last executing test programs: 11.588628464s ago: executing program 1 (id=4037): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000140)) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4040080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6a}, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x12}]}, 0x34}, 0x1, 0x0, 0x0, 0x44001}, 0x4000001) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x4c, r3, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x4, 0x2}, {0x7, 0x6}, {0x4, 0x2}, {0x3, 0x7}, {0x5}, {0x1, 0x4}, {0x1, 0x2}, {0x0, 0xa}, {0x0, 0x1}, {0x6, 0x1}, {0x2, 0xa}, {0x0, 0x2}, {0x3, 0x9}, {0x0, 0x7}]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000d1}, 0x4000814) 11.363344559s ago: executing program 1 (id=4039): inotify_init1(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') read$eventfd(r0, &(0x7f0000000080), 0x51) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10.757425072s ago: executing program 1 (id=4042): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x100000, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c000001", @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000000ff160000000000000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) 10.430571211s ago: executing program 1 (id=4043): socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x4d, 0x0, &(0x7f0000000080)={0x0, 0x2, [0xd62, 0xd67, 0x738, 0xa8d]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0) mmap(&(0x7f00002e8000/0x4000)=nil, 0x4000, 0x2, 0x110, 0xffffffffffffffff, 0xf08a3000) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008005) ioctl$EVIOCGMASK(r4, 0x60b, 0x0) write$char_usb(r4, 0x0, 0x0) syz_usb_disconnect(r3) syz_emit_ethernet(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10) r5 = socket$inet6(0xa, 0x3, 0xff) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0xc1105511, &(0x7f0000000040)={0xe, 0x0, 0x8, 0xb53, '\x00', 0x2}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0xc1105511, &(0x7f0000000040)) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast2, 0x5}, 0x1c) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[], 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 8.478537168s ago: executing program 2 (id=4050): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f000000a280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtaction={0x18, 0x5a, 0x1, 0x70bd25, 0x40000, {0x2}, [{0x4, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$poke(0x4, r4, &(0x7f00000000c0), 0x7ff) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xd7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x1, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r7, &(0x7f0000005d40)=[{{&(0x7f0000000600)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="10000000000000000000c0"], 0x10}}], 0x1, 0x400c0) sendfile(r7, r6, 0x0, 0x20000023893) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000880)=@ethtool_per_queue_op={0x4b, 0x1d, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x7ff, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x9, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x5, 0x4, 0xfffffffb, 0x5, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x3ff, 0x586, 0x6, 0xf667, 0xfffffffc, 0x7, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x9, 0xffffffff, 0x1, 0x83, 0xe39, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x6, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x0, 0x5, 0x74a000, 0x4e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x71, 0x1, 0x80000001, 0x7f, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100], "db9a95347da7db486cd4d50d5bc08c394dcd61739358bac0ce943503d8a701a023e45fa6cfa9ded37458cb187d37e28fd7b9b25e6100a4db79a24ea649b253746803c4c11ed28de1b8b276bba1953f5b2c2dfc5d58b5896485782a8f3607391909d56316fa2f2e107d4c171477f76f3020d411f49216b5d684337e5a6ab7a13e9c985ac519353a97ead403669b84aeca345cd062b9a59508b23d32123c37098da9ae92a294752110bef22a69ea1afaaa5e7be05522738b294f49820edab4461c16b119254a87048108b2f21b051af7c4ea8b5849b11b5b354246a880ca3b6b70f5"}}) socket$inet_smc(0x2b, 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r8, 0xffffffffffffffff, 0x0) 6.594865063s ago: executing program 0 (id=4054): syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff0005008005090581030002"], 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff0000114242"], 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x303000, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=0x0, @ANYBLOB="050100ffff006aa5"], 0x24}}, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa88800000000500012800e0001006970366772657461700000003c000280080014000e000000060003000700000008000d0005000000060002001ef7"], 0x70}}, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@local, @empty}}) (async, rerun: 64) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000040)) 6.146659708s ago: executing program 3 (id=4055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}}, 0x0) 5.883065456s ago: executing program 2 (id=4056): syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000ff1c1b1f1c4000010203010902240001010800fe09040000020301025f09210800060122cb0f09058103ff03"], 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000200)=ANY=[]) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x73, 