last executing test programs: 9.04381654s ago: executing program 0 (id=1583): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x2f126000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000000)=""/65, 0x328000, 0x1000}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local, {[@generic={0x94, 0x4, "d853"}]}}, @address_request={0x11, 0x0, 0x0, 0x90b6}}}}}, 0x0) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101288, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000010c0)={0x2, 0x0, 0x400000000000000, 0x201}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) socket(0x10, 0x803, 0x0) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x40900) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={r6, 0x4, 0x29, 0x40, 0x7, 0xfffff0b3}, 0x14) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000100)={r6, 0xe93, 0xc, 0xffff, 0x8001, 0x2d}, 0x14) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) 7.888773875s ago: executing program 0 (id=1588): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x40) r1 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000), &(0x7f0000000200)) io_uring_enter(r1, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 7.426263018s ago: executing program 0 (id=1589): openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000104c05c4050000000000010902240001000000000904000001030081030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') syz_usb_connect(0x0, 0x24, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x11, 0xb4, 0x8e, 0x10, 0xeb1, 0x7007, 0x210, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x33, 0x4, 0x29}}]}}]}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) socket$inet6(0xa, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0xffffffff, 0x5, 0xf, 0x10, 0x13, 0x1f, 0x7}}]}}]}, 0x148}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@mpls_getnetconf={0x2c, 0x52, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYRES16=r1, @ANYRES8=r3], 0x90}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000440)={0x16, @dev={0xac, 0x14, 0x14, 0x18}, 0x4e22, 0x4, 'lc\x00', 0x9, 0x3, 0x72}, 0x2c) sendmsg$nl_route(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000202}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=@ipv6_deladdr={0x94, 0x15, 0x8, 0x70bd28, 0x25dfdbfb, {0xa, 0x1, 0x2, 0xff, r9}, [@IFA_CACHEINFO={0x14, 0x6, {0x400, 0xec0, 0x8, 0x8001}}, @IFA_CACHEINFO={0x14, 0x6, {0x400, 0x47cc, 0x9627, 0x9}}, @IFA_ADDRESS={0x14, 0x1, @private0}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_LOCAL={0x14, 0x2, @private1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8000}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x20000051) 6.872232424s ago: executing program 2 (id=1593): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}, 0x12}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) 6.87153662s ago: executing program 4 (id=1594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000140)=0x8) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 6.839445832s ago: executing program 4 (id=1595): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r4, &(0x7f00000003c0), 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r6, r5}) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="1f", 0x1}], 0x1}, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/738], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet6(0xa, 0x2, 0xffffffff) 6.031594115s ago: executing program 2 (id=1598): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket(0x3, 0x4, 0x4) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x40, 0x0, 0x12, {0x12, 0x2, "4079ed2e67424e90489fefd077a76639"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x421}}}, &(0x7f0000000740)={0x44, &(0x7f0000000540)={0x0, 0x1, 0xa1, "7c38e709fc38ca8ac9f4ec713c698007fe67f7c96b7c246b655aee9243dcebafcfb8589511063b8ad872cbf66287c0cf005c1adec157deb2d8e2ed4d90b671a3c7f73b590f1e2aa4e392d5e0d837822f553fb4e9a8d3f13dbafef747e6d4adf358ee038b400d2c313314e2c1b10136220240e5eecc45e901f923af66cc8098a244e08f476cc5044a45571d6750669249bc97ca268fcd9fd9110cdec6f6930df6c5"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xcf}, 0xfffffffffffffffc, &(0x7f0000000600)={0x20, 0x81, 0x2, "adf6"}, &(0x7f0000000640)={0x20, 0x82, 0x2, "866d"}, &(0x7f0000000680)={0x20, 0x83, 0x3, "a1714e"}, &(0x7f00000006c0)={0x20, 0x84, 0x2, "1479"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "0bd505"}}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000100)={0x954a9bf9b758d08d, 0x2, 0x2, {0x2, 0xe}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1004}}, &(0x7f0000000280), &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x602}}}}, 0x0) 5.930483538s ago: executing program 4 (id=1599): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x7, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(&(0x7f0000002d80), 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="020100090a000000000000000000000002001340020000002cbd700001352000b06d0ef5392cf72b14140300c18488d50000010000000000608f000000000000000300"], 0x50}}, 0x0) writev(r5, &(0x7f00000003c0), 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ac4000/0x4000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 5.072100248s ago: executing program 2 (id=1600): r0 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000004180)={"0070491d", 0x0, 0x7, 0x2, 0x1, 0x5, "00000000005a2392a1fdad1a0c00", "426ec62b", '\x00', "0100", ["e86621d9cc668c391f77c506", "3549ffffffffffffff00", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) 4.911992915s ago: executing program 2 (id=1601): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x2, 0x7, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x15}, 0x80, 0x8, 0x7, 0x6}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x19b98a481344f0c4}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xc8, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffa}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x1) r4 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) read$FUSE(r5, &(0x7f00000093c0)={0x2020}, 0x2020) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r9]}}], 0x38, 0x44804}}], 0x1, 0x20000080) r11 = socket$inet_udplite(0x2, 0x2, 0x88) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 4.37008889s ago: executing program 2 (id=1603): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r7, &(0x7f00000009c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c700000000ea2f35d4ea667817d90e8c3e0d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f3403efa3554d53f458448bed7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907", 0xa5, 0x48844, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x604ab000) sendmmsg$inet6(r7, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="2ec15575afe867fdba546430ca1a47eb15c41b179f8897fc1fbbfc164b92054405964c6c9d2f2ca1430c84c3ceb4810d0311a5c28fa9c1eb7511923f6ae5d4c7cdf4890a373d318f0a00"/91, 0x5b}, {&(0x7f0000000380)="63ce2e88626ff019a592a1faaa30606614baeaef770465257840ae8f02ce892875a9f6e5f40cd87b765acf2da11a69bb49199b4edf44d31a3c9d73f67dc2d7c7453d1dc43b8b74d96e30f7b67032c3611f017ebd3962c42f64174f91f244d50f57873444282103a1ee59b8fb29c92b148600ea95964445f7a6180d38e7834d0732189b9263648675d4332c8253af6aaef3fe5d2dacfef7e832f5efc1b7a32b6332ae5ddc7c943cef2f1c9d9187347f285bfe5577b8caa751a2fc09349166bc23453dbfacd515ac06ddfbc2118d3b887ef740f6ea6a1e81d4642d3f", 0xdb}, {&(0x7f0000005000)="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"/3786, 0xeca}], 0x3}}], 0x1, 0x884) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0}, &(0x7f00000002c0)=0x40) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000008880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getresgid(&(0x7f000000a8c0), &(0x7f000000a900)=0x0, &(0x7f000000a940)=0x0) sendmmsg$unix(r5, &(0x7f000000adc0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000006c0)="05d789aed97543aaff8c7b1de255524799c55363316c1d3375a3bbcd09ab0a4fee996d50f445353fa7f702c39c36ce92110e20395a21f51b215f02d9f55b30d0f548da2b86085d90a75abd5cb7ac73cbc5d0ec946e04af667e61366dbf8cb394bf434691f2975df9190581991a6a47c1715a63b61dbc2bf9464793ed8838ef4f39a861d2e0bfe63ffedb643c090c6213bef10a751949f04cba797466d7bc88678240be6aedb1282b98edb8143eaeb3cffac762b555f0b6813b70d5baa8b9b120f5a9fb91026ff9cb2e925d3ca918583911124f1648dcbebd6d21872e8ae442f2b283d06257157798a9", 0xe9}, {&(0x7f0000002380)="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", 0x1000}, {&(0x7f0000003380)="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", 0x1000}, {&(0x7f0000000100)="c81603b50a5804f77c92533705990483", 0x10}, {&(0x7f0000000480)="06789d3d5c669a2816ab4c904b21ad3d65d0bd2ad77d1b264c1a2104838497224de8f85d9e5409de6cfa3288c081de516bed06876b829a74adcd92fcdbb70e58ea4ff001261a381b91411b0c46e4cbfbca5eeab300ceea8d5da24c4a000724", 0x5f}], 0x5, &(0x7f0000004800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000300000f0ffff1f00c5cc95274c40654c", @ANYRES32=r7, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r7, @ANYRES32, @ANYRES32=r5], 0x130, 0x48881}}, {{&(0x7f0000004940)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004a00)=[{&(0x7f00000049c0)="fee7b3f61e387e32424839c261f5c34b8cce4bc3bd25399b2fd4fc15fa7677f7d6cb6ba1bd3ff642d7b590a8b301", 0x2e}], 0x1, &(0x7f0000004a40)=ANY=[@ANYBLOB="560f0000000000000100000001001000", @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x8080}}, {{&(0x7f0000004ac0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004d00)=[{&(0x7f0000004b40)="fdc58495a5168bfe82801aac17d046fa01f4394c9f4e31484b4b1a85c85dd0827b8cc575c88b61503a122aafb5c638eb6fe8adda7c7e6bac3fd43479b2dd49bb89096eb440357f58c2c5621c590eca2e91a762e5ce023977b50f663a972ff7662309ad7a6769db33ee682e7ff5281589f6dcad759308c4d99bf4426cf250831451d2bf4864a50ec29e58f12d8f5b57b3736641c9405968a7d681038f6764540f1fa083f0835ac80119c83f4550105965aa74d5192a61522dc3f7f8b8e6", 0xbd}, {&(0x7f0000004c00)="fcbf7015b2b9f9b679233c6d4beee36299e0aa7a508f2372a1d67f2be7df25b82d9577bbcf58657e45a57921946bb65afdaaea12ee510f45e9cedd13bdac166af1af79d65b89e2091219190215", 0x4d}, {&(0x7f0000004c80)="ccc7a453d9d79cbaa6ab18ebb3", 0xd}, {&(0x7f0000004cc0)="f4e07e68647e687ac539aaa2cbac", 0xe}], 0x4, 0x0, 0x0, 0x20000845}}, {{&(0x7f0000004d40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000006000)=[{&(0x7f0000004dc0)="00c31239f242f4ca4442bbf991ebb45069fe7216108accf8aa7b8fb68bf67dbedf6d5a698cc00fbd2cb604c5d077f99e779770215a6d47b0e215a7f9f68aab42265cd38993d2aab06ba855abb887f56a98b4ca6541b51a741b1c7bcb01e1a9df18e107c3ce7ec2c310bad418643c546f66745f4c6422490721f13699fe0853bbb8c77040fdea9c23069853232958a19fbe32220617a3ea70ddb17e304e29c9d174c5e55190f0f62c7fe727e9c7873dc09949b57bec0cadc8640a7f0f8b01ea4f7a851f188d", 0xc5}, {&(0x7f0000004ec0)="ce7b449c4adc0ca82b536f2e09c27f132d0515b024734854530001181e918beac3e5d2dc791be07ff2375656ac51fde108de5b9a4e6e2471bd6e514a81ba37dfcab3c7f1e8aeca1e7118945934f3362d17e491ec41dd37cfd6325c42988c17926d7306f007c608a86d95339355fba8bd98a8346f71104c2d172a75badde377b564234a2752b84f0d5f7f6a9db825790c953aaa8e236d975ca42fe4c1cb64bfc7ee828557fff049d85f0e091c4dc55b7039a4c398f1ff3196db58c5e361b6f4094f8697445b9c6044e94723c7f37051deec46f2bbcaffdaa42f2597761536446e61610b473167f20917c4d63eb73b64cb46a9", 0xf2}, {&(0x7f0000004fc0)="8b7e3578803bf7c8e8cb1dde17c378c5052426bdc67302", 0x17}, {&(0x7f0000005f00)="216d1f0b670febb28bd4133295e73758f6cffc5e7b2f6a18c176e76cb8731c3c76fdb237e22263e9be92b0e36cc09d0177b863683da460883d73d3df9b574e81dc33a38a64ab8f59e30924ef876728d4b4967c62fa670716e171a1defd6f03be6ba7f69335de1452d8b7a988bdc38f52e391c3bc5018f2e6d626f9ee322d38188566ca0d7771557e50d172b95cdfacefbd4f50343c7ad8be015a1646f54c985c69427e39114d7cae2945ba7896dc5d8387263d6a9410eb9ea82e4c7a2050a866d71ef77f8dcf07df87a1bcd1b6999e20bd8741f2aa43c0697259f98bd8", 0xdd}], 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000140000000000000001000000010000005179f0dc0500bf0d2fd6da799a59cded01b46abf96ba3df2f523436a88935b36779c569ac1919daf13cc47c5fb81e1939c84c2850b0448d6976a3ab9e8d38028c9f7cc835c85e9cc33a4ad578e7cadf9902474a4e17f6db9975b44534c4e31d8394dafe95dbb4892992f07a5cd1ef4fd9be9238ef2a262e117f6790cc534b9f73303a6595b06cabfd5709d00"/175, @ANYRES32=r7, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r4, @ANYRES32=r10, @ANYRES32=r6, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r5, @ANYRES32, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x140}}, {{&(0x7f0000008640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008840)=[{&(0x7f00000086c0)="d416c997ffe5bb446a37c273fdd4fa1100bbe768db5f3daec24ad84bd3dc72d626563f232bea99c5296a814097450620a6163a77f7fcbc62094017bd455442ca5ac7ba9763f5e98162b9785df144e48b78f9d8f0a858fd53da4b0f0ea6b872b21be423cbb1a000f84f0cafb63747041a1c03ceb9925be8427f6acb", 0x7b}, {&(0x7f0000008740)="f9bc2337124c95d269e80d501053673b08079128b802fc0c26437d0b130780ffa248a744a34b5e80", 0x28}, {&(0x7f0000008780)="30f4f2355fe76170b3e8b7b8bbe37d0f501b626e0c45c4b1be2835bc70f2c8593213c7df1de396321e9b1e9178af7284285ee2dfa72a2b2896b242217cf38ac45f09cc9fb398a719009ac82b38aef9ed62b1cce7a1ac6bc6feb400ee156f01e41fa9ac9da08aafdb10cd11cbba7dd4e037d3bb528c171c87135c5c486d360f855f6e26f17e6d922ac6fce590914d", 0x8e}], 0x3, &(0x7f000000a980)=[@cred={{0x1c, 0x1, 0x2, {0x0, r8, r9}}}], 0x20, 0x40}}, {{&(0x7f000000a9c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000ad00)=[{&(0x7f000000aa40)="779fae7451c115b67a155004f5e1560aaa3e34b76ce0b7ea79b67d5f7b5f0974e1edfc71db1963f299477e7523c19e29e6052975c3564d9e130347cc75ba45aee8cd0b29a72f6bffe9fa39ccec4d870e4b92d02957deb9499b45fd0f94fccc2fb2d29be2b6ed4eae8743b0b415de473369868745f0abf85ec6c2deea3b573b060c2c0b3e08ef37d5caee0de170baa718e0e8f9f816df4deb04bf72809e", 0x9d}, {&(0x7f000000ab00)="e931718f7907a9fe19b4fc2204d159cfa94e5dc2685099d1f6512e8402c425cf33b16a26220dcc905977763313305dd97e37903741c82d429d5c59bddf4eda57822112c24dee1c3eddcebc633f1e8fbcb165b5e571c352a2bf18b6", 0x5b}, {&(0x7f000000ab80)="88acc497c3382646754c1df916dc5802aac95bbdf4f13eab", 0x18}, {&(0x7f000000abc0)="de0b3986589ace679b831943e4da8fdb220e7ab355ab198287a66f24f7fe87bd4be87f6e73ce4de01d4d2e90df5a1b57a65e300ff425106458f504e5cb667d4b7fcda3b4f99e9762b3ced831e806", 0x4e}, {&(0x7f000000ac40)="5123531107df3732d23d2a5e31f1f9e5c4d00ea40e3b269fe66fa6615fe1167e7ec2674aa756697b395002b9ad600b875f00aac9edbbdfbf05dd8e49fde909953822f32255303dc9d99cbaa19d5c403a30efadc931639c4801f66a8251339a228adc7df026d69b1b531792e90b8190488de535f84f06861bd81be71cd9fb546817d691bf85ad12d5ae2adfd402789b263bf373c57efee2", 0x97}], 0x5, &(0x7f000000ad80)=ANY=[@ANYBLOB="1400", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x4040}}], 0x6, 0x20000000) r11 = accept4(r4, 0x0, 0x0, 0x800) recvmmsg(r11, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)=""/85, 0x55}, {0x0}], 0x2}, 0x4}], 0x100000, 0x10022, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd=r3, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b000000000000001c000000000004"], 0x48) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140), &(0x7f0000000280)) io_uring_enter(r0, 0x426c3, 0xdfffeffb, 0x44, 0x0, 0x0) 4.328049821s ago: executing program 0 (id=1604): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000304000000001000000000007400", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002900010000000600270004000000"], 0x44}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd2a, 0x0, {{@in6=@private1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}, {0x3}, 0xff, 0x6e6bb5}, [@tmpl={0x84, 0x5, [{{@in6=@remote, 0x4d5, 0x3c}, 0x0, @in6=@mcast2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffa, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x7d0e69533e2776f8, 0x3, 0xd, 0x0, 0x9}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) 4.240098312s ago: executing program 4 (id=1606): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = dup(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) gettid() socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000300)={'filter\x00', 0x4}, 0x68) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) 4.059932408s ago: executing program 0 (id=1607): socket(0x200000000000011, 0x4, 0x3) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) fremovexattr(r0, &(0x7f00000000c0)=@random={'btrfs.', '-\\:\x00'}) ioctl$VIDIOC_S_SELECTION(r1, 0xc0405668, &(0x7f0000000040)={0x9, 0x0, 0x1, {0x400e802, 0x4, 0x7, 0xfff}}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) dup3(r2, r3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x802, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000802"], 0x0) 3.388357499s ago: executing program 0 (id=1609): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x0, 0x8d, 0xce, 0x18, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40) r10 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r10, 0x2, &(0x7f00000000c0)={0x3}, 0x0) syz_usb_connect(0x4, 0x140, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x84, 0x89, 0x46, 0xff, 0x1d4d, 0xc, 0x1197, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12e, 0x3, 0x21, 0x0, 0x10, 0x1, [{{0x9, 0x4, 0x14, 0xf, 0x0, 0xb8, 0xf, 0xb7, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x2fb, 0x4, 0x3, 0x2}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x2, 0x5, [0x3, 0x6, 0x4, 0x6, 0x2], 0x5}, @selector_unit={0x8, 0x24, 0x5, 0x5, 0xfc, "489f31"}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0x60}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x81}]}]}}, {{0x9, 0x4, 0x7e, 0x8, 0x6, 0xc4, 0xe4, 0x13, 0x1, [], [{{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x19, 0xe, 0x1d}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x6, 0x0, 0x9, [@generic={0x5f, 0x23, "fb447ad422c6fb89b413bb7479684ba153f15f8f6f1c4781d0f238e000b0b244da55bd794ce1f85172e00e97050b67fda0e47fb00fe703e1bdc39f1bdae7c61f86eb160ac623d813a7ad1f4202ab454843b2e7ed2caf80fc8652d2bf75"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x7, 0xd, 0x5}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x2, 0xe, 0xd, [@generic={0x32, 0xc, "26f5046af0276a40f990be2b5c39e1a4b6abecbcd88363fc0f8b96224e6ac781fd22ae23eb6bdcf023c58f550c5a0dd2"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8f, 0x6}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0xd, 0x2, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x5}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x6, 0x4, 0x8}}]}}, {{0x9, 0x4, 0x6, 0x81, 0x0, 0xfc, 0x5b, 0x82, 0xd7}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x10, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000340)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x21, 0xf0}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x5, 0x3, 0xd}]}}) openat$full(0xffffffffffffff9c, 0x0, 0x2fb71da98128d4bd, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="2000000076000d0b00400000fedbdf250300008e94"], 0x20}, 0x1, 0x0, 0x0, 0x4005}, 0x20004000) 3.300420057s ago: executing program 2 (id=1610): getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000009cc0)={0x0, 0xf46f, 0x7}, &(0x7f0000009d00)=0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x6770c000) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x30, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000002840)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x3, 