last executing test programs: 44.675622569s ago: executing program 2 (id=1177): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @remote}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1, 0xfff6, 0x66, 0x5, 0x5, 0x4, 0x3, @rand_addr=0x64010102, @local}}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@private=0xa010102, @empty=0xe0000300, 0x0, "8a79348df063496d0420922f45a71c1daa8b63040700000000000001d3a4a422", 0x3, 0x200001, 0x85}, 0x3c) 44.431793807s ago: executing program 2 (id=1178): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x8, @multicast, 'ipvlan1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0) 44.099588234s ago: executing program 2 (id=1180): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}, 0xffffff97}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b0000000000000712"], 0x30}, 0x30) 43.977699836s ago: executing program 2 (id=1181): r0 = syz_usb_connect(0x7, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0800000000000000010902120001000000007b69"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000000c0)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = signalfd4(r1, &(0x7f0000000000)={[0x4]}, 0x8, 0x1000) mknodat$loop(r2, &(0x7f0000000040)='./file0\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746e87cbdb5fd123422b"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_usb_connect(0x7, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0800000000000000010902120001000000007b69"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000000c0)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) signalfd4(r1, &(0x7f0000000000)={[0x4]}, 0x8, 0x1000) (async) mknodat$loop(r2, &(0x7f0000000040)='./file0\x00', 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746e87cbdb5fd123422b"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) 43.675585814s ago: executing program 2 (id=1184): prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70f8, 0x3, 0x5, 0xf2}) syz_usb_connect(0x6, 0x3f, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x13, &(0x7f0000000040)=@string={0x13, 0x3, "baf52f1a063d2aed771c56bfda5f6c7acf"}}, {0xee, &(0x7f0000000080)=@string={0xee, 0x3, "5a1a79ec1f2597943e1c613fbcef101e189d8fa971624e059f36131fbbb98e8e915fa7eaa8931d0b8f34baad8480c583a3af139cff03b5746dca4bc6d2663d348537a06ba6995583f0f73a8ab650b16a4d3437d17a18d6f74006e2b868159405f39d04bf3a4873ae3618c3f398c99155abe5ab10c92e64d49161e077ff50b78f0f64a511912e285953099bfdd95f79926f0dda1496558afab98ee4f32c626ec457b65cef7676507c4de0e9eb2adcc64693e3f66d8a56fb0ef12e60c8c39f08c9c3bb3cd34ca9ccfcf9d195006cae9cdc39c2db1dcce2a5772b1fcc826c76134b513ef45ed9df876c982f005a"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44d}}, {0xc1, &(0x7f00000001c0)=@string={0xc1, 0x3, "34d8571b7069282be4ba9dd19ea0dbdf9c3bd08cfb4060d33b383bd31f2398651a8c1d9ba1a684bc52f5f3880da92f8c991105edf4b43169aa0ff922cf79f7b5391f15b0a96c4f1865af5d517e21168c21d976506ca651343225235aef3b8b93bc8234c6a3dc1b6494eab1fbaa839b5a1777e80f164af944c0d7af9c5b9b05bab26d91592f374d154e78156fc78f53dc71938d01bfe01d734989d1d8fa821c26f73798a4b5c771b5de215359d24fcda72200e496ee22c27569f137dabef519"}}, {0xfffffffffffffca9, &(0x7f00000002c0)=@string={0x71, 0x3, "c549f934e4ccf17e71592fafd98b7dd904b5ab2d058fad462628d146b1e7083c2cd5020dda92d030695dd9e192b6aa8c27cfb1174a3f1f5ad34ae2c4b9ce463394b58c1436855126c0497292dfbdcffe35e4699f1896f934a9c9b5d4935ee98a75511801dbd07d135a4921949fd679"}}, {0x6d, &(0x7f0000000340)=@string={0x6d, 0x3, "a9dff0e9ec7f02fdb928ee7bc7b172db8ec9f6f15c69bdcc6af4da0bdfc4738d42532779a73dfc76f89ba9f23f1739f08f4c9e107a14d220d1d9e3738393ec3a7d317a5b6d0dd2a1f94d8a08cbcfd888d5207f9a45eeb8114ae7283fddb0fcd1b9fe8cb16ecb44c7493cde"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x455}}]}) 42.647875427s ago: executing program 2 (id=1188): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0x3}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES8], 0x0) 27.473878277s ago: executing program 32 (id=1188): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0x3}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES8], 0x0) 11.430265399s ago: executing program 3 (id=1272): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r6, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x8417f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES8=r7, @ANYRES64=0x0, @ANYRES16], 0x1000f) 8.248628487s ago: executing program 5 (id=1276): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000140)) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4040080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6a}, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x12}]}, 0x34}, 0x1, 0x0, 0x0, 0x44001}, 0x4000001) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x44, r3, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x4, 0x2}, {0x7, 0x6}, {0x4, 0x2}, {0x3, 0x7}, {0x5}, {0x1, 0x4}, {0x1, 0x2}, {0x0, 0xa}, {0x0, 0x1}, {0x6, 0x1}, {0x2, 0xa}, {0x0, 0x2}, {0x3, 0x9}, {0x0, 0x7}]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000d1}, 0x4000814) 8.144416997s ago: executing program 3 (id=1279): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000052c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x7f8, {0x0, 0x0, 0x0, r5, {0xfff2, 0xffe0}, {}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x16de0}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r9, {0xd, 0xf}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 8.001232646s ago: executing program 5 (id=1280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0x8, 0x1, 'u32\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}}, 0x0) 7.710568554s ago: executing program 5 (id=1282): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSSOFTCAR(r3, 0x80047437, &(0x7f0000000140)=0xffff) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000000000094"], 0x48) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000e10f003b150004000000000040f7ff0600", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010065727370616e000010000280060010004e20000004001200"], 0x40}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000200)={0xffffffffffffff35, r5, 0xc, {0x1, 0x7}, 0xff}, 0x1) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$revoke(0x3, r0) 7.631040607s ago: executing program 3 (id=1283): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) renameat2(r4, &(0x7f0000000180)='./bus\x00', r4, &(0x7f0000000380)='./bus\x00', 0x1) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b2000905850140000000000905f3"], 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r7, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r7, @ANYBLOB="4b7656da"], 0x40c}}, 0x0) 5.614715527s ago: executing program 4 (id=1286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x188, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x15c, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}]}}}]}}}, {0x108, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xf8, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xe2, 0x3, "73ad6153669faaa3221f5223f828b499b49208f8130fe52e3efc770b8878b3c728ec16efbe94fd77a888e4652f5b67f836911a68e983312d54379cb989b1d936764353abd2f9a6e177583670d0c88e3b6192f17d9df228d0af1ffbc4cf178e4c7898865f9ab8926073fd2a60b5186e2d2c494b8a434d8042e07fe26c584f96a425beb57d3da037ebc905ac43b07b564f999d85d5c34de10ace0dc0ebb95b32764678eba079a26bfb7c90bc5f7ad8154d0e9e98e9b80090417a99f82c75586ed4ae8442d2c04837cfa9fed1fd2207e4b1bd132d3383f25e2796ae7ac2725f"}, @NFTA_MATCH_NAME={0x8, 0x1, 'u32\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1b0}}, 0x0) 5.407627592s ago: executing program 0 (id=1287): read$FUSE(0xffffffffffffffff, &(0x7f0000001880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, r0, {0x7, 0x2b, 0x4, 0x0, 0x81, 0x5, 0xa, 0x3, 0x0, 0x0, 0x10, 0x2}}, 0x50) syz_usb_connect(0x2, 0x1bd, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x36, 0xaa, 0xd2, 0x40, 0x83a, 0xf522, 0xb97e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ab, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x97, 0x0, 0x5, 0x8a, 0xc4, 0x93, 0x0, [], [{{0x9, 0x5, 0x80, 0x2, 0x3ff, 0x7, 0x2, 0x84, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xfffb}, @generic={0x6, 0x23, "9ade566d"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x20, 0xe, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x3}, @generic={0xd8, 0x10, "50987bb4de4873c66b4257582d8f925aa473c1e142152cc46b11822f0770ddf65f205756d97896d95dc0e74d270579cf928f490d3a2e90ac2d12c6852f859512dad390720e46a287efd8b5709105d63312903fb764cea8ae62de7b4b17b9a698296d543757d3cc5ee10cccb9992d460cc5d5284bbe54554d1a03c22883ada3a0cec3aae15ed99573e0f1731df0281eebaebd9d26f3b1a23a3d16cef268dd62d6d441bb18320be353a56c039ffcb020b20d0b95b7907db768ad3e42e2906144ca6b52a41f37eb9d68c0baf6d4ae21ec4092f73429b3ff"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x7f, 0x12, 0x89, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xe400}]}}, {{0x9, 0x5, 0x5, 0x2, 0x400, 0xb5, 0x2, 0x9}}, {{0x9, 0x5, 0x10a, 0x10, 0x3ff, 0xc0, 0xa9, 0x7, [@generic={0x79, 0xa, "b5b347b79b4b5646ece09fc9e2bbde9920bed5b2e44610c73eaa5af483b282c98e043d61e5e381025b02d64fee9a849df9cea1cd71dab600c40e03d82425d2f8bcea89ded5346d9d397a2c9deaecf8d1563c4d39a84640923a2f5ea6742a88d0c4ad2820dd56d70e34069fecf116948f5bc80bbf5e2fc6"}]}}]}}]}}]}}, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x6, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000300)="2705020034", 0x5}, {&(0x7f0000000040)="1e393502dda1", 0x6}], 0x2}, 0x40488cc) 5.244525689s ago: executing program 5 (id=1288): io_uring_setup(0x5f45, &(0x7f00000001c0)={0x0, 0x0, 0x2}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x2a, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x7, 0x5, 0xfff, 0x200, 0x5, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x1, &(0x7f0000000000)=[r3]) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{&(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140), 0x0, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, r5}}}, @cred={{0x1c, 0x1, 0x2, {r4, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x60, 0xc11}}, {{0x0, 0x0, &(0x7f0000002800), 0x0, &(0x7f0000002a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x20, 0x20000090}}, {{0x0, 0x0, &(0x7f0000002d40), 0x0, 0x0, 0x0, 0x20044894}}], 0x3, 0x4001) prctl$PR_SCHED_CORE(0x3e, 0x2, r4, 0x0, 0x0) r6 = gettid() waitid(0x2, r6, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 5.190860739s ago: executing program 4 (id=1289): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r6, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x8417f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES8=r7, @ANYRES64=0x0, @ANYRES16], 0x1000f) 5.011047506s ago: executing program 3 (id=1292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}}, 0x0) 4.731075755s ago: executing program 3 (id=1293): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000052c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x7f8, {0x0, 0x0, 0x0, r5, {0xfff2, 0xffe0}, {}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x16de0}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r9, {0xd, 0xf}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 4.675605307s ago: executing program 1 (id=1294): syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) syz_open_dev$media(&(0x7f0000000000), 0x10000, 0x80000) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000540)={0x80000000, 0x0, 0x0}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_io_uring_setup(0x4fc, &(0x7f0000000100)={0x0, 0xc6be, 0x4000, 0x3, 0x1df}, &(0x7f0000000180)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x7126, 0x0}) 4.010132866s ago: executing program 3 (id=1295): r0 = syz_open_dev$radio(0x0, 0x2, 0x2) socket$kcm(0x11, 0xa, 0x300) chdir(&(0x7f0000000480)='./cgroup\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0) lseek(r1, 0x1, 0x1) getdents(r1, 0x0, 0x58) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x808000, 0x0, 0x0, 0x8fe0, 0x10000}) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x7}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80a0) 3.606068509s ago: executing program 1 (id=1296): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffc}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0x0, 0x3c}, 0x2, @in=@private=0xa010102, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (fail_nth: 55) 3.131673999s ago: executing program 0 (id=1297): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}}, 0x18) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f00000002c0)=@can, 0x80, &(0x7f0000000240)=[{&(0x7f0000000bc0)="06910864e1b4477b86", 0x9}], 0x1}}], 0x1, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x1d, r1, 0x0, {0x0, 0x1, 0x3}, 0x2}, 0x18, &(0x7f0000000500)={0x0}, 0x1, 0x6fffff9, 0x0, 0x40040}, 0x4008080) 3.130672238s ago: executing program 1 (id=1298): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSSOFTCAR(r3, 0x80047437, &(0x7f0000000140)=0xffff) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000000000094"], 0x48) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000e10f003b150004000000000040f7ff0600", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010065727370616e000010000280060010004e20000004001200"], 0x40}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000200)={0xffffffffffffff35, r5, 0xc, {0x1, 0x7}, 0xff}, 0x1) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$revoke(0x3, r0) 2.607670959s ago: executing program 4 (id=1299): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 2.443668349s ago: executing program 5 (id=1300): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x188, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x15c, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}]}}}]}}}, {0x108, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xf8, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xe2, 0x3, "73ad6153669faaa3221f5223f828b499b49208f8130fe52e3efc770b8878b3c728ec16efbe94fd77a888e4652f5b67f836911a68e983312d54379cb989b1d936764353abd2f9a6e177583670d0c88e3b6192f17d9df228d0af1ffbc4cf178e4c7898865f9ab8926073fd2a60b5186e2d2c494b8a434d8042e07fe26c584f96a425beb57d3da037ebc905ac43b07b564f999d85d5c34de10ace0dc0ebb95b32764678eba079a26bfb7c90bc5f7ad8154d0e9e98e9b80090417a99f82c75586ed4ae8442d2c04837cfa9fed1fd2207e4b1bd132d3383f25e2796ae7ac2725f"}, @NFTA_MATCH_NAME={0x8, 0x1, 'u32\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1b0}}, 0x0) 2.297656724s ago: executing program 4 (id=1301): r0 = socket(0x2, 0x80805, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0, r2}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 2.251522717s ago: executing program 5 (id=1302): r0 = socket$kcm(0xa, 0x2, 0x73) prlimit64(0xffffffffffffffff, 0xf, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x8080, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close_range(r5, r5, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x201, 0x800003f, r7, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.939539491s ago: executing program 4 (id=1303): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}}, 0x0) 1.728875978s ago: executing program 4 (id=1304): socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x4d, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)={0x0, 0x2, [0xd62, 0xd67, 0x738, 0xa8d]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0) mmap(&(0x7f00002e8000/0x4000)=nil, 0x4000, 0x2, 0x110, 0xffffffffffffffff, 0xf08a3000) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008005) ioctl$EVIOCGMASK(r4, 0x60b, 0x0) write$char_usb(r4, 0x0, 0x0) syz_usb_disconnect(r3) syz_emit_ethernet(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10) r5 = socket$inet6(0xa, 0x3, 0xff) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0xc1105511, &(0x7f0000000040)={0xe, 0x0, 0x8, 0xb53, '\x00', 0x2}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0xc1105511, &(0x7f0000000040)) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast2, 0x5}, 0x1c) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[], 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 1.667937287s ago: executing program 0 (id=1305): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000052c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x7f8, {0x0, 0x0, 0x0, r5, {0xfff2, 0xffe0}, {}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x16de0}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r9, {0xd, 0xf}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 1.631225264s ago: executing program 1 (id=1306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xb, 0x1, 'nfacct\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}}, 0x0) 1.270878394s ago: executing program 1 (id=1307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) (fail_nth: 7) 626.027036ms ago: executing program 0 (id=1308): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xcafe28741a3524c9, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, r1, 0x80, 0x1e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0xffffffef, 0x0, 0x4008000}, 0x0) 299.704708ms ago: executing program 1 (id=1309): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0x22100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040800) r4 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r4, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) capget(0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0xf9}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x4}]}}}]}, 0x48}}, 0x0) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x4018}], 0x1, 0x7) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r1, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 169.30189ms ago: executing program 0 (id=1310): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x800000, 0x0, 'queue1\x00', 0x2}) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001880)=[{0x0}], 0x1, &(0x7f0000001940)=[{0xa0, 0x111, 0x559, "acfc4a6aa177f1d896b81063d6d374039c75b4c0ed54155d97e29c271fc96746684699836ae58b5ea2b8cce150f9c439a3b6c301ae3a98e4ec9c50b538df3463291fe12fa63e9e862721553a20caba0973b08ae187016dbccbcc688f05575e8c4f36bef326d952b37ca60eb6933921a8ce79234588ae556c3a9a169489a1ca8aff35a6e5bce7a88dff2a1cb2"}, {0x88, 0x107, 