0x0, 0x4, 0x1000000, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) 5.791227398s ago: executing program 3 (id=4057): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a80)={0x5a8, 0x0, r1, [{{0x2, 0x3, 0x4, 0xfffffffffffffff7, 0x5, 0x8, {0x2, 0xbeb2, 0x2, 0x0, 0x8000000000000001, 0x1, 0x4, 0x200, 0x6, 0xa000, 0x1, r2, r3, 0x0, 0x9}}, {0x3, 0x5, 0x10, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, {{0x1, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x9, {0x3, 0xd6f4, 0xfffffffffffffff8, 0x3, 0x8000000000000000, 0xbe, 0x5, 0x7ff, 0x100, 0x1000, 0x8, 0x0, 0x0, 0xe, 0x40}}, {0x6, 0x7, 0x9, 0x7, '/dev/kvm\x00'}}, {{0x0, 0x2, 0x6, 0x8000000000000001, 0x80000001, 0x1, {0x3, 0x4, 0xb, 0x8, 0x4, 0x1, 0x6f9, 0xfffffffc, 0x7, 0x1000, 0x5, 0x0, 0x0, 0x8000, 0x3}}, {0x3, 0x2, 0xa, 0x6, '/dev/cuse\x00'}}, {{0x5, 0x1, 0x8000000000000001, 0x85, 0x2, 0x795, {0x0, 0x7, 0x7fff, 0x7, 0x1000, 0x4aa, 0x1, 0x0, 0x8, 0x8000, 0x4, 0x0, 0x0, 0x7, 0x6}}, {0x1, 0x7, 0x99, 0x10001, '\x04ootmode\x8e\x12\x05\xf3\x81}\xa0\xeb`\xbf\xb2T\xf1\xad\xa1\a y\x8b,+\xa2w\xad\xb8&.\xe5>\xd7\x88\xcd\xd8p\xc4F\xa9\x1e{\xf4\x8c\x94\x89\xa3\xa4\xaf\xf0Ng]\x9c\xdc*\xe2G\xa6yV\xd6\xa5\x80O\xa9]`U\xd9\x9b\x95\x8a\xa7Z\xb4\xf1xQ(\x9cy\x9a\xeb\xe7\x1a\x9b\x0e\xf7M\xa0\x0eP\x9aS\x0e7\x90z)o\xceV\x80)^\xef@\xb6\x8c\x17IK\xa1\xb0\x0e:R\x01\x03_\x87\bJj\xd3\x9f\x80\x13\xfadj\x053\x1e\x91r\xaa\b_\x04\xd7\xc1!\xb4\xc5\xe5h'}}, {{0x0, 0x2, 0x8, 0x1, 0x4, 0x5, {0x1, 0x7, 0x5, 0xf46b, 0x6, 0x5, 0xc4, 0x5, 0xc9a7, 0xc000, 0x51, 0xee01, 0x0, 0xa32, 0x101}}, {0x0, 0x9, 0x4, 0xf6, ')+@)'}}, {{0x5, 0x1, 0x6, 0x93, 0xe, 0x9, {0x0, 0x4, 0x0, 0x2, 0x3, 0xffffffffffffffff, 0x1, 0x7f, 0x5, 0xa000, 0x4, r2, 0x0, 0x3ff, 0x9}}, {0x4, 0x1, 0x0, 0x6}}, {{0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x9, 0x2, {0x6, 0xb, 0x8, 0x8000000000000001, 0x100000000, 0xffffffffffffffff, 0x7f, 0x6, 0x5, 0xa000, 0x0, 0x0, r3, 0x400, 0x7fffffff}}, {0x5, 0x2}}, {{0x5, 0x0, 0x8, 0x3, 0x825, 0x7, {0x3, 0xe1c, 0xff, 0x3, 0x0, 0x6, 0x40, 0x8, 0xfffffff8, 0xa000, 0x9, 0x0, 0x0, 0x10001, 0x7}}, {0x6, 0xc, 0x0, 0xb4}}]}, 0x5a8) (async) r4 = getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8) setresuid(r2, r4, r5) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r7 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) setxattr$system_posix_acl(&(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) (async) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c40), 0xa8041, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x22) (async) syz_mount_image$fuse(&(0x7f0000001080), &(0x7f00000010c0)='./file0\x00', 0x60, &(0x7f0000000240)=ANY=[@ANYBLOB="66643d81b59cf0d69e42711ddc9384f8f18b715d5296789fb6875ae6acb5f1aca67a549c39ba372ece290e32dd5be629eeca548d5e5c17d6e909000000000000003b1828109e5d11a6b1748cdc4f952c98acd949e682d96e81c80f2f786f9fba7a9b831df76bba3bf75ad4ebf33cc013dab62e30738d5580370312fe5105fa1ec7ca00"/140, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0xee01, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) (async) mkdirat(r7, &(0x7f0000000080)='./cgroup\x00', 0xa0) (async) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000400)=0x3) write$char_usb(r8, &(0x7f0000000040)="e2", 0x918) 5.74273109s ago: executing program 0 (id=4058): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000004c0), 0x101080, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000540)={0xc, 0x0, 0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r2, 0x28, 0x12, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000fc0)={0x48, 0x2, r1}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x4008c0, 0x0) renameat2(r3, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x178) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f0000000040)={0x9, 0x3, 0x41, 0x10000, 'syz1\x00', 0x4000041}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x51e7, &(0x7f00000000c0)={0x0, 0x9ccd, 0x10000, 0x1, 0x84, 0x0, r3}, &(0x7f0000000140), &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, r7, 0x1, 0x2, 0x6, @broadcast}, 0x14) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 5.646567747s ago: executing program 3 (id=4059): syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) syz_open_dev$media(&(0x7f0000000000), 0x10000, 0x80000) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000540)={0x80000000, 0x0, 0x0}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_io_uring_setup(0x4fc, &(0x7f0000000100)={0x0, 0xc6be, 0x4000, 0x3, 0x1df}, &(0x7f0000000180)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x7126, 0x0}) 5.510745528s ago: executing program 1 (id=4060): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0x22100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040800) r4 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r4, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) capget(0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0xf9}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x4}]}}}]}, 0x48}}, 0x0) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x4018}], 0x1, 0x7) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r1, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.317843615s ago: executing program 0 (id=4061): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000140)) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4040080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6a}, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x12}]}, 0x34}, 0x1, 0x0, 0x0, 0x44001}, 0x4000001) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x50, r3, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x4, 0x2}, {0x7, 0x6}, {0x4, 0x2}, {0x3, 0x7}, {0x5}, {0x1, 0x4}, {0x1, 0x2}, {0x0, 0xa}, {0x0, 0x1}, {0x6, 0x1}, {0x2, 0xa}, {0x0, 0x2}, {0x3, 0x9}, {0x0, 0x7}]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000d1}, 0x4000814) 4.767986056s ago: executing program 0 (id=4062): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f00000004c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0xfffffff9}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="240000fdff000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32=r2], 0x28}}], 0x1, 0x200440c0) 4.601795271s ago: executing program 3 (id=4063): socket$key(0xf, 0x3, 0x2) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000100)=0xffff0000) r0 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x50000, 0x94) mknodat(r5, &(0x7f0000000180)='./file0\x00', 0x10, 0x7ff) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0, 0x0, 0x6c}, 0x0, @in6=@empty, 0x3501, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8}, @NFTA_NG_OFFSET={0x8}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, 0x0) 4.313115456s ago: executing program 0 (id=4065): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x10, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000003c0)=0x560, 0x4) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@host, 0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r3, 0x7b0, 0x0) sched_setattr(0x0, &(0x7f00000010c0)={0x38, 0x0, 0x27, 0x270, 0x3, 0x8, 0x0, 0x306, 0x1ff, 0x9}, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000020c0)=ANY=[@ANYBLOB="1201010200000010f3044d07400001"], 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000002180)=ANY=[@ANYBLOB="12010200000000000000a8a440000102030109021b0001018140950904006d01070101050905ee827937c33d089e0b117141386b8d1a0102ff030d090d08a894ed3097a625910d73e9c2f09081ad74e46a073be233222d", @ANYRESDEC=r2], &(0x7f0000002440)={0xa, &(0x7f0000002100)={0x5a, 0x6, 0x201, 0x6, 0x4, 0x2, 0x10, 0xd}, 0x5, &(0x7f0000002280)={0x5, 0xf, 0x5}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000000000005c00000008000300", @ANYRES32=r6, @ANYBLOB="08006b00f000000020ddf5ab573579f2d6f55f536af68c1bc4a2e112f115"], 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x48000) r7 = syz_open_dev$media(&(0x7f00000001c0), 0x9, 0x402) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000600)) connect$pptp(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) syz_emit_ethernet(0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, 0x0, &(0x7f0000004480)=""/4100, 0x1004) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xb381}]}}}]}, 0x3c}}, 0x44) 4.079312458s ago: executing program 4 (id=4066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}}, 0x0) 3.828058328s ago: executing program 4 (id=4067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}}, 0x0) 3.646808325s ago: executing program 4 (id=4068): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x2000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xeeee0000}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f00000000c0)=0x401, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @private=0xa010100}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = fanotify_init(0x200, 0x40000) fanotify_mark(r5, 0x1, 0x8000018, r4, 0x0) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)='X\x00\x00', 0x3}], 0x1) preadv(r3, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/193, 0xc1}, {&(0x7f0000000480)=""/169, 0xa9}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x4, 0x6, 0x0) read$hiddev(r3, &(0x7f0000000000), 0x0) 3.318132625s ago: executing program 2 (id=4069): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208001e0000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}}, 0x4000) 3.056544374s ago: executing program 4 (id=4070): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@getlink={0x280, 0x12, 0x10, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x11, 0x11412}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x2}, @IFLA_CARRIER={0x5, 0x21, 0x3}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5b98}, @IFLA_VF_PORTS={0x4}, @IFLA_VF_PORTS={0x118, 0x18, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "fefb1b643d87cb0896eddcfb58c7650a"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d50c144ebe662f00"}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_VF={0x8, 0x1, 0x81}, @IFLA_PORT_REQUEST={0x5}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, 'geneve\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b682db6a3499f6f50c6fe0075a81d307"}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ce7ae1612b1f8bd151690c3f98f2ce97"}, @IFLA_PORT_PROFILE={0xf, 