last executing test programs: 23.775776393s ago: executing program 1 (id=403): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpu.max\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0xffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r5, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) inotify_init1(0x800) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) write$sysctl(r6, &(0x7f0000000580)='1\x00', 0x2) r7 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r7, 0x8008f513, &(0x7f0000000140)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x172f, 0x500, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x30, 0x4, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x3, 0x1, 0x3, 0x4, {0x9, 0x21, 0x7, 0xe4, 0x1, {0x22, 0x87e}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x7, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x40, 0x2, 0x5}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x6, 0x3, 0x1, 0x40, 0xe8}, 0x1d, &(0x7f0000000280)={0x5, 0xf, 0x1d, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0x6, 0x7fff}, @wireless={0xb, 0x10, 0x1, 0x4, 0x3a, 0x2, 0x1, 0x9, 0x1}]}, 0x4, [{0xee, &(0x7f00000002c0)=@string={0xee, 0x3, "6b1e260dc94e408347606a7a707907f60bfbd0461d89cc821f7b33a4f4d9ddeb8ab866e5ec2cec35c587ff4ac63496acef722b370506264c77617e30969ab811057a20f4e1ac60b3eae4ffa10009283d692f5e81727adac977052571f87a122087276e025e8f05c29fb3e7ae6d4bd7d8dca1e622517df7dedf05c3ca2f85915e6d3e89bbfd170ce1df3208edad836a051b804ebcf3f8b0ba02e6d0cb9b920de16f926e93043ab98f5829cdee89ec1c15df32f7d2d9ea20302a213f595f9dd20857451869ab4fff392fa40c9b4916a6af414aacf2c51e67cc9053e5456fd0ced22c214aec2df7954360c6c34c"}}, {0xc2, &(0x7f00000003c0)=@string={0xc2, 0x3, "2cc7ab93df8eb4d00c3a8f2110a8af7f43f5ee3ae6891f0abac24263489b5a5dcb169611f4d11c0adb9bcbdc4e6f92943eb0f6253d879e2561bd5af9d27454b21e9fb68ff848b8e263d5e12ddb78ef73ccc0062530560db6507f3cf1fd8edbe37d2767084da04a661de068a95e5c5a285e7c15bcd4a2035a8000e7865371bdde2428c18b623a7d2b02944d830f2dd27020ddc66198e99af707ab02a1014c4600c6c41290e3dd257454cd9bd115cccdf11cf10344c3362c0b274ef2048066a1ab"}}, {0xa6, &(0x7f00000004c0)=@string={0xa6, 0x3, "68e8035e46fc5db0f059608d06b9b4c2b3b151a3433b171cb820c4d0ecb1d502186f2d51d9608870ca00c04756f6e6658199cde33901214de69eaa7fbad34349f755cab12c5596e18b82358b6430e6a17dbf2c9eff406324d18be9192066df4c45043984e4793230773935efca0baa560feaee4efdbc2f562ad8d071a421e596cf8901f12b89f7e963ea2e8c97c257cb8925c7c148efbf69b4faf2e5d5bab74e8a72bb53"}}, {0xd8, &(0x7f00000005c0)=@string={0xd8, 0x3, "f9fa098af0b648d0e7abd19751e2b0556855f8a5999e8857c17f8e25f5c1643efb75440a15ed779700042b4d5b821abc1d459c58e2cd87e560fb7538429d591352c121bba6bff196c80973f5cda4fa5336fd4f9e637d1f8dad323198466c17a0eec91905c9f4e0a9089beb0db4473589cdfa46b05837aca092b6146d73c0a87b265e4d8be9c8e1e3f7a1353f86e4f375e6810e034aef971f847f9eafd5932f2e55301812bf0efcd94f7f98a0b542b2f76ab42d5e3d1a07d1a8e16bf85fdd352c29d00282ccb6df8575a946202d8fd8dfb983e1e19029"}}]}) r8 = fcntl$dupfd(r7, 0x406, r5) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './cgroup/../file0\x00'}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc20e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYRES64=r10, @ANYBLOB="a1e57f593201516aff6819333ee8d40fa0416e942c7e9624c76404eec510a09ce58764dac2469d749f52", @ANYBLOB="040000001400010020010000000000000000000000000001081b5d"], 0x68}}, 0x460400e4) syz_usb_control_io(r9, 0x0, 0x0) write$sysctl(r6, &(0x7f0000000000)='2\x00', 0x2) 22.042742892s ago: executing program 2 (id=405): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000440)=0x1) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000009c0)={0x80000000, 0x0, 0x0}) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r5, 0x0) close(r5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, 0x0) write(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8f, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f0000000240), 0x8, 0xa1, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r7, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000006800010000000000feffffff0a000000000000001800088014000300fc020000000000000000000000000000060007000200000008000500", @ANYRES32=r8, @ANYBLOB="e80b35efa7227258f79b9efee56cc053905efefbc841238e3295ba03fbb4612c59f255ffa902ec43bb8a875ec5725856aae722c04544078443c06c0477105629fbbefa0871c3136cfb51d701d6f5dde8ede31b8f2a9de16eedd0cb5f"], 0x40}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) 17.466842829s ago: executing program 1 (id=408): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xe8, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0x21]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 15.93928481s ago: executing program 1 (id=409): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x24, r1, 0x705, 0x400000, 0x4, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x16}]}]}]}, 0x24}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0, 0x8d, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x32, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, r4, 0x63952000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x200, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a40)=@newtfilter={0x24, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1}, {}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48810}, 0x24040084) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'veth0_to_bond\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r11, 0xa29, 0x0, 0x2000, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r10}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r11, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r10}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001f00)={&(0x7f00000004c0)=@deltfilter={0x1a18, 0x2d, 0x0, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xf, 0xa}, {0xffe0}, {0xf, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x34}, @filter_kind_options=@f_basic={{0xa}, {0x818, 0x2, [@TCA_BASIC_ACT={0x41c, 0x3, [@m_ife={0x1bc, 0x3, 0x0, 0x0, {{0x8}, {0xa0, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x18000, 0x4, 0x0, 0x7}}}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x100}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x6b09}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x96}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @random="02d46de40358"}]}, {0xf6, 0x6, "eb4b9cfe0eb9fa2dd0ea0d5778f455becbc81ab820501022f41a98075c6d13bb70632cc582918f3a2a53aa88b4ffbb9c3754ee929a2ac5003adb81c84fa30b676ffd28d103089f939de34feca0a0655594640e37f54fcc8ff0e053cd7ef5f5254b2a2031da173c2ca9e7793443b19b3e145b1559b6ffaceaaa045020da4e38a0a4a331d3a73407cdba88399accb43c1ba67e1c22473b1a5fea20643d6795c52b7aaf1dd279f3c30d4e9adc08be9ffbd52c49b2a4f5b5ba3953149ce9c932eb0c56249abef3b680259e1eadca38d975c92af6f249fe47e29d22928eb6eba97afd660dd39e864189327f8446ae9e44b1a86613"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0xc60c45b1bd905d71, 0x2}}}}, @m_tunnel_key={0xd8, 0xd, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8e}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010100}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x5, 0x8, 0x0, 0x7}, 0x1}}]}, {0x5e, 0x6, "efb7f04b777a01bab9a86079028a5ba10c0e90669725d5f5a3046e06e521a2506506ea07bc2f43a8e9fa5af13a432c6e3dc4ab83421cab64eeef12442bc2bb0cdc6116b3caf49ce0639850cc64b2f03d28873100eb89f336fdb0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_ctinfo={0x184, 0x8, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1000, 0x8, 0x0, 0x0, 0xe}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x80000000, 0x2, 0x10000000, 0x9f, 0x7fff}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2a}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x4, 0x4, 0x9, 0x1}}]}, {0xfe, 0x6, "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"}, {0xc}, {0xc}}}]}, @TCA_BASIC_EMATCHES={0x3f8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x81, 0x3, 0xf3b}, {0x80000000, 0x7, 0x7f}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x19c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x80, 0x2, 0x0, 0x0, {{0x7, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_DATA={0x1d, 0x5, "efb885107e89e7548a2d6f1af0a4da8b41e71a52a586be5c65"}, @TCA_EM_IPT_MATCH_DATA={0x2f, 0x5, "e87c48c5b4c1b85772e4d103e5a92206361d1a111821cca65fe945cbdf1182a08af4cdd85ec6c0ecf4bb5e"}, @TCA_EM_IPT_MATCH_DATA={0xb, 0x5, "6a9ddf1fdf61fe"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb}]}}, @TCF_EM_META={0xa4, 0x2, 0x0, 0x0, {{0x101, 0x4, 0x6}, [@TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_VAR="7072b80229b46dc4", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="3375c6fcb6abe6addb", @TCF_META_TYPE_VAR="7f", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="c202e482fd0e8021", @TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0x25, 0x3, [@TCF_META_TYPE_VAR="e267a37083", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x56, 0x1}, {0x9, 0x7d, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1c7c, 0xf8}, {0xd20, 0x3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7f, 0x4, 0x1}, {0x8, 0xd0}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0x16, 0x3, [@TCF_META_TYPE_VAR="dbbee802af1ffc", @TCF_META_TYPE_VAR="cad9f2d9ee5f3ed20f39", @TCF_META_TYPE_VAR='I']}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4e07, 0x7, 0x9}, {{0x1, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x6}, {0xa6, 0x2, 0xce96, 0x3}}}, @TCF_EM_NBYTE={0x18, 0x8, 0x0, 0x0, {{0x9, 0x2, 0xa}, {0x200, 0x5, 0x2, "e75a02e453"}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x0, 0x8, 0x3}, {0x1, 0x0, 0x3}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7, 0x3, 0x101}, {0x8, 0x8000, 0x10, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0xfff9}, {{0x2, 0x1, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0xf0, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x9}, {0x3ff, 0x1, 0x2, "b8"}}}, @TCF_EM_CONTAINER={0xc4, 0x1, 0x0, 0x0, {{0x7, 0x0, 0x5905}, "1ac09b5735ba79f08ca5f6a7a2bd41e1b77977a6331761203b8792ec3b82122eb475827c8816ca5500ca3d64686addb20659ff110d9bf8f344dd5efa94f84d595187ba3710b0eab77583cc81f92cd8c5b3ab6119619503367ebbb9637c1ca2f1268588985f88f81b3fd4cf2971aba37482c874ae20c505c85a90c1f3da42b4b4965ae68b306293f512078b961ac79acfe4bab7c4d54a76e58b5df4d6e1c30c5f5ad4d3499d2d7c755532ad62ea1a6ac5380f0efe59ec1a"}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x749, 0x2, 0xa05}, {0x80, 0x4, 0x2, "206ebb1a"}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x110, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xf0, 0x2, 0x0, 0x0, {{0x8, 0x0, 0x8}, "2e50f1418506197ba6d2cd7c4835f9244ccb7ecea8d1a34f78b6e9717e1ed8f391a5892a4751c5caaa5844215de5c4eea51a7289d7a0ea6d53f0edae394a7745ef2d3081bce8cb99ff2ee25614b4cf9376c68bf3f1597cbf4c983f0dd61a00bb97e8897187941916091bd198c30389534d5d00823de84201f2fa035a50f4e82f65afef4aa4ac7cf78ed9629bed22db763725dba7e51282f58c1844cb008dce608b6e16d2c7a06c00786e5bbbc6a65a5d113cb694832b9f769e36fc953a86ff8114f251806f10cfcd4dcd225bc0b06a5b59865ed34b2c429dc3e76da70d964879a114de"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1, 0x3, 0x1}, {0x5, 0x5, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xfffffff7}, @filter_kind_options=@f_cgroup={{0xb}, {0x554, 0x2, [@TCA_CGROUP_ACT={0x550, 0x1, [@m_mirred={0x15c, 0x1f, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x44ba, 0x6, 0x4, 0x8}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2e4, 0xfff, 0x3, 0x3, 0xffffffff}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x5, 0x4, 0x4, 0xfffffffe}, 0x2, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x2, 0x20000000, 0x8000, 0x2}, 0x0, r10}}]}, {0xae, 0x6, "a79b4230dfd8d493b0a71c15de9b2dda4aac8c624ccdf50b53c78e60c99ee592096e3dec27afa320b0466d6c937d928e9831737dc9c76366a16bed2661fcd7e24ec753ac237c69f1147dc19964ba3999f01a4fe89c7c6c37632f30cba6e232ffadb84f5c832d48a3ac68dd1e285fcedee99bba9d92bf927b4518db77872c586f350a608a7f28980640ee0aac51b14c0ba84a38cf0345004580af6d19370b48d61dcf17e1e3bd46713934"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0xd0, 0x1a, 0x0, 0x0, {{0xb}, {0x90, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x4800, 0x1981, 0x1, 0x10000}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9d, 0x0, 0x2, 0x0, 0xffff7fff}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x9, 0x8, 0x7d, 0x200}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x200, 0x1, 0x6, 0xfffffc00, 0x5}}, @TCA_DEF_DATA={0xa, 0x3, 'wlan1\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x19, 0x8001, 0x3, 0x9, 0x4}}]}, {0x17, 0x6, "5e7248dcc16d92667ae1b665570ce4a9a33745"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0x128, 0x17, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x1ff, 0xc, 0x1, 0x82, 0x7}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}]}, {0xd9, 0x6, "92016738170a8c03b38010296076b6aea1904672d77e1a7ad46ae3fba464a78e120f6e0594d6854e3efdc0db867e51bbe249cc4a514e507664c83b2715fc81c622a748ddcbbc31933b55915f6f39e3856e099cbf22c8fd4c1c2c3691daf7b99ec0f0780c5bb99e7a1b429dd2e527cd9749e6dde0f4e5601f50ca2cca965c258ef600da40990d70153907688c9fe82a6e49fd231c515ea990c0249aad28f6ad399b89e4e9fb578f5e77febcc71d43945195ecbd75c2ed28c4682f4ea5267f10c2dda9c1a124763d924e7394b863457373a0228aec37"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_csum={0x114, 0x7, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x99f6, 0x1, 0x1ff, 0x9}, 0xb}}]}, {0xca, 0x6, "5bbbe9b9bbc6ee84b6f6239bb218c30c437d8b4a5c6a475e0a7b37cccbb5e6f33135241997869ced2b9f6675168630c7bf9f1af7493ee6a5376f5fef2734cf4fdf5ccfa0d8b07abf12be6baf06c49716be71a468fe245e20a34839c74b23c1c1d45819a4afee617e038d47087801386e9deb428ec3346da6fcd635e9c9eee6bf2b746dd2d0100bd7ce56bc1eafb70849080018e2a7ec97821aaf912693e018c1473824756e9eaf61f342d7675d80ed4aa01bf3cdf51083f45c85a53d541df37b09933af64def"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0xe4, 0x1f, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x39}, @TCA_CT_ZONE={0x6, 0x4, 0xfff7}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_ZONE={0x6, 0x4, 0xeb48}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_ZONE={0x6, 0x4, 0x7}, @TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x81}]}, {0x71, 0x6, "6ede0fdd44504460fd696fe14b15687a53ee344876ac7019ac02027238be439b7bc0ec8dba1eaf97c89d9ad8717252225a4b2b825736a449f361205bc8de79c9355e4adc6cc5764871ffbc819c2f179f49febf87e17de339ff5b525e7674e6d62e244fae38bdd1097cdfd0ea1f"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @filter_kind_options=@f_basic={{0xa}, {0xc44, 0x2, [@TCA_BASIC_POLICE={0xc, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x80}]}, @TCA_BASIC_POLICE={0xc34, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x4, 0x3, 0x2, 0x3, 0xdc, 0xffff0000, 0x7b5d, 0x9, 0xffc, 0xffffeb83, 0x200, 0x9, 0xae6c, 0xc, 0x40, 0xff, 0x9, 0x401, 0xfffff800, 0x2, 0x6, 0x4, 0x20000, 0x6, 0xe0, 0x1, 0x80, 0xd, 0xe627, 0x9, 0xc5, 0x4464ee4b, 0x1ff, 0xffff, 0x0, 0x6, 0xffffffff, 0x1, 0x3, 0x480000, 0x7ff, 0x0, 0x0, 0x8000, 0xe741, 0x1000, 0x401, 0x7e2, 0x3ff, 0x101, 0x5, 0x6, 0x5, 0x5, 0x890, 0x7, 0x8fe, 0xa, 0x0, 0xffffffff, 0x7fffffff, 0x321, 0xd40a, 0x3f6, 0x2, 0x381, 0x40, 0x0, 0x4, 0xd678, 0x9, 0x3, 0xfffffff5, 0x2, 0x2, 0x4, 0x9, 0x7fff, 0xfff, 0x1be, 0x4, 0xfffffff8, 0x8, 0x4, 0xa, 0x101e, 0xf7, 0x6a, 0x7, 0x4, 0x1, 0xbe65, 0x0, 0x7f, 0x8, 0x2, 0x5, 0x7fffffff, 0xfffffffd, 0x0, 0x9, 0x2, 0x9, 0x1, 0x0, 0xfffffff7, 0x1, 0x1, 0x5, 0x2, 0x7f, 0xec, 0x4, 0x0, 0x4998, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1, 0x8, 0x9, 0x427e, 0x5, 0x9, 0x2, 0x4a5, 0x3ff, 0xc3e5, 0x0, 0x3, 0x10001, 0x6, 0x2, 0x8, 0x3ff, 0x3, 0x8, 0x10, 0x9, 0x80000000, 0x625d, 0x8, 0x5, 0x7000, 0xfd46, 0x650, 0x9, 0x1, 0x2, 0x4, 0x0, 0x5, 0x7, 0x2, 0xe01f, 0x7fff, 0xffffffe9, 0x4, 0x8404, 0x7, 0x7, 0x5, 0x5, 0x6, 0x41, 0x3, 0xfffffffe, 0x5, 0x6, 0xd04d, 0x3, 0x0, 0x0, 0x8, 0x3ff, 0x6, 0x7, 0x7, 0x55f, 0x7fff, 0x7fff, 0x2, 0x8, 0x5, 0x1, 0x7fffffff, 0x0, 0x6d5d, 0x9, 0x4, 0x80000000, 0xfffff227, 0x7, 0x7f, 0x8001, 0x401, 0x5, 0x20000, 0xc61, 0xbe, 0x1ff, 0x400000, 0x8, 0x8, 0x3, 0x0, 0x1ff, 0x4, 0x10, 0x8, 0x8, 0x9, 0x7ff, 0xc6, 0x4, 0xb167, 0x1, 0x5, 0x1, 0x9, 0x5, 0x1, 0x3, 0x0, 0x1, 0x5, 0x401, 0x3, 0x200, 0x7, 0xfff, 0xb3, 0x6, 0x0, 0x8, 0x6, 0x1a4, 0xfff, 0x8, 0x4, 0x2, 0x5ca8, 0x9, 0xe, 0x2, 0x6, 0x1, 0x5d6, 0x6, 0x3, 0x0, 0x18f6, 0xd]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1a3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x1, 0x3, 0x401, 0x18, 0x6, 0x6, 0x1, 0x9, 0x2, 0x10001, 0x1000, 0xfffff800, 0xffff, 0x5, 0x8, 0x2, 0x9, 0x995c, 0x80000001, 0x4, 0xfffffffa, 0x0, 0xfffffffd, 0x4, 0x800, 0x8000, 0x8001, 0x10001, 0x7f, 0x17464736, 0x0, 0x6, 0x5, 0x10000, 0xc, 0x3, 0x2, 0x0, 0xf, 0x0, 0xfffffffc, 0x9, 0x0, 0x8, 0x9956069f, 0x1, 0x2, 0x2, 0xd2c, 0x4, 0x1, 0x9048, 0x3, 0x0, 0xf, 0x3, 0xfff, 0x6, 0x5, 0x7, 0x2, 0x7, 0xfffffffa, 0x50, 0x4, 0x800, 0x9, 0x2, 0x80000000, 0xfffffffe, 0x8, 0xe, 0xffff, 0xff, 0xffffff28, 0x9, 0x4, 0x81b5, 0xfffffffb, 0x101, 0x8001, 0x1000, 0x6, 0x7, 0x19b000, 0x2, 0xa, 0xfffffffa, 0x7, 0x3, 0x2, 0x9, 0x800, 0x4, 0x3, 0x7, 0x7ff, 0x4, 0xfffffffe, 0x6, 0x9, 0xfffffff7, 0x0, 0x0, 0x5, 0xa, 0x10, 0x18, 0xfff, 0x2ec4, 0x959, 0x7, 0x927, 0x51a785df, 0x4, 0x9, 0xffff, 0x9, 0x6, 0x0, 0x1, 0x6d8a, 0x67, 0xc, 0x9, 0x0, 0xa00, 0xcf, 0x1, 0x16b, 0x8, 0x0, 0x4, 0x0, 0x40, 0x5, 0x1, 0x8, 0x5, 0x1, 0x5, 0x2, 0x4, 0x0, 0x7, 0xab, 0x6, 0x80000000, 0x8, 0x1, 0xe110, 0x3, 0x0, 0x0, 0x2, 0x400, 0xfffffffe, 0x3, 0x7, 0xfffffff9, 0x62, 0x2, 0x2, 0x9, 0x6, 0x8, 0x1, 0x80000000, 0x9, 0x3e, 0x2, 0x7f80000, 0x3, 0x86, 0x0, 0xe, 0x4, 0x7, 0x8, 0x3, 0x9, 0x7, 0x38, 0x3, 0x0, 0x8, 0xffff1fe6, 0x8, 0x800, 0x3ff, 0x80, 0x81, 0x4, 0x0, 0x1fc0000, 0x8001, 0x2, 0x6, 0x8, 0x40, 0x10000, 0x5, 0x9, 0x7fff, 0x1ff, 0x4, 0xe05e, 0xa, 0x1ff, 0xe29, 0x9, 0x2, 0x1, 0x1, 0x0, 0x4, 0x6, 0x7fffffff, 0x80, 0x692e488b, 0x73fc, 0x9, 0x2, 0x3, 0xc5c7, 0x8, 0x0, 0x7, 0x8, 0xdb36, 0x9, 0x4, 0x80000000, 0x3, 0xfffffffe, 0x9, 0x6, 0x2, 0x6, 0x1, 0xffff, 0xff, 0x4, 0x8, 0x80000000, 0x4, 0x8, 0x1, 0x4, 0xe2, 0x1, 0xffffff01, 0x1, 0x4a9, 0x2fca]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xf386000, 0x0, 0x5, 0x7, 0x2, 0x0, 0x2, 0x6, 0x84f1, 0x7, 0x3, 0x9, 0x3, 0x0, 0x274, 0x9, 0x7, 0x1, 0x7f, 0x3, 0x0, 0x7, 0x31d3, 0x7, 0xffffffff, 0x6, 0x3ff, 0x27, 0x0, 0x0, 0x1000, 0xda, 0x3, 0x1, 0xd4, 0xc7, 0x0, 0x6, 0x3, 0x200, 0xc, 0x3ff, 0x4, 0x9, 0x101, 0xffffffff, 0x2, 0x5, 0xc7c, 0x8, 0x10001, 0x84a, 0xc000000, 0xc89, 0x3, 0x4, 0x8, 0xa1, 0x0, 0xb6ad, 0x8, 0x5, 0x3, 0x0, 0x27, 0xc, 0x5, 0x4, 0x10000, 0x80000001, 0x5da8, 0x2, 0x9, 0xf, 0x1, 0xff, 0xffff03e1, 0x61eba17e, 0x0, 0x6, 0x6b169952, 0x2, 0x1, 0x2, 0x7, 0x8, 0x3, 0x0, 0xef4e, 0x7, 0x800, 0x9, 0x40, 0x1, 0x8, 0x100, 0x2, 0x9, 0x9, 0xd6, 0x3, 0x0, 0xfffffbff, 0x7, 0x2, 0x167, 0xc89, 0x44, 0x4, 0x1, 0x80000000, 0xedc, 0x9, 0xffffff81, 0x18c3, 0x6, 0x0, 0xf5a, 0x2, 0x2, 0x1bb, 0x80000001, 0x10000, 0x2000000, 0x0, 0x2, 0x3, 0xcc40, 0x5, 0xc0c, 0x2, 0xfffffff8, 0x0, 0x9, 0x8, 0x1, 0x5, 0x40, 0x8, 0x1, 0x2, 0x6, 0x1, 0x8, 0x9, 0x4, 0x80, 0x800, 0x10000, 0x10000000, 0x8390, 0x7e, 0xfffeffff, 0xef8e, 0x7, 0x0, 0x5d3b9b58, 0x38c, 0x5, 0x81, 0x3, 0x6, 0x7, 0x7, 0x3, 0x0, 0xfff, 0x644, 0x2, 0x6, 0xe, 0x6, 0x4, 0xffffffff, 0x4, 0x0, 0x2, 0x3ff, 0x5, 0x5, 0xc, 0x8, 0x10, 0x0, 0xfffffffa, 0x1, 0x8000, 0x3, 0x10, 0x0, 0x5, 0x6, 0x4, 0x5, 0x6, 0xfff, 0xcc7, 0x6, 0x7, 0x100, 0x8, 0x6, 0x0, 0x10000, 0x8, 0x4, 0x7, 0x10, 0x4, 0x9, 0x9, 0x8, 0x5, 0x0, 0x2, 0xd, 0x7, 0xfffffc00, 0x81, 0x6, 0x401, 0x9, 0x0, 0x6, 0x221, 0x3, 0x0, 0x80000001, 0xf8d, 0x10, 0xfffffff2, 0x8, 0x4, 0x7, 0x0, 0x4, 0x800, 0xe67d, 0x0, 0xf, 0x8001, 0x1ff, 0x200, 0x8000, 0x5, 0xfffffe00, 0xfffffffa, 0x7fffffff, 0x1, 0x800, 0x10, 0x4, 0xcd, 0x3, 0x2e]}]}]}}]}, 0x1a18}, 0x1, 0x0, 0x0, 0xc48d1}, 0x4004010) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000140)={'wlan1\x00', &(0x7f0000000040)=@ethtool_gstrings={0x1b, 0x1}}) 15.306208366s ago: executing program 1 (id=412): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) openat$full(0xffffff9c, &(0x7f00000003c0), 0x123300, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x44, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) (async) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x48200, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) (async) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000007c0)={0x52, 0x2, r5}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r5, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, 0x0, 0x0) (async) connect$inet6(r6, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) 14.759852052s ago: executing program 0 (id=414): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="3c00238006000d000400000008001400a2ffffff060016a214000000050013"], 0x6c}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) 11.653237748s ago: executing program 1 (id=415): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x248, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x1f8, 0x8, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x168, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xfc, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x4c, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x2f}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2767b524f45e9dfaf001c414581741c92349c3b6661d9864680582bd184ef1a6"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x248}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0xffffffffffffffff, 0x7, 0x0, 0x0, 0x5, 0x3, 0xfffffffffffffffc, 0x800000]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x9, {0xa15c, 0x404, 