last executing test programs: 18m14.399735776s ago: executing program 1 (id=3608): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="9b4307000001aaaaaaaaaa0008004500001c00000077000001907800000000ffffffffe0009078fffd00"], 0x0) 18m14.248224364s ago: executing program 1 (id=3610): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r4, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000040)={0x28, 0x5, 0x0, r4, 0x3, 0x9, 0x3ffc}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000440)=0x9, 0x4) 18m14.030644609s ago: executing program 1 (id=3612): socket$packet(0x11, 0x2, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x80, 0x2f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0xf95}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xfd, 0x1, 0xb}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x7e, 0xd, 0x9}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0xba, 0x0, 0x9, 0x40, 0x2}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1401}}, {0xb1, &(0x7f0000000240)=@string={0xb1, 0x3, "fb489a33e3ccfe3a035d9ffad684311f9ddcd3cdc9f49399eaf2db6f9f6629943deb9c0fb11113b48765a9b7e70af608f0409dd9c9d177925ba10e4ee4374ee4f294c8e8ff0add3b0261f8063acb529e5bce2a105281690018ba8b86584b8501b91f73d50f96dab6a6352bbfd89b1d60b3b34fe2cd1145d60c80b99df522c1cc0bff71657d512507f0859703b03724fffdba997cba5ddcad85f1c65664789a3e86067e3e241667540f11092fc723b6"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41c}}]}) lseek(r0, 0x4, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064000000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x7, 0x6, @multicast}, 0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f00000001c0)={0x0, 0x0, 0x7fff, 0xb}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x24044810) 18m12.071054022s ago: executing program 1 (id=3624): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x439, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, r1, 0x0, 0x21190}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x6c4, 0x3, 0x3}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x40}}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000680)={0x1, 0x0, @ioapic={0xf000, 0x7, 0x7, 0xffffffff, 0x0, [{0x2, 0xd, 0x1}, {0x4, 0x5, 0xd, '\x00', 0x3}, {0x0, 0xbc, 0x3, '\x00', 0x9}, {0x0, 0x1, 0x21, '\x00', 0xfa}, {0xa, 0x2, 0x8, '\x00', 0xe4}, {0x5, 0x9, 0x4, '\x00', 0xff}, {0x7, 0x2, 0xfd, '\x00', 0x1}, {0xca, 0x81, 0x8, '\x00', 0x4}, {0x4, 0x4, 0xa, '\x00', 0x4}, {0x3, 0xd, 0x95, '\x00', 0x9}, {0x8, 0x9, 0x9, '\x00', 0x9}, {0x0, 0x2d, 0x1, '\x00', 0x4}, {0x3, 0x4, 0xe, '\x00', 0x3}, {0xff, 0x47, 0x2, '\x00', 0x81}, {0x7, 0x2, 0x3, '\x00', 0x1}, {0x4a, 0x6e, 0x7, '\x00', 0x4}, {0x8, 0x2, 0x2, '\x00', 0x1}, {0x9, 0x1, 0x1, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe}, {0x9, 0x1, 0xc, '\x00', 0xd}, {0xfd, 0xa0, 0x6, '\x00', 0x1}, {0x7, 0x0, 0x7, '\x00', 0x3}, {0x9, 0x9, 0x2e, '\x00', 0x7}, {0x28, 0xe, 0xe, '\x00', 0x80}]}}) syz_emit_ethernet(0x39, &(0x7f0000000500)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x17, 0x0, @gue={{0x1, 0x1, 0x2, 0xc, 0x100, @void}, "00fd3c2d871ac341e9a534"}}}}}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000730141000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000440)='./file0\x00', 0x9) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000600)={@private1, 0x68, r5}) socket$unix(0x1, 0x5, 0x0) getpid() syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[@ANYBLOB="018042000002bbbbbbbbbbbb08004500002c000000020011907800000000000000000000000700189078040000008000000003000000000000005af713503daeede8b3373e147192891730a11e2f49a73abd633bd3438bbde799b5ccebc8b5f847fa833415aff3b5b5455fdb805dedccd91fcebc9120207059e1a4906e8ceac809bf3097214e28760506925ea8bc5407e5d30f4a23884d1928728222a0c97aee2a02f6b9210145efc3eb44e401c7d0b011ecd0fbe6fcb9f0c778bbe5d44e53cc62"], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000380)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000400)=0x18) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000480)={r10, 0x7fff}, 0x8) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, r9, 0x309, 0x0, 0x0, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x200000000000011, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r13, @ANYBLOB="0a0001"], 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r9, @ANYBLOB="00042abd7000fddbdf2510000000300001800800030001000000080003000300000008000100", @ANYRES32=r5, @ANYBLOB="1400020076657468305f766972745f77696669006c00018008000100", @ANYRES32=r13, @ANYBLOB="140002006d61637365633000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="0800030002000000080003000200000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="0800030000000000140002006e7230003def00000000000000000000206b328015793cfcccf2059cbc3bf92ede6e38517443ae86482ce359d3be11995f64da9972473a598112fd47d9229f458f129cc1b4ef4066e944946ef6b028b765a01f2f84ea9c06618522a613ebba1cc567514030505de02d1ea7bc1a9228daae26cb1e8eccb7b46ce511ee296559bea2712c6127833d02d954478e6a604333e3a6b611062d6970b3bbe6de4e809d38f1fa84ee18d2e844f95acba8e91fef3ba2079d8e"], 0xb0}, 0x1, 0x0, 0x0, 0x94}, 0x8081) 18m11.300245275s ago: executing program 1 (id=3627): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x588, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x54c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0xd4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0xa0, 0x1b, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x1}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfffffffe}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffb4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x450, 0x1, [@m_tunnel_key={0x11c, 0x18, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x697, 0x0, 0x4, 0x100}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x20}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}]}, {0x95, 0x6, "39a11532c68866bc11f78348e628abc1ad84d1601df6ec416cf625f90a17a99b39a666020afde2a4e1ff54842056996ead43539758b141e01d4feddfa4f2d6608c468e5ca2264f490beef1d6e6cd9490307b7f21c63dbf597bf51d59a885bce4d88f91e5cc855b5137d18436c7291010c45e671d1962c7f9d9878bd386815376eaafbcd8c812489e208ac096ea8f25cdf9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x164, 0x7, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xf, 0xb411d50005397f39, 0xa, 0x10001}, 0x9e61}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ce, 0xa, 0x0, 0x5, 0x1}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfe1, 0xc0000, 0x1, 0x3, 0x5}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x28d4483e, 0xa41, 0x20000000, 0x8, 0x14eb}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4a3, 0x6, 0x7, 0x1c05, 0x4}, 0x1000}}]}, {0xa5, 0x6, "79bfcd7af533d072a8c29f36e68ab9904831686d6cd3390377cca5e53a8926070630448b3fc4cd7c92ec53371be4232497d515edab99ceda9fe783a4517aa76f458d17bb770e71e0ba14efb8375ac49ead1660b083f443d1ffcecd5197019986b82c2d3c1f0d2b0de14eead0041991bd7874be9402d799e64d44c3fe6d48dd4a8f6782a95c290cea018ba0470c73b3032f66a39bf3cba21d7301df8362d3324b6a"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x9c, 0xf, 0x0, 0x0, {{0x9}, {0x4}, {0x6d, 0x6, "01f4310969d021b8053bb1aca7e8d7615c1d03580900c583f834dae8ea05e484960378a34a6b952d073cc12d15ce11e941d47c907715c5f99ee7525bcab58cfe612fa780af8ced2963cf55b3491748a46eec685aebc1e625b20a01ecf302ae7d7ed9067bf6c6e18ea5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0xdc, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0xb1, 0x6, "a616d32bc9a40ffc05a9cfa844689a40a38f9c9dde823878dadbebac8dfeb6c0573014ab9b67ca56390a49810c141041aa1ce1a4a552f838935a2c6a0c7e50caf726971b4e3a5e4a890a708d5ff8cc5782730d6c40a80692655341d51186010bd7ac039c5590977b6209427e7f3ac341d7c17699720b480343199351638cf1aaa801e3ac2d7f47644169b0fb5df7337d38415bca88827cd00547dd225097fc54ce5876f4cda9be7baa3f1f79f0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x54, 0x12, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x266}, @TCA_CT_ZONE={0x6, 0x4, 0x54}, @TCA_CT_PARMS={0x18, 0x1, {0xdb9, 0x5, 0x3, 0x9, 0x7f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5}}}}]}]}}]}, 0x588}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 18m10.811974895s ago: executing program 1 (id=3632): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="68000000ff8401000000000000000000fe8000000000000000000000000000aaff0100000000000000000000000000010003000000000000e500000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000c00080008000800000000000c0015000000000000000000"], 0x68}}, 0x0) 18m9.821825812s ago: executing program 32 (id=3632): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="68000000ff8401000000000000000000fe8000000000000000000000000000aaff0100000000000000000000000000010003000000000000e500000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000c00080008000800000000000c0015000000000000000000"], 0x68}}, 0x0) 8.579998428s ago: executing program 0 (id=8185): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r0, 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r1, 0x400, 0x1) (async) fcntl$getflags(r1, 0x401) (async) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) 8.33585981s ago: executing program 0 (id=8188): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r3, &(0x7f0000001580)=ANY=[], 0x13) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000240)=""/200, 0xc8}], 0x1, 0x33, 0x0) preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000380)=""/138, 0x8a}], 0x1, 0x1, 0xffb) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000080)={0x3, 0x8ba, 0x4, {0x4, @pix_mp={0x7, 0x8000007, 0x56595559, 0x3, 0x2, [{0x0, 0x9}, {0x3, 0x1}, {0x6, 0x7f9}, {0x4, 0x3ff}, {0x9, 0x400}, {0x7fffffff, 0x3}, {0x6}, {0x40, 0x2}], 0x5, 0x9, 0x7}}, 0x9592}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r5, 0x4068aea3, &(0x7f0000000440)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff6000/0x4000)=nil, 0x4000, &(0x7f0000000080)='\x00') clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) utimensat(r5, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={{r6, r7/1000+10000}, {0x77359400}}, 0x100) read$FUSE(0xffffffffffffffff, &(0x7f0000003980)={0x2020}, 0x2020) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r8, 0xff07, 0x0) 7.060859644s ago: executing program 3 (id=8195): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xfffff2a8}], 0x1, 0x40002102, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000001}, 0xc) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000020000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x110}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) sendmmsg$unix(r2, 0x0, 0x0, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5.703958281s ago: executing program 3 (id=8199): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x40489}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b41"], 0x0) 5.062975915s ago: executing program 5 (id=8201): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x501001, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3, 0x7}}, './file0\x00'}) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', r1, 0x4000, r0}, 0x18) 4.757067573s ago: executing program 5 (id=8203): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x1800, 0x34) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (fail_nth: 1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/ieee80211', 0x0, 0x0) symlinkat(0x0, r2, &(0x7f0000000280)='./file0\x00') 4.270449187s ago: executing program 5 (id=8204): sched_yield() r0 = syz_usb_connect(0x3, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="600600000000"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_io_uring_setup(0x88d, &(0x7f00000005c0)={0x0, 0x1423, 0x0, 0x2, 0xbfdffffc}, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x696}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xfffffffc}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc804) pipe(0x0) unshare(0x4010000) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x802, 0x6b929545a606890f) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0xc1205531, &(0x7f0000002680)=""/4104) close(0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$packet_int(r8, 0x107, 0x7, &(0x7f00000000c0), 0x4) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 4.169101626s ago: executing program 0 (id=8205): socket$kcm(0x2b, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"}) r1 = syz_open_pts(r0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup3(r1, r0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, 0x0, 0x44000) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb56c}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0xe25, 0x0, 0x300000000000000}, 0x0, 0x0) 3.807899113s ago: executing program 3 (id=8207): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001041030400"/20, @ANYRES32=0x0, @ANYBLOB="0ffe0000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800ca10100400000000600000089e6784300040000000000000c00010006000000090000000600050088a8000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1], 0x8c}, 0x1, 0xba01}, 0x0) 3.528345594s ago: executing program 3 (id=8209): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0, 0x900}}], 0x1, 0x4004000) 3.391719941s ago: executing program 4 (id=8210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000308110200"/20], 0x14}}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, 0xe, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4088054}, 0xc000) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'veth0_vlan\x00', @random="0137014010ff"}) userfaultfd(0x80000) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r3, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xdddd1000, 0x0, 0x0, 0x8, 0x0, 0xfd, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x8080000, 0x5000, 0xc, 0x0, 0x4, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0xf000, 0xd000, 0x9, 0x0, 0xff, 0x0, 0xff, 0xfd, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x3, 0x0, 0xff, 0x4, 0x80, 0xe, 0x0, 0x7}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x0, 0xfd, 0x80}, {0xdddd1000, 0x0, 0xb, 0xa, 0x0, 0x40, 0x3, 0x0, 0x80}, {0x4000, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0x6}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x4000, 0x70, 0x7, 0xf801, 0x0, [0xd2, 0xffffffffffffffff, 0x1, 0x200000]}) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.330558926s ago: executing program 3 (id=8211): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x25dfdbfb, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x84, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@private2, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@mcast2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.239565347s ago: executing program 0 (id=8212): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x8f, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x2800, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x2c, {0x8, 0xffffffff}, 0xd0, 0x9}}) 3.155665246s ago: executing program 3 (id=8213): r0 = syz_usb_connect(0x0, 0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000020dafb2099041010f50501020f0109022c00010000000009040000016f2bae000824030100000000092402020000000000090585"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000dd0800010073797a300000000008000240000000032c0000fcffffff030100e6ff0000000002000000090001"], 0x7c}}, 0x40010) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32, @ANYBLOB="020000000000800080001200080001007674693674000200600004"], 0xa0}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000829000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0, 0x26, 0x0, 0x9, 0x7fff, 0x0, @void, @value}, 0x28) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) wait4(r7, &(0x7f00000000c0), 0x2, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f00009da000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000077d000/0x2000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') 3.111483046s ago: executing program 0 (id=8214): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000040)=ANY=[@ANYBLOB="01fb2416560000000000f8f3ac9b5d609312dd2dde0000080045000024000000000073907800000300e00000016c610000fe9a"], 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 2.918475622s ago: executing program 0 (id=8215): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r3, &(0x7f0000001580)=ANY=[], 0x13) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000240)=""/200, 0xc8}], 0x1, 0x33, 0x0) preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000380)=""/138, 0x8a}], 0x1, 0x1, 0xffb) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000080)={0x3, 0x8ba, 0x4, {0x4, @pix_mp={0x7, 0x8000007, 0x56595559, 0x3, 0x2, [{0x0, 0x9}, {0x3, 0x1}, {0x6, 0x7f9}, {0x4, 0x3ff}, {0x9, 0x400}, {0x7fffffff, 0x3}, {0x6}, {0x40, 0x2}], 0x5, 0x9, 0x7}}, 0x9592}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r5, 0x4068aea3, &(0x7f0000000440)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff6000/0x4000)=nil, 0x4000, &(0x7f0000000080)='\x00') clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) utimensat(r5, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={{r6, r7/1000+10000}, {0x77359400}}, 0x100) read$FUSE(0xffffffffffffffff, &(0x7f0000003980)={0x2020}, 0x2020) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r8, 0xff07, 0x0) 2.803971656s ago: executing program 4 (id=8216): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x1800, 0x34) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/ieee80211', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0\x00', r2, 0x0) 2.606915154s ago: executing program 2 (id=8217): mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x17) (async) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000009, 0x2, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x2, 0x1) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) mq_timedsend(r0, &(0x7f0000000040)="01caff4531f3ebc22b0827a326b86ae5134ee0791117631cfcdd035d20e32d44913b936be773dc1abeefd16cbf6dba172807da35be74ab9a30a32df2224c0064a6aad7491d5b92d2812cc3b16c7c9e732b3887940262618b7338f96e7849d78476d64ddd943e773586e4926c0c4f63d5612e284cae72cb4affe5da2a11143fbed9ca2d8952aba11ec8fe8c345ebb1e9e3e846cfc3215d51cb3bbcbb0243266f49001c6da36a2b085109f6820d9640e0d5edc360a9150fca3af7abaf3ca45b5ce08c2e2b9b525718f48dc739e7fdf61aea3088d83eb313a4208ea5fa04ae5ef", 0xdf, 0x9bc, &(0x7f0000000140)={0x77359400}) (async) recvfrom$inet(r0, &(0x7f0000000180)=""/27, 0x1b, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x5d78, &(0x7f00000001c0)={0x0, 0x2839, 0x8002, 0x0, 0xc6, 0x0, r0}, &(0x7f0000000240), &(0x7f0000000280)) (async) write$char_usb(r0, &(0x7f00000002c0)="87ce7cd7b6e2e3152f9e567ff4d45746510bbe07f073b480ff703b53fcd5dbaf310ac480a5a8717894ca0f38e76826671e6f1c29a4916cc6558eb3f52ae1a2d056c3827ce39c79f814e259868de5bf32a97d9228cb6b367eb9ad869134e8ddc2cb043041b54994b7d61c0f6e4c3ec6b8ecff2441400a5f50c2077f063436142f95b20884412b51de33de1e1330de5aea67a61566dfc96264a538aeafa48392f1241e0abc8aab010c2f1198aa30c422ce8f65ba97c1ac01b67d21443c4f42a619f71c5d0b2edd06655fac2c2b4051b94f42e91d06e9915a6b16ace2180b8629c9efd12bfbe3dd1e7d1cfbb047dedc1147b495d9cf2972", 0xf6) timer_create(0x2, &(0x7f0000000480)={0x0, 0x1f, 0x0, @thr={&(0x7f00000003c0)="c32485f66cfa83257f4b8ddc00234bcc3f18ffadcd28d64d2f68a7b3ce8e0db8cf99b5dd7a304ff673916b9d80bc6e36f0524d3ab5ffe82d4108ae68a458ebd3d85826340cea2f69efc0b737e8", &(0x7f0000000440)="f347fde73a84b3509d77066722e6a0a9de354d836da24d4d"}}, &(0x7f00000004c0)) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x21, 0x7, 0xcf, 0x8, 0x404, r1, 0x7fffffff, '\x00', 0x0, r0, 0x4, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0}, &(0x7f0000000680)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x2, r3, 0x0, &(0x7f00000006c0)) r5 = open_tree(r2, &(0x7f0000000700)='./file0\x00', 0x1000) openat$cgroup_procs(r5, &(0x7f0000000740)='tasks\x00', 0x2, 0x0) (async) r6 = fsopen(&(0x7f0000000780)='proc\x00', 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000ac0)={&(0x7f00000007c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x274, 0x6, 0xb, 0x101, 0x70bd2d, 0x25dfdbfc, {0x1, 0x0, 0x4}, [@typed={0x8, 0xa0, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x140}, @generic="f3dc114f895f73393db075b91c4bd71021c65d39aab8be2f0f29cd0fd01097a8a2a60c70ec935ea5fce3a0e5192992362c064e61773da3f70de68bbdf04f079f84e5cbe9234337befebe96f423dbfde5e93ac6be41dfd479b94ada4294804430f0b27a50968e158d21619c78f23ac9f5490e1a1a0ad9d972021a32dd1ed4690a8afce9a08c2e4cba84f3330e6087ab5bec8387c1d08d69e550acdccf78b0faacdb88db904b4709bd3ab0f46b6a1d7a5b561d9951d2b8912cc19af3f6ca35fa1d912f2903e218f88d4d150ea70f38d350fcf1bba787ae4131d9", @generic="220ba45cedf85b77c945", @generic="05c594e415093634965faedd27968461ac416d4f29c307304a07d04a3bde4167780c444d0e8afaff28e9fc7ef24e33f074995b09343f1f0e0900e2ecfb563535764cb3b079eeccf62514afbd3930a6c112c73ab295147ce81ef7c2f59fe1458de16f4733e8a0125b0fecae", @typed={0x8, 0x29, 0x0, 0x0, @u32=0x4}, @typed={0x9, 0x120, 0x0, 0x0, @str='%{-,\x00'}, @nested={0xed, 0xf5, 0x0, 0x1, [@nested={0x4, 0x11c}, @nested={0x4, 0x1}, @generic="7fe44f1b5a92ad6f250ebb010e14ad1b2d685e2aa10984059a44bae60b6ddb6997b9f6e07d748a109219dd0e145f4d21bf968661b0496a12196b0795d3a54228dba481f7fc456df947bd6249ab17a79ca962eee3dcbe9c30635adf1bf08f47169736413fdff97875ce29288c8c93413d7f09981097d2f65479858549ac2b72bd643f2109d74bd7c04d218aad5dfbf96d90bfa82c3a4da9ed4cf9a8b174b345d2b1303e6772f3ba0c687824ceb98005602e58f2ad79", @typed={0x8, 