0x20, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0xc7}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x52000775) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20000, 0x104) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000000), &(0x7f00000000c0)=0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') unshare(0x2c020400) preadv(r4, 0x0, 0x0, 0x8, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIONCLEX(r5, 0x5450) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 2.268621067s ago: executing program 3 (id=1612): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x50}}, 0x0) r2 = socket(0x2, 0x3, 0xff) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r2, &(0x7f0000002fc0)=[{{0x0, 0xb00, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x302}}], 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}, 0x1, 0x0, 0x0, 0x40800}, 0x20004000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x8624, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, 0x0, 0x9, 0x4c, 0x100, 0xfffffffd}, &(0x7f0000000000)=0x98) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000001c0)=@raw=[@alu={0x7, 0x0, 0x1, 0x2, 0x1, 0xfffffffffffffff0, 0x8}, @generic={0x3, 0x0, 0x4, 0x5, 0x4}, @jmp={0x5, 0x0, 0xb, 0x1, 0x1, 0x50, 0xffffffffffffffff}], &(0x7f0000000240)='GPL\x00', 0xfa57, 0x9c, &(0x7f0000000440)=""/156, 0x41000, 0xa, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000280)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xa, 0xbf7, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f00000002c0)=@ethtool_ringparam={0x12, 0x0, 0x20040001, 0x0, 0x6eef}}) 1.924218657s ago: executing program 3 (id=1613): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) unshare(0x26020480) r1 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x11000000, 0x0, 0x0, 0x0, 0x10000000000000], 0x1, 0x0, 0x0, [{}]}, 0x88) 1.788037021s ago: executing program 3 (id=1614): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001e80), 0x8000) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078"], 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x8c880, 0x0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000001ec0)={{0xffffffffffffffff, 0x2, 0x10, 0x2, 0x200}, 0x6}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='4\x00\x00\x00', @ANYRES32], 0x20) r8 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) close_range(r5, r8, 0x2) 1.6841154s ago: executing program 1 (id=1615): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x10000000000030, 0x0, &(0x7f0000002280)) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000e03ac71002000000ffffffff0000000200"/88, 0x58}], 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback={0xfeffffff00004000}, @mcast2, {[], @mld={0x82, 0x0, 0x0, 0x0, 0x0, @mcast2}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x420100, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 1.476267426s ago: executing program 1 (id=1616): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fec000000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x101, 0xfffffffffffffffa, 0x785}) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x100, 0x1, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010100}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_NAT={0xa0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, {0x14, 0x4, @empty}}}]}]}, @CTA_EXPECT_FLAGS={0x8}]}, 0x100}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0xfffffffd, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@local, @in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x2c]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$sock_void(r3, 0x1, 0x24, 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x68083, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000180)={0x12, "43a5d33fc396096b1e0d3edb763adb3ec8615fff1adbea1dbdd5f71c08279d05"}) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0xbf9, 0x1000, 0x0, 0x2000000000000, 0x0, 0x2}, &(0x7f0000000ac0)={0x1f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8}, 0x0, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000000c0)=r4) 1.395562722s ago: executing program 3 (id=1617): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r2 = getpgrp(0x0) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002abd7000fcdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r2, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r3, @ANYBLOB="c8654a7f65a8b44b0ae8f047538242ffb28dc6bca10af6b6b019d891f11606b6fcd0def7bb60b4aaeb3bb7c37af11a3e1a4ae3851ee04a3dcff956d57cfb74cf9e007a43fd1d068149a2643c75a219b23aee057e150c616f9fcfed00216ddc243fa708f896cb4f26c62e276b7c5c038291d2ff9277f9f476cf82da51b5c6d527f6c22c1641e2f982315f8704cf7ca661ca73fb61ba98440af17dbaf2ba1d0c5cc917566021c9e02a2904ec200ab1fe5ff92529b6446afbf23d3837e9e03ac396191529c8"], 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x8000) sched_setscheduler(0x0, 0x2, 0x0) r4 = landlock_create_ruleset(&(0x7f00000003c0)={0x0, 0x3, 0x3}, 0x18, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cc1]}}]}}]}, 0x94}}, 0x0) landlock_restrict_self(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000000c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000100)=0x2, 0x12) socket$nl_generic(0x11, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000100)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0x80d804}}, 0x50) r11 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r11, 0x10f, 0x8a, 0x0, 0x0) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0xfffffffffffffda1) recvmmsg(r6, &(0x7f0000002e80)=[{{&(0x7f0000000540)=@can, 0x80, &(0x7f0000001940)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/83, 0x53}, {&(0x7f0000000280)=""/41, 0x29}, {&(0x7f00000007c0)=""/4093, 0xffd}, {&(0x7f00000017c0)=""/186, 0xba}, {&(0x7f0000001880)=""/176, 0xb0}], 0x6, &(0x7f00000019c0)=""/95, 0x5f}, 0x68db698a}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/185, 0xb9}, {&(0x7f0000002040)=""/58, 0x3a}, {&(0x7f0000000740)=""/16, 0x10}, {&(0x7f0000001b00)=""/30, 0x1e}, {&(0x7f0000001b40)=""/87, 0x57}], 0x5}}, {{&(0x7f0000001c40)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/49, 0x31}, {&(0x7f0000001d00)=""/94, 0x5e}], 0x2, &(0x7f0000001dc0)=""/107, 0x6b}, 0x7}, {{&(0x7f0000001e40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000002340)=[{&(0x7f0000001ec0)=""/99, 0x63}, {&(0x7f0000001f40)=""/46, 0x2e}, {&(0x7f0000001f80)=""/165, 0xa5}, {&(0x7f0000002040)}, {&(0x7f0000002100)=""/146, 0x92}, {&(0x7f0000003000)=""/111, 0x6f}, {&(0x7f0000002240)=""/111, 0x6f}, {&(0x7f00000022c0)=""/83, 0x53}], 0x8, &(0x7f00000023c0)=""/87, 0x57}, 0x3}, {{&(0x7f0000002440)=@x25, 0x80, &(0x7f0000002940)=[{&(0x7f00000024c0)=""/116, 0x74}, {&(0x7f0000002540)=""/249, 0xf9}, {&(0x7f0000002640)=""/200, 0xc8}, {&(0x7f0000002740)=""/80, 0x50}, {&(0x7f00000027c0)=""/156, 0x9c}, {&(0x7f0000002880)=""/174, 0xae}, {&(0x7f0000002a40)=""/253, 0xfd}], 0x7, &(0x7f0000002b40)=""/85, 0x55}, 0xf8d58400}, {{&(0x7f0000002bc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002c40)=""/228, 0xe4}, {&(0x7f0000002d40)=""/174, 0xae}, {&(0x7f00000029c0)}], 0x3, &(0x7f0000002e40)=""/18, 0x12}}], 0x6, 0x10140, &(0x7f0000000380)={0x0, 0x989680}) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200000000000000000088a846008100270008004500001c000000b1d06d42d715def5ca3841459201fa94a71cc4da32"], 0x0) 1.290884697s ago: executing program 3 (id=1618): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/66, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078"], 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x88080, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a68765a6c733a8eb6df29", 0x18, 0xfffffffffffffffe) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="0203ff030c00000020000000fddbdf25010007"], 0x60}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504000000000000000000", @ANYRES32=r3, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r4, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc}) r7 = epoll_create1(0x0) fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @multicast, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@x25={0x805, {0x0, 0x8, 0xfb, "a2f1ff80114502115efa2edffe20909cab2da7c0ba8cc356fcdb59c3048b9ae94577115ca453482522b4556c46525a96e82073a9b6b5f9dba7f68e1ecd9b71d2615886c26b036bef2c5ce88ea55818abc98ace892033dfe821fa6263b648e2bd1fcc2e0f5a7088bd59ef54b91786f90f4626ddac800b260e2f6292f759b1c6d9"}}}}, &(0x7f00000000c0)={0x1, 0x1, [0xf74, 0x8bf, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) 1.065103275s ago: executing program 1 (id=1619): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x50}}, 0x0) r2 = socket(0x2, 0x3, 0xff) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r2, &(0x7f0000002fc0)=[{{0x0, 0xb00, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x302}}], 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}, 0x1, 0x0, 0x0, 0x40800}, 0x20004000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x8624, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, 0x0, 0x9, 0x4c, 0x100, 0xfffffffd}, &(0x7f0000000000)=0x98) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f00000002c0)=@ethtool_ringparam={0x12, 0x0, 0x20040001, 0x0, 0x6eef}}) 843.77042ms ago: executing program 1 (id=1620): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000100081044e81f782db44b904021d21000b000000e8fe55a1180015000600142603600e1209000d00e803f6ffa70016000a00034006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8eb52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df61d9d322fe7c9f8775730d16a4683f5aeb4edb1495503bccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece093870aed47037734730ffd8eb42a9ecbee5de6ccd40dd6e4edef", 0xd8}], 0x1}, 0x0) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0xd0, 0xa, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xe38}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}]}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x62}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5c}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008901) 750.988779ms ago: executing program 4 (id=1621): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffffffffffff280012800b00010065"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv4_deladdr={0x20, 0x15, 0x1, 0xfffffffe, 0x0, {}, [@IFA_ADDRESS={0x8, 0x1, @empty}]}, 0x20}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 283.816795ms ago: executing program 1 (id=1622): r0 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000004180)={"0070491d", 0x0, 0x7, 0x2, 0x1, 0x5, "00000000005a2392a1fdad1a0c00", "426ec62b", '\x00', "0100", ["e86621d9cc668c391f77c506", "3549ffffffffffffff00", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) 148.08968ms ago: executing program 4 (id=1623): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) preadv(r2, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/152, 0x98}], 0x1, 0x7, 0x7) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x20000000) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) r4 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_usb_connect(0x1, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000203010902120001000000000904000000d14ea502"], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket(0x400000000010, 0x3, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r4, 0x8004af79, &(0x7f00000000c0)) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x703d2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0xf, 0x1}, {0xd, 0xf}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x5b, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014) socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r11 = fcntl$getown(r2, 0x9) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f00000002c0)=r11) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='gretap\x00', &(0x7f00000001c0)='gretap\x00', 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004a0000f51caaf7d820c2b5780a210104ffffffff44140801ac1414bb00000004e00000010000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) 0s ago: executing program 1 (id=1625): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x9d, @in6={0xa, 0x4e24, 0x5, @private0, 0x2}, @in6={0xa, 0x4e21, 0x101, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffff7}}}, 0xf9) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x4814) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) r3 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r4, 0x1000000, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0xffffff84, 0x10000, 0xffffff84, 0xffffffff}, 0x1c) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e) kernel console output (not intermixed with test programs): ] cdc_wdm 1-1:1.0: Unknown control protocol [ 396.572403][ T9896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.595103][ T9896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.642828][ T5912] usb 1-1: USB disconnect, device number 69 [ 396.708378][ T977] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 396.961374][ T977] usb 5-1: New USB device found, idVendor=05a4, idProduct=0290, bcdDevice=dc.1b [ 396.970559][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.983307][ T977] usb 5-1: config 0 descriptor?? [ 397.017086][ T5929] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 397.167267][ T977] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 397.248823][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 397.258744][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 35, changing to 7 [ 397.273854][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 41963, setting to 1024 [ 397.290096][ T9904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.330618][ T9904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.349118][ T5905] vhci_hcd: vhci_device speed not set [ 397.441631][ T5929] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 397.450939][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.460993][ T5929] usb 4-1: Product: syz [ 397.469911][ T5929] usb 4-1: Manufacturer: syz [ 397.580270][ T5929] usb 4-1: SerialNumber: syz [ 397.627643][ T5929] usb 4-1: config 0 descriptor?? [ 397.642415][ T5929] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 7f [ 397.864686][ T5929] usb 4-1: USB disconnect, device number 46 [ 397.927570][ T5960] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 398.067535][ T5960] usb 2-1: device descriptor read/64, error -71 [ 398.322335][ T5960] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 398.467213][ T5960] usb 2-1: device descriptor read/64, error -71 [ 398.592536][ T5960] usb usb2-port1: attempt power cycle [ 398.609746][ T5905] usb 3-1: USB disconnect, device number 40 [ 398.616299][ T9930] netlink: 668 bytes leftover after parsing attributes in process `syz.3.1118'. [ 398.640143][ T9930] netlink: 668 bytes leftover after parsing attributes in process `syz.3.1118'. [ 398.700009][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1119'. [ 398.732741][ T9933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1119'. [ 398.948665][ T5960] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 399.002466][ T5960] usb 2-1: device descriptor read/8, error -71 [ 399.018207][ T9938] bond3: entered promiscuous mode [ 399.025431][ T9938] bond3: entered allmulticast mode [ 399.031270][ T9938] 8021q: adding VLAN 0 to HW filter on device bond3 [ 399.074912][ T5905] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 399.231004][ T5905] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 399.247098][ T5960] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 399.254932][ T5905] usb 3-1: config 0 has no interface number 0 [ 399.261764][ T5905] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 399.278347][ T5960] usb 2-1: device descriptor read/8, error -71 [ 399.286711][ T5905] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 399.304546][ T5905] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 399.316299][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.335475][ T5905] usb 3-1: config 0 descriptor?? [ 399.345505][ T9936] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 399.360171][ T5905] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 399.437512][ T5960] usb usb2-port1: unable to enumerate USB device [ 399.493606][ T5960] usb 5-1: USB disconnect, device number 30 [ 399.587446][ T5928] usb 3-1: USB disconnect, device number 41 [ 399.688286][ T9952] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:20003 [ 399.700849][ T9952] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:20003 [ 400.033971][ T9956] FAULT_INJECTION: forcing a failure. [ 400.033971][ T9956] name failslab, interval 1, probability 0, space 0, times 0 [ 400.047215][ T9956] CPU: 1 UID: 0 PID: 9956 Comm: syz.0.1127 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 400.047243][ T9956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 400.047255][ T9956] Call Trace: [ 400.047263][ T9956] [ 400.047271][ T9956] dump_stack_lvl+0x189/0x250 [ 400.047307][ T9956] ? __pfx____ratelimit+0x10/0x10 [ 400.047338][ T9956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.047368][ T9956] ? __pfx__printk+0x10/0x10 [ 400.047399][ T9956] ? ref_tracker_alloc+0x318/0x460 [ 400.047430][ T9956] should_fail_ex+0x414/0x560 [ 400.047461][ T9956] should_failslab+0xa8/0x100 [ 400.047485][ T9956] kmem_cache_alloc_noprof+0x73/0x3c0 [ 400.047514][ T9956] ? skb_clone+0x212/0x3a0 [ 400.047547][ T9956] skb_clone+0x212/0x3a0 [ 400.047578][ T9956] __netlink_deliver_tap+0x404/0x850 [ 400.047616][ T9956] ? netlink_deliver_tap+0x2e/0x1b0 [ 400.047642][ T9956] netlink_deliver_tap+0x19c/0x1b0 [ 400.047667][ T9956] netlink_unicast+0x72f/0x8d0 [ 400.047702][ T9956] netlink_sendmsg+0x805/0xb30 [ 400.047737][ T9956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.047765][ T9956] ? aa_sock_msg_perm+0x94/0x160 [ 400.047794][ T9956] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 400.047820][ T9956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.047846][ T9956] __sock_sendmsg+0x219/0x270 [ 400.047869][ T9956] ____sys_sendmsg+0x505/0x830 [ 400.047910][ T9956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.047947][ T9956] ? import_iovec+0x74/0xa0 [ 400.047973][ T9956] ___sys_sendmsg+0x21f/0x2a0 [ 400.048001][ T9956] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.048069][ T9956] ? __fget_files+0x2a/0x420 [ 400.048090][ T9956] ? __fget_files+0x3a0/0x420 [ 400.048129][ T9956] __x64_sys_sendmsg+0x19b/0x260 [ 400.048156][ T9956] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.048194][ T9956] ? __pfx_ksys_write+0x10/0x10 [ 400.048220][ T9956] ? do_syscall_64+0xbe/0x3b0 [ 400.048243][ T9956] do_syscall_64+0xfa/0x3b0 [ 400.048260][ T9956] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.048287][ T9956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.048306][ T9956] ? clear_bhb_loop+0x60/0xb0 [ 400.048330][ T9956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.048348][ T9956] RIP: 0033:0x7f4f8938e929 [ 400.048367][ T9956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.048383][ T9956] RSP: 002b:00007f4f8a1a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.048406][ T9956] RAX: ffffffffffffffda RBX: 