T11127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.515745][T11127] ? clear_bhb_loop+0x60/0xb0 [ 457.515766][T11127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.515782][T11127] RIP: 0033:0x7ff1c478eb69 [ 457.515797][T11127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.515812][T11127] RSP: 002b:00007ff1c56c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 457.515830][T11127] RAX: ffffffffffffffda RBX: 00007ff1c49b5fa0 RCX: 00007ff1c478eb69 [ 457.515843][T11127] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 457.515853][T11127] RBP: 00007ff1c56c2090 R08: 000000000000001c R09: 0000000000000000 [ 457.515864][T11127] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 457.515874][T11127] R13: 0000000000000000 R14: 00007ff1c49b5fa0 R15: 00007ff1c4adfa28 [ 457.515903][T11127] [ 457.700908][ T30] kauditd_printk_skb: 193 callbacks suppressed [ 457.700925][ T30] audit: type=1326 audit(1754418092.663:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bab38eb69 code=0x7ffc0000 [ 457.924278][ T30] audit: type=1326 audit(1754418092.793:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f8bab38eb69 code=0x7ffc0000 [ 457.946565][ C1] vkms_vblank_simulate: vblank timer overrun [ 457.953352][ T30] audit: type=1326 audit(1754418092.793:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bab38eb69 code=0x7ffc0000 [ 457.994568][ T30] audit: type=1326 audit(1754418092.793:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bab38eb69 code=0x7ffc0000 [ 458.107620][T11133] FAULT_INJECTION: forcing a failure. [ 458.107620][T11133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.120876][ T30] audit: type=1326 audit(1754418092.803:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f8bab38eb69 code=0x7ffc0000 [ 458.120924][ T30] audit: type=1326 audit(1754418092.803:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bab38eb69 code=0x7ffc0000 [ 458.120967][ T30] audit: type=1326 audit(1754418092.803:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f8bab38eb69 code=0x7ffc0000 [ 458.121004][ T30] audit: type=1326 audit(1754418092.803:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bab38eb69 code=0x7ffc0000 [ 458.121040][ T30] audit: type=1326 audit(1754418092.803:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bab38eb69 code=0x7ffc0000 [ 458.121074][ T30] audit: type=1326 audit(1754418092.803:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bab38eb69 code=0x7ffc0000 [ 458.190052][T11133] CPU: 0 UID: 0 PID: 11133 Comm: syz.1.1373 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 458.190079][T11133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 458.190090][T11133] Call Trace: [ 458.190097][T11133] [ 458.190105][T11133] dump_stack_lvl+0x189/0x250 [ 458.190130][T11133] ? __pfx____ratelimit+0x10/0x10 [ 458.190149][T11133] ? __pfx_dump_stack_lvl+0x10/0x10 [ 458.190168][T11133] ? __pfx__printk+0x10/0x10 [ 458.190189][T11133] ? __might_fault+0xb0/0x130 [ 458.190221][T11133] should_fail_ex+0x414/0x560 [ 458.190245][T11133] _copy_from_user+0x2d/0xb0 [ 458.190261][T11133] ___sys_sendmsg+0x158/0x2a0 [ 458.190286][T11133] ? __pfx____sys_sendmsg+0x10/0x10 [ 458.190349][T11133] ? __might_fault+0xb0/0x130 [ 458.190379][T11133] __sys_sendmmsg+0x227/0x430 [ 458.190406][T11133] ? __pfx___sys_sendmmsg+0x10/0x10 [ 458.190426][T11133] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 458.190470][T11133] ? ksys_write+0x22a/0x250 [ 458.190492][T11133] ? __pfx_ksys_write+0x10/0x10 [ 458.190519][T11133] __x64_sys_sendmmsg+0xa0/0xc0 [ 458.190542][T11133] do_syscall_64+0xfa/0x3b0 [ 458.190560][T11133] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.190578][T11133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.190594][T11133] ? clear_bhb_loop+0x60/0xb0 [ 458.190614][T11133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.190629][T11133] RIP: 0033:0x7ff1c478eb69 [ 458.190645][T11133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.190658][T11133] RSP: 002b:00007ff1c56c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 458.190676][T11133] RAX: ffffffffffffffda RBX: 00007ff1c49b5fa0 RCX: 00007ff1c478eb69 [ 458.190689][T11133] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 458.190700][T11133] RBP: 00007ff1c56c2090 R08: 0000000000000000 R09: 0000000000000000 [ 458.190711][T11133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.190721][T11133] R13: 0000000000000000 R14: 00007ff1c49b5fa0 R15: 00007ff1c4adfa28 [ 458.190746][T11133] [ 458.211139][ C1] vkms_vblank_simulate: vblank timer overrun [ 458.299998][T11137] syz_tun: entered allmulticast mode [ 458.534412][T10298] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 458.565077][T10298] usb 3-1: device descriptor read/8, error -71 [ 458.610336][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 458.646647][ T10] usb 4-1: USB disconnect, device number 51 [ 458.804627][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 458.817219][T11146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1376'. [ 458.846204][T10298] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 458.871120][ T9] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 458.886033][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.895787][T10298] usb 3-1: device descriptor read/8, error -71 [ 458.971568][ T9] usb 5-1: Product: syz [ 458.977796][ T9] usb 5-1: Manufacturer: syz [ 458.983626][T11143] team0: Port device batadv10 removed [ 458.989337][ T9] usb 5-1: SerialNumber: syz [ 459.001631][ T9] usb 5-1: config 0 descriptor?? [ 459.020542][T11143] team0: Port device batadv11 removed [ 459.039420][T11143] team0: Port device batadv12 removed [ 459.053762][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 459.067993][T11143] team0: Port device batadv13 removed [ 459.079310][T10298] usb usb3-port1: unable to enumerate USB device [ 459.106058][T11143] team0: Port device batadv14 removed [ 459.130290][T11143] team0: Port device batadv15 removed [ 459.165870][T11143] team0: Port device batadv16 removed [ 459.615351][ T9] gspca_ov534_9: reg_w failed -110 [ 459.701838][T11155] hub 9-0:1.0: USB hub found [ 459.707766][T11155] hub 9-0:1.0: 1 port detected [ 459.767592][T11135] syz_tun: left allmulticast mode [ 459.963625][T11161] hub 9-0:1.0: USB hub found [ 459.970711][T11161] hub 9-0:1.0: 1 port detected [ 460.048860][T11162] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 460.164560][ T9] gspca_ov534_9: Unknown sensor 0000 [ 460.164693][ T9] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 461.024458][ T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 461.254166][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 461.284099][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 461.451665][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 3145, setting to 1024 [ 461.466902][T11171] FAULT_INJECTION: forcing a failure. [ 461.466902][T11171] name failslab, interval 1, probability 0, space 0, times 0 [ 461.489114][T11171] CPU: 1 UID: 0 PID: 11171 Comm: syz.3.1382 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 461.489137][T11171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 461.489147][T11171] Call Trace: [ 461.489154][T11171] [ 461.489162][T11171] dump_stack_lvl+0x189/0x250 [ 461.489185][T11171] ? __pfx____ratelimit+0x10/0x10 [ 461.489203][T11171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.489222][T11171] ? __pfx__printk+0x10/0x10 [ 461.489248][T11171] ? __pfx___might_resched+0x10/0x10 [ 461.489263][T11171] ? fs_reclaim_acquire+0x7d/0x100 [ 461.489291][T11171] should_fail_ex+0x414/0x560 [ 461.489314][T11171] should_failslab+0xa8/0x100 [ 461.489338][T11171] kmem_cache_alloc_noprof+0x73/0x3c0 [ 461.489366][T11171] ? ep_insert+0x272/0x19e0 [ 461.489392][T11171] ep_insert+0x272/0x19e0 [ 461.489429][T11171] ? __pfx_ep_insert+0x10/0x10 [ 461.489450][T11171] ? __pfx___mutex_lock+0x10/0x10 [ 461.489471][T11171] ? __fget_files+0x2a/0x420 [ 461.489501][T11171] ? __fget_files+0x2a/0x420 [ 461.489521][T11171] ? __fget_files+0x3a0/0x420 [ 461.489541][T11171] ? __fget_files+0x2a/0x420 [ 461.489574][T11171] do_epoll_ctl+0x7f4/0xe80 [ 461.489603][T11171] __x64_sys_epoll_ctl+0x163/0x1a0 [ 461.489629][T11171] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 461.489649][T11171] ? rcu_is_watching+0x15/0xb0 [ 461.489672][T11171] ? do_syscall_64+0xbe/0x3b0 [ 461.489696][T11171] do_syscall_64+0xfa/0x3b0 [ 461.489715][T11171] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.489733][T11171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.489748][T11171] ? clear_bhb_loop+0x60/0xb0 [ 461.489768][T11171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.489784][T11171] RIP: 0033:0x7f736b18eb69 [ 461.489799][T11171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.489814][T11171] RSP: 002b:00007f736bf4c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 461.489832][T11171] RAX: ffffffffffffffda RBX: 00007f736b3b5fa0 RCX: 00007f736b18eb69 [ 461.489845][T11171] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000005 [ 461.489855][T11171] RBP: 00007f736bf4c090 R08: 0000000000000000 R09: 0000000000000000 [ 461.489866][T11171] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 461.489878][T11171] R13: 0000000000000000 R14: 00007f736b3b5fa0 R15: 00007f736b4dfa28 [ 461.489906][T11171] [ 461.730754][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 461.741030][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 462.373032][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 462.407503][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.416159][ T9] usb 1-1: Product: syz [ 462.421507][ T9] usb 1-1: Manufacturer: syz [ 462.436377][ T9] usb 1-1: SerialNumber: syz [ 462.775274][T11166] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 462.782903][T11166] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 462.945018][T11182] binder: BINDER_SET_CONTEXT_MGR already set [ 462.951162][T11182] binder: 11179:11182 ioctl 4018620d 200000000040 returned -16 [ 462.962796][T11182] binder: 11179:11182 unknown command 0 [ 462.968445][T11182] binder: 11179:11182 ioctl c0306201 200000000c40 returned -22 [ 463.277368][T11166] loop2: detected capacity change from 0 to 7 [ 463.420837][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 463.440349][ T9] usbtest 1-1:1.0: Linux user mode ISO test driver [ 463.462561][ T9] usbtest 1-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 463.583757][ T9] usb 1-1: USB disconnect, device number 55 [ 463.633849][T10315] usb 5-1: USB disconnect, device number 56 [ 464.374063][T10315] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 464.630334][T10315] usb 2-1: config 0 has no interfaces? [ 