0x47, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x86, 0x0, 0x0, @u32=0x800}, @typed={0x8, 0x126, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x9, 0x0, 0x0, @u32=0xff}, @typed={0x8, 0x30, 0x0, 0x0, @uid=r4}, @typed={0x4, 0x60}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x40}, 0x8015) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000c00)={&(0x7f0000000b00), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x48880}, 0x1) (async) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000002100)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000020c0)={&(0x7f0000000c80)={0x1438, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x892f}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x64}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6a04}, @NL80211_ATTR_FRAME={0x13fe, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0xd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7ffd}, @device_a, @initial, @device_a, {0x0, 0x5}, "", @value={0x1, 0x1, 0x3}, @value=@ver_80211n={0x0, 0x40, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0x9a, "2f5e551c477d8fc5808d15164ddab5a0c7f2ba9ab0726fa11781076d8fff951ad69e1ecf583a29a3aa7571e42155110cf8fb350317c74a4ad67f573db1120a3f08196ee74b2641a77e2ac10412b1e6f471e4cc6552475db80ed2a58d9ffa28d702ba68c029013bc4ce65cdf9a53eeb93ba9cc36c1cc930d12712f4b871077e27ffb9ef3667c810f33660944209b6e6cb75c1dc8585e8e52b62b3"}, {@device_a, @device_b, 0xb9, "7f785aac472936a7ae3625960746b1a028062d068d45046ac25ccf0b0ce91a59c2416a9eeb102a8c1aea34844a468f66725d08f0b2212afdd5ee537ad1ede7aeef3a2b1e7206aa0e894ae0c45958a41d1c538c2fa7e1e145ef0375b0b7cfe41b5ff46a27f284a4801fb00c3602c6a17b1070f2ba7bea92180f50baae61e2d56ccea939b217f7fd9e18d63eb5594f9549aa55cbd354603058e2ed9a87a847a9cfc5fcc751b1c57971fc56a1849e961fe03ad4c17f1ec29a6c25"}, {@device_b, @device_b, 0xa, "a271f5169003f4eca12b"}, {@device_b, @device_a, 0xe3, "bcc574bf5ef1ab0541cb8b52966b7157b90fad3c880e5b3d29714d375e07a09192ccb2492b8a4ee8ba925813cf2531ddef9a85dbdb9d1d3adf19b6517e4e8b95a2a8edc16f12896c679175b3cb37ac902b8238c9cd35f610191df6477da028d744d21b9280c48cc34290a634247fdae9e6ef5915fb7cdc43ae788b962097df740ea720306321cc0288faba5d4841fc5a55f078308a7d033ac65abe844f80a348ea4e46daffbef8d3cf1892d0b0d9b947c2a99260b384cba050f3983688cdf02d096fe11eb9987e9fe1b2e94f8df51c687d5eb69c594811fb883de40b2a1281920fd865"}, {@broadcast, @device_a, 0x1000, "9609b576b062b8c4a97c28e81b7a6a33179b66402a32a565d666587d2696dd83be8e9c139a33877bea2954735578c84a231124c67b3a15e6c99d31024e950756732d891481a8de20e9d07dc4546b926756a2de7f5576a35c9ef3ad37c2cf0e0106456cfdae365d5d3a3048e8ea461444d427ba77ef8f05115d252777b561f092d3853abf784ec73accfd432210a7c346b379f86f4518b63a7d29f910fcc7f19d2033fd737c4bfa9254f438d9b0dc7b7949b131620b7e6793629ba1195991ab09c80c5f2946ab50ae55d3689f9d402897bee0431feb9b0e3d910939f8d3108cbb52711e950b77216bfff757900df3c49c12e75df8d9d7d6e0c2d502d3b9acd540a36a1e2afa2d873249dfbd808df5003ae91bad3696606fefc76f1da4f98b6d24ae022e7e4f7aec54c6b83bc44ccfd0909bb58c3b2b70723dd43abf9e1eaa449b9e84417ca969d49d8e114700c84b5c580839a7fa11d74a62bf7ff05eff292c1186193d4aa52d37f3664165a34d53d303eea870fe6ea81a1a23aeefa6da964c560f607951e261e7be210a62b085109e190420bd98c718df5a077e476fad5e8f7ed80c8dc79477f5a6d50305d4ae1901d1b7d6847cc208e09d3b42b6a8ec3948e20abe65fc99b70f93159a656e4f50a2c527be53dcc96f8394807065e96429046b286414689ec584f52deb1e3474b0533a33de083e2deaec2f131f28bab1daf54c97cc44a539d5322cd03a068d51bce79b9b61ee6dab9e7672808fbabc3f86c9d0537ceb5d0f4fa7319859d0d128c42cbd184738b64c3fa8f6c4a8d6f45dcb6fb1428505193148d9f09b8bd619e62fa6ccd883906c8e2afbe475f43f4796db42f362bdb0575dca9cf3dee7680bd8695c43adec59677c4b920d5abfbf8b392bd691928bbb0a31f62405447721451fa2e170673326f58bf848b05c520db1468c6712478d353e41a538c82b85439bda3fc6e621b68be23e38d39499823ac7a4bc1b071623d432b21f661acd832ba0ee007d1c0ac536548b9ec96cb83d121bd03fe2754b617ecc2a91a94f92c49376902870b7e420d45a805500021f26fb1afc664d746d3152858a277d41234cf9d8962d543efec82f5024a06894c872545f1ffcc6afa7fa8b3518fb4ccb45e92f57fc681e87b0969bd7f81e8d393ad151a4e1b5807f2e36dc432e6daba7ed1b38e4e722688198a07ddef108289bc69e5e90c6bc704936f6ad8b99165d44c33274cd3d96152b0e0ff346b8ccb96363fc8c6197458d0b45dc6ba9e2699f59c695840b5b09bb71461ec7e77ba433f83f041540f0633e7ff4a9b0cf5e6095d6c1a353d5fca2e56f4bee8846168b08f7481be342c406514c005e01310f752c3ad6fe25881b78bf09af862142dbcd3a89c9bd2a05373a578d7c841618b5735dea761bee972c6e59e79608fa45e40aecb1ced93340d420a749c371e868d176fbd50524fba934fd38054af2ad148d6bc4b883d9f4e511df105efd63c4c80733337e2f2de1a3afc1c2ed6efbd654a49c90cd3cabd2948100d347ecc5ff3a9c7d14ba245906c65435efb35d37750a2e1a9dbec715d6e9bedd6fff4edd45b7b42334f9d5cc2bb04cad580bab246459290f88ded47deeb454066668a7fa6d03955ffe51bc33cdb426c303a6527d92b7e98a5f64019d8ae2d6cabbfef64b38f82f5494cf83161dfc6f962f160384153ffa59450bcb00ebeab03e96472dfc45e511b27ee7dfb127bcab214aff395ac67e7ca28386f9958a5fb3f10952946b915338ffd27e00ea0249a718aabfc1a37aa211fd23b93d84cc34249381a074cb473beb1dd3173711740e809b07c8004f5426a1a40b955840eca0664f054e281e256034f386913cae7ae2e68ffc1a2433b85066d1a0ecbc4149b1e292360d4fecc800e64eec2291cf2162bcf1b7b768c01f7f8f9d7f33e12074032da2a95de4afbcff31ab5bc00ac1ee6d16131b6dc77d2d6a571cb7fc6b292c4bad135d0006365a7d5475dbcec704d5eb1c738e17ff43d16622239938230ed8af6aa64331dd2fc1c02594324d7f398172043e4c539e742a290058ef5b6ee2a6e3b8dfe0660db10faf55579e083e40ce2981c66aa4572142fdb2ca16e1e46b13be02392c90dba403a8e71cfb4a1b7ea1e5686f6350705c530cf86cf81182162bf2ace5979f687172d803a7d4e45d9159c9d70a03cd8efd125dc6f4151b321b533914d1e807270180649ccddee1947dc907192658b5d54a60012d6f7c4f4e66b4b11d3d1c799f3b4c6ec3c4bc1707aad975203c79cc164932ac0ad2ffbafbc510f683633a7b295029f0f68a728558ddcaa80065a7f45092c4496af564df9afea6ff4c277218d18b45359e8b9be62a4ccddc0c6f00cbfbdc8afe19e44317799a9856ecefba7bdcfe7d6ee337debe922ad52ce55a5aa0685239f0dbc253fa635623404f733e9a31e42bde4d3551c5279a92f39111eb8b8b710a38bfde3573862df4222fe82f129fc425d85db01cd315b220398205e07f0e6e5ced334780fce7a66078b0246e5a9ca95482608d3c7c289f129a89dcfc9b237eb06d3248b29fe5487b09086d5131c9d4e3231044dbf5cd59d8ff5a5fd02162ed80fc062053d8771edc7df92278ed20679d990000ed7d3a50af5cc9c8fddd1c19de5e6ce67df99bd4defd09a1dcee985d841ecadde937cc70d390918a2c3aca7d76cb94011fcac6447e31f706b4cf1375f2f93df187a08e14e18d8f4842964c89dcac073e77572773feaf6f437d4fb8c4dd714c0607d4e79bfd5447a3a7223cfb7e0d0b636bbfde062d03cf8fb73f5025526b9c36825dbb51c339536ae105185e4f83fb0432bcee54e54006ee11f2c1e5ee5fae9aadfd775b181095beff2e55702b48fbf7e93fe1ed628ae0c537bdafcf2e828166940036681864b7fc770dcec6d355db4fe8aa5fce83cb7a69430a4c332d06c5d151f1e0b472fccf7312a9530cd195ed2626c061e018da3987efacc666966818026a6f57190345ed5c73e94973739505f9126f9365435c426167654f8ff2e10541cbdb8bf49eb5080d6e6becaaba4a12e0f91b5220a9e8627992543c4ae2139973e3b4488f4c975750bb8a1a74762068ba40d50642c5ffcbabc2e1d199f89f70c3567f0101e91eece8109399eb71e8434cc00299f79180b8821fd17266ec74987ee9c39da9ae2e69768308d1156ebd6000151c5c62511061c583b2915d94ee0e96eb5c09bc30f2af06b90dcf4ce30844f2b126970fb104ff5039dc2dd3df0f7fd9b57b6ab71a47e43a66a010e9c00944d460f75659a967d8f597a9f2faa5208b2c141044f2c114dc66f4ce7c576cece5fb44d71ed4d6a1e4fe85b16e79e42f450af93b72811a9ae01906fd1a2353caaf99ff5215b791b3695bb70f929ef6d32242763a0fa6ffcc383efc8be400fc242ab7e1b12406fea6225a3f383fcfceca8feed5c6752b200347329bf442bc47e833ec4c5bd2250d45bad03edcf1b70d772056377a26b69e8ec8c888defbaff76486eebdf154e0fef3c0c8d7a8f11d0a3bc62c848d726d88230ae5bde94fe9318076b749b0081cdaa6341e46967dc40facaee8a1a3313eefe059a35bcf3c6d0a9b2d86ee13d0086b9f352c5672d1acbd300e4bc699c29464f9a8a77275d7abe0ea73ea99948297bae9d69c7ab7c563545c40c7321c481a93fcd2bafaaf07417da024bde903642932c702ee58b6b46bb61b8692f8bb3337e46c60e42ddb2199c2e0262f49db28d40cfa5f17d7b6cd49a5d530449935ba2e1c48b0e16886d665f4d1230aecd50892727a357c4948be1106c2f67ca8c1659603ce19350393441064bbf1b5ae36a78d05598b37df615bd92560eb9d5ca374d66bfaa22dba874f654c137132c5cbdf6a12e0ef2f2ed86eed91fca551ca48e5f29507002e33c452ab671c1bc047d7ad1c55ea9c9c39f93431fccaf45a6c923f54b432f7efa8600af4e47866efbea8e6f63ebb8b1b842d68340c7b5e8306f014ba26588845c0ef5d4295007dcf4d609153151d7cc878e5dbc32079695cae373d31c524605aa54bcd3421b55c55e48f7e992af4c2556d8b0d9c2f8c37101af3bf941be1cebcfb27039773fa0d38b990cbe53ce4bc99c05aaf01a841badbaab392421cf135c6b8e79f8d52eaa9903bef8f6495f53d478a5b807b867ffe381a30c7caa64fe02a4ac59f2bfeecbd3a54c7953c38e7cd9fe6710c2940aac6eaf021b8c127e6739235f985aea3d4f9ebef725b058ad555593d4d2646396f55e76dd572df374b1fecbb12d86a12bcb48703ee4ee499b861406673932076f60bf186bd02cd1f9c1d38917cb67c1a2fb741b53eb74c996f0335cb9a18186c05ce9e69e55e8485068314f980dd6099926a1b745ad013ade62060eeb10d677d5b2d015cc0cd19761f0239b1c7ce0c449631b20cb65417d7f942a6f02210dce0cf9dfef915cd6e7a84971d25a9f917375d132523eafb2b34510e252eccd4c0c88245d3d27c242fdee58b2f0f97068fec1c2c546f2d4b4d2cf28eb07d7d4bf4ea93b1dcad8409226068af38f6929cfe1baa3de73c7f5afa91a93d39e0fe305646857fb5f687fe79a898ccfa7a080ace0966da0fc519f6c5bc87fe4a4802422a83d3189221aaa0784e3ab7bedf13b21b185c7a41bd7567e5596cc769357a23df2d08385d48698452b2b2ee64d3ab83f8dc67acba272e4a0827abd3fc99ec55dbdc05cd13e42a1423473c9cbdbd1bff652bdd389469484f71657536b1ec686d6e5c3ee434635a4d661aae155424415d7484991c74d80adc220313bc3c33e6f8cad739f09d444c0b084acfe8ea07fb17f55546be5ba6df0c0c29059f1c4b8dde069396e0191537a52283bd97cf148c0e69c14551933463cf394c5aad0414ea5b26085578db8cac5e10718c4c33fc4ab16ca946e9966b2b1e341622bd1dc4032fcc8b53ba57dafc1475dc60653861e396a35053bd3945c16c3b5e65328c552909b310c44185c3585c12b7f24eb632e89095152d645482b00e366d8b814219608e389b16959572853f0e343a97122ed5a521cbea438c24dea5bc3a7f51d4d6e0d4c4a3a2519cdcdfef72ee9a3d09f51f9bf8b0d6f1bd86402f9ef89c95da0ae46138d481c5a569db2886bc8561f1c4c4d3802a10c6e822b23fe61f7bee7cc7b762d36b908aa332dbd8fcbf204b4db8e96212fa8e7aa6dbfc99a5774d04b4851f1384fa23e4284105649112ad1a999c28ed7799feb25574e64a5209a41d858022f48cc5ee47ae53017c46594f945fcbe3f7a0bd39088591e0c4360ab3323d560c27923c4745e2ac399a98b8ae40e2c6bd1b672a9e78de41d52848c7eb85940535a45f26952790b56af14b20e99441245cb9f5cf3d18b1b20fa5880545a2cb337ddc7a28c60911d98cd26f9e1dc377d5b65eaae3d8fdd114cc7fd1b8727478115e2beba74ba0391423574e55067accdde0afdd2a7db217b5d2a5acf9ece5850b384a1eccc968126827b87ed9af5b74edbdff7a954fc3821bd1c181f384ee966be7a40089636d0e51a705f1990de0c2274bb03e3b174ab1d17ce300a7931ce53a0dc53f18c8a25fd0f01fe0e1140ac1cf84843f6133b84e719076ca07485f070109974ab67d3216b0c14c65011ef942c6de977925e26320b930247f5a158bc746c4aecfd9aed74dd29de90e05f39e3a386e017cd9fba2ebc2b845c49e58ca8c70a4c3affd0ab88e15e7f8ab065eba9a21139f66a578295cf385a43da6ceeda92b7f82c24b4819a45e101f171451799e16e5e985c1125d743df8c0e9925c3a877b04"}, {@device_a, @device_a, 0x9e, "2fd8cd28425b321dabd55ca7027b3f6484e6fb815fb6b38792d0f5e694c0a16c02766f12e55c9e47a3176e9cce5f4c311eebc2775e260a5af275d57cf69a902ae435075be0f5bc8a961d6c10096feaccf092ecf6633f71eae1b6a2fb0f53e18db42791c0eed19ae49c1204d50676150985299f008f187d76ee15a631bc58c127d8212a99173350683a23cbd48ac25a7c6555c9efa86ce0f09bc1fa28b202"}, {@device_a, @device_a, 0x95, "fb922de49fa56344b0a8d7a85d5454b2496b42615c09a723594cf2fca0bd23e4f1274a5871b8f166b55e1c5cadb0602d756039015024e33bbc169f6555ec277d5e70cbfe8d3a2db98c232040fc53cdaa8523462aca478fd0ab3e7725cc06f509aed8907997d33e0145976bad89767c71aef5710946b7b2b00b0006281166f53951eccc7f9f48c8b62cafdc64fdba1eb485159aeaa2"}]}}]}, 0x1438}, 0x1, 0x0, 0x0, 0x4004090}, 0x8080) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000002140), 0x101000) getsockopt$inet_sctp6_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000002180), &(0x7f00000021c0)=0x4) (async) ioctl$BLKSSZGET(r0, 0x1268, &(0x7f0000002200)) socket$nl_xfrm(0x10, 0x3, 0x6) (async) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000002240)={{{@in6=@mcast1, @in=@dev}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000002340)=0xe8) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000023c0), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r8, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x20, r9, 0xc14, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x3c}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000024c0)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) (async) connect$rxrpc(0xffffffffffffffff, &(0x7f0000002500)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010102}}, 0x24) 2.493077621s ago: executing program 4 (id=8218): writev(0xffffffffffffffff, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x3f00, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.348053281s ago: executing program 2 (id=8219): r0 = dup(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xa}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001fc0)={r0, 0x58, &(0x7f0000001f40)}, 0x10) sendmmsg$inet(r1, &(0x7f0000006200)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000001740)=[{&(0x7f00000002c0)="5907d35e07425ae3cb8bba1811762d146ad8c397e0700239be", 0x19}, {0x0}], 0x2, 0x0, 0x0, 0x34000}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000005d00)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f0000006100)}}], 0x3, 0x4c054) 2.019940715s ago: executing program 4 (id=8220): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x8, 0x4, 0x21, 0xc1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="001200000000710008000a00", @ANYRES32=r6, @ANYBLOB="1400350064756d6d793000"/20], 0x3c}, 0x1, 0x300000000000000}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)={0x42c, 0x3f3, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x12, [0x7fffffff, 0x40, 0x10, 0x3, 0x7, 0x4dda4ecd, 0x80000000, 0x7, 0x2, 0x2, 0x998, 0x1, 0x3ff, 0x4, 0x10, 0xff, 0x7fffffff, 0x5, 0x2, 0xe, 0xfffff001, 0x3, 0x1000, 0x8000000, 0xc262, 0x1000, 0x0, 0x8, 0x4, 0x10, 0x5, 0x4, 0x5e63, 0x5, 0x4, 0x7, 0xd, 0x6, 0xc, 0x3, 0x2, 0x1, 0x3, 0x3, 0xa, 0x54e, 0x3, 0x7fffffff, 0x8, 0x101, 0x4, 0x6, 0x6, 0x55475314, 0x3ff, 0x4, 0x7a, 0x0, 0xa7, 0x3, 0x3, 0x9, 0x1, 0x9], [0x5, 0x88a, 0x0, 0x7, 0xff, 0xffffffff, 0x5, 0x7, 0x8, 0x6, 0x1, 0x1, 0x1, 0x0, 0x3, 0x80, 0x10001, 0x4, 0xfffffffc, 0x8, 0x2, 0x3, 0x3e, 0x9b23, 0x1000, 0x200, 0x6, 0xfffffffd, 0xfffff800, 0x4, 0x2, 0x4, 0x12, 0x0, 0x2, 0x6, 0x6, 0x4, 0x15, 0x8000, 0xe4, 0xf, 0x1, 0xb, 0x7fff, 0x8, 0x100000, 0x1, 0x7, 0x5, 0x7, 0x5, 0xffff, 0x6, 0x80000000, 0x9, 0x1, 0x0, 0x80000000, 0x0, 0x9, 0x6, 0x2, 0xfffffffa], [0x8, 0xf1f6, 0x7, 0x4, 0x2, 0x8, 0x3, 0x80, 0x5, 0x9, 0x1ff, 0x10, 0x401, 0xfff80000, 0x8852, 0x5, 0xfffffffe, 0x81, 0x0, 0x7, 0x98, 0x7, 0x4e, 0xfffffff9, 0x30000000, 0x3, 0x9, 0x7fff, 0x6, 0x2, 0x3ff, 0xc4, 0xe, 0x7ebd, 0x8, 0x3, 0x4, 0x7f, 0xf38, 0x401, 0x9, 0x1ff, 0x4, 0x401, 0x80, 0xa7, 0x4, 0x7, 0x0, 0xf32, 0x8001, 0x7, 0x3, 0x5, 0x2, 0xb, 0x8000, 0x4, 0xfffffffc, 0xe, 0x7, 0x9, 0x4, 0x8], [0x7f, 0x0, 0x1, 0x2, 0xaa04, 0x7fff, 0xffffffff, 0x7, 0x8, 0x1, 0x2, 0x1, 0xfba3, 0x8, 0x5, 0x8, 0x8, 0x9, 0x38, 0x3, 0x9d7, 0x58, 0x1, 0x9, 0x188, 0x9, 0xfffff256, 0x3, 0xa2a, 0xffff637c, 0x5, 0x2, 0x1, 0x6c, 0x2, 0x401, 0x2, 0x1, 0x7, 0x2, 0x0, 0x4, 0x3, 0x9, 0x70d6, 0x5, 0x3157bdd8, 0x8, 0x7, 0x1000, 0x5, 0x5, 0x8, 0x8, 0x80000000, 0x8, 0x7, 0xa, 0x80000000, 0x6ba7, 0x9, 0x2, 0xd7, 0x4], 0xb, ['\x00', '&\\&\'[-)-@\x00']}, ["", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x5d810}, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, &(0x7f0000000140)={0x140003, 0x0, [0x5, 0x4e6a, 0x7, 0xe41, 0x6953, 0x401, 0x3, 0x2]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000000c0)="2ef2dd050080000048b844410000000000000f23d00f21f835000000010f23f836362e6726af440f20c0350e000000440f22c0b805000000b9009800000f01d90f01c965470f01c4410f79d226450f01cb660f013b", 0x55}], 0x1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0xc020662a, &(0x7f00000001c0)={0x20004, 0x1, 0x4, 0xd, 0x7, 0x0, [{0x80000000, 0x101, 0x0, '\x00', 0x4ccf045003c9651b}, {0x2, 0x3, 0xfb2f, '\x00', 0x3000}, {0x6, 0x8, 0x7, '\x00', 0x2}, {0x1, 0x7fff, 0x1, '\x00', 0x1402}, {0x3, 0x0, 0x944, '\x00', 0x8}, {0x4, 0x9, 0xe732, '\x00', 0x2000}, {0xffffffffffffffff, 0x28, 0x8, '\x00', 0x3706}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) 1.941518983s ago: executing program 2 (id=8221): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = syz_open_dev$sndctrl(&(0x7f00000025c0), 0x2, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000002640)={{0x9, 0x6, 0x1ff, 0x7, '\x00', 0x3}, 0x6, 0x200, 0x7, 0x0, 0x0, 0x1, 'syz0\x00', 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000002fc0)='bbr\x00', 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) 1.703445293s ago: executing program 2 (id=8222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, &(0x7f00000000c0)) fcntl$dupfd(r0, 0xadaaaadad7b3bf7e, r1) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000001011d0400000000000000000a000000240001801400018008"], 0x38}}, 0x0) (async) accept$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) (async, rerun: 64) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000011008188046b5b79deacbc0413a1f8480b0000005e141140ca3dd24d0602000000000e002700100000000280000012", 0x33}], 0x1}, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe9c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe70, 0x2, [@TCA_FW_ACT={0xe6c, 0x4, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x1, 0x7, 0xf, 0x8}, 0x3, 0x40}, [{0x1, 0x1, 0xacc3, 0x9, 0x2, 0x2aaaa9c1}, {0x8, 0x2, 0x5, 0x8, 0x8000, 0x5}, {0x484c, 0x5, 0xe72, 0x10000, 0x140000, 0xec0}, {0x2, 0x5, 0x401, 0xa, 0x7, 0x3}, {0x0, 0x1, 0x3, 0x7, 0x7, 0xc}, {0x4, 0x6adc, 0x5a5, 0xe, 0xe, 0x9}, {0x7, 0x3, 0x2, 0x5, 0x4, 0x64}, {0x10000, 0xffffff7f, 0xfffffffa, 0x3, 0x8}, {0x7, 0x1, 0x9, 0x80, 0xb44, 0xfffffff9}, {0x6, 0xfffffff9, 0x7fffffff, 0x32a8, 0x2, 0x1}, {0x1000, 0x8000, 0x2df6, 0x8, 0x7, 0x3}, {0x7fffffff, 0x1, 0x800, 0x8, 0x2, 0x2}, {0xd28, 0xb1, 0x5, 0xe7, 0x1, 0x6}, {0x34, 0x9, 0x6, 0xa13, 0x0, 0x1}, {0xc8c863be, 0x7fff, 0x7, 0x8, 0x19c372c2, 0x3bfc7233}, {0x2, 0x0, 0x10000, 0x5, 0x1}, {0x6, 0x9, 0x1, 0x4, 0x921, 0x1000}, {0x6, 0x5ac5, 0x1c7, 0x304, 0x4, 0x4002d04}, {0x4, 0x9, 0xffff, 0x4, 0x1, 0x233}, {0x401, 0xffffffa6, 0x2, 0x7fffffff, 0xd9b, 0xfffffff9}, {0x8, 0x4db, 0x0, 0xe872, 0x3, 0xff}, {0x1, 0x9, 0xaddf, 0x200, 0x81a}, {0xd8, 0x10, 0x2, 0x7fffffff, 0x6, 0x4}, {0x3, 0x2, 0x3, 0x1, 0x8}, {0x0, 0x8, 0x80000001, 0x9, 0x0, 0x2}, {0x5, 0x8, 0x8, 0x3ffc, 0x0, 0xe6c}, {0x6, 0x400, 0xffffff9e, 0x2, 0x40, 0x5}, {0x4, 0x9, 0xd91, 0x1, 0x6, 0x1}, {0xc, 0xff, 0x3, 0x1, 0xb, 0xb}, {0x0, 0x0, 0x0, 0x81, 0x6100, 0x9}, {0x7a2, 0x8, 0x2338, 0x2, 0x5, 0xfffffff9}, {0x7, 0xfffffbff, 0x6, 0x7, 0x1, 0x9}, {0x7f, 0x1, 0x7, 0x9, 0x7, 0x5}, {0x1000, 0x1, 0xfffffff8, 0x9, 0x8, 0x200}, {0x3, 0x2, 0x3, 0x3, 0xb, 0x2}, {0x43b3, 0x883e, 0x1, 0x3, 0xffffff80, 0x95b8}, {0x4, 0x343, 0x2, 0x400, 0xfffffffc, 0x80000001}, {0x8, 0xcf, 0x1, 0x0, 0x9f, 0x6}, {0x400, 0x10, 0xa7, 0xc, 0x8, 0x1000}, {0x101, 0x5, 0x8, 0xa7, 0x7, 0xc84}, {0x4, 0x1, 0x5, 0x5, 0x2, 0x2}, {0x3, 0x9, 0x5, 0xffff, 0x7, 0xd}, {0x8, 0x9, 0xffffff39, 0x3, 0x8, 0x440}, {0x9, 0xb, 0x9, 0x2, 0x8, 0xa6fa}, {0xffff, 0x8ed, 0x9, 0x4, 0x3, 0x100}, {0x860, 0xfffffffb, 0xc0, 0x2, 0x9, 0x42d0}, {0xfffffffa, 0x1, 0xee, 0x8000, 0x1000, 0x40004}, {0x4, 0x90d2, 0x20000, 0x0, 0x8001, 0x646}, {0x1, 0x8, 0x0, 0x7, 0x9, 0x7}, {0x7ff, 0x0, 0x2, 0x9, 0x13d5, 0x6}, {0x3, 0x0, 0x6, 0x347, 0x8000}, {0x7, 0x8, 0xb76a, 0x6, 0x2, 0x6}, {0x6ff, 0x200, 0x6e, 0xb2, 0x80a7, 0x8001}, {0xd, 0x8, 0x0, 0x1, 0x9, 0x1}, {0x3b, 0x4, 0x0, 0xe686, 0x9, 0x400000}, {0x2, 0x2, 0xf4, 0x7, 0x3, 0x1}, {0x80, 0x3, 0x6, 0x10001, 0x0, 0xffffffff}, {0x0, 0xf5, 0x3, 0x1, 0x6, 0x2}, {0x2, 0x2, 0x3cd6, 0x4, 0x1, 0x9}, {0x3, 0x6, 0x0, 0x5, 0xa, 0xffffff0f}, {0x7fff, 0x4, 0x8, 0x0, 0x6, 0x179436fe}, {0xb8a6, 0x0, 0x3, 0x9, 0x0, 0x51}, {0xe296, 0x7fff, 0x3, 0x2, 0xfff, 0xd}, {0x1, 0x6, 0x4, 0x6, 0x10000, 0xbd}, {0x9, 0x7f, 0x5744bcb9, 0xc, 0x10001, 0x8}, {0x2, 0x9, 0x6, 0x4, 0x2, 0xfb35}, {0x80000001, 0xb9a6, 0x1, 0x80, 0x1, 0x3f04}, {0x2, 0xffffffc0, 0xffff, 0x9, 0x300000, 0xc}, {0x2, 0x2, 0x8, 0x6, 0x5, 0xe1c4}, {0x0, 0x19, 0x3, 0x0, 0xab6f, 0x9}, {0x80000001, 0x6, 0x760d, 0x80, 0x2, 0x8f7}, {0x471800, 0x3, 0x7, 0x1, 0x7, 0x6}, {0xa000000, 0x7b, 0x8, 0x8000, 0xe0, 0x401}, {0xc, 0x7f, 0x4, 0x2, 0xfff, 0x200}, {0xec55, 0x76, 0x6, 0x6c1f, 0x4, 0x8}, {0x7, 0x2, 0x3, 0xcb, 0x0, 0xe0}, {0x0, 0x3, 0x0, 0x2, 0x7, 0x3}, {0x8, 0x5, 0x9, 0x8, 0x3a4, 0x6}, {0xffc000, 0x10000, 0x1a4, 0x773, 0x2, 0xe2}, {0xe581, 0x8, 0x200, 0x9, 0xa9, 0x2}, {0x8, 0x7, 0x6, 0x4, 0x9, 0x88ff}, {0xa80, 0x6, 0x7fff, 0x2, 0xfffffff7, 0x2}, {0xa0, 0x81, 0x7, 0xfffffffe, 0x17, 0x8}, {0x3, 0x2d5, 0x7, 0x0, 0xfffffffc, 0x80000001}, {0xe, 0x7, 0x0, 0x9, 0xffff, 0x200}, {0x9, 0x7fffffff, 0x8, 0x9, 0x8, 0x5}, {0x7, 0x3, 0x5, 0x8, 0x1, 0xc246}, {0x3, 0x4, 0x1, 0xa, 0x1, 0x9}, {0x6, 0x0, 0x0, 0x7, 0x400000, 0xfffffffc}, {0x1, 0x3, 0x81, 0xff, 0x4, 0x4}, {0x3, 0x8a8, 0x8, 0x0, 0x8, 0xfffffffe}, {0x10001, 0x8, 0x2, 0x80000001, 0x9d, 0xfffffc00}, {0x0, 0x5, 0x3, 0x9, 0x7, 0x8000}, {0x9, 0x8, 0x8, 0x0, 0x8, 0x2}, {0x4, 0x7, 0x7, 0x9, 0x7, 0x1000}, {0xfffffffa, 0xffffffff, 0x5, 0x4, 0x3, 0xa}, {0x3, 0x66c, 0xfffff001, 0x4, 0x6, 0x5c}, {0x0, 0x9, 0x7, 0x480f, 0x6, 0x1000}, {0x7fffffff, 0x0, 0x7b, 0x7fff, 0x80000001, 0x401}, {0x6, 0xc2, 0x3, 0x800, 0x1, 0x5}, {0x6, 0x7b5, 0x2, 0x2, 0xfffffffc, 0x7bc9}, {0x750, 0x2, 0x41a2, 0x6, 0x5, 0x20}, {0xf, 0x792c, 0xa4, 0x8, 0x8, 0x3}, {0x800, 0x27, 0x0, 0x2, 0x4, 0x1}, {0x2, 0x8, 0x401, 0x9, 0xe, 0xfffffff9}, {0x5, 0x4, 0x101, 0x1, 0x4, 0x8}, {0x3, 0xecd, 0x80, 0x9, 0x100, 0xdcc}, {0x2, 0xab2c, 0x80000000, 0x1a, 0x87, 0xf}, {0x6, 0x7ff, 