0x2, '/dev/audio\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "8b867136e40bf07f9c15fc82f5643b43"}, @IFLA_PORT_REQUEST={0x5}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xc0}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xb}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x10}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "deedf0f10d9f0ec573c64d6f2149be49"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a24bc8d543b1bc037679605e024dc524"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "58c53e23ec1a2edfd9f28f5c88c8fd4d"}]}, {0x4}, {0x4}]}, @IFLA_GROUP={0x8, 0x1b, 0x7}, @IFLA_IFALIAS={0x14, 0x14, 'sit0\x00'}, @IFLA_AF_SPEC={0x80, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET6={0x48, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0}]}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x7, 0x0, 0x0, 0x40}, {0x8, 0x15, 0x0, 0x0, 0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x14, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xf7}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x45}]}]}, @IFLA_VFINFO_LIST={0x2c, 0x16, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xa1, 0x4}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x5, 0x1ff}}]}]}, @IFLA_AF_SPEC={0x4c, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_INET6={0x4}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x13, 0x0, 0x0, 0xa}]}}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x4}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x5, 0x0, 0x0, 0xfffff0ec}, {0x8, 0x0, 0x0, 0x0, 0x8}, {0x8, 0x2, 0x0, 0x0, 0x4}]}}]}]}, 0x280}}, 0x40080) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r3, 0x54a6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fa00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000300000000000000ff7e000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850900000000000000000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000500)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x18, 0x44000}], 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r6 = socket$rxrpc(0x21, 0x2, 0xa) close_range(r6, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@getlink={0x280, 0x12, 0x10, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x11, 0x11412}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x2}, @IFLA_CARRIER={0x5, 0x21, 0x3}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5b98}, @IFLA_VF_PORTS={0x4}, @IFLA_VF_PORTS={0x118, 0x18, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "fefb1b643d87cb0896eddcfb58c7650a"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d50c144ebe662f00"}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_VF={0x8, 0x1, 0x81}, @IFLA_PORT_REQUEST={0x5}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, 'geneve\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b682db6a3499f6f50c6fe0075a81d307"}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ce7ae1612b1f8bd151690c3f98f2ce97"}, @IFLA_PORT_PROFILE={0xf, 0x2, '/dev/audio\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "8b867136e40bf07f9c15fc82f5643b43"}, @IFLA_PORT_REQUEST={0x5}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xc0}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xb}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x10}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "deedf0f10d9f0ec573c64d6f2149be49"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a24bc8d543b1bc037679605e024dc524"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "58c53e23ec1a2edfd9f28f5c88c8fd4d"}]}, {0x4}, {0x4}]}, @IFLA_GROUP={0x8, 0x1b, 0x7}, @IFLA_IFALIAS={0x14, 0x14, 'sit0\x00'}, @IFLA_AF_SPEC={0x80, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET6={0x48, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0}]}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x7, 0x0, 0x0, 0x40}, {0x8, 0x15, 0x0, 0x0, 0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x14, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xf7}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x45}]}]}, @IFLA_VFINFO_LIST={0x2c, 0x16, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xa1, 0x4}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x5, 0x1ff}}]}]}, @IFLA_AF_SPEC={0x4c, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_INET6={0x4}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x13, 0x0, 0x0, 0xa}]}}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x4}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x5, 0x0, 0x0, 0xfffff0ec}, {0x8, 0x0, 0x0, 0x0, 0x8}, {0x8, 0x2, 0x0, 0x0, 0x4}]}}]}]}, 0x280}}, 0x40080) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r3, 0x54a6) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fa00"/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000300000000000000ff7e000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850900000000000000000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) accept4(r2, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r5, &(0x7f0000000500)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x18, 0x44000}], 0x1, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) close_range(r6, 0xffffffffffffffff, 0x2) (async) 2.715150153s ago: executing program 4 (id=4071): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r6, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000088000000060a010400000000000000000100000008000b400000000060000480280001800e000100636f6e6e6c696d69740000001400028008000140000006e508000240000000003400018008000100636d7000280002800800024000000001140003800400010009000100efbb17b799000000080001400000000e0900010073797a30"], 