0x7, "2170b556d7fbb3d56a5d675de735b3b277492ff894ec27b7b880f749fc75808247c9e1d64dae150db0902b497ee5af4f4b697304ba7ac4d70b48b4b7f49da9a2e98798a6aaca5af13aa645e14dfd5d703cb573beed22c0cbec86ca10f93c6e29951194bcc0fe0d301a0077e21fb4d09376"}, {0x50, 0x104, 0xd46, "8313bddf9f6d457e35f637db437c527efd2829d9eff3a92f256d697f8d6618a5bc93c897a42b0ff1970d4fc860851272a7a249785eabe6a2d7355bab"}, {0x30, 0x3a, 0x7, "186239997f46eb4e2471a022da2aa6ca9dc3e4e6b076c021f9aefc"}, {0x28, 0x135, 0xfffff061, "ce539112360f2566cdf7ad7c319d192be2be20a3af6146"}, {0x18, 0x11, 0xfc24, "f2"}], 0x1e8}, 0x4001) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="238292", 0xfff6}], 0x2) 0s ago: executing program 0 (id=1311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x2c, 0x3, "73ad6153669faaa3221f5223f828b499b49208f8130fe52e3efc770b8878b3c728ec16efbe94fd77"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'nfacct\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xac}}, 0x0) kernel console output (not intermixed with test programs): high-speed USB device number 37 using dummy_hcd [ 338.144127][ T119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.292830][ T5939] usb 2-1: Using ep0 maxpacket: 32 [ 338.304088][ T5939] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.1f [ 338.314057][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.322242][ T5939] usb 2-1: Product: syz [ 338.327715][ T5939] usb 2-1: Manufacturer: syz [ 338.338287][ T5939] usb 2-1: SerialNumber: syz [ 338.352909][ T5939] usb 2-1: config 0 descriptor?? [ 338.366625][ T119] usb 5-1: GET_CAPABILITIES returned 0 [ 338.374835][ T119] usbtmc 5-1:16.0: can't read capabilities [ 338.386137][ T5939] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 338.671841][ T8819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.680774][ T8819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.740449][ T5925] usb 5-1: USB disconnect, device number 38 [ 339.002944][ T5939] gspca_stk1135: reg_w 0x2 err -110 [ 339.191000][ T5939] gspca_stk1135: serial bus timeout: status=0x00 [ 339.204305][ T5939] gspca_stk1135: Sensor write failed [ 339.209696][ T5939] gspca_stk1135: serial bus timeout: status=0x00 [ 339.232550][ T5939] gspca_stk1135: Sensor write failed [ 339.332836][ T5939] gspca_stk1135: serial bus timeout: status=0x00 [ 339.391355][ T5939] gspca_stk1135: Sensor read failed [ 339.405789][ T5939] gspca_stk1135: serial bus timeout: status=0x00 [ 339.412199][ T5939] gspca_stk1135: Sensor read failed [ 339.490822][ T5939] gspca_stk1135: Detected sensor type unknown (0x0) [ 339.686773][ T5939] gspca_stk1135: serial bus timeout: status=0x00 [ 339.722787][ T5939] gspca_stk1135: Sensor read failed [ 339.728170][ T5939] gspca_stk1135: serial bus timeout: status=0x00 [ 339.772582][ T5939] gspca_stk1135: Sensor read failed [ 339.778006][ T5939] gspca_stk1135: serial bus timeout: status=0x00 [ 340.012635][ T119] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 340.032309][ T5939] gspca_stk1135: Sensor write failed [ 340.038225][ T5939] gspca_stk1135: serial bus timeout: status=0x00 [ 340.045981][ T5939] gspca_stk1135: Sensor write failed [ 340.051426][ T5939] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 340.234944][ T119] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 340.265046][ T119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.302003][ T119] usb 5-1: config 0 descriptor?? [ 340.322191][ T119] cp210x 5-1:0.0: cp210x converter detected [ 340.403930][ T44] usb 2-1: USB disconnect, device number 37 [ 340.582620][ T5939] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 340.744490][ T5939] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 340.795785][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.843420][ T5939] usb 1-1: config 0 descriptor?? [ 340.867438][ T5939] cp210x 1-1:0.0: cp210x converter detected [ 341.237037][ T44] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 341.297776][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.828'. [ 341.324301][ T119] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 341.445353][ T44] usb 2-1: config 1 interface 0 altsetting 147 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 341.472633][ T44] usb 2-1: config 1 interface 0 altsetting 147 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 341.486181][ T5939] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 341.563120][ T44] usb 2-1: config 1 interface 0 altsetting 147 endpoint 0x2 has invalid maxpacket 32, setting to 8 [ 341.622608][ T44] usb 2-1: config 1 interface 0 has no altsetting 0 [ 342.467180][ T5939] cp210x 1-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 342.475226][ T5939] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 342.531205][ T5939] usb 1-1: cp210x converter now attached to ttyUSB0 [ 342.644525][ T5939] usb 1-1: USB disconnect, device number 19 [ 342.731823][ T8882] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.829'. [ 342.867165][ T5939] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 343.243117][ T5939] cp210x 1-1:0.0: device disconnected [ 343.628878][ T119] cp210x 5-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 343.708410][ T119] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 343.793129][ T119] usb 5-1: cp210x converter now attached to ttyUSB0 [ 343.860864][ T119] usb 5-1: USB disconnect, device number 39 [ 343.926785][ T119] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 344.002112][ T44] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.40 [ 344.031206][ T119] cp210x 5-1:0.0: device disconnected [ 344.052538][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.202785][ T44] usb 2-1: can't set config #1, error -71 [ 344.222776][ T44] usb 2-1: USB disconnect, device number 38 [ 344.402017][ T8892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.833'. [ 344.423345][ T119] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 344.449564][ T8893] netlink: 24 bytes leftover after parsing attributes in process `syz.1.832'. [ 344.499769][ T8896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.832'. [ 344.595953][ T119] usb 5-1: Using ep0 maxpacket: 8 [ 344.612567][ T119] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 344.667919][ T119] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 344.731029][ T119] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 344.909910][ T119] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 344.934214][ T119] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 345.026231][ T119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.512968][ T119] usb 5-1: GET_CAPABILITIES returned 0 [ 345.560694][ T119] usbtmc 5-1:16.0: can't read capabilities [ 345.795991][ T8887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.809482][ T8887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.905649][ T5974] usb 5-1: USB disconnect, device number 40 [ 346.142562][ T5925] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 346.324266][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 346.337337][ T5925] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.1f [ 346.346669][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.382661][ T5925] usb 4-1: Product: syz [ 346.397165][ T5925] usb 4-1: Manufacturer: syz [ 346.468772][ T5925] usb 4-1: SerialNumber: syz [ 346.503686][ T5925] usb 4-1: config 0 descriptor?? [ 346.536177][ T5925] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 346.680124][ T8915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.839'. [ 347.083684][ T5925] gspca_stk1135: reg_w 0x2 err -110 [ 347.090080][ T5925] gspca_stk1135: serial bus timeout: status=0x00 [ 347.096766][ T5925] gspca_stk1135: Sensor write failed [ 347.102322][ T5925] gspca_stk1135: serial bus timeout: status=0x00 [ 347.110105][ T5925] gspca_stk1135: Sensor write failed [ 347.157693][ T5925] gspca_stk1135: serial bus timeout: status=0x00 [ 347.393762][ T5925] gspca_stk1135: Sensor read failed [ 347.557362][ T5925] gspca_stk1135: serial bus timeout: status=0x00 [ 347.578464][ T5925] gspca_stk1135: Sensor read failed [ 347.596651][ T5925] gspca_stk1135: Detected sensor type unknown (0x0) [ 347.614746][ T5925] gspca_stk1135: serial bus timeout: status=0x00 [ 347.621169][ T5925] gspca_stk1135: Sensor read failed [ 347.626938][ T5925] gspca_stk1135: serial bus timeout: status=0x00 [ 347.697563][ T5925] gspca_stk1135: Sensor read failed [ 347.713173][ T5925] gspca_stk1135: serial bus timeout: status=0x00 [ 347.964899][ T5925] gspca_stk1135: Sensor write failed [ 347.970469][ T5925] gspca_stk1135: serial bus timeout: status=0x00 [ 348.056813][ T5925] gspca_stk1135: Sensor write failed [ 348.107291][ T5925] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 348.223666][ T5925] usb 4-1: USB disconnect, device number 31 [ 348.762745][ T5925] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 348.957862][ T5925] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 348.966266][ T5925] usb 4-1: config 0 has no interface number 0 [ 348.999533][ T5925] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 349.065507][ T5925] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 349.114603][ T5925] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 349.176490][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.228410][ T5925] usb 4-1: config 0 descriptor?? [ 349.250917][ T8937] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 349.267015][ T5925] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 349.287182][ T8945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.846'. [ 349.516625][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 349.605695][ T44] usb 4-1: USB disconnect, device number 32 [ 349.852681][ T5939] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 350.012668][ T5939] usb 1-1: Using ep0 maxpacket: 8 [ 350.027551][ T5939] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 350.102374][ T5939] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 350.132633][ T5939] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 350.146984][ T5939] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.160807][ T5939] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 350.175218][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.290819][ T8962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.850'. [ 350.468083][ T5939] usb 1-1: GET_CAPABILITIES returned 0 [ 350.473769][ T5939] usbtmc 1-1:16.0: can't read capabilities [ 350.976036][ T8950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.985100][ T8950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.164471][ T5939] usb 1-1: USB disconnect, device number 20 [ 355.569407][ T5925] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 355.592618][ T119] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 355.652586][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 355.652609][ T30] audit: type=1326 audit(1752454722.558:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.2.869" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13f598e929 code=0x0 [ 355.772832][ T119] usb 4-1: Using ep0 maxpacket: 8 [ 355.781552][ T119] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 355.795032][ T119] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 355.943303][ T119] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 355.982386][ T119] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.007810][ T119] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 356.039027][ T119] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.140199][ T5925] usb 1-1: config 0 has no interfaces? [ 356.156509][ T5925] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 356.180804][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.225684][ T5925] usb 1-1: Product: syz [ 356.239235][ T5925] usb 1-1: Manufacturer: syz [ 356.259843][ T5925] usb 1-1: SerialNumber: syz [ 356.303341][ T5925] usb 1-1: config 0 descriptor?? [ 356.383977][ T119] usb 4-1: GET_CAPABILITIES returned 0 [ 356.409470][ T119] usbtmc 4-1:16.0: can't read capabilities [ 356.604810][ T9029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.613744][ T9029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.770512][ T5925] usb 4-1: USB disconnect, device number 33 [ 356.870021][ T9025] input: syz1 as /devices/virtual/input/input24 [ 356.941874][ T9027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.865'. [ 356.982750][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'. [ 357.176363][ T30] audit: type=1326 audit(1752454724.088:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.1.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ab98e929 code=0x7fc00000 [ 357.262759][ T30] audit: type=1326 audit(1752454724.108:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.1.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ab98e929 code=0x7fc00000 [ 357.361745][ T30] audit: type=1326 audit(1752454724.108:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.1.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ab98e929 code=0x7fc00000 [ 357.446181][ T30] audit: type=1326 audit(1752454724.108:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.1.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ab98e929 code=0x7fc00000 [ 357.524305][ T30] audit: type=1326 audit(1752454724.108:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.1.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ab98e929 code=0x7fc00000 [ 357.593673][ T30] audit: type=1326 audit(1752454724.108:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.1.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ab98e929 code=0x7fc00000 [ 357.641878][ T30] audit: type=1326 audit(1752454724.108:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.1.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ab98e929 code=0x7fc00000 [ 357.786703][ T30] audit: type=1326 audit(1752454724.108:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.1.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ab98e929 code=0x7fc00000 [ 357.810675][ T30] audit: type=1326 audit(1752454724.108:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.1.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ab98e929 code=0x7fc00000 [ 357.891002][ T9053] tipc: Started in network mode [ 357.902570][ T9053] tipc: Node identity 4, cluster identity 4711 [ 357.952640][ T9053] tipc: Node number set to 4 [ 358.166491][ T119] usb 1-1: USB disconnect, device number 21 [ 358.577109][ T9048] FAULT_INJECTION: forcing a failure. [ 358.577109][ T9048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.590617][ T9048] CPU: 0 UID: 0 PID: 9048 Comm: syz.3.871 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 358.590645][ T9048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 358.590657][ T9048] Call Trace: [ 358.590665][ T9048] [ 358.590673][ T9048] dump_stack_lvl+0x189/0x250 [ 358.590703][ T9048] ? __pfx____ratelimit+0x10/0x10 [ 358.590732][ T9048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.590756][ T9048] ? __pfx__printk+0x10/0x10 [ 358.590782][ T9048] ? __might_fault+0xb0/0x130 [ 358.590819][ T9048] should_fail_ex+0x414/0x560 [ 358.590854][ T9048] _copy_from_user+0x2d/0xb0 [ 358.590879][ T9048] do_ebt_get_ctl+0x21a/0x1c50 [ 358.590923][ T9048] ? __pfx_do_ebt_get_ctl+0x10/0x10 [ 358.590952][ T9048] ? __local_bh_enable_ip+0x12d/0x1c0 [ 358.590976][ T9048] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.591018][ T9048] ? __lock_acquire+0xab9/0xd20 [ 358.591049][ T9048] ? __mutex_trylock_common+0x153/0x260 [ 358.591078][ T9048] ? __pfx___mutex_trylock_common+0x10/0x10 [ 358.591110][ T9048] ? rcu_is_watching+0x15/0xb0 [ 358.591159][ T9048] ? __pfx___mutex_lock+0x10/0x10 [ 358.591180][ T9048] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 358.591206][ T9048] ? __might_fault+0xb0/0x130 [ 358.591242][ T9048] nf_getsockopt+0x26b/0x290 [ 358.591274][ T9048] ip_getsockopt+0x1c4/0x220 [ 358.591305][ T9048] ? __pfx_ip_getsockopt+0x10/0x10 [ 358.591332][ T9048] ? sock_common_getsockopt+0x2d/0xb0 [ 358.591355][ T9048] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 358.591375][ T9048] smc_getsockopt+0x1b7/0x380 [ 358.591408][ T9048] ? __pfx_smc_getsockopt+0x10/0x10 [ 358.591451][ T9048] do_sock_getsockopt+0x35d/0x650 [ 358.591479][ T9048] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 358.591504][ T9048] ? do_syscall_64+0x20/0x3b0 [ 358.591530][ T9048] ? __fget_files+0x3a0/0x420 [ 358.591557][ T9048] ? __fget_files+0x2a/0x420 [ 358.591592][ T9048] __x64_sys_getsockopt+0x1a5/0x250 [ 358.591616][ T9048] ? do_syscall_64+0x20/0x3b0 [ 358.591637][ T9048] ? do_syscall_64+0x20/0x3b0 [ 358.591661][ T9048] do_syscall_64+0xfa/0x3b0 [ 358.591679][ T9048] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.591707][ T9048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.591727][ T9048] ? clear_bhb_loop+0x60/0xb0 [ 358.591752][ T9048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.591770][ T9048] RIP: 0033:0x7fbd19d8e929 [ 358.591788][ T9048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.591806][ T9048] RSP: 002b:00007fbd1accd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 358.591828][ T9048] RAX: ffffffffffffffda RBX: 00007fbd19fb5fa0 RCX: 00007fbd19d8e929 [ 358.591843][ T9048] RDX: 0000000000000082 RSI: 0000000000000000 RDI: 0000000000000004 [ 358.591855][ T9048] RBP: 00007fbd1accd090 R08: 0000200000000340 R09: 0000000000000000 [ 358.591868][ T9048] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 358.591880][ T9048] R13: 0000000000000000 R14: 00007fbd19fb5fa0 R15: 00007fbd1a0dfa28 [ 358.591913][ T9048] [ 358.889458][ T5939] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 359.344498][ T5939] usb 2-1: Using ep0 maxpacket: 8 [ 359.369650][ T5939] usb 2-1: unable to get BOS descriptor or descriptor too short [ 359.394643][ T5939] usb 2-1: config index 0 descriptor too short (expected 47961, got 36) [ 359.426389][ T5939] usb 2-1: config 164 has an invalid descriptor of length 171, skipping remainder of the config [ 359.480010][ T5939] usb 2-1: config 164 has 0 interfaces, different from the descriptor's value: 31 [ 359.521678][ T5939] usb 2-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 359.572349][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.592682][ T5939] usb 2-1: Product: syz [ 359.617321][ T5939] usb 2-1: Manufacturer: syz [ 359.622005][ T5939] usb 2-1: SerialNumber: syz [ 359.934704][ T5939] usb 2-1: USB disconnect, device number 39 [ 360.412726][ T44] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 360.562786][ T5939] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 360.570535][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 360.580527][ T44] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 360.652725][ T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 360.702800][ T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 360.731858][ T44] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.776098][ T44] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 360.881816][ T5939] usb 3-1: config 0 has an invalid interface number: 187 but max is 0 [ 360.912680][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.024979][ T5939] usb 3-1: config 0 has no interface number 0 [ 361.128428][ T5939] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 361.142806][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.151123][ T5939] usb 3-1: Product: syz [ 361.177594][ T5939] usb 3-1: Manufacturer: syz [ 361.182316][ T5939] usb 3-1: SerialNumber: syz [ 361.218757][ T5939] usb 3-1: config 0 descriptor?? [ 361.281356][ T44] usb 5-1: GET_CAPABILITIES returned 0 [ 361.296711][ T44] usbtmc 5-1:16.0: can't read capabilities [ 361.325901][ T5939] peak_usb 3-1:0.187 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 361.351454][ T5939] peak_usb 3-1:0.187: unable to read PCAN-USB serial number (err -22) [ 361.522190][ T9091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.588851][ T9091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.767480][ T5939] peak_usb 3-1:0.187: probe with driver peak_usb failed with error -22 [ 361.829175][ T5939] usb 5-1: USB disconnect, device number 41 [ 361.873970][ T5925] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 362.084233][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 362.097835][ T5925] usb 2-1: unable to get BOS descriptor or descriptor too short [ 362.125188][ T5925] usb 2-1: config 10 has an invalid interface number: 223 but max is 2 [ 362.162813][ T5925] usb 2-1: config 10 has an invalid interface number: 79 but max is 2 [ 362.171187][ T5925] usb 2-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 362.203706][ T5925] usb 2-1: config 10 has 2 interfaces, different from the descriptor's value: 3 [ 362.212933][ T5925] usb 2-1: config 10 has no interface number 0 [ 362.219122][ T5925] usb 2-1: config 10 has no interface number 1 [ 362.243596][ T5925] usb 2-1: config 10 interface 223 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 362.277788][ T5925] usb 2-1: config 10 interface 79 altsetting 73 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 362.309884][ T5925] usb 2-1: config 10 interface 79 altsetting 73 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 362.324776][ T5925] usb 2-1: config 10 interface 223 has no altsetting 0 [ 362.331754][ T5925] usb 2-1: config 10 interface 79 has no altsetting 0 [ 362.360662][ T5925] usb 2-1: New USB device found, idVendor=2013, idProduct=025d, bcdDevice=a3.4b [ 362.393889][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.446793][ T5925] usb 2-1: Product: syz [ 362.458829][ T9109] FAULT_INJECTION: forcing a failure. [ 362.458829][ T9109] name failslab, interval 1, probability 0, space 0, times 0 [ 362.473033][ T9109] CPU: 1 UID: 0 PID: 9109 Comm: syz.0.889 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 362.473063][ T9109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 362.473076][ T9109] Call Trace: [ 362.473083][ T9109] [ 362.473092][ T9109] dump_stack_lvl+0x189/0x250 [ 362.473122][ T9109] ? __pfx____ratelimit+0x10/0x10 [ 362.473153][ T9109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.473178][ T9109] ? __pfx__printk+0x10/0x10 [ 362.473233][ T9109] should_fail_ex+0x414/0x560 [ 362.473268][ T9109] should_failslab+0xa8/0x100 [ 362.473295][ T9109] __kmalloc_cache_noprof+0x70/0x3d0 [ 362.473318][ T9109] ? sctp_add_bind_addr+0x8c/0x370 [ 362.473345][ T9109] sctp_add_bind_addr+0x8c/0x370 [ 362.473370][ T9109] sctp_copy_local_addr_list+0x30b/0x4e0 [ 362.473396][ T9109] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 362.473418][ T9109] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 362.473444][ T9109] ? sctp_v4_is_any+0x35/0x60 [ 362.473465][ T9109] ? sctp_copy_one_addr+0x93/0x360 [ 362.473489][ T9109] sctp_bind_addr_copy+0xb3/0x3c0 [ 362.473512][ T9109] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 362.473545][ T9109] sctp_connect_new_asoc+0x2e0/0x690 [ 362.473575][ T9109] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 362.473599][ T9109] ? __local_bh_enable_ip+0x13e/0x1c0 [ 362.473630][ T9109] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 362.473649][ T9109] ? security_sctp_bind_connect+0x7e/0x2e0 [ 362.473678][ T9109] sctp_sendmsg+0x155c/0x2810 [ 362.473718][ T9109] ? __pfx_sctp_sendmsg+0x10/0x10 [ 362.473747][ T9109] ? aa_sk_perm+0x81e/0x950 [ 362.473781][ T9109] ? __pfx_aa_sk_perm+0x10/0x10 [ 362.473812][ T9109] ? sock_rps_record_flow+0x19/0x410 [ 362.473836][ T9109] ? inet_sendmsg+0x2f4/0x370 [ 362.473861][ T9109] __sock_sendmsg+0x19c/0x270 [ 362.473885][ T9109] ____sys_sendmsg+0x52d/0x830 [ 362.473918][ T9109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 362.473955][ T9109] ? import_iovec+0x74/0xa0 [ 362.473984][ T9109] ___sys_sendmsg+0x21f/0x2a0 [ 362.474012][ T9109] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.474082][ T9109] ? __fget_files+0x2a/0x420 [ 362.474107][ T9109] ? __fget_files+0x3a0/0x420 [ 362.474145][ T9109] __sys_sendmmsg+0x227/0x430 [ 362.474179][ T9109] ? __pfx___sys_sendmmsg+0x10/0x10 [ 362.474211][ T9109] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 362.474264][ T9109] ? ksys_write+0x22a/0x250 [ 362.474291][ T9109] ? __pfx_ksys_write+0x10/0x10 [ 362.474310][ T9109] ? rcu_is_watching+0x15/0xb0 [ 362.474343][ T9109] __x64_sys_sendmmsg+0xa0/0xc0 [ 362.474371][ T9109] do_syscall_64+0xfa/0x3b0 [ 362.474390][ T9109] ? lockdep_hardirqs_on+0x9c/0x150 [ 362.474419][ T9109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.474438][ T9109] ? clear_bhb_loop+0x60/0xb0 [ 362.474463][ T9109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.474483][ T9109] RIP: 0033:0x7f63f4b8e929 [ 362.474501][ T9109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.474520][ T9109] RSP: 002b:00007f63f5a65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 362.474543][ T9109] RAX: ffffffffffffffda RBX: 00007f63f4db5fa0 RCX: 00007f63f4b8e929 [ 362.474558][ T9109] RDX: 0000000000000002 RSI: 0000200000000880 RDI: 0000000000000003 [ 362.474570][ T9109] RBP: 00007f63f5a65090 R08: 0000000000000000 R09: 0000000000000000 [ 362.474583][ T9109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 362.474595][ T9109] R13: 0000000000000000 R14: 00007f63f4db5fa0 R15: 00007f63f4edfa28 [ 362.474626][ T9109] [ 362.489745][ T5925] usb 2-1: Manufacturer: syz [ 363.129753][ T5925] usb 2-1: SerialNumber: syz [ 363.623710][ T5957] usb 3-1: USB disconnect, device number 25 [ 363.819165][ T9116] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 363.869710][ T9116] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 364.812781][ T9148] 8021q: VLANs not supported on ipvlan0 [ 364.982592][ T5974] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 365.132550][ T5974] usb 3-1: Using ep0 maxpacket: 8 [ 365.141965][ T5974] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 365.166723][ T1287] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 365.255275][ T5974] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 365.308283][ T5974] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 365.319158][ T5974] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 365.352682][ T5974] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 365.372037][ T5974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.390076][ T1287] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.412917][ T1287] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 365.442367][ T1287] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 365.489292][ T1287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.518144][ T1287] usb 4-1: Product: syz [ 365.536787][ T1287] usb 4-1: Manufacturer: syz [ 365.565615][ T1287] usb 4-1: SerialNumber: syz [ 365.860575][ T5974] usb 3-1: GET_CAPABILITIES returned 0 [ 365.868117][ T1287] usb 4-1: config 0 descriptor?? [ 365.926842][ T5974] usbtmc 3-1:16.0: can't read capabilities [ 365.960024][ T5925] dvb-usb: found a 'PCTV 2002e SE' in cold state, will try to load a firmware [ 366.071985][ T9144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.140237][ T9144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.187012][ T9148] netlink: 277 bytes leftover after parsing attributes in process `syz.3.901'. [ 366.199259][ T5925] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 366.353141][ T5925] dib0700: firmware download failed at 7 with -22 [ 366.620576][ T44] usb 3-1: USB disconnect, device number 26 [ 366.727751][ T5925] dvb-usb: found a 'PCTV 2002e SE' in cold state, will try to load a firmware [ 366.873328][ T5925] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 367.043898][ T9165] x_tables: ip6_tables: cgroup match: used from hooks FORWARD, but only valid from INPUT/OUTPUT/POSTROUTING [ 367.100522][ T5925] dib0700: firmware download failed at 7 with -22 [ 367.152000][ T5925] usb 2-1: USB disconnect, device number 40 [ 367.899123][ T9177] bridge0: port 1(netdevsim0) entered blocking state [ 367.923390][ T9177] bridge0: port 1(netdevsim0) entered disabled state [ 367.948480][ T9177] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 367.984272][ T9177] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 368.008911][ T9177] bridge0: port 1(netdevsim0) entered blocking state [ 368.016531][ T9177] bridge0: port 1(netdevsim0) entered forwarding state [ 368.226174][ T9182] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 368.291269][ T5925] usb 4-1: USB disconnect, device number 34 [ 368.401606][ T9184] netlink: 25 bytes leftover after parsing attributes in process `syz.1.909'. [ 368.411099][ T9184] netlink: 'syz.1.909': attribute type 4 has an invalid length. [ 369.151766][ T9203] input: syz0 as /devices/virtual/input/input26 [ 369.225893][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 369.225912][ T30] audit: type=1326 audit(1752454736.138:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9200 comm="syz.2.917" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13f598e929 code=0x0 [ 369.369152][ T9203] netlink: 'syz.2.917': attribute type 6 has an invalid length. [ 369.856557][ T5925] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 370.284085][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 370.322056][ T5925] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 370.437514][ T5925] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 370.469507][ T5925] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 370.502053][ T5925] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.562520][ T5925] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 370.582497][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.812237][ T5925] usb 2-1: GET_CAPABILITIES returned 0 [ 370.819604][ T5925] usbtmc 2-1:16.0: can't read capabilities [ 371.217606][ T9208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.228212][ T9208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.363774][ T9214] sctp: [Deprecated]: syz.2.920 (pid 9214) Use of int in maxseg socket option. [ 371.363774][ T9214] Use struct sctp_assoc_value instead [ 371.439087][ T1287] usb 2-1: USB disconnect, device number 41 [ 373.334327][ T9240] netlink: 25 bytes leftover after parsing attributes in process `syz.3.926'. [ 373.375959][ T9240] netlink: 'syz.3.926': attribute type 4 has an invalid length. [ 373.560855][ T1287] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 373.603108][ T1287] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 373.950114][ T9244] fido_id[9244]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 373.972787][ T1287] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 374.192653][ T1287] usb 3-1: config index 0 descriptor too short (expected 65535, got 18) [ 374.229528][ T1287] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 374.307860][ T1287] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 374.417942][ T1287] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 374.432522][ T1287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.487959][ T1287] usb 3-1: Product: syz [ 374.512784][ T1287] usb 3-1: Manufacturer: syz [ 374.533718][ T1287] usb 3-1: SerialNumber: syz [ 374.551330][ T1287] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 374.600264][ T1287] usb 3-1: no configuration chosen from 1 choice [ 374.858547][ T5974] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 374.897876][ T1287] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 375.073671][ T1287] usb 5-1: Using ep0 maxpacket: 8 [ 375.122237][ T1287] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 375.135255][ T1287] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 375.146274][ T1287] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 375.156929][ T1287] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.175846][ T1287] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 375.221992][ T1287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.487676][ T1287] usb 5-1: GET_CAPABILITIES returned 0 [ 375.517943][ T1287] usbtmc 5-1:16.0: can't read capabilities [ 375.745852][ T9264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.754862][ T9264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.852053][ T44] usb 5-1: USB disconnect, device number 42 [ 376.023497][ T9276] netlink: 24 bytes leftover after parsing attributes in process `syz.3.936'. [ 376.685966][ T5925] usb 3-1: USB disconnect, device number 27 [ 377.887024][ T9306] netlink: 36 bytes leftover after parsing attributes in process `syz.3.945'. [ 377.916336][ T9306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.945'. [ 377.983973][ T9306] netlink: 36 bytes leftover after parsing attributes in process `syz.3.945'. [ 378.083855][ T9306] netlink: 36 bytes leftover after parsing attributes in process `syz.3.945'. [ 378.888799][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.895385][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.022580][ T44] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 379.212639][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 379.235309][ T44] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 379.265445][ T44] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 379.298017][ T44] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 379.333064][ T44] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.493060][ T44] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 379.555659][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.799770][ T44] usb 1-1: GET_CAPABILITIES returned 0 [ 379.891230][ T44] usbtmc 1-1:16.0: can't read capabilities [ 379.952973][ T9327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.950'. [ 380.110244][ T9315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.135129][ T9315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.258474][ T5974] usb 1-1: USB disconnect, device number 22 [ 380.274042][ T9334] FAULT_INJECTION: forcing a failure. [ 380.274042][ T9334] name failslab, interval 1, probability 0, space 0, times 0 [ 380.369135][ T9334] CPU: 1 UID: 0 PID: 9334 Comm: syz.4.952 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 380.369167][ T9334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 380.369179][ T9334] Call Trace: [ 380.369188][ T9334] [ 380.369198][ T9334] dump_stack_lvl+0x189/0x250 [ 380.369229][ T9334] ? __pfx____ratelimit+0x10/0x10 [ 380.369262][ T9334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.369286][ T9334] ? __pfx__printk+0x10/0x10 [ 380.369320][ T9334] ? __pfx___might_resched+0x10/0x10 [ 380.369351][ T9334] should_fail_ex+0x414/0x560 [ 380.369386][ T9334] should_failslab+0xa8/0x100 [ 380.369414][ T9334] kmem_cache_alloc_noprof+0x73/0x3c0 [ 380.369438][ T9334] ? ptlock_alloc+0x20/0x70 [ 380.369467][ T9334] ptlock_alloc+0x20/0x70 [ 380.369490][ T9334] pte_alloc_one+0x7d/0x170 [ 380.369516][ T9334] __pte_alloc+0x25/0x1a0 [ 380.369550][ T9334] __handle_mm_fault+0x4b8a/0x5620 [ 380.369596][ T9334] ? __pfx___handle_mm_fault+0x10/0x10 [ 380.369642][ T9334] ? __pfx___might_resched+0x10/0x10 [ 380.369670][ T9334] handle_mm_fault+0x40a/0x8e0 [ 380.369706][ T9334] __get_user_pages+0x1af4/0x30b0 [ 380.369769][ T9334] ? __pfx___get_user_pages+0x10/0x10 [ 380.369790][ T9334] ? __gup_longterm_locked+0xbf7/0x15b0 [ 380.369812][ T9334] ? down_read_killable+0x1d1/0x350 [ 380.369841][ T9334] __gup_longterm_locked+0xd66/0x15b0 [ 380.369885][ T9334] ? gup_fast_fallback+0x1afc/0x2260 [ 380.369911][ T9334] gup_fast_fallback+0x1cd4/0x2260 [ 380.369983][ T9334] ? mtree_load+0x100/0x700 [ 380.370018][ T9334] ? __pfx_gup_fast_fallback+0x10/0x10 [ 380.370041][ T9334] ? __up_read+0x280/0x680 [ 380.370071][ T9334] ? __pfx___up_read+0x10/0x10 [ 380.370097][ T9334] ? is_valid_gup_args+0x11f/0x200 [ 380.370122][ T9334] ? get_user_pages_fast+0x4d/0xb0 [ 380.370146][ T9334] __se_sys_get_mempolicy+0x467/0x12b0 [ 380.370183][ T9334] ? __pfx___se_sys_get_mempolicy+0x10/0x10 [ 380.370211][ T9334] ? __pfx_ksys_write+0x10/0x10 [ 380.370235][ T9334] ? __secure_computing+0xe2/0x2a0 [ 380.370264][ T9334] ? __x64_sys_get_mempolicy+0x20/0xc0 [ 380.370292][ T9334] do_syscall_64+0xfa/0x3b0 [ 380.370311][ T9334] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.370340][ T9334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.370360][ T9334] ? clear_bhb_loop+0x60/0xb0 [ 380.370385][ T9334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.370405][ T9334] RIP: 0033:0x7fa97d78e929 [ 380.370424][ T9334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.370443][ T9334] RSP: 002b:00007fa97e5e6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ef [ 380.370468][ T9334] RAX: ffffffffffffffda RBX: 00007fa97d9b5fa0 RCX: 00007fa97d78e929 [ 380.370484][ T9334] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 0000000000000000 [ 380.370496][ T9334] RBP: 00007fa97e5e6090 R08: 0000000000000003 R09: 0000000000000000 [ 380.370509][ T9334] R10: 0000200000ffe000 R11: 0000000000000246 R12: 0000000000000001 [ 380.370522][ T9334] R13: 0000000000000000 R14: 00007fa97d9b5fa0 R15: 00007fa97dadfa28 [ 380.370555][ T9334] [ 380.675035][ C1] vkms_vblank_simulate: vblank timer overrun [ 381.324886][ T9357] netlink: 24 bytes leftover after parsing attributes in process `syz.3.958'. [ 381.335004][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.958'. [ 382.334249][ T9372] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 384.191332][ T9381] ip6gretap1: entered allmulticast mode [ 384.751219][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.965'. [ 385.169745][ T44] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 385.386699][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 385.442081][ T44] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 385.511573][ T44] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 385.632619][ T44] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 385.650199][ T44] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 385.732807][ T44] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 385.790596][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.059126][ T44] usb 2-1: GET_CAPABILITIES returned 0 [ 386.064926][ T44] usbtmc 2-1:16.0: can't read capabilities [ 386.426052][ T9395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.436095][ T9395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.575931][ T5974] usb 2-1: USB disconnect, device number 42 [ 388.442713][ T5974] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 388.627404][ T5974] usb 3-1: Using ep0 maxpacket: 16 [ 391.235939][ T9475] netlink: 24 bytes leftover after parsing attributes in process `syz.4.985'. [ 392.113910][ T5974] usb 3-1: unable to get BOS descriptor or descriptor too short [ 392.182853][ T5974] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 392.190509][ T5974] usb 3-1: can't read configurations, error -71 [ 394.345677][ T9541] netlink: 60 bytes leftover after parsing attributes in process `syz.0.991'. [ 394.838677][ T9554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.995'. [ 394.847819][ T9554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.995'. [ 395.042581][ T5974] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 395.598755][ T5974] usb 4-1: config 0 has no interfaces? [ 395.749688][ T9557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.997'. [ 395.805765][ T5974] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 395.822806][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.833088][ T5974] usb 4-1: Product: syz [ 395.841138][ T5974] usb 4-1: Manufacturer: syz [ 395.851282][ T5974] usb 4-1: SerialNumber: syz [ 395.911490][ T5974] usb 4-1: config 0 descriptor?? [ 396.387009][ T9567] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 396.752546][ T44] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 396.912695][ T44] usb 3-1: device descriptor read/64, error -71 [ 397.002743][ T5974] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 397.162565][ T44] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 397.184564][ T5974] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 397.203767][ T5974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.257019][ T5974] usb 5-1: config 0 descriptor?? [ 397.292975][ T44] usb 3-1: device descriptor read/64, error -71 [ 397.403153][ T44] usb usb3-port1: attempt power cycle [ 397.752755][ T44] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 397.827613][ T44] usb 3-1: device descriptor read/8, error -71 [ 397.995576][ T5974] usb 5-1: Cannot set autoneg [ 398.001889][ T5974] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 398.082915][ T44] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 398.113231][ T44] usb 3-1: device descriptor read/8, error -71 [ 398.223665][ T44] usb usb3-port1: unable to enumerate USB device [ 398.289563][ T5974] usb 5-1: USB disconnect, device number 43 [ 398.384220][ T9594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1006'. [ 398.434061][ T9594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1006'. [ 398.446201][ T5925] usb 4-1: USB disconnect, device number 36 [ 398.448108][ T9594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1006'. [ 398.468872][ T9594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1006'. [ 398.495047][ T9594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1006'. [ 398.512332][ T9594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1006'. [ 398.544003][ T9594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1006'. [ 398.555013][ T9594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1006'. [ 398.565158][ T9594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1006'. [ 398.579342][ T9594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1006'. [ 398.655849][ T9594] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 398.670326][ T9594] bond1: left promiscuous mode [ 398.681935][ T9594] macsec1: left promiscuous mode [ 398.698069][ T9594] vti0: left promiscuous mode [ 399.941366][ T9628] FAULT_INJECTION: forcing a failure. [ 399.941366][ T9628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.960751][ T9628] CPU: 0 UID: 0 PID: 9628 Comm: syz.2.1014 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 399.960772][ T9628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 399.960780][ T9628] Call Trace: [ 399.960785][ T9628] [ 399.960792][ T9628] dump_stack_lvl+0x189/0x250 [ 399.960812][ T9628] ? __pfx____ratelimit+0x10/0x10 [ 399.960837][ T9628] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.960862][ T9628] ? __pfx__printk+0x10/0x10 [ 399.960894][ T9628] ? get_sigframe+0x596/0x7d0 [ 399.960932][ T9628] should_fail_ex+0x414/0x560 [ 399.960960][ T9628] _copy_to_user+0x31/0xb0 [ 399.960976][ T9628] copy_siginfo_to_user+0x22/0xc0 [ 399.960994][ T9628] x64_setup_rt_frame+0x776/0xd40 [ 399.961019][ T9628] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 399.961037][ T9628] arch_do_signal_or_restart+0x3d7/0x750 [ 399.961056][ T9628] ? __fget_files+0x3a0/0x420 [ 399.961074][ T9628] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 399.961103][ T9628] ? exit_to_user_mode_loop+0x40/0x110 [ 399.961118][ T9628] exit_to_user_mode_loop+0x75/0x110 [ 399.961131][ T9628] do_syscall_64+0x2bd/0x3b0 [ 399.961142][ T9628] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.961161][ T9628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.961172][ T9628] ? clear_bhb_loop+0x60/0xb0 [ 399.961187][ T9628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.961199][ T9628] RIP: 0033:0x7f13f598e927 [ 399.961211][ T9628] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 399.961221][ T9628] RSP: 002b:00007f13f674f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 399.961237][ T9628] RAX: 0000000000000013 RBX: 00007f13f5bb5fa0 RCX: 00007f13f598e929 [ 399.961246][ T9628] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 399.961254][ T9628] RBP: 00007f13f674f090 R08: 0000000000000000 R09: 0000000000000000 [ 399.961261][ T9628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.961269][ T9628] R13: 0000000000000000 R14: 00007f13f5bb5fa0 R15: 00007f13f5cdfa28 [ 399.961287][ T9628] [ 400.992068][ T9643] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1018' sets config #1 [ 401.002740][ T30] audit: type=1326 audit(1752454767.918:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.2.1018" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13f598e929 code=0x0 [ 402.168823][ T9658] FAULT_INJECTION: forcing a failure. [ 402.168823][ T9658] name failslab, interval 1, probability 0, space 0, times 0 [ 402.183614][ T9658] CPU: 0 UID: 0 PID: 9658 Comm: syz.3.1022 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 402.183644][ T9658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 402.183656][ T9658] Call Trace: [ 402.183665][ T9658] [ 402.183674][ T9658] dump_stack_lvl+0x189/0x250 [ 402.183704][ T9658] ? __pfx____ratelimit+0x10/0x10 [ 402.183735][ T9658] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.183758][ T9658] ? __pfx__printk+0x10/0x10 [ 402.183803][ T9658] ? __pfx___might_resched+0x10/0x10 [ 402.183827][ T9658] ? fs_reclaim_acquire+0x7d/0x100 [ 402.183861][ T9658] should_fail_ex+0x414/0x560 [ 402.183896][ T9658] should_failslab+0xa8/0x100 [ 402.183924][ T9658] __kmalloc_noprof+0xcb/0x4f0 [ 402.183947][ T9658] ? tomoyo_encode+0x28b/0x550 [ 402.183972][ T9658] tomoyo_encode+0x28b/0x550 [ 402.183999][ T9658] tomoyo_realpath_from_path+0x58d/0x5d0 [ 402.184036][ T9658] tomoyo_find_next_domain+0x311/0x1aa0 [ 402.184063][ T9658] ? __lock_acquire+0xab9/0xd20 [ 402.184096][ T9658] ? tomoyo_bprm_check_security+0xf0/0x180 [ 402.184118][ T9658] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 402.184155][ T9658] ? tomoyo_bprm_check_security+0xf0/0x180 [ 402.184177][ T9658] tomoyo_bprm_check_security+0x11c/0x180 [ 402.184203][ T9658] security_bprm_check+0x89/0x270 [ 402.184234][ T9658] bprm_execve+0x8ee/0x1450 [ 402.184277][ T9658] ? __pfx_bprm_execve+0x10/0x10 [ 402.184301][ T9658] ? copy_string_kernel+0x25f/0x2a0 [ 402.184329][ T9658] do_execveat_common+0x510/0x6a0 [ 402.184366][ T9658] __x64_sys_execveat+0xc4/0xe0 [ 402.184393][ T9658] do_syscall_64+0xfa/0x3b0 [ 402.184412][ T9658] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.184440][ T9658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.184460][ T9658] ? clear_bhb_loop+0x60/0xb0 [ 402.184485][ T9658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.184503][ T9658] RIP: 0033:0x7fbd19d8e929 [ 402.184522][ T9658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.184539][ T9658] RSP: 002b:00007fbd1accd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 402.184562][ T9658] RAX: ffffffffffffffda RBX: 00007fbd19fb5fa0 RCX: 00007fbd19d8e929 [ 402.184577][ T9658] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 402.184590][ T9658] RBP: 00007fbd1accd090 R08: 0000000000001000 R09: 0000000000000000 [ 402.184603][ T9658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 402.184615][ T9658] R13: 0000000000000000 R14: 00007fbd19fb5fa0 R15: 00007fbd1a0dfa28 [ 402.184649][ T9658] [ 402.184676][ T9658] ERROR: Out of memory at tomoyo_realpath_from_path. [ 402.536621][ T9662] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1023' sets config #0 [ 402.548709][ T9662] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1023' sets config #1 [ 407.431639][ T9718] FAULT_INJECTION: forcing a failure. [ 407.431639][ T9718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.502903][ T9718] CPU: 0 UID: 0 PID: 9718 Comm: syz.2.1038 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 407.502934][ T9718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 407.502945][ T9718] Call Trace: [ 407.502959][ T9718] [ 407.502964][ T9718] dump_stack_lvl+0x189/0x250 [ 407.502984][ T9718] ? __pfx____ratelimit+0x10/0x10 [ 407.503004][ T9718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.503018][ T9718] ? __pfx__printk+0x10/0x10 [ 407.503035][ T9718] ? __might_fault+0xb0/0x130 [ 407.503057][ T9718] should_fail_ex+0x414/0x560 [ 407.503078][ T9718] _copy_from_user+0x2d/0xb0 [ 407.503094][ T9718] ___sys_sendmsg+0x158/0x2a0 [ 407.503111][ T9718] ? __pfx____sys_sendmsg+0x10/0x10 [ 407.503147][ T9718] ? __fget_files+0x2a/0x420 [ 407.503162][ T9718] ? __fget_files+0x3a0/0x420 [ 407.503184][ T9718] __x64_sys_sendmsg+0x19b/0x260 [ 407.503201][ T9718] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 407.503221][ T9718] ? __pfx_ksys_write+0x10/0x10 [ 407.503233][ T9718] ? rcu_is_watching+0x15/0xb0 [ 407.503251][ T9718] ? do_syscall_64+0xbe/0x3b0 [ 407.503265][ T9718] do_syscall_64+0xfa/0x3b0 [ 407.503276][ T9718] ? lockdep_hardirqs_on+0x9c/0x150 [ 407.503293][ T9718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.503304][ T9718] ? clear_bhb_loop+0x60/0xb0 [ 407.503319][ T9718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.503330][ T9718] RIP: 0033:0x7f13f598e929 [ 407.503341][ T9718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.503353][ T9718] RSP: 002b:00007f13f674f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.503367][ T9718] RAX: ffffffffffffffda RBX: 00007f13f5bb5fa0 RCX: 00007f13f598e929 [ 407.503376][ T9718] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 407.503384][ T9718] RBP: 00007f13f674f090 R08: 0000000000000000 R09: 0000000000000000 [ 407.503391][ T9718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.503399][ T9718] R13: 0000000000000000 R14: 00007f13f5bb5fa0 R15: 00007f13f5cdfa28 [ 407.503416][ T9718] [ 407.848300][ T9722] xt_nfacct: accounting object `s­aSfŸª£"R#ø(´™´’øå.>üw ˆx³Ç(ìï¾”ýw' does not exists [ 408.066781][ T9734] overlayfs: missing 'lowerdir' [ 409.822764][ T5939] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 409.988366][ T5939] usb 4-1: config 0 has no interfaces? [ 410.032305][ T5939] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 410.087442][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.216488][ T5939] usb 4-1: Product: syz [ 410.222256][ T5939] usb 4-1: Manufacturer: syz [ 410.325843][ T5939] usb 4-1: SerialNumber: syz [ 410.357923][ T9771] program syz.1.1051 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 410.381684][ T5939] usb 4-1: config 0 descriptor?? [ 411.481060][ T9793] __nla_validate_parse: 155 callbacks suppressed [ 411.481083][ T9793] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1056'. [ 411.592779][ T44] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 411.763435][ T44] usb 2-1: device descriptor read/64, error -71 [ 412.012834][ T44] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 412.192691][ T44] usb 2-1: device descriptor read/64, error -71 [ 412.376174][ T44] usb usb2-port1: attempt power cycle [ 412.732950][ T44] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 412.775319][ T44] usb 2-1: device descriptor read/8, error -71 [ 412.975193][ T5925] usb 4-1: USB disconnect, device number 37 [ 413.036895][ T44] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 413.073383][ T44] usb 2-1: device descriptor read/8, error -71 [ 413.159931][ T9815] tipc: Enabled bearer , priority 10 [ 413.273303][ T44] usb usb2-port1: unable to enumerate USB device [ 413.663312][ T44] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 413.938482][ T44] usb 3-1: config 0 has no interfaces? [ 413.974248][ T44] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 413.983985][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.998348][ T44] usb 3-1: Product: syz [ 414.008502][ T44] usb 3-1: Manufacturer: syz [ 414.022587][ T44] usb 3-1: SerialNumber: syz [ 414.048377][ T44] usb 3-1: config 0 descriptor?? [ 414.098640][ T9837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1070'. [ 414.292750][ T119] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 414.459631][ T119] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 414.487612][ T119] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.516642][ T119] usb 1-1: config 0 descriptor?? [ 414.539031][ T119] cp210x 1-1:0.0: cp210x converter detected [ 414.742567][ T5939] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 414.972567][ T5939] usb 2-1: Using ep0 maxpacket: 16 [ 414.985635][ T5939] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 414.998436][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.014228][ T5939] usb 2-1: Product: syz [ 415.018844][ T5939] usb 2-1: Manufacturer: syz [ 415.024608][ T5939] usb 2-1: SerialNumber: syz [ 415.047325][ T5939] usb 2-1: config 0 descriptor?? [ 415.074698][ T5939] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 415.306144][ T119] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 415.316540][ T9846] syzkaller1: entered promiscuous mode [ 415.322066][ T9846] syzkaller1: entered allmulticast mode [ 415.536083][ T5939] usb 2-1: clie_3_5_startup: get config number failed: -71 [ 415.556489][ T5939] visor 2-1:0.0: probe with driver visor failed with error -71 [ 415.706663][ T30] audit: type=1326 audit(1752454782.608:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.3.1074" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd19d8e929 code=0x0 [ 415.912651][ T5939] usb 2-1: USB disconnect, device number 47 [ 416.282685][ T1287] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 416.427308][ T44] usb 3-1: USB disconnect, device number 34 [ 416.442587][ T1287] usb 5-1: Using ep0 maxpacket: 32 [ 416.450371][ T1287] usb 5-1: config 0 has an invalid interface number: 183 but max is 0 [ 416.500796][ T1287] usb 5-1: config 0 has no interface number 0 [ 416.560592][ T1287] usb 5-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 416.574384][ T1287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.600480][ T1287] usb 5-1: Product: syz [ 416.626645][ T1287] usb 5-1: Manufacturer: syz [ 416.631767][ T1287] usb 5-1: SerialNumber: syz [ 416.668336][ T119] cp210x 1-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 416.692895][ T119] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 416.703304][ T1287] usb 5-1: config 0 descriptor?? [ 416.727850][ T1287] net1080 5-1:0.183: probe with driver net1080 failed with error -22 [ 416.769754][ T119] usb 1-1: cp210x converter now attached to ttyUSB0 [ 416.790827][ T119] usb 1-1: USB disconnect, device number 23 [ 416.900660][ T119] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 416.915544][ T119] cp210x 1-1:0.0: device disconnected [ 417.543585][ T1287] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 417.702525][ T1287] usb 3-1: Using ep0 maxpacket: 32 [ 417.721615][ T1287] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.1f [ 417.731748][ T1287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.785732][ T1287] usb 3-1: Product: syz [ 417.794447][ T1287] usb 3-1: Manufacturer: syz [ 417.805928][ T1287] usb 3-1: SerialNumber: syz [ 417.820728][ T1287] usb 3-1: config 0 descriptor?? [ 417.875150][ T1287] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 417.905318][ T9881] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 418.440955][ T1287] gspca_stk1135: reg_w 0x2 