00007f4f895b5fa0 RCX: 00007f4f8938e929 [ 400.048420][ T9956] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000011 [ 400.048432][ T9956] RBP: 00007f4f8a1a8090 R08: 0000000000000000 R09: 0000000000000000 [ 400.048444][ T9956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.048456][ T9956] R13: 0000000000000000 R14: 00007f4f895b5fa0 R15: 00007f4f896dfa28 [ 400.048488][ T9956] [ 400.330167][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.339197][ T9956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1127'. [ 400.371335][ T9956] vlan2: entered promiscuous mode [ 400.377106][ T9956] team0: entered promiscuous mode [ 400.382181][ T9956] bond0: entered promiscuous mode [ 401.525044][ T9974] binder: 9973:9974 ioctl c0046209 100000000000000 returned -22 [ 401.677516][ T5928] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 401.897040][ T5928] usb 5-1: Using ep0 maxpacket: 32 [ 401.951065][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 401.977147][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 402.313348][ T5928] usb 5-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 402.323842][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.354362][ T5928] usb 5-1: Product: syz [ 402.362110][ T5928] usb 5-1: Manufacturer: syz [ 402.376563][ T5928] usb 5-1: SerialNumber: syz [ 402.415836][ T5928] usb 5-1: config 0 descriptor?? [ 402.634444][ T9994] netlink: 'syz.2.1139': attribute type 10 has an invalid length. [ 402.655256][ T9994] macvlan0: entered allmulticast mode [ 402.684845][ T9994] veth1_vlan: entered allmulticast mode [ 402.702620][ T9972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.712134][ T9972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.864182][ T9994] team0: Port device macvlan0 added [ 403.014201][ T9998] FAULT_INJECTION: forcing a failure. [ 403.014201][ T9998] name failslab, interval 1, probability 0, space 0, times 0 [ 403.042147][ T9998] CPU: 1 UID: 0 PID: 9998 Comm: syz.2.1140 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 403.042181][ T9998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 403.042193][ T9998] Call Trace: [ 403.042202][ T9998] [ 403.042211][ T9998] dump_stack_lvl+0x189/0x250 [ 403.042249][ T9998] ? __pfx____ratelimit+0x10/0x10 [ 403.042281][ T9998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.042313][ T9998] ? __pfx__printk+0x10/0x10 [ 403.042342][ T9998] ? __pfx___might_resched+0x10/0x10 [ 403.042373][ T9998] ? fs_reclaim_acquire+0x7d/0x100 [ 403.042403][ T9998] should_fail_ex+0x414/0x560 [ 403.042436][ T9998] should_failslab+0xa8/0x100 [ 403.042461][ T9998] __kmalloc_cache_noprof+0x70/0x3d0 [ 403.042482][ T9998] ? snd_pcm_oss_change_params_locked+0x1b3/0x3e40 [ 403.042509][ T9998] snd_pcm_oss_change_params_locked+0x1b3/0x3e40 [ 403.042539][ T9998] ? __pfx___mutex_trylock_common+0x10/0x10 [ 403.042566][ T9998] ? rcu_is_watching+0x15/0xb0 [ 403.042597][ T9998] ? trace_contention_end+0x39/0x120 [ 403.042619][ T9998] ? __mutex_lock+0x330/0xe80 [ 403.042636][ T9998] ? aa_file_perm+0x11f/0xed0 [ 403.042664][ T9998] ? aa_file_perm+0x3e7/0xed0 [ 403.042699][ T9998] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 403.042730][ T9998] ? snd_pcm_oss_read+0x1f9/0x8d0 [ 403.042763][ T9998] ? __pfx___mutex_lock+0x10/0x10 [ 403.042825][ T9998] snd_pcm_oss_read+0x26a/0x8d0 [ 403.042882][ T9998] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 403.042915][ T9998] vfs_read+0x1fd/0x980 [ 403.042957][ T9998] ? __pfx_vfs_read+0x10/0x10 [ 403.042989][ T9998] ? __fget_files+0x2a/0x420 [ 403.043015][ T9998] ? __fget_files+0x2a/0x420 [ 403.043035][ T9998] ? __fget_files+0x3a0/0x420 [ 403.043056][ T9998] ? __fget_files+0x2a/0x420 [ 403.043089][ T9998] ksys_read+0x145/0x250 [ 403.043110][ T9998] ? __pfx_ksys_read+0x10/0x10 [ 403.043137][ T9998] ? rcu_is_watching+0x15/0xb0 [ 403.043173][ T9998] ? do_syscall_64+0xbe/0x3b0 [ 403.043198][ T9998] do_syscall_64+0xfa/0x3b0 [ 403.043216][ T9998] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.043245][ T9998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.043265][ T9998] ? clear_bhb_loop+0x60/0xb0 [ 403.043290][ T9998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.043310][ T9998] RIP: 0033:0x7fcc3378e929 [ 403.043329][ T9998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.043347][ T9998] RSP: 002b:00007fcc34632038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 403.043370][ T9998] RAX: ffffffffffffffda RBX: 00007fcc339b5fa0 RCX: 00007fcc3378e929 [ 403.043385][ T9998] RDX: 000000000000004f RSI: 0000200000000300 RDI: 0000000000000003 [ 403.043397][ T9998] RBP: 00007fcc34632090 R08: 0000000000000000 R09: 0000000000000000 [ 403.043410][ T9998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.043422][ T9998] R13: 0000000000000000 R14: 00007fcc339b5fa0 R15: 00007fcc33adfa28 [ 403.043455][ T9998] [ 403.337347][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.437091][ T5905] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 404.552241][ T9] usb 5-1: USB disconnect, device number 31 [ 404.609888][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 404.779883][T10015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1147'. [ 404.805275][T10015] bridge0: entered promiscuous mode [ 404.805689][T10015] macvtap1: entered promiscuous mode [ 404.805897][T10015] macvtap1: entered allmulticast mode [ 404.805914][T10015] bridge0: entered allmulticast mode [ 404.845656][T10015] bridge0: left allmulticast mode [ 404.845960][T10015] bridge0: left promiscuous mode [ 405.493183][T10033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.501058][T10033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.524207][T10033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.551820][T10033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.583869][T10036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1153'. [ 406.177160][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 406.402574][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 406.414500][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 406.439780][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 406.452582][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 406.500060][ T9] usb 3-1: Product: syz [ 406.523775][ T9] usb 3-1: Manufacturer: syz [ 406.535996][ T9] usb 3-1: SerialNumber: syz [ 406.618015][ T9] usb 3-1: config 0 descriptor?? [ 406.685508][ T9] usb 3-1: selecting invalid altsetting 0 [ 406.861251][T10064] binder_alloc: 10061: pid 10061 spamming oneway? 2 buffers allocated for a total size of 4104 [ 407.072756][T10063] pim6reg: entered allmulticast mode [ 407.162809][ T5905] usb 1-1: unable to get BOS descriptor or descriptor too short [ 407.193028][ T5905] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 407.251850][ T5905] usb 1-1: can't read configurations, error -71 [ 407.397119][T10073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.410078][T10073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.684493][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1156'. [ 409.005982][T10092] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 409.016078][T10092] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 409.075356][T10092] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 409.094497][T10092] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 409.124552][T10092] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 409.139718][T10092] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 409.155917][T10092] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 409.188714][T10092] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 409.213239][T10092] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 409.247389][T10092] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 409.367672][T10111] netlink: zone id is out of range [ 409.419379][T10111] netlink: zone id is out of range [ 409.448422][T10111] netlink: set zone limit has 4 unknown bytes [ 409.511344][ T9] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 409.519234][ T5905] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 409.663021][ T977] usb 3-1: USB disconnect, device number 42 [ 409.678448][ T5905] usb 4-1: Using ep0 maxpacket: 8 [ 409.706732][ T5905] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 409.723099][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 409.785352][ T5905] usb 4-1: New USB device found, idVendor=05ac, idProduct=8246, bcdDevice= 0.00 [ 409.806520][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.819324][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.835140][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 409.863481][ T5905] usb 4-1: config 0 descriptor?? [ 409.869841][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.888368][ T5905] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 409.929832][ T9] usb 5-1: config 0 descriptor?? [ 410.109440][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'. [ 410.414569][ T9] isku 0003:1E7D:319C.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 410.877170][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 410.961594][T10095] input: syz0 as /devices/virtual/input/input24 [ 410.974604][ T9] usb 5-1: USB disconnect, device number 32 [ 411.117316][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 411.210573][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 411.216683][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 411.280482][ T5841] Bluetooth: hci2: command 0x0405 tx timeout [ 411.778329][T10137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1175'. [ 412.107118][ T5929] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 412.196684][ T9] usb 4-1: USB disconnect, device number 47 [ 412.250364][ T5929] usb 2-1: device descriptor read/64, error -71 [ 412.533869][ T5929] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 412.677843][ T5929] usb 2-1: device descriptor read/64, error -71 [ 412.697093][ T5928] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 412.787296][ T5929] usb usb2-port1: attempt power cycle [ 412.837182][ T5960] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 412.860431][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 412.869896][ T5928] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 412.880202][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.895628][ T5928] usb 1-1: config 0 descriptor?? [ 412.911079][ T5928] rndis_host 1-1:0.0: probe with driver rndis_host failed with error -22 [ 412.957149][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 413.021288][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 413.032680][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.043658][ T5960] usb 4-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 413.053817][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.062006][ T3189] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 413.081977][ T5960] usb 4-1: config 0 descriptor?? [ 413.149111][ T5929] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 413.197222][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 413.206161][ T5929] usb 2-1: device descriptor read/8, error -71 [ 413.251325][ T3189] usb 5-1: New USB device found, idVendor=05a4, idProduct=0290, bcdDevice=dc.1b [ 413.263113][ T3189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.287937][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 413.297589][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 413.305694][ T3189] usb 5-1: config 0 descriptor?? [ 413.320420][ T3189] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 413.331157][T10159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1182'. [ 413.357544][ T5841] Bluetooth: hci2: command 0x0405 tx timeout [ 413.477206][ T5929] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 413.519799][T10152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.543723][T10152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.561419][ T5929] usb 2-1: device descriptor read/8, error -71 [ 413.752768][ T5929] usb usb2-port1: unable to enumerate USB device [ 414.100611][ T5960] usbhid 4-1:0.0: can't add hid device: -71 [ 414.113592][ T5960] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 414.136322][ T5960] usb 4-1: USB disconnect, device number 48 [ 415.005043][T10179] FAULT_INJECTION: forcing a failure. [ 415.005043][T10179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.045239][T10179] CPU: 0 UID: 0 PID: 10179 Comm: syz.1.1187 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 415.045271][T10179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 415.045282][T10179] Call Trace: [ 415.045290][T10179] [ 415.045299][T10179] dump_stack_lvl+0x189/0x250 [ 415.045335][T10179] ? __pfx____ratelimit+0x10/0x10 [ 415.045366][T10179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.045396][T10179] ? __pfx__printk+0x10/0x10 [ 415.045417][T10179] ? __might_fault+0xb0/0x130 [ 415.045446][T10179] should_fail_ex+0x414/0x560 [ 415.045476][T10179] _copy_from_iter+0x1db/0x16f0 [ 415.045510][T10179] ? rcu_is_watching+0x15/0xb0 [ 415.045541][T10179] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 415.045561][T10179] ? __pfx__copy_from_iter+0x10/0x10 [ 415.045592][T10179] ? __build_skb_around+0x257/0x3e0 [ 415.045619][T10179] ? netlink_sendmsg+0x642/0xb30 [ 415.045641][T10179] ? skb_put+0x11b/0x210 [ 415.045668][T10179] netlink_sendmsg+0x6b2/0xb30 [ 415.045701][T10179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.045728][T10179] ? aa_sock_msg_perm+0x94/0x160 [ 415.045755][T10179] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 415.045780][T10179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.045805][T10179] __sock_sendmsg+0x219/0x270 [ 415.045829][T10179] ____sys_sendmsg+0x505/0x830 [ 415.045861][T10179] ? __pfx_____sys_sendmsg+0x10/0x10 [ 415.045897][T10179] ? import_iovec+0x74/0xa0 [ 415.045923][T10179] ___sys_sendmsg+0x21f/0x2a0 [ 415.045964][T10179] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.046030][T10179] ? __fget_files+0x2a/0x420 [ 415.046052][T10179] ? __fget_files+0x3a0/0x420 [ 415.046086][T10179] __x64_sys_sendmsg+0x19b/0x260 [ 415.046114][T10179] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 415.046151][T10179] ? __pfx_ksys_write+0x10/0x10 [ 415.046167][T10179] ? rcu_is_watching+0x15/0xb0 [ 415.046202][T10179] ? do_syscall_64+0xbe/0x3b0 [ 415.046225][T10179] do_syscall_64+0xfa/0x3b0 [ 415.046242][T10179] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.046269][T10179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.046289][T10179] ? clear_bhb_loop+0x60/0xb0 [ 415.046313][T10179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.046332][T10179] RIP: 0033:0x7ffa0698e929 [ 415.046351][T10179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.046369][T10179] RSP: 002b:00007ffa07825038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.046392][T10179] RAX: ffffffffffffffda RBX: 00007ffa06bb5fa0 RCX: 00007ffa0698e929 [ 415.046406][T10179] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 415.046419][T10179] RBP: 00007ffa07825090 R08: 0000000000000000 R09: 0000000000000000 [ 415.046431][T10179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.046442][T10179] R13: 0000000000000000 R14: 00007ffa06bb5fa0 R15: 00007ffa06cdfa28 [ 415.046474][T10179] [ 415.549725][ T5912] usb 1-1: USB disconnect, device number 72 [ 415.861069][ T9] usb 5-1: USB disconnect, device number 33 [ 415.935478][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'. [ 415.955761][T10199] input: syz0 as /devices/virtual/input/input26 [ 416.086618][T10207] tipc: Enabled bearer , priority 10 [ 416.276127][T10209] ip6gre1: entered promiscuous mode [ 416.392586][T10209] ip6gre1: entered allmulticast mode [ 416.441868][T10214] SET target dimension over the limit! [ 416.737844][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 416.909130][ T9] usb 5-1: New USB device found, idVendor=05a4, idProduct=0290, bcdDevice=dc.1b [ 416.966795][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.120376][ T3189] tipc: Node number set to 11552 [ 417.166919][ T9] usb 5-1: config 0 descriptor?? [ 417.195497][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 417.475363][T10217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.529888][T10217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.093029][T10234] syz.2.1201: attempt to access beyond end of device [ 418.093029][T10234] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 419.047097][ T5912] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 419.248606][ T5912] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 419.259014][ T5912] usb 3-1: config 0 interface 0 has no altsetting 0 [ 419.284135][ T5912] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 419.315201][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 419.361791][ T5912] usb 3-1: Product: syz [ 419.371913][ T5912] usb 3-1: Manufacturer: syz [ 419.382858][ T5912] usb 3-1: SerialNumber: syz [ 419.411485][ T977] usb 5-1: USB disconnect, device number 34 [ 419.496011][ T5912] usb 3-1: config 0 descriptor?? [ 419.522140][ T5912] usb 3-1: selecting invalid altsetting 0 [ 419.587734][ T9] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 419.789776][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 419.803972][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 419.918552][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.968907][ T9] usb 1-1: Product: syz [ 419.973150][ T9] usb 1-1: Manufacturer: syz [ 419.978067][ T9] usb 1-1: SerialNumber: syz [ 419.993492][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 420.010348][ T9] r8152-cfgselector 1-1: config 0 descriptor?? [ 420.208396][T10278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.217697][T10278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.233742][T10278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1209'. [ 420.439840][T10284] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1216'. [ 422.261949][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 422.300783][ T9] r8152-cfgselector 1-1: bad CDC descriptors [ 422.344060][ T9] r8152-cfgselector 1-1: USB disconnect, device number 73 [ 423.019307][T10316] FAULT_INJECTION: forcing a failure. [ 423.019307][T10316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.095657][T10316] CPU: 1 UID: 0 PID: 10316 Comm: syz.0.1224 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 423.095689][T10316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 423.095701][T10316] Call Trace: [ 423.095709][T10316] [ 423.095719][T10316] dump_stack_lvl+0x189/0x250 [ 423.095755][T10316] ? __pfx____ratelimit+0x10/0x10 [ 423.095786][T10316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.095816][T10316] ? __pfx__printk+0x10/0x10 [ 423.095859][T10316] ? __might_fault+0xb0/0x130 [ 423.095889][T10316] should_fail_ex+0x414/0x560 [ 423.095921][T10316] _copy_from_iter+0x1db/0x16f0 [ 423.095957][T10316] ? rcu_is_watching+0x15/0xb0 [ 423.095989][T10316] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 423.096011][T10316] ? __pfx__copy_from_iter+0x10/0x10 [ 423.096043][T10316] ? __build_skb_around+0x257/0x3e0 [ 423.096072][T10316] ? netlink_sendmsg+0x642/0xb30 [ 423.096094][T10316] ? skb_put+0x11b/0x210 [ 423.096123][T10316] netlink_sendmsg+0x6b2/0xb30 [ 423.096158][T10316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.096186][T10316] ? aa_sock_msg_perm+0x94/0x160 [ 423.096214][T10316] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 423.096239][T10316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.096265][T10316] __sock_sendmsg+0x219/0x270 [ 423.096289][T10316] ____sys_sendmsg+0x505/0x830 [ 423.096321][T10316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.096358][T10316] ? import_iovec+0x74/0xa0 [ 423.096383][T10316] ___sys_sendmsg+0x21f/0x2a0 [ 423.096412][T10316] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.096479][T10316] ? __fget_files+0x2a/0x420 [ 423.096500][T10316] ? __fget_files+0x3a0/0x420 [ 423.096534][T10316] __x64_sys_sendmsg+0x19b/0x260 [ 423.096569][T10316] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 423.096600][T10316] ? __pfx_ksys_write+0x10/0x10 [ 423.096613][T10316] ? rcu_is_watching+0x15/0xb0 [ 423.096646][T10316] ? do_syscall_64+0xbe/0x3b0 [ 423.096671][T10316] do_syscall_64+0xfa/0x3b0 [ 423.096689][T10316] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.096718][T10316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.096738][T10316] ? clear_bhb_loop+0x60/0xb0 [ 423.096762][T10316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.096782][T10316] RIP: 0033:0x7f4f8938e929 [ 423.096801][T10316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.096826][T10316] RSP: 002b:00007f4f8a1a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.096848][T10316] RAX: ffffffffffffffda RBX: 00007f4f895b5fa0 RCX: 00007f4f8938e929 [ 423.096863][T10316] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 423.096875][T10316] RBP: 00007f4f8a1a8090 R08: 0000000000000000 R09: 0000000000000000 [ 423.096887][T10316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.096898][T10316] R13: 0000000000000000 R14: 00007f4f895b5fa0 R15: 00007f4f896dfa28 [ 423.096930][T10316] [ 423.466859][T10318] program syz.0.1226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 423.566540][ T30] kauditd_printk_skb: 310 callbacks suppressed [ 423.566568][ T30] audit: type=1326 audit(1749863740.257:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.3.