0x7, 0xffffffff}}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0xfa) connect$inet(r7, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_open_dev$sndpcmp(0x0, 0x802000, 0x210000) 11.594339191s ago: executing program 0 (id=416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r1, 0x4}, 0x38) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008000200ac1414000c0002800500010000000000240001801400018008000100ac000200ac1414bb0c000280050001"], 0x80}}, 0x0) 11.418572551s ago: executing program 3 (id=417): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000004900)=[{{&(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000016c0), 0x0, &(0x7f0000001700)=""/248, 0xf8}, 0x3}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001800)=""/239, 0xef}, {&(0x7f0000001900)=""/37, 0x25}, {&(0x7f0000001940)=""/157, 0x9d}, {&(0x7f0000001a00)=""/122, 0x7a}, {&(0x7f0000001a80)=""/167, 0xa7}], 0x5, &(0x7f0000001bc0)=""/69, 0x45}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001c40)=""/40, 0x28}, {&(0x7f0000001c80)=""/114, 0x72}, {&(0x7f0000001d00)=""/28, 0x1c}, {&(0x7f0000001d40)=""/17, 0x11}, {&(0x7f0000001d80)=""/11, 0xb}, {&(0x7f0000001dc0)=""/83, 0x53}, {&(0x7f0000001e40)=""/74, 0x4a}, {&(0x7f0000001ec0)=""/231, 0xe7}, {&(0x7f0000001fc0)=""/158, 0x9e}], 0x9, &(0x7f0000002140)=""/109, 0x6d}}, {{&(0x7f00000021c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000002280)=[{&(0x7f0000002240)=""/5, 0x5}], 0x1}, 0xfffffffe}, {{&(0x7f00000022c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002340)=""/181, 0xb5}, {&(0x7f0000002400)=""/224, 0xe0}, {&(0x7f0000002500)=""/171, 0xab}], 0x3, &(0x7f0000002600)=""/165, 0xa5}, 0x9}, {{&(0x7f00000026c0)=@caif=@dgm, 0x80, &(0x7f00000048c0)=[{&(0x7f0000002740)=""/164, 0xa4}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/178, 0xb2}, {&(0x7f00000038c0)=""/4096, 0x1000}], 0x4}}], 0x6, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x6, @private1, 0x4}], 0x1c) socketpair$unix(0x1, 0x2, 0x0, 0x0) gettid() mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) r3 = syz_io_uring_setup(0x6, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x31a}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x6000, @fd=r2, 0x5, &(0x7f0000000040)=[{&(0x7f0000000140)=""/65, 0x41}], 0x1, 0x14}) io_uring_enter(r3, 0x47ba, 0x0, 0x4000000000000000, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x441, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2b442, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x0) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r7 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) syz_clone(0x246c209d078b9ce5, 0x0, 0x0, 0x0, 0x0, 0x0) 11.111698717s ago: executing program 4 (id=418): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001a000100000000000000000002002000000000000000000008000100e000000108000300", @ANYRES8=r0], 0x34}}, 0x20000000) 10.856137708s ago: executing program 0 (id=419): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000004140)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x10000}], 0x4, 0xa0, 0x0) 10.42543256s ago: executing program 0 (id=420): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000) r1 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) memfd_create(&(0x7f00000001c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xf7\x00d2*Nha\x97\xd5\f\xde@\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\x91\xeb\xfc_q\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1a\x81]\x01*\x1b\xfd\xbcMA\xdcq\xa1b\x17\xab\xe4\x14l\x9b$\x13\xa7\x00MO\xb8\xfdX\xaaf*Du\x02z\x89(\xbcu\x9e\xdf\xe7es\xb9\x1e\xb2\x83\xdc\x82\xed\xcf\x1e\xff\x00\x00\x00\x00g\xa2-\xb1\x94\x9b\x04\x899\xf25\xae\xbb[C\x8aH\xa0\xb1\xa4&\xfb\xe4\xae\xf9R[jQ\x92\xc6K\xe6U\xaa3\xeb\x93\x84bIn\xc9\x11e\xf6;\xce\xee\xe2\x84]\x1eF\xee\xaf\x97Md\xbb\xd1}\x91\x12`\x02\xaa\xb2\xe8F7\t\x92\xedO`\xf7jc\x00\x11|]\x13\xaa<)0\x95-\xe7\xc5\xceuB\xba\xd5\x10\x1d4\x8f@\xfd6\xed?\xe5\xb7\x9d\xb7\xc3+m\x94\xf7\x00g\xa8\xd0y\xaa\x86\f?c\x8c.\x05\n\xf1\x9dw8\xbb\xcf\x9a\xfewx\xb7\xea\xb0\xe0\xa2\xa6/u\x18\xb8\x912g\x19\xcauw\xa8\x93\x80h\xad\x04\xf9sCB?b?\x1a\x04\x11U\xac\b\x9b\xd3\x04\xd9\xdb\xa3?qny\x19f{F\xb0\xb2\xc6\xe9\x1f\x13\x14\xbb\xde\x06\x16\b\x95^q\x0f\xc6\x16\xfeG\xf9\xf3D\xe9:\x86\xc8!4\xa0+\xba\x87\xdd\xbc\xbd\x93\xbb\xef*:\x00Ld\x00'/408, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000080), 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000002700010000000000000800000a0101000000000000000000", @ANYBLOB="661ad9e1db294420a6d3dc028cf7c37d608f632fe8c60cce18fa46a107648963a29ee0db6324f20b7d677a501a884c64a02dffbbbec954fcf316c4a3", @ANYBLOB], 0x50}}, 0x0) mkdirat(r2, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0xffffffff) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 10.187950645s ago: executing program 4 (id=421): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010000000000000000000a010100000000000000000000000000e0000002000000000000000000000000fffd0000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000840000000000000000e3ffa96300400000000000000000000000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000002000ffffffff00000000000000000000000000000000000320"], 0xfc}}, 0x4009000) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000107afffe800000000003000000000000000000ff020000000000000000000000000001"], 0x0) 10.025455813s ago: executing program 4 (id=422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078005001500820000000800124000800000050005000a0000000500010006000a0012000300686173683a6e65742c706f7274000000dfa08d0bf91bd058"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 9.602346119s ago: executing program 4 (id=423): socket$netlink(0x10, 0x3, 0xa) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff25, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket(0x9, 0x2, 0xffa) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2, 0x10}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtfilter={0x24, 0x28, 0xd27, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) (async) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) (async) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0x1e0, 0x3f, 0x32, 0x1, 0x19, 0x0, {}, {}, {}, {0x0, 0x0, 0x4000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockname$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) 9.323773236s ago: executing program 0 (id=424): syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402", @ANYBLOB="94"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = fsopen(&(0x7f0000000200)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r1, 0x400454ce, r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x3, 0xfff, 0x0, 0xb49, 0xc, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2003, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='@&--)]]\x00', &(0x7f0000000380)='\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r6, &(0x7f0000000780)=[{&(0x7f00000004c0)='5', 0x2b}], 0x1) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x6, 0x8db, 0x3}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=@newtfilter={0x30, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) syz_open_dev$video(0x0, 0x9, 0x101002) madvise(&(0x7f000003e000/0x3000)=nil, 0x3000, 0x14) 9.102581596s ago: executing program 4 (id=425): openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)) socket(0x11, 0x800000003, 0xffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100003a370520c35fbf250500010203010902"], 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000040000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 8.582295413s ago: executing program 2 (id=426): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}, 0x80000000}], 0x1, 0x20, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffde, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000030000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aaff0000000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac1414bb000000000000000000000000fc02000000000000000000000000000064010102000000000000000000000000fe8000000000000000000000000000323c"], 0x184}}, 0x0) 7.947929726s ago: executing program 3 (id=427): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1b, 0x1f}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a"], 0x54}}, 0x0) 7.492279803s ago: executing program 2 (id=428): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700008000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) 7.261733854s ago: executing program 3 (id=429): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="40020000020000ff81ff00"], 0x240) 6.835968312s ago: executing program 3 (id=430): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000004140)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x10000}], 0x4, 0xa0, 0x0) 6.613255601s ago: executing program 1 (id=431): r0 = timerfd_create(0x0, 0x80000) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, 0x0, 0x0) getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pivot_root(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="7472836c6f636b206d656d00"], 0xc) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="980000001000030500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800e00010069703665727370616e0000001c000280060002002f00000005001600020000000500170000000000050027007f000000050011000900000008001c00", @ANYRES32, @ANYBLOB="08001f00060000001d002400a0b302517ef9187b62c4eb4c653521cc01d2f9ecb214751e42000000080013"], 0x98}, 0x1, 0x0, 0x0, 0x8041}, 0x4) ptrace(0x10, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) socket$kcm(0xa, 0x2, 0x3a) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r7) sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000884}, 0x24000004) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x40045017, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 6.472912598s ago: executing program 2 (id=432): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x98b, &(0x7f0000000280)={0x0, 0x9bee, 0x8, 0xfffffffd, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x68, 0x3, r4, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x40000020, 0x1, {0x2}}) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000780)={"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"}) (async) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000780)={"37254072b4e7d8e69029b71b07095d5421e9e4832c619ed053020d7c8c77a5bf8e3ebaaa02ea0f26228e65db8491213515b7d02890fd896e724711b8afb286304c8c1def1f0114409b9854bb44262e7bee9fccc1027413669111a886b7721d17517fedf34d7231fa43a415c67976ea39467a656edca72f30a74e54ecaa602f41fbf7f725d83b6bd9a639cf1e4937d611328a2990992adabc5622397374d63eb69d69c17357745405000000df71bcda74931f482af37784c8ff04e4d9d0b231ff557a21c510a3e91a2a532811c71ab9c91883fed710c229f2e388e7da4283f6ececb7e40de393be053c147a6a659ef96f4d910db86dde66ad5b54db066e715c0c6698159ab4d0e9fb4fde9c9f0e12de9b39d94209e607ecf9e7f28a29f3559150f87ec8a670e162707e427abd2c8d8dbbd685f9a5908ff6fc85deff8257b0ddceb830db4fc6ad5e7a21e85e00f619362b1053b9fbcaec2a8d5476d0f77693b4db2a728add2260550ec610332cf5bcf5bdd2c2f68d4d357d3f304c484639d4be87cca1125217652d2991fdceec152eabdd1c4ee8ce1a5da632d740b192ad26b1871822ee62635da808b625c50963656a7b2b3dec08f211878de91b1c468a659a27771dacdb9ff427e24faeea1ff563cf34b713472001708756a6d282cf9d82dffe804d266735d39c195454ece75f4e231b1ee24c4d9c88e236e2303fabb687ceea94caf33bb6a4c614a407c5280766ea398b8b7d32b255949a91fa7dcc1a53ebfe15b75c684520cef2ce2bbae66a460df76ad2993651c63ded96627fb67ada7946fc600d4dc61a67f2007d77ea9516b44a6d5050c66de2a2d3bbb60c92d80135a2d5c50ef6b731c031a810d38dbfa39b7b84fc8d6cf8775d5ca0ce9627cdd85a0ad33f9ccaa24fa1d4a070a3b67d9f9b5ef76a3a3e07cf2f9d62cb2cfcf5bd6d1fd026e5e39eb85d8539195fac7d7c817dbbfb19303a7b240bca32ffe195bc759ee0a1dd8c8882cf25ce30a39a947f24a4cb2baf39205b6d4a2e8f76f1cc0674931188a9ddc0920f8ff33c8dc761bd9e04c085df56a4c1f0eab3b2310fb06890fc610addf5e6b23b6dc619ea9e117ded62328625e2964c303241f72fd6f0211fb3520e8a5542747e867d19e2570f9e49d7eacdf0694bd9ded32fe3a5244c093f7d44fcdf51a42f2dea48eb3e8524ec3685ad9476a80297046241de1a06f8a8f54f8347935aac74cf9bbbae4036862d92548db56698a131afeb8a91ba4c3156520af533fd876e59e27ece188c4220bac2041aeb904fae1bf589cea3ac97d5c76e4a233508f4fabcf2b98a4a4c8ba239713e507df1a77d6ff8643c177a451a697afc6a82b42fa3edaff8b7ccff90b0c22a03c119147e547d029f216f40099ef2b8fbac00"}) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x0, 0x1, 0x0, 0x0, 0x8, 0xfc, 0x10, 0x0, 0xfc, 0xff, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0xfb, 0xff, '\x00', 0x4}) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000240)=@arm64) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd29, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r10}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}]}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000540)={{0x2, 0x4e20, @private=0xa010102}, {0x306, @random="15d5a788e303"}, 0x12, {0x2, 0x4e23, @private=0xa010100}, 'gre0\x00'}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) (async) r15 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_TPR_ACCESS_REPORTING(r15, 0xc028ae92, &(0x7f0000000440)={0x3, 0x7}) (async) ioctl$KVM_TPR_ACCESS_REPORTING(r15, 0xc028ae92, &(0x7f0000000440)={0x3, 0x7}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0xc4, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa3c9ca3c43de5dde}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x35}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10001}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2a}]}, 0xc4}, 0x1, 0x0, 0x0, 0x608c0}, 0x0) io_uring_enter(r1, 0x52de, 0xf62e, 0x8, 0x0, 0x0) (async) io_uring_enter(r1, 0x52de, 0xf62e, 0x8, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 5.7504212s ago: executing program 3 (id=433): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x81000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000000c0)=0x7) connect$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x401, @remote, 0x6}}, 0x24) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000280)={r6, 0x11, 0x6}, 0x10) syz_open_dev$vim2m(0x0, 0x3fe, 0x2) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x10}, {0x0, 0xc}}}, 0x24}}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000003010040"]) 4.939651531s ago: executing program 0 (id=434): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000a40)=""/87) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) keyctl$session_to_parent(0x12) close(r0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="700000000202010200000000000000000a0000015c00028006000340000200000c00028005000100060000000c000280050001002f0000000c00028004000100210000002c00018014000300fc020000ba0000000000000000000010140004"], 0x70}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r5}, 0x10) sendmsg$can_raw(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@canfd={{0x4}, 0x38, 0x0, 0x0, 0x0, "c058ac941b9095e9240914a4f39832947f594f21ed99d9389d65e965923ca5cfc18d0d718c15ffbab7d2f2bc23b9328eb5be0cb1e0d6ec5d0abb98694fc2af88"}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004050) 4.683854983s ago: executing program 2 (id=435): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) lstat(0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={0x0, 0x48}}, 0x0) close(0xffffffffffffffff) r3 = getpid() syz_pidfd_open(r3, 0x0) sched_setattr(r3, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000340)) setrlimit(0xf, 0x0) gettid() openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x600) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r5, 0xc00464be, &(0x7f0000000300)) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[], 0x0) r6 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r6, r7, r7}, &(0x7f0000000540)=""/204, 0xcc, &(0x7f00000003c0)={&(0x7f0000000340)={'streebog512\x00'}}) unshare(0x42040200) 4.180676388s ago: executing program 3 (id=436): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000200)=0x33) socketpair$unix(0x1, 0x2, 0x0, 0x0) pselect6(0x40, &(0x7f0000000940)={0x0, 0x0, 0xcf, 0x4, 0x6, 0xffffffff00000000, 0xffffffffffffffff, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0xb000200, 0x0, 0x9, 0x8}, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="1713d50800000024ec", 0x9, 0x10008095, 0x0, 0x0) 3.530421741s ago: executing program 4 (id=437): r0 = timerfd_create(0x0, 0x80000) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, 0x0, 0x0) getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pivot_root(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="7472836c6f636b206d656d00"], 0xc) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="980000001000030500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800e00010069703665727370616e0000001c000280060002002f00000005001600020000000500170000000000050027007f000000050011000900000008001c00", @ANYRES32, @ANYBLOB="08001f00060000001d002400a0b302517ef9187b62c4eb4c653521cc01d2f9ecb214751e42000000080013"], 0x98}, 0x1, 0x0, 0x0, 0x8041}, 0x4) ptrace(0x10, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) socket$kcm(0xa, 0x2, 0x3a) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r7) sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000884}, 0x24000004) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x40045017, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 2 (id=438): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000020000010d422031500000000000109022400010000000009040000010300b53c00000921050000012205000905810300020000056f87cbf64ef086982abee9981f5d47e09cc90d"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c40000000000000000000000000000e300000000008000", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"3c2486910284ed923431d4c5d5fbf514fd00", r4, 0xffffffffffffffff}) poll(&(0x7f0000000280)=[{r5, 0xb8bc10844956f15d}], 0x1, 0x1) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000040)=0xa45) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x2], [0x0, 0x1], [0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]], '\x00', [{0x0, 0xf8}, {}, {0xffffffff}, {0x0, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {0xfffffff8}], '\x00', 0x1, 0x0, 0x0, 0xf8}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, 0x0, 0x0) r9 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x1000, 0x0, 0x0, 0x0, r8}, &(0x7f0000000080), &(0x7f00000001c0)) io_uring_enter(r9, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000240)=ANY=[@ANYRES8=r10, @ANYRES32, @ANYBLOB="000000000000fdffffffffffffffff0000000f1da4ab0d4ad7c3dc4d2f33a53d9d1343beed8371397cd36c8ffabcb7165c89d10992a0417174", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r11, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r11, 0x407, 0x10005) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_settime(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 0][ T5956] R13: 0000000000000000 R14: 00007f272b1b5fa0 R15: 00007f272b2dfa28 [ 97.290654][ T5956] [ 97.670573][ T5937] udevd[5937]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.740690][ T5965] FAULT_INJECTION: forcing a failure. [ 97.740690][ T5965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.816216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.834274][ T5965] CPU: 1 UID: 0 PID: 5965 Comm: syz.0.18 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 97.834299][ T5965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 97.834310][ T5965] Call Trace: [ 97.834317][ T5965] [ 97.834342][ T5965] dump_stack_lvl+0x241/0x360 [ 97.834377][ T5965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.834405][ T5965] ? __pfx__printk+0x10/0x10 [ 97.834442][ T5965] should_fail_ex+0x424/0x570 [ 97.834476][ T5965] _copy_to_user+0x31/0xb0 [ 97.834504][ T5965] simple_read_from_buffer+0xc4/0x170 [ 97.834536][ T5965] proc_fail_nth_read+0x1ef/0x260 [ 97.834558][ T5965] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.834589][ T5965] ? rw_verify_area+0x246/0x630 [ 97.834614][ T5965] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.834634][ T5965] vfs_read+0x21f/0xb90 [ 97.834664][ T5965] ? __pfx___mutex_lock+0x10/0x10 [ 97.834686][ T5965] ? __pfx_vfs_read+0x10/0x10 [ 97.834715][ T5965] ? __fget_files+0x2a/0x420 [ 97.834734][ T5965] ? __fget_files+0x39d/0x420 [ 97.834751][ T5965] ? __fget_files+0x2a/0x420 [ 97.834778][ T5965] ksys_read+0x19d/0x2d0 [ 97.834806][ T5965] ? __pfx_ksys_read+0x10/0x10 [ 97.834838][ T5965] ? do_syscall_64+0xb6/0x210 [ 97.834861][ T5965] do_syscall_64+0xf3/0x210 [ 97.834891][ T5965] ? clear_bhb_loop+0x45/0xa0 [ 97.834930][ T5965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.834947][ T5965] RIP: 0033:0x7f272af8cb7c [ 97.834963][ T5965] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 97.834978][ T5965] RSP: 002b:00007f272be55030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.834998][ T5965] RAX: ffffffffffffffda RBX: 00007f272b1b5fa0 RCX: 00007f272af8cb7c [ 97.835011][ T5965] RDX: 000000000000000f RSI: 00007f272be550a0 RDI: 0000000000000003 [ 97.835023][ T5965] RBP: 00007f272be55090 R08: 0000000000000000 R09: 0000000000000000 [ 97.835034][ T5965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.835045][ T5965] R13: 0000000000000001 R14: 00007f272b1b5fa0 R15: 00007f272b2dfa28 [ 97.835073][ T5965] [ 97.923781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 98.194829][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.213600][ T5895] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.293679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.302933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.353765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.432493][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 