464.648526][T10315] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 464.703662][T10315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.753004][T10315] usb 2-1: Product: syz [ 464.763170][T10315] usb 2-1: Manufacturer: syz [ 464.780765][T10315] usb 2-1: SerialNumber: syz [ 464.804564][T10315] usb 2-1: config 0 descriptor?? [ 464.816430][T11203] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1389'. [ 464.932001][T11208] FAULT_INJECTION: forcing a failure. [ 464.932001][T11208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.969813][T11208] CPU: 0 UID: 0 PID: 11208 Comm: syz.4.1391 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 464.969830][T11208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 464.969838][T11208] Call Trace: [ 464.969843][T11208] [ 464.969848][T11208] dump_stack_lvl+0x189/0x250 [ 464.969864][T11208] ? __pfx____ratelimit+0x10/0x10 [ 464.969877][T11208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.969889][T11208] ? __pfx__printk+0x10/0x10 [ 464.969902][T11208] ? __might_fault+0xb0/0x130 [ 464.969920][T11208] should_fail_ex+0x414/0x560 [ 464.969934][T11208] _copy_from_user+0x2d/0xb0 [ 464.969945][T11208] memdup_user+0x5e/0xd0 [ 464.969956][T11208] strndup_user+0x68/0xd0 [ 464.969966][T11208] __se_sys_fsconfig+0x4ce/0x8d0 [ 464.969981][T11208] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 464.969990][T11208] ? ksys_write+0x22a/0x250 [ 464.970004][T11208] ? __pfx_ksys_write+0x10/0x10 [ 464.970015][T11208] ? rcu_is_watching+0x15/0xb0 [ 464.970027][T11208] ? do_syscall_64+0xbe/0x3b0 [ 464.970039][T11208] ? __x64_sys_fsconfig+0x20/0xc0 [ 464.970050][T11208] do_syscall_64+0xfa/0x3b0 [ 464.970067][T11208] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.970078][T11208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.970088][T11208] ? clear_bhb_loop+0x60/0xb0 [ 464.970100][T11208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.970109][T11208] RIP: 0033:0x7f8bab38eb69 [ 464.970119][T11208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.970128][T11208] RSP: 002b:00007f8bac1a0038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 464.970139][T11208] RAX: ffffffffffffffda RBX: 00007f8bab5b5fa0 RCX: 00007f8bab38eb69 [ 464.970146][T11208] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000006 [ 464.970153][T11208] RBP: 00007f8bac1a0090 R08: 0000000000000000 R09: 0000000000000000 [ 464.970159][T11208] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 464.970165][T11208] R13: 0000000000000000 R14: 00007f8bab5b5fa0 R15: 00007f8bab6dfa28 [ 464.970179][T11208] [ 465.307342][T10315] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 465.485995][T10315] usb 1-1: Using ep0 maxpacket: 8 [ 465.498844][T10315] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 465.517244][T10315] usb 1-1: can't read configurations, error -61 [ 465.654432][T10315] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 465.785049][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1394'. [ 465.844396][T10315] usb 1-1: Using ep0 maxpacket: 8 [ 465.854141][T10315] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 465.872204][T10315] usb 1-1: can't read configurations, error -61 [ 465.894317][T10315] usb usb1-port1: attempt power cycle [ 465.918842][T11222] 8021q: adding VLAN 0 to HW filter on device batadv21 [ 465.952380][T11222] team0: Port device batadv21 added [ 465.960196][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1395'. [ 466.004709][T11226] dlm: no locking on control device [ 466.554205][T10315] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 466.576806][T11228] hub 9-0:1.0: USB hub found [ 466.593649][T11228] hub 9-0:1.0: 1 port detected [ 466.650595][T10315] usb 1-1: Using ep0 maxpacket: 8 [ 466.668135][T10315] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 466.729538][T10315] usb 1-1: can't read configurations, error -61 [ 466.858135][T11227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 466.944063][T10315] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 467.054264][T10315] usb 1-1: Using ep0 maxpacket: 8 [ 467.063824][T10315] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 467.072036][T10315] usb 1-1: can't read configurations, error -61 [ 467.079483][T11234] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 467.293173][T10315] usb usb1-port1: unable to enumerate USB device [ 467.378442][T10185] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 467.555725][T10185] usb 4-1: config 0 has no interfaces? [ 467.561553][T10185] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 467.572406][T10185] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.606389][T10315] usb 2-1: USB disconnect, device number 44 [ 467.615217][T10185] usb 4-1: config 0 descriptor?? [ 467.828877][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1397'. [ 467.849737][ T5867] usb 4-1: USB disconnect, device number 52 [ 467.926656][T11245] FAULT_INJECTION: forcing a failure. [ 467.926656][T11245] name failslab, interval 1, probability 0, space 0, times 0 [ 467.944332][T11245] CPU: 1 UID: 0 PID: 11245 Comm: syz.0.1400 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 467.944360][T11245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 467.944371][T11245] Call Trace: [ 467.944380][T11245] [ 467.944389][T11245] dump_stack_lvl+0x189/0x250 [ 467.944413][T11245] ? __pfx____ratelimit+0x10/0x10 [ 467.944435][T11245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.944456][T11245] ? __pfx__printk+0x10/0x10 [ 467.944476][T11245] ? netlink_unicast+0x82c/0x9e0 [ 467.944492][T11245] ? ___sys_sendmsg+0x21f/0x2a0 [ 467.944514][T11245] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 467.944547][T11245] should_fail_ex+0x414/0x560 [ 467.944573][T11245] should_failslab+0xa8/0x100 [ 467.944599][T11245] kmem_cache_alloc_noprof+0x73/0x3c0 [ 467.944619][T11245] ? skb_clone+0x212/0x3a0 [ 467.944644][T11245] skb_clone+0x212/0x3a0 [ 467.944676][T11245] __netlink_deliver_tap+0x404/0x850 [ 467.944710][T11245] ? netlink_deliver_tap+0x2e/0x1b0 [ 467.944732][T11245] netlink_deliver_tap+0x19c/0x1b0 [ 467.944754][T11245] netlink_sendskb+0x68/0x140 [ 467.944775][T11245] netlink_unicast+0x397/0x9e0 [ 467.944791][T11245] ? __asan_memcpy+0x40/0x70 [ 467.944819][T11245] ? __pfx_netlink_unicast+0x10/0x10 [ 467.944848][T11245] netlink_rcv_skb+0x28c/0x470 [ 467.944870][T11245] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 467.944893][T11245] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 467.944925][T11245] ? netlink_deliver_tap+0x2e/0x1b0 [ 467.944953][T11245] netlink_unicast+0x82c/0x9e0 [ 467.944982][T11245] ? __pfx_netlink_unicast+0x10/0x10 [ 467.945002][T11245] ? netlink_sendmsg+0x642/0xb30 [ 467.945020][T11245] ? skb_put+0x11b/0x210 [ 467.945044][T11245] netlink_sendmsg+0x805/0xb30 [ 467.945074][T11245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.945098][T11245] ? aa_sock_msg_perm+0xf1/0x1d0 [ 467.945123][T11245] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 467.945141][T11245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.945162][T11245] __sock_sendmsg+0x219/0x270 [ 467.945184][T11245] ____sys_sendmsg+0x52d/0x830 [ 467.945213][T11245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.945250][T11245] ? import_iovec+0x74/0xa0 [ 467.945271][T11245] ___sys_sendmsg+0x21f/0x2a0 [ 467.945296][T11245] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.945364][T11245] ? __might_fault+0xb0/0x130 [ 467.945391][T11245] __sys_sendmmsg+0x227/0x430 [ 467.945418][T11245] ? __pfx___sys_sendmmsg+0x10/0x10 [ 467.945439][T11245] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 467.945487][T11245] ? ksys_write+0x22a/0x250 [ 467.945511][T11245] ? __pfx_ksys_write+0x10/0x10 [ 467.945529][T11245] ? rcu_is_watching+0x15/0xb0 [ 467.945554][T11245] __x64_sys_sendmmsg+0xa0/0xc0 [ 467.945579][T11245] do_syscall_64+0xfa/0x3b0 [ 467.945599][T11245] ? lockdep_hardirqs_on+0x9c/0x150 [ 467.945617][T11245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.945635][T11245] ? clear_bhb_loop+0x60/0xb0 [ 467.945657][T11245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.945680][T11245] RIP: 0033:0x7f9206d8eb69 [ 467.945697][T11245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.945712][T11245] RSP: 002b:00007f9207c75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 467.945731][T11245] RAX: ffffffffffffffda RBX: 00007f9206fb5fa0 RCX: 00007f9206d8eb69 [ 467.945744][T11245] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 467.945757][T11245] RBP: 00007f9207c75090 R08: 0000000000000000 R09: 0000000000000000 [ 467.945768][T11245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 467.945779][T11245] R13: 0000000000000000 R14: 00007f9206fb5fa0 R15: 00007f92070dfa28 [ 467.945809][T11245] [ 468.308722][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.744066][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 468.904731][ T9] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.921967][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 468.936044][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 468.954072][T10298] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 468.964480][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.995458][ T9] usb 1-1: config 0 descriptor?? [ 469.053365][T11256] gtp0: left allmulticast mode [ 469.060147][T11256] macvlan4: left allmulticast mode [ 469.066913][T11256] hsr0: left allmulticast mode [ 469.071728][T11256] hsr_slave_0: left allmulticast mode [ 469.078318][T11256] hsr_slave_1: left allmulticast mode [ 469.128296][T10298] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 256 [ 469.158205][T10298] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.180742][T10298] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 469.191281][T10298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.206067][T11251] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 469.225371][T10298] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 469.244585][T10298] usb 5-1: invalid MIDI out EP 0 [ 469.309941][T11259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1406'. [ 469.382711][T10298] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 469.422299][T11251] tipc: Started in network mode [ 469.442843][T11251] tipc: Node identity e23b8fb976b3, cluster identity 4711 [ 469.451541][ T9] apple 0003:05AC:027A.001B: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.0-1/input0 [ 469.471389][T11251] tipc: Enabled bearer , priority 0 [ 469.489139][T11260] syzkaller0: entered promiscuous mode [ 469.498456][T11260] syzkaller0: entered allmulticast mode [ 469.584286][T10298] usb 5-1: USB disconnect, device number 57 [ 469.599440][T11250] tipc: Resetting bearer [ 469.686174][T11250] tipc: Disabling bearer [ 469.728729][T10315] usb 1-1: USB disconnect, device number 60 [ 469.904604][ T5867] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 470.064009][ T5867] usb 3-1: Using ep0 maxpacket: 8 [ 470.074360][ T5867] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 470.094267][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.111698][ T5867] usb 3-1: Product: syz [ 470.124732][ T5867] usb 3-1: Manufacturer: syz [ 470.140653][ T5867] usb 3-1: SerialNumber: syz [ 470.171531][ T5867] usb 3-1: config 0 descriptor?? [ 470.181098][ T5867] gspca_main: se401-2.14.0 probing 047d:5003 [ 470.745482][T11279] team0: Port device batadv3 removed [ 470.764603][ T5867] gspca_se401: ExtraFeatures: 35 [ 470.851492][T11286] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1411'. [ 470.927209][T11279] team0: Port device batadv4 removed [ 470.942382][T11279] team0: Port device batadv5 removed [ 470.964563][T11279] team0: Port device batadv6 removed [ 470.992004][T11289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.094198][T11289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.167946][T11279] team0: Port device batadv7 removed [ 471.202868][T11279] team0: Port device batadv8 removed [ 471.366382][T11297] hub 9-0:1.0: USB hub found [ 471.372019][T11297] hub 9-0:1.0: 1 port detected [ 471.425980][ T5867] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22 [ 471.588911][T11279] team0: Port device batadv9 removed [ 471.641055][T11279] team0: Port device batadv10 removed [ 471.666661][T11281] 8021q: adding VLAN 0 to HW filter on device batadv22 [ 471.689024][T11281] team0: Port device batadv22 added [ 471.696378][T11300] dlm: non-version read from control device 0 [ 471.735803][ T5867] usb 3-1: USB disconnect, device number 55 [ 472.335821][T11307] FAULT_INJECTION: forcing a failure. [ 472.335821][T11307] name failslab, interval 1, probability 0, space 0, times 0 [ 472.407842][T11307] CPU: 0 UID: 0 PID: 11307 Comm: syz.4.1417 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 472.407870][T11307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 472.407881][T11307] Call Trace: [ 472.407890][T11307] [ 472.407900][T11307] dump_stack_lvl+0x189/0x250 [ 472.407925][T11307] ? __pfx____ratelimit+0x10/0x10 [ 472.407947][T11307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.407967][T11307] ? __pfx__printk+0x10/0x10 [ 472.408004][T11307] should_fail_ex+0x414/0x560 [ 472.408027][T11307] should_failslab+0xa8/0x100 [ 472.408051][T11307] __kmalloc_cache_noprof+0x70/0x3d0 [ 472.408079][T11307] ? sctp_add_bind_addr+0x8c/0x370 [ 472.408099][T11307] sctp_add_bind_addr+0x8c/0x370 [ 472.408122][T11307] sctp_copy_local_addr_list+0x30b/0x4e0 [ 472.408145][T11307] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 472.408165][T11307] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 472.408187][T11307] ? sctp_v6_is_any+0x64/0x80 [ 472.408209][T11307] ? sctp_copy_one_addr+0x93/0x360 [ 472.408231][T11307] sctp_bind_addr_copy+0xb3/0x3c0 [ 472.408252][T11307] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 472.408281][T11307] sctp_connect_new_asoc+0x2e0/0x690 [ 472.408307][T11307] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 472.408327][T11307] ? __local_bh_enable_ip+0x12d/0x1c0 [ 472.408353][T11307] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 472.408373][T11307] ? security_sctp_bind_connect+0x7e/0x2e0 [ 472.408396][T11307] sctp_sendmsg+0x155c/0x2810 [ 472.408429][T11307] ? __pfx_sctp_sendmsg+0x10/0x10 [ 472.408453][T11307] ? aa_sk_perm+0x81e/0x950 [ 472.408480][T11307] ? __pfx_aa_sk_perm+0x10/0x10 [ 472.408505][T11307] ? sock_rps_record_flow+0x19/0x410 [ 472.408527][T11307] ? inet_sendmsg+0x2f4/0x370 [ 472.408548][T11307] __sock_sendmsg+0x19c/0x270 [ 472.408571][T11307] ____sys_sendmsg+0x52d/0x830 [ 472.408600][T11307] ? __pfx_____sys_sendmsg+0x10/0x10 [ 472.408634][T11307] ? import_iovec+0x74/0xa0 [ 472.408654][T11307] ___sys_sendmsg+0x21f/0x2a0 [ 472.408680][T11307] ? __pfx____sys_sendmsg+0x10/0x10 [ 472.408740][T11307] ? __fget_files+0x2a/0x420 [ 472.408762][T11307] ? __fget_files+0x3a0/0x420 [ 472.408796][T11307] __sys_sendmmsg+0x227/0x430 [ 472.408826][T11307] ? __pfx___sys_sendmmsg+0x10/0x10 [ 472.408846][T11307] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 472.408899][T11307] ? ksys_write+0x22a/0x250 [ 472.408923][T11307] ? __pfx_ksys_write+0x10/0x10 [ 472.408941][T11307] ? rcu_is_watching+0x15/0xb0 [ 472.408966][T11307] __x64_sys_sendmmsg+0xa0/0xc0 [ 472.408991][T11307] do_syscall_64+0xfa/0x3b0 [ 472.409010][T11307] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.409030][T11307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.409047][T11307] ? clear_bhb_loop+0x60/0xb0 [ 472.409073][T11307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.409089][T11307] RIP: 0033:0x7f8bab38eb69 [ 472.409105][T11307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.409121][T11307] RSP: 002b:00007f8bac1a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 472.409140][T11307] RAX: ffffffffffffffda RBX: 00007f8bab5b5fa0 RCX: 00007f8bab38eb69 [ 472.409153][T11307] RDX: 0000000000000001 RSI: 0000200000002fc0 RDI: 0000000000000003 [ 472.409165][T11307] RBP: 00007f8bac1a0090 R08: 0000000000000000 R09: 0000000000000000 [ 472.409176][T11307] R10: 0000000024000045 R11: 0000000000000246 R12: 0000000000000002 [ 472.409188][T11307] R13: 0000000000000000 R14: 00007f8bab5b5fa0 R15: 00007f8bab6dfa28 [ 472.409217][T11307] [ 473.246916][T11315] binder: 11314:11315 ioctl c020aa08 200000000100 returned -22 [ 473.375146][T11321] netlink: 'syz.2.1421': attribute type 11 has an invalid length. [ 473.392439][T11321] netlink: 448 bytes leftover after parsing attributes in process `syz.2.1421'. [ 473.494046][ T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 473.645503][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 473.656870][ T9] usb 5-1: config 8 has an invalid interface number: 203 but max is 0 [ 473.666059][ T9] usb 5-1: config 8 has no interface number 0 [ 473.675818][ T9] usb 5-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 473.741704][ T9] usb 5-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 473.823561][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1422'. [ 473.832555][ T9] usb 5-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023 [ 473.896197][ T9] usb 5-1: config 8 interface 203 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 473.927918][ T9] usb 5-1: config 8 interface 203 has no altsetting 0 [ 473.970482][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 474.000675][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.018243][T11325] hub 9-0:1.0: USB hub found [ 474.033336][T11330] macvlan5: entered allmulticast mode [ 474.043519][T11325] hub 9-0:1.0: 1 port detected [ 474.104236][ T9] usb 5-1: Product: syz [ 474.117777][ T9] usb 5-1: Manufacturer: syz [ 474.130783][ T9] usb 5-1: SerialNumber: syz [ 474.149054][T11315] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 474.164131][T11315] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 474.638499][ C0] port100 5-1:8.203: NFC: Urb failure (status -71) [ 474.692299][ C0] port100 5-1:8.203: NFC: Urb failure (status -71) [ 474.844439][ T9] port100 5-1:8.203: NFC: Could not get supported command types [ 474.954880][ T9] usb 5-1: USB disconnect, device number 58 [ 475.210105][T10298] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 475.395204][T10298] usb 2-1: Using ep0 maxpacket: 8 [ 475.412017][T10298] usb 2-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config [ 475.427358][T11358] FAULT_INJECTION: forcing a failure. [ 475.427358][T11358] name failslab, interval 1, probability 0, space 0, times 0 [ 475.473789][T10298] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 51264, setting to 1024 [ 475.515674][T10298] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 475.528292][T11358] CPU: 1 UID: 0 PID: 11358 Comm: syz.4.1429 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 475.528316][T11358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 475.528327][T11358] Call Trace: [ 475.528335][T11358] [ 475.528343][T11358] dump_stack_lvl+0x189/0x250 [ 475.528367][T11358] ? __pfx____ratelimit+0x10/0x10 [ 475.528388][T11358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.528407][T11358] ? __pfx__printk+0x10/0x10 [ 475.528431][T11358] ? __pfx___might_resched+0x10/0x10 [ 475.528448][T11358] ? fs_reclaim_acquire+0x7d/0x100 [ 475.528477][T11358] should_fail_ex+0x414/0x560 [ 475.528502][T11358] should_failslab+0xa8/0x100 [ 475.528526][T11358] __kmalloc_cache_noprof+0x70/0x3d0 [ 475.528547][T11358] ? alloc_netdev_mqs+0xbf1/0x1170 [ 475.528569][T11358] alloc_netdev_mqs+0xbf1/0x1170 [ 475.528593][T11358] rtnl_create_link+0x31f/0xd10 [ 475.528618][T11358] rtnl_newlink_create+0x25c/0xb00 [ 475.528640][T11358] ? __pfx___nla_validate_parse+0x10/0x10 [ 475.528664][T11358] ? __lock_acquire+0xab9/0xd20 [ 475.528692][T11358] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 475.528717][T11358] ? __pfx___mutex_lock+0x10/0x10 [ 475.528749][T11358] ? ns_capable+0x8a/0xf0 [ 475.528777][T11358] rtnl_newlink+0x16d6/0x1c70 [ 475.528815][T11358] ? __pfx_rtnl_newlink+0x10/0x10 [ 475.528843][T11358] ? is_bpf_text_address+0x26/0x2b0 [ 475.528874][T11358] ? __lock_acquire+0xab9/0xd20 [ 475.528907][T11358] ? __lock_acquire+0xab9/0xd20 [ 475.528951][T11358] ? is_bpf_text_address+0x26/0x2b0 [ 475.528979][T11358] ? is_bpf_text_address+0x292/0x2b0 [ 475.529001][T11358] ? is_bpf_text_address+0x26/0x2b0 [ 475.529042][T11358] ? __lock_acquire+0xab9/0xd20 [ 475.529082][T11358] ? __pfx_rtnl_newlink+0x10/0x10 [ 475.529100][T11358] rtnetlink_rcv_msg+0x7cc/0xb70 [ 475.529117][T11358] ? __lock_acquire+0xab9/0xd20 [ 475.529141][T11358] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 475.529159][T11358] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 475.529193][T11358] netlink_rcv_skb+0x205/0x470 [ 475.529212][T11358] ? __lock_acquire+0xab9/0xd20 [ 475.529233][T11358] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 475.529254][T11358] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 475.529286][T11358] ? netlink_deliver_tap+0x2e/0x1b0 [ 475.529311][T11358] netlink_unicast+0x82c/0x9e0 [ 475.529338][T11358] ? __pfx_netlink_unicast+0x10/0x10 [ 475.529358][T11358] ? netlink_sendmsg+0x642/0xb30 [ 475.529375][T11358] ? skb_put+0x11b/0x210 [ 475.529397][T11358] netlink_sendmsg+0x805/0xb30 [ 475.529424][T11358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.529446][T11358] ? aa_sock_msg_perm+0xf1/0x1d0 [ 475.529470][T11358] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 