0x81, 0x0, 0xffff0001, 0x800}, {0x9, 0x6, 0x7fff, 0x200, 0x80000000, 0x7}, {0x10, 0x3, 0xdb, 0x400, 0x57, 0x1}, {0x8001, 0xffff, 0x3, 0x6, 0x2, 0x7}, {0x1, 0x10000, 0x1, 0x397a, 0xfffffffd, 0x7}, {0x80000001, 0x4, 0x5, 0xe6, 0x35c, 0x800}, {0x0, 0x101, 0x8, 0x401, 0x2, 0x7}, {0x9, 0x0, 0x23, 0x4, 0xe}, {0x8, 0x56c, 0xffff9586, 0xd, 0x9, 0xb}, {0x80000001, 0x7, 0x0, 0x2, 0x4, 0xe}, {0x0, 0x5, 0x80000001, 0xf8, 0x6, 0x2}, {0xa8, 0x101, 0x0, 0x8854, 0x5, 0x5}, {0x823, 0x9, 0x0, 0x5, 0x6f3, 0x800}, {0x3, 0x9, 0x1, 0x2, 0x9, 0x4}, {0x8, 0x0, 0x2, 0x80, 0x100, 0x612}, {0xfffff801, 0x1, 0xb, 0x7, 0x2, 0x453}, {0x8, 0x0, 0x1, 0x5d0ea327, 0x0, 0x8}, {0x7, 0x7, 0x3, 0x9, 0x8, 0x7}, {0x1, 0x5, 0x5, 0x1, 0x48, 0x1}, {0x3, 0x9, 0x93e8, 0x7, 0x9, 0x7fffffff}], [{0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x1}, {}, {}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x3}, {0x2}, {0x4}, {0x2}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {}, {0x4}, {0x3}, {0x4}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x5}, {}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x6, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x6, 0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0xf}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x9, 0x1}, {0x5}, {0x2}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x3, 0x9e6fab21fbfb7b49}, {0x3}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0xfffffe18, 0x1, 0x3}]}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe9c}, 0x1, 0x0, 0x0, 0x81}, 0x800) (rerun: 64) 1.176486422s ago: executing program 2 (id=8223): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/64, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078"], 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ace00a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x4000044) 917.572333ms ago: executing program 2 (id=8224): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x3a0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1800, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/251}, 0x20) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) 692.064121ms ago: executing program 5 (id=8225): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x48, r2, 0x5, 0x40000, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xc, 0x0, @random="fec4cf2010ef71eb"}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xe}]}, 0x48}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x4000400) preadv2(r9, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="ccdbcbe15b492852a617b232a7c219c52939fd5e76eabcb12e1271fb3add502bac2fb9184520c1dfb3d43af6e5fb159c173f8d71d660a919983e7498d61980f5a6f6c983cd82a6946bdceacb951b29c32bd8320f68347a2f4736e82afe379647bafab2bcf1af6a87d7502614248eae81512361ee6e70f9fc33bb", @ANYRES16=r8, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 329.227554ms ago: executing program 5 (id=8226): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xcbff}, 0x30004001) 214.272188ms ago: executing program 5 (id=8227): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x5, 0x290ac1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x800, 0x0) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) rseq(&(0x7f0000000200), 0x20, 0x4000000000, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r2}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) splice(r5, 0x0, r1, 0x0, 0x2000, 0x3) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x4003, 0x1}, 0x10) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r7, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async) bind$tipc(r0, 0x0, 0x0) 191.738942ms ago: executing program 4 (id=8228): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x1800, 0x34) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/ieee80211', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0\x00', r2, 0x0) 0s ago: executing program 4 (id=8229): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$tcp_congestion(r0, &(0x7f0000000040)='cdg\x00', 0x4) pipe(&(0x7f0000000140)) kernel console output (not intermixed with test programs): FF800:0000.003A: unknown main item tag 0x0 [ 1903.664880][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1903.681359][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1903.689315][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1903.709340][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1903.719962][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1903.736958][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1903.748090][T31271] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7744'. [ 1903.759929][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1903.800666][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1903.810120][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1903.815162][ T980] ssu100 6-1:0.0: probe with driver ssu100 failed with error -5 [ 1903.846127][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1904.020954][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1904.029315][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1904.043495][T31273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7745'. [ 1904.087508][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1904.168043][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1904.220486][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1904.283634][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1904.325631][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1904.388547][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1904.498742][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1904.575286][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1904.625025][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1904.729097][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1904.779001][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1904.810039][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1904.838444][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1904.852411][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1904.869336][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.020907][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.028836][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.048056][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.128258][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.136624][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.155169][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.259433][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.323689][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.346235][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.351268][T31298] gtp0: entered promiscuous mode [ 1905.381802][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.389852][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.390205][T31298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7750'. [ 1905.405477][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.440467][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.525536][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.646169][T31306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7752'. [ 1905.726633][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.737645][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.777219][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.789533][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.799821][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.815141][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.823980][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.833290][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.842072][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.850114][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.858941][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.873251][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.881898][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.890123][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.898885][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.907675][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.916312][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.930062][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.946849][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.955691][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.978028][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1905.994502][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1906.005651][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1906.017484][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1906.202991][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1906.268200][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1906.308454][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1906.397263][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1906.450804][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1906.458672][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1906.502800][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1906.503789][T31316] FAULT_INJECTION: forcing a failure. [ 1906.503789][T31316] name failslab, interval 1, probability 0, space 0, times 0 [ 1906.524251][T31316] CPU: 0 UID: 0 PID: 31316 Comm: syz.2.7754 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1906.524281][T31316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1906.524294][T31316] Call Trace: [ 1906.524303][T31316] [ 1906.524313][T31316] dump_stack_lvl+0x189/0x250 [ 1906.524349][T31316] ? __pfx____ratelimit+0x10/0x10 [ 1906.524379][T31316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1906.524409][T31316] ? __pfx__printk+0x10/0x10 [ 1906.524435][T31316] ? __pfx___might_resched+0x10/0x10 [ 1906.524465][T31316] ? fs_reclaim_acquire+0x7d/0x100 [ 1906.524494][T31316] should_fail_ex+0x414/0x560 [ 1906.524526][T31316] should_failslab+0xa8/0x100 [ 1906.524550][T31316] __kmalloc_noprof+0xcb/0x4f0 [ 1906.524570][T31316] ? tomoyo_encode+0x28b/0x550 [ 1906.524603][T31316] tomoyo_encode+0x28b/0x550 [ 1906.524639][T31316] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1906.524680][T31316] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1906.524705][T31316] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1906.524733][T31316] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1906.524778][T31316] ? __lock_acquire+0xab9/0xd20 [ 1906.524829][T31316] ? __fget_files+0x2a/0x420 [ 1906.524866][T31316] ? __fget_files+0x2a/0x420 [ 1906.524887][T31316] ? __fget_files+0x3a0/0x420 [ 1906.524908][T31316] ? __fget_files+0x2a/0x420 [ 1906.524935][T31316] security_file_ioctl+0xcb/0x2d0 [ 1906.524960][T31316] __se_sys_ioctl+0x47/0x170 [ 1906.524993][T31316] do_syscall_64+0xfa/0x3b0 [ 1906.525011][T31316] ? lockdep_hardirqs_on+0x9c/0x150 [ 1906.525039][T31316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.525067][T31316] ? clear_bhb_loop+0x60/0xb0 [ 1906.525092][T31316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.525112][T31316] RIP: 0033:0x7f155418e929 [ 1906.525132][T31316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1906.525149][T31316] RSP: 002b:00007f15550b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1906.525174][T31316] RAX: ffffffffffffffda RBX: 00007f15543b5fa0 RCX: 00007f155418e929 [ 1906.525189][T31316] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1906.525203][T31316] RBP: 00007f15550b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1906.525216][T31316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1906.525228][T31316] R13: 0000000000000000 R14: 00007f15543b5fa0 R15: 00007f15544dfa28 [ 1906.525268][T31316] [ 1906.525424][T31316] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1906.585451][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1906.648520][T31316] input: syz1 as /devices/virtual/input/input142 [ 1906.653212][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1906.730669][ T980] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1906.741182][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1906.741217][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1906.741244][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1906.830309][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1906.838715][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1906.847327][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1906.855320][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1906.871883][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1906.879849][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1906.889361][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1906.960917][ T980] usb 5-1: device descriptor read/64, error -71 [ 1907.024505][T30187] usb 6-1: USB disconnect, device number 58 [ 1907.031777][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.047496][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.065651][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.073707][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.092746][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.100993][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.108918][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.146870][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.181041][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.188943][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.201241][ T980] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1907.223283][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.243809][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.260576][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.278687][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.290167][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.330817][ T980] usb 5-1: device descriptor read/64, error -71 [ 1907.409692][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.433078][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.450285][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.474475][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.491148][ T980] usb usb5-port1: attempt power cycle [ 1907.532741][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.563742][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.597095][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.597134][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.597161][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.597186][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.597212][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.597238][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.597263][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.597288][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.597313][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.597339][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.597364][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.597419][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.598174][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.598208][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.598224][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.598240][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.598255][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.598270][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.598285][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.598301][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.598316][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.598331][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.598346][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.598361][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.598396][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.598412][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.598427][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.598442][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.598457][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.598473][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.598488][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.598503][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.598519][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.598534][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.598550][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.598565][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.598580][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.598596][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.598611][ T5848] hid-generic 0007:FFFFF800:0000.003A: unknown main item tag 0x0 [ 1907.613144][ T5848] hid-generic 0007:FFFFF800:0000.003A: hidraw0: HID v0.02 Device [syz1] on syz0 [ 1907.900743][ T980] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1907.901876][T31332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1907.982012][ T980] usb 5-1: device descriptor read/8, error -71 [ 1908.001060][T31332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1908.018563][T31330] fido_id[31330]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1908.032070][T31332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1908.160857][T31332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1908.404005][T31334] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1908.451058][ T980] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1908.491366][ T980] usb 5-1: device descriptor read/8, error -71 [ 1908.511652][T31334] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7760'. [ 1908.611663][ T980] usb usb5-port1: unable to enumerate USB device [ 1908.612652][T31343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7764'. [ 1909.208624][T31357] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7769'. [ 1909.624006][T31370] netlink: 'syz.4.7775': attribute type 12 has an invalid length. [ 1909.637628][T31370] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.7775'. [ 1909.694905][T31372] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7774'. [ 1909.714971][T31372] vlan3: entered promiscuous mode [ 1909.724911][T31372] team0: entered promiscuous mode [ 1909.730184][T31372] team_slave_0: entered promiscuous mode [ 1909.742379][T31372] team_slave_1: entered promiscuous mode [ 1909.761837][T31372] geneve0: entered promiscuous mode [ 1909.810794][ T980] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1909.857301][T31374] FAULT_INJECTION: forcing a failure. [ 1909.857301][T31374] name failslab, interval 1, probability 0, space 0, times 0 [ 1909.894562][T31374] CPU: 1 UID: 0 PID: 31374 Comm: syz.3.7776 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1909.894595][T31374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1909.894607][T31374] Call Trace: [ 1909.894616][T31374] [ 1909.894625][T31374] dump_stack_lvl+0x189/0x250 [ 1909.894659][T31374] ? __pfx____ratelimit+0x10/0x10 [ 1909.894688][T31374] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1909.894717][T31374] ? __pfx__printk+0x10/0x10 [ 1909.894745][T31374] ? __pfx___might_resched+0x10/0x10 [ 1909.894773][T31374] ? fs_reclaim_acquire+0x7d/0x100 [ 1909.894801][T31374] should_fail_ex+0x414/0x560 [ 1909.894830][T31374] should_failslab+0xa8/0x100 [ 1909.894852][T31374] __kmalloc_noprof+0xcb/0x4f0 [ 1909.894869][T31374] ? input_register_device+0x771/0x10b0 [ 1909.894895][T31374] input_register_device+0x771/0x10b0 [ 1909.894925][T31374] uinput_create_device+0x422/0x670 [ 1909.894951][T31374] ? __lock_acquire+0xab9/0xd20 [ 1909.894985][T31374] uinput_ioctl_handler+0x3f0/0x1570 [ 1909.895016][T31374] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 1909.895057][T31374] ? __fget_files+0x2a/0x420 [ 1909.895079][T31374] ? __fget_files+0x3a0/0x420 [ 1909.895116][T31374] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1909.895145][T31374] ? __pfx_uinput_ioctl+0x10/0x10 [ 1909.895172][T31374] __se_sys_ioctl+0xfc/0x170 [ 1909.895205][T31374] do_syscall_64+0xfa/0x3b0 [ 1909.895223][T31374] ? lockdep_hardirqs_on+0x9c/0x150 [ 1909.895251][T31374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1909.895271][T31374] ? clear_bhb_loop+0x60/0xb0 [ 1909.895295][T31374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1909.895315][T31374] RIP: 0033:0x7f37cd18e929 [ 1909.895334][T31374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1909.895352][T31374] RSP: 002b:00007f37cdf14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1909.895380][T31374] RAX: ffffffffffffffda RBX: 00007f37cd3b5fa0 RCX: 00007f37cd18e929 [ 1909.895396][T31374] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1909.895408][T31374] RBP: 00007f37cdf14090 R08: 0000000000000000 R09: 0000000000000000 [ 1909.895421][T31374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1909.895433][T31374] R13: 0000000000000000 R14: 00007f37cd3b5fa0 R15: 00007f37cd4dfa28 [ 1909.895467][T31374] [ 1911.046490][T31409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1911.065133][T31409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1911.700761][ T5848] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1911.872946][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1911.884285][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1911.902477][ T5848] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1911.931926][ T5848] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1911.937383][T31412] geneve2: entered promiscuous mode [ 1911.950610][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.993189][ T5848] usb 3-1: config 0 descriptor?? [ 1913.360933][ T5919] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1913.571520][ T5919] usb 6-1: Using ep0 maxpacket: 8 [ 1913.588619][ T5919] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 1913.618813][ T5919] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1913.632071][ T5919] usb 6-1: config 0 has no interfaces? [ 1913.638155][ T5919] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1913.654253][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1913.689822][ T5919] usb 6-1: config 0 descriptor?? [ 1913.848732][ T5848] usbhid 3-1:0.0: can't add hid device: -71 [ 1913.859475][ T5848] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1913.941730][ T5848] usb 3-1: USB disconnect, device number 124 [ 1914.167873][T31429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1914.210305][T31429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1914.399606][ T5848] usb 6-1: USB disconnect, device number 59 [ 1914.653826][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.660307][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.970675][ T5919] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1915.148004][ T5919] usb 3-1: config index 0 descriptor too short (expected 32963, got 77) [ 1915.180721][ T5919] usb 3-1: config 95 has too many interfaces: 178, using maximum allowed: 32 [ 1915.280809][ T5919] usb 3-1: config 95 has an invalid descriptor of length 72, skipping remainder of the config [ 1915.330477][T31445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1915.348496][T31446] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7796'. [ 1915.367652][T31445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1915.422300][ T5919] usb 3-1: config 95 has 0 interfaces, different from the descriptor's value: 178 [ 1915.732552][ T5919] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1915.745497][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.760013][ T5919] usb 3-1: Product: syz [ 1915.775844][ T5919] usb 3-1: Manufacturer: syz [ 1915.792072][ T5919] usb 3-1: SerialNumber: syz [ 1916.023531][T31437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1916.065100][T31437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1916.252956][T31451] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7797'. [ 1916.262962][T31451] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7797'. [ 1916.297885][T31451] dummy0: entered promiscuous mode [ 1916.316272][T31451] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1916.327691][T31451] Cannot create hsr debugfs directory [ 1916.386261][T31451] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 1916.443165][T31451] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 1916.653896][T31393] syz.4.7785: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1916.701353][T31393] CPU: 1 UID: 0 PID: 31393 Comm: syz.4.7785 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1916.701390][T31393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1916.701405][T31393] Call Trace: [ 1916.701414][T31393] [ 1916.701424][T31393] dump_stack_lvl+0x189/0x250 [ 1916.701466][T31393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1916.701498][T31393] ? __pfx__printk+0x10/0x10 [ 1916.701522][T31393] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1916.701546][T31393] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1916.701571][T31393] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1916.701597][T31393] warn_alloc+0x214/0x310 [ 1916.701628][T31393] ? __pfx_warn_alloc+0x10/0x10 [ 1916.701663][T31393] ? __get_vm_area_node+0x28f/0x300 [ 1916.701687][T31393] ? do_replace_finish+0x73/0x1930 [ 1916.701720][T31393] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1916.701775][T31393] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1916.701797][T31393] ? do_replace_finish+0x73/0x1930 [ 1916.701828][T31393] ? __get_vm_area_node+0x28f/0x300 [ 1916.701851][T31393] ? do_replace_finish+0x73/0x1930 [ 1916.701881][T31393] __vmalloc_node_range_noprof+0x56a/0x12f0 [ 1916.701905][T31393] ? do_replace_finish+0x73/0x1930 [ 1916.701932][T31393] ? __vmap_pages_range_noflush+0xdb5/0xe10 [ 1916.701989][T31393] ? __kasan_unpoison_vmalloc+0x51/0x80 [ 1916.702032][T31393] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1916.702066][T31393] ? do_replace_finish+0x73/0x1930 [ 1916.702096][T31393] vmalloc_noprof+0xb2/0xf0 [ 1916.702119][T31393] ? do_replace_finish+0x73/0x1930 [ 1916.702151][T31393] do_replace_finish+0x73/0x1930 [ 1916.702183][T31393] ? __might_fault+0xb0/0x130 [ 1916.702229][T31393] do_replace+0x324/0x430 [ 1916.702261][T31393] ? __pfx_do_replace+0x10/0x10 [ 1916.702303][T31393] ? bpf_lsm_capable+0x9/0x20 [ 1916.702323][T31393] ? security_capable+0x7e/0x2e0 [ 1916.702358][T31393] do_ebt_set_ctl+0x1e3/0xb60 [ 1916.702393][T31393] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 1916.702427][T31393] ? rcu_is_watching+0x15/0xb0 [ 1916.702469][T31393] ? nf_setsockopt+0x221/0x290 [ 1916.702503][T31393] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1916.702527][T31393] ? __pfx___mutex_lock+0x10/0x10 [ 1916.702548][T31393] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1916.702567][T31393] ? aa_sk_perm+0x81e/0x950 [ 1916.702599][T31393] ? __pfx_aa_sk_perm+0x10/0x10 [ 1916.702632][T31393] nf_setsockopt+0x26f/0x290 [ 1916.702662][T31393] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1916.702688][T31393] do_sock_setsockopt+0x257/0x3e0 [ 1916.702718][T31393] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1916.702749][T31393] ? __fget_files+0x2a/0x420 [ 1916.702782][T31393] __x64_sys_setsockopt+0x18b/0x220 [ 1916.702815][T31393] do_syscall_64+0xfa/0x3b0 [ 1916.702834][T31393] ? lockdep_hardirqs_on+0x9c/0x150 [ 1916.702865][T31393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1916.702887][T31393] ? clear_bhb_loop+0x60/0xb0 [ 1916.702914][T31393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1916.702934][T31393] RIP: 0033:0x7f4c4458e929 [ 1916.702955][T31393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1916.702973][T31393] RSP: 002b:00007f4c453c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1916.702997][T31393] RAX: ffffffffffffffda RBX: 00007f4c447b5fa0 RCX: 00007f4c4458e929 [ 1916.703022][T31393] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 1916.703035][T31393] RBP: 00007f4c44610b39 R08: 0000000000000108 R09: 0000000000000000 [ 1916.703049][T31393] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 1916.703063][T31393] R13: 0000000000000000 R14: 00007f4c447b5fa0 R15: 00007f4c448dfa28 [ 1916.703096][T31393] [ 1916.703267][T31393] Mem-Info: [ 1917.116921][T31393] active_anon:12019 inactive_anon:2 isolated_anon:0 [ 1917.116921][T31393] active_file:16949 inactive_file:4179 isolated_file:0 [ 1917.116921][T31393] unevictable:768 dirty:40 writeback:0 [ 1917.116921][T31393] slab_reclaimable:6620 slab_unreclaimable:157947 [ 1917.116921][T31393] mapped:39484 shmem:5770 pagetables:1797 [ 1917.116921][T31393] sec_pagetables:0 bounce:0 [ 1917.116921][T31393] kernel_misc_reclaimable:0 [ 1917.116921][T31393] free:1204505 free_pcp:15734 free_cma:0 [ 1917.162247][ C0] vkms_vblank_simulate: vblank timer overrun [ 1917.260330][T31393] Node 0 active_anon:50376kB inactive_anon:8kB active_file:67796kB inactive_file:16584kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:148836kB dirty:160kB writeback:0kB shmem:23844kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14676kB pagetables:7140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1917.293764][ C0] vkms_vblank_simulate: vblank timer overrun [ 1917.460272][T31393] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1917.491794][ C0] vkms_vblank_simulate: vblank timer overrun [ 1917.561595][T31393] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1917.590524][ C0] vkms_vblank_simulate: vblank timer overrun [ 1917.601070][T31393] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 1917.607007][T31393] Node 0 DMA32 free:909724kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42848kB inactive_anon:8kB active_file:67648kB inactive_file:15052kB unevictable:1536kB writepending:160kB present:3129332kB managed:2561024kB mlocked:0kB bounce:0kB free_pcp:37888kB local_pcp:14524kB free_cma:0kB [ 1917.639188][ C0] vkms_vblank_simulate: vblank timer overrun [ 1917.646747][T31393] lowmem_reserve[]: 0 0 1 1 1 [ 1917.680315][T31393] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:128kB inactive_anon:0kB active_file:148kB inactive_file:1532kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:60kB local_pcp:48kB free_cma:0kB [ 1917.790611][T31393] lowmem_reserve[]: 0 0 0 0 0 [ 1917.795809][T31393] Node 1 Normal free:3892708kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:30636kB local_pcp:14848kB free_cma:0kB [ 1917.832564][T31393] lowmem_reserve[]: 0 0 0 0 0 [ 1917.839524][T31393] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1917.858443][T31393] Node 0 DMA32: 25*4kB (UE) 50*8kB (E) 258*16kB (ME) 575*32kB (UME) 452*64kB (UME) 131*128kB (ME) 122*256kB (UME) 48*512kB (UME) 46*1024kB (UME) 8*2048kB (UM) 176*4096kB (M) = 908916kB [ 1917.883226][T31393] Node 0 Normal: 0*4kB 4*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 32kB [ 1917.898076][T31393] Node 1 Normal: 219*4kB (UME) 61*8kB (UME) 45*16kB (UE) 134*32kB (UME) 40*64kB (UME) 8*128kB (UE) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (ME) 946*4096kB (UM) = 3892708kB [ 1917.930084][T31393] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1917.941512][T31393] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1917.952157][T31393] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1917.965100][T31393] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1917.982619][T31393] 25629 total pagecache pages [ 1917.987620][T31393] 3 pages in swap cache [ 1917.992728][T31393] Free swap = 124984kB [ 1917.997523][T31393] Total swap = 124996kB [ 1918.002115][T31393] 2097051 pages RAM [ 1918.006207][T31393] 0 pages HighMem/MovableOnly [ 1918.011278][T31393] 424689 pages reserved [ 1918.016854][T31393] 0 pages cma reserved [ 1918.232672][T31473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7803'. [ 1918.755577][ T5919] usb 3-1: USB disconnect, device number 125 [ 1919.330784][ T5919] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1919.454830][T31485] netlink: 'syz.5.7807': attribute type 2 has an invalid length. [ 1919.500942][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 1919.508826][ T5919] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1919.521760][ T5919] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1919.535601][ T5919] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=20.39 [ 1919.545760][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1919.555637][ T5919] usb 3-1: Product: syz [ 1919.559915][ T5919] usb 3-1: Manufacturer: syz [ 1919.565123][ T5919] usb 3-1: SerialNumber: syz [ 1919.718201][ T30] audit: type=1326 audit(1750174466.470:7101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31491 comm="syz.3.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cd18e929 code=0x7ffc0000 [ 1919.784846][ T30] audit: type=1326 audit(1750174466.480:7102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31491 comm="syz.3.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f37cd18e929 code=0x7ffc0000 [ 1919.956286][ T30] audit: type=1326 audit(1750174466.480:7103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31491 comm="syz.3.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cd18e929 code=0x7ffc0000 [ 1920.018273][ T5919] kvaser_usb 3-1:251.0: error -ENODEV: Cannot get usb endpoint(s) [ 1920.039449][ T30] audit: type=1326 audit(1750174466.480:7104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31491 comm="syz.3.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f37cd18e929 code=0x7ffc0000 [ 1920.076455][ T5919] usb 3-1: USB disconnect, device number 126 [ 1920.192541][T31500] netlink: 'syz.3.7810': attribute type 10 has an invalid length. [ 1920.208231][T31500] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7810'. [ 1920.236513][ T30] audit: type=1326 audit(1750174466.480:7105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31491 comm="syz.3.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cd18e929 code=0x7ffc0000 [ 1920.329968][ T30] audit: type=1326 audit(1750174466.480:7106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31491 comm="syz.3.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cd18e929 code=0x7ffc0000 [ 1920.432732][ T30] audit: type=1326 audit(1750174466.480:7107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31491 comm="syz.3.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f37cd18e929 code=0x7ffc0000 [ 1920.510683][ T30] audit: type=1326 audit(1750174466.480:7108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31491 comm="syz.3.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cd18e929 code=0x7ffc0000 [ 1920.557188][ T30] audit: type=1326 audit(1750174466.480:7109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31491 comm="syz.3.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f37cd18e929 code=0x7ffc0000 [ 1920.588490][ T30] audit: type=1326 audit(1750174466.480:7110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31491 comm="syz.3.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cd18e929 code=0x7ffc0000 [ 1921.260693][ T5848] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1921.580732][ T5848] usb 6-1: Using ep0 maxpacket: 16 [ 1922.760903][ T980] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1923.170705][ T980] usb 3-1: config 0 has no interfaces? [ 1923.195373][ T980] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1923.238923][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.271852][ T980] usb 3-1: Product: syz [ 1923.286977][ T980] usb 3-1: Manufacturer: syz [ 1923.310300][ T980] usb 3-1: SerialNumber: syz [ 1923.354222][ T980] usb 3-1: config 0 descriptor?? [ 1923.374590][T31542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1923.440769][T31542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1923.749436][T31533] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1923.767994][ T5911] usb 3-1: USB disconnect, device number 127 [ 1924.277331][ T5848] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1924.285213][ T5848] usb 6-1: no configurations [ 1924.334141][ T5848] usb 6-1: can't read configurations, error -22 [ 1924.766662][T30188] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1925.059409][T30188] usb 3-1: Using ep0 maxpacket: 16 [ 1925.067587][T30188] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1925.099627][T30188] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1925.210075][T30188] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1925.258594][T30188] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1925.321297][T30188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1925.462253][T30188] usb 3-1: config 0 descriptor?? [ 1925.843112][T30188] mcp2200 0003:04D8:00DF.003B: item fetching failed at offset 5/7 [ 1925.961383][T30188] mcp2200 0003:04D8:00DF.003B: can't parse reports [ 1925.991081][T30188] mcp2200 0003:04D8:00DF.003B: probe with driver mcp2200 failed with error -22 [ 1926.114806][T30188] usb 3-1: USB disconnect, device number 2 [ 1926.438465][T31578] batman_adv: batadv0: Adding interface: dummy0 [ 1926.477993][T31578] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1926.560777][T31578] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1926.633380][T31563] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 1927.783440][T31587] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1927.791267][T31587] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1927.797623][T31587] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1927.808017][T31587] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1927.816897][T31587] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1928.091254][ T43] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1928.273787][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1928.401478][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1928.478679][ T43] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1928.516971][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1928.560899][T30191] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1928.572090][ T43] usb 5-1: config 0 descriptor?? [ 1929.072214][T30191] usb 6-1: config 0 has no interfaces? [ 1929.110171][T30191] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1929.119733][T14975] Bluetooth: hci4: command 0x0406 tx timeout [ 1929.126002][T30191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.156021][T30191] usb 6-1: Product: syz [ 1929.176198][T30191] usb 6-1: Manufacturer: syz [ 1929.209016][T30191] usb 6-1: SerialNumber: syz [ 1929.275543][T30191] usb 6-1: config 0 descriptor?? [ 1929.800051][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 1929.806404][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1929.830785][T14975] Bluetooth: hci2: command 0x0405 tx timeout [ 1929.837138][T14975] Bluetooth: hci3: command 0x0406 tx timeout [ 1929.840589][T28980] Bluetooth: hci1: command 0x0406 tx timeout [ 1929.843829][T30835] Bluetooth: hci0: command 0x0406 tx timeout [ 1929.851299][ T43] usb 5-1: USB disconnect, device number 12 [ 1931.182569][T30191] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1931.351810][ T980] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 1931.360667][T30191] usb 5-1: Using ep0 maxpacket: 32 [ 1931.379949][T30191] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 1931.396527][T30191] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1931.436279][T30191] usb 5-1: config 0 has no interface number 0 [ 1931.451938][T30191] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1931.496626][T30191] usb 5-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1931.535048][ T980] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1931.561006][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.576023][T30191] usb 5-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 1931.585431][T30191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.607290][ T980] usb 3-1: Product: syz [ 1931.630861][ T980] usb 3-1: Manufacturer: syz [ 1931.635637][T30191] usb 5-1: Product: syz [ 1931.639798][T30191] usb 5-1: Manufacturer: syz [ 1931.646803][ T980] usb 3-1: SerialNumber: syz [ 1931.662052][T30191] usb 5-1: SerialNumber: syz [ 1931.678130][ T980] usb 3-1: config 0 descriptor?? [ 1931.687774][T30191] usb 5-1: config 0 descriptor?? [ 1931.711546][T31631] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1931.721626][T30191] usb-storage 5-1:0.231: USB Mass Storage device detected [ 1931.840767][ T43] usb 6-1: USB disconnect, device number 62 [ 1931.902602][T31633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1931.951126][T31633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1932.167289][ T980] airspy 3-1:0.0: Board ID: 00 [ 1932.174636][ T980] airspy 3-1:0.0: Firmware version: [ 1933.432174][ T980] airspy 3-1:0.0: usb_control_msg() failed -71 request 10 [ 1933.507754][ T980] airspy 3-1:0.0: Registered as swradio24 [ 1933.563993][ T980] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1933.671503][ T980] usb 3-1: USB disconnect, device number 3 [ 1933.703069][ T43] usb 5-1: USB disconnect, device number 13 [ 1934.151471][ T980] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1934.311581][ T980] usb 3-1: too many configurations: 133, using maximum allowed: 8 [ 1934.363364][ T980] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1934.381152][ T980] usb 3-1: can't read configurations, error -61 [ 1934.531026][ T980] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1934.695460][ T980] usb 3-1: too many configurations: 133, using maximum allowed: 8 [ 1934.731118][ T980] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1934.771201][ T980] usb 3-1: can't read configurations, error -61 [ 1934.783069][ T980] usb usb3-port1: attempt power cycle [ 1934.970782][T30187] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1935.186358][ T980] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1935.241782][ T980] usb 3-1: too many configurations: 133, using maximum allowed: 8 [ 1935.291353][ T980] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1935.330747][T30187] usb 5-1: config 0 has no interfaces? [ 1935.365977][ T980] usb 3-1: can't read configurations, error -61 [ 1935.395994][T30187] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1935.450724][T30187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1935.458791][T30187] usb 5-1: Product: syz [ 1935.485906][T30187] usb 5-1: Manufacturer: syz [ 1935.505873][T30187] usb 5-1: SerialNumber: syz [ 1935.539490][T30187] usb 5-1: config 0 descriptor?? [ 1935.560758][ T980] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1935.586775][ T980] usb 3-1: too many configurations: 133, using maximum allowed: 8 [ 1935.621788][ T980] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1935.657195][ T980] usb 3-1: can't read configurations, error -61 [ 1935.699023][ T980] usb usb3-port1: unable to enumerate USB device [ 1936.141235][ T980] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1936.373504][ T980] usb 6-1: Using ep0 maxpacket: 32 [ 1936.383599][ T980] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1936.395393][ T980] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1936.406171][ T980] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1936.450131][ T980] usb 6-1: config 1 has no interface number 0 [ 1936.458909][ T980] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1936.488511][ T980] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1936.507586][ T980] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1936.517992][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1936.547064][ T980] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1936.748442][ T980] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1936.854475][T31703] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7872'. [ 1937.301396][ T43] usb 6-1: USB disconnect, device number 63 [ 1937.308695][ T43] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1937.447199][T31707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1938.130036][T31721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7876'. [ 1938.161037][ T980] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1938.217199][T31721] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7876'. [ 1938.269053][T31721] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7876'. [ 1938.305109][T31727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7880'. [ 1938.356173][ T980] usb 3-1: Using ep0 maxpacket: 16 [ 1938.516512][T30187] usb 5-1: USB disconnect, device number 14 [ 1938.654503][T31735] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7882'. [ 1938.951563][T30187] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1939.138554][T31743] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1939.145205][T31743] syzkaller1: linktype set to 32 [ 1939.183492][T30187] usb 5-1: Using ep0 maxpacket: 32 [ 1939.204473][T30187] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1939.214348][T30187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.222807][T30187] usb 5-1: Product: syz [ 1939.229533][T30187] usb 5-1: Manufacturer: syz [ 1939.242558][T30187] usb 5-1: SerialNumber: syz [ 1939.325866][T30187] usb 5-1: config 0 descriptor?? [ 1939.358641][T30187] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1940.175279][T31732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7881'. [ 1940.200749][T30187] gspca_ov534_9: reg_w failed -71 [ 1940.510872][T30187] gspca_ov534_9: Unknown sensor 0000 [ 1940.510997][T30187] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 1940.535293][T30187] usb 5-1: USB disconnect, device number 15 [ 1941.170735][T30187] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1941.320824][T30187] usb 5-1: Using ep0 maxpacket: 32 [ 1941.332722][T30187] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1941.342538][T30187] usb 5-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1941.356557][T30187] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=20.39 [ 1941.389897][T30187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.402541][T30187] usb 5-1: Product: syz [ 1941.407138][T30187] usb 5-1: Manufacturer: syz [ 1941.412505][T30187] usb 5-1: SerialNumber: syz [ 1941.722696][T30187] kvaser_usb 5-1:251.0: error -ENODEV: Cannot get usb endpoint(s) [ 1941.769931][T30187] usb 5-1: USB disconnect, device number 16 [ 1942.049552][ T980] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1942.087850][ T980] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1942.095669][ T980] usb 3-1: can't read configurations, error -71 [ 1942.400096][T31774] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7893'. [ 1942.414566][T31774] 8021q: VLANs not supported on vcan0 [ 1942.955740][T31792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1942.965078][T31792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1944.192956][ T5848] IPVS: starting estimator thread 0... [ 1944.294190][T31802] IPVS: using max 47 ests per chain, 112800 per kthread [ 1944.756236][T31812] bridge4: entered promiscuous mode [ 1944.995049][T31820] usb usb8: usbfs: process 31820 (syz.0.7905) did not claim interface 0 before use [ 1945.181537][T30188] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1945.351395][T30188] usb 6-1: Using ep0 maxpacket: 8 [ 1945.368697][T30188] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11 [ 1945.384367][T31823] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1945.390614][T31823] syzkaller1: linktype set to 6 [ 1945.475950][T30188] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1945.554430][T30188] usb 6-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 1945.564140][T30188] usb 6-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 1945.582992][T30188] usb 6-1: Product: syz [ 1945.590383][T30188] usb 6-1: Manufacturer: syz [ 1945.600091][T30188] usb 6-1: SerialNumber: syz [ 1946.008132][T31827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1946.019108][T31827] netlink: 'syz.5.7904': attribute type 27 has an invalid length. [ 1946.154084][T31827] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 1946.589139][T31835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1946.629542][T31835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1946.715871][T31842] FAULT_INJECTION: forcing a failure. [ 1946.715871][T31842] name failslab, interval 1, probability 0, space 0, times 0 [ 1946.729300][T31842] CPU: 1 UID: 0 PID: 31842 Comm: syz.0.7912 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1946.729328][T31842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1946.729337][T31842] Call Trace: [ 1946.729342][T31842] [ 1946.729348][T31842] dump_stack_lvl+0x189/0x250 [ 1946.729379][T31842] ? __pfx____ratelimit+0x10/0x10 [ 1946.729409][T31842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1946.729439][T31842] ? __pfx__printk+0x10/0x10 [ 1946.729476][T31842] should_fail_ex+0x414/0x560 [ 1946.729499][T31842] should_failslab+0xa8/0x100 [ 1946.729513][T31842] __kmalloc_cache_noprof+0x70/0x3d0 [ 1946.729526][T31842] ? sctp_add_bind_addr+0x8c/0x370 [ 1946.729544][T31842] sctp_add_bind_addr+0x8c/0x370 [ 1946.729570][T31842] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1946.729594][T31842] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1946.729614][T31842] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1946.729644][T31842] ? sctp_v4_is_any+0x35/0x60 [ 1946.729657][T31842] ? sctp_copy_one_addr+0x93/0x360 [ 1946.729671][T31842] sctp_bind_addr_copy+0xb3/0x3c0 [ 1946.729684][T31842] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1946.729711][T31842] sctp_connect_new_asoc+0x2e0/0x690 [ 1946.729740][T31842] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1946.729763][T31842] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1946.729797][T31842] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1946.729815][T31842] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1946.729830][T31842] sctp_sendmsg+0x155c/0x2810 [ 1946.729857][T31842] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1946.729884][T31842] ? aa_sk_perm+0x81e/0x950 [ 1946.729914][T31842] ? __pfx_aa_sk_perm+0x10/0x10 [ 1946.729941][T31842] ? sock_rps_record_flow+0x19/0x410 [ 1946.729961][T31842] ? inet_sendmsg+0x2f4/0x370 [ 1946.729976][T31842] __sock_sendmsg+0x19c/0x270 [ 1946.729998][T31842] ____sys_sendmsg+0x52d/0x830 [ 1946.730021][T31842] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1946.730056][T31842] ? import_iovec+0x74/0xa0 [ 1946.730081][T31842] ___sys_sendmsg+0x21f/0x2a0 [ 1946.730108][T31842] ? __pfx____sys_sendmsg+0x10/0x10 [ 1946.730150][T31842] ? __fget_files+0x2a/0x420 [ 1946.730163][T31842] ? __fget_files+0x3a0/0x420 [ 1946.730194][T31842] __sys_sendmmsg+0x227/0x430 [ 1946.730226][T31842] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1946.730247][T31842] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1946.730283][T31842] ? ksys_write+0x22a/0x250 [ 1946.730296][T31842] ? __pfx_ksys_write+0x10/0x10 [ 1946.730306][T31842] ? rcu_is_watching+0x15/0xb0 [ 1946.730335][T31842] __x64_sys_sendmmsg+0xa0/0xc0 [ 1946.730362][T31842] do_syscall_64+0xfa/0x3b0 [ 1946.730380][T31842] ? lockdep_hardirqs_on+0x9c/0x150 [ 1946.730406][T31842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1946.730424][T31842] ? clear_bhb_loop+0x60/0xb0 [ 1946.730439][T31842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1946.730451][T31842] RIP: 0033:0x7f03bbb8e929 [ 1946.730463][T31842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1946.730474][T31842] RSP: 002b:00007f03b99f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1946.730494][T31842] RAX: ffffffffffffffda RBX: 00007f03bbdb5fa0 RCX: 00007f03bbb8e929 [ 1946.730509][T31842] RDX: 0000000000000002 RSI: 0000200000000880 RDI: 0000000000000003 [ 1946.730522][T31842] RBP: 00007f03b99f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1946.730535][T31842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1946.730548][T31842] R13: 0000000000000000 R14: 00007f03bbdb5fa0 R15: 00007f03bbedfa28 [ 1946.730581][T31842] [ 1947.073157][ C1] vkms_vblank_simulate: vblank timer overrun [ 1947.090014][T31835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1947.099036][T31835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1947.585462][T31849] netlink: 'syz.4.7915': attribute type 7 has an invalid length. [ 1948.884436][T30188] usbhid 6-1:1.0: can't add hid device: -71 [ 1948.899305][T30188] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1948.938131][T30188] usb 6-1: USB disconnect, device number 64 [ 1949.175412][T31869] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1949.181642][T31869] syzkaller1: linktype set to 6 [ 1949.330784][T31873] netlink: 'syz.5.7922': attribute type 12 has an invalid length. [ 1949.348916][T31873] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.7922'. [ 1949.463470][T31875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1949.485706][T31875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1949.519756][T31875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1949.536646][T31875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1949.590268][T31877] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7924'. [ 1949.599841][T31877] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7924'. [ 1949.640294][T31879] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 1949.647769][T31879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1949.698464][T31881] ucma_write: process 887 (syz.5.7926) changed security contexts after opening file descriptor, this is not allowed. [ 1949.719028][T31881] tipc: Started in network mode [ 1949.728170][T31881] tipc: Node identity fc010000000000000000000000000001, cluster identity 4711 [ 1949.737533][T31881] tipc: Enabling of bearer rejected, failed to enable media [ 1949.779498][T31883] pim6reg: entered allmulticast mode [ 1949.787679][T31883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7927'. [ 1949.797471][T31883] bridge_slave_1: left allmulticast mode [ 1949.803708][T31883] bridge_slave_1: left promiscuous mode [ 1949.809460][T31883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1949.818849][T31883] bridge_slave_0: left allmulticast mode [ 1949.825057][T31883] bridge_slave_0: left promiscuous mode [ 1949.831701][T31883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1950.050328][T31887] input: syz1 as /devices/virtual/input/input148 [ 1950.565682][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1950.565702][ T30] audit: type=1400 audit(1750174497.310:7126): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=31899 comm="syz.2.7935" [ 1950.708789][T31906] macsec1: entered promiscuous mode [ 1950.729627][T31908] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7936'. [ 1950.872725][T30188] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1951.023040][T30188] usb 3-1: device descriptor read/64, error -71 [ 1951.274570][T30188] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1951.286568][T31916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1951.391399][T31916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1951.412536][T31911] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7937'. [ 1951.511702][T30188] usb 3-1: device descriptor read/64, error -71 [ 1951.527467][T31914] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1951.546655][T31914] syzkaller1: linktype set to 6 [ 1951.631193][T30188] usb usb3-port1: attempt power cycle [ 1952.000608][T30188] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1952.021376][T30188] usb 3-1: device descriptor read/8, error -71 [ 1952.310778][T30188] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1952.391970][T30188] usb 3-1: device descriptor read/8, error -71 [ 1952.613055][T30188] usb usb3-port1: unable to enumerate USB device [ 1952.861802][T31923] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7940'. [ 1952.940860][T31923] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7940'. [ 1952.941090][T31924] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7940'. [ 1953.227903][T31924] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7940'. [ 1953.624151][T30188] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1953.956555][T30188] usb 5-1: Using ep0 maxpacket: 8 [ 1953.994943][T30188] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1954.005766][T30188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1954.236197][T30188] usb 5-1: Product: syz [ 1954.252045][T30188] usb 5-1: Manufacturer: syz [ 1954.292830][T31942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1954.296855][T30188] usb 5-1: SerialNumber: syz [ 1954.319083][T31942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1954.338870][T30188] usb 5-1: config 0 descriptor?? [ 1954.443435][T31942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1954.453806][T31942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1954.565000][T31942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1954.591242][T30188] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1954.607109][T31942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1954.758034][T31942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1954.783518][T31942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1955.266557][T31955] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1955.839270][T30188] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1956.492580][ T5848] usb 5-1: USB disconnect, device number 17 [ 1956.857659][T31965] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1956.889151][T31965] syzkaller1: linktype set to 6 [ 1956.982186][T31974] FAULT_INJECTION: forcing a failure. [ 1956.982186][T31974] name failslab, interval 1, probability 0, space 0, times 0 [ 1957.030826][T31974] CPU: 1 UID: 0 PID: 31974 Comm: syz.5.7952 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1957.030857][T31974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1957.030870][T31974] Call Trace: [ 1957.030880][T31974] [ 1957.030889][T31974] dump_stack_lvl+0x189/0x250 [ 1957.030927][T31974] ? __pfx____ratelimit+0x10/0x10 [ 1957.030957][T31974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1957.030989][T31974] ? __pfx__printk+0x10/0x10 [ 1957.031015][T31974] ? __pfx___might_resched+0x10/0x10 [ 1957.031046][T31974] ? fs_reclaim_acquire+0x7d/0x100 [ 1957.031075][T31974] should_fail_ex+0x414/0x560 [ 1957.031105][T31974] ? traverse+0xd9/0x570 [ 1957.031131][T31974] should_failslab+0xa8/0x100 [ 1957.031153][T31974] __kvmalloc_node_noprof+0x161/0x5f0 [ 1957.031176][T31974] ? traverse+0xd9/0x570 [ 1957.031209][T31974] traverse+0xd9/0x570 [ 1957.031251][T31974] seq_lseek+0x134/0x260 [ 1957.031279][T31974] proc_reg_llseek+0x1bc/0x290 [ 1957.031304][T31974] __x64_sys_lseek+0x14c/0x1e0 [ 1957.031331][T31974] do_syscall_64+0xfa/0x3b0 [ 1957.031345][T31974] ? lockdep_hardirqs_on+0x9c/0x150 [ 1957.031373][T31974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1957.031389][T31974] ? clear_bhb_loop+0x60/0xb0 [ 1957.031409][T31974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1957.031424][T31974] RIP: 0033:0x7f7a0fb8e929 [ 1957.031440][T31974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1957.031454][T31974] RSP: 002b:00007f7a0d9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 1957.031473][T31974] RAX: ffffffffffffffda RBX: 00007f7a0fdb5fa0 RCX: 00007f7a0fb8e929 [ 1957.031485][T31974] RDX: 0000000000000001 RSI: 0000000000000080 RDI: 0000000000000003 [ 1957.031495][T31974] RBP: 00007f7a0d9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1957.031505][T31974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1957.031516][T31974] R13: 0000000000000000 R14: 00007f7a0fdb5fa0 R15: 00007f7a0fedfa28 [ 1957.031542][T31974] [ 1957.242160][ C1] vkms_vblank_simulate: vblank timer overrun [ 1957.765252][T31985] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1957.771616][T31985] syzkaller1: linktype set to 32 [ 1957.917710][T31986] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7955'. [ 1959.173894][ T5848] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1959.362972][ T5848] usb 3-1: Using ep0 maxpacket: 32 [ 1959.385140][ T5848] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1959.396892][ T5848] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1959.493495][ T5848] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1959.612886][T32004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1959.625009][T32004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1960.165071][T32004] netlink: 'syz.3.7959': attribute type 13 has an invalid length. [ 1960.173048][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1960.173080][ T5848] usb 3-1: Product: syz [ 1960.173097][ T5848] usb 3-1: Manufacturer: syz [ 1960.173114][ T5848] usb 3-1: SerialNumber: syz [ 1960.413325][T32004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1960.424390][T32004] 8021q: adding VLAN 0 to HW filter on device team0 [ 1960.448895][T32004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1960.501528][T31998] ip6gre1: entered allmulticast mode [ 1960.920867][T32011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7961'. [ 1961.118156][T32011] bond1: entered promiscuous mode [ 1961.249326][T32011] bond1: entered allmulticast mode [ 1961.396174][ T5848] usb 3-1: USB disconnect, device number 14 [ 1962.119179][T32029] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1962.126827][T32029] syzkaller1: linktype set to 6 [ 1962.240607][ T5848] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1962.470075][ T5848] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 1962.507349][ T5848] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1962.529973][ T5848] usb 5-1: config 0 has no interface number 0 [ 1962.546621][ T5848] usb 5-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1962.723467][ T5848] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1962.770627][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1962.806371][T32043] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1962.814538][T32043] syzkaller1: linktype set to 32 [ 1962.822054][ T5848] usb 5-1: config 0 descriptor?? [ 1962.980780][ T5848] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1963.920685][T24243] usb 5-1: Failed to submit usb control message: -110 [ 1963.928082][T24243] usb 5-1: unable to send the bmi data to the device: -110 [ 1964.018659][T24243] usb 5-1: unable to get target info from device [ 1964.140578][T24243] usb 5-1: could not get target info (-110) [ 1964.155033][T24243] usb 5-1: could not probe fw (-110) [ 1964.524217][T30187] usb 5-1: USB disconnect, device number 18 [ 1965.066106][ T30] audit: type=1326 audit(1750174511.810:7127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32061 comm="syz.2.7974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155418e929 code=0x7ffc0000 [ 1965.100361][ T30] audit: type=1326 audit(1750174511.810:7128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32061 comm="syz.2.7974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155418e929 code=0x7ffc0000 [ 1965.245203][ T30] audit: type=1326 audit(1750174511.810:7129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32061 comm="syz.2.7974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f155418e929 code=0x7ffc0000 [ 1965.268258][ T30] audit: type=1326 audit(1750174511.810:7130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32061 comm="syz.2.7974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155418e929 code=0x7ffc0000 [ 1965.291738][ T30] audit: type=1326 audit(1750174511.810:7131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32061 comm="syz.2.7974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155418e929 code=0x7ffc0000 [ 1965.315179][ T30] audit: type=1326 audit(1750174511.810:7132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32061 comm="syz.2.7974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f155418e929 code=0x7ffc0000 [ 1965.339014][ T30] audit: type=1326 audit(1750174511.810:7133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32061 comm="syz.2.7974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155418e929 