98.490773][ T5895] usb 2-1: config 0 has no interfaces? [ 98.501311][ T24] usb 4-1: config 0 has no interfaces? [ 98.523104][ T24] usb 4-1: New USB device found, idVendor=5fc3, idProduct=25bf, bcdDevice= 0.05 [ 98.535981][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.560599][ T24] usb 4-1: Product: syz [ 98.570422][ T24] usb 4-1: Manufacturer: syz [ 98.587545][ T24] usb 4-1: SerialNumber: syz [ 98.592337][ T5895] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 98.605681][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.625143][ T24] usb 4-1: config 0 descriptor?? [ 98.644196][ T5895] usb 2-1: Product: syz [ 98.663418][ T5895] usb 2-1: Manufacturer: syz [ 98.668075][ T5895] usb 2-1: SerialNumber: syz [ 98.710861][ T5895] usb 2-1: config 0 descriptor?? [ 98.853944][ T5963] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17'. [ 98.893679][ T5963] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17'. [ 98.949848][ T5961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.958644][ T5961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.005922][ T5963] dummy0: entered promiscuous mode [ 99.058204][ T5963] dummy0: left promiscuous mode [ 99.443217][ T5895] usb 4-1: USB disconnect, device number 3 [ 100.430618][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 100.596912][ T5857] usb 2-1: USB disconnect, device number 2 [ 100.687945][ T5997] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[5997] [ 100.720292][ T5997] netlink: 'syz.0.23': attribute type 21 has an invalid length. [ 100.728159][ T5997] netlink: 128 bytes leftover after parsing attributes in process `syz.0.23'. [ 100.803126][ T5997] netlink: 'syz.0.23': attribute type 4 has an invalid length. [ 100.818213][ T5997] netlink: 3 bytes leftover after parsing attributes in process `syz.0.23'. [ 101.031741][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 101.051450][ T6005] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 101.059764][ T6005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.856566][ T6001] ALSA: mixer_oss: invalid OSS volume 'PHO' [ 102.523431][ T975] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 102.747194][ T975] usb 5-1: config 0 has no interfaces? [ 102.771527][ T975] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 102.843062][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.905620][ T975] usb 5-1: Product: syz [ 102.918266][ T975] usb 5-1: Manufacturer: syz [ 102.933218][ T975] usb 5-1: SerialNumber: syz [ 103.103365][ T6021] ALSA: mixer_oss: invalid OSS volume 'PHO' [ 103.149091][ T975] usb 5-1: config 0 descriptor?? [ 103.243745][ T5857] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.480585][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.517641][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.558276][ T975] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.653260][ T5857] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 103.712992][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.717113][ T6040] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.786250][ T5857] usb 2-1: config 0 descriptor?? [ 104.215120][ T5857] samsung 0003:0419:0600.0001: item fetching failed at offset 2/5 [ 104.270302][ T975] usb 1-1: config 0 has no interfaces? [ 104.288800][ T975] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 104.290478][ T5857] samsung 0003:0419:0600.0001: parse failed [ 104.298188][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.319383][ T5857] samsung 0003:0419:0600.0001: probe with driver samsung failed with error -22 [ 104.393226][ T975] usb 1-1: Product: syz [ 104.403166][ T975] usb 1-1: Manufacturer: syz [ 104.429761][ T6034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.443429][ T975] usb 1-1: SerialNumber: syz [ 104.455381][ T975] usb 1-1: config 0 descriptor?? [ 104.544654][ T6034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.614642][ T975] usb 2-1: USB disconnect, device number 3 [ 104.710654][ T6038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.721347][ T6038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.703894][ T5895] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.020864][ T9] usb 5-1: USB disconnect, device number 3 [ 106.232345][ T6069] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 106.437659][ T5895] usb 3-1: config 0 has no interfaces? [ 106.446820][ T5895] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 106.455922][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.463956][ T5895] usb 3-1: Product: syz [ 106.468109][ T5895] usb 3-1: Manufacturer: syz [ 106.472690][ T5895] usb 3-1: SerialNumber: syz [ 106.484971][ T5895] usb 3-1: config 0 descriptor?? [ 107.088652][ T6077] program syz.3.53 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.103946][ T6079] program syz.3.53 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.967212][ T6074] ALSA: mixer_oss: invalid OSS volume 'PHO' [ 108.161469][ T975] usb 1-1: USB disconnect, device number 2 [ 108.618839][ T6092] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.705082][ T6088] : renamed from bond_slave_0 (while UP) [ 109.063435][ T5895] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 109.071117][ T3084] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 109.165175][ T24] usb 3-1: USB disconnect, device number 3 [ 109.238639][ T5895] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.251988][ T3084] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 109.272610][ T5895] usb 2-1: config 0 has no interface number 0 [ 109.279039][ T3084] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.299600][ T5895] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.321384][ T3084] usb 5-1: Product: syz [ 109.329457][ T3084] usb 5-1: Manufacturer: syz [ 109.336560][ T5895] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.353397][ T3084] usb 5-1: SerialNumber: syz [ 109.374417][ T3084] usb 5-1: config 0 descriptor?? [ 109.379642][ T5895] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 109.395865][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.416238][ T5895] usb 2-1: config 0 descriptor?? [ 109.526193][ T5857] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 109.688341][ T5857] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 109.744507][ T5857] usb 4-1: config 0 has no interface number 0 [ 109.765098][ T5857] usb 4-1: config 0 interface 122 has no altsetting 0 [ 109.779652][ T5857] usb 4-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 109.790549][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.802907][ T5857] usb 4-1: Product: syz [ 109.807568][ T5857] usb 4-1: Manufacturer: syz [ 109.812328][ T5857] usb 4-1: SerialNumber: syz [ 109.822624][ T5857] usb 4-1: config 0 descriptor?? [ 109.943230][ T5895] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.0002/input/input5 [ 110.047838][ T3084] usb 5-1: Firmware: major: 238, minor: 4, hardware type: UNKNOWN (149) [ 110.102310][ T6108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.132762][ T6108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.166343][ T5895] holtek_kbd 0003:04D9:A055.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1 [ 110.254083][ T5895] usb 4-1: USB disconnect, device number 4 [ 110.279086][ T5895] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 110.293961][ T6111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.384680][ T6111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.081520][ T3084] usb 5-1: failed to fetch extended address, random address set [ 111.118767][ T3084] usb 5-1: atusb_probe: initialization failed, error = -524 [ 111.152898][ T3084] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 111.176121][ T3084] usb 5-1: USB disconnect, device number 4 [ 111.224029][ T5857] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 112.233842][ T3084] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 112.400355][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69'. [ 112.442607][ T6133] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 112.484018][ T3084] usb 1-1: config 0 has no interfaces? [ 112.501405][ T6133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.527768][ T3084] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 112.537105][ T3084] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.545811][ T3084] usb 1-1: Product: syz [ 112.614808][ T3084] usb 1-1: Manufacturer: syz [ 112.682793][ T3084] usb 1-1: SerialNumber: syz [ 112.710265][ T3084] usb 1-1: config 0 descriptor?? [ 112.953164][ T6127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.962465][ T6127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.120352][ T24] usb 2-1: USB disconnect, device number 4 [ 113.564933][ T5857] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 113.795865][ T5857] usb 5-1: config 0 has no interfaces? [ 113.804614][ T5857] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 113.813862][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.889833][ T5857] usb 5-1: Product: syz [ 113.914977][ T5857] usb 5-1: Manufacturer: syz [ 113.931581][ T5857] usb 5-1: SerialNumber: syz [ 113.950293][ T5857] usb 5-1: config 0 descriptor?? [ 114.556493][ T6153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.75'. [ 114.617761][ T6153] netlink: 'syz.1.75': attribute type 27 has an invalid length. [ 114.801912][ T3084] usb 1-1: USB disconnect, device number 3 [ 114.989714][ T6153] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.997771][ T6153] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.534294][ T6153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.560635][ T6153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.897885][ T6153] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.907249][ T6153] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.922575][ T6153] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.933735][ T6153] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.252528][ T9] usb 5-1: USB disconnect, device number 5 [ 116.555952][ T5893] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.637310][ T6182] mmap: syz.0.84 (6182) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 116.687116][ T6184] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 116.713599][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 116.748920][ T5893] usb 4-1: config 0 has no interfaces? [ 116.771194][ T5893] usb 4-1: New USB device found, idVendor=5fc3, idProduct=25bf, bcdDevice= 0.05 [ 116.786592][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.807454][ T5893] usb 4-1: Product: syz [ 116.811807][ T5893] usb 4-1: Manufacturer: syz [ 116.820780][ T5893] usb 4-1: SerialNumber: syz [ 116.830358][ T5893] usb 4-1: config 0 descriptor?? [ 116.933621][ T5857] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 116.989241][ T6186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.005972][ T6186] syz.2.86 uses obsolete (PF_INET,SOCK_PACKET) [ 117.029764][ T6186] Zero length message leads to an empty skb [ 117.043676][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.046213][ T6171] netlink: 28 bytes leftover after parsing attributes in process `syz.3.82'. [ 117.078758][ T6171] netlink: 28 bytes leftover after parsing attributes in process `syz.3.82'. [ 117.094334][ T5857] usb 5-1: Using ep0 maxpacket: 8 [ 117.107479][ T5857] usb 5-1: unable to get BOS descriptor or descriptor too short [ 117.120129][ T6171] dummy0: entered promiscuous mode [ 117.128553][ T5857] usb 5-1: config 8 has an invalid interface number: 24 but max is 1 [ 117.140920][ T5857] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 117.154067][ T5857] usb 5-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 117.163057][ T5857] usb 5-1: config 8 has no interface number 0 [ 117.174487][ T6171] dummy0: left promiscuous mode [ 117.192425][ T5857] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 117.217283][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 117.225046][ T5857] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 117.234446][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.246394][ T5857] usb 5-1: config 8 interface 24 has no altsetting 0 [ 117.255009][ T975] usb 4-1: USB disconnect, device number 5 [ 117.274613][ T5857] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 117.286526][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.310160][ T5857] usb 5-1: Product: syz [ 117.318014][ T5857] usb 5-1: Manufacturer: syz [ 117.322757][ T9] usb 1-1: config 0 descriptor?? [ 117.327993][ T5857] usb 5-1: SerialNumber: syz [ 117.335669][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 117.603619][ T5857] vmk80xx 5-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 117.622899][ T5857] vmk80xx 5-1:8.24: probe with driver vmk80xx failed with error -22 [ 117.659356][ T5857] usb 5-1: USB disconnect, device number 6 [ 117.673683][ T5893] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 117.961486][ T5893] usb 3-1: config 0 has no interfaces? [ 117.971940][ T5893] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 117.995006][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.003388][ T5893] usb 3-1: Product: syz [ 118.007592][ T5893] usb 3-1: Manufacturer: syz [ 118.013779][ T5893] usb 3-1: SerialNumber: syz [ 118.021377][ T5893] usb 3-1: config 0 descriptor?? [ 118.253702][ T6190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.263540][ T6190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.703434][ T975] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 118.801834][ T6209] netlink: 'syz.4.92': attribute type 32 has an invalid length. [ 119.006362][ T975] usb 2-1: Using ep0 maxpacket: 16 [ 119.065281][ T975] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 119.091494][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.130756][ T975] usb 2-1: Product: syz [ 119.142531][ T975] usb 2-1: Manufacturer: syz [ 119.149969][ T975] usb 2-1: SerialNumber: syz [ 119.163681][ T5923] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 119.204664][ T975] r8152-cfgselector 2-1: Unknown version 0x0000 [ 119.210980][ T975] r8152-cfgselector 2-1: config 0 descriptor?? [ 119.351219][ T5923] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 119.379694][ T5923] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 119.388184][ T5923] usb 5-1: can't read configurations, error -61 [ 119.643526][ T24] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 119.731900][ T5923] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 119.740774][ T9] usb 1-1: USB disconnect, device number 4 [ 119.787993][ T24] usb 4-1: device descriptor read/64, error -71 [ 119.987333][ T5923] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 120.053446][ T24] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 120.087174][ T5923] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 120.094894][ T5923] usb 5-1: can't read configurations, error -61 [ 120.101481][ T5923] usb usb5-port1: attempt power cycle [ 120.323503][ T24] usb 4-1: device descriptor read/64, error -71 [ 120.443458][ T5923] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 120.478278][ T24] usb usb4-port1: attempt power cycle [ 120.486576][ T5923] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 120.535142][ T5923] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 120.557441][ T5923] usb 5-1: can't read configurations, error -61 [ 120.703714][ T5923] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 120.719288][ T9] usb 3-1: USB disconnect, device number 4 [ 120.743894][ T5923] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 120.768649][ T5923] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 120.789273][ T5923] usb 5-1: can't read configurations, error -61 [ 120.843577][ T24] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 120.861539][ T5923] usb usb5-port1: unable to enumerate USB device [ 120.904212][ T24] usb 4-1: device descriptor read/8, error -71 [ 121.263467][ T24] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 121.289556][ T975] r8152-cfgselector 2-1: Unknown version 0x0000 [ 121.296111][ T24] usb 4-1: device descriptor read/8, error -71 [ 121.331850][ T975] r8152-cfgselector 2-1: bad CDC descriptors [ 121.421642][ T24] usb usb4-port1: unable to enumerate USB device [ 121.431605][ T975] r8152-cfgselector 2-1: USB disconnect, device number 5 [ 121.757828][ T6242] x_tables: duplicate underflow at hook 1 [ 121.911146][ T6227] ALSA: mixer_oss: invalid OSS volume 'PHO' [ 122.692051][ T6271] netlink: 140 bytes leftover after parsing attributes in process `syz.0.109'. [ 122.739137][ T6271] netlink: 140 bytes leftover after parsing attributes in process `syz.0.109'. [ 122.836469][ T6275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.112'. [ 122.944113][ T5923] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 123.021024][ T6275] netlink: 'syz.2.112': attribute type 4 has an invalid length. [ 123.093423][ T5923] usb 2-1: device descriptor read/64, error -71 [ 123.185085][ T6289] FAULT_INJECTION: forcing a failure. [ 123.185085][ T6289] name failslab, interval 1, probability 0, space 0, times 1 [ 123.219617][ T6289] CPU: 0 UID: 0 PID: 6289 Comm: syz.3.117 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 123.219648][ T6289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 123.219661][ T6289] Call Trace: [ 123.219669][ T6289] [ 123.219677][ T6289] dump_stack_lvl+0x241/0x360 [ 123.219744][ T6289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.219774][ T6289] ? __pfx__printk+0x10/0x10 [ 123.219816][ T6289] should_fail_ex+0x424/0x570 [ 123.219854][ T6289] should_failslab+0xac/0x100 [ 123.219878][ T6289] __kmalloc_cache_noprof+0x73/0x370 [ 123.219899][ T6289] ? sctp_add_bind_addr+0x89/0x3a0 [ 123.219934][ T6289] sctp_add_bind_addr+0x89/0x3a0 [ 123.219963][ T6289] sctp_copy_local_addr_list+0x313/0x500 [ 123.219990][ T6289] ? sctp_copy_local_addr_list+0xad/0x500 [ 123.220016][ T6289] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 123.220045][ T6289] ? sctp_v4_is_any+0x35/0x60 [ 123.220068][ T6289] ? sctp_copy_one_addr+0x94/0x360 [ 123.220097][ T6289] sctp_bind_addr_copy+0xad/0x3b0 [ 123.220121][ T6289] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 123.220158][ T6289] sctp_connect_new_asoc+0x337/0x700 [ 123.220191][ T6289] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 123.220222][ T6289] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 123.220255][ T6289] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 123.220282][ T6289] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 123.220308][ T6289] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 123.220340][ T6289] sctp_sendmsg+0x2009/0x3620 [ 123.220392][ T6289] ? __pfx_sctp_sendmsg+0x10/0x10 [ 123.220425][ T6289] ? aa_sk_perm+0x96f/0xac0 [ 123.220469][ T6289] ? inet_sendmsg+0x330/0x390 [ 123.220494][ T6289] __sock_sendmsg+0x1a6/0x270 [ 123.220524][ T6289] ____sys_sendmsg+0x523/0x860 [ 123.220565][ T6289] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.220595][ T6289] ? __fget_files+0x2a/0x420 [ 123.220618][ T6289] ? __fget_files+0x2a/0x420 [ 123.220648][ T6289] __sys_sendmmsg+0x3a0/0x7b0 [ 123.220683][ T6289] ? __pfx___sys_sendmmsg+0x10/0x10 [ 123.220752][ T6289] ? rcu_read_lock_any_held+0xbb/0x160 [ 123.220774][ T6289] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 123.220799][ T6289] ? vfs_write+0xb29/0xd10 [ 123.220848][ T6289] ? ksys_write+0x24e/0x2d0 [ 123.220877][ T6289] ? __mutex_unlock_slowpath+0x229/0x800 [ 123.220933][ T6289] ? ksys_write+0x275/0x2d0 [ 123.220971][ T6289] __x64_sys_sendmmsg+0xa0/0xb0 [ 123.220991][ T6289] do_syscall_64+0xf3/0x210 [ 123.221012][ T6289] ? clear_bhb_loop+0x45/0xa0 [ 123.221034][ T6289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.221052][ T6289] RIP: 0033:0x7eff1a58e169 [ 123.221074][ T6289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.221089][ T6289] RSP: 002b:00007eff1b332038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 123.221113][ T6289] RAX: ffffffffffffffda RBX: 00007eff1a7b5fa0 RCX: 00007eff1a58e169 [ 123.221127][ T6289] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000003 [ 123.221139][ T6289] RBP: 00007eff1b332090 R08: 0000000000000000 R09: 0000000000000000 [ 123.221150][ T6289] R10: 0000000000000844 R11: 0000000000000246 R12: 0000000000000002 [ 123.221161][ T6289] R13: 0000000000000000 R14: 00007eff1a7b5fa0 R15: 00007eff1a8dfa28 [ 123.221190][ T6289] [ 123.541179][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.723387][ T5923] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 123.863676][ T5923] usb 2-1: device descriptor read/64, error -71 [ 123.892274][ T6303] netlink: 24 bytes leftover after parsing attributes in process `syz.2.122'. [ 123.975377][ T5923] usb usb2-port1: attempt power cycle [ 124.028135][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 124.041349][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.123'. [ 124.074786][ T6307] netlink: 36 bytes leftover after parsing attributes in process `syz.2.124'. [ 124.091498][ T6307] netlink: 16 bytes leftover after parsing attributes in process `syz.2.124'. [ 124.121509][ T6307] netlink: 36 bytes leftover after parsing attributes in process `syz.2.124'. [ 124.143123][ T6307] netlink: 36 bytes leftover after parsing attributes in process `syz.2.124'. [ 124.183646][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 