0xfc}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES8=r7, @ANYRES64=0x0, @ANYRES16], 0x1000f) 2.626707204s ago: executing program 2 (id=4072): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000140)) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4040080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6a}, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x12}]}, 0x34}, 0x1, 0x0, 0x0, 0x44001}, 0x4000001) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x44, r3, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x4, 0x2}, {0x7, 0x6}, {0x4, 0x2}, {0x3, 0x7}, {0x5}, {0x1, 0x4}, {0x1, 0x2}, {0x0, 0xa}, {0x0, 0x1}, {0x6, 0x1}, {0x2, 0xa}, {0x0, 0x2}, {0x3, 0x9}, {0x0, 0x7}]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000d1}, 0x4000814) 2.184934999s ago: executing program 2 (id=4073): syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) syz_open_dev$media(&(0x7f0000000000), 0x10000, 0x80000) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000540)={0x80000000, 0x0, 0x0}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_io_uring_setup(0x4fc, &(0x7f0000000100)={0x0, 0xc6be, 0x4000, 0x3, 0x1df}, &(0x7f0000000180)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x7126, 0x0}) 1.750263949s ago: executing program 1 (id=4074): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff580", 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000052000100fcffffff000000000a00000008000100", @ANYRES32=r4], 0x1c}}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b500000082000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}, {0x9, 0x0, 0xb187}], 0x2, 0x201, 0x0, 0x0, 0x42, 0x5c}) r9 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r9, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) unshare(0x42001100) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x9, 0x2, 0x4, 0x6}, {0x3, 0x2, 0xe, 0xb3b, 0x3, 0x6}, 0x9, 0x0, 0x2d}}, @TCA_TBF_PTAB={0x404, 0x3, [0xfb, 0x2, 0x101, 0x5, 0x2, 0xa28, 0x4, 0x9, 0xf, 0xffff6d77, 0xe4, 0x280, 0x107, 0x8001, 0x2, 0x0, 0x7, 0xff, 0x4, 0x401, 0x9, 0x5, 0x3, 0x1, 0xfffffff5, 0x5, 0xb8, 0x7, 0x3, 0x1, 0x157, 0x26553de0, 0x4, 0x3ff, 0x80, 0x4, 0x1, 0x5, 0x1, 0x4, 0xf, 0x1000, 0x9, 0x6, 0xfff, 0x42, 0x44, 0x9, 0x6, 0x1, 0x7f, 0x9, 0x9, 0x6, 0x40, 0xffff, 0x0, 0x3, 0x9, 0x3, 0x7, 0xd61a, 0x1, 0x4, 0x8000, 0x5400000, 0x8000, 0x6, 0x400, 0x8000, 0x401, 0x4, 0xffffffff, 0x5, 0x8000, 0x1000, 0xb5, 0x6, 0x7, 0x0, 0x800, 0x1, 0x7fff, 0x401, 0x0, 0x2, 0x6e9, 0x8, 0x6, 0x5, 0xfffffffa, 0xffffff83, 0x7f, 0x9, 0x5feecc8, 0xb, 0x1a48dadd, 0xa3b, 0xfffffffa, 0x4, 0xffff, 0xc5, 0xbfa, 0x80000001, 0x8, 0x6, 0xacc, 0x7, 0x9, 0x1, 0x8001, 0x9, 0xcd4d, 0x5, 0x0, 0x7ff, 0x5, 0x5fd, 0x8, 0x8001, 0x9, 0xfffffff7, 0x76, 0x400, 0x4, 0x5, 0x9, 0x6, 0x17, 0x6, 0x2, 0x4, 0x400000, 0x10001, 0xd17, 0x1, 0x89, 0x4, 0x4, 0x8, 0x8, 0x10000, 0x9, 0x1, 0xce3, 0x4, 0x9, 0x96, 0x4, 0x6, 0x9, 0x8001, 0xc, 0x3, 0x2, 0x8969, 0x100, 0x100, 0x101, 0x7, 0x10000, 0x0, 0xc, 0x9, 0xfffffff1, 0x1, 0x1, 0x4, 0x7, 0x34a00, 0x45, 0x800, 0x2, 0x2, 0x7, 0x3800, 0x8, 0x4, 0x4, 0xfffffffb, 0x4, 0xb, 0xc, 0x5, 0x2, 0x4, 0x2000000, 0x2, 0x2, 0x5, 0x5, 0xfffffff8, 0xda, 0x9, 0x8, 0x2, 0x1, 0x4, 0x8, 0x7, 0x36a3, 0x2, 0x5, 0xa1, 0x94, 0x4a9b, 0x9, 0x5, 0x0, 0x3, 0x3, 0x4, 0xe, 0xd, 0xfffffff2, 0x5, 0x8, 0x0, 0x200, 0x7d, 0x2, 0x4, 0x1, 0x7fff, 0x3, 0x6, 0x3ff, 0x10000, 0x10, 0x0, 0x6, 0x8, 0x6, 0x8, 0x8, 0xf, 0x81, 0x4, 0x400, 0x3, 0xc, 0x8, 0x3, 0x6, 0x2c, 0x8, 0x25, 0x0, 0xb9, 0x3, 0x330c, 0xfffffffe, 0xc, 0x3a8b, 0x9, 0x1]}]}}]}, 0x45c}}, 0x0) 1.079781031s ago: executing program 2 (id=4075): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="340200c82cc3", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e0004"], 0x34}}, 0x0) (async) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) (async) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', 0x800}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000900000000000000090000e7940000000000e49c1600009500000000"], &(0x7f0000000080)='syzkaller\x00', 0x1ff, 0xf6, &(0x7f00000000c0)=""/246, 0x1f00, 0x4, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000001c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0xc, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000240)=[{0x3, 0x1, 0x5, 0x4}, {0x3, 0x3, 0x10, 0x2}, {0x0, 0x5, 0x1, 0x8}, {0x2, 0x2, 0x10, 0x179a637f5fce34f6}, {0x5, 0x4, 0xb, 0x5}, {0x4, 0x3, 0x0, 0xc}], 0x10, 0x5}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x3e}, [@IFA_LOCAL={0x14, 0xb, @local}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x100}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004051}, 0x480d0) (async) ioctl$SIOCSIFHWADDR(r0, 0x89f3, &(0x7f0000000900)={'tunl0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000f9ff9302"]) (async) io_uring_setup(0x483b, &(0x7f0000002fc0)={0x0, 0x37d1, 0x40, 0x0, 0x11d}) 362.48847ms ago: executing program 0 (id=4076): r0 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x7, 0x0, &(0x7f00000007c0)=0x0) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000840)={{r2, r3+10000000}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000040)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x0) splice(r5, 