475.529488][T11358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.529508][T11358] __sock_sendmsg+0x219/0x270 [ 475.529528][T11358] ____sys_sendmsg+0x505/0x830 [ 475.529562][T11358] ? __pfx_____sys_sendmsg+0x10/0x10 [ 475.529594][T11358] ? import_iovec+0x74/0xa0 [ 475.529615][T11358] ___sys_sendmsg+0x21f/0x2a0 [ 475.529640][T11358] ? __pfx____sys_sendmsg+0x10/0x10 [ 475.529700][T11358] ? __fget_files+0x2a/0x420 [ 475.529722][T11358] ? __fget_files+0x3a0/0x420 [ 475.529761][T11358] __x64_sys_sendmsg+0x19b/0x260 [ 475.529787][T11358] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 475.529818][T11358] ? __pfx_ksys_write+0x10/0x10 [ 475.529837][T11358] ? rcu_is_watching+0x15/0xb0 [ 475.529860][T11358] ? do_syscall_64+0xbe/0x3b0 [ 475.529885][T11358] do_syscall_64+0xfa/0x3b0 [ 475.529903][T11358] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.529922][T11358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.529940][T11358] ? clear_bhb_loop+0x60/0xb0 [ 475.529961][T11358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.529978][T11358] RIP: 0033:0x7f8bab38eb69 [ 475.529995][T11358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.530010][T11358] RSP: 002b:00007f8bac1a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.530028][T11358] RAX: ffffffffffffffda RBX: 00007f8bab5b5fa0 RCX: 00007f8bab38eb69 [ 475.530041][T11358] RDX: 0000000024000090 RSI: 0000200000000280 RDI: 0000000000000003 [ 475.530052][T11358] RBP: 00007f8bac1a0090 R08: 0000000000000000 R09: 0000000000000000 [ 475.530063][T11358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 475.530074][T11358] R13: 0000000000000000 R14: 00007f8bab5b5fa0 R15: 00007f8bab6dfa28 [ 475.530103][T11358] [ 475.955927][T10298] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 476.447199][T11365] FAULT_INJECTION: forcing a failure. [ 476.447199][T11365] name failslab, interval 1, probability 0, space 0, times 0 [ 476.452229][T10298] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 476.478006][T10298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.488851][T10298] usb 2-1: Product: syz [ 476.493153][T10298] usb 2-1: Manufacturer: syz [ 476.514982][T10298] usb 2-1: SerialNumber: syz [ 476.518618][T11365] CPU: 1 UID: 0 PID: 11365 Comm: syz.2.1431 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 476.518652][T11365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 476.518662][T11365] Call Trace: [ 476.518670][T11365] [ 476.518677][T11365] dump_stack_lvl+0x189/0x250 [ 476.518703][T11365] ? __pfx____ratelimit+0x10/0x10 [ 476.518722][T11365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.518742][T11365] ? __pfx__printk+0x10/0x10 [ 476.518766][T11365] ? __pfx___might_resched+0x10/0x10 [ 476.518782][T11365] ? fs_reclaim_acquire+0x7d/0x100 [ 476.518810][T11365] should_fail_ex+0x414/0x560 [ 476.518834][T11365] should_failslab+0xa8/0x100 [ 476.518859][T11365] __kmalloc_noprof+0xcb/0x4f0 [ 476.518878][T11365] ? tomoyo_encode+0x28b/0x550 [ 476.518905][T11365] tomoyo_encode+0x28b/0x550 [ 476.518932][T11365] tomoyo_realpath_from_path+0x58d/0x5d0 [ 476.518964][T11365] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 476.518984][T11365] tomoyo_path_number_perm+0x1e8/0x5a0 [ 476.519005][T11365] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 476.519028][T11365] ? sb_end_write+0xe9/0x1c0 [ 476.519045][T11365] ? vfs_write+0x8d8/0xa90 [ 476.519099][T11365] ? ksys_write+0x1e1/0x250 [ 476.519126][T11365] security_file_ioctl+0xcb/0x2d0 [ 476.519146][T11365] __se_sys_ioctl+0x47/0x170 [ 476.519168][T11365] do_syscall_64+0xfa/0x3b0 [ 476.519186][T11365] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.519204][T11365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.519221][T11365] ? clear_bhb_loop+0x60/0xb0 [ 476.519240][T11365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.519256][T11365] RIP: 0033:0x7f56c378eb69 [ 476.519272][T11365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.519286][T11365] RSP: 002b:00007f56c4587038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 476.519304][T11365] RAX: ffffffffffffffda RBX: 00007f56c39b5fa0 RCX: 00007f56c378eb69 [ 476.519317][T11365] RDX: 0000000000000027 RSI: 000000000000ae03 RDI: 0000000000000003 [ 476.519327][T11365] RBP: 00007f56c4587090 R08: 0000000000000000 R09: 0000000000000000 [ 476.519337][T11365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.519347][T11365] R13: 0000000000000000 R14: 00007f56c39b5fa0 R15: 00007f56c3adfa28 [ 476.519375][T11365] [ 476.519394][T11365] ERROR: Out of memory at tomoyo_realpath_from_path. [ 476.537409][T11350] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 476.886255][T10298] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 476.894106][ T5867] usb 1-1: new low-speed USB device number 61 using dummy_hcd [ 476.935061][T10298] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 476.949215][T10298] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 476.990587][T11377] bond0: (slave bond_slave_0): Releasing backup interface [ 477.040438][T11379] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1436'. [ 477.049782][ T5867] usb 1-1: device descriptor read/64, error -71 [ 477.302968][T11350] loop2: detected capacity change from 0 to 7 [ 477.333412][T10185] usb 2-1: USB disconnect, device number 45 [ 477.364132][T11377] bond0: (slave bond_slave_1): Releasing backup interface [ 477.400873][T11377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.408778][ T5867] usb 1-1: new low-speed USB device number 62 using dummy_hcd [ 477.426216][T11377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.584065][ T5867] usb 1-1: device descriptor read/64, error -71 [ 477.694799][ T5867] usb usb1-port1: attempt power cycle [ 478.044129][ T5867] usb 1-1: new low-speed USB device number 63 using dummy_hcd [ 478.064634][ T5867] usb 1-1: device descriptor read/8, error -71 [ 478.344147][ T5867] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 478.504886][ T5867] usb 1-1: device descriptor read/8, error -71 [ 478.614480][ T5867] usb usb1-port1: unable to enumerate USB device [ 479.274775][T11395] syz.1.1440 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 479.591841][T11400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.849848][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1444'. [ 480.544053][T10298] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 480.828173][T10298] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 480.841274][T10298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.861815][T10298] usb 4-1: Product: syz [ 481.138947][T10298] usb 4-1: Manufacturer: syz [ 481.168943][T10298] usb 4-1: SerialNumber: syz [ 481.175007][T11425] ptrace attach of "./syz-executor exec"[5881] was attempted by "./syz-executor exec"[11425] [ 481.275282][T10298] usb 4-1: config 0 descriptor?? [ 481.286230][T10298] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 483.782718][ T5867] usb 4-1: USB disconnect, device number 53 [ 483.962620][T11453] 8021q: adding VLAN 0 to HW filter on device batadv12 [ 483.972137][T11453] team0: Port device batadv12 added [ 484.242532][T11463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1456'. [ 484.263954][T11465] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1458'. [ 484.829321][T11470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1460'. [ 485.641625][T11479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1462'. [ 485.722918][T11479] dlm: no locking on control device [ 485.948453][T11484] AppArmor: change_hat: Invalid input '~' [ 485.969909][T10298] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 486.111294][T11488] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1465'. [ 486.230109][T10298] usb 1-1: Using ep0 maxpacket: 32 [ 486.312931][T10298] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.347259][T10298] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 486.380264][T10298] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 486.396862][T10298] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 486.440991][T10298] usb 1-1: Product: syz [ 486.444762][ T5867] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 486.504095][T10298] usb 1-1: Manufacturer: syz [ 486.557848][T10298] usb 1-1: SerialNumber: syz [ 486.614417][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 486.626244][ T5867] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 486.632887][T10298] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input24 [ 486.634940][ T5867] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 486.715353][ T5867] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 486.863023][ T5867] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 486.890514][T11481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.906305][ T5867] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 486.925342][T11481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.948894][ T5867] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 486.997193][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.020370][T10298] usb 1-1: USB disconnect, device number 65 [ 487.086728][T10298] appletouch 1-1:1.0: input: appletouch disconnected [ 487.273657][ T5867] usb 5-1: usb_control_msg returned -32 [ 487.279576][ T5867] usbtmc 5-1:16.0: can't read capabilities [ 488.144384][T10298] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 488.294428][T10298] usb 3-1: Using ep0 maxpacket: 32 [ 488.346664][T10298] usb 3-1: too many configurations: 189, using maximum allowed: 8 [ 488.395296][T10298] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 488.404753][T10298] usb 3-1: can't read configurations, error -61 [ 488.564010][T10298] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 488.744386][T10298] usb 3-1: Using ep0 maxpacket: 32 [ 488.751476][T10298] usb 3-1: too many configurations: 189, using maximum allowed: 8 [ 488.761177][T10298] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 488.769183][T10298] usb 3-1: can't read configurations, error -61 [ 488.776234][T10298] usb usb3-port1: attempt power cycle [ 489.174334][T10298] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 489.194627][T10298] usb 3-1: Using ep0 maxpacket: 32 [ 489.208008][T10298] usb 3-1: too many configurations: 189, using maximum allowed: 8 [ 489.237050][T10298] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 489.245555][T10298] usb 3-1: can't read configurations, error -61 [ 489.556324][T10298] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 489.621625][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1476'. [ 489.638179][T10298] usb 3-1: Using ep0 maxpacket: 32 [ 489.645717][T10298] usb 