code=0x7ffc0000 [ 1965.394918][ T30] audit: type=1326 audit(1750174511.820:7134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32061 comm="syz.2.7974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155418e929 code=0x7ffc0000 [ 1965.600932][ T30] audit: type=1326 audit(1750174511.820:7135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32061 comm="syz.2.7974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f155418e929 code=0x7ffc0000 [ 1965.716073][ T30] audit: type=1326 audit(1750174511.820:7136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32061 comm="syz.2.7974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155418e929 code=0x7ffc0000 [ 1966.243890][T32083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1966.265545][T32083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1966.305944][T32083] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7975'. [ 1966.423098][T32086] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7979'. [ 1966.583328][T32091] could not allocate digest TFM handle vmac64(xeta-generic) [ 1966.592905][T32090] could not allocate digest TFM handle vmac64(xeta-generic) [ 1967.072919][T32101] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1967.079056][T32101] syzkaller1: linktype set to 6 [ 1967.464059][T32104] FAULT_INJECTION: forcing a failure. [ 1967.464059][T32104] name failslab, interval 1, probability 0, space 0, times 0 [ 1967.508331][T32104] CPU: 0 UID: 0 PID: 32104 Comm: syz.5.7983 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1967.508363][T32104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1967.508375][T32104] Call Trace: [ 1967.508384][T32104] [ 1967.508393][T32104] dump_stack_lvl+0x189/0x250 [ 1967.508423][T32104] ? __pfx____ratelimit+0x10/0x10 [ 1967.508443][T32104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1967.508463][T32104] ? __pfx__printk+0x10/0x10 [ 1967.508479][T32104] ? __pfx___might_resched+0x10/0x10 [ 1967.508501][T32104] ? fs_reclaim_acquire+0x7d/0x100 [ 1967.508519][T32104] should_fail_ex+0x414/0x560 [ 1967.508539][T32104] should_failslab+0xa8/0x100 [ 1967.508553][T32104] __kmalloc_noprof+0xcb/0x4f0 [ 1967.508565][T32104] ? copy_splice_read+0x143/0x9b0 [ 1967.508579][T32104] copy_splice_read+0x143/0x9b0 [ 1967.508598][T32104] ? __pfx_copy_splice_read+0x10/0x10 [ 1967.508609][T32104] ? look_up_lock_class+0x74/0x170 [ 1967.508629][T32104] ? register_lock_class+0x51/0x320 [ 1967.508648][T32104] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1967.508664][T32104] ? alloc_pipe_info+0x374/0x4d0 [ 1967.508677][T32104] ? __pfx_copy_splice_read+0x10/0x10 [ 1967.508688][T32104] splice_direct_to_actor+0x4a6/0xcc0 [ 1967.508712][T32104] ? __pfx_direct_splice_actor+0x10/0x10 [ 1967.508725][T32104] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1967.508738][T32104] ? __pfx_aa_file_perm+0x10/0x10 [ 1967.508767][T32104] do_splice_direct+0x181/0x270 [ 1967.508781][T32104] ? __pfx_do_splice_direct+0x10/0x10 [ 1967.508794][T32104] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1967.508809][T32104] ? bpf_lsm_file_permission+0x9/0x20 [ 1967.508826][T32104] ? security_file_permission+0x75/0x290 [ 1967.508841][T32104] ? rw_verify_area+0x258/0x650 [ 1967.508862][T32104] do_sendfile+0x4da/0x7e0 [ 1967.508876][T32104] ? __pfx_vfs_write+0x10/0x10 [ 1967.508899][T32104] ? __pfx_do_sendfile+0x10/0x10 [ 1967.508914][T32104] ? __fget_files+0x3a0/0x420 [ 1967.508934][T32104] __se_sys_sendfile64+0x13e/0x190 [ 1967.508951][T32104] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1967.508964][T32104] ? rcu_is_watching+0x15/0xb0 [ 1967.508986][T32104] ? do_syscall_64+0xbe/0x3b0 [ 1967.509000][T32104] do_syscall_64+0xfa/0x3b0 [ 1967.509010][T32104] ? lockdep_hardirqs_on+0x9c/0x150 [ 1967.509028][T32104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1967.509040][T32104] ? clear_bhb_loop+0x60/0xb0 [ 1967.509055][T32104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1967.509067][T32104] RIP: 0033:0x7f7a0fb8e929 [ 1967.509079][T32104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1967.509090][T32104] RSP: 002b:00007f7a0d9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1967.509105][T32104] RAX: ffffffffffffffda RBX: 00007f7a0fdb5fa0 RCX: 00007f7a0fb8e929 [ 1967.509114][T32104] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1967.509122][T32104] RBP: 00007f7a0d9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1967.509130][T32104] R10: 0000020000023893 R11: 0000000000000246 R12: 0000000000000001 [ 1967.509137][T32104] R13: 0000000000000000 R14: 00007f7a0fdb5fa0 R15: 00007f7a0fedfa28 [ 1967.509155][T32104] [ 1968.650236][T32119] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1968.657089][T32119] syzkaller1: linktype set to 32 [ 1969.132578][T32124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7987'. [ 1969.947924][T32135] netlink: 'syz.4.7990': attribute type 11 has an invalid length. [ 1970.021072][T32135] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7990'. [ 1970.022766][T32136] netlink: 'syz.4.7990': attribute type 10 has an invalid length. [ 1970.038791][T32136] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7990'. [ 1970.104151][T32136] mac80211_hwsim hwsim44 wlan1: entered promiscuous mode [ 1970.153884][T32136] team0: Port device wlan1 added [ 1970.214420][T32134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1970.566275][T32139] bridge1: entered promiscuous mode [ 1970.680926][T32139] bridge1: entered allmulticast mode [ 1970.880643][ T5848] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1970.989504][T32147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1971.040992][T32147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1971.175037][ T5848] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1971.227712][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1971.323432][ T5848] usb 5-1: config 0 descriptor?? [ 1971.346216][ T5848] cp210x 5-1:0.0: cp210x converter detected [ 1971.411070][T30187] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 1971.593167][T30187] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1971.607996][T30187] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1971.637641][T30187] usb 3-1: config 0 has no interface number 0 [ 1971.669551][T30187] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1971.734432][T30187] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1971.788275][T30187] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1971.824376][T30187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1971.913369][T30187] usb 3-1: config 0 descriptor?? [ 1971.961843][ T5848] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1971.982855][ T5848] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 1972.089325][ T5848] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1972.101965][ T5848] usb 5-1: USB disconnect, device number 19 [ 1972.116456][ T5848] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1972.129881][ T5848] cp210x 5-1:0.0: device disconnected [ 1972.769154][T32152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1972.806821][T32152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1972.888259][T30187] usb 3-1: USB disconnect, device number 15 [ 1974.071781][T32185] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8005'. [ 1974.107551][T32185] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8005'. [ 1974.363799][T32194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8009'. [ 1974.701217][T30187] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1974.962233][T30187] usb 5-1: config index 0 descriptor too short (expected 32963, got 77) [ 1974.986933][T30187] usb 5-1: config 95 has too many interfaces: 178, using maximum allowed: 32 [ 1975.081115][T30187] usb 5-1: config 95 has an invalid descriptor of length 72, skipping remainder of the config [ 1975.092060][T30187] usb 5-1: config 95 has 0 interfaces, different from the descriptor's value: 178 [ 1975.111064][T30187] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1975.171069][T30187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1975.187406][T32217] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8014'. [ 1975.269231][T30187] usb 5-1: Product: syz [ 1975.278295][T30187] usb 5-1: Manufacturer: syz [ 1975.330244][T30187] usb 5-1: SerialNumber: syz [ 1975.621893][T32199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1975.633192][T32199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1975.948268][T32235] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8019'. [ 1976.032546][T32229] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1976.039581][T32229] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1976.076015][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.082573][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.135347][T32229] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1976.237182][T32229] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1976.240448][T32238] vlan2: entered promiscuous mode [ 1977.620195][T30187] usb 5-1: USB disconnect, device number 20 [ 1977.837378][T32250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1977.837403][T32251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1977.910896][T14975] Bluetooth: hci4: command 0x0406 tx timeout [ 1978.070677][T14975] Bluetooth: hci0: command 0x0406 tx timeout [ 1978.151094][T14975] Bluetooth: hci1: command 0x0406 tx timeout [ 1978.311014][T14975] Bluetooth: hci3: command 0x0406 tx timeout [ 1978.311073][ T5842] Bluetooth: hci2: command 0x0405 tx timeout [ 1978.323661][T32229] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1979.603088][T32283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1979.696172][T32283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1980.100857][T30188] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1980.294839][T30188] usb 6-1: config index 0 descriptor too short (expected 32963, got 77) [ 1980.313016][T30188] usb 6-1: config 95 has too many interfaces: 178, using maximum allowed: 32 [ 1980.350588][T30188] usb 6-1: config 95 has an invalid descriptor of length 72, skipping remainder of the config [ 1980.390678][T30188] usb 6-1: config 95 has 0 interfaces, different from the descriptor's value: 178 [ 1980.391127][T30835] Bluetooth: hci2: command 0x0405 tx timeout [ 1980.425795][T30188] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1980.465905][T30188] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1980.500208][T30188] usb 6-1: Product: syz [ 1980.518710][T30188] usb 6-1: Manufacturer: syz [ 1980.537145][T30188] usb 6-1: SerialNumber: syz [ 1980.771254][T32288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1980.780119][T32288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1981.232873][ T5911] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1981.410766][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 1981.431435][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1981.453380][ T5911] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1981.469328][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.480829][T32319] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8045'. [ 1981.500698][ T5911] usb 5-1: Product: syz [ 1981.509073][ T5911] usb 5-1: Manufacturer: syz [ 1981.537918][ T5911] usb 5-1: SerialNumber: syz [ 1981.577661][ T5911] usb 5-1: config 0 descriptor?? [ 1981.615844][ T5911] usb 5-1: bad CDC descriptors [ 1981.639497][ T5911] usb 5-1: unsupported MDLM descriptors [ 1981.678513][T30188] usb 6-1: USB disconnect, device number 65 [ 1981.912192][T32309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1981.951041][T32309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1981.973454][ T5911] usb 5-1: USB disconnect, device number 21 [ 1982.601348][T32342] netlink: 'syz.3.8053': attribute type 10 has an invalid length. [ 1982.609270][T32342] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8053'. [ 1982.701525][ T5911] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 1982.775598][T32348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1982.801052][T32348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1982.905902][ T5911] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1982.940712][ T5911] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1982.983985][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1983.014713][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1983.032972][T32348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1983.046084][T32348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1983.060717][ T5911] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1983.083812][ T5911] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1983.100686][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1983.108903][ T5911] usb 6-1: Product: syz [ 1983.120581][ T5911] usb 6-1: Manufacturer: syz [ 1983.125283][ T5911] usb 6-1: SerialNumber: syz [ 1983.257045][ T5911] usb 6-1: config 0 descriptor?? [ 1983.469972][ T5911] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1983.490578][ T5911] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1983.671068][ T5911] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 1983.678802][ T5911] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1983.724337][ T5911] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1983.815091][T32359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1983.824133][T32359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1983.846322][T32359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1983.878705][ T5911] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 1983.902429][T32359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1984.538805][T32368] netlink: 'syz.3.8060': attribute type 10 has an invalid length. [ 1984.558644][T32368] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8060'. [ 1984.990957][ T5911] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 1985.014547][ T5911] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 1985.115993][T32378] netlink: 'syz.3.8064': attribute type 10 has an invalid length. [ 1985.124512][T32377] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 1985.137881][T32377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1985.149316][T32378] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8064'. [ 1985.389737][T32387] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8068'. [ 1985.772379][ T5911] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1985.831913][T32399] netlink: 'syz.3.8073': attribute type 5 has an invalid length. [ 1985.935136][T30188] usb 6-1: USB disconnect, device number 66 [ 1985.966577][T32402] syzkaller1: entered promiscuous mode [ 1985.993201][T32402] syzkaller1: entered allmulticast mode [ 1986.055584][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 1986.084829][T32405] lo: entered promiscuous mode [ 1986.090345][T32405] tunl0: entered promiscuous mode [ 1986.092231][ T5911] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1986.117099][T32405] gre0: entered promiscuous mode [ 1986.139629][T32405] gretap0: entered promiscuous mode [ 1986.142442][ T5911] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1986.165984][T32409] netlink: 'syz.3.8078': attribute type 10 has an invalid length. [ 1986.170242][T32405] erspan0: entered promiscuous mode [ 1986.180739][T32409] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8078'. [ 1986.191121][T32405] ip_vti0: entered promiscuous mode [ 1986.211002][T32405] ip6_vti0: entered promiscuous mode [ 1986.220940][T32405] sit0: entered promiscuous mode [ 1986.238009][T32405] ip6tnl0: entered promiscuous mode [ 1986.244680][ T5911] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 1986.274851][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1986.278052][T32405] ip6gre0: entered promiscuous mode [ 1986.294997][ T5911] usb 3-1: Product: syz [ 1986.309018][T32405] syz_tun: entered promiscuous mode [ 1986.314239][ T5911] usb 3-1: Manufacturer: syz [ 1986.314262][ T5911] usb 3-1: SerialNumber: syz [ 1986.325464][ T5911] usb 3-1: config 0 descriptor?? [ 1986.360000][T32405] ip6gretap0: entered promiscuous mode [ 1986.393924][T32405] vcan0: entered promiscuous mode [ 1986.412832][ T5911] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 1986.421703][T32405] bond0: entered promiscuous mode [ 1986.434753][T32405] bond_slave_0: entered promiscuous mode [ 1986.454786][T32405] bond_slave_1: entered promiscuous mode [ 1986.471317][T32405] dummy0: entered promiscuous mode [ 1986.490386][T32405] nlmon0: entered promiscuous mode [ 1986.514326][T32405] caif0: entered promiscuous mode [ 1986.539308][T32405] batadv0: entered promiscuous mode [ 1986.553002][T32405] vxcan0: entered promiscuous mode [ 1986.569426][T32405] vxcan1: entered promiscuous mode [ 1986.588894][T32405] wg0: entered promiscuous mode [ 1986.595938][T32405] wg1: entered promiscuous mode [ 1986.620888][T32405] wg2: entered promiscuous mode [ 1986.622064][ T5911] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 1986.626157][T32405] veth0_to_bridge: entered promiscuous mode [ 1986.655522][T32405] bridge_slave_0: entered promiscuous mode [ 1986.662771][ T5911] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 1986.671192][T32405] veth1_to_bridge: entered promiscuous mode [ 1986.671378][T32405] bridge_slave_1: entered promiscuous mode [ 1986.671553][T32405] veth0_to_bond: entered promiscuous mode [ 1986.687801][ T5911] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1986.718350][T32405] veth1_to_bond: entered promiscuous mode [ 1986.741789][T32405] veth0_to_team: entered promiscuous mode [ 1986.752903][T32405] veth1_to_team: entered promiscuous mode [ 1986.768130][T32405] veth0_to_batadv: entered promiscuous mode [ 1986.780230][T32405] batadv_slave_0: entered promiscuous mode [ 1986.803349][T32405] veth1_to_batadv: entered promiscuous mode [ 1986.823293][T32405] batadv_slave_1: entered promiscuous mode [ 1986.841337][T32405] xfrm0: entered promiscuous mode [ 1986.851143][T32405] veth0_to_hsr: entered promiscuous mode [ 1986.857095][T32405] veth1_to_hsr: entered promiscuous mode [ 1986.900997][T32405] hsr0: entered promiscuous mode [ 1986.906569][T32405] veth1_virt_wifi: entered promiscuous mode [ 1986.927436][T32405] veth0_virt_wifi: entered promiscuous mode [ 1986.963268][T32405] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1986.987923][T32405] vlan0: entered promiscuous mode [ 1986.996731][T32405] vlan1: entered promiscuous mode [ 1987.017021][T32405] macvlan0: entered promiscuous mode [ 1987.031701][T32405] macvlan1: entered promiscuous mode [ 1987.051155][T32405] ipvlan0: entered promiscuous mode [ 1987.061307][T32405] ipvlan1: entered promiscuous mode [ 1987.077648][T32405] macvtap0: entered promiscuous mode [ 1987.089098][T32405] macsec0: entered promiscuous mode [ 1987.108953][T32405] geneve1: entered promiscuous mode [ 1987.116584][T32405] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1987.137092][T32405] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 1987.153270][T32405] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 1987.169371][T32405] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 1987.179922][T32405] mac80211_hwsim hwsim54 wlan0: entered promiscuous mode [ 1987.194845][T32405] mac80211_hwsim hwsim55 wlan1: entered promiscuous mode [ 1987.207183][T32405] ip6erspan0: entered promiscuous mode [ 1987.220193][T32405] pim6reg: entered promiscuous mode [ 1987.230169][T32405] gre1: entered promiscuous mode [ 1987.239252][T32405] vlan2: entered promiscuous mode [ 1987.259457][T32405] bridge0: entered promiscuous mode [ 1987.265435][T32405] batadv0.5: entered promiscuous mode [ 1987.272222][T32405] veth2: entered promiscuous mode [ 1987.277506][T32405] veth3: entered promiscuous mode [ 1987.282909][T32405] erspan1: entered promiscuous mode [ 1987.288434][T32405] gretap1: entered promiscuous mode [ 1987.294271][T32405] ip6tnl1: entered promiscuous mode [ 1987.299785][T32405] syztnl0: entered promiscuous mode [ 1987.308716][T32405] pimreg: entered promiscuous mode [ 1987.314247][T32405] bridge1: entered promiscuous mode [ 1987.319708][T32405] mac80211_hwsim hwsim65 wlan2: entered promiscuous mode [ 1987.502445][T32420] input: syz1 as /devices/virtual/input/input152 [ 1989.313893][ T43] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1989.490779][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 1989.660916][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1989.721101][ T43] usb 6-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1989.761059][ T43] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=20.39 [ 1989.800654][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1989.808794][ T43] usb 6-1: Product: syz [ 1989.841724][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1989.841745][ T30] audit: type=1326 audit(1750174536.600:7145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32455 comm="syz.0.8094" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03bbb8e929 code=0x0 [ 1989.935718][ T43] usb 6-1: Manufacturer: syz [ 1989.942375][ T43] usb 6-1: SerialNumber: syz [ 1990.342447][T32465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1990.355385][T32465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1990.474364][ T43] kvaser_usb 6-1:251.0: error -ENODEV: Cannot get usb endpoint(s) [ 1990.489043][ T43] usb 6-1: USB disconnect, device number 67 [ 1991.047819][T32475] input: syz1 as /devices/virtual/input/input153 [ 1991.100640][T30188] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1991.118346][ T980] usb 3-1: USB disconnect, device number 16 [ 1991.231670][T32479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1991.243159][T32479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1991.273278][T30188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1991.293593][T30188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1991.336448][T30188] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1991.385699][T30188] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1991.385973][T32484] netlink: 'syz.5.8102': attribute type 13 has an invalid length. [ 1991.419041][T30188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1991.458691][T30188] usb 5-1: config 0 descriptor?? [ 1991.473746][T32487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1991.501897][T32487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1991.694229][T30188] hid-udraw 0003:20D6:CB17.003C: item fetching failed at offset 3/7 [ 1991.712437][T32484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1991.714130][T30188] hid-udraw 0003:20D6:CB17.003C: parse failed [ 1991.741609][T30188] hid-udraw 0003:20D6:CB17.003C: probe with driver hid-udraw failed with error -22 [ 1991.827978][T32484] 8021q: adding VLAN 0 to HW filter on device team0 [ 1991.850866][T30187] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1991.907198][T32484] batman_adv: batadv0: Interface activated: dummy0 [ 1992.010910][T30187] usb 3-1: Using ep0 maxpacket: 32 [ 1992.025350][T30187] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 1992.061644][T30187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1992.116352][T32484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1992.241848][T30187] usb 3-1: config 0 descriptor?? [ 1992.257902][T30188] usb 5-1: USB disconnect, device number 22 [ 1992.303749][T30187] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1992.348584][T30187] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1993.083855][T32512] netlink: 'syz.4.8111': attribute type 7 has an invalid length. [ 1993.440282][T16189] usb 3-1: USB disconnect, device number 17 [ 1993.490722][ T43] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1993.681969][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 1993.703243][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1993.714071][ T43] usb 6-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1993.733394][ T43] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=20.39 [ 1993.742949][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1993.751302][ T43] usb 6-1: Product: syz [ 1993.755567][ T43] usb 6-1: Manufacturer: syz [ 1993.760291][ T43] usb 6-1: SerialNumber: syz [ 1993.983832][T32533] netlink: 'syz.2.8118': attribute type 11 has an invalid length. [ 1993.992417][T32533] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8118'. [ 1994.004202][T32533] netlink: 'syz.2.8118': attribute type 10 has an invalid length. [ 1994.012439][T32533] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8118'. [ 1994.022653][T32532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1994.123600][ T43] kvaser_usb 6-1:251.0: error -ENODEV: Cannot get usb endpoint(s) [ 1994.143783][ T43] usb 6-1: USB disconnect, device number 68 [ 1994.590841][ T5911] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1994.708226][T32551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1994.721116][T32551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1994.738127][T32551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1994.747224][T32551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1994.760947][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 1994.766140][T16189] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1994.776768][ T5911] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1994.796474][ T5911] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1994.810091][ T5911] usb 3-1: config 1 has no interface number 1 [ 1994.817750][ T5911] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1994.827456][ T5911] usb 3-1: too many endpoints for config 1 interface 2 altsetting 255: 255, using maximum allowed: 30 [ 1994.829657][T32553] sctp: [Deprecated]: syz.5.8126 (pid 32553) Use of int in max_burst socket option. [ 1994.829657][T32553] Use struct sctp_assoc_value instead [ 1994.838955][ T5911] usb 3-1: config 1 interface 2 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1994.869063][ T5911] usb 3-1: config 1 interface 2 has no altsetting 0 [ 1994.885930][ T5911] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1994.898981][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1994.912594][ T5911] usb 3-1: Product: syz [ 1994.916859][ T5911] usb 3-1: Manufacturer: syz [ 1994.926456][ T5911] usb 3-1: SerialNumber: syz [ 1994.933071][T16189] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1994.945293][T16189] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1994.955730][T16189] usb 5-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1994.969617][T16189] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1994.976411][T16189] usb 5-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00 [ 1994.985898][T16189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1995.033656][T16189] usb 5-1: config 0 descriptor?? [ 1995.216879][ T5911] usb 3-1: 0:8 : does not exist [ 1995.343145][ T5911] usb 3-1: USB disconnect, device number 18 [ 1995.477292][T16189] logitech-hidpp-device 0003:046D:C090.003D: unknown main item tag 0x0 [ 1995.485569][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1995.502105][T16189] logitech-hidpp-device 0003:046D:C090.003D: unknown main item tag 0x0 [ 1995.549124][T16189] logitech-hidpp-device 0003:046D:C090.003D: unknown main item tag 0x0 [ 1995.601201][T16189] logitech-hidpp-device 0003:046D:C090.003D: unknown main item tag 0x0 [ 1995.644492][T16189] logitech-hidpp-device 0003:046D:C090.003D: unknown main item tag 0x0 [ 1995.689702][T16189] logitech-hidpp-device 0003:046D:C090.003D: hidraw0: USB HID v0.00 Device [HID 046d:c090] on usb-dummy_hcd.4-1/input0 [ 1995.824880][T16189] usb 5-1: USB disconnect, device number 23 [ 1995.921705][T32562] fido_id[32562]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1996.567404][ T30] audit: type=1326 audit(1750174543.290:7146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32575 comm="syz.2.8133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155418e929 code=0x7ffc0000 [ 1996.602457][ T30] audit: type=1326 audit(1750174543.290:7147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32575 comm="syz.2.8133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155418e929 code=0x7ffc0000 [ 1996.700616][ T30] audit: type=1326 audit(1750174543.290:7148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32575 comm="syz.2.8133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f155418e929 code=0x7ffc0000 [ 1996.780746][T30187] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1996.798701][ T30] audit: type=1326 audit(1750174543.300:7149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32575 comm="syz.2.8133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155418e929 code=0x7ffc0000 [ 1996.906419][ T30] audit: type=1326 audit(1750174543.300:7150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32575 comm="syz.2.8133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155418e929 code=0x7ffc0000 [ 1996.930782][T30187] usb 3-1: Using ep0 maxpacket: 16 [ 1996.955204][T30187] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1996.971310][T30187] usb 3-1: config 0 has no interface number 0 [ 1997.001402][T30187] usb 3-1: too many endpoints for config 0 interface 41 altsetting 2: 171, using maximum allowed: 30 [ 1997.010717][ T30] audit: type=1326 audit(1750174543.300:7151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32575 comm="syz.2.8133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f155418e929 code=0x7ffc0000 [ 1997.069629][T30187] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1997.106035][ T30] audit: type=1326 audit(1750174543.300:7152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32575 comm="syz.2.8133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155418e929 code=0x7ffc0000 [ 1997.150966][T30187] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1997.195103][T30187] usb 3-1: config 0 interface 41 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 171 [ 1997.209863][ T30] audit: type=1326 audit(1750174543.300:7153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32575 comm="syz.2.8133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155418e929 code=0x7ffc0000 [ 1997.271108][T30187] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1997.314704][T30187] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1997.344079][ T30] audit: type=1326 audit(1750174543.300:7154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32575 comm="syz.2.8133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f155418d290 code=0x7ffc0000 [ 1997.346185][T30187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1997.366539][ C0] vkms_vblank_simulate: vblank timer overrun [ 1997.440550][ T30] audit: type=1326 audit(1750174543.300:7155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32575 comm="syz.2.8133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f155418e52b code=0x7ffc0000 [ 1997.502809][T30187] usb 3-1: Product: syz [ 1997.537781][T30187] usb 3-1: Manufacturer: syz [ 1997.548526][T30187] usb 3-1: SerialNumber: syz [ 1997.582842][T30187] usb 3-1: config 0 descriptor?? [ 1997.598678][T32576] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1997.610388][T32576] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1997.824549][ T43] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1997.864130][T32576] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1997.891475][T32576] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1998.005400][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 1998.018405][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1998.038472][ T43] usb 5-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1998.063900][ T43] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=20.39 [ 1998.083833][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1998.095140][ T43] usb 5-1: Product: syz [ 1998.100591][ T43] usb 5-1: Manufacturer: syz [ 1998.110229][ T43] usb 5-1: SerialNumber: syz [ 1998.234784][T32605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1998.246692][T32605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1998.389846][ T43] kvaser_usb 5-1:251.0: error -ENODEV: Cannot get usb endpoint(s) [ 1998.419649][ T43] usb 5-1: USB disconnect, device number 24 [ 1998.727376][T30187] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 1998.751119][T30187] usb 3-1: USB disconnect, device number 19 [ 1998.903242][T32617] netlink: 'syz.5.8144': attribute type 10 has an invalid length. [ 1998.912116][T32617] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8144'. [ 1999.350722][T30187] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1999.605787][T32625] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1999.612501][T32625] syzkaller1: linktype set to 6 [ 1999.680714][T30187] usb 6-1: Using ep0 maxpacket: 8 [ 1999.692505][T30187] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11 [ 1999.704342][T30187] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1999.724439][T30187] usb 6-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 1999.736125][T30187] usb 6-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3 [ 1999.745088][T30187] usb 6-1: Product: syz [ 1999.755149][T30187] usb 6-1: Manufacturer: syz [ 1999.760123][T30187] usb 6-1: SerialNumber: syz [ 2000.206076][T32628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2000.218387][T32628] netlink: 'syz.5.8145': attribute type 27 has an invalid length. [ 2000.310672][T32628] lo: left promiscuous mode [ 2000.320738][T32628] tunl0: left promiscuous mode [ 2000.330814][T32628] gre0: left promiscuous mode [ 2000.354010][T32628] gretap0: left promiscuous mode [ 2000.367888][T32628] erspan0: left promiscuous mode [ 2000.380416][T32628] ip_vti0: left promiscuous mode [ 2000.392703][T32628] ip6_vti0: left promiscuous mode [ 2000.406295][T32628] sit0: left promiscuous mode [ 2000.435685][T32628] ip6tnl0: left promiscuous mode [ 2000.446991][T32628] ip6gre0: left promiscuous mode [ 2000.462618][T32628] syz_tun: left promiscuous mode [ 2000.475517][T32628] ip6gretap0: left promiscuous mode [ 2000.490539][T32628] vcan0: left promiscuous mode [ 2000.498518][T32628] bond0: left promiscuous mode [ 2000.516146][T32628] batman_adv: batadv0: Interface deactivated: dummy0 [ 2000.523553][T32628] dummy0: left promiscuous mode [ 2000.536799][T32628] nlmon0: left promiscuous mode [ 2000.545170][T32628] caif0: left promiscuous mode [ 2000.551097][T32628] vxcan0: left promiscuous mode [ 2000.556665][T32628] vxcan1: left promiscuous mode [ 2000.562421][T32628] wg0: left promiscuous mode [ 2000.568019][T32628] wg1: left promiscuous mode [ 2000.573460][T32628] wg2: left promiscuous mode [ 2000.578964][T32628] veth0_to_bridge: left promiscuous mode [ 2000.585827][T32628] bridge_slave_0: left promiscuous mode [ 2000.592529][T32628] veth1_to_bridge: left promiscuous mode [ 2000.599259][T32628] bridge_slave_1: left promiscuous mode [ 2000.605908][T32628] veth0_to_bond: left promiscuous mode [ 2000.612229][T32628] bond_slave_0: left promiscuous mode [ 2000.618557][T32628] veth1_to_bond: left promiscuous mode [ 2000.624850][T32628] bond_slave_1: left promiscuous mode [ 2000.630925][T32628] veth0_to_team: left promiscuous mode [ 2000.642039][T32628] veth1_to_team: left promiscuous mode [ 2000.648878][T32628] veth0_to_batadv: left promiscuous mode [ 2000.655457][T32628] batadv_slave_0: left promiscuous mode [ 2000.661877][T32628] veth1_to_batadv: left promiscuous mode [ 2000.668573][T32628] batadv_slave_1: left promiscuous mode [ 2000.675259][T32628] xfrm0: left promiscuous mode [ 2000.680818][T32628] veth0_to_hsr: left promiscuous mode [ 2000.687724][T32628] veth1_to_hsr: left promiscuous mode [ 2000.695070][T32628] hsr0: left promiscuous mode [ 2000.700566][T32628] veth1_virt_wifi: left promiscuous mode [ 2000.707129][T32628] veth0_virt_wifi: left promiscuous mode [ 2000.713404][T32628] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 2000.735730][T32628] vlan0: left promiscuous mode [ 2000.737898][T32629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8148'. [ 2000.755520][T32628] vlan1: left promiscuous mode [ 2000.767435][T32628] macvlan0: left promiscuous mode [ 2000.788955][T32628] macvlan1: left promiscuous mode [ 2000.983789][T32628] ipvlan0: left promiscuous mode [ 2001.000979][T32628] ipvlan1: left promiscuous mode [ 2001.014902][T32628] macvtap0: left promiscuous mode [ 2001.121563][T32628] macsec0: left promiscuous mode [ 2001.172171][T32628] geneve1: left promiscuous mode [ 2001.177591][T32628] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 2001.185098][T32628] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 2001.192764][T32628] netdevsim netdevsim5 netdevsim2: left promiscuous mode [ 2001.200149][T32628] netdevsim netdevsim5 netdevsim3: left promiscuous mode [ 2001.207869][T32628] mac80211_hwsim hwsim54 wlan0: left promiscuous mode [ 2001.215086][T32628] ip6erspan0: left promiscuous mode [ 2001.220640][T32628] pim6reg: left promiscuous mode [ 2001.225941][T32628] gre1: left promiscuous mode [ 2001.230975][T32628] vlan2: left promiscuous mode [ 2001.236313][T32628] bridge0: left promiscuous mode [ 2001.241856][T32628] batadv0.5: left promiscuous mode [ 2001.247134][T32628] batadv0: left promiscuous mode [ 2001.252765][T32628] veth2: left promiscuous mode [ 2001.257993][T32628] veth3: left promiscuous mode [ 2001.263236][T32628] erspan1: left promiscuous mode [ 2001.268497][T32628] gretap1: left promiscuous mode [ 2001.273793][T32628] ip6tnl1: left promiscuous mode [ 2001.279006][T32628] syztnl0: left promiscuous mode [ 2001.284377][T32628] pimreg: left promiscuous mode [ 2001.289597][T32628] bridge1: left promiscuous mode [ 2001.294917][T32628] mac80211_hwsim hwsim65 wlan2: left promiscuous mode [ 2001.302271][T32628] bond1: left promiscuous mode [ 2001.307444][T32628] bond1: left allmulticast mode [ 2001.531885][T32642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8151'. [ 2001.880546][ T43] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2002.067823][ T43] usb 3-1: config 0 has no interfaces? [ 2002.092083][ T43] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2002.101775][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.135632][ T43] usb 3-1: Product: syz [ 2002.139916][ T43] usb 3-1: Manufacturer: syz [ 2002.163249][ T43] usb 3-1: SerialNumber: syz [ 2002.195853][ T43] usb 3-1: config 0 descriptor?? [ 2002.309329][T32651] netlink: 'syz.3.8155': attribute type 10 has an invalid length. [ 2002.333437][T32654] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 2002.340795][T32651] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8155'. [ 2002.356270][T32654] team0: Device macvtap1 is already an upper device of the team interface [ 2002.434195][T32638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2002.444593][T32638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2002.471542][ T5848] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2002.594193][T32657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8158'. [ 2002.652325][ T5848] usb 5-1: Using ep0 maxpacket: 8 [ 2002.667866][ T5848] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2002.690533][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.714028][ T5848] usb 5-1: Product: syz [ 2002.727978][ T5848] usb 5-1: Manufacturer: syz [ 2002.742447][ T5848] usb 5-1: SerialNumber: syz [ 2002.814927][ T5848] usb 5-1: config 0 descriptor?? [ 2002.842224][T32659] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2002.849084][T32659] syzkaller1: linktype set to 6 [ 2003.050741][ T5848] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2003.550585][T16189] usb 3-1: USB disconnect, device number 20 [ 2003.710226][T30187] usbhid 6-1:1.0: can't add hid device: -71 [ 2003.734799][T30187] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 2003.779654][T32665] netlink: 124 bytes leftover after parsing attributes in process `syz.5.8161'. [ 2003.809496][T30187] usb 6-1: USB disconnect, device number 69 [ 2003.823355][T32665] netlink: 'syz.5.8161': attribute type 3 has an invalid length. [ 2004.242331][T30835] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 2004.635026][T32689] netlink: 'syz.3.8167': attribute type 1 has an invalid length. [ 2004.914777][T23092] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2004.939572][T32689] bond4: entered promiscuous mode [ 2004.956480][T32689] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2005.145467][T23092] usb 3-1: config 0 has no interfaces? [ 2005.172545][T32691] bond4: (slave bridge5): making interface the new active one [ 2005.180197][T32691] bridge5: entered promiscuous mode [ 2005.189080][T32691] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 2005.230251][T23092] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2005.350427][T23092] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.378608][T23092] usb 3-1: Product: syz [ 2005.390375][T23092] usb 3-1: Manufacturer: syz [ 2005.402493][T23092] usb 3-1: SerialNumber: syz [ 2005.424663][T23092] usb 3-1: config 0 descriptor?? [ 2005.595759][T32693] netlink: 'syz.3.8168': attribute type 10 has an invalid length. [ 2005.620814][T32693] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8168'. [ 2005.708525][ T5848] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2005.781955][ T5848] usb 5-1: USB disconnect, device number 25 [ 2006.010994][T32697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2006.022903][T32697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2006.866017][T32704] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2006.872980][T32704] syzkaller1: linktype set to 6 [ 2007.146231][T32710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8174'. [ 2007.231000][T32710] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8174'. [ 2007.615329][T32717] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8176'. [ 2007.672226][T30187] usb 3-1: USB disconnect, device number 21 [ 2008.340973][T32726] netlink: 'syz.5.8179': attribute type 10 has an invalid length. [ 2008.389043][T32726] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8179'. [ 2008.398445][T32727] binder: 32725:32727 ioctl 402c5828 2000000001c0 returned -22 [ 2008.687238][T32736] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8181'. [ 2008.697861][T32736] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8181'. [ 2008.987172][T32736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2008.999248][T32738] netlink: zone id is out of range [ 2009.009481][ T5848] usb 4-1: USB disconnect, device number 86 [ 2009.029552][T32738] netlink: zone id is out of range [ 2009.061474][T32738] netlink: del zone limit has 4 unknown bytes [ 2009.606941][T32759] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2009.661015][T32759] syzkaller1: linktype set to 6 [ 2010.040914][T30187] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2010.103046][ T304] netlink: 'syz.4.8191': attribute type 10 has an invalid length. [ 2010.120691][ T304] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8191'. [ 2010.200622][T30187] usb 3-1: Using ep0 maxpacket: 8 [ 2010.259813][T30187] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 2010.340635][T30187] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2010.415699][T30187] usb 3-1: config 0 has no interfaces? [ 2010.434926][T30187] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 2010.435719][ T310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2010.466135][T30187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2010.478656][T30187] usb 3-1: config 0 descriptor?? [ 2010.810141][T30187] usb 3-1: USB disconnect, device number 22 [ 2010.907500][ T321] netlink: 'syz.5.8196': attribute type 5 has an invalid length. [ 2012.360663][T16189] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2012.440627][T30191] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2012.560628][T16189] usb 3-1: config index 0 descriptor too short (expected 32963, got 77) [ 2012.589390][T16189] usb 3-1: config 95 has too many interfaces: 178, using maximum allowed: 32 [ 2012.619780][T16189] usb 3-1: config 95 has an invalid descriptor of length 72, skipping remainder of the config [ 2012.634666][T30191] usb 4-1: Using ep0 maxpacket: 16 [ 2012.667577][T30191] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 2012.700706][T16189] usb 3-1: config 95 has 0 interfaces, different from the descriptor's value: 178 [ 2012.720785][T30191] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2012.759218][T16189] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2012.770798][T30191] usb 4-1: config 0 has no interface number 0 [ 2012.785585][T16189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.808946][T16189] usb 3-1: Product: syz [ 2012.813826][T30191] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 2012.838753][T16189] usb 3-1: Manufacturer: syz [ 2012.853544][T30191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.865248][T16189] usb 3-1: SerialNumber: syz [ 2012.883921][T30191] usb 4-1: Product: syz [ 2012.888116][T30191] usb 4-1: Manufacturer: syz [ 2012.919757][T30191] usb 4-1: SerialNumber: syz [ 2012.964746][T30191] usb 4-1: config 0 descriptor?? [ 2013.003429][T30191] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 2013.009901][T30191] usb 4-1: No valid video chain found. [ 2013.122041][ T335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2013.154908][ T335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2013.170862][ T347] netlink: 'syz.4.8202': attribute type 10 has an invalid length. [ 2013.198050][ T347] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8202'. [ 2013.198769][ T348] FAULT_INJECTION: forcing a failure. [ 2013.198769][ T348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2013.223831][T30191] usb 4-1: USB disconnect, device number 87 [ 2013.237255][ T348] CPU: 0 UID: 0 PID: 348 Comm: syz.5.8203 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 2013.237279][ T348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2013.237287][ T348] Call Trace: [ 2013.237292][ T348] [ 2013.237298][ T348] dump_stack_lvl+0x189/0x250 [ 2013.237322][ T348] ? __pfx____ratelimit+0x10/0x10 [ 2013.237347][ T348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2013.237381][ T348] ? __pfx__printk+0x10/0x10 [ 2013.237398][ T348] ? __might_fault+0xb0/0x130 [ 2013.237417][ T348] should_fail_ex+0x414/0x560 [ 2013.237437][ T348] _copy_from_user+0x2d/0xb0 [ 2013.237451][ T348] ___sys_sendmsg+0x158/0x2a0 [ 2013.237468][ T348] ? __pfx____sys_sendmsg+0x10/0x10 [ 2013.237506][ T348] ? __fget_files+0x2a/0x420 [ 2013.237526][ T348] ? __fget_files+0x3a0/0x420 [ 2013.237546][ T348] __x64_sys_sendmsg+0x19b/0x260 [ 2013.237563][ T348] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2013.237585][ T348] ? __pfx_ksys_write+0x10/0x10 [ 2013.237595][ T348] ? rcu_is_watching+0x15/0xb0 [ 2013.237617][ T348] ? do_syscall_64+0xbe/0x3b0 [ 2013.237631][ T348] do_syscall_64+0xfa/0x3b0 [ 2013.237641][ T348] ? lockdep_hardirqs_on+0x9c/0x150 [ 2013.237659][ T348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2013.237670][ T348] ? clear_bhb_loop+0x60/0xb0 [ 2013.237685][ T348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2013.237697][ T348] RIP: 0033:0x7f7a0fb8e929 [ 2013.237709][ T348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2013.237720][ T348] RSP: 002b:00007f7a0d9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2013.237735][ T348] RAX: ffffffffffffffda RBX: 00007f7a0fdb5fa0 RCX: 00007f7a0fb8e929 [ 2013.237747][ T348] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 2013.237760][ T348] RBP: 00007f7a0d9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2013.237772][ T348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2013.237784][ T348] R13: 0000000000000000 R14: 00007f7a0fdb5fa0 R15: 00007f7a0fedfa28 [ 2013.237814][ T348] [ 2013.900720][T30187] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 2014.080707][T30187] usb 6-1: Using ep0 maxpacket: 8 [ 2014.098269][T30187] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2014.133505][T30187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2014.163979][T30187] usb 6-1: Product: syz [ 2014.168266][T30187] usb 6-1: Manufacturer: syz [ 2014.178240][T30187] usb 6-1: SerialNumber: syz [ 2014.215774][T30187] usb 6-1: config 0 descriptor?? [ 2014.243097][T16189] usb 3-1: USB disconnect, device number 23 [ 2014.453941][T30187] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2014.540587][ T367] @ÿ: renamed from veth0_vlan [ 2014.932411][T16189] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2015.180751][T16189] usb 4-1: Using ep0 maxpacket: 32 [ 2015.198777][ T381] netlink: 'syz.4.8216': attribute type 10 has an invalid length. [ 2015.208503][ T381] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8216'. [ 2015.212040][T16189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2015.334645][T16189] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 2015.374817][T16189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=15 [ 2015.386777][T16189] usb 4-1: Product: syz [ 2015.391959][T16189] usb 4-1: Manufacturer: syz [ 2015.396752][T16189] usb 4-1: SerialNumber: syz [ 2015.423070][T16189] usb 4-1: config 0 descriptor?? [ 2015.467475][T16189] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2015.528404][T16189] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 2015.669950][ T374] netlink: 'syz.3.8213': attribute type 1 has an invalid length. [ 2015.732141][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2015.752461][ T374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8213'. [ 2015.801254][ T392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2015.844349][ T392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2016.029189][ T353] batman_adv: batadv0: Removing interface: dummy0 [ 2016.075523][ T398] netlink: 'syz.5.8204': attribute type 10 has an invalid length. [ 2016.186799][ T405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8222'. [ 2016.199259][ T353] bond0: (slave bond_slave_0): Releasing backup interface [ 2016.207172][ T405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8222'. [ 2016.223602][ T353] bond0: (slave bond_slave_1): Releasing backup interface [ 2016.254933][ T353] team_slave_0: left promiscuous mode [ 2016.283407][ T353] team0: Port device team_slave_0 removed [ 2016.301090][ T353] team_slave_1: left promiscuous mode [ 2016.316351][ T353] team0: Port device team_slave_1 removed [ 2016.332568][ T353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2016.346265][ T353] geneve0: left promiscuous mode [ 2016.360445][ T353] team0: Port device geneve0 removed [ 2016.373703][ T398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2016.391237][T30191] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2016.421139][ T398] bond0: entered promiscuous mode [ 2016.438418][ T398] team0: Port device bond0 added [ 2016.475879][T30187] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2016.512138][T30187] usb 6-1: USB disconnect, device number 70 [ 2016.550579][T30191] usb 5-1: Using ep0 maxpacket: 32 [ 2016.572209][T30191] usb 5-1: config 0 has an invalid interface number: 242 but max is 0 [ 2016.600174][T30191] usb 5-1: config 0 has no interface number 0 [ 2016.607031][T30191] usb 5-1: config 0 interface 242 altsetting 221 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2016.620406][T30191] usb 5-1: config 0 interface 242 has no altsetting 0 [ 2016.637826][T30191] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2016.684338][T30191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.709712][T30191] usb 5-1: config 0 descriptor?? [ 2016.745844][T30191] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2016.774569][ T409] netlink: 'syz.2.8223': attribute type 7 has an invalid length. [ 2016.939652][T30191] gspca_sunplus: reg_w_riv err -71 [ 2016.964767][T30191] sunplus 5-1:0.242: probe with driver sunplus failed with error -71 [ 2017.024218][T30191] usb 5-1: USB disconnect, device number 26 [ 2017.320813][T23092] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2017.512973][T23092] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2017.532423][T23092] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2017.557054][T23092] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 2017.596587][T23092] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 2017.612928][T23092] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 2017.637113][T23092] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 2017.648585][T23092] usb 3-1: Manufacturer: syz [ 2017.693887][T23092] usb 3-1: config 0 descriptor?? [ 2017.701770][ T411] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2017.714451][T23092] smsusb:smsusb_probe: board id=9, interface number 0 [ 2017.738125][T23092] smsusb:siano_media_device_register: media controller created [ 2017.743311][ T422] netlink: 'syz.4.8228': attribute type 10 has an invalid length. [ 2017.766069][ T422] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8228'. [ 2017.767284][T23092] ------------[ cut here ]------------ [ 2017.781035][T23092] usb 3-1: BOGUS urb xfer, pipe 3 != type 1 [ 2017.805362][T23092] WARNING: CPU: 1 PID: 23092 at drivers/usb/core/urb.c:504 usb_submit_urb+0xc82/0x1890 [ 2017.815560][T23092] Modules linked in: [ 2017.820120][T23092] CPU: 1 UID: 0 PID: 23092 Comm: kworker/1:2 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 2017.832504][T23092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2017.842807][T23092] Workqueue: usb_hub_wq hub_event [ 2017.847893][T23092] RIP: 0010:usb_submit_urb+0xc82/0x1890 [ 2017.853525][T23092] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 6d 08 00 00 45 8b 04 24 48 c7 c7 20 29 34 8c 4c 89 f6 4c 89 fa e8 9f 32 63 fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 f0 2d de 8e e8 45 [ 2017.873397][T23092] RSP: 0018:ffffc9000bfd6ad0 EFLAGS: 00010246 [ 2017.879531][T23092] RAX: a45a74e5a0882a00 RBX: ffff888027898200 RCX: 0000000000100000 [ 2017.887697][T23092] RDX: ffffc900187c1000 RSI: 0000000000058afd RDI: 0000000000058afe [ 2017.896459][T23092] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 2017.904652][T23092] R10: dffffc0000000000 R11: fffffbfff1bfa9ec R12: ffffffff8c34270c [ 2017.913236][T23092] R13: dffffc0000000000 R14: ffffffff8c349200 R15: ffff888077e7f2c0 [ 2017.921400][T23092] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 2017.930423][T23092] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2017.937126][T23092] CR2: 0000200000032030 CR3: 000000003f570000 CR4: 00000000003526f0 [ 2017.945189][T23092] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2017.953354][T23092] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2017.961437][T23092] Call Trace: [ 2017.964748][T23092] [ 2017.967713][T23092] smsusb_start_streaming+0x22/0x340 [ 2017.973068][T23092] smsusb_probe+0x18f6/0x2060 [ 2017.977812][T23092] ? __pfx_smsusb_probe+0x10/0x10 [ 2017.982984][T23092] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 2017.988616][T23092] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2017.994835][T23092] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2018.001385][T23092] ? __pm_runtime_set_status+0x785/0xa50 [ 2018.007139][T23092] usb_probe_interface+0x644/0xbc0 [ 2018.012452][T23092] ? __pfx_usb_probe_interface+0x10/0x10 [ 2018.018199][T23092] really_probe+0x26a/0x9a0 [ 2018.022955][T23092] __driver_probe_device+0x18c/0x2f0 [ 2018.028320][T23092] driver_probe_device+0x4f/0x430 [ 2018.033574][T23092] __device_attach_driver+0x2ce/0x530 [ 2018.039074][T23092] bus_for_each_drv+0x251/0x2e0 [ 2018.044067][T23092] ? __pfx___device_attach_driver+0x10/0x10 [ 2018.050084][T23092] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2018.055665][T23092] __device_attach+0x2b8/0x400 [ 2018.060655][T23092] ? __pfx___device_attach+0x10/0x10 [ 2018.066049][T23092] ? do_raw_spin_unlock+0x122/0x240 [ 2018.071414][T23092] bus_probe_device+0x185/0x260 [ 2018.076389][T23092] device_add+0x7b6/0xb50 [ 2018.080952][T23092] usb_set_configuration+0x1a87/0x20e0 [ 2018.086575][T23092] usb_generic_driver_probe+0x8d/0x150 [ 2018.092155][T23092] usb_probe_device+0x1c4/0x390 [ 2018.097045][T23092] ? __pfx_usb_probe_device+0x10/0x10 [ 2018.102492][T23092] really_probe+0x26a/0x9a0 [ 2018.107042][T23092] __driver_probe_device+0x18c/0x2f0 [ 2018.112457][T23092] driver_probe_device+0x4f/0x430 [ 2018.117531][T23092] __device_attach_driver+0x2ce/0x530 [ 2018.122968][T23092] bus_for_each_drv+0x251/0x2e0 [ 2018.127900][T23092] ? __pfx___device_attach_driver+0x10/0x10 [ 2018.133863][T23092] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2018.139286][T23092] __device_attach+0x2b8/0x400 [ 2018.144141][T23092] ? __pfx___device_attach+0x10/0x10 [ 2018.149474][T23092] ? do_raw_spin_unlock+0x122/0x240 [ 2018.154836][T23092] bus_probe_device+0x185/0x260 [ 2018.159764][T23092] device_add+0x7b6/0xb50 [ 2018.164201][T23092] usb_new_device+0xa39/0x16c0 [ 2018.169019][T23092] ? __pfx_usb_new_device+0x10/0x10 [ 2018.174311][T23092] ? _raw_spin_unlock_irq+0x23/0x50 [ 2018.179568][T23092] ? lockdep_hardirqs_on+0x9c/0x150 [ 2018.184870][T23092] hub_event+0x2941/0x4a00 [ 2018.189370][T23092] ? __pfx_hub_event+0x10/0x10 [ 2018.194258][T23092] ? process_scheduled_works+0x9ef/0x17b0 [ 2018.200115][T23092] ? _raw_spin_unlock_irq+0x23/0x50 [ 2018.205489][T23092] ? process_scheduled_works+0x9ef/0x17b0 [ 2018.211298][T23092] ? process_scheduled_works+0x9ef/0x17b0 [ 2018.217064][T23092] process_scheduled_works+0xae1/0x17b0 [ 2018.222707][T23092] ? __pfx_process_scheduled_works+0x10/0x10 [ 2018.228743][T23092] worker_thread+0x8a0/0xda0 [ 2018.233743][T23092] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2018.240126][T23092] ? __kthread_parkme+0x7b/0x200 [ 2018.245155][T23092] kthread+0x70e/0x8a0 [ 2018.249258][T23092] ? __pfx_worker_thread+0x10/0x10 [ 2018.254446][T23092] ? __pfx_kthread+0x10/0x10 [ 2018.259066][T23092] ? _raw_spin_unlock_irq+0x23/0x50 [ 2018.264367][T23092] ? lockdep_hardirqs_on+0x9c/0x150 [ 2018.269602][T23092] ? __pfx_kthread+0x10/0x10 [ 2018.274250][T23092] ret_from_fork+0x3f9/0x770 [ 2018.278878][T23092] ? __pfx_ret_from_fork+0x10/0x10 [ 2018.284159][T23092] ? __switch_to_asm+0x39/0x70 [ 2018.289024][T23092] ? __switch_to_asm+0x33/0x70 [ 2018.293906][T23092] ? __pfx_kthread+0x10/0x10 [ 2018.298577][T23092] ret_from_fork_asm+0x1a/0x30 [ 2018.303461][T23092] [ 2018.306532][T23092] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2018.313812][T23092] CPU: 1 UID: 0 PID: 23092 Comm: kworker/1:2 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 2018.325958][T23092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2018.336016][T23092] Workqueue: usb_hub_wq hub_event [ 2018.341057][T23092] Call Trace: [ 2018.344336][T23092] [ 2018.347267][T23092] dump_stack_lvl+0x99/0x250 [ 2018.351866][T23092] ? __asan_memcpy+0x40/0x70 [ 2018.356460][T23092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2018.361672][T23092] ? __pfx__printk+0x10/0x10 [ 2018.366273][T23092] panic+0x2db/0x790 [ 2018.370177][T23092] ? __pfx_panic+0x10/0x10 [ 2018.374606][T23092] ? ret_from_fork_asm+0x1a/0x30 [ 2018.379549][T23092] __warn+0x31b/0x4b0 [ 2018.383539][T23092] ? usb_submit_urb+0xc82/0x1890 [ 2018.388481][T23092] ? usb_submit_urb+0xc82/0x1890 [ 2018.393427][T23092] report_bug+0x2be/0x4f0 [ 2018.397765][T23092] ? usb_submit_urb+0xc82/0x1890 [ 2018.402707][T23092] ? usb_submit_urb+0xc82/0x1890 [ 2018.407646][T23092] ? usb_submit_urb+0xc84/0x1890 [ 2018.412588][T23092] handle_bug+0x84/0x160 [ 2018.416855][T23092] exc_invalid_op+0x1a/0x50 [ 2018.421357][T23092] asm_exc_invalid_op+0x1a/0x20 [ 2018.426204][T23092] RIP: 0010:usb_submit_urb+0xc82/0x1890 [ 2018.431754][T23092] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 6d 08 00 00 45 8b 04 24 48 c7 c7 20 29 34 8c 4c 89 f6 4c 89 fa e8 9f 32 63 fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 f0 2d de 8e e8 45 [ 2018.451380][T23092] RSP: 0018:ffffc9000bfd6ad0 EFLAGS: 00010246 [ 2018.457461][T23092] RAX: a45a74e5a0882a00 RBX: ffff888027898200 RCX: 0000000000100000 [ 2018.465459][T23092] RDX: ffffc900187c1000 RSI: 0000000000058afd RDI: 0000000000058afe [ 2018.473441][T23092] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 2018.481435][T23092] R10: dffffc0000000000 R11: fffffbfff1bfa9ec R12: ffffffff8c34270c [ 2018.489406][T23092] R13: dffffc0000000000 R14: ffffffff8c349200 R15: ffff888077e7f2c0 [ 2018.497401][T23092] smsusb_start_streaming+0x22/0x340 [ 2018.502704][T23092] smsusb_probe+0x18f6/0x2060 [ 2018.507393][T23092] ? __pfx_smsusb_probe+0x10/0x10 [ 2018.512449][T23092] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 2018.518038][T23092] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2018.523944][T23092] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2018.530284][T23092] ? __pm_runtime_set_status+0x785/0xa50 [ 2018.535923][T23092] usb_probe_interface+0x644/0xbc0 [ 2018.541046][T23092] ? __pfx_usb_probe_interface+0x10/0x10 [ 2018.546676][T23092] really_probe+0x26a/0x9a0 [ 2018.551190][T23092] __driver_probe_device+0x18c/0x2f0 [ 2018.556488][T23092] driver_probe_device+0x4f/0x430 [ 2018.561518][T23092] __device_attach_driver+0x2ce/0x530 [ 2018.566912][T23092] bus_for_each_drv+0x251/0x2e0 [ 2018.571774][T23092] ? __pfx___device_attach_driver+0x10/0x10 [ 2018.577669][T23092] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2018.583054][T23092] __device_attach+0x2b8/0x400 [ 2018.587824][T23092] ? __pfx___device_attach+0x10/0x10 [ 2018.593132][T23092] ? do_raw_spin_unlock+0x122/0x240 [ 2018.598360][T23092] bus_probe_device+0x185/0x260 [ 2018.603247][T23092] device_add+0x7b6/0xb50 [ 2018.607602][T23092] usb_set_configuration+0x1a87/0x20e0 [ 2018.613105][T23092] usb_generic_driver_probe+0x8d/0x150 [ 2018.618606][T23092] usb_probe_device+0x1c4/0x390 [ 2018.623486][T23092] ? __pfx_usb_probe_device+0x10/0x10 [ 2018.628868][T23092] really_probe+0x26a/0x9a0 [ 2018.633392][T23092] __driver_probe_device+0x18c/0x2f0 [ 2018.638693][T23092] driver_probe_device+0x4f/0x430 [ 2018.643736][T23092] __device_attach_driver+0x2ce/0x530 [ 2018.649135][T23092] bus_for_each_drv+0x251/0x2e0 [ 2018.654032][T23092] ? __pfx___device_attach_driver+0x10/0x10 [ 2018.659957][T23092] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2018.665370][T23092] __device_attach+0x2b8/0x400 [ 2018.670158][T23092] ? __pfx___device_attach+0x10/0x10 [ 2018.675470][T23092] ? do_raw_spin_unlock+0x122/0x240 [ 2018.680692][T23092] bus_probe_device+0x185/0x260 [ 2018.685565][T23092] device_add+0x7b6/0xb50 [ 2018.689913][T23092] usb_new_device+0xa39/0x16c0 [ 2018.694712][T23092] ? __pfx_usb_new_device+0x10/0x10 [ 2018.699929][T23092] ? _raw_spin_unlock_irq+0x23/0x50 [ 2018.705147][T23092] ? lockdep_hardirqs_on+0x9c/0x150 [ 2018.710368][T23092] hub_event+0x2941/0x4a00 [ 2018.714880][T23092] ? __pfx_hub_event+0x10/0x10 [ 2018.719694][T23092] ? process_scheduled_works+0x9ef/0x17b0 [ 2018.725450][T23092] ? _raw_spin_unlock_irq+0x23/0x50 [ 2018.730667][T23092] ? process_scheduled_works+0x9ef/0x17b0 [ 2018.736409][T23092] ? process_scheduled_works+0x9ef/0x17b0 [ 2018.742151][T23092] process_scheduled_works+0xae1/0x17b0 [ 2018.747750][T23092] ? __pfx_process_scheduled_works+0x10/0x10 [ 2018.753769][T23092] worker_thread+0x8a0/0xda0 [ 2018.758373][T23092] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2018.764734][T23092] ? __kthread_parkme+0x7b/0x200 [ 2018.769697][T23092] kthread+0x70e/0x8a0 [ 2018.773781][T23092] ? __pfx_worker_thread+0x10/0x10 [ 2018.778936][T23092] ? __pfx_kthread+0x10/0x10 [ 2018.783557][T23092] ? _raw_spin_unlock_irq+0x23/0x50 [ 2018.788783][T23092] ? lockdep_hardirqs_on+0x9c/0x150 [ 2018.794009][T23092] ? __pfx_kthread+0x10/0x10 [ 2018.798620][T23092] ret_from_fork+0x3f9/0x770 [ 2018.803235][T23092] ? __pfx_ret_from_fork+0x10/0x10 [ 2018.808374][T23092] ? __switch_to_asm+0x39/0x70 [ 2018.813151][T23092] ? __switch_to_asm+0x33/0x70 [ 2018.817925][T23092] ? __pfx_kthread+0x10/0x10 [ 2018.822532][T23092] ret_from_fork_asm+0x1a/0x30 [ 2018.827326][T23092] [ 2018.830655][T23092] Kernel Offset: disabled [ 2018.834991][T23092] Rebooting in 86400 seconds..