124.206297][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 124.263783][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 124.293415][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.317855][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.348671][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 124.358868][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.388855][ T5923] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 124.424123][ T5923] usb 2-1: device descriptor read/8, error -71 [ 124.465099][ T30] audit: type=1326 audit(1744951980.243:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1a58e169 code=0x7ffc0000 [ 124.525362][ T30] audit: type=1326 audit(1744951980.243:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7eff1a58e169 code=0x7ffc0000 [ 124.529444][ T6318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.128'. [ 124.628118][ T24] usb 5-1: GET_CAPABILITIES returned 0 [ 124.638395][ T30] audit: type=1326 audit(1744951980.243:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1a58e169 code=0x7ffc0000 [ 124.662855][ T24] usbtmc 5-1:16.0: can't read capabilities [ 124.679979][ T30] audit: type=1326 audit(1744951980.243:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7eff1a58e169 code=0x7ffc0000 [ 124.703105][ T6318] netlink: 'syz.0.128': attribute type 4 has an invalid length. [ 124.711724][ T5923] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 124.726771][ T30] audit: type=1326 audit(1744951980.243:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1a58e169 code=0x7ffc0000 [ 124.751150][ T30] audit: type=1326 audit(1744951980.243:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff1a58e169 code=0x7ffc0000 [ 124.762637][ T5923] usb 2-1: device descriptor read/8, error -71 [ 124.788040][ T30] audit: type=1326 audit(1744951980.253:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1a58e169 code=0x7ffc0000 [ 124.873616][ T975] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 124.886092][ T30] audit: type=1326 audit(1744951980.253:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7eff1a58e169 code=0x7ffc0000 [ 124.909628][ T9] usb 5-1: USB disconnect, device number 11 [ 124.916249][ T30] audit: type=1326 audit(1744951980.253:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1a58e169 code=0x7ffc0000 [ 124.950326][ T5923] usb usb2-port1: unable to enumerate USB device [ 124.953439][ T30] audit: type=1326 audit(1744951980.253:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7eff1a58e169 code=0x7ffc0000 [ 125.000354][ T6331] netlink: 'syz.2.132': attribute type 4 has an invalid length. [ 125.052268][ T975] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 125.071700][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.089310][ T975] usb 4-1: Product: syz [ 125.094637][ T975] usb 4-1: Manufacturer: syz [ 125.099286][ T975] usb 4-1: SerialNumber: syz [ 125.112408][ T975] usb 4-1: config 0 descriptor?? [ 125.773963][ T975] usb 4-1: Firmware: major: 238, minor: 4, hardware type: UNKNOWN (149) [ 125.905062][ T6348] gretap0: entered promiscuous mode [ 125.988408][ T6351] 0XD: renamed from gretap0 [ 126.024309][ T6351] 0XD: left promiscuous mode [ 126.049666][ T6351] 0XD: entered allmulticast mode [ 126.115507][ T6351] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 126.175133][ T6352] dummy0: entered promiscuous mode [ 126.189148][ T975] usb 4-1: failed to fetch extended address, random address set [ 126.198587][ T975] usb 4-1: atusb_probe: initialization failed, error = -524 [ 126.270798][ T975] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 126.311416][ T6352] macsec1: entered promiscuous mode [ 126.343726][ T6352] macsec1: entered allmulticast mode [ 126.349273][ T6352] dummy0: entered allmulticast mode [ 126.381517][ T975] usb 4-1: USB disconnect, device number 10 [ 126.381838][ T6352] dummy0: left allmulticast mode [ 126.401398][ T6352] dummy0: left promiscuous mode [ 126.645693][ T6359] netlink: 'syz.0.141': attribute type 4 has an invalid length. [ 126.672343][ T6345] delete_channel: no stack [ 127.204130][ T975] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 127.411772][ T5923] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 127.517245][ T975] usb 2-1: config 0 has no interfaces? [ 127.525763][ T975] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 127.537441][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.556029][ T975] usb 2-1: Product: syz [ 127.566348][ T975] usb 2-1: Manufacturer: syz [ 127.570990][ T975] usb 2-1: SerialNumber: syz [ 127.583487][ T5923] usb 1-1: Using ep0 maxpacket: 8 [ 127.633824][ T5923] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 127.655214][ T5923] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 127.671656][ T5923] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.687681][ T975] usb 2-1: config 0 descriptor?? [ 127.723916][ T5923] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.769682][ T5923] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 127.788248][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.161239][ T5923] usb 1-1: GET_CAPABILITIES returned 0 [ 128.176058][ T5923] usbtmc 1-1:16.0: can't read capabilities [ 128.413569][ T5924] usb 1-1: USB disconnect, device number 5 [ 128.831832][ T6391] __nla_validate_parse: 4 callbacks suppressed [ 128.831853][ T6391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.150'. [ 128.863600][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 128.898145][ T6393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.150'. [ 129.040685][ T6398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.153'. [ 129.044051][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 129.099161][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 129.122115][ T24] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 129.158134][ T24] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 129.158337][ T6400] netlink: 24 bytes leftover after parsing attributes in process `syz.3.152'. [ 129.178247][ T24] usb 5-1: Product: syz [ 129.182541][ T24] usb 5-1: Manufacturer: syz [ 129.214517][ T24] usb 5-1: SerialNumber: syz [ 129.231409][ T24] usb 5-1: config 0 descriptor?? [ 129.247369][ T6389] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 129.320921][ T6400] netlink: 'syz.3.152': attribute type 4 has an invalid length. [ 129.389123][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.156'. [ 129.453401][ T5923] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.636849][ T5923] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 129.679383][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.706432][ T5923] usb 1-1: Product: syz [ 129.714794][ T5898] usb 5-1: USB disconnect, device number 12 [ 129.718040][ T5923] usb 1-1: Manufacturer: syz [ 129.736716][ T5923] usb 1-1: SerialNumber: syz [ 129.749949][ T5923] usb 1-1: config 0 descriptor?? [ 130.013735][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 130.097516][ T5857] usb 2-1: USB disconnect, device number 10 [ 130.352552][ T24] usb 4-1: config 0 has no interfaces? [ 130.377215][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 130.388882][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.397065][ T24] usb 4-1: Product: syz [ 130.401487][ T24] usb 4-1: Manufacturer: syz [ 130.406665][ T24] usb 4-1: SerialNumber: syz [ 130.418510][ T24] usb 4-1: config 0 descriptor?? [ 130.433397][ T5898] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 130.528566][ T5923] usb 1-1: Firmware: major: 238, minor: 4, hardware type: UNKNOWN (149) [ 130.606111][ T5898] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 130.643566][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.663053][ T5898] usb 5-1: Product: syz [ 130.667498][ T5898] usb 5-1: Manufacturer: syz [ 130.672473][ T5898] usb 5-1: SerialNumber: syz [ 130.683040][ T5898] usb 5-1: config 0 descriptor?? [ 130.697118][ T5898] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 130.713455][ T5857] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 130.871192][ T5923] usb 1-1: failed to fetch extended address, random address set [ 130.879228][ T5923] usb 1-1: atusb_probe: initialization failed, error = -524 [ 130.883580][ T5857] usb 2-1: Using ep0 maxpacket: 8 [ 130.905686][ T5923] atusb 1-1:0.0: probe with driver atusb failed with error -524 [ 130.929138][ T5857] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 130.948920][ T5857] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 130.948960][ T5923] usb 1-1: USB disconnect, device number 6 [ 130.961027][ T5857] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 130.991915][ T5857] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.009759][ T5857] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.023778][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.247066][ T5857] usb 2-1: GET_CAPABILITIES returned 0 [ 131.259416][ T5857] usbtmc 2-1:16.0: can't read capabilities [ 131.516601][ T6430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.548920][ T6430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.579982][ T5857] usb 2-1: USB disconnect, device number 11 [ 132.023484][ T5923] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 132.203375][ T5923] usb 1-1: Using ep0 maxpacket: 16 [ 132.210755][ T5923] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 132.219810][ T5923] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 132.246215][ T5923] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 132.264523][ T5923] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 132.275944][ T5923] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 132.311425][ T5923] usb 1-1: config 0 has no interface number 0 [ 132.340974][ T5923] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 132.402420][ T5923] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 132.459092][ T5923] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 132.473638][ T5923] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.487070][ T5923] usb 1-1: config 0 interface 125 has no altsetting 2 [ 132.496820][ T5923] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 132.506295][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.564259][ T5923] usb 1-1: Product: syz [ 132.725370][ T5923] usb 1-1: Manufacturer: syz [ 132.730556][ T5923] usb 1-1: SerialNumber: syz [ 132.740543][ T5857] usb 4-1: USB disconnect, device number 11 [ 132.781754][ T5923] usb 1-1: config 0 descriptor?? [ 132.865246][ T6457] netlink: 9 bytes leftover after parsing attributes in process `syz.3.169'. [ 132.887822][ T6457] 0: renamed from hsr0 (while UP) [ 132.889361][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.905563][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.974064][ T6457] 0: entered allmulticast mode [ 132.975061][ T5923] usb 1-1: selecting invalid altsetting 2 [ 132.987381][ T6457] hsr_slave_0: entered allmulticast mode [ 133.007053][ T6457] hsr_slave_1: entered allmulticast mode [ 133.014768][ T6457] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 133.596568][ T6464] netlink: 20 bytes leftover after parsing attributes in process `syz.3.170'. [ 133.993220][ T975] usb 5-1: USB disconnect, device number 13 [ 134.663392][ T5857] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 134.729361][ T5893] usb 1-1: USB disconnect, device number 7 [ 134.813399][ T5857] usb 3-1: Using ep0 maxpacket: 16 [ 134.988459][ T6468] ALSA: mixer_oss: invalid OSS volume 'PHO' [ 135.021094][ T5857] usb 3-1: config index 0 descriptor too short (expected 1828, got 36) [ 135.043246][ T5857] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 135.076571][ T5857] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 135.137292][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 135.158027][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 135.180107][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 135.209670][ T5857] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 135.249755][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.337756][ T5857] usb 3-1: Product: syz [ 135.344436][ T5857] usb 3-1: Manufacturer: syz [ 135.349123][ T5857] usb 3-1: SerialNumber: syz [ 135.384235][ T5857] usb 3-1: config 0 descriptor?? [ 135.393939][ T5924] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 135.398417][ T5857] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 135.442982][ T5857] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 135.467509][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 135.484257][ T5857] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 135.491998][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 135.562442][ T5924] usb 1-1: config 0 has no interfaces? [ 135.570260][ T5924] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 135.604044][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.610865][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 135.634899][ T5857] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 135.655556][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 135.664804][ T5857] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 135.684979][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 135.693694][ T5857] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 135.694925][ T5924] usb 1-1: Product: syz [ 135.729748][ T5857] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 135.737698][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 135.759176][ T5857] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 135.772840][ T5924] usb 1-1: Manufacturer: syz [ 135.779662][ T5924] usb 1-1: SerialNumber: syz [ 135.797478][ T5924] usb 1-1: config 0 descriptor?? [ 135.825318][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 135.870057][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 135.881550][ T5857] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 135.892332][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 135.914721][ T5857] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 135.981690][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 136.015447][ T5857] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 136.039370][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 136.069177][ T5857] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 136.103514][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 136.144267][ T5857] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 136.158634][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 136.285660][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 136.302125][ T5857] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 136.392217][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 136.438916][ T5857] usb 3-1: USB disconnect, device number 6 [ 136.454474][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 136.531269][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 136.546295][ T5857] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 136.649135][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 136.676908][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 136.685752][ T5857] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 136.698208][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 136.758215][ T5857] keyspan 3-1:0.0: device disconnected [ 136.770671][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 136.781456][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 136.791997][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 136.806771][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 136.815360][ T5893] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 136.825160][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 136.835325][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 136.844568][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 136.854853][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 136.871165][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 136.885099][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 136.901987][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 136.903453][ T5923] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 136.919495][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 136.937607][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 136.951647][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 136.966673][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 136.975422][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 136.988523][ T5893] usb 5-1: config 0 has no interfaces? [ 136.998241][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 137.016812][ T5893] usb 5-1: New USB device found, idVendor=5fc3, idProduct=25bf, bcdDevice= 0.05 [ 137.026793][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 137.043666][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.057565][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 137.065567][ T5893] usb 5-1: Product: syz [ 137.069783][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 137.078208][ T5893] usb 5-1: Manufacturer: syz [ 137.083240][ T5893] usb 5-1: SerialNumber: syz [ 137.088727][ T5923] usb 4-1: config 0 has no interfaces? [ 137.088744][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 137.117718][ T5923] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 137.123393][ T5857] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 137.135517][ T5893] usb 5-1: config 0 descriptor?? [ 137.136023][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.142447][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 137.183429][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 137.200455][ T5923] usb 4-1: Product: syz [ 137.209824][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 137.221886][ T5923] usb 4-1: Manufacturer: syz [ 137.227410][ T5923] usb 4-1: SerialNumber: syz [ 137.237128][ T5923] usb 4-1: config 0 descriptor?? [ 137.312303][ T5898] hid-generic 0000:007F:FFFFFFFE.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 137.370412][ T6487] netlink: 28 bytes leftover after parsing attributes in process `syz.4.176'. [ 137.407621][ T6487] netlink: 28 bytes leftover after parsing attributes in process `syz.4.176'. [ 137.625009][ T6487] dummy0: entered promiscuous mode [ 137.684698][ T6487] dummy0: left promiscuous mode [ 137.745719][ T5923] usb 5-1: USB disconnect, device number 14 [ 137.924210][ T5893] usb 1-1: USB disconnect, device number 8 [ 138.303603][ T5857] usb 3-1: device descriptor read/64, error -71 [ 138.564678][ T5857] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 138.733533][ T5857] usb 3-1: Using ep0 maxpacket: 8 [ 138.791055][ T5857] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 138.864824][ T5857] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 138.909640][ T5857] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 138.941560][ T5857] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.972240][ T6516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.183'. [ 139.006935][ T5857] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 139.035542][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.282644][ T5857] usb 3-1: GET_CAPABILITIES returned 0 [ 139.318595][ T5857] usbtmc 3-1:16.0: can't read capabilities [ 139.591372][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'. [ 139.612524][ T6525] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 139.631217][ T5924] usb 3-1: USB disconnect, device number 8 [ 139.662390][ T6525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.662501][ T5857] usb 4-1: USB disconnect, device number 12 [ 139.876809][ T6535] Cannot find set identified by id 0 to match [ 140.034394][ T6542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.193'. [ 140.044133][ T5893] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 140.110775][ T6548] Invalid logical block size (3) [ 140.194097][ T5893] usb 5-1: device descriptor read/64, error -71 [ 140.213773][ T5857] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 140.378034][ T5857] usb 4-1: config 0 has no interfaces? [ 140.401211][ T5857] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 140.410676][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.426798][ T5857] usb 4-1: Product: syz [ 140.435548][ T5857] usb 4-1: Manufacturer: syz [ 140.443426][ T5893] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 140.453410][ T5857] usb 4-1: SerialNumber: syz [ 140.464739][ T5857] usb 4-1: config 0 descriptor?? [ 140.603609][ T5893] usb 5-1: device descriptor read/64, error -71 [ 140.687573][ T6557] FAULT_INJECTION: forcing a failure. [ 140.687573][ T6557] name failslab, interval 1, probability 0, space 0, times 0 [ 140.709250][ T6557] CPU: 1 UID: 0 PID: 6557 Comm: syz.2.197 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 140.709276][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 140.709286][ T6557] Call Trace: [ 140.709293][ T6557] [ 140.709300][ T6557] dump_stack_lvl+0x241/0x360 [ 140.709335][ T6557] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.709360][ T6557] ? __pfx__printk+0x10/0x10 [ 140.709388][ T6557] ? __pfx___might_resched+0x10/0x10 [ 140.709411][ T6557] should_fail_ex+0x424/0x570 [ 140.709443][ T6557] should_failslab+0xac/0x100 [ 140.709463][ T6557] __kmalloc_cache_noprof+0x73/0x370 [ 140.709481][ T6557] ? rtnl_newlink+0x144/0x1fe0 [ 140.709508][ T6557] rtnl_newlink+0x144/0x1fe0 [ 140.709533][ T6557] ? stack_depot_save_flags+0x44/0x940 [ 140.709568][ T6557] ? kasan_save_track+0x51/0x80 [ 140.709591][ T6557] ? kasan_save_track+0x3f/0x80 [ 140.709613][ T6557] ? kasan_save_free_info+0x40/0x50 [ 140.709650][ T6557] ? __kasan_slab_free+0x59/0x70 [ 140.709678][ T6557] ? __pfx_rtnl_newlink+0x10/0x10 [ 140.709700][ T6557] ? __netlink_deliver_tap+0x561/0x7f0 [ 140.709722][ T6557] ? netlink_deliver_tap+0x19d/0x1b0 [ 140.709743][ T6557] ? netlink_unicast+0x7c6/0x9a0 [ 140.709761][ T6557] ? netlink_sendmsg+0x8c3/0xcd0 [ 140.709783][ T6557] ? __sock_sendmsg+0x221/0x270 [ 140.709803][ T6557] ? ____sys_sendmsg+0x523/0x860 [ 140.709829][ T6557] ? __sys_sendmsg+0x271/0x360 [ 140.709843][ T6557] ? do_syscall_64+0xf3/0x210 [ 140.709862][ T6557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.709920][ T6557] ? kasan_quarantine_put+0xdc/0x230 [ 140.709944][ T6557] ? lockdep_hardirqs_on+0x9d/0x150 [ 140.709966][ T6557] ? nlmon_xmit+0xaf/0x100 [ 140.709999][ T6557] ? __local_bh_enable_ip+0x168/0x200 [ 140.710025][ T6557] ? lockdep_hardirqs_on+0x9d/0x150 [ 140.710051][ T6557] ? aa_get_newest_label+0x101/0x6f0 [ 140.710082][ T6557] ? __lock_acquire+0xad5/0xd80 [ 140.710128][ T6557] ? __pfx_rtnl_newlink+0x10/0x10 [ 140.710154][ T6557] rtnetlink_rcv_msg+0x80f/0xd70 [ 140.710176][ T6557] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 140.710205][ T6557] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 140.710236][ T6557] ? ref_tracker_free+0x63e/0x7e0 [ 140.710261][ T6557] netlink_rcv_skb+0x208/0x480 [ 140.710284][ T6557] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 140.710310][ T6557] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.710350][ T6557] ? netlink_deliver_tap+0x2e/0x1b0 [ 140.710376][ T6557] ? netlink_deliver_tap+0x2e/0x1b0 [ 140.710401][ T6557] netlink_unicast+0x7f8/0x9a0 [ 140.710430][ T6557] ? __pfx_netlink_unicast+0x10/0x10 [ 140.710453][ T6557] ? skb_put+0x114/0x1f0 [ 140.710484][ T6557] netlink_sendmsg+0x8c3/0xcd0 [ 140.710520][ T6557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.710548][ T6557] ? aa_sock_msg_perm+0x91/0x160 [ 140.710577][ T6557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.710599][ T6557] __sock_sendmsg+0x221/0x270 [ 140.710625][ T6557] ____sys_sendmsg+0x523/0x860 [ 140.710662][ T6557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.710689][ T6557] ? __fget_files+0x2a/0x420 [ 140.710710][ T6557] ? __fget_files+0x2a/0x420 [ 140.710737][ T6557] __sys_sendmsg+0x271/0x360 [ 140.710760][ T6557] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.710829][ T6557] ? do_syscall_64+0xb6/0x210 [ 140.710851][ T6557] do_syscall_64+0xf3/0x210 [ 140.710876][ T6557] ? clear_bhb_loop+0x45/0xa0 [ 140.710898][ T6557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.710917][ T6557] RIP: 0033:0x7fbef478e169 [ 140.710933][ T6557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.710948][ T6557] RSP: 002b:00007fbef5609038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.710969][ T6557] RAX: ffffffffffffffda RBX: 00007fbef49b5fa0 RCX: 00007fbef478e169 [ 140.710982][ T6557] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 140.710994][ T6557] RBP: 00007fbef5609090 R08: 0000000000000000 R09: 0000000000000000 [ 140.711005][ T6557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.711016][ T6557] R13: 0000000000000000 R14: 00007fbef49b5fa0 R15: 00007fbef4adfa28 [ 140.711043][ T6557] [ 141.110843][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.134352][ T5893] usb usb5-port1: attempt power cycle [ 141.390757][ T6568] netlink: 'syz.2.199': attribute type 3 has an invalid length. [ 141.523406][ T5893] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 141.544024][ T5893] usb 5-1: device descriptor read/8, error -71 [ 141.793503][ T5893] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 141.824387][ T5893] usb 5-1: device descriptor read/8, error -71 [ 141.943753][ T5893] usb usb5-port1: unable to enumerate USB device [ 142.487536][ T6598] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 142.820509][ T5893] usb 4-1: USB disconnect, device number 13 [ 142.910723][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 142.967302][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 142.967323][ T30] audit: type=1326 audit(1744951998.743:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6608 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbbf8e169 code=0x7ffc0000 [ 142.996350][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.022990][ T30] audit: type=1326 audit(1744951998.743:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6608 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7febbbf8e169 code=0x7ffc0000 [ 143.045191][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.100204][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 143.129859][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 143.140149][ T30] audit: type=1326 audit(1744951998.743:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6608 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbbf8e169 code=0x7ffc0000 [ 143.162218][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.166801][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 143.210120][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.319890][ T6617] netlink: 20 bytes leftover after parsing attributes in process `syz.4.217'. [ 143.344865][ T6617] netlink: 'syz.4.217': attribute type 27 has an invalid length. [ 143.363255][ T5893] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 143.429071][ T9] usb 2-1: Product: syz [ 143.444453][ T30] audit: type=1326 audit(1744951998.743:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6608 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7febbbf8e169 code=0x7ffc0000 [ 143.543006][ T9] usb 2-1: Manufacturer: syz [ 143.554582][ T9] usb 2-1: SerialNumber: syz [ 143.596568][ T5924] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 143.608050][ T9] usb 2-1: config 0 descriptor?? [ 143.622239][ T6617] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.630798][ T6617] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.684669][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 143.694096][ T30] audit: type=1326 audit(1744951998.743:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6608 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbbf8e169 code=0x7ffc0000 [ 143.718901][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.729543][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 143.730851][ T5893] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 143.756025][ T30] audit: type=1326 audit(1744951998.743:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6608 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbbf8e169 code=0x7ffc0000 [ 143.778167][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.830426][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.859171][ T9] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 143.896466][ T5893] usb 4-1: config 0 descriptor?? [ 143.920861][ T6617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.947189][ T6617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.996580][ T6602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.007500][ T5924] usb 1-1: config 0 has no interfaces? [ 144.012774][ T6602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.019870][ T5924] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 144.030167][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.038531][ T5924] usb 1-1: Product: syz [ 144.042769][ T5924] usb 1-1: Manufacturer: syz [ 144.051918][ T5924] usb 1-1: SerialNumber: syz [ 144.276804][ T5893] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 144.346084][ T5924] usb 1-1: config 0 descriptor?? [ 144.576568][ T6617] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.600186][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 144.605458][ T6611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.216'. [ 144.606848][ T6617] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.644658][ T6613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.661352][ T6613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.731206][ T6617] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.731517][ T6611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.216'. [ 144.749554][ T6617] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.766359][ T5893] usb 4-1: USB disconnect, device number 14 [ 145.059714][ T9] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 145.073210][ T6602] input: syz0 as /devices/virtual/input/input6 [ 145.080343][ T9] em28xx 2-1:0.0: board has no eeprom [ 145.559925][ T9] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 145.570068][ T9] em28xx 2-1:0.0: dvb set to bulk mode. [ 145.578371][ T5924] em28xx 2-1:0.0: Binding DVB extension [ 145.633415][ T9] usb 2-1: USB disconnect, device number 12 [ 145.680793][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 145.700762][ T5924] em28xx 2-1:0.0: Registering input extension [ 145.709852][ T9] em28xx 2-1:0.0: Closing input extension [ 145.845792][ T9] em28xx 2-1:0.0: Freeing device [ 146.765162][ T6624] ALSA: mixer_oss: invalid OSS volume 'PHO' [ 147.021180][ T5893] usb 1-1: USB disconnect, device number 9 [ 147.205374][ T6643] xt_TCPMSS: Only works on TCP SYN packets [ 147.527333][ T6645] FAULT_INJECTION: forcing a failure. [ 147.527333][ T6645] name failslab, interval 1, probability 0, space 0, times 0 [ 147.576301][ T6645] CPU: 1 UID: 0 PID: 6645 Comm: syz.0.226 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 147.576324][ T6645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 147.576333][ T6645] Call Trace: [ 147.576339][ T6645] [ 147.576345][ T6645] dump_stack_lvl+0x241/0x360 [ 147.576373][ T6645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.576395][ T6645] ? __pfx__printk+0x10/0x10 [ 147.576424][ T6645] should_fail_ex+0x424/0x570 [ 147.576450][ T6645] should_failslab+0xac/0x100 [ 147.576467][ T6645] __kmalloc_cache_noprof+0x73/0x370 [ 147.576482][ T6645] ? sctp_add_bind_addr+0x89/0x3a0 [ 147.576502][ T6645] sctp_add_bind_addr+0x89/0x3a0 [ 147.576521][ T6645] sctp_copy_local_addr_list+0x313/0x500 [ 147.576540][ T6645] ? sctp_copy_local_addr_list+0xad/0x500 [ 147.576557][ T6645] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 147.576577][ T6645] ? sctp_v4_is_any+0x35/0x60 [ 147.576593][ T6645] ? sctp_copy_one_addr+0x94/0x360 [ 147.576614][ T6645] sctp_bind_addr_copy+0xad/0x3b0 [ 147.576631][ T6645] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 147.576687][ T6645] sctp_connect_new_asoc+0x337/0x700 [ 147.576712][ T6645] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 147.576733][ T6645] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 147.576757][ T6645] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 147.576777][ T6645] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 147.576796][ T6645] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 147.576820][ T6645] sctp_sendmsg+0x2009/0x3620 [ 147.576857][ T6645] ? __pfx_sctp_sendmsg+0x10/0x10 [ 147.576880][ T6645] ? aa_sk_perm+0x96f/0xac0 [ 147.576916][ T6645] ? inet_sendmsg+0x330/0x390 [ 147.576934][ T6645] __sock_sendmsg+0x1a6/0x270 [ 147.576955][ T6645] ____sys_sendmsg+0x523/0x860 [ 147.576986][ T6645] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.577008][ T6645] ? __fget_files+0x2a/0x420 [ 147.577025][ T6645] ? __fget_files+0x2a/0x420 [ 147.577046][ T6645] __sys_sendmmsg+0x3a0/0x7b0 [ 147.577070][ T6645] ? __pfx___sys_sendmmsg+0x10/0x10 [ 147.577111][ T6645] ? rcu_read_lock_any_held+0xbb/0x160 [ 147.577128][ T6645] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 147.577146][ T6645] ? vfs_write+0xb29/0xd10 [ 147.577174][ T6645] ? ksys_write+0x24e/0x2d0 [ 147.577197][ T6645] ? __mutex_unlock_slowpath+0x229/0x800 [ 147.577236][ T6645] ? ksys_write+0x275/0x2d0 [ 147.577266][ T6645] __x64_sys_sendmmsg+0xa0/0xb0 [ 147.577282][ T6645] do_syscall_64+0xf3/0x210 [ 147.577298][ T6645] ? clear_bhb_loop+0x45/0xa0 [ 147.577316][ T6645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.577335][ T6645] RIP: 0033:0x7f272af8e169 [ 147.577348][ T6645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.577360][ T6645] RSP: 002b:00007f272be55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 147.577376][ T6645] RAX: ffffffffffffffda RBX: 00007f272b1b5fa0 RCX: 00007f272af8e169 [ 147.577387][ T6645] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000003 [ 147.577397][ T6645] RBP: 00007f272be55090 R08: 0000000000000000 R09: 0000000000000000 [ 147.577405][ T6645] R10: 0000000000000844 R11: 0000000000000246 R12: 0000000000000002 [ 147.577414][ T6645] R13: 0000000000000000 R14: 00007f272b1b5fa0 R15: 00007f272b2dfa28 [ 147.577436][ T6645] [ 147.901539][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.066100][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'. [ 148.077948][ T6649] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 148.087253][ T6649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.547387][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.230'. [ 148.865256][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 148.907660][ T6663] fuse: Unknown parameter 'fd5vhmogAh> ǧ܂ P~WP#? V>zU`3s3|zEl|)omt|~]'s' [ 149.109677][ T9] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 149.126780][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.138193][ T6663] warning: `syz.2.235' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 149.155828][ T9] usb 4-1: Product: syz [ 149.245863][ T9] usb 4-1: Manufacturer: syz [ 149.267618][ T9] usb 4-1: SerialNumber: syz [ 149.337929][ T9] usb 4-1: config 0 descriptor?? [ 149.453690][ T5898] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 149.693451][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 149.700845][ T5898] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 149.726775][ T5898] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 149.751711][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 149.793383][ T5898] usb 3-1: Product: syz [ 149.823350][ T5898] usb 3-1: Manufacturer: syz [ 149.871020][ T5898] usb 3-1: SerialNumber: syz [ 149.908953][ T5898] usb 3-1: config 0 descriptor?? [ 149.945333][ T6663] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 150.017516][ T9] usb 4-1: Firmware: major: 238, minor: 4, hardware type: UNKNOWN (149) [ 150.154148][ T6673] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 150.233649][ T6674] xt_hashlimit: max too large, truncated to 1048576 [ 150.240454][ T6673] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 150.250979][ T6674] Cannot find set identified by id 0 to match [ 150.345632][ T9] usb 4-1: failed to fetch extended address, random address set [ 150.368246][ T9] usb 4-1: atusb_probe: initialization failed, error = -524 [ 150.383891][ T9] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 150.425809][ T9] usb 4-1: USB disconnect, device number 15 [ 151.021949][ T6684] netlink: 'syz.3.240': attribute type 12 has an invalid length. [ 151.040704][ T6686] netlink: 44 bytes leftover after parsing attributes in process `syz.4.239'. [ 151.081229][ T6684] netlink: 'syz.3.240': attribute type 29 has an invalid length. [ 151.124842][ T6684] netlink: 468 bytes leftover after parsing attributes in process `syz.3.240'. [ 151.356984][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 151.473539][ T975] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 151.545428][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.557386][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.582092][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 151.602709][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.613366][ T5923] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 151.640702][ T9] usb 1-1: config 0 descriptor?? [ 151.652648][ T975] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 151.664837][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 151.686653][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 151.743409][ T975] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 151.775827][ T5923] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 151.785120][ T5923] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.807149][ T975] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.817486][ T5923] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 151.826764][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.834901][ T5923] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.850806][ T5923] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 151.860971][ T975] usb 5-1: config 0 descriptor?? [ 151.867674][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 151.889334][ T6686] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 151.907217][ T5923] usb 4-1: Product: syz [ 151.911597][ T5923] usb 4-1: Manufacturer: syz [ 151.935358][ T5923] cdc_wdm 4-1:1.0: skipping garbage [ 151.942492][ T5923] cdc_wdm 4-1:1.0: skipping garbage [ 151.962112][ T5923] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 151.987213][ T5923] cdc_wdm 4-1:1.0: Unknown control protocol [ 152.095178][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 152.101280][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 152.151387][ T5923] usb 4-1: USB disconnect, device number 16 [ 152.163182][ T9] usb 1-1: USB disconnect, device number 10 [ 152.405463][ T975] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 152.449746][ T975] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 152.467488][ T6696] tipc: Started in network mode [ 152.472628][ T6696] tipc: Node identity ac1414aa, cluster identity 4711 [ 152.506711][ T6696] tipc: Enabled bearer , priority 10 [ 152.513113][ T975] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 152.673573][ T5923] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 152.696773][ T6699] netlink: 268 bytes leftover after parsing attributes in process `syz.1.246'. [ 152.697672][ T6699] unsupported nla_type 65024 [ 152.864105][ T5893] usb 3-1: USB disconnect, device number 9 [ 152.888896][ T5923] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 152.898062][ T5923] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.952970][ T5923] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 153.031170][ T5923] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.064353][ T6705] FAULT_INJECTION: forcing a failure. [ 153.064353][ T6705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.086518][ T6705] CPU: 1 UID: 0 PID: 6705 Comm: syz.1.248 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 153.086550][ T6705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 153.086563][ T6705] Call Trace: [ 153.086572][ T6705] [ 153.086580][ T6705] dump_stack_lvl+0x241/0x360 [ 153.086624][ T6705] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.086654][ T6705] ? __pfx__printk+0x10/0x10 [ 153.086696][ T6705] should_fail_ex+0x424/0x570 [ 153.086733][ T6705] _copy_from_user+0x2d/0xb0 [ 153.086762][ T6705] copy_msghdr_from_user+0xb3/0x580 [ 153.086794][ T6705] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 153.086817][ T6705] ? __fget_files+0x2a/0x420 [ 153.086841][ T6705] ? __fget_files+0x2a/0x420 [ 153.086871][ T6705] __sys_sendmsg+0x20a/0x360 [ 153.086897][ T6705] ? __pfx___sys_sendmsg+0x10/0x10 [ 153.086974][ T6705] ? do_syscall_64+0xb6/0x210 [ 153.087000][ T6705] do_syscall_64+0xf3/0x210 [ 153.087023][ T6705] ? clear_bhb_loop+0x45/0xa0 [ 153.087048][ T6705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.087068][ T6705] RIP: 0033:0x7f6eae78e169 [ 153.087086][ T6705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.087103][ T6705] RSP: 002b:00007f6eaf5af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.087125][ T6705] RAX: ffffffffffffffda RBX: 00007f6eae9b5fa0 RCX: 00007f6eae78e169 [ 153.087145][ T6705] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000004 [ 153.087158][ T6705] RBP: 00007f6eaf5af090 R08: 0000000000000000 R09: 0000000000000000 [ 153.087171][ T6705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.087190][ T6705] R13: 0000000000000000 R14: 00007f6eae9b5fa0 R15: 00007f6eaeadfa28 [ 153.087222][ T6705] [ 153.091901][ T5923] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.400156][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.408518][ T5923] usb 4-1: Product: syz [ 153.416518][ T5923] usb 4-1: Manufacturer: syz [ 153.525050][ T5923] cdc_wdm 4-1:1.0: skipping garbage [ 153.530303][ T5923] cdc_wdm 4-1:1.0: skipping garbage [ 153.541936][ T975] tipc: Node number set to 2886997162 [ 153.589374][ T5923] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 153.599476][ T6714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.607133][ T5923] cdc_wdm 4-1:1.0: Unknown control protocol [ 153.635435][ T6714] netlink: 20 bytes leftover after parsing attributes in process `syz.0.252'. [ 153.938999][ T6725] netlink: 'syz.2.255': attribute type 12 has an invalid length. [ 154.005499][ T6725] netlink: 'syz.2.255': attribute type 29 has an invalid length. [ 154.015350][ T6722] trusted_key: syz.0.254 sent an empty control message without MSG_MORE. [ 154.026490][ T6721] Can't find ip_set type hasT,port,ip [ 154.089132][ T6725] netlink: 468 bytes leftover after parsing attributes in process `syz.2.255'. [ 154.283426][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 154.290210][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 154.296681][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 