3-1: too many configurations: 189, using maximum allowed: 8 [ 489.660987][T11527] dlm: no locking on control device [ 489.688648][T10298] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 489.706503][T10298] usb 3-1: can't read configurations, error -61 [ 489.719235][T10298] usb usb3-port1: unable to enumerate USB device [ 490.013248][ T9] usb 5-1: USB disconnect, device number 59 [ 490.104098][T10298] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 490.202254][T11541] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1481'. [ 490.319943][T10298] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 490.328138][T10298] usb 2-1: config 0 has no interface number 0 [ 490.340649][T11540] team0: Port device batadv20 removed [ 490.361675][T11540] team0: Port device batadv21 removed [ 490.381585][T11540] team0: Port device batadv22 removed [ 490.396214][T10298] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 490.598026][T11546] batadv_slave_1: entered promiscuous mode [ 490.604250][T10298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.635744][T11546] batadv_slave_1: left promiscuous mode [ 490.642679][T10298] usb 2-1: Product: syz [ 490.651491][T10298] usb 2-1: Manufacturer: syz [ 490.697595][T10298] usb 2-1: SerialNumber: syz [ 490.706809][T10298] usb 2-1: config 0 descriptor?? [ 491.073577][ T5867] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 491.073644][T10298] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 491.114539][T10298] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 491.158094][T10298] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 491.174678][T10298] usb 2-1: media controller created [ 491.286425][ T5867] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 491.296767][ T5867] usb 1-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 491.316085][ T5867] usb 1-1: config 3 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 491.349280][ T5867] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 491.363266][T10298] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 491.365212][T11548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.383410][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.440989][T11548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.454732][ T5867] usb 1-1: Product: syz [ 491.477543][ T5867] usb 1-1: Manufacturer: syz [ 491.503269][ T5867] usb 1-1: SerialNumber: syz [ 491.546667][ T5867] cdc_ncm 1-1:3.0: invalid descriptor buffer length [ 491.561358][ T5867] cdc_ncm 1-1:3.0: CDC Union missing and no IAD found [ 491.579486][ T5867] cdc_ncm 1-1:3.0: bind() failure [ 491.805806][T11554] syzkaller1: entered promiscuous mode [ 491.811493][T11554] syzkaller1: entered allmulticast mode [ 491.854296][T11546] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1482'. [ 491.943615][ T5867] usb 1-1: USB disconnect, device number 66 [ 492.462884][T10298] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 492.517054][T11558] hub 9-0:1.0: USB hub found [ 492.522905][T11558] hub 9-0:1.0: 1 port detected [ 492.961105][T10298] usb 2-1: USB disconnect, device number 46 [ 493.106953][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 493.106965][ T30] audit: type=1326 audit(1754418128.073:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11562 comm="syz.1.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c478eb69 code=0x7ffc0000 [ 493.292615][ T30] audit: type=1326 audit(1754418128.073:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11562 comm="syz.1.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c478eb69 code=0x7ffc0000 [ 493.490912][ T30] audit: type=1326 audit(1754418128.073:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11562 comm="syz.1.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff1c478eb69 code=0x7ffc0000 [ 493.531034][T11568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1489'. [ 493.577783][ T30] audit: type=1326 audit(1754418128.073:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11562 comm="syz.1.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c478eb69 code=0x7ffc0000 [ 493.641658][T11568] netlink: 'syz.1.1489': attribute type 6 has an invalid length. [ 493.661545][T11568] netlink: 'syz.1.1489': attribute type 1 has an invalid length. [ 493.675299][T11568] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1489'. [ 493.710661][ T30] audit: type=1326 audit(1754418128.073:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11562 comm="syz.1.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c478eb69 code=0x7ffc0000 [ 493.747172][T11573] netlink: 'syz.4.1490': attribute type 1 has an invalid length. [ 493.786001][ T30] audit: type=1326 audit(1754418128.113:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11562 comm="syz.1.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7ff1c478eb69 code=0x7ffc0000 [ 493.854521][ T30] audit: type=1326 audit(1754418128.113:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11562 comm="syz.1.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c478eb69 code=0x7ffc0000 [ 493.878086][ T30] audit: type=1326 audit(1754418128.113:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11562 comm="syz.1.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff1c478eb69 code=0x7ffc0000 [ 493.901493][ T30] audit: type=1326 audit(1754418128.113:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11562 comm="syz.1.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c478eb69 code=0x7ffc0000 [ 493.916694][T11573] bond5: entered promiscuous mode [ 493.933721][ T30] audit: type=1326 audit(1754418128.113:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11562 comm="syz.1.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1c478eb69 code=0x7ffc0000 [ 494.024229][T11573] bond5: entered allmulticast mode [ 494.235387][T11576] bond5: (slave geneve2): making interface the new active one [ 494.265318][T11576] geneve2: entered promiscuous mode [ 494.284198][T11576] geneve2: entered allmulticast mode [ 494.294850][T11576] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 494.319477][T11579] FAULT_INJECTION: forcing a failure. [ 494.319477][T11579] name failslab, interval 1, probability 0, space 0, times 0 [ 494.334433][T11579] CPU: 1 UID: 0 PID: 11579 Comm: syz.0.1492 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 494.334459][T11579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 494.334470][T11579] Call Trace: [ 494.334477][T11579] [ 494.334485][T11579] dump_stack_lvl+0x189/0x250 [ 494.334508][T11579] ? __pfx____ratelimit+0x10/0x10 [ 494.334527][T11579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.334546][T11579] ? __pfx__printk+0x10/0x10 [ 494.334570][T11579] ? __pfx___might_resched+0x10/0x10 [ 494.334586][T11579] ? fs_reclaim_acquire+0x7d/0x100 [ 494.334616][T11579] should_fail_ex+0x414/0x560 [ 494.334640][T11579] should_failslab+0xa8/0x100 [ 494.334663][T11579] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 494.334685][T11579] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 494.334701][T11579] ? __alloc_skb+0x112/0x2d0 [ 494.334723][T11579] __alloc_skb+0x112/0x2d0 [ 494.334747][T11579] rtmsg_ifinfo_build_skb+0x84/0x260 [ 494.334764][T11579] ? neigh_carrier_down+0x22/0x30 [ 494.334791][T11579] rtmsg_ifinfo+0x8c/0x1a0 [ 494.334817][T11579] netif_state_change+0x29e/0x3a0 [ 494.334838][T11579] ? __pfx_netif_state_change+0x10/0x10 [ 494.334855][T11579] ? kasan_save_track+0x4f/0x80 [ 494.334880][T11579] ? netif_change_flags+0xe8/0x1a0 [ 494.334907][T11579] do_setlink+0x35de/0x41c0 [ 494.334945][T11579] ? __pfx_do_setlink+0x10/0x10 [ 494.334979][T11579] ? kasan_quarantine_put+0xdd/0x220 [ 494.334999][T11579] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.335024][T11579] ? __br_vlan_set_default_pvid+0xb42/0xed0 [ 494.335045][T11579] ? kfree+0x18e/0x440 [ 494.335062][T11579] ? nlmsg_notify+0xf0/0x1a0 [ 494.335086][T11579] ? __br_vlan_set_default_pvid+0xb42/0xed0 [ 494.335104][T11579] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 494.335135][T11579] ? br_changelink+0x124f/0x1650 [ 494.335156][T11579] ? __pfx_br_changelink+0x10/0x10 [ 494.335172][T11579] ? __mutex_lock+0x5b6/0x1360 [ 494.335205][T11579] ? rtnl_newlink+0x8db/0x1c70 [ 494.335229][T11579] ? __pfx___mutex_lock+0x10/0x10 [ 494.335259][T11579] ? ns_capable+0x8a/0xf0 [ 494.335278][T11579] ? rtnl_link_get_net_capable+0x16a/0x350 [ 494.335303][T11579] rtnl_newlink+0x160b/0x1c70 [ 494.335321][T11579] ? netlink_sendmsg+0x805/0xb30 [ 494.335353][T11579] ? __pfx_rtnl_newlink+0x10/0x10 [ 494.335398][T11579] ? kasan_quarantine_put+0xdd/0x220 [ 494.335417][T11579] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.335443][T11579] ? nlmon_xmit+0xb0/0x100 [ 494.335463][T11579] ? kmem_cache_free+0x18f/0x400 [ 494.335491][T11579] ? __local_bh_enable_ip+0x12d/0x1c0 [ 494.335509][T11579] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.335529][T11579] ? __local_bh_enable_ip+0x12d/0x1c0 [ 494.335545][T11579] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 494.335566][T11579] ? __dev_queue_xmit+0x27b/0x3b50 [ 494.335590][T11579] ? __dev_queue_xmit+0x27b/0x3b50 [ 494.335611][T11579] ? __dev_queue_xmit+0x27b/0x3b50 [ 494.335634][T11579] ? __dev_queue_xmit+0x1d79/0x3b50 [ 494.335661][T11579] ? __lock_acquire+0xab9/0xd20 [ 494.335710][T11579] ? __pfx_rtnl_newlink+0x10/0x10 [ 494.335729][T11579] rtnetlink_rcv_msg+0x7cc/0xb70 [ 494.335754][T11579] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 494.335773][T11579] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 494.335788][T11579] ? ref_tracker_free+0x63a/0x7d0 [ 494.335806][T11579] ? __asan_memcpy+0x40/0x70 [ 494.335823][T11579] ? __pfx_ref_tracker_free+0x10/0x10 [ 494.335840][T11579] ? __skb_clone+0x63/0x7a0 [ 494.335871][T11579] netlink_rcv_skb+0x205/0x470 [ 494.335891][T11579] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 494.335912][T11579] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 494.335943][T11579] ? netlink_deliver_tap+0x2e/0x1b0 [ 494.335969][T11579] netlink_unicast+0x82c/0x9e0 [ 494.335997][T11579] ? __pfx_netlink_unicast+0x10/0x10 [ 494.336017][T11579] ? netlink_sendmsg+0x642/0xb30 [ 494.336034][T11579] ? skb_put+0x11b/0x210 [ 494.336058][T11579] netlink_sendmsg+0x805/0xb30 [ 494.336087][T11579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.336110][T11579] ? aa_sock_msg_perm+0xf1/0x1d0 [ 494.336134][T11579] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.336151][T11579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.336173][T11579] __sock_sendmsg+0x219/0x270 [ 494.336200][T11579] ____sys_sendmsg+0x505/0x830 [ 494.336229][T11579] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.336260][T11579] ? import_iovec+0x74/0xa0 [ 494.336280][T11579] ___sys_sendmsg+0x21f/0x2a0 [ 494.336306][T11579] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.336366][T11579] ? __fget_files+0x2a/0x420 [ 494.336388][T11579] ? __fget_files+0x3a0/0x420 [ 494.336422][T11579] __x64_sys_sendmsg+0x19b/0x260 [ 494.336448][T11579] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 494.336480][T11579] ? __pfx_ksys_write+0x10/0x10 [ 494.336500][T11579] ? rcu_is_watching+0x15/0xb0 [ 494.336522][T11579] ? do_syscall_64+0xbe/0x3b0 [ 494.336546][T11579] do_syscall_64+0xfa/0x3b0 [ 494.336564][T11579] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.336583][T11579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.336601][T11579] ? clear_bhb_loop+0x60/0xb0 [ 494.336622][T11579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.336639][T11579] RIP: 0033:0x7f9206d8eb69 [ 494.336656][T11579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.336670][T11579] RSP: 002b:00007f9207c75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.336689][T11579] RAX: ffffffffffffffda RBX: 00007f9206fb5fa0 RCX: 00007f9206d8eb69 [ 494.336702][T11579] RDX: 0000000024000090 RSI: 0000200000000280 RDI: 0000000000000004 [ 494.336713][T11579] RBP: 00007f9207c75090 R08: 0000000000000000 R09: 0000000000000000 [ 494.336724][T11579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 494.336733][T11579] R13: 0000000000000000 R14: 00007f9206fb5fa0 R15: 00007f92070dfa28 [ 494.336761][T11579] [ 494.337053][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.112176][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.251480][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.272068][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.315165][T11602] tipc: Enabled bearer , priority 0 [ 495.384594][T11596] syzkaller0: entered promiscuous mode [ 495.454463][T11596] syzkaller0: entered allmulticast mode [ 495.470027][T11604] loop6: detected capacity change from 0 to 2560 [ 495.489438][T11596] tipc: Resetting bearer [ 495.505041][T11604] Buffer I/O error on dev loop6, logical block 0, async page read [ 495.617490][T11604] Buffer I/O error on dev loop6, logical block 0, async page read [ 495.715081][T11604] Buffer I/O error on dev loop6, logical block 0, async page read [ 495.737914][T11591] tipc: Resetting bearer [ 495.764972][T11604] Buffer I/O error on dev loop6, logical block 0, async page read [ 495.784794][T11604] Buffer I/O error on dev loop6, logical block 0, async page read [ 495.863949][T11604] Buffer I/O error on dev loop6, logical block 0, async page read [ 495.952965][T11604] Buffer I/O error on dev loop6, logical block 0, async page read [ 495.989428][T11591] tipc: Disabling bearer [ 495.999252][T11604] Buffer I/O error on dev loop6, logical block 0, async page read [ 496.009514][T11604] ldm_validate_partition_table(): Disk read failed. [ 496.021548][T11604] Buffer I/O error on dev loop6, logical block 0, async page read [ 496.029915][T11604] Buffer I/O error on dev loop6, logical block 0, async page read [ 496.052807][T11604] Dev loop6: unable to read RDB block 0 [ 496.080222][T11604] loop6: unable to read partition table [ 496.224443][T11604] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 496.624268][T10185] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 496.794242][ T5867] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 496.814068][T10185] usb 4-1: Using ep0 maxpacket: 8 [ 496.844967][T10185] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 496.855814][T10185] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 3254, setting to 1024 [ 496.901450][T10185] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 496.937423][T10185] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 496.989358][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1505'. [ 497.004308][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 497.035705][T11625] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1504'. [ 497.047865][T11623] dlm: no locking on control device [ 497.085717][ T5867] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 497.102147][T11625] netlink: 'syz.2.1504': attribute type 6 has an invalid length. [ 497.114615][T10185] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 497.152615][T11625] netlink: 'syz.2.1504': attribute type 1 has an invalid length. [ 497.162189][ T5867] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 497.184258][T10185] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.203018][T11625] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1504'. [ 497.228541][ T5867] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 497.248495][T10185] usb 4-1: Product: syz [ 497.273376][T10185] usb 4-1: Manufacturer: syz [ 497.286872][ T5867] usb 2-1: config 1 has no interface number 0 [ 497.296737][T10185] usb 4-1: SerialNumber: syz [ 497.336036][ T5867] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 497.358273][T11614] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 497.365779][T11614] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 497.393311][ T5867] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 497.500430][ T5867] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 497.623743][T11635] syzkaller1: entered promiscuous mode [ 497.644278][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.672772][T11635] syzkaller1: entered allmulticast mode [ 497.704784][ T5867] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 497.726916][T11643] loop2: detected capacity change from 0 to 7 [ 497.791227][T10185] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 497.826595][T10185] usbtest 4-1:1.0: Linux user mode ISO test driver [ 497.858895][T10185] usbtest 4-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 497.879698][T10185] usb 4-1: USB disconnect, device number 54 [ 497.902914][ T5867] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 498.242373][T11649] netlink: 'syz.4.1511': attribute type 11 has an invalid length. [ 498.272757][T11649] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1511'. [ 498.304710][T10185] usb 2-1: USB disconnect, device number 47 [ 498.312370][T10185] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 498.454174][T10298] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 498.618385][T11657] hub 9-0:1.0: USB hub found [ 498.654609][T11657] hub 9-0:1.0: 1 port detected [ 498.675306][T10298] usb 1-1: config 0 has an invalid interface number: 93 but max is 0 [ 498.693478][T10298] usb 1-1: config 0 has no interface number 0 [ 498.722631][T10298] usb 1-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 498.733554][T10298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.753191][T10298] usb 1-1: Product: syz [ 498.793861][T10298] usb 1-1: Manufacturer: syz [ 498.802434][T10298] usb 1-1: SerialNumber: syz [ 498.844830][T10298] usb 1-1: config 0 descriptor?? [ 498.977585][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1516'. [ 498.995776][T11663] dlm: no locking on control device [ 499.081277][T10298] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 499.111257][T10298] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 499.146626][T10298] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 499.161366][T10298] usb 1-1: media controller created [ 499.181027][T10298] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 499.575593][T10298] DVB: Unable to find symbol dib7000p_attach() [ 499.582060][T10298] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 499.595521][T10298] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 499.724200][T10327] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 501.104091][T11679] netlink: 'syz.2.1520': attribute type 11 has an invalid length. [ 501.154343][T11679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1520'. [ 501.247337][T11686] hub 9-0:1.0: USB hub found [ 501.253710][T11686] hub 9-0:1.0: 1 port detected [ 501.387655][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.394316][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.324148][T10327] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 502.611172][T10327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.676283][T10327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.744898][T10327] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 502.839885][T10327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.963197][T10327] usb 2-1: config 0 descriptor?? [ 503.565175][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 503.565191][ T30] audit: type=1326 audit(1754418138.533:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c378eb69 code=0x7ffc0000 [ 503.639890][T10327] cp2112 0003:10C4:EA90.001C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 503.659676][ T30] audit: type=1326 audit(1754418138.533:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c378eb69 code=0x7ffc0000 [ 503.771392][ T30] audit: type=1326 audit(1754418138.533:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f56c378eb69 code=0x7ffc0000 [ 503.858518][T10327] cp2112 0003:10C4:EA90.001C: Part Number: 0x00 Device Version: 0x00 [ 503.896592][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1528'. [ 503.899387][ T30] audit: type=1326 audit(1754418138.533:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c378eb69 code=0x7ffc0000 [ 503.954571][ T30] audit: type=1326 audit(1754418138.533:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c378eb69 code=0x7ffc0000 [ 503.978675][ T30] audit: type=1326 audit(1754418138.533:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f56c378eb69 code=0x7ffc0000 [ 503.987884][T11711] dlm: no locking on control device [ 504.026344][ T30] audit: type=1326 audit(1754418138.533:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c378eb69 code=0x7ffc0000 [ 504.174980][ T30] audit: type=1326 audit(1754418138.533:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c378eb69 code=0x7ffc0000 [ 504.232426][ T30] audit: type=1326 audit(1754418138.533:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f56c378eb69 code=0x7ffc0000 [ 504.354319][ T30] audit: type=1326 audit(1754418138.533:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c378eb69 code=0x7ffc0000 [ 504.502493][T10298] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 504.511505][T10327] cp2112 0003:10C4:EA90.001C: error reading lock byte: -71 [ 504.525041][T10298] usb 1-1: media controller created [ 504.542871][T10298] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 504.554123][T10327] usb 2-1: USB disconnect, device number 48 [ 504.575195][T10298] dib0700: the master dib7090 has to be initialized first [ 