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655f78e929 code=0x7ffc0000 [ 423.749133][ T3189] usb 3-1: USB disconnect, device number 43 [ 423.860402][ T30] audit: type=1326 audit(1749863740.257:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.3.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655f78e929 code=0x7ffc0000 [ 424.049785][ T30] audit: type=1326 audit(1749863740.257:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.3.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f655f78e929 code=0x7ffc0000 [ 424.093121][ T30] audit: type=1326 audit(1749863740.257:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.3.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655f78e929 code=0x7ffc0000 [ 424.120724][ T30] audit: type=1326 audit(1749863740.257:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.3.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655f78e929 code=0x7ffc0000 [ 424.150178][ T30] audit: type=1326 audit(1749863740.257:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.3.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f655f78e929 code=0x7ffc0000 [ 424.175206][T10328] netlink: 'syz.3.1228': attribute type 10 has an invalid length. [ 424.213754][ T30] audit: type=1326 audit(1749863740.267:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.3.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655f78e929 code=0x7ffc0000 [ 424.259065][ T30] audit: type=1326 audit(1749863740.267:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.3.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655f78e929 code=0x7ffc0000 [ 424.306189][ T30] audit: type=1326 audit(1749863740.297:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.3.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f655f78d3df code=0x7ffc0000 [ 424.332518][ T30] audit: type=1326 audit(1749863740.297:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.3.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655f78e929 code=0x7ffc0000 [ 424.375286][T10328] bridge0: port 3() entered disabled state [ 424.387623][T10328] : left allmulticast mode [ 424.406019][T10328] bridge0: port 3() entered disabled state [ 424.420255][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1231'. [ 424.447900][T10328] bond0: (slave ): Enslaving as an active interface with an up link [ 424.595198][T10340] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1234'. [ 424.641947][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1234'. [ 424.787429][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1239'. [ 424.814606][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1239'. [ 424.881632][T10350] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1238'. [ 425.002687][T10359] netlink: 'syz.4.1242': attribute type 32 has an invalid length. [ 425.032200][T10359] FAULT_INJECTION: forcing a failure. [ 425.032200][T10359] name failslab, interval 1, probability 0, space 0, times 0 [ 425.054623][T10359] CPU: 0 UID: 0 PID: 10359 Comm: syz.4.1242 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 425.054652][T10359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 425.054664][T10359] Call Trace: [ 425.054672][T10359] [ 425.054681][T10359] dump_stack_lvl+0x189/0x250 [ 425.054715][T10359] ? __pfx____ratelimit+0x10/0x10 [ 425.054745][T10359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.054775][T10359] ? __pfx__printk+0x10/0x10 [ 425.054804][T10359] ? __pfx___might_resched+0x10/0x10 [ 425.054833][T10359] ? fs_reclaim_acquire+0x7d/0x100 [ 425.054862][T10359] should_fail_ex+0x414/0x560 [ 425.054895][T10359] should_failslab+0xa8/0x100 [ 425.054925][T10359] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 425.054946][T10359] ? __alloc_skb+0x112/0x2d0 [ 425.054976][T10359] __alloc_skb+0x112/0x2d0 [ 425.055004][T10359] netlink_ack+0x146/0xa50 [ 425.055024][T10359] ? __pfx___mutex_trylock_common+0x10/0x10 [ 425.055051][T10359] ? rcu_is_watching+0x15/0xb0 [ 425.055092][T10359] netlink_rcv_skb+0x28c/0x470 [ 425.055118][T10359] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 425.055147][T10359] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 425.055190][T10359] ? netlink_deliver_tap+0x2e/0x1b0 [ 425.055214][T10359] ? netlink_deliver_tap+0x2e/0x1b0 [ 425.055240][T10359] xfrm_netlink_rcv+0x79/0x90 [ 425.055265][T10359] netlink_unicast+0x75b/0x8d0 [ 425.055300][T10359] netlink_sendmsg+0x805/0xb30 [ 425.055336][T10359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.055363][T10359] ? aa_sock_msg_perm+0x94/0x160 [ 425.055391][T10359] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 425.055416][T10359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.055442][T10359] __sock_sendmsg+0x219/0x270 [ 425.055467][T10359] ____sys_sendmsg+0x505/0x830 [ 425.055497][T10359] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.055533][T10359] ? import_iovec+0x74/0xa0 [ 425.055567][T10359] ___sys_sendmsg+0x21f/0x2a0 [ 425.055597][T10359] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.055666][T10359] ? __fget_files+0x2a/0x420 [ 425.055687][T10359] ? __fget_files+0x3a0/0x420 [ 425.055718][T10359] __x64_sys_sendmsg+0x19b/0x260 [ 425.055745][T10359] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 425.055782][T10359] ? __pfx_ksys_write+0x10/0x10 [ 425.055796][T10359] ? rcu_is_watching+0x15/0xb0 [ 425.055828][T10359] ? do_syscall_64+0xbe/0x3b0 [ 425.055850][T10359] do_syscall_64+0xfa/0x3b0 [ 425.055867][T10359] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.055895][T10359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.055915][T10359] ? clear_bhb_loop+0x60/0xb0 [ 425.055940][T10359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.055959][T10359] RIP: 0033:0x7f2a7b58e929 [ 425.055978][T10359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.055996][T10359] RSP: 002b:00007f2a7c3da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.056018][T10359] RAX: ffffffffffffffda RBX: 00007f2a7b7b5fa0 RCX: 00007f2a7b58e929 [ 425.056033][T10359] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 425.056046][T10359] RBP: 00007f2a7c3da090 R08: 0000000000000000 R09: 0000000000000000 [ 425.056058][T10359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.056069][T10359] R13: 0000000000000000 R14: 00007f2a7b7b5fa0 R15: 00007f2a7b8dfa28 [ 425.056101][T10359] [ 425.675698][T10371] sock: sock_timestamping_bind_phc: sock not bind to device [ 425.727164][ T5928] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 425.783264][ T5841] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 426.589901][T10386] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1250'. [ 426.869351][ T5929] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 427.007039][ T5929] usb 4-1: device descriptor read/64, error -71 [ 427.262557][ T5929] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 427.400657][ T5929] usb 4-1: device descriptor read/64, error -71 [ 427.538928][ T5929] usb usb4-port1: attempt power cycle [ 427.887134][ T5929] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 427.957761][ T5929] usb 4-1: device descriptor read/8, error -71 [ 428.197200][ T5929] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 428.223423][ T5929] usb 4-1: device descriptor read/8, error -71 [ 428.395762][T10412] FAULT_INJECTION: forcing a failure. [ 428.395762][T10412] name failslab, interval 1, probability 0, space 0, times 0 [ 428.410789][ T5928] usb 3-1: unable to get BOS descriptor or descriptor too short [ 428.417489][ T9] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 428.492002][ T5929] usb usb4-port1: unable to enumerate USB device [ 428.509054][ T5928] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 428.523264][T10412] CPU: 1 UID: 0 PID: 10412 Comm: syz.0.1255 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 428.523291][T10412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 428.523303][T10412] Call Trace: [ 428.523310][T10412] [ 428.523318][T10412] dump_stack_lvl+0x189/0x250 [ 428.523352][T10412] ? __pfx____ratelimit+0x10/0x10 [ 428.523381][T10412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.523411][T10412] ? __pfx__printk+0x10/0x10 [ 428.523441][T10412] ? __pfx___might_resched+0x10/0x10 [ 428.523468][T10412] ? fs_reclaim_acquire+0x7d/0x100 [ 428.523497][T10412] should_fail_ex+0x414/0x560 [ 428.523529][T10412] ? __pfx_proc_alloc_inode+0x10/0x10 [ 428.523552][T10412] should_failslab+0xa8/0x100 [ 428.523575][T10412] ? __pfx_proc_alloc_inode+0x10/0x10 [ 428.523597][T10412] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 428.523629][T10412] ? proc_alloc_inode+0x2a/0xc0 [ 428.523658][T10412] ? __pfx_proc_alloc_inode+0x10/0x10 [ 428.523681][T10412] proc_alloc_inode+0x2a/0xc0 [ 428.523706][T10412] alloc_inode+0x6a/0x1b0 [ 428.523730][T10412] new_inode+0x22/0x170 [ 428.523758][T10412] proc_pid_make_inode+0x21/0x130 [ 428.523791][T10412] proc_fd_instantiate+0x54/0x300 [ 428.523818][T10412] ? proc_fill_cache+0x2a7/0x3d0 [ 428.523848][T10412] proc_fill_cache+0x2cd/0x3d0 [ 428.523879][T10412] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 428.523901][T10412] ? __pfx_proc_fill_cache+0x10/0x10 [ 428.523927][T10412] ? snprintf+0xda/0x120 [ 428.523962][T10412] ? fget_task_next+0x572/0x5f0 [ 428.523995][T10412] proc_readfd_common+0x3fe/0x5c0 [ 428.524021][T10412] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 428.524042][T10412] ? __pfx_proc_readfd_common+0x10/0x10 [ 428.524064][T10412] ? end_current_label_crit_section+0x152/0x180 [ 428.524095][T10412] ? iterate_dir+0x49f/0x770 [ 428.524124][T10412] ? down_read_killable+0x1d1/0x350 [ 428.524153][T10412] iterate_dir+0x5ac/0x770 [ 428.524189][T10412] __se_sys_getdents64+0xe4/0x260 [ 428.524223][T10412] ? __pfx___se_sys_getdents64+0x10/0x10 [ 428.524253][T10412] ? __pfx_filldir64+0x10/0x10 [ 428.524273][T10412] ? __pfx_ksys_write+0x10/0x10 [ 428.524299][T10412] ? __secure_computing+0xe2/0x2a0 [ 428.524341][T10412] do_syscall_64+0xfa/0x3b0 [ 428.524362][T10412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.524380][T10412] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 428.524400][T10412] ? clear_bhb_loop+0x60/0xb0 [ 428.524425][T10412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.524444][T10412] RIP: 0033:0x7f4f8938e929 [ 428.524462][T10412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.524479][T10412] RSP: 002b:00007f4f8a1a8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 428.524501][T10412] RAX: ffffffffffffffda RBX: 00007f4f895b5fa0 RCX: 00007f4f8938e929 [ 428.524516][T10412] RDX: 0000000000001006 RSI: 0000200000001380 RDI: 0000000000000003 [ 428.524528][T10412] RBP: 00007f4f8a1a8090 R08: 0000000000000000 R09: 0000000000000000 [ 428.524541][T10412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 428.524551][T10412] R13: 0000000000000000 R14: 00007f4f895b5fa0 R15: 00007f4f896dfa28 [ 428.524584][T10412] [ 428.837925][ C1] vkms_vblank_simulate: vblank timer overrun [ 428.850611][ T5928] usb 3-1: can't read configurations, error -71 [ 429.245749][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.445204][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 429.482003][ T9] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 429.492163][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.500437][ T9] usb 2-1: Product: syz [ 429.532948][ T9] usb 2-1: Manufacturer: syz [ 429.652630][ T9] usb 2-1: SerialNumber: syz [ 429.694092][ T9] usb 2-1: config 0 descriptor?? [ 431.276494][ T5912] usb 2-1: USB disconnect, device number 72 [ 431.412797][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 431.412817][ T30] audit: type=1326 audit(1749863748.107:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0698e929 code=0x7ffc0000 [ 431.477069][ T5929] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 431.477890][ T30] audit: type=1326 audit(1749863748.167:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0698e929 code=0x7ffc0000 [ 431.564756][ T30] audit: type=1326 audit(1749863748.217:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7ffa0698e929 code=0x7ffc0000 [ 431.816388][ T30] audit: type=1326 audit(1749863748.217:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0698e929 code=0x7ffc0000 [ 431.838925][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.863865][ T30] audit: type=1326 audit(1749863748.217:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ffa0698e929 code=0x7ffc0000 [ 431.886458][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.892890][ T30] audit: type=1326 audit(1749863748.217:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0698e929 code=0x7ffc0000 [ 431.915848][ T5929] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 431.935580][ T5929] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 431.971444][ T30] audit: type=1326 audit(1749863748.217:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0698e929 code=0x7ffc0000 [ 432.028659][ T5929] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.102931][ T5929] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 432.116670][ T30] audit: type=1326 audit(1749863748.217:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffa0698d3df code=0x7ffc0000 [ 432.138976][ C1] vkms_vblank_simulate: vblank timer overrun [ 432.177679][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.207043][ T5960] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 432.365784][ T5929] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 432.382573][ T9] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 432.417055][ T30] audit: type=1326 audit(1749863748.217:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0698e929 code=0x7ffc0000 [ 432.440478][ T5929] usb 3-1: invalid MIDI out EP 0 [ 432.495273][ T5960] usb 2-1: New USB device found, idVendor=05a4, idProduct=0290, bcdDevice=dc.1b [ 432.672204][ T30] audit: type=1326 audit(1749863748.217:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7ffa0698e929 code=0x7ffc0000 [ 432.700250][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.799576][ T5960] usb 2-1: config 0 descriptor?? [ 432.835579][ T5960] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 432.955185][T10454] bond2: entered promiscuous mode [ 432.961152][T10454] bond2: entered allmulticast mode [ 432.969296][T10454] 8021q: adding VLAN 0 to HW filter on device bond2 [ 433.068052][ T5929] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 433.080364][T10469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.104150][T10469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.741325][T10511] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1274'. [ 434.992787][ T5929] usb 2-1: USB disconnect, device number 73 [ 435.047620][ T977] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 435.167728][ T5912] usb 3-1: USB disconnect, device number 46 [ 435.224286][T10517] FAULT_INJECTION: forcing a failure. [ 435.224286][T10517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.271986][ T977] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 435.273533][T10517] CPU: 1 UID: 0 PID: 10517 Comm: syz.1.1276 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 435.273567][T10517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 435.273578][T10517] Call Trace: [ 435.273586][T10517] [ 435.273594][T10517] dump_stack_lvl+0x189/0x250 [ 435.273627][T10517] ? __pfx____ratelimit+0x10/0x10 [ 435.273655][T10517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.273682][T10517] ? __pfx__printk+0x10/0x10 [ 435.273704][T10517] ? __might_fault+0xb0/0x130 [ 435.273732][T10517] should_fail_ex+0x414/0x560 [ 435.273762][T10517] _copy_from_user+0x2d/0xb0 [ 435.273783][T10517] __sys_sendto+0x25c/0x520 [ 435.273808][T10517] ? __pfx___sys_sendto+0x10/0x10 [ 435.273839][T10517] ? count_memcg_event_mm+0x21/0x260 [ 435.273878][T10517] ? exc_page_fault+0x76/0xf0 [ 435.273907][T10517] ? do_user_addr_fault+0xc8a/0x1390 [ 435.273936][T10517] __x64_sys_sendto+0xde/0x100 [ 435.273961][T10517] do_syscall_64+0xfa/0x3b0 [ 435.273977][T10517] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.274003][T10517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.274021][T10517] ? clear_bhb_loop+0x60/0xb0 [ 435.274043][T10517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.274061][T10517] RIP: 0033:0x7ffa069907bc [ 435.274078][T10517] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 435.274095][T10517] RSP: 002b:00007ffa07823ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 435.274116][T10517] RAX: ffffffffffffffda RBX: 00007ffa07823fc0 RCX: 00007ffa069907bc [ 435.274129][T10517] RDX: 0000000000000020 RSI: 00007ffa07824010 RDI: 0000000000000003 [ 435.274141][T10517] RBP: 0000000000000000 R08: 00007ffa07823f14 R09: 000000000000000c [ 435.274152][T10517] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 435.274163][T10517] R13: 00007ffa07823f68 R14: 00007ffa07824010 R15: 0000000000000000 [ 435.274192][T10517] [ 