0x0, r8, 0x0, 0x25a5, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r9}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000006200)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x0, {0x2000200007, 0x1, 0x4000, 0x0, 0x6, 0x403f, {0x0, 0x80000001, 0x0, 0x100, 0x0, 0x5aa65e4b, 0xfffffffc, 0x1, 0x5, 0x4000, 0x0, r10, r11, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1e4, 0x3e, 0x8, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x15c, 0x1, 0x0, 0x1, [@nested={0x158, 0x14, 0x0, 0x1, [@nested={0x153, 0x88, 0x0, 0x1, [@typed={0x3d, 0x8e, 0x0, 0x0, @binary="38f89776d86f097b146cde792cee30b1b9de7d22448e6415ae201755f70cd0037f712e6220f922424b8b7fc2dda4a13c75b794109a86260db4"}, @typed={0x8, 0x5b, 0x0, 0x0, @uid=r10}, @typed={0x14, 0xc1, 0x0, 0x0, @ipv6=@private0}, @generic="4b6b7badda29ea51f8e6fdbf1b54a31e046a6153c4c290bc7cdf4f2337c44103b78c25b9509f1a7eba7c44ca7c162e7481cfecdf837f468e5bfea6842442cf605a607834086629cd0e72b98eda1a5b8aba37ad819d473c5bb0b29b63e1f4430019f3103f825379d0867b7f72b9da385487c8957d6550a950faf2166cb9c1946860abfeb8709599ac9649eb1336ad554906bb87e9aa2dcc2ddb09abed0012683bd8e2e372094c56ac4e2e0879b5debc7a2d387d47324fa8c43fe65ebe35b9e946e4c689445d7aad06a42ad87dc26edd4af6afcd1339d5b8084bdac3e9603a8c4901d36a713f5b7001a55131e6b00ee5e02add40"]}]}]}, @nested={0x6f, 0x2, 0x0, 0x1, [@generic="21db9152c20e2ce85153c4a7a47cc27a430ff7b41054776ca6480950f3747560c08380808a5805f3ead2a8414ea86ce1f41c1c6a857652264446e644b541af227ea77bc51d2a13be4c579ce0436d01ee9089fe85b8a62c93ffb5ae3783fc7583d22e9b68c977e43de3d861"]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909047b07022d51d5980905eb0220000202050905e6", @ANYBLOB="fe"], 0x0) 339.760705ms ago: executing program 3 (id=4077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}}, 0x0) 82.360286ms ago: executing program 3 (id=4078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x2c, 0x3, "73ad6153669faaa3221f5223f828b499b49208f8130fe52e3efc770b8878b3c728ec16efbe94fd77"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'nfacct\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xac}}, 0x0) 0s ago: executing program 4 (id=4079): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): -speed USB device number 117 using dummy_hcd [ 1149.584734][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.600740][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1149.765141][ T43] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1149.791101][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.827286][ T43] usb 2-1: config 0 descriptor?? [ 1150.340623][ T43] uclogic 0003:5543:0042.0026: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.1-1/input0 [ 1150.371247][ T977] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1150.535098][ T977] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1150.551453][ T977] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.590407][ T977] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1150.623557][ T977] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.659041][ T977] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.720484][ T8205] usb 2-1: USB disconnect, device number 117 [ 1150.748530][ T977] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1150.759097][ T977] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1150.773293][ T977] usb 4-1: Product: syz [ 1150.795980][ T977] usb 4-1: Manufacturer: syz [ 1150.821777][ T977] cdc_wdm 4-1:1.0: skipping garbage [ 1150.831656][ T977] cdc_wdm 4-1:1.0: skipping garbage [ 1150.882540][ T977] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1150.888534][ T977] cdc_wdm 4-1:1.0: Unknown control protocol [ 1151.027715][T19151] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 1151.103673][ T977] usb 4-1: USB disconnect, device number 6 [ 1151.670979][ T977] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1151.890905][ T977] usb 4-1: Using ep0 maxpacket: 32 [ 1152.102028][ T977] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1152.123946][ T977] usb 4-1: config 0 has no interface number 0 [ 1152.149662][ T977] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1152.171891][ T977] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1152.191112][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.361139][ T977] usb 4-1: Product: syz [ 1152.377262][ T977] usb 4-1: Manufacturer: syz [ 1152.390910][ T977] usb 4-1: SerialNumber: syz [ 1152.447751][ T977] usb 4-1: config 0 descriptor?? [ 1152.458435][ T977] f81534 4-1:0.12: required endpoints missing [ 1152.671627][ T977] usb 4-1: USB disconnect, device number 7 [ 1153.251644][T19182] batadv_slave_0: entered promiscuous mode [ 1153.435075][T19181] batadv_slave_0: left promiscuous mode [ 1154.560613][T19196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3541'. [ 1154.569866][T19196] openvswitch: netlink: Flow key attr not present in new flow. [ 1154.754899][ T9] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1154.921977][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1154.961116][ T9] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1154.985353][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.006514][ T9] usb 1-1: config 0 has no interface number 0 [ 