504.606409][T10298] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 504.905630][T10298] rc_core: IR keymap rc-dib0700-rc5 not found [ 504.932425][T10298] Registered IR keymap rc-empty [ 504.963718][T11736] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1535'. [ 505.089759][T10298] dvb-usb: could not initialize remote control. [ 505.109452][T10298] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 505.190840][T10298] usb 1-1: USB disconnect, device number 67 [ 505.430917][T10298] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 505.624205][ T5867] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 505.825959][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.837345][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.873506][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 505.932740][ T5867] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 505.983125][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.029313][ T5867] usb 3-1: config 0 descriptor?? [ 506.454463][T10298] usb 2-1: new low-speed USB device number 49 using dummy_hcd [ 506.510626][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1541'. [ 506.571012][T11752] dlm: no locking on control device [ 506.644048][T10298] usb 2-1: Invalid ep0 maxpacket: 32 [ 506.777473][ T5867] usbhid 3-1:0.0: can't add hid device: -71 [ 506.783504][ T5867] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 506.787964][T10298] usb 2-1: new low-speed USB device number 50 using dummy_hcd [ 506.814467][T10327] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 506.844006][ T5867] usb 3-1: USB disconnect, device number 61 [ 506.978457][T10298] usb 2-1: Invalid ep0 maxpacket: 32 [ 506.992723][T10327] usb 4-1: config 0 has an invalid interface number: 93 but max is 0 [ 507.001637][T10298] usb usb2-port1: attempt power cycle [ 507.007750][T10327] usb 4-1: config 0 has no interface number 0 [ 507.027066][T10327] usb 4-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 507.043538][T10327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.054839][T10327] usb 4-1: Product: syz [ 507.060113][T10327] usb 4-1: Manufacturer: syz [ 507.065683][T10327] usb 4-1: SerialNumber: syz [ 507.073528][T10327] usb 4-1: config 0 descriptor?? [ 507.450872][T10327] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 507.476931][T10327] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 507.504043][T10298] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 507.512697][T10327] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 507.532887][T10298] usb 2-1: Invalid ep0 maxpacket: 32 [ 507.541878][T10327] usb 4-1: media controller created [ 507.562888][T10327] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 507.594772][ T9] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 507.738673][T10298] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 507.795987][T10298] usb 2-1: Invalid ep0 maxpacket: 32 [ 507.816970][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.840765][T10298] usb usb2-port1: unable to enumerate USB device [ 507.954095][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 508.037269][T10327] DVB: Unable to find symbol dib7000p_attach() [ 508.045768][ T9] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 508.055137][T10327] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 508.064187][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.068394][T10327] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 508.089762][ T9] usb 1-1: config 0 descriptor?? [ 508.114123][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 508.130525][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 508.165367][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 508.193303][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 508.220964][ T9] usb 1-1: media controller created [ 508.248377][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 508.293751][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 508.339537][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 508.367749][T11784] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 508.375972][T11784] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 508.383340][T11784] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 508.729148][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input26 [ 508.762849][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 508.783293][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 508.842369][T11787] FAULT_INJECTION: forcing a failure. [ 508.842369][T11787] name failslab, interval 1, probability 0, space 0, times 0 [ 508.873355][T11787] CPU: 0 UID: 0 PID: 11787 Comm: syz.2.1552 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 508.873380][T11787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 508.873391][T11787] Call Trace: [ 508.873398][T11787] [ 508.873407][T11787] dump_stack_lvl+0x189/0x250 [ 508.873432][T11787] ? __pfx____ratelimit+0x10/0x10 [ 508.873451][T11787] ? __pfx_dump_stack_lvl+0x10/0x10 [ 508.873474][T11787] ? __pfx__printk+0x10/0x10 [ 508.873501][T11787] ? __pfx___might_resched+0x10/0x10 [ 508.873514][T11787] ? fs_reclaim_acquire+0x7d/0x100 [ 508.873540][T11787] should_fail_ex+0x414/0x560 [ 508.873565][T11787] should_failslab+0xa8/0x100 [ 508.873590][T11787] kmem_cache_alloc_noprof+0x73/0x3c0 [ 508.873612][T11787] ? __pmd_alloc+0xc6/0x3b0 [ 508.873637][T11787] __pmd_alloc+0xc6/0x3b0 [ 508.873662][T11787] __handle_mm_fault+0x9ad/0x5440 [ 508.873700][T11787] ? __pfx___handle_mm_fault+0x10/0x10 [ 508.873739][T11787] ? find_vma+0xe7/0x160 [ 508.873758][T11787] ? __pfx_find_vma+0x10/0x10 [ 508.873779][T11787] handle_mm_fault+0x40a/0x8e0 [ 508.873807][T11787] do_user_addr_fault+0x764/0x1390 [ 508.873845][T11787] exc_page_fault+0x76/0xf0 [ 508.873865][T11787] asm_exc_page_fault+0x26/0x30 [ 508.873882][T11787] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 508.873911][T11787] Code: c4 10 e9 84 0a 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 0a 04 00 66 2e [ 508.873925][T11787] RSP: 0018:ffffc90003c17d78 EFLAGS: 00050202 [ 508.873940][T11787] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 508.873951][T11787] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc90003c17e00 [ 508.873962][T11787] RBP: ffffc90003c17e68 R08: 0000000000000003 R09: 0000000000000004 [ 508.873972][T11787] R10: dffffc0000000000 R11: fffff52000782fc0 R12: ffff888058bcaa00 [ 508.873985][T11787] R13: ffffc90003c17e00 R14: ffffc90003c17e00 R15: 0000200000000000 [ 508.874017][T11787] _copy_from_user+0x7a/0xb0 [ 508.874035][T11787] do_sock_getsockopt+0x17d/0x450 [ 508.874059][T11787] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 508.874078][T11787] ? write_ibpb+0x30/0x40 [ 508.874096][T11787] ? __fget_files+0x3a0/0x420 [ 508.874118][T11787] ? __fget_files+0x2a/0x420 [ 508.874147][T11787] __x64_sys_getsockopt+0x1a5/0x250 [ 508.874169][T11787] ? write_ibpb+0x30/0x40 [ 508.874188][T11787] ? write_ibpb+0x30/0x40 [ 508.874211][T11787] do_syscall_64+0xfa/0x3b0 [ 508.874229][T11787] ? lockdep_hardirqs_on+0x9c/0x150 [ 508.874247][T11787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.874263][T11787] ? clear_bhb_loop+0x60/0xb0 [ 508.874284][T11787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.874300][T11787] RIP: 0033:0x7f56c378eb69 [ 508.874315][T11787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.874329][T11787] RSP: 002b:00007f56c4587038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 508.874345][T11787] RAX: ffffffffffffffda RBX: 00007f56c39b5fa0 RCX: 00007f56c378eb69 [ 508.874357][T11787] RDX: 000000000000007f RSI: 0000000000000084 RDI: 0000000000000003 [ 508.874367][T11787] RBP: 00007f56c4587090 R08: 0000200000000000 R09: 0000000000000000 [ 508.874379][T11787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.874390][T11787] R13: 0000000000000000 R14: 00007f56c39b5fa0 R15: 00007f56c3adfa28 [ 508.874418][T11787] [ 509.226605][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 509.233030][ T9] dvb-usb: error while querying for an remote control event. [ 509.395751][T10298] dvb-usb: bulk message failed: -22 (1/0) [ 509.401532][T10298] dvb-usb: error while querying for an remote control event. [ 509.564790][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 509.570589][ T9] dvb-usb: error while querying for an remote control event. [ 509.734077][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 509.745621][ T9] dvb-usb: error while querying for an remote control event. [ 509.944399][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 509.950188][ T9] dvb-usb: error while querying for an remote control event. [ 510.114281][T11793] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 510.138502][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 510.144396][ T9] dvb-usb: error while querying for an remote control event. [ 510.242695][T11796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1555'. [ 510.279051][T11796] dlm: no locking on control device [ 510.324029][T10298] dvb-usb: bulk message failed: -22 (1/0) [ 510.329924][T10298] dvb-usb: error while querying for an remote control event. [ 510.384790][T10185] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 510.534259][T10298] dvb-usb: bulk message failed: -22 (1/0) [ 510.540322][T10298] dvb-usb: error while querying for an remote control event. [ 510.564018][ T9] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 510.575887][T10185] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.601692][T10185] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 510.652486][T10185] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 510.663084][T10185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.681720][T10185] usb 2-1: Product: syz [ 510.694245][T10185] usb 2-1: Manufacturer: syz [ 510.699039][T10185] usb 2-1: SerialNumber: syz [ 510.714088][T10298] dvb-usb: bulk message failed: -22 (1/0) [ 510.727896][T10298] dvb-usb: error while querying for an remote control event. [ 510.738628][ T9] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 510.747435][ T9] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 510.758834][ T9] usb 5-1: config 220 has no interface number 2 [ 510.783026][T10185] hub 2-1:1.0: bad descriptor, ignoring hub [ 510.794357][T10185] hub 2-1:1.0: probe with driver hub failed with error -5 [ 510.802170][ T9] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 510.903070][T10298] dvb-usb: bulk message failed: -22 (1/0) [ 510.950229][T10298] dvb-usb: error while querying for an remote control event. [ 510.959951][ T9] usb 5-1: config 220 interface 0 has no altsetting 0 [ 510.998070][ T9] usb 5-1: config 220 interface 76 has no altsetting 0 [ 