435.591854][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 435.617079][ T977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.628580][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 435.636894][ T9] usb 4-1: can't read configurations, error -71 [ 435.654690][ T977] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 435.696352][ T977] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 435.713140][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.734732][T10524] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1280'. [ 435.744793][ T977] usb 5-1: Product: syz [ 435.749593][ T977] usb 5-1: Manufacturer: syz [ 435.754233][ T977] usb 5-1: SerialNumber: syz [ 435.832388][ T977] usb 5-1: config 0 descriptor?? [ 435.854501][ T977] usb-storage 5-1:0.0: USB Mass Storage device detected [ 435.882303][ T977] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 435.936901][T10536] wireguard: wg1: Could not create IPv4 socket [ 436.017267][ T5960] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 436.074176][ T977] usb 5-1: USB disconnect, device number 35 [ 436.191183][ T5960] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 436.210421][ T5960] usb 3-1: config 0 interface 0 has no altsetting 0 [ 436.229311][ T5960] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 436.245148][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 436.263220][ T5960] usb 3-1: Product: syz [ 436.272127][ T5960] usb 3-1: Manufacturer: syz [ 436.292341][ T5960] usb 3-1: SerialNumber: syz [ 436.315862][ T5960] usb 3-1: config 0 descriptor?? [ 436.333421][ T5960] usb 3-1: selecting invalid altsetting 0 [ 437.138349][T10570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.168697][T10570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.291249][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 437.291269][ T30] audit: type=1326 audit(1749863753.987:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10572 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8938e929 code=0x7ffc0000 [ 437.322391][ T30] audit: type=1326 audit(1749863754.017:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10572 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8938e929 code=0x7ffc0000 [ 437.409676][ T30] audit: type=1326 audit(1749863754.017:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10572 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f4f8938e929 code=0x7ffc0000 [ 437.486772][ T30] audit: type=1326 audit(1749863754.017:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10572 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8938e929 code=0x7ffc0000 [ 437.546490][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1281'. [ 437.559236][ T30] audit: type=1326 audit(1749863754.017:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10572 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8938e929 code=0x7ffc0000 [ 437.607358][ T5960] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 437.627135][ T30] audit: type=1326 audit(1749863754.057:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10572 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4f8938e929 code=0x7ffc0000 [ 437.672300][ T30] audit: type=1326 audit(1749863754.057:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10572 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8938e929 code=0x7ffc0000 [ 437.979476][ T5960] usb 5-1: device descriptor read/64, error -71 [ 437.985868][ T5929] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 438.108365][ T30] audit: type=1326 audit(1749863754.067:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10572 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8938e929 code=0x7ffc0000 [ 438.217050][ T5929] usb 1-1: Using ep0 maxpacket: 32 [ 438.226224][ T5929] usb 1-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 438.237879][ T5960] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 438.254562][ T5929] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.275965][ T30] audit: type=1326 audit(1749863754.067:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10572 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4f8938d3df code=0x7ffc0000 [ 438.285180][ T5929] usb 1-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 438.339532][ T5929] usb 1-1: config 0 interface 0 has no altsetting 0 [ 438.354123][ T5929] usb 1-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 438.367081][ T5960] usb 5-1: device descriptor read/64, error -71 [ 438.382380][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.440946][ T30] audit: type=1326 audit(1749863754.067:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10572 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8938e929 code=0x7ffc0000 [ 438.443743][ T5929] usb 1-1: config 0 descriptor?? [ 438.485261][ T5960] usb usb5-port1: attempt power cycle [ 438.847190][ T5960] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 438.870172][ T5960] usb 5-1: device descriptor read/8, error -71 [ 438.944679][ T5929] zeroplus 0003:0C12:0030.0007: item fetching failed at offset 5/7 [ 438.973488][ T5929] zeroplus 0003:0C12:0030.0007: parse failed [ 439.019171][ T5929] zeroplus 0003:0C12:0030.0007: probe with driver zeroplus failed with error -22 [ 439.097904][T10606] netlink: 'syz.3.1300': attribute type 10 has an invalid length. [ 439.119784][T10606] veth1_vlan: left allmulticast mode [ 439.127123][ T5960] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 439.135652][T10581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.150212][ T9] usb 3-1: USB disconnect, device number 47 [ 439.158396][T10581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.177815][ T5960] usb 5-1: device descriptor read/8, error -71 [ 439.185111][T10606] veth1_vlan: entered allmulticast mode [ 439.243977][T10606] macvlan0: entered promiscuous mode [ 439.258574][T10606] team0: Port device macvlan0 added [ 439.301006][ T5960] usb usb5-port1: unable to enumerate USB device [ 439.403663][T10613] netlink: 'syz.2.1301': attribute type 2 has an invalid length. [ 439.422555][T10613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1301'. [ 439.441725][T10581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.458645][T10613] usb 1-1: USB disconnect, device number 74 [ 439.473543][T10581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.521843][T10581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.555091][T10581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.927204][ T5929] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 440.083147][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.089904][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.129567][ T5929] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.142307][ T5929] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 440.167322][ T5929] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=40.85 [ 440.187004][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.226674][ T5929] usb 4-1: config 0 descriptor?? [ 440.821928][T10655] tipc: Enabled bearer , priority 0 [ 440.847529][T10655] syzkaller0: entered promiscuous mode [ 440.855190][T10655] syzkaller0: entered allmulticast mode [ 440.920032][T10655] tipc: Resetting bearer [ 440.968891][T10654] tipc: Resetting bearer [ 441.130699][T10654] tipc: Disabling bearer [ 441.186115][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1313'. [ 441.198938][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1313'. [ 442.169031][ T5912] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 442.307074][ T5912] usb 5-1: device descriptor read/64, error -71 [ 442.427736][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 442.427751][ T30] audit: type=1326 audit(1749863759.127:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10678 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a7b58e52b code=0x7ffc0000 [ 442.477271][ T30] audit: type=1326 audit(1749863759.157:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10678 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a7b58e52b code=0x7ffc0000 [ 442.511052][ T30] audit: type=1326 audit(1749863759.207:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10678 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a7b58e52b code=0x7ffc0000 [ 442.544396][ T5929] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 442.572404][ T5912] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 442.595376][ T30] audit: type=1326 audit(1749863759.277:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10678 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a7b58e52b code=0x7ffc0000 [ 442.627893][ T30] audit: type=1326 audit(1749863759.277:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10678 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a7b58e52b code=0x7ffc0000 [ 442.657154][ T30] audit: type=1326 audit(1749863759.277:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10678 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a7b58e52b code=0x7ffc0000 [ 442.708362][ T5912] usb 5-1: device descriptor read/64, error -71 [ 442.717102][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 442.733012][ T5929] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 442.755678][ T5929] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 442.757825][ T30] audit: type=1326 audit(1749863759.347:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10678 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a7b58e52b code=0x7ffc0000 [ 442.801573][ T5929] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 442.819323][ T5929] usb 2-1: config 1 has no interface number 0 [ 442.825588][ T5929] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 442.826550][ T977] usb 4-1: USB disconnect, device number 55 [ 442.843676][ T5912] usb usb5-port1: attempt power cycle [ 442.849677][ T30] audit: type=1326 audit(1749863759.537:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10678 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a7b58e52b code=0x7ffc0000 [ 442.856245][ T5929] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 442.912200][ T30] audit: type=1326 audit(1749863759.567:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10678 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a7b58e52b code=0x7ffc0000 [ 442.928110][ T5929] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 442.995850][ T30] audit: type=1326 audit(1749863759.567:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10678 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a7b58e52b code=0x7ffc0000 [ 443.003141][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.063445][ T5929] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 443.084761][T10696] binder: 10693:10696 ioctl c0306201 200000000640 returned -22 [ 443.088259][T10698] fuse: Unknown parameter 'rootmode'' [ 443.113858][T10698] netlink: 'syz.2.1321': attribute type 24 has an invalid length. [ 443.213135][T10702] FAULT_INJECTION: forcing a failure. [ 443.213135][T10702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.227884][T10702] CPU: 0 UID: 0 PID: 10702 Comm: syz.2.1323 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 443.227913][T10702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 443.227925][T10702] Call Trace: [ 443.227934][T10702] [ 443.227943][T10702] dump_stack_lvl+0x189/0x250 [ 443.227980][T10702] ? __pfx____ratelimit+0x10/0x10 [ 443.228011][T10702] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.228042][T10702] ? __pfx__printk+0x10/0x10 [ 443.228076][T10702] should_fail_ex+0x414/0x560 [ 443.228110][T10702] _copy_from_user+0x2d/0xb0 [ 443.228132][T10702] get_user_ifreq+0x6c/0x180 [ 443.228165][T10702] sock_ioctl+0x6dd/0x790 [ 443.228196][T10702] ? __pfx_sock_ioctl+0x10/0x10 [ 443.228227][T10702] ? __fget_files+0x3a0/0x420 [ 443.228250][T10702] ? __fget_files+0x2a/0x420 [ 443.228276][T10702] ? bpf_lsm_file_ioctl+0x9/0x20 [ 443.228304][T10702] ? __pfx_sock_ioctl+0x10/0x10 [ 443.228332][T10702] __se_sys_ioctl+0xf9/0x170 [ 443.228363][T10702] do_syscall_64+0xfa/0x3b0 [ 443.228381][T10702] ? lockdep_hardirqs_on+0x9c/0x150 [ 443.228411][T10702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.228438][T10702] ? clear_bhb_loop+0x60/0xb0 [ 443.228463][T10702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.228481][T10702] RIP: 0033:0x7fcc3378e929 [ 443.228500][T10702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.228518][T10702] RSP: 002b:00007fcc34632038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 443.228540][T10702] RAX: ffffffffffffffda RBX: 00007fcc339b5fa0 RCX: 00007fcc3378e929 [ 443.228555][T10702] RDX: 0000200000000000 RSI: 00000000000089f1 RDI: 0000000000000003 [ 443.228568][T10702] RBP: 00007fcc34632090 R08: 0000000000000000 R09: 0000000000000000 [ 443.228581][T10702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.228593][T10702] R13: 0000000000000000 R14: 00007fcc339b5fa0 R15: 00007fcc33adfa28 [ 443.228624][T10702] [ 443.439000][ T5929] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 443.455023][ T5912] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 443.484661][ T5912] usb 5-1: device descriptor read/8, error -71 [ 443.727575][ T5912] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 443.747703][ T5929] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 443.758630][ T5912] usb 5-1: device descriptor read/8, error -71 [ 443.869836][ T5912] usb usb5-port1: unable to enumerate USB device [ 443.879961][ T5912] usb 2-1: USB disconnect, device number 74 [ 443.894474][ T5912] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 443.907873][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 443.922143][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 443.938660][ T5929] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 443.948711][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.960646][ T5929] usb 3-1: config 0 descriptor?? [ 444.933876][T10728] fuse: Bad value for 'fd' [ 445.003128][ T5929] kye 0003:0458:4018.0008: hidraw0: USB HID v0.07 Device [HID 0458:4018] on usb-dummy_hcd.2-1/input0 [ 445.097321][ T5960] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 445.119090][T10731] kvm: user requested TSC rate below hardware speed [ 445.138054][T10731] netlink: 'syz.4.1332': attribute type 2 has an invalid length. [ 445.268224][ T5960] usb 4-1: Using ep0 maxpacket: 8 [ 445.286196][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 445.307290][ T5960] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 445.324576][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.354689][ T5960] usb 4-1: config 0 descriptor?? [ 445.572349][ T5960] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 446.162110][ T977] usb 4-1: USB disconnect, device number 56 [ 446.654883][ T977] usb 3-1: USB disconnect, device number 48 [ 447.011968][T10761] fuse: Bad value for 'fd' [ 448.658646][T10788] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1348'. [ 449.102570][T10797] netlink: 'syz.2.1351': attribute type 10 has an invalid length. [ 449.127546][T10797] veth1_vlan: left allmulticast mode [ 449.208439][ T977] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 449.367159][ T977] usb 4-1: Using ep0 maxpacket: 32 [ 449.421007][ T977] usb 4-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 449.433261][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.459121][ T977] usb 4-1: config 0 descriptor?? [ 449.877564][ T977] viewsonic 0003:2133:0018.0009: item fetching failed at offset 0/4 [ 449.890932][ T977] viewsonic 0003:2133:0018.0009: probe with driver viewsonic failed with error -22 [ 450.082196][ T977] usb 4-1: USB disconnect, device number 57 [ 450.193164][T10804] fuse: Bad value for 'fd' [ 450.449789][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 450.449809][ T30] audit: type=1326 audit(1749863767.147:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10795 comm="syz.1.1350" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa0698e929 code=0x0 [ 450.654860][T10818] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1359'. [ 450.729157][T10822] vti0: entered promiscuous mode [ 450.737259][ T977] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 450.836529][T10826] FAULT_INJECTION: forcing a failure. [ 450.836529][T10826] name failslab, interval 1, probability 0, space 0, times 0 [ 450.851647][T10826] CPU: 1 UID: 0 PID: 10826 Comm: syz.4.1362 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 450.851677][T10826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 450.851690][T10826] Call Trace: [ 450.851700][T10826] [ 450.851709][T10826] dump_stack_lvl+0x189/0x250 [ 450.851747][T10826] ? __pfx____ratelimit+0x10/0x10 [ 450.851779][T10826] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.851810][T10826] ? __pfx__printk+0x10/0x10 [ 450.851837][T10826] ? __pfx___might_resched+0x10/0x10 [ 450.851868][T10826] ? fs_reclaim_acquire+0x7d/0x100 [ 450.851899][T10826] should_fail_ex+0x414/0x560 [ 450.851932][T10826] should_failslab+0xa8/0x100 [ 450.851955][T10826] __kmalloc_cache_noprof+0x70/0x3d0 [ 450.851976][T10826] ? device_add+0xbe/0xb50 [ 450.852003][T10826] device_add+0xbe/0xb50 [ 450.852025][T10826] ? device_initialize+0x24b/0x440 [ 450.852056][T10826] netdev_register_kobject+0x156/0x2f0 [ 450.852091][T10826] register_netdevice+0x126c/0x1ae0 [ 450.852138][T10826] ? __pfx_register_netdevice+0x10/0x10 [ 450.852172][T10826] ? __pfx_ip_tunnel_find+0x10/0x10 [ 450.852195][T10826] ? net_generic+0x1e/0x240 [ 450.852213][T10826] ? ip_tunnel_newlink+0x237/0x8b0 [ 450.852242][T10826] ip_tunnel_newlink+0x261/0x8b0 [ 450.852280][T10826] ? __pfx_ip_tunnel_newlink+0x10/0x10 [ 450.852309][T10826] ? vti_netlink_parms+0x2d2/0x470 [ 450.852336][T10826] vti_newlink+0x149/0x190 [ 450.852363][T10826] ? __pfx_vti_newlink+0x10/0x10 [ 450.852401][T10826] ? __pfx_vti_newlink+0x10/0x10 [ 450.852426][T10826] rtnl_newlink_create+0x30d/0xb00 [ 450.852461][T10826] ? __pfx_aa_get_newest_label+0x10/0x10 [ 450.852492][T10826] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 450.852514][T10826] ? rtnl_newlink+0x8db/0x1c70 [ 450.852540][T10826] ? __pfx___mutex_lock+0x10/0x10 [ 450.852574][T10826] ? ns_capable+0x8a/0xf0 [ 450.852609][T10826] rtnl_newlink+0x16d6/0x1c70 [ 450.852634][T10826] ? netlink_sendmsg+0x805/0xb30 [ 450.852674][T10826] ? __pfx_rtnl_newlink+0x10/0x10 [ 450.852724][T10826] ? kasan_quarantine_put+0xdd/0x220 [ 450.852752][T10826] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.852789][T10826] ? nlmon_xmit+0xb0/0x100 [ 450.852815][T10826] ? kmem_cache_free+0x18f/0x400 [ 450.852843][T10826] ? __local_bh_enable_ip+0x12d/0x1c0 [ 450.852872][T10826] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.852903][T10826] ? __local_bh_enable_ip+0x12d/0x1c0 [ 450.852931][T10826] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 450.852965][T10826] ? __dev_queue_xmit+0x27e/0x3a70 [ 450.853008][T10826] ? __lock_acquire+0xab9/0xd20 [ 450.853063][T10826] ? __pfx_rtnl_newlink+0x10/0x10 [ 450.853085][T10826] rtnetlink_rcv_msg+0x7cc/0xb70 [ 450.853112][T10826] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 450.853134][T10826] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 450.853153][T10826] ? ref_tracker_free+0x63a/0x7d0 [ 450.853178][T10826] ? __copy_skb_header+0xa7/0x550 [ 450.853207][T10826] ? __pfx_ref_tracker_free+0x10/0x10 [ 450.853235][T10826] ? __skb_clone+0x63/0x7a0 [ 450.853280][T10826] netlink_rcv_skb+0x208/0x470 [ 450.853306][T10826] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 450.853331][T10826] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 450.853372][T10826] ? netlink_deliver_tap+0x2e/0x1b0 [ 450.853396][T10826] ? netlink_deliver_tap+0x2e/0x1b0 [ 450.853427][T10826] netlink_unicast+0x75b/0x8d0 [ 450.853463][T10826] netlink_sendmsg+0x805/0xb30 [ 450.853500][T10826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.853528][T10826] ? aa_sock_msg_perm+0x94/0x160 [ 450.853557][T10826] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 450.853583][T10826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.853610][T10826] __sock_sendmsg+0x219/0x270 [ 450.853635][T10826] ____sys_sendmsg+0x505/0x830 [ 450.853668][T10826] ? __pfx_____sys_sendmsg+0x10/0x10 [ 450.853707][T10826] ? import_iovec+0x74/0xa0 [ 450.853733][T10826] ___sys_sendmsg+0x21f/0x2a0 [ 450.853763][T10826] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.853830][T10826] ? __fget_files+0x2a/0x420 [ 450.853852][T10826] ? __fget_files+0x3a0/0x420 [ 450.853887][T10826] __x64_sys_sendmsg+0x19b/0x260 [ 450.853917][T10826] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 450.853955][T10826] ? __pfx_ksys_write+0x10/0x10 [ 450.853972][T10826] ? rcu_is_watching+0x15/0xb0 [ 450.854008][T10826] ? do_syscall_64+0xbe/0x3b0 [ 450.854033][T10826] do_syscall_64+0xfa/0x3b0 [ 450.854050][T10826] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.854079][T10826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.854100][T10826] ? clear_bhb_loop+0x60/0xb0 [ 450.854126][T10826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.854146][T10826] RIP: 0033:0x7f2a7b58e929 [ 450.854166][T10826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.854184][T10826] RSP: 002b:00007f2a7c3da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.854207][T10826] RAX: ffffffffffffffda RBX: 00007f2a7b7b5fa0 RCX: 00007f2a7b58e929 [ 450.854220][T10826] RDX: 0000000000000004 RSI: 0000200000000280 RDI: 0000000000000003 [ 450.854232][T10826] RBP: 00007f2a7c3da090 R08: 0000000000000000 R09: 0000000000000000 [ 450.854245][T10826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 450.854314][T10826] R13: 0000000000000000 R14: 00007f2a7b7b5fa0 R15: 00007f2a7b8dfa28 [ 450.854348][T10826] [ 450.899256][ T977] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 450.900542][ C1] vkms_vblank_simulate: vblank timer overrun [ 450.915278][ T977] usb 3-1: config 0 interface 0 has no altsetting 0 [ 451.407187][ T977] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 451.468883][ T977] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 451.479217][ T977] usb 3-1: Product: syz [ 451.483516][ T977] usb 3-1: Manufacturer: syz [ 451.488692][ T977] usb 3-1: SerialNumber: syz [ 451.502674][ T977] usb 3-1: config 0 descriptor?? [ 451.524544][ T977] usb 3-1: selecting invalid altsetting 0 [ 452.368653][T10850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.384594][T10850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.411831][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1356'. [ 452.500260][T10852] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 452.604696][T10854] tipc: Cannot configure node identity twice [ 453.054705][T10862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1372'. [ 453.129669][T10862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1372'. [ 453.452158][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1373'. [ 454.351183][T10885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1380'. [ 454.389629][ T5912] usb 3-1: USB disconnect, device number 49 [ 454.462382][T10885] vlan2: entered promiscuous mode [ 454.481322][T10885] batadv0: entered promiscuous mode [ 454.627896][T10887] FAULT_INJECTION: forcing a failure. [ 454.627896][T10887] name failslab, interval 1, probability 0, space 0, times 0 [ 454.656065][T10887] CPU: 1 UID: 0 PID: 10887 Comm: syz.2.1381 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 454.656094][T10887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 454.656106][T10887] Call Trace: [ 454.656115][T10887] [ 454.656125][T10887] dump_stack_lvl+0x189/0x250 [ 454.656162][T10887] ? __pfx____ratelimit+0x10/0x10 [ 454.656191][T10887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.656231][T10887] ? __pfx__printk+0x10/0x10 [ 454.656258][T10887] ? __pfx___might_resched+0x10/0x10 [ 454.656289][T10887] ? fs_reclaim_acquire+0x7d/0x100 [ 454.656318][T10887] should_fail_ex+0x414/0x560 [ 454.656350][T10887] should_failslab+0xa8/0x100 [ 454.656373][T10887] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 454.656394][T10887] ? dup_task_struct+0x52/0x860 [ 454.656420][T10887] dup_task_struct+0x52/0x860 [ 454.656440][T10887] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.656472][T10887] copy_process+0x54b/0x3c00 [ 454.656524][T10887] ? __pfx_copy_process+0x10/0x10 [ 454.656558][T10887] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 454.656583][T10887] vhost_task_create+0x1c4/0x290 [ 454.656606][T10887] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 454.656634][T10887] ? __pfx_vhost_task_create+0x10/0x10 [ 454.656659][T10887] ? __pfx_vhost_task_fn+0x10/0x10 [ 454.656692][T10887] ? kasan_save_track+0x4f/0x80 [ 454.656716][T10887] ? kasan_save_track+0x3e/0x80 [ 454.656747][T10887] kvm_mmu_post_init_vm+0x147/0x2b0 [ 454.656778][T10887] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 454.656807][T10887] ? __mutex_trylock_common+0x153/0x260 [ 454.656828][T10887] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 454.656854][T10887] ? rcu_is_watching+0x15/0xb0 [ 454.656884][T10887] ? look_up_lock_class+0x74/0x170 [ 454.656915][T10887] ? register_lock_class+0x51/0x320 [ 454.656953][T10887] ? __lock_acquire+0xab9/0xd20 [ 454.657024][T10887] kvm_vcpu_ioctl+0x95c/0xe90 [ 454.657053][T10887] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 454.657071][T10887] ? __lock_acquire+0xab9/0xd20 [ 454.657124][T10887] ? __fget_files+0x2a/0x420 [ 454.657151][T10887] ? __fget_files+0x2a/0x420 [ 454.657171][T10887] ? __fget_files+0x3a0/0x420 [ 454.657192][T10887] ? __fget_files+0x2a/0x420 [ 454.657227][T10887] ? bpf_lsm_file_ioctl+0x9/0x20 [ 454.657256][T10887] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 454.657277][T10887] __se_sys_ioctl+0xf9/0x170 [ 454.657309][T10887] do_syscall_64+0xfa/0x3b0 [ 454.657327][T10887] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.657355][T10887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.657375][T10887] ? clear_bhb_loop+0x60/0xb0 [ 454.657402][T10887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.657421][T10887] RIP: 0033:0x7fcc3378e929 [ 454.657442][T10887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.657459][T10887] RSP: 002b:00007fcc34632038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 454.657483][T10887] RAX: ffffffffffffffda RBX: 00007fcc339b5fa0 RCX: 00007fcc3378e929 [ 454.657498][T10887] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 454.657511][T10887] RBP: 00007fcc34632090 R08: 0000000000000000 R09: 0000000000000000 [ 454.657523][T10887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.657536][T10887] R13: 0000000000000000 R14: 00007fcc339b5fa0 R15: 00007fcc33adfa28 [ 454.657571][T10887] [ 455.437442][ T5928] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 455.707031][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 455.747563][ T5928] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 455.755322][ T5928] usb 2-1: can't read configurations, error -61 [ 455.952483][ T5928] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 456.168301][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 456.183528][ T5928] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 456.206297][T10907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1387'. [ 456.223286][T10907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1387'. [ 456.250776][ T5928] usb 2-1: can't read configurations, error -61 [ 456.267423][ T5928] usb usb2-port1: attempt power cycle [ 456.627331][ T5928] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 456.684651][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 456.742471][ T5928] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 456.902110][ T5928] usb 2-1: can't read configurations, error -61 [ 457.397078][ T5928] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 457.417850][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 457.425610][ T5928] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 457.447117][ T5928] usb 2-1: can't read configurations, error -61 [ 457.467467][ T5928] usb usb2-port1: unable to enumerate USB device [ 457.608866][T10931] netlink: 'syz.3.1395': attribute type 10 has an invalid length. [ 457.630448][T10931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.643005][T10931] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 457.899455][T10939] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1398'. [ 458.183474][ T5928] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 458.237075][ T977] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 458.291359][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1402'. [ 458.301802][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1402'. [ 458.387177][ T5928] usb 3-1: device descriptor read/64, error -71 [ 458.417295][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 458.426594][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 458.441527][ T977] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 458.470182][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.508104][ T977] usb 5-1: config 0 descriptor?? [ 458.632574][ T5928] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 458.727813][ T977] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 458.797097][ T5928] usb 3-1: device descriptor read/64, error -71 [ 458.927584][ T5928] usb usb3-port1: attempt power cycle [ 459.199628][T10968] tipc: Failed to remove unknown binding: 66,1,1/0:645445032/645445034 [ 459.221123][T10968] tipc: Failed to remove unknown binding: 66,1,1/0:645445032/645445034 [ 459.242534][T10968] tipc: Failed to remove unknown binding: 66,1,1/0:645445032/645445034 [ 459.269720][ T3189] usb 5-1: USB disconnect, device number 44 [ 459.307247][ T5928] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 459.379630][ T5928] usb 3-1: device descriptor read/8, error -71 [ 459.617283][ T5928] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 459.647808][ T5928] usb 3-1: device descriptor read/8, error -71 [ 459.767404][ T5928] usb usb3-port1: unable to enumerate USB device [ 460.975192][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1416'. [ 461.018859][T10997] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1416'. [ 461.204727][T11004] ip6gre1: entered allmulticast mode [ 461.297088][ T977] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 461.467483][ T977] usb 3-1: Using ep0 maxpacket: 16 [ 461.475452][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 461.489878][ T977] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 461.505968][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.519855][ T977] usb 3-1: Product: syz [ 461.524089][ T977] usb 3-1: Manufacturer: syz [ 461.578091][ T30] audit: type=1326 audit(1749863778.277:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a7b52ab19 code=0x7ffc0000 [ 461.602656][ T977] usb 3-1: SerialNumber: syz [ 461.642758][ T977] usb 3-1: config 0 descriptor?? [ 461.669449][ T30] audit: type=1326 audit(1749863778.307:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7b58e929 code=0x7ffc0000 [ 461.749920][ T977] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 461.776101][ T30] audit: type=1326 audit(1749863778.307:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a7b52ab19 code=0x7ffc0000 [ 461.813404][T11025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1426'. [ 461.856415][ T1105] usb 3-1: Failed to submit usb control message: -71 [ 461.864643][ T5912] usb 3-1: USB disconnect, device number 54 [ 461.876594][ T1105] usb 3-1: unable to send the bmi data to the device: -71 [ 461.883974][ T1105] usb 3-1: unable to get target info from device [ 461.891165][ T1105] usb 3-1: could not get target info (-71) [ 461.897229][ T1105] usb 3-1: could not probe fw (-71) [ 461.947611][ T9] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 461.964548][ T30] audit: type=1326 audit(1749863778.307:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a7b52ab19 code=0x7ffc0000 [ 462.034809][ T30] audit: type=1326 audit(1749863778.307:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7b58e929 code=0x7ffc0000 [ 462.067666][ T30] audit: type=1326 audit(1749863778.307:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7b58e929 code=0x7ffc0000 [ 462.067857][ T977] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 462.092789][ T30] audit: type=1326 audit(1749863778.307:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a7b52ab19 code=0x7ffc0000 [ 462.180816][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 462.236555][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 462.277513][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 462.294602][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 462.304165][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.313026][ T30] audit: type=1326 audit(1749863778.307:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7b58e929 code=0x7ffc0000 [ 462.337507][ T9] usb 4-1: Product: syz [ 462.342998][ T9] usb 4-1: Manufacturer: syz [ 462.348676][ T9] usb 4-1: SerialNumber: syz [ 462.383241][ T30] audit: type=1326 audit(1749863778.307:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7b58e929 code=0x7ffc0000 [ 462.418449][ T9] hub 4-1:1.0: bad descriptor, ignoring hub [ 462.433077][ T9] hub 4-1:1.0: probe with driver hub failed with error -5 [ 462.442650][ T30] audit: type=1326 audit(1749863778.307:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a7b52ab19 code=0x7ffc0000 [ 462.465037][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.492265][ T977] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 462.513565][ T977] usb 2-1: config 0 interface 0 has no altsetting 0 [ 462.538601][ T977] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 462.558342][ T977] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 462.585351][ T977] usb 2-1: Product: syz [ 462.602642][ T977] usb 2-1: Manufacturer: syz [ 462.612089][T11029] netlink: 'syz.2.1428': attribute type 3 has an invalid length. [ 462.631329][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 58 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 462.662189][ T977] usb 2-1: SerialNumber: syz [ 462.693308][ T977] usb 2-1: config 0 descriptor?? [ 462.747867][ T9] usb 4-1: USB disconnect, device number 58 [ 462.796170][ T977] usb 2-1: selecting invalid altsetting 0 [ 462.807830][ T9] usblp0: removed [ 463.197040][ T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 463.494502][T11042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.511838][T11044] binder: BINDER_SET_CONTEXT_MGR already set [ 463.521005][T11044] binder: 11043:11044 ioctl 4018620d 200000000040 returned -16 [ 463.547038][T11042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.663207][ T9] usb 4-1: New USB device found, idVendor=05a4, idProduct=0290, bcdDevice=dc.1b [ 463.675883][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.716552][ T9] usb 4-1: config 0 descriptor?? [ 463.751805][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 463.839463][T11026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1425'. [ 464.111491][T11035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.131335][T11035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.221134][ T9] usb 2-1: USB disconnect, device number 79 [ 465.304982][T11068] syz.4.1438 (11068): /proc/11067/oom_adj is deprecated, please use /proc/11067/oom_score_adj instead. [ 465.960911][ T3189] usb 4-1: USB disconnect, device number 59 [ 466.360410][T11093] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1446'. [ 466.374737][T11094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1445'. [ 466.769888][T11101] bond0: option ad_select: unable to set because the bond device is up [ 467.110231][ T5928] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 467.357141][ T5928] usb 4-1: device descriptor read/64, error -71 [ 467.625690][ T5928] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 467.768102][ T5928] usb 4-1: device descriptor read/64, error -71 [ 467.833922][T11114] xt_hashlimit: size too large, truncated to 1048576 [ 467.887332][ T5928] usb usb4-port1: attempt power cycle [ 468.230191][ T5928] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 468.430107][ T5928] usb 4-1: device descriptor read/8, error -71 [ 468.658984][T11124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1456'. [ 468.674359][T11124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1456'. [ 468.690118][ T5928] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 468.702680][T11124] netlink: 'syz.4.1456': attribute type 12 has an invalid length. [ 468.719464][ T5928] usb 4-1: device descriptor read/8, error -71 [ 468.836753][ T5928] usb usb4-port1: unable to enumerate USB device [ 468.926159][T11129] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1458'. [ 469.128994][T11135] fuse: Unknown parameter 'rootmoEe' [ 469.191158][T11136] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1460'. [ 469.276187][T11136] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1460'. [ 469.508658][T11145] macvlan1: entered promiscuous mode [ 469.546182][T11145] macvlan1: left promiscuous mode [ 470.703182][T11174] xt_CT: You must specify a L4 protocol and not use inversions on it [ 470.939361][ T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 470.992794][ T5834] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 471.208388][ T9] usb 3-1: config 0 has no interfaces? [ 471.227794][ T5834] usb 4-1: Using ep0 maxpacket: 16 [ 471.243661][ T5834] usb 4-1: config index 0 descriptor too short (expected 1828, got 36) [ 471.261690][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 471.277586][ T5834] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 471.321717][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.381527][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.475253][ T9] usb 3-1: Product: syz [ 471.482987][ T9] usb 3-1: Manufacturer: syz [ 471.493282][ T5834] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 471.586176][ T9] usb 3-1: SerialNumber: syz [ 471.602473][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 471.616024][ T9] usb 3-1: config 0 descriptor?? [ 471.713341][ T5834] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 471.737185][ T3189] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 471.822197][ T5834] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 