err -110 [ 418.453228][ T1287] gspca_stk1135: serial bus timeout: status=0x00 [ 418.471444][ T1287] gspca_stk1135: Sensor write failed [ 418.481933][ T1287] gspca_stk1135: serial bus timeout: status=0x00 [ 418.494615][ T1287] gspca_stk1135: Sensor write failed [ 418.509483][ T1287] gspca_stk1135: serial bus timeout: status=0x00 [ 418.594953][ T1287] gspca_stk1135: Sensor read failed [ 418.632673][ T30] audit: type=1326 audit(1752454785.508:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9891 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd19d8e929 code=0x7ffc0000 [ 418.668132][ T1287] gspca_stk1135: serial bus timeout: status=0x00 [ 418.792848][ T1287] gspca_stk1135: Sensor read failed [ 418.798134][ T1287] gspca_stk1135: Detected sensor type unknown (0x0) [ 418.806954][ T1287] gspca_stk1135: serial bus timeout: status=0x00 [ 418.813520][ T1287] gspca_stk1135: Sensor read failed [ 418.823896][ T1287] gspca_stk1135: serial bus timeout: status=0x00 [ 418.827317][ T30] audit: type=1326 audit(1752454785.508:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9891 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd19d8e929 code=0x7ffc0000 [ 418.830270][ T1287] gspca_stk1135: Sensor read failed [ 418.830302][ T1287] gspca_stk1135: serial bus timeout: status=0x00 [ 418.882865][ T1287] gspca_stk1135: Sensor write failed [ 418.888260][ T1287] gspca_stk1135: serial bus timeout: status=0x00 [ 418.895236][ T1287] gspca_stk1135: Sensor write failed [ 418.904758][ T1287] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 418.992394][ T30] audit: type=1326 audit(1752454785.508:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9891 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbd19d8e929 code=0x7ffc0000 [ 419.034725][ T30] audit: type=1326 audit(1752454785.508:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9891 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd19d8e929 code=0x7ffc0000 [ 419.061862][ T30] audit: type=1326 audit(1752454785.508:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9891 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd19d8e929 code=0x7ffc0000 [ 419.091808][ T30] audit: type=1326 audit(1752454785.578:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9891 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fbd19d8e929 code=0x7ffc0000 [ 419.559627][ T30] audit: type=1326 audit(1752454785.578:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9891 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd19d8e929 code=0x7ffc0000 [ 419.592929][ T30] audit: type=1326 audit(1752454785.578:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9891 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fbd19d8e929 code=0x7ffc0000 [ 419.622016][ T30] audit: type=1326 audit(1752454785.598:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9891 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd19d2ab19 code=0x7ffc0000 [ 419.772497][ T1287] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 420.015724][ T5974] usb 3-1: USB disconnect, device number 35 [ 420.052634][ T1287] usb 2-1: Using ep0 maxpacket: 16 [ 420.063697][ T1287] usb 2-1: unable to get BOS descriptor or descriptor too short [ 420.074686][ T1287] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.085084][ T1287] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 420.128006][ T1287] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 420.138081][ T1287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.146509][ T1287] usb 2-1: Product: syz [ 420.157555][ T1287] usb 2-1: Manufacturer: syz [ 420.181166][ T1287] usb 2-1: SerialNumber: syz [ 420.531307][ T9897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.553175][ T9897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.595122][ T5974] IPVS: starting estimator thread 0... [ 420.715219][ T9909] IPVS: using max 47 ests per chain, 112800 per kthread [ 421.336830][ T5925] usb 5-1: USB disconnect, device number 44 [ 422.444812][ T9927] netlink: 'syz.3.1087': attribute type 4 has an invalid length. [ 422.482851][ T44] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 422.577362][ T1287] usb 2-1: USB disconnect, device number 48 [ 422.763204][ T44] usb 3-1: config 0 has no interfaces? [ 423.063029][ T44] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 423.072242][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.115582][ T44] usb 3-1: Product: syz [ 423.119831][ T44] usb 3-1: Manufacturer: syz [ 423.143156][ T44] usb 3-1: SerialNumber: syz [ 423.193248][ T44] usb 3-1: config 0 descriptor?? [ 423.783697][ T9944] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1085'. [ 423.859545][ T9945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1091'. [ 423.871485][ T9945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1091'. [ 426.084492][ T9953] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1092'. [ 426.124469][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1092'. [ 426.536193][ T5974] usb 3-1: USB disconnect, device number 36 [ 426.565901][ T1287] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 426.870470][ T1287] usb 2-1: Using ep0 maxpacket: 32 [ 426.897856][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 426.897876][ T30] audit: type=1326 audit(1752454793.778:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9961 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f4b8e929 code=0x7ffc0000 [ 426.941923][ T1287] usb 2-1: config 0 has an invalid interface number: 183 but max is 0 [ 426.981648][ T1287] usb 2-1: config 0 has no interface number 0 [ 427.002524][ T30] audit: type=1326 audit(1752454793.778:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9961 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f4b8e929 code=0x7ffc0000 [ 427.031631][ T1287] usb 2-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 427.058702][ T1287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.092805][ T1287] usb 2-1: Product: syz [ 427.097081][ T1287] usb 2-1: Manufacturer: syz [ 427.101869][ T1287] usb 2-1: SerialNumber: syz [ 427.107791][ T30] audit: type=1326 audit(1752454793.778:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9961 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f63f4b8e929 code=0x7ffc0000 [ 427.130248][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.176980][ T1287] usb 2-1: config 0 descriptor?? [ 427.193620][ T1287] net1080 2-1:0.183: probe with driver net1080 failed with error -22 [ 427.221524][ T30] audit: type=1326 audit(1752454793.778:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9961 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f4b8e929 code=0x7ffc0000 [ 427.308754][ T30] audit: type=1326 audit(1752454793.778:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9961 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f63f4b8e929 code=0x7ffc0000 [ 427.331271][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.372811][ T30] audit: type=1326 audit(1752454793.778:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9961 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f4b8e929 code=0x7ffc0000 [ 427.447994][ T30] audit: type=1326 audit(1752454793.778:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9961 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f63f4b8e929 code=0x7ffc0000 [ 427.462736][ T119] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 427.662941][ T30] audit: type=1326 audit(1752454793.778:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9961 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f4b8e929 code=0x7ffc0000 [ 427.717671][ T30] audit: type=1326 audit(1752454793.778:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9961 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f63f4b8e929 code=0x7ffc0000 [ 427.787460][ T119] usb 4-1: Using ep0 maxpacket: 32 [ 427.900180][ T30] audit: type=1326 audit(1752454793.778:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9961 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f4b8e929 code=0x7ffc0000 [ 427.926279][ T119] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.1f [ 427.942915][ T119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.951043][ T119] usb 4-1: Product: syz [ 427.957872][ T119] usb 4-1: Manufacturer: syz [ 427.965653][ T119] usb 4-1: SerialNumber: syz [ 427.984458][ T119] usb 4-1: config 0 descriptor?? [ 428.027116][ T119] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 428.113617][ T9980] netlink: 'syz.4.1100': attribute type 4 has an invalid length. [ 428.612830][ T119] gspca_stk1135: reg_w 0x2 err -110 [ 428.619200][ T119] gspca_stk1135: serial bus timeout: status=0x00 [ 428.626269][ T119] gspca_stk1135: Sensor write failed [ 428.633064][ T119] gspca_stk1135: serial bus timeout: status=0x00 [ 428.778784][ T119] gspca_stk1135: Sensor write failed [ 428.804672][ T119] gspca_stk1135: serial bus timeout: status=0x00 [ 428.862504][ T119] gspca_stk1135: Sensor read failed [ 428.981109][ T119] gspca_stk1135: serial bus timeout: status=0x00 [ 428.990210][ T119] gspca_stk1135: Sensor read failed [ 429.000107][ T119] gspca_stk1135: Detected sensor type unknown (0x0) [ 429.093614][ T119] gspca_stk1135: serial bus timeout: status=0x00 [ 429.177135][ T119] gspca_stk1135: Sensor read failed [ 429.185903][ T119] gspca_stk1135: serial bus timeout: status=0x00 [ 429.195894][ T119] gspca_stk1135: Sensor read failed [ 429.209328][ T119] gspca_stk1135: serial bus timeout: status=0x00 [ 429.226193][ T119] gspca_stk1135: Sensor write failed [ 429.245097][ T119] gspca_stk1135: serial bus timeout: status=0x00 [ 429.321714][ T119] gspca_stk1135: Sensor write failed [ 429.337539][ T119] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 429.597737][ T5974] usb 4-1: USB disconnect, device number 38 [ 430.181078][ T9997] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 430.653023][T10005] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 430.869439][ T44] usb 2-1: USB disconnect, device number 49 [ 431.455667][T10021] tipc: Started in network mode [ 431.460711][T10021] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 431.494845][T10021] tipc: Enabled bearer , priority 10 [ 431.780320][T10024] netlink: 'syz.2.1111': attribute type 4 has an invalid length. [ 432.252715][ T1287] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 432.412499][ T1287] usb 3-1: Using ep0 maxpacket: 32 [ 432.420189][ T1287] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 432.433568][ T1287] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 432.453191][ T1287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.526779][ T1287] usb 3-1: Product: syz [ 432.531494][ T1287] usb 3-1: Manufacturer: syz [ 432.561212][ T1287] usb 3-1: SerialNumber: syz [ 432.583079][ T1287] usb 3-1: config 0 descriptor?? [ 432.593227][T10032] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 432.613459][ T5925] tipc: Node number set to 4269801488 [ 432.661591][ T1287] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input27 [ 432.902698][ T5925] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 433.078319][ T5925] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 433.090197][ T5925] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 433.156853][ T5925] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 433.216497][ T5925] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 433.267907][ T5925] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 433.334080][ T5925] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 433.342185][ T5925] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 433.368365][ T5925] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 433.381390][ T5925] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 433.393225][ T5925] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 433.442871][T10032] xt_hashlimit: overflow, try lower: 17286/0 [ 433.454245][T10032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.470411][T10032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.499961][ T5925] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 433.512362][ T5925] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 433.527847][ T5925] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 433.550188][ T5925] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 433.648830][T10049] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1112'. [ 433.720502][ T5925] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 433.747573][ T44] usb 3-1: USB disconnect, device number 37 [ 433.747672][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 433.912637][ T119] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 434.122545][ T119] usb 1-1: Using ep0 maxpacket: 32 [ 434.133470][ T119] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.1f [ 434.143587][ T119] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.208479][ T119] usb 1-1: Product: syz [ 434.218609][ T119] usb 1-1: Manufacturer: syz [ 434.232905][ T119] usb 1-1: SerialNumber: syz [ 434.265129][ T119] usb 1-1: config 0 descriptor?? [ 434.281133][ T119] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 434.382833][ T5925] usb 5-1: string descriptor 0 read error: -71 [ 434.391391][ T5925] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 434.407580][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880303ad400: rx timeout, send abort [ 434.416166][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880303ad400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 434.430542][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.550806][ T5925] usb 5-1: can't set config #168, error -71 [ 434.651130][ T5925] usb 5-1: USB disconnect, device number 45 [ 434.846378][ T119] gspca_stk1135: reg_w 0x2 err -110 [ 434.863543][ T119] gspca_stk1135: serial bus timeout: status=0x00 [ 434.916955][ T119] gspca_stk1135: Sensor write failed [ 434.955461][ T119] gspca_stk1135: serial bus timeout: status=0x00 [ 434.987248][ T119] gspca_stk1135: Sensor write failed [ 435.086540][ T119] gspca_stk1135: serial bus timeout: status=0x00 [ 435.123396][ T119] gspca_stk1135: Sensor read failed [ 435.141200][ T119] gspca_stk1135: serial bus timeout: status=0x00 [ 435.188611][ T119] gspca_stk1135: Sensor read failed [ 435.201635][ T119] gspca_stk1135: Detected sensor type unknown (0x0) [ 435.227450][ T119] gspca_stk1135: serial bus timeout: status=0x00 [ 435.242014][ T119] gspca_stk1135: Sensor read failed [ 435.257177][ T119] gspca_stk1135: serial bus timeout: status=0x00 [ 435.269745][ T119] gspca_stk1135: Sensor read failed [ 435.276501][ T119] gspca_stk1135: serial bus timeout: status=0x00 [ 435.289484][ T119] gspca_stk1135: Sensor write failed [ 435.324864][ T119] gspca_stk1135: serial bus timeout: status=0x00 [ 435.339938][ T119] gspca_stk1135: Sensor write failed [ 435.347946][ T119] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 435.542588][ T44] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 435.720015][ T44] usb 3-1: config index 0 descriptor too short (expected 55488, got 227) [ 435.846536][ T5974] usb 1-1: USB disconnect, device number 24 [ 435.960423][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.052597][ T44] usb 3-1: config 0 has no interfaces? [ 436.075231][ T44] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 436.085921][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.145618][ T44] usb 3-1: Product: syz [ 436.162632][ T44] usb 3-1: Manufacturer: syz [ 436.162821][ T5925] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 436.167286][ T44] usb 3-1: SerialNumber: syz [ 436.246622][ T44] usb 3-1: config 0 descriptor?? [ 436.333997][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 436.370045][ T5925] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 436.383876][ T5925] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 436.441527][ T5925] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 436.488746][ T5925] usb 5-1: config 1 interface 0 has no altsetting 0 [ 436.511293][ T5939] usb 3-1: USB disconnect, device number 38 [ 436.540037][ T5925] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 436.551486][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.561154][ T5925] usb 5-1: Product: syz [ 436.585208][ T5925] usb 5-1: Manufacturer: syz [ 436.589913][ T5925] usb 5-1: SerialNumber: syz [ 436.676702][T10082] netlink: 'syz.1.1125': attribute type 4 has an invalid length. [ 436.866831][ T5925] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 46 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8 [ 436.880673][ T5925] usb 5-1: USB disconnect, device number 46 [ 436.893252][ T44] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 436.986137][ T5925] usblp0: removed [ 437.102539][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 437.201529][ T44] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 437.212727][T10093] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 437.212828][T10093] macsec0: entered allmulticast mode [ 437.237593][T10093] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 437.261630][ T44] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 437.277032][ T44] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 437.299705][ T44] usb 1-1: Product: syz [ 437.304105][ T44] usb 1-1: Manufacturer: syz [ 437.315436][ T44] usb 1-1: SerialNumber: syz [ 437.334655][T10093] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 437.344347][T10093] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 437.371225][ T44] usb 1-1: config 0 descriptor?? [ 437.394448][T10083] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 437.799932][ T1287] usb 1-1: USB disconnect, device number 25 [ 438.453822][ T1287] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 438.644476][ T1287] usb 4-1: device descriptor read/64, error -71 [ 438.952653][ T1287] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 439.172666][ T1287] usb 4-1: device descriptor read/64, error -71 [ 439.294744][ T1287] usb usb4-port1: attempt power cycle [ 439.642574][ T1287] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 439.690912][ T1287] usb 4-1: device descriptor read/8, error -71 [ 