511.005281][ T9] usb 5-1: config 220 interface 1 has no altsetting 0 [ 511.017092][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 511.067412][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.116580][ T9] usb 5-1: Product: syz [ 511.120803][ T9] usb 5-1: Manufacturer: syz [ 511.126334][T10185] usb 2-1: USB disconnect, device number 53 [ 511.134965][T10298] dvb-usb: bulk message failed: -22 (1/0) [ 511.153981][T10298] dvb-usb: error while querying for an remote control event. [ 511.205996][ T9] usb 5-1: SerialNumber: syz [ 511.324018][T10298] dvb-usb: bulk message failed: -22 (1/0) [ 511.329819][T10298] dvb-usb: error while querying for an remote control event. [ 511.433232][ T9] usb 5-1: selecting invalid altsetting 0 [ 511.444459][T10185] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 511.449776][ T9] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 511.482632][ T9] usb 5-1: No valid video chain found. [ 511.519723][ T9] usb 5-1: selecting invalid altsetting 0 [ 511.527143][ T9] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 511.545772][ T9] usb 5-1: USB disconnect, device number 60 [ 511.606594][T10185] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 511.634157][T10298] dvb-usb: bulk message failed: -22 (1/0) [ 511.634380][T10185] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 511.640253][T10298] dvb-usb: error while querying for an remote control event. [ 511.722448][T10185] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 511.744336][T10185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.752360][T10185] usb 2-1: Product: syz [ 511.762619][T10185] usb 2-1: Manufacturer: syz [ 511.770709][T10185] usb 2-1: SerialNumber: syz [ 511.785303][T10185] hub 2-1:1.0: bad descriptor, ignoring hub [ 511.801489][T10185] hub 2-1:1.0: probe with driver hub failed with error -5 [ 511.814605][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 511.820411][ T9] dvb-usb: error while querying for an remote control event. [ 512.004185][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 512.009989][ T9] dvb-usb: error while querying for an remote control event. [ 512.196745][T11810] syzkaller1: entered promiscuous mode [ 512.202266][T11810] syzkaller1: entered allmulticast mode [ 512.224201][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 512.230128][ T9] dvb-usb: error while querying for an remote control event. [ 512.404117][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 512.410025][ T9] dvb-usb: error while querying for an remote control event. [ 512.574441][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 512.636457][ T9] dvb-usb: error while querying for an remote control event. [ 512.663823][T11785] ------------[ cut here ]------------ [ 512.669371][T11785] usb 4-1: BOGUS control dir, pipe 80003780 doesn't match bRequestType c0 [ 512.682726][T11785] WARNING: CPU: 1 PID: 11785 at drivers/usb/core/urb.c:413 usb_submit_urb+0x112b/0x1830 [ 512.692795][T11785] Modules linked in: [ 512.697233][T11785] CPU: 1 UID: 0 PID: 11785 Comm: syz.0.1550 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 512.709007][T11785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.719270][T11785] RIP: 0010:usb_submit_urb+0x112b/0x1830 [ 512.725310][T11785] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 e0 e7 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 96 6b 58 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80 [ 512.725940][T10327] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 512.745410][T11785] RSP: 0018:ffffc90003c27850 EFLAGS: 00010246 [ 512.745456][T11785] RAX: f548a2f37b1d4800 RBX: ffff888026bf1f00 RCX: 0000000000080000 [ 512.745471][T11785] RDX: ffffc9000df49000 RSI: 0000000000006060 RDI: 0000000000006061 [ 512.776497][T11785] RBP: 1ffff1100ad32a7c R08: 0000000000000003 R09: 0000000000000004 [ 512.784902][T11785] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: dffffc0000000000 [ 512.792946][T11785] R13: ffff8880569953e0 R14: 0000000080003780 R15: ffff8880291e0da0 [ 512.801111][T11785] FS: 00007f9207c336c0(0000) GS:ffff888125d24000(0000) knlGS:0000000000000000 [ 512.810179][T11785] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 512.817217][T11785] CR2: 0000200000125030 CR3: 0000000078a02000 CR4: 00000000003526f0 [ 512.825258][T11785] Call Trace: [ 512.828550][T11785] [ 512.831739][T11785] usb_start_wait_urb+0x114/0x4c0 [ 512.836842][T11785] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 512.842400][T11785] usb_control_msg+0x232/0x3e0 [ 512.847335][T11785] dib0700_i2c_xfer+0xba7/0xf70 [ 512.852174][T11785] ? __lock_acquire+0xab9/0xd20 [ 512.857078][T11785] __i2c_transfer+0x874/0x2170 [ 512.861837][T11785] ? i2c_transfer+0x11d/0x3a0 [ 512.866554][T11785] ? __pfx___i2c_transfer+0x10/0x10 [ 512.871744][T11785] ? rt_mutex_lock_nested+0x172/0x1e0 [ 512.877270][T11785] ? i2c_transfer+0x11d/0x3a0 [ 512.881928][T11785] i2c_transfer+0x25b/0x3a0 [ 512.886455][T11785] ? __pfx_i2c_transfer+0x10/0x10 [ 512.891461][T11785] ? _copy_from_user+0x94/0xb0 [ 512.896423][T11785] i2cdev_ioctl_rdwr+0x460/0x740 [ 512.901351][T11785] i2cdev_ioctl+0x64b/0x7f0 [ 512.906012][T11785] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 512.911018][T11785] ? __fget_files+0x3a0/0x420 [ 512.915727][T11785] ? __fget_files+0x2a/0x420 [ 512.920315][T11785] ? bpf_lsm_file_ioctl+0x9/0x20 [ 512.925281][T11785] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 512.930284][T11785] __se_sys_ioctl+0xfc/0x170 [ 512.935018][T11785] do_syscall_64+0xfa/0x3b0 [ 512.939511][T11785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.945616][T11785] ? asm_exc_stack_segment+0x26/0x30 [ 512.950889][T11785] ? clear_bhb_loop+0x60/0xb0 [ 512.955602][T11785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.961473][T11785] RIP: 0033:0x7f9206d8eb69 [ 512.966045][T11785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.985709][T11785] RSP: 002b:00007f9207c33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 512.994375][T11785] RAX: ffffffffffffffda RBX: 00007f9206fb6160 RCX: 00007f9206d8eb69 [ 513.002327][T11785] RDX: 0000200000002580 RSI: 0000000000000707 RDI: 0000000000000006 [ 513.010336][T11785] RBP: 00007f9206e11df1 R08: 0000000000000000 R09: 0000000000000000 [ 513.018364][T11785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.026573][T11785] R13: 0000000000000000 R14: 00007f9206fb6160 R15: 00007f92070dfa28 [ 513.034584][T11785] [ 513.037601][T11785] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 513.044867][T11785] CPU: 1 UID: 0 PID: 11785 Comm: syz.0.1550 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 513.056989][T11785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 513.067029][T11785] Call Trace: [ 513.070288][T11785] [ 513.073199][T11785] dump_stack_lvl+0x99/0x250 [ 513.077778][T11785] ? __asan_memcpy+0x40/0x70 [ 513.082348][T11785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.087523][T11785] ? __pfx__printk+0x10/0x10 [ 513.092105][T11785] vpanic+0x281/0x750 [ 513.096066][T11785] ? __pfx__printk+0x10/0x10 [ 513.100632][T11785] ? __pfx_vpanic+0x10/0x10 [ 513.105110][T11785] ? is_bpf_text_address+0x292/0x2b0 [ 513.110429][T11785] panic+0xb9/0xc0 [ 513.114145][T11785] ? __pfx_panic+0x10/0x10 [ 513.118549][T11785] __warn+0x31b/0x4b0 [ 513.122507][T11785] ? usb_submit_urb+0x112b/0x1830 [ 513.127706][T11785] ? usb_submit_urb+0x112b/0x1830 [ 513.132707][T11785] report_bug+0x2be/0x4f0 [ 513.137016][T11785] ? usb_submit_urb+0x112b/0x1830 [ 513.142030][T11785] ? usb_submit_urb+0x112b/0x1830 [ 513.147035][T11785] ? usb_submit_urb+0x112d/0x1830 [ 513.152039][T11785] handle_bug+0x84/0x160 [ 513.156261][T11785] exc_invalid_op+0x1a/0x50 [ 513.160746][T11785] asm_exc_invalid_op+0x1a/0x20 [ 513.165684][T11785] RIP: 0010:usb_submit_urb+0x112b/0x1830 [ 513.171300][T11785] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 e0 e7 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 96 6b 58 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80 [ 513.190878][T11785] RSP: 0018:ffffc90003c27850 EFLAGS: 00010246 [ 513.196923][T11785] RAX: f548a2f37b1d4800 RBX: ffff888026bf1f00 RCX: 0000000000080000 [ 513.204872][T11785] RDX: ffffc9000df49000 RSI: 0000000000006060 RDI: 0000000000006061 [ 513.212819][T11785] RBP: 1ffff1100ad32a7c R08: 0000000000000003 R09: 0000000000000004 [ 513.220766][T11785] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: dffffc0000000000 [ 513.228715][T11785] R13: ffff8880569953e0 R14: 0000000080003780 R15: ffff8880291e0da0 [ 513.236689][T11785] usb_start_wait_urb+0x114/0x4c0 [ 513.241712][T11785] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 513.247246][T11785] usb_control_msg+0x232/0x3e0 [ 513.252001][T11785] dib0700_i2c_xfer+0xba7/0xf70 [ 513.256855][T11785] ? __lock_acquire+0xab9/0xd20 [ 513.261692][T11785] __i2c_transfer+0x874/0x2170 [ 513.266433][T11785] ? i2c_transfer+0x11d/0x3a0 [ 513.271092][T11785] ? __pfx___i2c_transfer+0x10/0x10 [ 513.276267][T11785] ? rt_mutex_lock_nested+0x172/0x1e0 [ 513.281618][T11785] ? i2c_transfer+0x11d/0x3a0 [ 513.286273][T11785] i2c_transfer+0x25b/0x3a0 [ 513.290751][T11785] ? __pfx_i2c_transfer+0x10/0x10 [ 513.295754][T11785] ? _copy_from_user+0x94/0xb0 [ 513.300493][T11785] i2cdev_ioctl_rdwr+0x460/0x740 [ 513.305413][T11785] i2cdev_ioctl+0x64b/0x7f0 [ 513.309894][T11785] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 513.314898][T11785] ? __fget_files+0x3a0/0x420 [ 513.319554][T11785] ? __fget_files+0x2a/0x420 [ 513.324126][T11785] ? bpf_lsm_file_ioctl+0x9/0x20 [ 513.329044][T11785] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 513.334081][T11785] __se_sys_ioctl+0xfc/0x170 [ 513.338656][T11785] do_syscall_64+0xfa/0x3b0 [ 513.343141][T11785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.349201][T11785] ? asm_exc_stack_segment+0x26/0x30 [ 513.354457][T11785] ? clear_bhb_loop+0x60/0xb0 [ 513.359112][T11785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.364979][T11785] RIP: 0033:0x7f9206d8eb69 [ 513.369382][T11785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.388964][T11785] RSP: 002b:00007f9207c33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 513.397376][T11785] RAX: ffffffffffffffda RBX: 00007f9206fb6160 RCX: 00007f9206d8eb69 [ 513.405357][T11785] RDX: 0000200000002580 RSI: 0000000000000707 RDI: 0000000000000006 [ 513.413324][T11785] RBP: 00007f9206e11df1 R08: 0000000000000000 R09: 0000000000000000 [ 513.421297][T11785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.429265][T11785] R13: 0000000000000000 R14: 00007f9206fb6160 R15: 00007f92070dfa28 [ 513.437244][T11785] [ 513.440516][T11785] Kernel Offset: disabled [ 513.444856][T11785] Rebooting in 86400 seconds..