471.831488][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.850086][ T5834] usb 4-1: Product: syz [ 471.855776][ T5834] usb 4-1: Manufacturer: syz [ 471.864066][ T5834] usb 4-1: SerialNumber: syz [ 471.886413][ T5834] usb 4-1: config 0 descriptor?? [ 471.899782][ T5834] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 471.918778][ T5834] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 471.962640][T11173] misc userio: No port type given on /dev/userio [ 471.973343][T11173] misc userio: The device must be registered before sending interrupts [ 472.018228][ T5834] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 472.067380][ T5834] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 472.081720][ T5834] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 472.091598][ T5834] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 472.143132][ T5834] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 472.160555][ T5834] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 472.195195][ T5834] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 472.216056][ T3189] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 472.243968][ T5834] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 472.265733][ T5834] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 472.286371][ T5834] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 472.306454][ T5834] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 472.325830][ T5834] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 472.412323][ T3189] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 472.466714][ T5834] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 472.508158][ T3189] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 472.553275][ T3189] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 472.587417][ T3189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.958831][ T3189] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 472.987569][ T3189] usb 5-1: invalid MIDI out EP 0 [ 473.559729][T11188] bond1: entered promiscuous mode [ 473.565099][T11188] bond1: entered allmulticast mode [ 473.572366][T11188] 8021q: adding VLAN 0 to HW filter on device bond1 [ 473.659708][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.719743][ T3189] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 474.032181][ T9] usb 3-1: USB disconnect, device number 55 [ 474.079712][T11188] bond1 (unregistering): Released all slaves [ 474.253324][T11205] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1479'. [ 474.517724][ T5928] usb 4-1: USB disconnect, device number 64 [ 474.517847][ T9] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 474.531639][ T5928] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 474.572314][ T5928] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 474.590802][ T5928] keyspan 4-1:0.0: device disconnected [ 474.761019][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 474.787610][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 474.805988][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 474.818341][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 474.828023][ T9] usb 3-1: Product: syz [ 474.832333][ T9] usb 3-1: Manufacturer: syz [ 474.838344][ T9] usb 3-1: SerialNumber: syz [ 474.854183][ T9] usb 3-1: config 0 descriptor?? [ 474.860799][ T5928] usb 5-1: USB disconnect, device number 45 [ 474.888703][ T9] usb 3-1: selecting invalid altsetting 0 [ 475.337966][T11230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.347814][T11230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.467569][T11208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1481'. [ 476.017674][ T9] usb 2-1: new low-speed USB device number 80 using dummy_hcd [ 476.179285][ T9] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 476.246175][ T9] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 476.327714][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 476.471408][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 476.546203][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 476.681669][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 476.753812][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 476.791312][ T9] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 476.805011][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.831172][ T9] usb 2-1: Manufacturer: ↶欹袐㠋⑉函逝爽샘৘贯롶쎓깃掝哑ᓝ徾䄤稽뷮堯涾塏猩徾ċ醻稑糂᭤툄秹뉸ࠛ呌睲麈र [ 476.869618][ T9] usb 2-1: config 0 descriptor?? [ 476.980711][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 476.986719][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 477.002400][ T9] input: ↶欹袐㠋⑉函逝爽샘৘贯롶쎓깃掝哑ᓝ徾䄤稽뷮堯涾塏猩徾ċ醻稑糂᭤툄秹뉸ࠛ呌睲麈र as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input28 [ 477.203552][ T5928] usb 2-1: USB disconnect, device number 80 [ 477.297208][ T3189] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 477.462454][ T3189] usb 4-1: config 0 has no interfaces? [ 477.474015][ T3189] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 477.504809][ T3189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.533014][ T3189] usb 4-1: Product: syz [ 477.547762][ T3189] usb 4-1: Manufacturer: syz [ 477.565136][ T3189] usb 4-1: SerialNumber: syz [ 477.572571][ T3189] usb 4-1: config 0 descriptor?? [ 477.846286][T11252] delete_channel: no stack [ 477.914818][T11268] FAULT_INJECTION: forcing a failure. [ 477.914818][T11268] name failslab, interval 1, probability 0, space 0, times 0 [ 477.934310][T11268] CPU: 0 UID: 0 PID: 11268 Comm: syz.1.1500 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 477.934341][T11268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 477.934350][T11268] Call Trace: [ 477.934356][T11268] [ 477.934362][T11268] dump_stack_lvl+0x189/0x250 [ 477.934388][T11268] ? __pfx____ratelimit+0x10/0x10 [ 477.934408][T11268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.934428][T11268] ? __pfx__printk+0x10/0x10 [ 477.934445][T11268] ? ref_tracker_alloc+0x318/0x460 [ 477.934466][T11268] should_fail_ex+0x414/0x560 [ 477.934486][T11268] should_failslab+0xa8/0x100 [ 477.934500][T11268] kmem_cache_alloc_noprof+0x73/0x3c0 [ 477.934520][T11268] ? skb_clone+0x212/0x3a0 [ 477.934541][T11268] skb_clone+0x212/0x3a0 [ 477.934560][T11268] __netlink_deliver_tap+0x404/0x850 [ 477.934584][T11268] ? netlink_deliver_tap+0x2e/0x1b0 [ 477.934600][T11268] netlink_deliver_tap+0x19c/0x1b0 [ 477.934616][T11268] netlink_unicast+0x72f/0x8d0 [ 477.934637][T11268] netlink_sendmsg+0x805/0xb30 [ 477.934658][T11268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.934676][T11268] ? aa_sock_msg_perm+0x94/0x160 [ 477.934694][T11268] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 477.934710][T11268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.934726][T11268] __sock_sendmsg+0x219/0x270 [ 477.934740][T11268] ____sys_sendmsg+0x505/0x830 [ 477.934761][T11268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.934783][T11268] ? import_iovec+0x74/0xa0 [ 477.934798][T11268] ___sys_sendmsg+0x21f/0x2a0 [ 477.934817][T11268] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.934856][T11268] ? __fget_files+0x2a/0x420 [ 477.934870][T11268] ? __fget_files+0x3a0/0x420 [ 477.934890][T11268] __x64_sys_sendmsg+0x19b/0x260 [ 477.934908][T11268] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 477.934931][T11268] ? __pfx_ksys_write+0x10/0x10 [ 477.934948][T11268] ? rcu_is_watching+0x15/0xb0 [ 477.934971][T11268] ? do_syscall_64+0xbe/0x3b0 [ 477.934986][T11268] do_syscall_64+0xfa/0x3b0 [ 477.934997][T11268] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.935016][T11268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.935028][T11268] ? clear_bhb_loop+0x60/0xb0 [ 477.935043][T11268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.935055][T11268] RIP: 0033:0x7ffa0698e929 [ 477.935067][T11268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.935079][T11268] RSP: 002b:00007ffa07825038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.935094][T11268] RAX: ffffffffffffffda RBX: 00007ffa06bb5fa0 RCX: 00007ffa0698e929 [ 477.935104][T11268] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 477.935112][T11268] RBP: 00007ffa07825090 R08: 0000000000000000 R09: 0000000000000000 [ 477.935120][T11268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.935127][T11268] R13: 0000000000000000 R14: 00007ffa06bb5fa0 R15: 00007ffa06cdfa28 [ 477.935146][T11268] [ 477.935442][T11268] netlink: 'syz.1.1500': attribute type 13 has an invalid length. [ 478.256447][T11268] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1500'. [ 478.289035][ T5834] usb 3-1: USB disconnect, device number 56 [ 478.297093][T11268] : renamed from syz_tun (while UP) [ 478.341397][T11268] : refused to change device tx_queue_len [ 478.349291][T11268] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 479.343192][T11277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1501'. [ 479.437095][ T5928] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 479.493493][T11282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1504'. [ 479.544044][T11282] macsec0: left promiscuous mode [ 479.661456][ T5928] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 479.676360][ T5928] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 479.704221][ T30] kauditd_printk_skb: 1393 callbacks suppressed [ 479.704242][ T30] audit: type=1800 audit(1749863796.397:4083): pid=11289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1506" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 479.769865][ T5928] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 479.951118][ T5928] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 479.965101][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.015325][ T5928] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 480.025580][ T5928] usb 2-1: invalid MIDI out EP 0 [ 480.172008][ T5928] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 480.405164][T11279] bond2: entered promiscuous mode [ 480.410920][T11279] bond2: entered allmulticast mode [ 480.418312][T11279] 8021q: adding VLAN 0 to HW filter on device bond2 [ 480.481861][ T5960] usb 4-1: USB disconnect, device number 65 [ 480.971775][T11302] openvswitch: netlink: Flow key attr not present in new flow. [ 481.011829][T11302] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.369430][T11279] bond2 (unregistering): Released all slaves [ 481.378140][T11309] program syz.2.1512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 481.469471][T11311] program syz.4.1508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 481.483711][T11311] netlink: 'syz.4.1508': attribute type 10 has an invalid length. [ 481.505239][T11311] : entered promiscuous mode [ 481.562833][T11311] bond0: (slave ): Enslaving as an active interface with an up link [ 481.761075][T11314] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1513'. [ 481.905656][ T5912] usb 2-1: USB disconnect, device number 81 [ 481.966273][T11314] kvm: kvm [11313]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000008d) [ 481.980603][T11317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1514'. [ 481.994308][T11317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1514'. [ 482.174229][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1515'. [ 482.244257][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1515'. [ 482.253504][T11328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1515'. [ 482.265592][T11328] netlink: 'syz.3.1515': attribute type 18 has an invalid length. [ 482.277081][ T5960] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 482.372123][T11330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1518'. [ 482.517247][ T5928] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 482.527274][ T5960] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.545016][ T5960] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 482.703838][ T5960] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 482.779752][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 482.890351][ T5928] usb 5-1: config 0 has no interfaces? [ 483.146811][ T5960] usb 3-1: SerialNumber: syz [ 483.165621][T11339] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 483.652029][ T5928] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 483.742928][ T5960] usb 3-1: 0:2 : does not exist [ 483.750714][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.759712][ T5960] usb 3-1: unit 5 not found! [ 483.777890][ T5928] usb 5-1: Product: syz [ 483.813065][ T5929] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 483.882556][ T5928] usb 5-1: Manufacturer: syz [ 483.950854][ T5960] usb 3-1: USB disconnect, device number 57 [ 483.958237][ T5928] usb 5-1: SerialNumber: syz [ 483.993642][ T5929] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 484.016632][ T5928] usb 5-1: config 0 descriptor?? [ 484.068853][ T5929] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 484.086099][ T7658] udevd[7658]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 484.135567][ T5929] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 484.169026][ T5929] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 484.184337][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.274118][T11329] delete_channel: no stack [ 484.386384][ T5929] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 484.396799][ T5929] usb 4-1: invalid MIDI out EP 0 [ 484.504515][ T5929] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 485.152170][T11348] bond1: entered promiscuous mode [ 485.167146][T11348] bond1: entered allmulticast mode [ 485.183926][T11348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 485.582912][T11348] bond1 (unregistering): Released all slaves [ 486.575934][ T5960] usb 5-1: USB disconnect, device number 46 [ 486.981694][T11402] netlink: 'syz.0.1535': attribute type 10 has an invalid length. [ 486.994632][T11402] bridge0: port 1(macsec0) entered blocking state [ 487.019865][T11402] bridge0: port 1(macsec0) entered disabled state [ 487.026885][T11402] macsec0: entered allmulticast mode [ 487.034899][T11402] macsec0: entered promiscuous mode [ 487.107696][ T5912] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 487.307215][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 487.314663][ T5912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.345368][ T5912] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 487.359179][ T5912] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 487.370524][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.389598][ T5912] usb 5-1: config 0 descriptor?? [ 487.717196][ T5960] usb 4-1: USB disconnect, device number 66 [ 488.501202][T11423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.514783][T11423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.931048][T11436] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 489.396256][ T5912] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 489.727438][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 489.743027][ T5912] usb 3-1: unable to get BOS descriptor or descriptor too short [ 489.754746][ T5912] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 489.877407][ T5912] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 490.037038][ T5912] usb 3-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 490.050310][ T5912] usb 3-1: config 1 interface 0 has no altsetting 0 [ 490.083891][ T5912] usb 3-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 490.097031][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.110572][ T5912] usb 3-1: Product: syz [ 490.118749][ T5912] usb 3-1: Manufacturer: syz [ 490.123394][ T5912] usb 3-1: SerialNumber: syz [ 490.174541][T11442] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 490.412548][ T5912] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input29 [ 491.112964][T11442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.137477][T11442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.189872][T11442] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 491.234717][ T5960] usb 3-1: USB disconnect, device number 58 [ 491.244496][ T7272] bcm5974 3-1:1.0: could not read from device [ 491.571159][ T5929] usb 5-1: USB disconnect, device number 47 [ 491.620411][T11463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1554'. [ 491.722332][ T30] audit: type=1326 audit(1749863808.417:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.4.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7b58e929 code=0x7ffc0000 [ 491.751869][ T30] audit: type=1326 audit(1749863808.417:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.4.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a7b52ab19 code=0x7ffc0000 [ 491.808713][ T30] audit: type=1326 audit(1749863808.417:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.4.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a7b52ab19 code=0x7ffc0000 [ 491.883062][ T30] audit: type=1326 audit(1749863808.417:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.4.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a7b52ab19 code=0x7ffc0000 [ 491.945990][ T30] audit: type=1326 audit(1749863808.417:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.4.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a7b52ab19 code=0x7ffc0000 [ 491.970372][ T30] audit: type=1326 audit(1749863808.417:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.4.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a7b52ab19 code=0x7ffc0000 [ 491.994479][ T30] audit: type=1326 audit(1749863808.417:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.4.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a7b52ab19 code=0x7ffc0000 [ 492.039207][ T30] audit: type=1326 audit(1749863808.417:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.4.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a7b52ab19 code=0x7ffc0000 [ 492.177214][ T30] audit: type=1326 audit(1749863808.417:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.4.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a7b52ab19 code=0x7ffc0000 [ 492.217256][ T30] audit: type=1326 audit(1749863808.417:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.4.