439.755451][T10127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.764592][T10127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.888765][T10127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.897178][T10127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.942911][ T1287] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 439.973327][ T1287] usb 4-1: device descriptor read/8, error -71 [ 440.136538][ T1287] usb usb4-port1: unable to enumerate USB device [ 440.324944][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.331866][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.232282][T10177] gretap0: entered promiscuous mode [ 442.256464][T10177] vlan2: entered promiscuous mode [ 442.402637][ T44] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 442.586686][ T44] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 442.607902][ T44] usb 3-1: config 0 has no interface number 0 [ 442.640026][ T44] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 442.693797][ T44] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 442.723571][T10191] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1139'. [ 442.819504][ T44] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 442.904093][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.113313][ T44] usb 3-1: config 0 descriptor?? [ 443.133743][T10175] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 443.166986][ T44] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 443.895723][ T5925] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 443.999934][ T5974] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 444.010804][T10175] netlink: 'syz.2.1142': attribute type 2 has an invalid length. [ 444.048106][ T5974] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 444.052942][T10175] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.1142'. [ 444.069748][ T5918] usb 3-1: USB disconnect, device number 39 [ 444.075798][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 444.124366][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 444.147876][ T5925] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 444.161078][ T5925] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 444.172219][ T5925] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 444.210493][ T5925] usb 4-1: config 1 interface 0 has no altsetting 0 [ 444.264538][ T5925] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 444.276266][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.285727][ T5925] usb 4-1: Product: syz [ 444.299352][ T5925] usb 4-1: Manufacturer: syz [ 444.306488][ T5925] usb 4-1: SerialNumber: syz [ 444.581433][ T5925] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8 [ 444.604878][ T5925] usb 4-1: USB disconnect, device number 43 [ 444.616340][ T5925] usblp0: removed [ 445.395159][ T44] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 445.568940][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 445.596321][ T44] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.1f [ 445.611386][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.637710][ T44] usb 1-1: Product: syz [ 445.671662][ T44] usb 1-1: Manufacturer: syz [ 445.702016][ T44] usb 1-1: SerialNumber: syz [ 445.763420][ T44] usb 1-1: config 0 descriptor?? [ 445.789386][ T44] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 446.158277][T10230] FAULT_INJECTION: forcing a failure. [ 446.158277][T10230] name failslab, interval 1, probability 0, space 0, times 0 [ 446.233405][T10230] CPU: 0 UID: 0 PID: 10230 Comm: syz.4.1155 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 446.233437][T10230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 446.233450][T10230] Call Trace: [ 446.233458][T10230] [ 446.233467][T10230] dump_stack_lvl+0x189/0x250 [ 446.233497][T10230] ? __pfx____ratelimit+0x10/0x10 [ 446.233528][T10230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 446.233551][T10230] ? __pfx__printk+0x10/0x10 [ 446.233580][T10230] ? __pfx___might_resched+0x10/0x10 [ 446.233604][T10230] ? fs_reclaim_acquire+0x7d/0x100 [ 446.233636][T10230] should_fail_ex+0x414/0x560 [ 446.233677][T10230] should_failslab+0xa8/0x100 [ 446.233705][T10230] kmem_cache_alloc_noprof+0x73/0x3c0 [ 446.233728][T10230] ? copy_fs_struct+0x4f/0x270 [ 446.233754][T10230] copy_fs_struct+0x4f/0x270 [ 446.233779][T10230] __se_sys_setns+0x4ec/0x17a0 [ 446.233816][T10230] ? __pfx___se_sys_setns+0x10/0x10 [ 446.233844][T10230] ? __secure_computing+0xe2/0x2a0 [ 446.233874][T10230] do_syscall_64+0xfa/0x3b0 [ 446.233893][T10230] ? lockdep_hardirqs_on+0x9c/0x150 [ 446.233924][T10230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.233943][T10230] ? clear_bhb_loop+0x60/0xb0 [ 446.233968][T10230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.233987][T10230] RIP: 0033:0x7fa97d78e929 [ 446.234005][T10230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.234022][T10230] RSP: 002b:00007fa97e5e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 446.234045][T10230] RAX: ffffffffffffffda RBX: 00007fa97d9b5fa0 RCX: 00007fa97d78e929 [ 446.234060][T10230] RDX: 0000000000000000 RSI: 0000000008020000 RDI: 0000000000000003 [ 446.234073][T10230] RBP: 00007fa97e5e6090 R08: 0000000000000000 R09: 0000000000000000 [ 446.234086][T10230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.234098][T10230] R13: 0000000000000000 R14: 00007fa97d9b5fa0 R15: 00007fa97dadfa28 [ 446.234130][T10230] [ 446.456009][ T44] gspca_stk1135: reg_w 0x2 err -110 [ 446.489161][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 446.549868][ T44] gspca_stk1135: Sensor write failed [ 446.580368][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 446.606845][ T44] gspca_stk1135: Sensor write failed [ 446.636088][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 446.689391][ T44] gspca_stk1135: Sensor read failed [ 446.712866][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 446.776089][ T44] gspca_stk1135: Sensor read failed [ 446.791339][ T44] gspca_stk1135: Detected sensor type unknown (0x0) [ 446.799418][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 446.806948][ T44] gspca_stk1135: Sensor read failed [ 446.815592][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 447.072723][ T44] gspca_stk1135: Sensor read failed [ 447.072763][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 447.072776][ T44] gspca_stk1135: Sensor write failed [ 447.072806][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 447.072817][ T44] gspca_stk1135: Sensor write failed [ 447.072913][ T44] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 447.415348][ T1287] usb 1-1: USB disconnect, device number 26 [ 448.452534][ T1287] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 448.695481][T10256] bond_slave_0: entered promiscuous mode [ 448.701440][T10256] bond_slave_1: entered promiscuous mode [ 448.718314][T10256] macvlan2: entered allmulticast mode [ 448.730333][T10256] bond0: entered allmulticast mode [ 448.752911][T10256] bond_slave_0: entered allmulticast mode [ 448.771767][T10256] bond_slave_1: entered allmulticast mode [ 448.782598][ T1287] usb 1-1: Using ep0 maxpacket: 8 [ 448.790828][ T1287] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 448.800387][ T1287] usb 1-1: config 0 has no interface number 0 [ 448.819484][T10256] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 448.842579][ T1287] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 448.918176][ T1287] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 448.950677][ T1287] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 448.973960][ T1287] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 449.009204][ T1287] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 449.050598][ T1287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.076545][ T1287] usb 1-1: config 0 descriptor?? [ 449.137541][ T1287] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 449.298337][ T5918] usb 1-1: USB disconnect, device number 27 [ 449.348730][ T5918] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 449.600618][ T5957] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 449.803430][ T5957] usb 2-1: Using ep0 maxpacket: 32 [ 449.811067][ T5957] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 449.821379][ T5957] usb 2-1: config 0 has no interface number 0 [ 449.866604][ T5957] usb 2-1: config 0 interface 12 has no altsetting 0 [ 449.886499][ T5957] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 449.897651][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.960970][ T5957] usb 2-1: Product: syz [ 449.967329][ T5957] usb 2-1: Manufacturer: syz [ 449.974751][ T5957] usb 2-1: SerialNumber: syz [ 449.986771][ T5957] usb 2-1: config 0 descriptor?? [ 450.084455][ T5939] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 450.195874][ T5957] f81534 2-1:0.12: required endpoints missing [ 450.340723][ T5939] usb 3-1: device descriptor read/64, error -71 [ 450.410583][ T44] usb 2-1: USB disconnect, device number 50 [ 450.592736][ T5939] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 450.940025][ T5939] usb 3-1: device descriptor read/64, error -71 [ 451.053952][ T5939] usb usb3-port1: attempt power cycle [ 451.325381][T10278] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1169'. [ 451.425778][ T5925] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 451.443710][ T5925] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 451.506644][ T5939] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 451.522747][ T44] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 451.574078][ T5939] usb 3-1: device descriptor read/8, error -71 [ 451.703526][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 451.721463][ T44] usb 2-1: config 0 has an invalid interface number: 183 but max is 0 [ 451.770977][ T44] usb 2-1: config 0 has no interface number 0 [ 451.792828][ T44] usb 2-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 451.804249][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.828614][ T44] usb 2-1: Product: syz [ 451.856397][ T5939] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 451.864683][ T44] usb 2-1: Manufacturer: syz [ 451.870624][ T44] usb 2-1: SerialNumber: syz [ 451.879767][ T44] usb 2-1: config 0 descriptor?? [ 451.886459][ T5939] usb 3-1: device descriptor read/8, error -71 [ 451.904456][ T44] net1080 2-1:0.183: probe with driver net1080 failed with error -22 [ 452.005108][ T5939] usb usb3-port1: unable to enumerate USB device [ 452.375818][ T1287] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 452.682579][ T1287] usb 1-1: Using ep0 maxpacket: 32 [ 452.693407][ T1287] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.1f [ 452.702684][ T1287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.710995][ T1287] usb 1-1: Product: syz [ 452.733758][ T1287] usb 1-1: Manufacturer: syz [ 452.749429][ T1287] usb 1-1: SerialNumber: syz [ 452.869900][ T1287] usb 1-1: config 0 descriptor?? [ 452.882195][ T1287] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 453.402814][ T1287] gspca_stk1135: reg_w 0x2 err -110 [ 453.409569][ T1287] gspca_stk1135: serial bus timeout: status=0x00 [ 453.416741][ T1287] gspca_stk1135: Sensor write failed [ 453.422237][ T1287] gspca_stk1135: serial bus timeout: status=0x00 [ 453.455638][ T1287] gspca_stk1135: Sensor write failed [ 453.477472][ T1287] gspca_stk1135: serial bus timeout: status=0x00 [ 453.502721][ T1287] gspca_stk1135: Sensor read failed [ 453.551652][ T1287] gspca_stk1135: serial bus timeout: status=0x00 [ 453.576016][ T1287] gspca_stk1135: Sensor read failed [ 453.588456][ T1287] gspca_stk1135: Detected sensor type unknown (0x0) [ 453.602798][ T1287] gspca_stk1135: serial bus timeout: status=0x00 [ 453.615573][ T1287] gspca_stk1135: Sensor read failed [ 453.637001][ T1287] gspca_stk1135: serial bus timeout: status=0x00 [ 453.658432][ T1287] gspca_stk1135: Sensor read failed [ 453.697867][ T1287] gspca_stk1135: serial bus timeout: status=0x00 [ 453.748130][ T1287] gspca_stk1135: Sensor write failed [ 453.775802][ T1287] gspca_stk1135: serial bus timeout: status=0x00 [ 453.828993][ T1287] gspca_stk1135: Sensor write failed [ 453.865497][ T1287] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 453.949471][T10311] syz_tun: entered allmulticast mode [ 453.968428][T10310] syz_tun: left allmulticast mode [ 454.301303][T10317] netlink: 560 bytes leftover after parsing attributes in process `syz.3.1179'. [ 454.323126][ T1287] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 454.345394][T10317] openvswitch: netlink: Flow key attr not present in new flow. [ 454.502022][ T1287] usb 5-1: config 0 has no interfaces? [ 454.553482][ T1287] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 454.558570][ T5939] usb 1-1: USB disconnect, device number 28 [ 454.640995][ T1287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.771742][ T1287] usb 5-1: Product: syz [ 454.791751][ T1287] usb 5-1: Manufacturer: syz [ 454.842994][ T1287] usb 5-1: SerialNumber: syz [ 454.897086][ T1287] usb 5-1: config 0 descriptor?? [ 455.027774][ T5957] usb 2-1: USB disconnect, device number 51 [ 455.138745][T10331] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1183'. [ 455.890124][T10346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1188'. [ 456.602763][ T44] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 456.794180][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 456.892553][ T44] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 456.935855][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 456.970465][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 457.206754][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 457.297376][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 457.433027][ T44] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 457.445481][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.612512][ T44] usb 3-1: Product: syz [ 457.625214][ T44] usb 3-1: Manufacturer: syz [ 457.626070][ T5925] usb 5-1: USB disconnect, device number 47 [ 457.672457][ T44] usb 3-1: SerialNumber: syz [ 457.714432][ T44] usb 3-1: config 0 descriptor?? [ 458.494141][T10365] bond2 (unregistering): Released all slaves [ 458.805330][ T44] iforce 3-1:0.0: usb_submit_urb failed: -110 [ 458.824534][ T44] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 458.835958][ T44] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 458.847928][ T44] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 458.866184][ T44] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 458.882118][ T44] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 458.932551][ T44] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 458.974182][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1194'. [ 458.984977][ T44] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 458.995816][ T44] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 459.017451][ T44] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 459.074223][ T44] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 459.082056][ T44] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 459.088774][ T44] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 459.095822][ T44] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 459.102355][ T44] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 459.140778][ T44] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 459.342937][ T44] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 459.389710][ T44] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 459.424641][ T44] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 459.479202][ T44] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 459.497986][ T44] input input28: Timeout waiting for response from device. [ 459.544707][ T5925] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 459.734032][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 459.748490][ T5925] usb 5-1: config 0 has an invalid interface number: 183 but max is 0 [ 459.759549][ T5925] usb 5-1: config 0 has no interface number 0 [ 459.787878][ T5925] usb 5-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 459.820890][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.912676][ T5925] usb 5-1: Product: syz [ 459.916987][ T5925] usb 5-1: Manufacturer: syz [ 459.938989][ T5925] usb 5-1: SerialNumber: syz [ 460.170810][ T5925] usb 5-1: config 0 descriptor?? [ 460.185897][ T5925] net1080 5-1:0.183: probe with driver net1080 failed with error -22 [ 460.292663][ T44] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 460.442634][ T44] usb 2-1: device descriptor read/64, error -71 [ 460.585073][T10389] bridge2: entered promiscuous mode [ 460.863370][ T44] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 461.012519][ T44] usb 2-1: device descriptor read/64, error -71 [ 461.070269][T10396] No such timeout policy "syz0" [ 461.132953][ T44] usb usb2-port1: attempt power cycle [ 461.493412][ T44] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 461.633029][ T44] usb 2-1: device descriptor read/8, error -71 [ 461.872642][ T44] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 461.894401][ T44] usb 2-1: device descriptor read/8, error -71 [ 462.016215][ T44] usb usb2-port1: unable to enumerate USB device [ 462.282524][ T44] usb 5-1: USB disconnect, device number 48 [ 462.979591][T10417] netlink: 'syz.1.1205': attribute type 4 has an invalid length. [ 463.372715][ T5957] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 463.562563][ T5957] usb 2-1: Using ep0 maxpacket: 16 [ 463.577949][ T5957] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 463.597502][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.622525][ T5957] usb 2-1: Product: syz [ 463.632534][ T5957] usb 2-1: Manufacturer: syz [ 463.658461][ T5957] usb 2-1: SerialNumber: syz [ 463.696579][ T5957] usb 2-1: config 0 descriptor?? [ 464.452980][ T5957] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 464.937908][ T5957] usb 2-1: USB disconnect, device number 56 [ 466.531090][T10462] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 466.558654][T10462] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 466.862767][ T44] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 467.027670][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.072654][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.218974][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 