154.303322][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 154.309718][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 154.316321][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 154.323920][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 154.330566][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 154.336864][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 154.343472][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 154.349544][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 154.359887][ T5923] usb 4-1: USB disconnect, device number 17 [ 154.590933][ T9] usb 5-1: USB disconnect, device number 19 [ 154.820478][ T6739] vlan2: entered promiscuous mode [ 155.289454][ T6753] Cannot find set identified by id 0 to match [ 155.549481][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 155.785404][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.271'. [ 155.798765][ T6770] veth0_macvtap: left promiscuous mode [ 155.839618][ T6772] netlink: 56 bytes leftover after parsing attributes in process `syz.4.272'. [ 155.855118][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 155.864771][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.873598][ T9] usb 3-1: Product: syz [ 155.878470][ T9] usb 3-1: Manufacturer: syz [ 155.893614][ T9] usb 3-1: SerialNumber: syz [ 155.916695][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 155.951765][ T975] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 155.963763][ T5893] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 156.131999][ T6775] FAULT_INJECTION: forcing a failure. [ 156.131999][ T6775] name failslab, interval 1, probability 0, space 0, times 0 [ 156.151408][ T6775] CPU: 1 UID: 0 PID: 6775 Comm: syz.0.273 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 156.151439][ T6775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.151450][ T6775] Call Trace: [ 156.151459][ T6775] [ 156.151467][ T6775] dump_stack_lvl+0x241/0x360 [ 156.151525][ T6775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.151557][ T6775] ? __pfx__printk+0x10/0x10 [ 156.151600][ T6775] should_fail_ex+0x424/0x570 [ 156.151637][ T6775] should_failslab+0xac/0x100 [ 156.151662][ T6775] __kmalloc_cache_noprof+0x73/0x370 [ 156.151678][ T6775] ? sctp_add_bind_addr+0x89/0x3a0 [ 156.151699][ T6775] sctp_add_bind_addr+0x89/0x3a0 [ 156.151726][ T6775] sctp_copy_local_addr_list+0x313/0x500 [ 156.151754][ T6775] ? sctp_copy_local_addr_list+0xad/0x500 [ 156.151780][ T6775] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 156.151808][ T6775] ? sctp_v4_is_any+0x35/0x60 [ 156.151830][ T6775] ? sctp_copy_one_addr+0x94/0x360 [ 156.151855][ T6775] sctp_bind_addr_copy+0xad/0x3b0 [ 156.151872][ T6775] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 156.151905][ T6775] sctp_connect_new_asoc+0x337/0x700 [ 156.151940][ T6775] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 156.151970][ T6775] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 156.152002][ T6775] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 156.152026][ T6775] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 156.152046][ T6775] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 156.152070][ T6775] sctp_sendmsg+0x2009/0x3620 [ 156.152133][ T6775] ? __pfx_sctp_sendmsg+0x10/0x10 [ 156.152165][ T6775] ? aa_sk_perm+0x96f/0xac0 [ 156.152203][ T6775] ? inet_sendmsg+0x330/0x390 [ 156.152221][ T6775] __sock_sendmsg+0x1a6/0x270 [ 156.152243][ T6775] ____sys_sendmsg+0x523/0x860 [ 156.152291][ T6775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.152321][ T6775] ? __fget_files+0x2a/0x420 [ 156.152344][ T6775] ? __fget_files+0x2a/0x420 [ 156.152372][ T6775] __sys_sendmmsg+0x3a0/0x7b0 [ 156.152396][ T6775] ? __pfx___sys_sendmmsg+0x10/0x10 [ 156.152446][ T6775] ? rcu_read_lock_any_held+0xbb/0x160 [ 156.152470][ T6775] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 156.152497][ T6775] ? vfs_write+0xb29/0xd10 [ 156.152534][ T6775] ? ksys_write+0x24e/0x2d0 [ 156.152562][ T6775] ? __mutex_unlock_slowpath+0x229/0x800 [ 156.152601][ T6775] ? ksys_write+0x275/0x2d0 [ 156.152659][ T6775] __x64_sys_sendmmsg+0xa0/0xb0 [ 156.152681][ T6775] do_syscall_64+0xf3/0x210 [ 156.152702][ T6775] ? clear_bhb_loop+0x45/0xa0 [ 156.152725][ T6775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.152754][ T6775] RIP: 0033:0x7f272af8e169 [ 156.152766][ T6775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.152776][ T6775] RSP: 002b:00007f272be55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 156.152793][ T6775] RAX: ffffffffffffffda RBX: 00007f272b1b5fa0 RCX: 00007f272af8e169 [ 156.152808][ T6775] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000003 [ 156.152819][ T6775] RBP: 00007f272be55090 R08: 0000000000000000 R09: 0000000000000000 [ 156.152831][ T6775] R10: 0000000000000844 R11: 0000000000000246 R12: 0000000000000002 [ 156.152841][ T6775] R13: 0000000000000000 R14: 00007f272b1b5fa0 R15: 00007f272b2dfa28 [ 156.152870][ T6775] [ 156.471803][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.565560][ T5893] usb 4-1: config 0 has no interfaces? [ 156.901130][ T5893] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 156.953604][ T9] usb 3-1: USB disconnect, device number 10 [ 156.984119][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.033417][ T5893] usb 4-1: Product: syz [ 157.051250][ T975] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 157.060117][ T975] ath9k_htc: Failed to initialize the device [ 157.062789][ T5893] usb 4-1: Manufacturer: syz [ 157.073151][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 157.129718][ T5893] usb 4-1: SerialNumber: syz [ 157.190808][ T5893] usb 4-1: config 0 descriptor?? [ 157.625001][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 157.696413][ T6794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.279'. [ 157.747765][ T6794] netlink: 'syz.2.279': attribute type 4 has an invalid length. [ 157.793534][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 157.849388][ T9] usb 1-1: config index 0 descriptor too short (expected 1828, got 36) [ 157.860685][ T9] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 157.937874][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 157.962712][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 158.002248][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 158.031287][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 158.050815][ T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 158.069257][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.080428][ T9] usb 1-1: Product: syz [ 158.103564][ T9] usb 1-1: Manufacturer: syz [ 158.115606][ T9] usb 1-1: SerialNumber: syz [ 158.133214][ T9] usb 1-1: config 0 descriptor?? [ 158.142350][ T9] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 158.150613][ T9] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 158.158955][ T9] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 158.183186][ T9] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 158.208238][ T9] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 158.240988][ T9] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 158.271372][ T9] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 158.280622][ T9] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 158.316078][ T9] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 158.360642][ T6783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.372643][ T9] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 158.409726][ T9] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 158.417981][ T6783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.439061][ T9] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 158.449200][ T9] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 158.478605][ T9] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 158.529008][ T9] usb 1-1: USB disconnect, device number 11 [ 158.571564][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 158.631647][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 158.642682][ T9] keyspan 1-1:0.0: device disconnected [ 158.803660][ T5923] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 158.823391][ T975] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 158.876167][ T6820] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.963816][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 158.990991][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.001974][ T975] usb 3-1: Using ep0 maxpacket: 8 [ 159.012392][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.025972][ T975] usb 3-1: config 0 has no interfaces? [ 159.047950][ T975] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 159.067298][ T5923] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 159.076700][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.095896][ T975] usb 3-1: Product: syz [ 159.105831][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.134167][ T975] usb 3-1: Manufacturer: syz [ 159.143425][ T975] usb 3-1: SerialNumber: syz [ 159.151317][ T5923] usb 2-1: config 0 descriptor?? [ 159.167505][ T975] usb 3-1: config 0 descriptor?? [ 159.187227][ T24] usb 4-1: USB disconnect, device number 18 [ 159.318456][ T6824] netlink: 24 bytes leftover after parsing attributes in process `syz.3.290'. [ 159.395977][ T6818] loop2: detected capacity change from 0 to 7 [ 159.415093][ T6818] Dev loop2: unable to read RDB block 7 [ 159.425201][ T6826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.451045][ T6818] loop2: unable to read partition table [ 159.461690][ T6826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.469931][ T6818] loop2: partition table beyond EOD, truncated [ 159.484845][ T6818] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 159.498616][ T6828] Option ' ' to dns_resolver key: bad/missing value [ 159.526802][ T24] usb 3-1: USB disconnect, device number 11 [ 159.550081][ T6824] netlink: 'syz.3.290': attribute type 4 has an invalid length. [ 159.585106][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.288'. [ 159.600531][ T6831] bridge_slave_1: left allmulticast mode [ 159.609129][ T6831] bridge_slave_1: left promiscuous mode [ 159.618587][ T6831] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.637801][ T6831] bridge_slave_0: left allmulticast mode [ 159.644186][ T6831] bridge_slave_0: left promiscuous mode [ 159.675635][ T6831] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.033380][ T5898] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 160.184394][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 160.206256][ T5898] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 160.221814][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.230256][ T6845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.297'. [ 160.246913][ T5898] usb 1-1: Product: syz [ 160.259251][ T5898] usb 1-1: Manufacturer: syz [ 160.265194][ T6847] netlink: 16 bytes leftover after parsing attributes in process `syz.2.296'. [ 160.278268][ T5898] usb 1-1: SerialNumber: syz [ 160.294348][ T5898] usb 1-1: config 0 descriptor?? [ 160.504151][ T6853] netlink: 20 bytes leftover after parsing attributes in process `syz.3.300'. [ 160.516225][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.300'. [ 160.523581][ T5891] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 160.581791][ T6853] vlan2: entered promiscuous mode [ 160.589002][ T6853] 0: entered promiscuous mode [ 160.619521][ T5898] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 160.631659][ T5898] gspca_sunplus: reg_w_riv err -71 [ 160.644028][ T5898] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 160.665095][ T5898] usb 1-1: USB disconnect, device number 12 [ 160.724071][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 160.731131][ T6856] process 'syz.3.301' launched './file2' with NULL argv: empty string added [ 160.731715][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.751212][ T5891] usb 5-1: config 0 interface 0 has no altsetting 0 [ 160.761216][ T5891] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 160.770677][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.778893][ T5891] usb 5-1: Product: syz [ 160.783519][ T5891] usb 5-1: Manufacturer: syz [ 160.793656][ T6856] netlink: 16 bytes leftover after parsing attributes in process `syz.3.301'. [ 160.816571][ T5891] usb 5-1: SerialNumber: syz [ 160.826796][ T5891] usb 5-1: config 0 descriptor?? [ 160.842774][ T5891] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 161.183423][ T5898] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 161.184562][ T6864] netlink: 24 bytes leftover after parsing attributes in process `syz.0.303'. [ 161.308422][ T6864] netlink: 'syz.0.303': attribute type 4 has an invalid length. [ 161.347692][ T5898] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.359573][ T5898] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.375236][ T5898] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 161.386377][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 161.395082][ T5898] usb 4-1: SerialNumber: syz [ 161.759264][ T5923] usbhid 2-1:0.0: can't add hid device: -71 [ 161.769451][ T5923] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 161.795698][ T5923] usb 2-1: USB disconnect, device number 13 [ 161.919362][ T6879] netlink: 'syz.1.308': attribute type 4 has an invalid length. [ 161.927110][ T3009] usb 5-1: Failed to submit usb control message: -110 [ 161.927206][ T3009] usb 5-1: unable to send the bmi data to the device: -110 [ 161.927227][ T3009] usb 5-1: unable to get target info from device [ 161.927244][ T3009] usb 5-1: could not get target info (-110) [ 161.927274][ T3009] usb 5-1: could not probe fw (-110) [ 162.307294][ T5898] usb 4-1: 0:2 : does not exist [ 162.514180][ T6886] FAULT_INJECTION: forcing a failure. [ 162.514180][ T6886] name failslab, interval 1, probability 0, space 0, times 0 [ 162.543648][ T5898] usb 4-1: USB disconnect, device number 19 [ 162.674973][ T6886] CPU: 1 UID: 0 PID: 6886 Comm: syz.3.310 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 162.675002][ T6886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 162.675012][ T6886] Call Trace: [ 162.675018][ T6886] [ 162.675025][ T6886] dump_stack_lvl+0x241/0x360 [ 162.675056][ T6886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.675078][ T6886] ? __pfx__printk+0x10/0x10 [ 162.675111][ T6886] should_fail_ex+0x424/0x570 [ 162.675138][ T6886] should_failslab+0xac/0x100 [ 162.675156][ T6886] __kmalloc_cache_noprof+0x73/0x370 [ 162.675172][ T6886] ? sctp_add_bind_addr+0x89/0x3a0 [ 162.675193][ T6886] sctp_add_bind_addr+0x89/0x3a0 [ 162.675214][ T6886] sctp_copy_local_addr_list+0x313/0x500 [ 162.675234][ T6886] ? sctp_copy_local_addr_list+0xad/0x500 [ 162.675252][ T6886] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 162.675273][ T6886] ? sctp_v4_is_any+0x35/0x60 [ 162.675290][ T6886] ? sctp_copy_one_addr+0x94/0x360 [ 162.675310][ T6886] sctp_bind_addr_copy+0xad/0x3b0 [ 162.675328][ T6886] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 162.675362][ T6886] sctp_connect_new_asoc+0x337/0x700 [ 162.675404][ T6886] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 162.675427][ T6886] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 162.675454][ T6886] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 162.675475][ T6886] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 162.675496][ T6886] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 162.675521][ T6886] sctp_sendmsg+0x2009/0x3620 [ 162.675560][ T6886] ? __pfx_sctp_sendmsg+0x10/0x10 [ 162.675586][ T6886] ? aa_sk_perm+0x96f/0xac0 [ 162.675618][ T6886] ? inet_sendmsg+0x330/0x390 [ 162.675638][ T6886] __sock_sendmsg+0x1a6/0x270 [ 162.675661][ T6886] ____sys_sendmsg+0x523/0x860 [ 162.675693][ T6886] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.675716][ T6886] ? __fget_files+0x2a/0x420 [ 162.675734][ T6886] ? __fget_files+0x2a/0x420 [ 162.675757][ T6886] __sys_sendmmsg+0x3a0/0x7b0 [ 162.675785][ T6886] ? __pfx___sys_sendmmsg+0x10/0x10 [ 162.675829][ T6886] ? rcu_read_lock_any_held+0xbb/0x160 [ 162.675859][ T6886] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 162.675877][ T6886] ? vfs_write+0xb29/0xd10 [ 162.675906][ T6886] ? ksys_write+0x24e/0x2d0 [ 162.675929][ T6886] ? __mutex_unlock_slowpath+0x229/0x800 [ 162.675986][ T6886] ? ksys_write+0x275/0x2d0 [ 162.676018][ T6886] __x64_sys_sendmmsg+0xa0/0xb0 [ 162.676035][ T6886] do_syscall_64+0xf3/0x210 [ 162.676053][ T6886] ? clear_bhb_loop+0x45/0xa0 [ 162.676072][ T6886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.676088][ T6886] RIP: 0033:0x7eff1a58e169 [ 162.676104][ T6886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.676118][ T6886] RSP: 002b:00007eff1b332038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 162.676136][ T6886] RAX: ffffffffffffffda RBX: 00007eff1a7b5fa0 RCX: 00007eff1a58e169 [ 162.676149][ T6886] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000003 [ 162.676159][ T6886] RBP: 00007eff1b332090 R08: 0000000000000000 R09: 0000000000000000 [ 162.676169][ T6886] R10: 0000000000000844 R11: 0000000000000246 R12: 0000000000000002 [ 162.676179][ T6886] R13: 0000000000000000 R14: 00007eff1a7b5fa0 R15: 00007eff1a8dfa28 [ 162.676203][ T6886] [ 163.194958][ T5923] usb 5-1: USB disconnect, device number 20 [ 163.627736][ T6495] udevd[6495]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.763435][ T5891] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 164.971618][ T6894] ALSA: mixer_oss: invalid OSS volume 'PHO' [ 165.060510][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 165.094606][ T5898] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 165.253739][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 165.258874][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 165.271316][ T5898] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 165.279785][ T5898] usb 3-1: config 0 has no interface number 0 [ 165.280638][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.321890][ T6911] delete_channel: no stack [ 165.340686][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.352951][ T5898] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 165.361057][ T5891] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 165.382696][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.415831][ T5898] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 165.423426][ T6913] netlink: 68 bytes leftover after parsing attributes in process `syz.1.319'. [ 165.446641][ T5898] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 165.456110][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.471565][ T5898] usb 3-1: Product: syz [ 165.485931][ T5898] usb 3-1: Manufacturer: syz [ 165.488303][ T5891] usb 4-1: config 0 descriptor?? [ 165.496438][ T5898] usb 3-1: SerialNumber: syz [ 165.589615][ T5898] usb 3-1: config 0 descriptor?? [ 165.620149][ T6905] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 165.650384][ T6905] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 165.653889][ T975] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 165.896724][ T975] usb 1-1: config 0 has no interfaces? [ 165.902405][ T6905] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 165.918016][ T975] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 165.931028][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.959383][ T975] usb 1-1: Product: syz [ 165.966111][ T975] usb 1-1: Manufacturer: syz [ 165.973755][ T975] usb 1-1: SerialNumber: syz [ 166.019996][ T975] usb 1-1: config 0 descriptor?? [ 166.155023][ T5898] asix 3-1:0.251: probe with driver asix failed with error -71 [ 166.225643][ T5898] usb 3-1: USB disconnect, device number 12 [ 166.743376][ T5898] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 166.905604][ T5898] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 167.036843][ T5898] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 167.069032][ T5898] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 167.117691][ T5898] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 167.221181][ T5898] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 167.246245][ T6935] netlink: 268 bytes leftover after parsing attributes in process `syz.1.324'. [ 167.257285][ T5898] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 167.277700][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 167.295753][ T5898] usb 3-1: Product: syz [ 167.305346][ T5898] usb 3-1: Manufacturer: syz [ 167.330495][ T5898] cdc_wdm 3-1:1.0: skipping garbage [ 167.364519][ T5898] cdc_wdm 3-1:1.0: skipping garbage [ 167.404882][ T5898] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 167.453087][ T5898] cdc_wdm 3-1:1.0: Unknown control protocol [ 167.530310][ T5898] usb 3-1: USB disconnect, device number 13 [ 168.600162][ T5891] usbhid 4-1:0.0: can't add hid device: -71 [ 168.681879][ T5891] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 168.706407][ T6952] FAULT_INJECTION: forcing a failure. [ 168.706407][ T6952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.724435][ T5898] usb 1-1: USB disconnect, device number 13 [ 168.732683][ T6927] delete_channel: no stack [ 168.766866][ T5891] usb 4-1: USB disconnect, device number 20 [ 168.793712][ T6952] CPU: 0 UID: 0 PID: 6952 Comm: syz.2.327 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 168.793737][ T6952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 168.793748][ T6952] Call Trace: [ 168.793756][ T6952] [ 