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a7b52ab19 code=0x7ffc0000 [ 492.504696][T11485] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1560'. [ 492.517020][ T5960] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 492.679339][ T5960] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 492.703712][ T5960] usb 3-1: config 0 interface 0 has no altsetting 0 [ 492.704834][T11492] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1565'. [ 492.752789][ T5960] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 492.764078][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 492.773392][ T5960] usb 3-1: Product: syz [ 492.789146][ T5960] usb 3-1: Manufacturer: syz [ 492.800039][ T5960] usb 3-1: SerialNumber: syz [ 492.815016][ T5960] usb 3-1: config 0 descriptor?? [ 492.858036][ T5960] usb 3-1: selecting invalid altsetting 0 [ 493.127136][ T9] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 493.307570][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 493.357082][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.412069][T11501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.421523][T11501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.436593][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1559'. [ 493.553472][T11502] fuse: Bad value for 'fd' [ 493.626995][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 493.673693][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.691249][ T9] usb 4-1: config 0 descriptor?? [ 493.702395][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 494.954636][T11523] wireguard: wg1: Could not create IPv4 socket [ 495.303473][T11528] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1576'. [ 495.327263][ T9] gspca_vc032x: reg_w err -110 [ 495.332121][ T9] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 495.347149][T11528] netem: change failed [ 495.509046][ T9] usb 3-1: USB disconnect, device number 59 [ 495.638913][T11534] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1578'. [ 495.859091][ T5960] usb 4-1: USB disconnect, device number 67 [ 496.327039][ T5960] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 496.534485][ T5960] usb 4-1: Using ep0 maxpacket: 16 [ 496.551595][ T5960] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.708767][ T5960] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 496.735452][ T5960] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 496.747060][ T9] usb 2-1: new low-speed USB device number 82 using dummy_hcd [ 496.768617][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.790979][ T5960] usb 4-1: Product: syz [ 496.819581][ T5960] usb 4-1: Manufacturer: syz [ 496.824452][ T5960] usb 4-1: SerialNumber: syz [ 496.916532][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 32200, setting to 8 [ 496.997610][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 497.025078][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 497.059998][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 152, changing to 4 [ 497.096017][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 497.108572][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.112794][T11541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.157195][T11541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.333710][ T9] usb 2-1: config 0 descriptor?? [ 497.343620][T11548] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 497.476862][ T5960] usb 4-1: skipping empty audio interface (v1) [ 497.539945][ T5960] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 497.560776][ T9] usb 2-1: USB disconnect, device number 82 [ 497.588218][ T5960] usb 4-1: USB disconnect, device number 68 [ 497.630051][ T7658] udevd[7658]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 497.862171][T11578] FAULT_INJECTION: forcing a failure. [ 497.862171][T11578] name failslab, interval 1, probability 0, space 0, times 0 [ 497.875687][T11578] CPU: 1 UID: 0 PID: 11578 Comm: syz.4.1592 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 497.875716][T11578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 497.875729][T11578] Call Trace: [ 497.875738][T11578] [ 497.875747][T11578] dump_stack_lvl+0x189/0x250 [ 497.875785][T11578] ? __pfx____ratelimit+0x10/0x10 [ 497.875816][T11578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.875848][T11578] ? __pfx__printk+0x10/0x10 [ 497.875877][T11578] ? __pfx___might_resched+0x10/0x10 [ 497.875912][T11578] should_fail_ex+0x414/0x560 [ 497.875952][T11578] should_failslab+0xa8/0x100 [ 497.875978][T11578] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 497.875999][T11578] ? __alloc_skb+0x112/0x2d0 [ 497.876029][T11578] __alloc_skb+0x112/0x2d0 [ 497.876057][T11578] netlink_sendmsg+0x5c6/0xb30 [ 497.876093][T11578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.876122][T11578] ? aa_sock_msg_perm+0x94/0x160 [ 497.876150][T11578] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 497.876177][T11578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.876203][T11578] __sock_sendmsg+0x219/0x270 [ 497.876227][T11578] ____sys_sendmsg+0x505/0x830 [ 497.876261][T11578] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.876298][T11578] ? import_iovec+0x74/0xa0 [ 497.876324][T11578] ___sys_sendmsg+0x21f/0x2a0 [ 497.876352][T11578] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.876419][T11578] ? __fget_files+0x2a/0x420 [ 497.876441][T11578] ? __fget_files+0x3a0/0x420 [ 497.876475][T11578] __x64_sys_sendmsg+0x19b/0x260 [ 497.876505][T11578] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 497.876542][T11578] ? __pfx_ksys_write+0x10/0x10 [ 497.876568][T11578] ? do_syscall_64+0xbe/0x3b0 [ 497.876592][T11578] do_syscall_64+0xfa/0x3b0 [ 497.876610][T11578] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.876639][T11578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.876660][T11578] ? clear_bhb_loop+0x60/0xb0 [ 497.876684][T11578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.876703][T11578] RIP: 0033:0x7f2a7b58e929 [ 497.876722][T11578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.876741][T11578] RSP: 002b:00007f2a7c3da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.876765][T11578] RAX: ffffffffffffffda RBX: 00007f2a7b7b5fa0 RCX: 00007f2a7b58e929 [ 497.876780][T11578] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 497.876792][T11578] RBP: 00007f2a7c3da090 R08: 0000000000000000 R09: 0000000000000000 [ 497.876805][T11578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.876817][T11578] R13: 0000000000000000 R14: 00007f2a7b7b5fa0 R15: 00007f2a7b8dfa28 [ 497.876849][T11578] [ 498.139550][ C1] vkms_vblank_simulate: vblank timer overrun [ 498.687130][ T5834] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 498.839124][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.880665][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.892012][ T5834] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 498.925316][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.943850][ T5834] usb 2-1: config 0 descriptor?? [ 499.374285][ T5834] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 499.382926][ T5834] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 499.390803][ T5834] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 499.407064][ T5834] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 499.623420][ T5834] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 499.677746][ T5834] playstation 0003:054C:0DF2.000A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 499.973988][ T5834] playstation 0003:054C:0DF2.000A: Invalid byte count transferred, expected 20 got 0 [ 499.983940][ T5834] playstation 0003:054C:0DF2.000A: Failed to retrieve DualSense pairing info: -22 [ 500.017042][ T5834] playstation 0003:054C:0DF2.000A: Failed to get MAC address from DualSense [ 500.072382][ T5834] playstation 0003:054C:0DF2.000A: Failed to create dualsense. [ 500.114663][ T5834] playstation 0003:054C:0DF2.000A: probe with driver playstation failed with error -22 [ 500.254073][ T5834] usb 2-1: USB disconnect, device number 83 [ 500.473982][T11610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1601'. [ 500.528774][T11610] 8021q: VLANs not supported on caif0 [ 501.188359][ T5960] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 501.564784][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.574203][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.580877][ T5960] usb 2-1: Using ep0 maxpacket: 32 [ 501.607764][ T5960] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 501.618452][ T5960] usb 2-1: config 0 has no interface number 0 [ 501.624874][ T5960] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 501.647008][ T5960] usb 2-1: config 0 interface 85 has no altsetting 0 [ 501.699951][ T5960] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 501.709229][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.720066][ T5960] usb 2-1: Product: syz [ 501.724404][ T5960] usb 2-1: Manufacturer: syz [ 501.735716][ T5960] usb 2-1: SerialNumber: syz [ 501.761417][ T5960] usb 2-1: config 0 descriptor?? [ 502.250607][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1609'. [ 502.550147][ T5960] appletouch 2-1:0.85: Geyser mode initialized. [ 502.571117][ T5960] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input30 [ 502.730509][ T5912] usb 2-1: USB disconnect, device number 84 [ 502.801717][ T5912] appletouch 2-1:0.85: input: appletouch disconnected [ 503.689772][ T3189] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 503.871032][ T3189] usb 3-1: config 0 has no interfaces? [ 503.879870][ T3189] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 503.891039][ T3189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.899856][ T3189] usb 3-1: Product: syz [ 503.908600][ T3189] usb 3-1: Manufacturer: syz [ 503.943159][ T3189] usb 3-1: SerialNumber: syz [ 503.960074][ T3189] usb 3-1: config 0 descriptor?? [ 504.353625][T11668] netlink: 'syz.1.1620': attribute type 13 has an invalid length. [ 504.385270][T11668] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1620'. [ 504.409914][T11668] : refused to change device tx_queue_len [ 504.507021][T11668] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 505.058110][T11677] [ 505.060479][T11677] ====================================================== [ 505.067497][T11677] WARNING: possible circular locking dependency detected [ 505.074510][T11677] 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 Not tainted [ 505.081631][T11677] ------------------------------------------------------ [ 505.088650][T11677] syz.4.1623/11677 is trying to acquire lock: [ 505.094825][T11677] ffffffff8f87ab28 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 505.105417][T11677] [ 505.105417][T11677] but task is already holding lock: [ 505.112800][T11677] ffff888024cd6c40 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: loop_set_status+0x227/0xaf0 [ 505.123045][T11677] [ 505.123045][T11677] which lock already depends on the new lock. [ 505.123045][T11677] [ 505.133457][T11677] [ 505.133457][T11677] the existing dependency chain (in reverse order) is: [ 505.142472][T11677] [ 505.142472][T11677] -> #2 (&q->q_usage_counter(io)#25){++++}-{0:0}: [ 505.151094][T11677] lock_acquire+0x120/0x360 [ 505.156135][T11677] blk_alloc_queue+0x538/0x620 [ 505.161435][T11677] __blk_mq_alloc_disk+0x162/0x340 [ 505.167083][T11677] loop_add+0x41b/0xad0 [ 505.171767][T11677] loop_init+0x173/0x230 [ 505.176546][T11677] do_one_initcall+0x233/0x820 [ 505.181837][T11677] do_initcall_level+0x137/0x1f0 [ 505.187301][T11677] do_initcalls+0x69/0xd0 [ 505.192155][T11677] kernel_init_freeable+0x3d9/0x570 [ 505.197881][T11677] kernel_init+0x1d/0x1d0 [ 505.202736][T11677] ret_from_fork+0x3fc/0x770 [ 505.207857][T11677] ret_from_fork_asm+0x1a/0x30 [ 505.213161][T11677] [ 505.213161][T11677] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 505.220392][T11677] lock_acquire+0x120/0x360 [ 505.225424][T11677] fs_reclaim_acquire+0x72/0x100 [ 505.230888][T11677] kmem_cache_alloc_node_noprof+0x47/0x3c0 [ 505.237314][T11677] __alloc_skb+0x112/0x2d0 [ 505.242259][T11677] alloc_uevent_skb+0x7d/0x230 [ 505.247555][T11677] kobject_uevent_net_broadcast+0x2fa/0x560 [ 505.253976][T11677] kobject_uevent_env+0x55b/0x8c0 [ 505.259532][T11677] kobject_synth_uevent+0x527/0xb00 [ 505.265260][T11677] bus_uevent_store+0x115/0x170 [ 505.270640][T11677] kernfs_fop_write_iter+0x378/0x4f0 [ 505.276462][T11677] vfs_write+0x548/0xa90 [ 505.281247][T11677] ksys_write+0x145/0x250 [ 505.286099][T11677] do_syscall_64+0xfa/0x3b0 [ 505.291129][T11677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.297550][T11677] [ 505.297550][T11677] -> #0 (uevent_sock_mutex){+.+.}-{4:4}: [ 505.305381][T11677] validate_chain+0xb9b/0x2140 [ 505.310670][T11677] __lock_acquire+0xab9/0xd20 [ 505.315884][T11677] lock_acquire+0x120/0x360 [ 505.320923][T11677] __mutex_lock+0x182/0xe80 [ 505.325951][T11677] kobject_uevent_net_broadcast+0x27e/0x560 [ 505.332372][T11677] kobject_uevent_env+0x55b/0x8c0 [ 505.337934][T11677] loop_set_status+0x4d3/0xaf0 [ 505.343229][T11677] lo_ioctl+0xa5e/0x2410 [ 505.347998][T11677] blkdev_ioctl+0x5a8/0x6d0 [ 505.353035][T11677] __se_sys_ioctl+0xf9/0x170 [ 505.358159][T11677] do_syscall_64+0xfa/0x3b0 [ 505.363195][T11677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.369612][T11677] [ 505.369612][T11677] other info that might help us debug this: [ 505.369612][T11677] [ 505.379840][T11677] Chain exists of: [ 505.379840][T11677] uevent_sock_mutex --> fs_reclaim --> &q->q_usage_counter(io)#25 [ 505.379840][T11677] [ 505.393593][T11677] Possible unsafe locking scenario: [ 505.393593][T11677] [ 505.401045][T11677] CPU0 CPU1 [ 505.406411][T11677] ---- ---- [ 505.411776][T11677] lock(&q->q_usage_counter(io)#25); [ 505.417250][T11677] lock(fs_reclaim); [ 505.423762][T11677] lock(&q->q_usage_counter(io)#25); [ 505.431668][T11677] lock(uevent_sock_mutex); [ 505.436276][T11677] [ 505.436276][T11677] *** DEADLOCK *** [ 505.436276][T11677] [ 505.444419][T11677] 3 locks held by syz.4.1623/11677: [ 505.449615][T11677] #0: ffff888142f12400 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0x2c/0xaf0 [ 505.459044][T11677] #1: ffff888024cd6c40 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: loop_set_status+0x227/0xaf0 [ 505.469691][T11677] #2: ffff888024cd6c78 (&q->q_usage_counter(queue)#19){+.+.}-{0:0}, at: loop_set_status+0x227/0xaf0 [ 505.480596][T11677] [ 505.480596][T11677] stack backtrace: [ 505.486490][T11677] CPU: 1 UID: 0 PID: 11677 Comm: syz.4.1623 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 505.486511][T11677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 505.486522][T11677] Call Trace: [ 505.486530][T11677] [ 505.486537][T11677] dump_stack_lvl+0x189/0x250 [ 505.486566][T11677] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.486590][T11677] ? __pfx__printk+0x10/0x10 [ 505.486608][T11677] ? print_lock_name+0xde/0x100 [ 505.486624][T11677] print_circular_bug+0x2ee/0x310 [ 505.486641][T11677] check_noncircular+0x134/0x160 [ 505.486659][T11677] validate_chain+0xb9b/0x2140 [ 505.486686][T11677] __lock_acquire+0xab9/0xd20 [ 505.486711][T11677] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 505.486730][T11677] lock_acquire+0x120/0x360 [ 505.486750][T11677] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 505.486773][T11677] __mutex_lock+0x182/0xe80 [ 505.486788][T11677] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 505.486807][T11677] ? vsnprintf+0xe11/0xf00 [ 505.486828][T11677] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 505.486847][T11677] ? __pfx___mutex_lock+0x10/0x10 [ 505.486860][T11677] ? add_uevent_var+0x278/0x450 [ 505.486879][T11677] ? kobject_uevent_env+0x50a/0x8c0 [ 505.486896][T11677] ? __pfx_add_uevent_var+0x10/0x10 [ 505.486919][T11677] kobject_uevent_net_broadcast+0x27e/0x560 [ 505.486942][T11677] kobject_uevent_env+0x55b/0x8c0 [ 505.486963][T11677] loop_set_status+0x4d3/0xaf0 [ 505.486988][T11677] lo_ioctl+0xa5e/0x2410 [ 505.487009][T11677] ? stack_trace_save+0x9c/0xe0 [ 505.487028][T11677] ? __pfx_lo_ioctl+0x10/0x10 [ 505.487048][T11677] ? __lock_acquire+0xab9/0xd20 [ 505.487077][T11677] ? __lock_acquire+0xab9/0xd20 [ 505.487100][T11677] ? __lock_acquire+0xab9/0xd20 [ 505.487124][T11677] ? __lock_acquire+0xab9/0xd20 [ 505.487148][T11677] ? __lock_acquire+0xab9/0xd20 [ 505.487174][T11677] ? is_bpf_text_address+0x26/0x2b0 [ 505.487199][T11677] ? is_bpf_text_address+0x292/0x2b0 [ 505.487222][T11677] ? is_bpf_text_address+0x26/0x2b0 [ 505.487246][T11677] ? kernel_text_address+0xa5/0xe0 [ 505.487266][T11677] ? __kernel_text_address+0xd/0x40 [ 505.487285][T11677] ? unwind_get_return_address+0x4d/0x90 [ 505.487309][T11677] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 505.487326][T11677] ? arch_stack_walk+0xfc/0x150 [ 505.487344][T11677] ? stack_trace_save+0x9c/0xe0 [ 505.487365][T11677] ? kasan_save_track+0x4f/0x80 [ 505.487387][T11677] ? kasan_save_track+0x3e/0x80 [ 505.487409][T11677] ? kasan_save_free_info+0x46/0x50 [ 505.487427][T11677] ? __kasan_slab_free+0x62/0x70 [ 505.487440][T11677] ? kfree+0x18e/0x440 [ 505.487462][T11677] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 505.487480][T11677] ? security_file_ioctl+0xcb/0x2d0 [ 505.487497][T11677] ? __se_sys_ioctl+0x47/0x170 [ 505.487518][T11677] ? do_syscall_64+0xfa/0x3b0 [ 505.487540][T11677] ? do_vfs_ioctl+0xf37/0x1990 [ 505.487562][T11677] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 505.487587][T11677] ? kasan_quarantine_put+0xdd/0x220 [ 505.487612][T11677] ? blkdev_common_ioctl+0xfc3/0x2450 [ 505.487635][T11677] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 505.487653][T11677] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 505.487676][T11677] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 505.487699][T11677] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 505.487716][T11677] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 505.487735][T11677] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 505.487758][T11677] ? __lock_acquire+0xab9/0xd20 [ 505.487784][T11677] ? __pfx_lo_ioctl+0x10/0x10 [ 505.487803][T11677] blkdev_ioctl+0x5a8/0x6d0 [ 505.487826][T11677] ? __pfx_blkdev_ioctl+0x10/0x10 [ 505.487848][T11677] ? __fget_files+0x2a/0x420 [ 505.487866][T11677] ? bpf_lsm_file_ioctl+0x9/0x20 [ 505.487888][T11677] ? __pfx_blkdev_ioctl+0x10/0x10 [ 505.487910][T11677] __se_sys_ioctl+0xf9/0x170 [ 505.487934][T11677] do_syscall_64+0xfa/0x3b0 [ 505.487948][T11677] ? lockdep_hardirqs_on+0x9c/0x150 [ 505.487971][T11677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.487986][T11677] ? clear_bhb_loop+0x60/0xb0 [ 505.488003][T11677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.488019][T11677] RIP: 0033:0x7f2a7b58e929 [ 505.488034][T11677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.488049][T11677] RSP: 002b:00007f2a7c3da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.488067][T11677] RAX: ffffffffffffffda RBX: 00007f2a7b7b5fa0 RCX: 00007f2a7b58e929 [ 505.488079][T11677] RDX: 00002000000001c0 RSI: 0000000000004c02 RDI: 0000000000000008 [ 505.488090][T11677] RBP: 00007f2a7b610b39 R08: 0000000000000000 R09: 0000000000000000 [ 505.488100][T11677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.488110][T11677] R13: 0000000000000000 R14: 00007f2a7b7b5fa0 R15: 00007f2a7b8dfa28 [ 505.488126][T11677] [ 505.951597][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.102152][ T5912] usb 3-1: USB disconnect, device number 60 [ 506.257031][ T5928] usb 4-1: new low-speed USB device number 69 using dummy_hcd [ 506.387043][ T5928] usb 4-1: device descriptor read/64, error -71 [ 506.627011][ T5928] usb 4-1: new low-speed USB device number 70 using dummy_hcd [ 506.757028][ T5928] usb 4-1: device descriptor read/64, error -71 [ 506.867803][ T5928] usb usb4-port1: attempt power cycle [ 507.206986][ T5928] usb 4-1: new low-speed USB device number 71 using dummy_hcd [ 507.227438][ T5928] usb 4-1: device descriptor read/8, error -71 [ 507.468023][ T5928] usb 4-1: new low-speed USB device number 72 using dummy_hcd [ 507.487524][ T5928] usb 4-1: device descriptor read/8, error -71 [ 507.597413][ T5928] usb usb4-port1: unable to enumerate USB device