1155.020098][ T9] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 1155.046226][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.065354][ T9] usb 1-1: Product: syz [ 1155.070727][ T9] usb 1-1: Manufacturer: syz [ 1155.077145][T19205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3547'. [ 1155.107158][ T9] usb 1-1: SerialNumber: syz [ 1155.126222][T19205] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 1155.132896][T19205] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1155.164005][ T9] usb 1-1: config 0 descriptor?? [ 1155.200924][T19205] vhci_hcd vhci_hcd.0: Device attached [ 1155.209279][ T9] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 1155.223023][T19207] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 1155.228447][ T9] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input90 [ 1155.328575][ T6002] vhci_hcd: stop threads [ 1155.341496][ T6002] vhci_hcd: release socket [ 1155.363621][ T6002] vhci_hcd: disconnect device [ 1155.401160][ T8230] vhci_hcd: vhci_device speed not set [ 1155.459280][ T977] usb 1-1: USB disconnect, device number 114 [ 1156.662335][T19221] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1157.239774][T19234] geneve2: entered allmulticast mode [ 1158.799515][T19262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3559'. [ 1158.808729][T19262] openvswitch: netlink: Flow key attr not present in new flow. [ 1159.533775][T19270] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3562'. [ 1161.348144][T19302] syz_tun: entered allmulticast mode [ 1161.373479][T19300] syz_tun: left allmulticast mode [ 1161.427190][ T30] audit: type=1326 audit(1752454699.241:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19299 comm="syz.1.3573" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f179818e929 code=0x0 [ 1161.449140][ C1] vkms_vblank_simulate: vblank timer overrun [ 1161.515529][T19307] FAULT_INJECTION: forcing a failure. [ 1161.515529][T19307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1161.556668][T19307] CPU: 1 UID: 0 PID: 19307 Comm: syz.2.3576 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 1161.556700][T19307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1161.556713][T19307] Call Trace: [ 1161.556723][T19307] [ 1161.556733][T19307] dump_stack_lvl+0x189/0x250 [ 1161.556766][T19307] ? __pfx____ratelimit+0x10/0x10 [ 1161.556803][T19307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1161.556831][T19307] ? __pfx__printk+0x10/0x10 [ 1161.556862][T19307] ? __might_fault+0xb0/0x130 [ 1161.556902][T19307] should_fail_ex+0x414/0x560 [ 1161.556941][T19307] _copy_from_iter+0x1db/0x16f0 [ 1161.556978][T19307] ? __pfx__copy_from_iter+0x10/0x10 [ 1161.556999][T19307] ? sock_alloc_send_pskb+0x875/0x990 [ 1161.557040][T19307] ? __pfx__copy_from_iter+0x10/0x10 [ 1161.557066][T19307] ? page_copy_sane+0x16a/0x280 [ 1161.557092][T19307] copy_page_from_iter+0xdd/0x170 [ 1161.557121][T19307] skb_copy_datagram_from_iter+0x306/0x720 [ 1161.557169][T19307] packet_sendmsg+0x3abb/0x53f0 [ 1161.557215][T19307] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1161.557268][T19307] ? __pfx___might_resched+0x10/0x10 [ 1161.557295][T19307] ? __lock_acquire+0xab9/0xd20 [ 1161.557333][T19307] ? __pfx_packet_sendmsg+0x10/0x10 [ 1161.557371][T19307] ? aa_sk_perm+0x81e/0x950 [ 1161.557408][T19307] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1161.557437][T19307] ? aa_sock_msg_perm+0x94/0x160 [ 1161.557474][T19307] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1161.557508][T19307] ? __pfx_packet_sendmsg+0x10/0x10 [ 1161.557539][T19307] __sock_sendmsg+0x219/0x270 [ 1161.557566][T19307] __sys_sendto+0x3bd/0x520 [ 1161.557595][T19307] ? __pfx___sys_sendto+0x10/0x10 [ 1161.557620][T19307] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1161.557657][T19307] ? __fget_files+0x3a0/0x420 [ 1161.557700][T19307] ? ksys_write+0x22a/0x250 [ 1161.557729][T19307] ? __pfx_ksys_write+0x10/0x10 [ 1161.557761][T19307] __x64_sys_sendto+0xde/0x100 [ 1161.557792][T19307] do_syscall_64+0xfa/0x3b0 [ 1161.557813][T19307] ? lockdep_hardirqs_on+0x9c/0x150 [ 1161.557848][T19307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.557871][T19307] ? clear_bhb_loop+0x60/0xb0 [ 1161.557899][T19307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.557921][T19307] RIP: 0033:0x7f7b9e18e929 [ 1161.557941][T19307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1161.557961][T19307] RSP: 002b:00007f7b9efcb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1161.557985][T19307] RAX: ffffffffffffffda RBX: 00007f7b9e3b5fa0 RCX: 00007f7b9e18e929 [ 1161.558002][T19307] RDX: 000000000001fffe RSI: 0000200000000180 RDI: 0000000000000004 [ 1161.558017][T19307] RBP: 00007f7b9efcb090 R08: 0000200000000140 R09: 0000000000000014 [ 1161.558033][T19307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1161.558046][T19307] R13: 0000000000000000 R14: 00007f7b9e3b5fa0 R15: 00007f7b9e4dfa28 [ 1161.558079][T19307] [ 1161.846513][ C1] vkms_vblank_simulate: vblank timer overrun [ 1162.262173][T19312] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1162.833964][T19326] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3579'. [ 1162.844982][T19326] openvswitch: netlink: Flow key attr not present in new flow. [ 