168.793764][ T6952] dump_stack_lvl+0x241/0x360 [ 168.793800][ T6952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.793827][ T6952] ? __pfx__printk+0x10/0x10 [ 168.793863][ T6952] should_fail_ex+0x424/0x570 [ 168.793895][ T6952] _copy_from_user+0x2d/0xb0 [ 168.793922][ T6952] move_addr_to_kernel+0x7f/0x170 [ 168.793945][ T6952] copy_msghdr_from_user+0x477/0x580 [ 168.793972][ T6952] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 168.793992][ T6952] ? __fget_files+0x2a/0x420 [ 168.794011][ T6952] ? __fget_files+0x2a/0x420 [ 168.794037][ T6952] __sys_sendmsg+0x20a/0x360 [ 168.794059][ T6952] ? __pfx___sys_sendmsg+0x10/0x10 [ 168.794126][ T6952] ? do_syscall_64+0xb6/0x210 [ 168.794150][ T6952] do_syscall_64+0xf3/0x210 [ 168.794170][ T6952] ? clear_bhb_loop+0x45/0xa0 [ 168.794191][ T6952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.794209][ T6952] RIP: 0033:0x7fbef478e169 [ 168.794225][ T6952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.794240][ T6952] RSP: 002b:00007fbef5609038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.794259][ T6952] RAX: ffffffffffffffda RBX: 00007fbef49b5fa0 RCX: 00007fbef478e169 [ 168.794273][ T6952] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000004 [ 168.794284][ T6952] RBP: 00007fbef5609090 R08: 0000000000000000 R09: 0000000000000000 [ 168.794296][ T6952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.794307][ T6952] R13: 0000000000000000 R14: 00007fbef49b5fa0 R15: 00007fbef4adfa28 [ 168.794336][ T6952] [ 169.231199][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.329'. [ 169.321753][ T6956] netlink: 24 bytes leftover after parsing attributes in process `syz.3.328'. [ 169.404784][ T6959] netlink: 'syz.3.328': attribute type 4 has an invalid length. [ 169.549523][ T6963] x_tables: duplicate underflow at hook 1 [ 169.733469][ T5898] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 169.933465][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 169.948138][ T5898] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 169.973328][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.982059][ T6971] Cannot find set identified by id 0 to match [ 170.000901][ T5898] usb 3-1: config 0 descriptor?? [ 170.020644][ T5898] usb 3-1: interface 1 not found [ 170.122625][ T30] audit: type=1326 audit(1744952025.903:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.4.336" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febbbf8e169 code=0x0 [ 170.160409][ T6980] delete_channel: no stack [ 170.216291][ T5898] usb 3-1: USB disconnect, device number 14 [ 170.343424][ T5891] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 170.484037][ T5923] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 170.497396][ T5891] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 170.506588][ T5891] usb 1-1: config 1 has no interface number 1 [ 170.512778][ T5891] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 170.526611][ T975] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 170.539350][ T5891] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 170.548833][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.556895][ T5891] usb 1-1: Product: ᇗ᫟庚⮰㣏甖䡿ట䖔㒪騥꒠ྞ밑핧選嶞㵁땥k✤즫뻷ﴽㄳ댱邍瀃亨ꮖ蝯⚻㼧ോṢ팛戂솾럲ヰ뾷ჰ患ⱑ蔎豦맠疗钀野냪ꊣ峀퀟䃭ꜣせ娌皒鑜◺㤙踴萶⻶퀽䭤俨︚쁆찞鱭㞳姫季䞓Ꮢ袩疋৩취彧 [ 170.585102][ T5891] usb 1-1: Manufacturer: 、 [ 170.589713][ T5891] usb 1-1: SerialNumber: 뽁໦胃꽥귖ꂷ⫯ᡯ吾祔뢩鳚ᴐ驈ꬔࢯܔ琵㩄浲闦聻戒쬳勢ゴ‒鹾퓝즈루掏砹曮寕馔瀂郰晐簊烵诃뺯쇟ᚦ怔啪ἕ㿋귥꬧Ҧ [ 170.666983][ T5923] usb 4-1: config 0 has no interfaces? [ 170.675234][ T5923] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 170.684467][ T975] usb 5-1: Using ep0 maxpacket: 8 [ 170.689648][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.697786][ T5923] usb 4-1: Product: syz [ 170.702601][ T5923] usb 4-1: Manufacturer: syz [ 170.707368][ T5923] usb 4-1: SerialNumber: syz [ 170.713094][ T975] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.726629][ T975] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.740850][ T5923] usb 4-1: config 0 descriptor?? [ 170.746940][ T975] usb 5-1: config 0 interface 0 has no altsetting 0 [ 170.754299][ T975] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 170.764866][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.798435][ T975] usb 5-1: config 0 descriptor?? [ 171.245681][ T975] kye 0003:0458:4018.0005: unknown main item tag 0x0 [ 171.257616][ T975] kye 0003:0458:4018.0005: reserved main item tag 0xe [ 171.270507][ T975] kye 0003:0458:4018.0005: item fetching failed at offset 15/133 [ 171.287148][ T975] kye 0003:0458:4018.0005: parse failed [ 171.299856][ T975] kye 0003:0458:4018.0005: probe with driver kye failed with error -22 [ 171.626124][ T6995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.342'. [ 171.812724][ T6995] netlink: 'syz.1.342': attribute type 4 has an invalid length. [ 173.113831][ T5898] usb 5-1: USB disconnect, device number 21 [ 173.116610][ T5891] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 173.276748][ T5891] usb 1-1: USB disconnect, device number 14 [ 173.287657][ T7018] fuse: Bad value for 'user_id' [ 173.292705][ T7018] fuse: Bad value for 'user_id' [ 173.322695][ T5893] usb 4-1: USB disconnect, device number 21 [ 173.478008][ T6981] delete_channel: no stack [ 173.612483][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.351'. [ 173.683666][ T7026] bridge_slave_1: left allmulticast mode [ 173.720722][ T7026] bridge_slave_1: left promiscuous mode [ 173.754794][ T6495] udevd[6495]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.780716][ T7026] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.872488][ T7026] bridge_slave_0: left allmulticast mode [ 173.879138][ T7026] bridge_slave_0: left promiscuous mode [ 173.891460][ T7026] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.929544][ T7033] netlink: 24 bytes leftover after parsing attributes in process `syz.4.354'. [ 174.050363][ T7035] netlink: 'syz.4.354': attribute type 4 has an invalid length. [ 174.123498][ T5893] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 174.293856][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 174.312571][ T5893] usb 4-1: config 0 has an invalid interface number: 223 but max is 0 [ 174.321872][ T5893] usb 4-1: config 0 has no interface number 0 [ 174.332410][ T5893] usb 4-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=10.fe [ 174.347506][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.359639][ T5893] usb 4-1: Product: syz [ 174.397236][ T5893] usb 4-1: Manufacturer: syz [ 174.422313][ T5893] usb 4-1: SerialNumber: syz [ 174.442645][ T5893] usb 4-1: config 0 descriptor?? [ 174.658758][ T5893] usb 4-1: USB disconnect, device number 22 [ 175.039541][ T7059] netlink: 'syz.1.360': attribute type 5 has an invalid length. [ 175.427316][ T7064] xt_TCPMSS: Only works on TCP SYN packets [ 175.436820][ T5893] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 175.800983][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 175.825940][ T5893] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 175.839307][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.850109][ T5893] usb 2-1: Product: syz [ 175.856637][ T5893] usb 2-1: Manufacturer: syz [ 175.861619][ T5893] usb 2-1: SerialNumber: syz [ 175.868272][ T5893] usb 2-1: config 0 descriptor?? [ 175.880299][ T5893] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 175.889971][ T5893] dvb-usb: bulk message failed: -22 (2/0) [ 175.898484][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 175.911277][ T5893] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 175.924599][ T5893] usb 2-1: media controller created [ 176.007407][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.034313][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.365'. [ 176.411898][ T7065] ALSA: mixer_oss: invalid OSS volume 'PHO' [ 176.834441][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 176.841268][ T5893] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 176.971338][ T5893] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 177.103652][ T5893] dvb-usb: schedule remote query interval to 50 msecs. [ 177.119123][ T5893] dvb-usb: bulk message failed: -22 (2/0) [ 177.167849][ T7082] delete_channel: no stack [ 177.363676][ T5893] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 177.374811][ T3084] dvb-usb: bulk message failed: -22 (1/0) [ 177.382744][ T3084] dvb-usb: error while querying for an remote control event. [ 177.493444][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 177.544535][ T5891] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 177.679289][ T7085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.369'. [ 177.727315][ T5891] usb 4-1: config 0 has no interfaces? [ 177.735744][ T5891] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 177.753186][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.771280][ T5891] usb 4-1: Product: syz [ 177.775953][ T5891] usb 4-1: Manufacturer: syz [ 177.780641][ T5891] usb 4-1: SerialNumber: syz [ 177.799795][ T5891] usb 4-1: config 0 descriptor?? [ 177.858473][ T5893] dvb-usb: error while querying for an remote control event. [ 177.993564][ T7091] netlink: 16 bytes leftover after parsing attributes in process `syz.2.371'. [ 178.143450][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 178.153357][ T5893] dvb-usb: error while querying for an remote control event. [ 178.253609][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 178.391124][ T5893] dvb-usb: error while querying for an remote control event. [ 178.543407][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 178.725057][ T5893] dvb-usb: error while querying for an remote control event. [ 178.844516][ T5893] usb 2-1: USB disconnect, device number 14 [ 178.858977][ T7100] x_tables: unsorted underflow at hook 3 [ 179.128144][ T5893] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 179.404342][ T7108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.376'. [ 179.697960][ T7115] tipc: Started in network mode [ 179.848271][ T7115] tipc: Node identity 4, cluster identity 4711 [ 179.881918][ T7115] tipc: Node number set to 4 [ 180.143684][ T5893] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 180.231842][ T5891] usb 4-1: USB disconnect, device number 23 [ 180.251447][ T7095] delete_channel: no stack [ 180.319505][ T5893] usb 1-1: config 0 has no interfaces? [ 180.334617][ T5893] usb 1-1: New USB device found, idVendor=ac09, idProduct=0a0f, bcdDevice= c.3e [ 180.348015][ T5893] usb 1-1: New USB device strings: Mfr=199, Product=92, SerialNumber=3 [ 180.371912][ T5893] usb 1-1: Product: syz [ 180.379979][ T5893] usb 1-1: Manufacturer: syz [ 180.389948][ T5893] usb 1-1: SerialNumber: syz [ 180.485795][ T5893] usb 1-1: config 0 descriptor?? [ 180.517308][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.383'. [ 180.526393][ T5898] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 180.557583][ T7126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.578359][ T7126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.604401][ T7126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.626656][ T7126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.685857][ T5898] usb 5-1: Using ep0 maxpacket: 16 [ 180.698276][ T5898] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 180.727534][ T7128] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 180.739940][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 180.749715][ T7128] batman_adv: batadv0: Adding interface: gretap0 [ 180.781019][ T7128] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.795887][ T5898] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 180.831236][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.867767][ T5898] usb 5-1: Product: syz [ 180.878149][ T7128] batman_adv: batadv0: Not using interface gretap0 (retrying later): interface not active [ 180.879174][ T5898] usb 5-1: Manufacturer: syz [ 180.906230][ T5898] usb 5-1: SerialNumber: syz [ 180.921663][ T5898] usb 5-1: config 0 descriptor?? [ 180.950595][ T5898] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 180.971157][ T5898] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 180.995521][ T7131] netlink: 20 bytes leftover after parsing attributes in process `syz.2.384'. [ 181.030747][ T7131] netlink: 40 bytes leftover after parsing attributes in process `syz.2.384'. [ 181.076981][ T7133] netlink: 'syz.3.385': attribute type 10 has an invalid length. [ 181.113561][ T7133] netlink: 40 bytes leftover after parsing attributes in process `syz.3.385'. [ 181.165229][ T7133] team0: entered promiscuous mode [ 181.265116][ T7133] team_slave_0: entered promiscuous mode [ 181.277688][ T7133] team_slave_1: entered promiscuous mode [ 181.284327][ T7133] team0: entered allmulticast mode [ 181.298247][ T7133] team_slave_0: entered allmulticast mode [ 181.506909][ T7133] team_slave_1: entered allmulticast mode [ 181.609466][ T7133] bridge0: port 3(team0) entered blocking state [ 181.791838][ T7133] bridge0: port 3(team0) entered disabled state [ 182.130850][ T7133] bridge0: port 3(team0) entered blocking state [ 182.137277][ T7133] bridge0: port 3(team0) entered forwarding state [ 182.223766][ T5898] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 182.293414][ T5898] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 182.476267][ T5898] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 182.637658][ T5898] em28xx 5-1:0.0: No AC97 audio processor [ 182.913522][ T3084] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 183.363667][ T5898] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 183.518022][ T3084] usb 3-1: config 0 has no interfaces? [ 183.553398][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 183.584443][ T5898] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 183.716559][ T5898] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 183.825644][ T3084] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 183.843342][ T5898] usb 4-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 183.863486][ T3084] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.871583][ T5898] usb 4-1: Product: syz [ 183.903848][ T5898] usb 4-1: Manufacturer: syz [ 183.914940][ T3084] usb 3-1: Product: syz [ 183.923382][ T5898] usb 4-1: SerialNumber: syz [ 183.999728][ T3084] usb 3-1: Manufacturer: syz [ 184.018158][ T5898] usb 4-1: config 0 descriptor?? [ 184.025881][ T3084] usb 3-1: SerialNumber: syz [ 184.049875][ T5898] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 184.057658][ T3084] usb 3-1: config 0 descriptor?? [ 184.315780][ T7146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 185.099849][ T3084] usb 1-1: USB disconnect, device number 15 [ 185.108616][ T5898] gspca_zc3xx: reg_w_i err -71 [ 185.443945][ T7151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.388'. [ 185.563445][ T7151] netlink: 40 bytes leftover after parsing attributes in process `syz.3.388'. [ 185.853452][ T5898] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 186.011032][ T5898] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 186.237723][ T5898] usb 4-1: USB disconnect, device number 24 [ 186.547925][ T24] usb 5-1: USB disconnect, device number 22 [ 187.233638][ T3084] usb 3-1: USB disconnect, device number 15 [ 187.450391][ T24] em28xx 5-1:0.0: Disconnecting em28xx [ 187.477923][ T24] em28xx 5-1:0.0: Freeing device [ 187.944719][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 188.440696][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 188.483874][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 25 [ 188.573378][ T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 188.738602][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.788357][ T24] usb 5-1: Product: syz [ 188.792573][ T24] usb 5-1: Manufacturer: syz [ 188.823342][ T24] usb 5-1: SerialNumber: syz [ 188.916374][ T24] usb 5-1: config 0 descriptor?? [ 189.180219][ T7167] netlink: 220 bytes leftover after parsing attributes in process `syz.3.393'. [ 189.194784][ T24] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 189.478716][ T24] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 190.550521][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 190.683375][ T24] usb 5-1: USB disconnect, device number 23 [ 191.118421][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.118461][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.118503][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 191.118528][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.130125][ T9] usb 2-1: config 0 descriptor?? [ 191.687384][ T9] logitech 0003:046D:C293.0006: item fetching failed at offset 10/11 [ 191.688152][ T9] logitech 0003:046D:C293.0006: parse failed [ 191.688249][ T9] logitech 0003:046D:C293.0006: probe with driver logitech failed with error -22 [ 191.853712][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 191.967867][ T7183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.968204][ T7183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.123550][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 192.135747][ T24] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 192.135778][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.144578][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 192.144613][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.144652][ T24] usb 5-1: Product: syz [ 192.144669][ T24] usb 5-1: Manufacturer: syz [ 192.144686][ T24] usb 5-1: SerialNumber: syz [ 192.247953][ T5898] usb 2-1: USB disconnect, device number 15 [ 192.408027][ T24] usb 5-1: 0:2 : does not exist [ 192.514415][ T7185] tipc: Enabled bearer , priority 10 [ 192.572102][ T7169] tty tty3: ldisc open failed (-12), clearing slot 2 [ 192.855752][ T24] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 193.130837][ T24] usb 5-1: USB disconnect, device number 24 [ 193.294260][ T7194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.401'. [ 193.538078][ T6495] udevd[6495]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.354023][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.360377][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.005209][ T7201] netlink: 'syz.3.401': attribute type 4 has an invalid length. [ 197.023420][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 197.663446][ T24] usb 2-1: device descriptor read/64, error -71 [ 197.973354][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 199.241274][ T7221] netlink: 'syz.2.405': attribute type 3 has an invalid length. [ 201.192507][ T7231] x_tables: unsorted underflow at hook 3 [ 205.793316][ C0] sched: DL replenish lagged too much [ 206.683407][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 207.051834][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.418'. [ 207.111159][ T24] usb 4-1: config 0 has no interfaces? [ 207.127297][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 207.139217][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.150223][ T24] usb 4-1: Product: syz [ 207.163607][ T24] usb 4-1: Manufacturer: syz [ 207.168397][ T24] usb 4-1: SerialNumber: syz [ 207.206931][ T24] usb 4-1: config 0 descriptor?? [ 207.274272][ T7267] Dead loop on virtual device ip6_vti0, fix it urgently! [ 207.283401][ T7267] Dead loop on virtual device ip6_vti0, fix it urgently! [ 207.291856][ T7267] Dead loop on virtual device ip6_vti0, fix it urgently! [ 207.344258][ T7268] netlink: 60 bytes leftover after parsing attributes in process `syz.0.420'. [ 207.369350][ T7267] Dead loop on virtual device ip6_vti0, fix it urgently! [ 207.402696][ T7267] Dead loop on virtual device ip6_vti0, fix it urgently! [ 207.419749][ T7268] unsupported nlmsg_type 40 [ 207.545702][ T7268] 8021q: VLANs not supported on nlmon0 [ 209.003373][ T24] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 209.413230][ T5898] usb 4-1: USB disconnect, device number 25 [ 209.490388][ T24] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 209.525445][ T24] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 209.578494][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 209.620542][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 209.780549][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 209.805462][ T7289] tipc: Started in network mode [ 209.810394][ T7289] tipc: Node identity ac1414aa, cluster identity 4711 [ 209.830455][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 209.861891][ T24] usb 1-1: string descriptor 0 read error: -22 [ 209.872221][ T24] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 209.901995][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.935433][ T24] usb 1-1: config 0 descriptor?? [ 209.951129][ T3084] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 209.982305][ T7279] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 210.011815][ T24] hub 1-1:0.0: bad descriptor, ignoring hub [ 210.044242][ T24] hub 1-1:0.0: probe with driver hub failed with error -5 [ 210.054474][ T7289] tipc: Enabled bearer , priority 10 [ 210.117155][ T24] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 210.143402][ T3084] usb 5-1: Using ep0 maxpacket: 32 [ 210.173088][ T7291] netlink: 9 bytes leftover after parsing attributes in process `syz.2.428'. [ 210.186975][ T3084] usb 5-1: config 0 has no interfaces? [ 210.231291][ T3084] usb 5-1: New USB device found, idVendor=5fc3, idProduct=25bf, bcdDevice= 0.05 [ 210.281649][ T3084] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.327169][ T3084] usb 5-1: Product: syz [ 210.341774][ T7291] 0: renamed