467.682973][ T44] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 467.770693][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.856863][ T44] usb 2-1: config 0 descriptor?? [ 468.380687][ T44] plantronics 0003:047F:FFFF.001B: reserved main item tag 0xe [ 468.390319][ T44] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 468.404100][ T44] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 468.422593][ T5939] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 468.436363][T10478] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1221'. [ 468.607847][ T5939] usb 4-1: config 0 has no interfaces? [ 468.620023][ T5939] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 468.639555][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.665644][ T5939] usb 4-1: Product: syz [ 468.669849][ T5939] usb 4-1: Manufacturer: syz [ 468.685366][ T5939] usb 4-1: SerialNumber: syz [ 468.695605][ T5939] usb 4-1: config 0 descriptor?? [ 468.820940][T10462] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1216'. [ 469.942567][ T5974] usb 2-1: reset high-speed USB device number 57 using dummy_hcd [ 470.311005][T10497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1225'. [ 470.409422][T10498] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1223'. [ 470.924988][ T1287] usb 2-1: USB disconnect, device number 57 [ 472.028819][T10506] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1228'. [ 472.166182][ T5939] usb 4-1: USB disconnect, device number 44 [ 472.739249][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 472.749665][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 472.771335][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 472.788406][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 472.845860][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 472.908953][T10529] io-wq is not configured for unbound workers [ 472.938423][T10529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1231'. [ 473.010973][T10529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1231'. [ 473.043130][T10529] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 473.092621][ T44] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 473.306002][ T44] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 473.314979][ T44] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 473.327064][ T44] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 473.337269][ T44] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 473.348669][ T44] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 473.363319][ T44] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 473.372828][ T44] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 473.380859][ T44] usb 5-1: Product: syz [ 473.385306][ T44] usb 5-1: Manufacturer: syz [ 473.413231][ T44] cdc_wdm 5-1:1.0: skipping garbage [ 473.419923][ T44] cdc_wdm 5-1:1.0: skipping garbage [ 473.443772][ T44] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 473.449765][ T44] cdc_wdm 5-1:1.0: Unknown control protocol [ 473.900309][ T5974] usb 5-1: USB disconnect, device number 49 [ 474.146506][T10531] chnl_net:caif_netlink_parms(): no params data found [ 474.348727][T10544] input: syz1 as /devices/virtual/input/input29 [ 474.832147][T10531] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.859011][T10531] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.884408][ T5852] Bluetooth: hci5: command tx timeout [ 474.935578][T10531] bridge_slave_0: entered allmulticast mode [ 474.947551][T10531] bridge_slave_0: entered promiscuous mode [ 474.968823][T10531] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.976284][T10531] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.986305][T10531] bridge_slave_1: entered allmulticast mode [ 475.062094][T10531] bridge_slave_1: entered promiscuous mode [ 475.222549][ T119] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 475.238883][T10531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.303176][T10531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.415299][T10531] team0: Port device team_slave_0 added [ 475.435298][T10560] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 475.839510][T10531] team0: Port device team_slave_1 added [ 476.033810][ T119] usb 1-1: config 0 has no interfaces? [ 476.061152][ T119] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 476.203338][T10531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.232507][ T119] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.241084][T10531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.241097][ T119] usb 1-1: Product: syz [ 476.312751][T10531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.354095][T10531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.381872][T10531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.451633][ T119] usb 1-1: Manufacturer: syz [ 476.459020][ T119] usb 1-1: SerialNumber: syz [ 476.475236][ T119] usb 1-1: config 0 descriptor?? [ 476.490530][T10531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.964866][ T5852] Bluetooth: hci5: command tx timeout [ 477.684853][T10531] hsr_slave_0: entered promiscuous mode [ 477.726424][T10531] hsr_slave_1: entered promiscuous mode [ 477.735147][T10531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.867321][T10531] Cannot create hsr debugfs directory [ 478.642971][ T119] usb 1-1: USB disconnect, device number 29 [ 478.909669][T10531] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 478.929952][T10531] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 479.059059][ T5852] Bluetooth: hci5: command tx timeout [ 479.063383][T10531] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 479.164478][T10594] netlink: 'syz.1.1242': attribute type 4 has an invalid length. [ 479.221993][T10531] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 479.736259][ T5957] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 479.827196][T10531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.860981][T10531] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.900893][ T9508] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.902764][ T5957] usb 1-1: config 0 has an invalid interface number: 93 but max is 0 [ 479.908220][ T9508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.956346][ T5957] usb 1-1: config 0 has no interface number 0 [ 479.975353][ T5957] usb 1-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 479.995056][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.031317][ T9494] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.038510][ T9494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.046091][ T5957] usb 1-1: Product: syz [ 480.050571][ T5957] usb 1-1: Manufacturer: syz [ 480.055392][ T5957] usb 1-1: SerialNumber: syz [ 480.104314][ T5957] usb 1-1: config 0 descriptor?? [ 480.327270][ T5957] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 480.687014][ T5957] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 480.887059][ T5957] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 480.934803][ T5957] usb 1-1: media controller created [ 480.986649][ T5957] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 481.096798][T10531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.122702][ T5852] Bluetooth: hci5: command tx timeout [ 481.129387][T10608] veth0: entered promiscuous mode [ 481.265059][ T5957] DVB: Unable to find symbol dib7000p_attach() [ 481.290884][ T5957] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 481.315494][ T5957] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 481.324140][T10608] veth0: left promiscuous mode [ 481.327659][T10531] veth0_vlan: entered promiscuous mode [ 481.372927][ T5957] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 481.381783][ T5957] usb 1-1: media controller created [ 481.410441][T10531] veth1_vlan: entered promiscuous mode [ 481.440509][ T5957] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 481.471263][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1251'. [ 481.494939][ T5957] dib0700: the master dib7090 has to be initialized first [ 481.508172][ T5957] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 481.556692][T10531] veth0_macvtap: entered promiscuous mode [ 481.650426][T10531] veth1_macvtap: entered promiscuous mode [ 481.719190][ T5957] rc_core: IR keymap rc-dib0700-rc5 not found [ 481.860804][ T5957] Registered IR keymap rc-empty [ 481.880750][ T5957] dvb-usb: could not initialize remote control. [ 481.897726][ T5957] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 481.930374][T10531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.976408][ T5957] usb 1-1: USB disconnect, device number 30 [ 481.982627][ T119] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 482.008210][T10531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.073141][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 482.073164][ T30] audit: type=1326 audit(1752454848.958:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10615 comm="syz.1.1250" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f88ab98e929 code=0x0 [ 482.113857][T10531] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.126144][ T5957] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 482.140235][T10531] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.150090][T10531] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.172673][ T119] usb 5-1: Using ep0 maxpacket: 16 [ 482.188626][T10531] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.192118][ T119] usb 5-1: config 0 has no interfaces? [ 482.227196][ T119] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 482.241938][ T119] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 482.260700][ T119] usb 5-1: Manufacturer: syz [ 482.808620][ T119] usb 5-1: config 0 descriptor?? [ 483.152830][ T9494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.178083][ T9494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.192596][ T5957] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 483.301258][ T9499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.347045][ T1287] usb 5-1: USB disconnect, device number 50 [ 483.386623][ T9499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.422492][ T5957] usb 1-1: config 0 has no interfaces? [ 483.532024][ T5957] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 483.562469][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.580818][ T5957] usb 1-1: Product: syz [ 483.597807][ T5957] usb 1-1: Manufacturer: syz [ 483.608050][ T5957] usb 1-1: SerialNumber: syz [ 483.629455][ T5957] usb 1-1: config 0 descriptor?? [ 484.187134][T10643] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 484.259017][T10643] macsec1: entered allmulticast mode [ 484.276511][T10643] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 484.331218][T10643] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 484.338681][T10643] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 485.257426][ T5939] usb 1-1: USB disconnect, device number 31 [ 485.269517][T10657] dlm: Unknown command passed to DLM device : 16 [ 485.269517][T10657] [ 486.136717][T10676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1265'. [ 486.252916][T10680] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1266'. [ 486.872791][ T5974] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 486.934863][ T5939] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 486.999563][T10698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1271'. [ 487.025153][T10698] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1271'. [ 487.072584][ T5974] usb 2-1: device descriptor read/64, error -71 [ 487.176168][ T5939] usb 5-1: Using ep0 maxpacket: 16 [ 487.332493][ T5974] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 487.472633][ T5974] usb 2-1: device descriptor read/64, error -71 [ 487.616623][ T5974] usb usb2-port1: attempt power cycle [ 487.675295][T10693] bond2: entered allmulticast mode [ 487.698210][T10693] 8021q: adding VLAN 0 to HW filter on device bond2 [ 488.232137][ T5974] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 488.485577][ T5974] usb 2-1: device descriptor read/8, error -71 [ 488.871140][ T5974] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 489.092275][ T5974] usb 2-1: device descriptor read/8, error -71 [ 489.246106][ T5974] usb usb2-port1: unable to enumerate USB device [ 489.893085][ T5939] usb 5-1: unable to get BOS descriptor or descriptor too short [ 489.912817][ T5939] usb 5-1: no configurations [ 489.929162][ T5939] usb 5-1: can't read configurations, error -22 [ 490.673480][T10722] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1279'. [ 490.825041][T10728] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1281'. [ 491.463412][ T5918] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 491.649793][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 491.746404][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 491.772882][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 491.783263][ T5918] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 491.793107][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.830540][ T5918] usb 4-1: config 0 descriptor?? [ 491.882558][ T5918] em28xx 4-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 492.886663][ T1287] usb 4-1: USB disconnect, device number 45 [ 493.492019][ T5939] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 493.731748][ T5939] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 493.761563][ T5939] usb 1-1: config 0 has no interface number 0 [ 493.802531][ T5939] usb 1-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 493.842549][ T5939] usb 1-1: config 0 interface 151 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 493.872513][ T5939] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 493.950993][ T5939] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 494.032798][ T5939] usb 1-1: New USB device found, idVendor=083a, idProduct=f522, bcdDevice=b9.7e [ 494.078708][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.117409][T10780] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1293'. [ 494.140905][ T5939] usb 1-1: Product: syz [ 494.150811][ T5939] usb 1-1: Manufacturer: syz [ 494.163608][ T5939] usb 1-1: SerialNumber: syz [ 494.200290][ T5939] usb 1-1: config 0 descriptor?? [ 494.211183][T10756] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 494.235361][T10756] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 494.443989][ T5939] usb 1-1: reset full-speed USB device number 32 using dummy_hcd [ 494.994437][T10788] FAULT_INJECTION: forcing a failure. [ 494.994437][T10788] name failslab, interval 1, probability 0, space 0, times 0 [ 495.012528][T10788] CPU: 1 UID: 0 PID: 10788 Comm: syz.1.1296 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 495.012560][T10788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 495.012573][T10788] Call Trace: [ 495.012581][T10788] [ 495.012591][T10788] dump_stack_lvl+0x189/0x250 [ 495.012623][T10788] ? __pfx____ratelimit+0x10/0x10 [ 495.012654][T10788] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.012690][T10788] ? __pfx__printk+0x10/0x10 [ 495.012734][T10788] should_fail_ex+0x414/0x560 [ 495.012770][T10788] should_failslab+0xa8/0x100 [ 495.012798][T10788] __kmalloc_cache_noprof+0x70/0x3d0 [ 495.012821][T10788] ? sctp_add_bind_addr+0x8c/0x370 [ 495.012848][T10788] sctp_add_bind_addr+0x8c/0x370 [ 495.012875][T10788] sctp_copy_local_addr_list+0x30b/0x4e0 [ 495.012901][T10788] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 495.012922][T10788] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 495.012946][T10788] ? sctp_v6_is_any+0x64/0x80 [ 495.012971][T10788] ? sctp_copy_one_addr+0x93/0x360 [ 495.012996][T10788] sctp_bind_addr_copy+0xb3/0x3c0 [ 495.013018][T10788] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 495.013052][T10788] sctp_connect_new_asoc+0x2e0/0x690 [ 495.013084][T10788] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 495.013120][T10788] ? sctp_inet6_send_verify+0x23a/0x300 [ 495.013139][T10788] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 495.013170][T10788] __sctp_connect+0x5ba/0xd50 [ 495.013211][T10788] ? __pfx___sctp_connect+0x10/0x10 [ 495.013234][T10788] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 495.013261][T10788] ? sctp_setsockopt_connectx_old+0xc1/0x160 [ 495.013292][T10788] sctp_setsockopt+0x459/0x1200 [ 495.013318][T10788] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 495.013342][T10788] do_sock_setsockopt+0x257/0x3e0 [ 495.013372][T10788] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 495.013402][T10788] ? __fget_files+0x2a/0x420 [ 495.013440][T10788] __x64_sys_setsockopt+0x18b/0x220 [ 495.013472][T10788] do_syscall_64+0xfa/0x3b0 [ 495.013491][T10788] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.013521][T10788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.013541][T10788] ? clear_bhb_loop+0x60/0xb0 [ 495.013566][T10788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.013585][T10788] RIP: 0033:0x7f88ab98e929 [ 495.013604][T10788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.013622][T10788] RSP: 002b:00007f88ac850038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 495.013644][T10788] RAX: ffffffffffffffda RBX: 00007f88abbb5fa0 RCX: 00007f88ab98e929 [ 495.013659][T10788] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000005 [ 495.013680][T10788] RBP: 00007f88ac850090 R08: 000000000000001c R09: 0000000000000000 [ 495.013693][T10788] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000002 [ 495.013706][T10788] R13: 0000000000000000 R14: 00007f88abbb5fa0 R15: 00007f88abcdfa28 [ 495.013740][T10788] [ 495.638345][ T5939] usb 1-1: USB disconnect, device number 32 [ 496.069340][T10798] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1299'. [ 496.752223][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058d82400: rx timeout, send abort [ 496.760940][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058d82400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 497.069529][T10810] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1305'. [ 497.384920][T10817] FAULT_INJECTION: forcing a