from hsr0 (while UP) [ 210.354514][ T3084] usb 5-1: Manufacturer: syz [ 210.379680][ T3084] usb 5-1: SerialNumber: syz [ 210.434885][ T3084] usb 5-1: config 0 descriptor?? [ 210.457885][ T7291] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 210.728699][ T7285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.425'. [ 210.883612][ T7285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.425'. [ 210.964430][ T7285] dummy0: entered promiscuous mode [ 211.115611][ T7285] dummy0: left promiscuous mode [ 211.307846][ T9] tipc: Node number set to 2886997162 [ 211.751506][ T5898] usb 1-1: USB disconnect, device number 16 [ 211.776659][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 211.783148][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 211.790570][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 211.811210][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 211.817446][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 212.375040][ T5857] usb 5-1: USB disconnect, device number 25 [ 214.232874][ T7317] netlink: 'syz.0.434': attribute type 1 has an invalid length. [ 217.231977][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 265.141128][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.161816][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 408.473205][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 408.480289][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5853/1:b..l P5828/2:b..l [ 408.489734][ C0] rcu: (detected by 0, t=10502 jiffies, g=22593, q=1521437 ncpus=2) [ 408.497827][ C0] task:syz-executor state:R running task stack:19536 pid:5828 tgid:5828 ppid:5826 task_flags:0x400100 flags:0x00000002 [ 408.512216][ C0] Call Trace: [ 408.515540][ C0] [ 408.518513][ C0] __schedule+0x1b88/0x5240 [ 408.523069][ C0] ? virtqueue_enable_cb_delayed+0x5e5/0x900 [ 408.529084][ C0] ? preempt_schedule_common+0x84/0xd0 [ 408.534576][ C0] ? __pfx___schedule+0x10/0x10 [ 408.539462][ C0] ? __pfx_start_xmit+0x10/0x10 [ 408.544340][ C0] ? preempt_schedule+0xe4/0xf0 [ 408.549208][ C0] preempt_schedule_common+0x84/0xd0 [ 408.554516][ C0] preempt_schedule+0xe4/0xf0 [ 408.559221][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 408.564620][ C0] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 408.570721][ C0] preempt_schedule_thunk+0x16/0x30 [ 408.575944][ C0] __local_bh_enable_ip+0x179/0x200 [ 408.581187][ C0] ? __dev_queue_xmit+0x2f9/0x3f60 [ 408.586312][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 408.592087][ C0] ? __dev_queue_xmit+0x2f9/0x3f60 [ 408.597228][ C0] ? __dev_queue_xmit+0x2f9/0x3f60 [ 408.602366][ C0] __dev_queue_xmit+0x1780/0x3f60 [ 408.607430][ C0] ? __dev_queue_xmit+0x2f9/0x3f60 [ 408.612577][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 408.617975][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 408.624165][ C0] ? kernel_text_address+0xa7/0xe0 [ 408.629313][ C0] ? __kernel_text_address+0xd/0x40 [ 408.634544][ C0] ? unwind_get_return_address+0x4d/0x90 [ 408.640214][ C0] ? __lock_acquire+0xad5/0xd80 [ 408.645094][ C0] ? __lock_acquire+0xad5/0xd80 [ 408.650000][ C0] ? ip_finish_output2+0x947/0x12e0 [ 408.655223][ C0] ip_finish_output2+0xcd2/0x12e0 [ 408.660282][ C0] ? ip_finish_output2+0x43d/0x12e0 [ 408.665541][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 408.671087][ C0] ? skb_gso_validate_network_len+0x131/0x2a0 [ 408.677198][ C0] ? __ip_finish_output+0x1b0/0x400 [ 408.682452][ C0] __ip_queue_xmit+0x1042/0x1960 [ 408.687412][ C0] ? tcp_options_write+0x25b/0xd50 [ 408.692525][ C0] ? csum_tcpudp_nofold+0x1e/0x60 [ 408.697571][ C0] ? __ip_queue_xmit+0x62/0x1960 [ 408.702544][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 408.707695][ C0] __tcp_transmit_skb+0x23d8/0x3a90 [ 408.712953][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 408.718556][ C0] ? tcp_small_queue_check+0x206/0x410 [ 408.724044][ C0] tcp_write_xmit+0x1455/0x66a0 [ 408.728937][ C0] __tcp_push_pending_frames+0x9b/0x370 [ 408.734503][ C0] tcp_sendmsg_locked+0x453b/0x5030 [ 408.739774][ C0] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 408.745346][ C0] ? tcp_sendmsg+0x22/0x50 [ 408.749786][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 408.755018][ C0] tcp_sendmsg+0x30/0x50 [ 408.759279][ C0] __sock_sendmsg+0x1a6/0x270 [ 408.763980][ C0] sock_write_iter+0x2d9/0x3f0 [ 408.768767][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 408.774083][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 408.779492][ C0] vfs_write+0x70f/0xd10 [ 408.783753][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 408.789062][ C0] ? __pfx_vfs_write+0x10/0x10 [ 408.793855][ C0] ? lock_vma_under_rcu+0x1f0/0x9a0 [ 408.799082][ C0] ksys_write+0x19d/0x2d0 [ 408.803446][ C0] ? __pfx_ksys_write+0x10/0x10 [ 408.808527][ C0] ? do_syscall_64+0xb6/0x210 [ 408.813234][ C0] do_syscall_64+0xf3/0x210 [ 408.817769][ C0] ? clear_bhb_loop+0x45/0xa0 [ 408.822474][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.828397][ C0] RIP: 0033:0x7fc2f6f8cbe0 [ 408.832841][ C0] RSP: 002b:00007ffec1b9d7f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 408.841261][ C0] RAX: ffffffffffffffda RBX: 0000000fd12e9380 RCX: 00007fc2f6f8cbe0 [ 408.849272][ C0] RDX: 000000000000b540 RSI: 00007fc2f41f4ac0 RDI: 0000000000000003 [ 408.857268][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 00000000005ffde8 [ 408.865267][ C0] R10: 5fcf34a72cf00e80 R11: 0000000000000202 R12: 000000000000b540 [ 408.873277][ C0] R13: 000055557a090c70 R14: 00007ffec1b9dd00 R15: 00007fc2f41f4ac0 [ 408.881272][ C0] [ 408.884296][ C0] task:syz-executor state:R running task stack:20648 pid:5853 tgid:5853 ppid:5837 task_flags:0x400140 flags:0x00000002 [ 408.897823][ C0] Call Trace: [ 408.901132][ C0] [ 408.904094][ C0] __schedule+0x1b88/0x5240 [ 408.908638][ C0] ? preempt_schedule_irq+0xfe/0x1c0 [ 408.913942][ C0] ? __pfx___schedule+0x10/0x10 [ 408.918841][ C0] ? preempt_schedule_irq+0xf3/0x1c0 [ 408.924151][ C0] preempt_schedule_irq+0xfe/0x1c0 [ 408.929309][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 408.935067][ C0] ? is_bpf_text_address+0x288/0x2a0 [ 408.940381][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 408.945618][ C0] irqentry_exit+0x5e/0x90 [ 408.950053][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 408.956248][ C0] RIP: 0010:lock_acquire+0x167/0x2f0 [ 408.961588][ C0] Code: c7 44 24 10 00 00 00 00 9c 8f 44 24 10 f7 44 24 10 00 02 00 00 0f 85 fd 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 65 48 8b 45 00 <48> 3b 44 24 38 0f 85 72 01 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e [ 408.981216][ C0] RSP: 0018:ffffc900041cf1a8 EFLAGS: 00000206 [ 408.987299][ C0] RAX: b24819e09214f900 RBX: ffffffff8ed3df20 RCX: b24819e09214f900 [ 408.995299][ C0] RDX: 0000000000000000 RSI: ffffffff8e4db511 RDI: ffffffff8ca1b5a0 [ 409.003293][ C0] RBP: ffffffff93686020 R08: 0000000000000000 R09: 0000000000000000 [ 409.011282][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 409.019296][ C0] R13: 0000000000000002 R14: 0000000000000246 R15: 0000000000000000 [ 409.027316][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 409.032455][ C0] ? __free_frozen_pages+0xde8/0x10a0 [ 409.037839][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 409.043007][ C0] unwind_next_frame+0xd5/0x23b0 [ 409.047988][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 409.053149][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 409.058289][ C0] ? __free_frozen_pages+0xde8/0x10a0 [ 409.063681][ C0] ? __free_frozen_pages+0xde8/0x10a0 [ 409.069081][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 409.075263][ C0] arch_stack_walk+0x11e/0x150 [ 409.080084][ C0] ? __free_frozen_pages+0xde8/0x10a0 [ 409.085489][ C0] stack_trace_save+0x11a/0x1d0 [ 409.090368][ C0] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 409.096303][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 409.101527][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 409.106925][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 409.112857][ C0] ? __lock_acquire+0xad5/0xd80 [ 409.117753][ C0] save_stack+0xfc/0x1f0 [ 409.122041][ C0] ? __pfx_save_stack+0x10/0x10 [ 409.126938][ C0] ? __free_frozen_pages+0xde8/0x10a0 [ 409.132346][ C0] ? page_ext_put+0x97/0xc0 [ 409.136882][ C0] __reset_page_owner+0x76/0x1e0 [ 409.141867][ C0] __free_frozen_pages+0xde8/0x10a0 [ 409.147108][ C0] __put_partials+0x160/0x1c0 [ 409.151835][ C0] put_cpu_partial+0x17e/0x250 [ 409.156627][ C0] ? put_cpu_partial+0x72/0x250 [ 409.161518][ C0] __slab_free+0x294/0x390 [ 409.165962][ C0] ? __phys_addr+0xba/0x170 [ 409.170494][ C0] qlist_free_all+0x9a/0x140 [ 409.175134][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 409.180633][ C0] __kasan_slab_alloc+0x23/0x80 [ 409.185496][ C0] kmem_cache_alloc_noprof+0x1e1/0x390 [ 409.190973][ C0] ? security_file_alloc+0x32/0x310 [ 409.196202][ C0] security_file_alloc+0x32/0x310 [ 409.201256][ C0] init_file+0x90/0x300 [ 409.205435][ C0] alloc_empty_file+0x70/0x1d0 [ 409.210243][ C0] path_openat+0x10d/0x35d0 [ 409.214788][ C0] ? stack_trace_save+0x11a/0x1d0 [ 409.219872][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 409.225283][ C0] ? stack_depot_save_flags+0x44/0x940 [ 409.230889][ C0] ? __lock_acquire+0xad5/0xd80 [ 409.235803][ C0] ? kasan_save_track+0x51/0x80 [ 409.240689][ C0] ? kasan_save_track+0x3f/0x80 [ 409.245569][ C0] ? __kasan_slab_alloc+0x66/0x80 [ 409.250631][ C0] ? kmem_cache_alloc_noprof+0x1e1/0x390 [ 409.256298][ C0] ? getname_flags+0xb7/0x530 [ 409.261004][ C0] ? __pfx_path_openat+0x10/0x10 [ 409.265964][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.272065][ C0] do_filp_open+0x284/0x4e0 [ 409.276589][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 409.281615][ C0] ? do_raw_spin_lock+0x151/0x370 [ 409.286709][ C0] do_sys_openat2+0x12b/0x1d0 [ 409.291444][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 409.296926][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 409.302159][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 409.307395][ C0] __x64_sys_openat+0x249/0x2a0 [ 409.312287][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 409.317707][ C0] ? do_syscall_64+0xb6/0x210 [ 409.322452][ C0] do_syscall_64+0xf3/0x210 [ 409.326985][ C0] ? clear_bhb_loop+0x45/0xa0 [ 409.331687][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.337595][ C0] RIP: 0033:0x7febbbf8da61 [ 409.342034][ C0] RSP: 002b:00007febbc2dfd40 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 409.350475][ C0] RAX: ffffffffffffffda RBX: 00000000000000ec RCX: 00007febbbf8da61 [ 409.358472][ C0] RDX: 0000000000090800 RSI: 00007febbc010d88 RDI: 00000000ffffff9c [ 409.366482][ C0] RBP: 00007febbc2dfdec R08: 0000000000000000 R09: 0000000000000000 [ 409.374475][ C0] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000049 [ 409.382459][ C0] R13: 0000000000000000 R14: 0000000000035435 R15: 00007febbc2dfe40 [ 409.390464][ C0] [ 409.393523][ C0] rcu: rcu_preempt kthread starved for 9868 jiffies! g22593 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 409.404657][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 409.414646][ C0] rcu: RCU grace-period kthread stack dump: [ 409.420552][ C0] task:rcu_preempt state:R running task stack:26744 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 409.434089][ C0] Call Trace: [ 409.437396][ C0] [ 409.440353][ C0] __schedule+0x1b88/0x5240 [ 409.444915][ C0] ? schedule+0x163/0x360 [ 409.449292][ C0] ? __pfx___schedule+0x10/0x10 [ 409.454196][ C0] ? schedule+0x90/0x360 [ 409.458473][ C0] ? schedule+0x90/0x360 [ 409.462755][ C0] schedule+0x163/0x360 [ 409.466953][ C0] schedule_timeout+0x15b/0x2b0 [ 409.471855][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 409.477262][ C0] ? __pfx_process_timeout+0x10/0x10 [ 409.482566][ C0] ? prepare_to_swait_event+0x1e5/0x340 [ 409.488207][ C0] ? prepare_to_swait_event+0x308/0x340 [ 409.493800][ C0] rcu_gp_fqs_loop+0x2e1/0x1340 [ 409.498714][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 409.504992][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 409.510318][ C0] ? finish_swait+0xdb/0x200 [ 409.514936][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 409.520195][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 409.524815][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 409.530040][ C0] ? __kthread_parkme+0x1a8/0x200 [ 409.535076][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 409.540329][ C0] kthread+0x7b7/0x940 [ 409.544422][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 409.549839][ C0] ? __pfx_kthread+0x10/0x10 [ 409.554451][ C0] ? __pfx_kthread+0x10/0x10 [ 409.559064][ C0] ? __pfx_kthread+0x10/0x10 [ 409.563674][ C0] ? __pfx_kthread+0x10/0x10 [ 409.568290][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 409.573613][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 409.578835][ C0] ? __pfx_kthread+0x10/0x10 [ 409.583449][ C0] ret_from_fork+0x4b/0x80 [ 409.587977][ C0] ? __pfx_kthread+0x10/0x10 [ 409.592604][ C0] ret_from_fork_asm+0x1a/0x30 [ 409.597410][ C0] [ 409.600448][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 409.606809][ C0] Sending NMI from CPU 0 to CPUs 1: [ 409.612044][ C1] NMI backtrace for cpu 1 [ 409.612062][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 409.612091][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 409.612106][ C1] RIP: 0010:check_preemption_disabled+0x4/0x120 [ 409.612132][ C1] Code: 8c 48 c7 c6 80 b5 a1 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 <41> 55 41 54 53 48 83 ec 10 4c 8d 25 9c b0 38 07 65 49 8b 04 24 48 [ 409.612146][ C1] RSP: 0018:ffffc90000a07568 EFLAGS: 00000283 [ 409.612161][ C1] RAX: 0000000000000001 RBX: ffffffff93686020 RCX: ffff88801d6cda00 [ 409.612173][ C1] RDX: 0000000000000000 RSI: ffffffff8ca1b580 RDI: ffffffff8ca1b540 [ 409.612185][ C1] RBP: ffffffff816d9bc8 R08: ffffc90000a0773f R09: 0000000000000000 [ 409.612197][ C1] R10: ffffc90000a07730 R11: fffff52000140ee8 R12: ffffc90000a076f0 [ 409.612209][ C1] R13: dffffc0000000000 R14: ffffc90000a08ff8 R15: ffffffff8ed3df20 [ 409.612221][ C1] FS: 0000000000000000(0000) GS:ffff88812509a000(0000) knlGS:0000000000000000 [ 409.612235][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.612246][ C1] CR2: 000020000009d030 CR3: 000000000eb38000 CR4: 00000000003526f0 [ 409.612261][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 409.612271][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 409.612281][ C1] Call Trace: [ 409.612287][ C1] [ 409.612295][ C1] rcu_is_watching+0x15/0xb0 [ 409.612314][ C1] lock_release+0x4e/0x3e0 [ 409.612339][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 409.612358][ C1] unwind_next_frame+0x1a9f/0x23b0 [ 409.612380][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 409.612400][ C1] ? irq_exit_rcu+0x9/0x30 [ 409.612426][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 409.612447][ C1] arch_stack_walk+0x11e/0x150 [ 409.612470][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 409.612504][ C1] stack_trace_save+0x11a/0x1d0 [ 409.612522][ C1] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 409.612546][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 409.612563][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 409.612581][ C1] ? __lock_acquire+0xad5/0xd80 [ 409.612608][ C1] kasan_save_track+0x3f/0x80 [ 409.612630][ C1] ? kasan_save_track+0x3f/0x80 [ 409.612650][ C1] ? __kasan_slab_alloc+0x66/0x80 [ 409.612673][ C1] ? kmem_cache_alloc_noprof+0x1e1/0x390 [ 409.612688][ C1] ? dst_alloc+0x12b/0x190 [ 409.612703][ C1] ? ip_route_output_key_hash_rcu+0x1378/0x2290 [ 409.612728][ C1] ? ip_route_output_key_hash+0x195/0x2b0 [ 409.612751][ C1] ? ip_route_output_flow+0x29/0x140 [ 409.612771][ C1] ? ip_route_me_harder+0x852/0x13e0 [ 409.612795][ C1] ? synproxy_send_tcp+0x356/0x6c0 [ 409.612814][ C1] ? synproxy_send_client_synack+0x8ea/0xf70 [ 409.612833][ C1] ? nft_synproxy_eval_v4+0x3cc/0x610 [ 409.612855][ C1] ? nft_synproxy_do_eval+0x36a/0xa90 [ 409.612876][ C1] ? nft_do_chain+0x4b2/0x1db0 [ 409.612897][ C1] ? nft_do_chain_inet+0x41f/0x6b0 [ 409.612918][ C1] ? nf_hook_slow+0xc8/0x220 [ 409.612934][ C1] ? NF_HOOK+0x29b/0x450 [ 409.612951][ C1] ? NF_HOOK+0x3a0/0x450 [ 409.612967][ C1] ? __netif_receive_skb+0x2c9/0x670 [ 409.612985][ C1] ? process_backlog+0x664/0x15c0 [ 409.613005][ C1] ? __napi_poll+0xcb/0x480 [ 409.613022][ C1] ? net_rx_action+0x89d/0x1240 [ 409.613042][ C1] ? handle_softirqs+0x2d6/0x9b0 [ 409.613065][ C1] ? __irq_exit_rcu+0xfb/0x220 [ 409.613078][ C1] ? irq_exit_rcu+0x9/0x30 [ 409.613119][ C1] __kasan_slab_alloc+0x66/0x80 [ 409.613144][ C1] kmem_cache_alloc_noprof+0x1e1/0x390 [ 409.613165][ C1] ? dst_alloc+0x12b/0x190 [ 409.613182][ C1] dst_alloc+0x12b/0x190 [ 409.613199][ C1] ip_route_output_key_hash_rcu+0x1378/0x2290 [ 409.613241][ C1] ip_route_output_key_hash+0x195/0x2b0 [ 409.613264][ C1] ? ip_route_output_key_hash+0xe1/0x2b0 [ 409.613303][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 409.613336][ C1] ip_route_output_flow+0x29/0x140 [ 409.613359][ C1] ip_route_me_harder+0x852/0x13e0 [ 409.613390][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 409.613416][ C1] ? kmem_cache_alloc_node_noprof+0x24e/0x3b0 [ 409.613443][ C1] synproxy_send_tcp+0x356/0x6c0 [ 409.613467][ C1] synproxy_send_client_synack+0x8ea/0xf70 [ 409.613499][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 409.613519][ C1] ? nft_socket_reduce+0x3e8/0x5c0 [ 409.613540][ C1] ? synproxy_pernet+0x45/0x280 [ 409.613564][ C1] nft_synproxy_eval_v4+0x3cc/0x610 [ 409.613590][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 409.613614][ C1] ? nf_ip_checksum+0x13a/0x500 [ 409.613637][ C1] nft_synproxy_do_eval+0x36a/0xa90 [ 409.613663][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 409.613696][ C1] nft_do_chain+0x4b2/0x1db0 [ 409.613725][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 409.613746][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 409.613774][ C1] ? ieee80211_rx_handlers+0xbbe7/0xbc60 [ 409.613799][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 409.613826][ C1] nft_do_chain_inet+0x41f/0x6b0 [ 409.613849][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 409.613870][ C1] ? ipt_do_table+0x314/0x1870 [ 409.613895][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 409.613916][ C1] nf_hook_slow+0xc8/0x220 [ 409.613936][ C1] NF_HOOK+0x29b/0x450 [ 409.613954][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 409.613973][ C1] ? NF_HOOK+0x9e/0x450 [ 409.613990][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 409.614009][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 409.614031][ C1] ? ip_rcv_finish+0x409/0x560 [ 409.614063][ C1] NF_HOOK+0x3a0/0x450 [ 409.614080][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 409.614097][ C1] ? NF_HOOK+0x9e/0x450 [ 409.614112][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 409.614127][ C1] ? ip_rcv_core+0x80c/0xd20 [ 409.614144][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 409.614165][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 409.614182][ C1] __netif_receive_skb+0x2c9/0x670 [ 409.614202][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 409.614230][ C1] process_backlog+0x664/0x15c0 [ 409.614252][ C1] ? process_backlog+0x33d/0x15c0 [ 409.614275][ C1] ? __pfx_process_backlog+0x10/0x10 [ 409.614299][ C1] __napi_poll+0xcb/0x480 [ 409.614318][ C1] net_rx_action+0x89d/0x1240 [ 409.614347][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 409.614369][ C1] ? sched_balance_domains+0x91a/0xa90 [ 409.614396][ C1] ? sched_balance_domains+0x1b4/0xa90 [ 409.614418][ C1] ? __pfx_sched_balance_domains+0x10/0x10 [ 409.614438][ C1] ? seqcount_lockdep_reader_access+0x1c3/0x230 [ 409.614461][ C1] handle_softirqs+0x2d6/0x9b0 [ 409.614494][ C1] ? __irq_exit_rcu+0xfb/0x220 [ 409.614509][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 409.614534][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 409.614553][ C1] __irq_exit_rcu+0xfb/0x220 [ 409.614566][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 409.614585][ C1] irq_exit_rcu+0x9/0x30 [ 409.614606][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 409.614629][ C1] [ 409.614634][ C1] [ 409.614640][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 409.614656][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 409.614670][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 8f 18 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 409.614683][ C1] RSP: 0018:ffffc90000197dc0 EFLAGS: 000002c2 [ 409.614696][ C1] RAX: 2e60fd1e59b00c00 RBX: ffffffff8197272e RCX: ffffffff8c2fa93c [ 409.614707][ C1] RDX: 0000000000000001 RSI: ffffffff8e6499b7 RDI: ffffffff8ca1b5a0 [ 409.614717][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732b5b R09: 1ffff110170e656b [ 409.614729][ C1] R10: dffffc0000000000 R11: ffffed10170e656c R12: 1ffff92000032fd2 [ 409.614740][ C1] R13: 1ffff11003ad9b40 R14: 0000000000000001 R15: dffffc0000000000 [ 409.614753][ C1] ? do_idle+0x22e/0x5d0 [ 409.614767][ C1] ? ct_kernel_exit+0x12c/0x1a0 [ 409.614785][ C1] default_idle+0x13/0x20 [ 409.614802][ C1] default_idle_call+0x74/0xb0 [ 409.614819][ C1] do_idle+0x22e/0x5d0 [ 409.614836][ C1] ? __pfx_do_idle+0x10/0x10 [ 409.614857][ C1] cpu_startup_entry+0x42/0x60 [ 409.614871][ C1] start_secondary+0xfe/0x100 [ 409.614884][ C1] common_startup_64+0x13e/0x147 [ 409.614913][ C1] [ 414.412007][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.432745][ T1298] ieee802154 phy1 wpan1: encryption failed: -22