failure. [ 497.384920][T10817] name failslab, interval 1, probability 0, space 0, times 0 [ 497.472574][T10817] CPU: 0 UID: 0 PID: 10817 Comm: syz.1.1307 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 497.472607][T10817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 497.472619][T10817] Call Trace: [ 497.472627][T10817] [ 497.472637][T10817] dump_stack_lvl+0x189/0x250 [ 497.472667][T10817] ? __pfx____ratelimit+0x10/0x10 [ 497.472699][T10817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.472722][T10817] ? __pfx__printk+0x10/0x10 [ 497.472756][T10817] ? __pfx___might_resched+0x10/0x10 [ 497.472779][T10817] ? fs_reclaim_acquire+0x7d/0x100 [ 497.472811][T10817] should_fail_ex+0x414/0x560 [ 497.472842][T10817] should_failslab+0xa8/0x100 [ 497.472870][T10817] __kmalloc_cache_noprof+0x70/0x3d0 [ 497.472891][T10817] ? nfnetlink_rcv+0x8ec/0x2520 [ 497.472916][T10817] nfnetlink_rcv+0x8ec/0x2520 [ 497.472945][T10817] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 497.472961][T10817] ? __dev_queue_xmit+0x27e/0x3a70 [ 497.472993][T10817] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 497.473022][T10817] ? ref_tracker_free+0x63a/0x7d0 [ 497.473038][T10817] ? __copy_skb_header+0xa7/0x550 [ 497.473055][T10817] ? __pfx_ref_tracker_free+0x10/0x10 [ 497.473072][T10817] ? __skb_clone+0x63/0x7a0 [ 497.473091][T10817] ? __skb_clone+0x483/0x7a0 [ 497.473110][T10817] ? skb_clone+0x246/0x3a0 [ 497.473128][T10817] ? __netlink_deliver_tap+0x807/0x850 [ 497.473143][T10817] ? netlink_deliver_tap+0x2e/0x1b0 [ 497.473161][T10817] ? netlink_deliver_tap+0x2e/0x1b0 [ 497.473175][T10817] ? netlink_deliver_tap+0x2e/0x1b0 [ 497.473192][T10817] netlink_unicast+0x759/0x8e0 [ 497.473212][T10817] netlink_sendmsg+0x805/0xb30 [ 497.473233][T10817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.473250][T10817] ? aa_sock_msg_perm+0x94/0x160 [ 497.473269][T10817] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 497.473286][T10817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.473301][T10817] __sock_sendmsg+0x219/0x270 [ 497.473314][T10817] ____sys_sendmsg+0x505/0x830 [ 497.473334][T10817] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.473355][T10817] ? import_iovec+0x74/0xa0 [ 497.473372][T10817] ___sys_sendmsg+0x21f/0x2a0 [ 497.473388][T10817] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.473426][T10817] ? __fget_files+0x2a/0x420 [ 497.473441][T10817] ? __fget_files+0x3a0/0x420 [ 497.473463][T10817] __x64_sys_sendmsg+0x19b/0x260 [ 497.473480][T10817] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 497.473502][T10817] ? __pfx_ksys_write+0x10/0x10 [ 497.473513][T10817] ? rcu_is_watching+0x15/0xb0 [ 497.473532][T10817] ? do_syscall_64+0xbe/0x3b0 [ 497.473547][T10817] do_syscall_64+0xfa/0x3b0 [ 497.473557][T10817] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.473576][T10817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.473587][T10817] ? clear_bhb_loop+0x60/0xb0 [ 497.473602][T10817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.473625][T10817] RIP: 0033:0x7f88ab98e929 [ 497.473637][T10817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.473648][T10817] RSP: 002b:00007f88ac850038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.473663][T10817] RAX: ffffffffffffffda RBX: 00007f88abbb5fa0 RCX: 00007f88ab98e929 [ 497.473672][T10817] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 497.473680][T10817] RBP: 00007f88ac850090 R08: 0000000000000000 R09: 0000000000000000 [ 497.473687][T10817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.473694][T10817] R13: 0000000000000000 R14: 00007f88abbb5fa0 R15: 00007f88abcdfa28 [ 497.473714][T10817] [ 497.888635][ T5918] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 498.242540][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 498.274743][T10822] bridge_slave_0: entered promiscuous mode [ 498.358558][ T5918] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 498.409184][ T5918] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 498.596757][ T5918] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 498.652513][ T5918] usb 5-1: config 1 interface 0 has no altsetting 0 [ 498.709582][ T5918] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 498.718867][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.737479][ T5918] usb 5-1: Product: syz [ 498.748635][ T5918] usb 5-1: Manufacturer: syz [ 498.762293][ T5918] usb 5-1: SerialNumber: syz [ 498.771650][T10829] ================================================================== [ 498.779876][T10829] BUG: KASAN: slab-out-of-bounds in string+0x231/0x2b0 [ 498.786767][T10829] Read of size 1 at addr ffff88805a8dcf48 by task syz.0.1311/10829 [ 498.794692][T10829] [ 498.797067][T10829] CPU: 1 UID: 0 PID: 10829 Comm: syz.0.1311 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 498.797095][T10829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 498.797108][T10829] Call Trace: [ 498.797118][T10829] [ 498.797126][T10829] dump_stack_lvl+0x189/0x250 [ 498.797153][T10829] ? __kasan_check_byte+0x12/0x40 [ 498.797179][T10829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.797202][T10829] ? lock_release+0x4b/0x3e0 [ 498.797226][T10829] ? __virt_addr_valid+0x4a5/0x5c0 [ 498.797254][T10829] print_report+0xca/0x230 [ 498.797273][T10829] ? string+0x231/0x2b0 [ 498.797295][T10829] kasan_report+0x118/0x150 [ 498.797319][T10829] ? string+0x231/0x2b0 [ 498.797347][T10829] string+0x231/0x2b0 [ 498.797374][T10829] vsnprintf+0x739/0xf00 [ 498.797401][T10829] vprintk_store+0x3c7/0xd00 [ 498.797429][T10829] ? __pfx_vprintk_store+0x10/0x10 [ 498.797457][T10829] ? __lock_acquire+0xab9/0xd20 [ 498.797486][T10829] ? is_printk_cpu_sync_owner+0x32/0x40 [ 498.797519][T10829] vprintk_emit+0x21e/0x7a0 [ 498.797546][T10829] ? __pfx_vprintk_emit+0x10/0x10 [ 498.797570][T10829] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 498.797599][T10829] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 498.797635][T10829] _printk+0xcf/0x120 [ 498.797661][T10829] ? __pfx____ratelimit+0x10/0x10 [ 498.797693][T10829] ? __pfx__printk+0x10/0x10 [ 498.797729][T10829] ? __flush_work+0xd2/0xbc0 [ 498.797753][T10829] ? __flush_work+0xa5b/0xbc0 [ 498.797781][T10829] nfacct_mt_checkentry+0xd2/0xe0 [ 498.797806][T10829] xt_check_match+0x3d1/0xab0 [ 498.797834][T10829] ? __pfx___flush_work+0x10/0x10 [ 498.797861][T10829] ? __pfx_xt_check_match+0x10/0x10 [ 498.797890][T10829] ? nft_pernet+0x23/0x240 [ 498.797915][T10829] ? nft_pernet+0x23/0x240 [ 498.797940][T10829] ? nft_pernet+0x23/0x240 [ 498.797969][T10829] __nft_match_init+0x63a/0x840 [ 498.797996][T10829] ? __pfx___nft_match_init+0x10/0x10 [ 498.798034][T10829] ? rcu_is_watching+0x15/0xb0 [ 498.798057][T10829] ? trace_kmalloc+0x1f/0xd0 [ 498.798080][T10829] ? nf_tables_newrule+0x1506/0x2890 [ 498.798108][T10829] nf_tables_newrule+0x178c/0x2890 [ 498.798142][T10829] ? __pfx_nf_tables_newrule+0x10/0x10 [ 498.798169][T10829] ? nfnl_pernet+0x23/0x240 [ 498.798203][T10829] ? __nla_parse+0x40/0x60 [ 498.798225][T10829] nfnetlink_rcv+0x1132/0x2520 [ 498.798269][T10829] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 498.798307][T10829] ? ref_tracker_free+0x63a/0x7d0 [ 498.798349][T10829] ? __netlink_deliver_tap+0x807/0x850 [ 498.798379][T10829] ? netlink_deliver_tap+0x2e/0x1b0 [ 498.798403][T10829] ? netlink_deliver_tap+0x2e/0x1b0 [ 498.798429][T10829] netlink_unicast+0x759/0x8e0 [ 498.798455][T10829] netlink_sendmsg+0x805/0xb30 [ 498.798484][T10829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.798510][T10829] ? aa_sock_msg_perm+0x94/0x160 [ 498.798540][T10829] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 498.798569][T10829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.798594][T10829] __sock_sendmsg+0x219/0x270 [ 498.798615][T10829] ____sys_sendmsg+0x505/0x830 [ 498.798643][T10829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 498.798673][T10829] ? import_iovec+0x74/0xa0 [ 498.798697][T10829] ___sys_sendmsg+0x21f/0x2a0 [ 498.798733][T10829] ? __pfx____sys_sendmsg+0x10/0x10 [ 498.798774][T10829] ? __fget_files+0x2a/0x420 [ 498.798799][T10829] ? __fget_files+0x3a0/0x420 [ 498.798830][T10829] __x64_sys_sendmsg+0x19b/0x260 [ 498.798856][T10829] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 498.798887][T10829] ? rcu_is_watching+0x15/0xb0 [ 498.798912][T10829] ? do_syscall_64+0xbe/0x3b0 [ 498.798935][T10829] do_syscall_64+0xfa/0x3b0 [ 498.798954][T10829] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.798982][T10829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.799004][T10829] ? clear_bhb_loop+0x60/0xb0 [ 498.799026][T10829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.799046][T10829] RIP: 0033:0x7f63f4b8e929 [ 498.799066][T10829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.799085][T10829] RSP: 002b:00007f63f5a65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.799108][T10829] RAX: ffffffffffffffda RBX: 00007f63f4db5fa0 RCX: 00007f63f4b8e929 [ 498.799125][T10829] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 498.799139][T10829] RBP: 00007f63f4c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 498.799152][T10829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.799165][T10829] R13: 0000000000000000 R14: 00007f63f4db5fa0 R15: 00007f63f4edfa28 [ 498.799187][T10829] [ 498.799195][T10829] [ 499.246213][T10829] Allocated by task 10829: [ 499.250622][T10829] kasan_save_track+0x3e/0x80 [ 499.255299][T10829] __kasan_kmalloc+0x93/0xb0 [ 499.259886][T10829] __kmalloc_noprof+0x27a/0x4f0 [ 499.264757][T10829] nf_tables_newrule+0x1506/0x2890 [ 499.269867][T10829] nfnetlink_rcv+0x1132/0x2520 [ 499.274720][T10829] netlink_unicast+0x759/0x8e0 [ 499.279480][T10829] netlink_sendmsg+0x805/0xb30 [ 499.284258][T10829] __sock_sendmsg+0x219/0x270 [ 499.288927][T10829] ____sys_sendmsg+0x505/0x830 [ 499.293711][T10829] ___sys_sendmsg+0x21f/0x2a0 [ 499.298410][T10829] __x64_sys_sendmsg+0x19b/0x260 [ 499.303430][T10829] do_syscall_64+0xfa/0x3b0 [ 499.307981][T10829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.313899][T10829] [ 499.316227][T10829] The buggy address belongs to the object at ffff88805a8dcf00 [ 499.316227][T10829] which belongs to the cache kmalloc-cg-96 of size 96 [ 499.330476][T10829] The buggy address is located 0 bytes to the right of [ 499.330476][T10829] allocated 72-byte region [ffff88805a8dcf00, ffff88805a8dcf48) [ 499.345000][T10829] [ 499.347526][T10829] The buggy address belongs to the physical page: [ 499.353941][T10829] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805a8dca80 pfn:0x5a8dc [ 499.364024][T10829] memcg:ffff88803122ce01 [ 499.368252][T10829] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 499.375353][T10829] page_type: f5(slab) [ 499.379345][T10829] raw: 00fff00000000000 ffff88801a449640 ffffea000111e8c0 0000000000000004 [ 499.387941][T10829] raw: ffff88805a8dca80 000000008020001f 00000000f5000000 ffff88803122ce01 [ 499.396873][T10829] page dumped because: kasan: bad access detected [ 499.403372][T10829] page_owner tracks the page as allocated [ 499.409162][T10829] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5867, tgid 5867 (syz-executor), ts 312651459811, free_ts 312651088082 [ 499.428610][T10829] post_alloc_hook+0x240/0x2a0 [ 499.433640][T10829] get_page_from_freelist+0x21e4/0x22c0 [ 499.439187][T10829] __alloc_frozen_pages_noprof+0x181/0x370 [ 499.444991][T10829] alloc_pages_mpol+0x232/0x4a0 [ 499.449968][T10829] allocate_slab+0x8a/0x3b0 [ 499.454484][T10829] ___slab_alloc+0xbfc/0x1480 [ 499.459351][T10829] __kvmalloc_node_noprof+0x429/0x5f0 [ 499.464746][T10829] alloc_fdtable+0x14f/0x2a0 [ 499.469447][T10829] dup_fd+0x86c/0xb60 [ 499.473427][T10829] copy_files+0xc9/0x120 [ 499.477668][T10829] copy_process+0x157a/0x3b80 [ 499.482341][T10829] kernel_clone+0x21e/0x870 [ 499.486900][T10829] __x64_sys_clone+0x18b/0x1e0 [ 499.491701][T10829] do_syscall_64+0xfa/0x3b0 [ 499.496237][T10829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.502130][T10829] page last free pid 5867 tgid 5867 stack trace: [ 499.508535][T10829] __free_frozen_pages+0xc71/0xe70 [ 499.513666][T10829] vfree+0x25a/0x400 [ 499.517584][T10829] __do_replace+0x827/0x980 [ 499.522182][T10829] do_ip6t_set_ctl+0xa16/0xce0 [ 499.527086][T10829] nf_setsockopt+0x26f/0x290 [ 499.531674][T10829] do_sock_setsockopt+0x257/0x3e0 [ 499.536703][T10829] __x64_sys_setsockopt+0x18b/0x220 [ 499.541913][T10829] do_syscall_64+0xfa/0x3b0 [ 499.546426][T10829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.552313][T10829] [ 499.554631][T10829] Memory state around the buggy address: [ 499.560289][T10829] ffff88805a8dce00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 499.568377][T10829] ffff88805a8dce80: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 499.576443][T10829] >ffff88805a8dcf00: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 499.584665][T10829] ^ [ 499.591120][T10829] ffff88805a8dcf80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 499.599279][T10829] ffff88805a8dd000: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 499.607352][T10829] ================================================================== [ 499.615605][T10829] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 499.622915][T10829] CPU: 1 UID: 0 PID: 10829 Comm: syz.0.1311 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 499.635084][T10829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 499.645226][T10829] Call Trace: [ 499.648508][T10829] [ 499.651463][T10829] dump_stack_lvl+0x99/0x250 [ 499.656105][T10829] ? __asan_memcpy+0x40/0x70 [ 499.660692][T10829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.665983][T10829] ? __pfx__printk+0x10/0x10 [ 499.670584][T10829] panic+0x2db/0x790 [ 499.674506][T10829] ? __pfx_panic+0x10/0x10 [ 499.678921][T10829] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 499.684824][T10829] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 499.691177][T10829] ? print_memory_metadata+0x314/0x400 [ 499.696634][T10829] ? string+0x231/0x2b0 [ 499.700810][T10829] check_panic_on_warn+0x89/0xb0 [ 499.705751][T10829] ? string+0x231/0x2b0 [ 499.710001][T10829] end_report+0x78/0x160 [ 499.714519][T10829] kasan_report+0x129/0x150 [ 499.719037][T10829] ? string+0x231/0x2b0 [ 499.723217][T10829] string+0x231/0x2b0 [ 499.727222][T10829] vsnprintf+0x739/0xf00 [ 499.731466][T10829] vprintk_store+0x3c7/0xd00 [ 499.736059][T10829] ? __pfx_vprintk_store+0x10/0x10 [ 499.741185][T10829] ? __lock_acquire+0xab9/0xd20 [ 499.746060][T10829] ? is_printk_cpu_sync_owner+0x32/0x40 [ 499.751701][T10829] vprintk_emit+0x21e/0x7a0 [ 499.756233][T10829] ? __pfx_vprintk_emit+0x10/0x10 [ 499.761387][T10829] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 499.767314][T10829] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 499.773660][T10829] _printk+0xcf/0x120 [ 499.777650][T10829] ? __pfx____ratelimit+0x10/0x10 [ 499.782700][T10829] ? __pfx__printk+0x10/0x10 [ 499.787346][T10829] ? __flush_work+0xd2/0xbc0 [ 499.791954][T10829] ? __flush_work+0xa5b/0xbc0 [ 499.796656][T10829] nfacct_mt_checkentry+0xd2/0xe0 [ 499.801869][T10829] xt_check_match+0x3d1/0xab0 [ 499.806565][T10829] ? __pfx___flush_work+0x10/0x10 [ 499.811613][T10829] ? __pfx_xt_check_match+0x10/0x10 [ 499.816831][T10829] ? nft_pernet+0x23/0x240 [ 499.821266][T10829] ? nft_pernet+0x23/0x240 [ 499.825713][T10829] ? nft_pernet+0x23/0x240 [ 499.830148][T10829] __nft_match_init+0x63a/0x840 [ 499.835002][T10829] ? __pfx___nft_match_init+0x10/0x10 [ 499.840377][T10829] ? rcu_is_watching+0x15/0xb0 [ 499.845141][T10829] ? trace_kmalloc+0x1f/0xd0 [ 499.849827][T10829] ? nf_tables_newrule+0x1506/0x2890 [ 499.855215][T10829] nf_tables_newrule+0x178c/0x2890 [ 499.860437][T10829] ? __pfx_nf_tables_newrule+0x10/0x10 [ 499.866000][T10829] ? nfnl_pernet+0x23/0x240 [ 499.870539][T10829] ? __nla_parse+0x40/0x60 [ 499.874977][T10829] nfnetlink_rcv+0x1132/0x2520 [ 499.879753][T10829] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 499.884871][T10829] ? ref_tracker_free+0x63a/0x7d0 [ 499.889923][T10829] ? __netlink_deliver_tap+0x807/0x850 [ 499.895391][T10829] ? netlink_deliver_tap+0x2e/0x1b0 [ 499.900590][T10829] ? netlink_deliver_tap+0x2e/0x1b0 [ 499.905976][T10829] netlink_unicast+0x759/0x8e0 [ 499.910828][T10829] netlink_sendmsg+0x805/0xb30 [ 499.915595][T10829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.920876][T10829] ? aa_sock_msg_perm+0x94/0x160 [ 499.926007][T10829] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 499.931293][T10829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.936595][T10829] __sock_sendmsg+0x219/0x270 [ 499.941269][T10829] ____sys_sendmsg+0x505/0x830 [ 499.946034][T10829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 499.951405][T10829] ? import_iovec+0x74/0xa0 [ 499.955906][T10829] ___sys_sendmsg+0x21f/0x2a0 [ 499.960682][T10829] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.965994][T10829] ? __fget_files+0x2a/0x420 [ 499.970591][T10829] ? __fget_files+0x3a0/0x420 [ 499.975289][T10829] __x64_sys_sendmsg+0x19b/0x260 [ 499.980228][T10829] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 499.985703][T10829] ? rcu_is_watching+0x15/0xb0 [ 499.990482][T10829] ? do_syscall_64+0xbe/0x3b0 [ 499.995158][T10829] do_syscall_64+0xfa/0x3b0 [ 499.999655][T10829] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.004859][T10829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.011043][T10829] ? clear_bhb_loop+0x60/0xb0 [ 500.015802][T10829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.021800][T10829] RIP: 0033:0x7f63f4b8e929 [ 500.026227][T10829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.046216][T10829] RSP: 002b:00007f63f5a65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.054639][T10829] RAX: ffffffffffffffda RBX: 00007f63f4db5fa0 RCX: 00007f63f4b8e929 [ 500.062613][T10829] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 500.070579][T10829] RBP: 00007f63f4c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 500.078549][T10829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.086603][T10829] R13: 0000000000000000 R14: 00007f63f4db5fa0 R15: 00007f63f4edfa28 [ 500.094597][T10829] [ 500.098258][T10829] Kernel Offset: disabled [ 500.102639][T10829] Rebooting in 86400 seconds..