1162.921380][ T43] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1162.980906][ T8230] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1163.093006][ T43] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1163.149140][ T8230] usb 3-1: config 0 has no interfaces? [ 1163.191841][ T8230] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1163.202068][ T8230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.210550][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.233674][ T8230] usb 3-1: Product: syz [ 1163.282864][ T8230] usb 3-1: Manufacturer: syz [ 1163.341117][ T43] usb 1-1: config 0 descriptor?? [ 1163.471601][ T8230] usb 3-1: SerialNumber: syz [ 1163.519904][ T8230] usb 3-1: config 0 descriptor?? [ 1163.543127][ T43] cp210x 1-1:0.0: cp210x converter detected [ 1163.828268][T19325] input: syz1 as /devices/virtual/input/input91 [ 1163.855547][T19325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3580'. [ 1163.864883][T19325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3580'. [ 1164.222223][T16649] Bluetooth: hci1: command 0x041b tx timeout [ 1164.439332][ T43] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1165.250914][T19344] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3585'. [ 1165.383430][T19346] FAULT_INJECTION: forcing a failure. [ 1165.383430][T19346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1165.505092][T19346] CPU: 1 UID: 0 PID: 19346 Comm: syz.1.3587 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 1165.505126][T19346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1165.505141][T19346] Call Trace: [ 1165.505150][T19346] [ 1165.505161][T19346] dump_stack_lvl+0x189/0x250 [ 1165.505198][T19346] ? __pfx____ratelimit+0x10/0x10 [ 1165.505232][T19346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1165.505259][T19346] ? __pfx__printk+0x10/0x10 [ 1165.505289][T19346] ? __might_fault+0xb0/0x130 [ 1165.505328][T19346] should_fail_ex+0x414/0x560 [ 1165.505366][T19346] copy_fpstate_to_sigframe+0xa8d/0xce0 [ 1165.505406][T19346] ? copy_fpstate_to_sigframe+0x181/0xce0 [ 1165.505448][T19346] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 1165.505500][T19346] ? __lock_acquire+0xab9/0xd20 [ 1165.505529][T19346] ? fpu__alloc_mathframe+0xad/0x130 [ 1165.505566][T19346] get_sigframe+0x58d/0x7d0 [ 1165.505606][T19346] ? __pfx_get_sigframe+0x10/0x10 [ 1165.505646][T19346] ? posixtimer_deliver_signal+0x2d9/0x3e0 [ 1165.505685][T19346] x64_setup_rt_frame+0x15b/0xd40 [ 1165.505712][T19346] ? lockdep_hardirqs_on+0x9c/0x150 [ 1165.505749][T19346] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1165.505779][T19346] ? get_signal+0x1151/0x1340 [ 1165.505812][T19346] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1165.505844][T19346] arch_do_signal_or_restart+0x3d7/0x750 [ 1165.505879][T19346] ? __fget_files+0x3a0/0x420 [ 1165.505913][T19346] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1165.505965][T19346] ? exit_to_user_mode_loop+0x40/0x110 [ 1165.505999][T19346] exit_to_user_mode_loop+0x75/0x110 [ 1165.506023][T19346] do_syscall_64+0x2bd/0x3b0 [ 1165.506046][T19346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.506067][T19346] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1165.506089][T19346] ? clear_bhb_loop+0x60/0xb0 [ 1165.506117][T19346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.506138][T19346] RIP: 0033:0x7f179818e927 [ 1165.506158][T19346] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 1165.506178][T19346] RSP: 002b:00007f1798fa3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1165.506201][T19346] RAX: 0000000000000013 RBX: 00007f17983b5fa0 RCX: 00007f179818e929 [ 1165.506216][T19346] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 1165.506231][T19346] RBP: 00007f1798fa3090 R08: 0000000000000000 R09: 0000000000000000 [ 1165.506246][T19346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1165.506259][T19346] R13: 0000000000000000 R14: 00007f17983b5fa0 R15: 00007f17984dfa28 [ 1165.506293][T19346] [ 1165.766746][ C1] vkms_vblank_simulate: vblank timer overrun [ 1166.330024][ T43] cp210x 1-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 1166.360132][ T8230] usb 3-1: USB disconnect, device number 4 [ 1166.377799][ T43] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1166.425799][ T43] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1166.459276][ T43] usb 1-1: USB disconnect, device number 115 [ 1166.485358][ T5914] udevd[5914]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 1166.488725][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1166.562106][ T43] cp210x 1-1:0.0: device disconnected [ 1167.111122][T19365] FAULT_INJECTION: forcing a failure. [ 1167.111122][T19365] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.181035][T19365] CPU: 1 UID: 0 PID: 19365 Comm: syz.2.3593 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 1167.181067][T19365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1167.181080][T19365] Call Trace: [ 1167.181090][T19365] [ 1167.181100][T19365] dump_stack_lvl+0x189/0x250 [ 1167.181132][T19365] ? __pfx____ratelimit+0x10/0x10 [ 1167.181168][T19365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1167.181195][T19365] ? __pfx__printk+0x10/0x10 [ 1167.181232][T19365] ? __pfx___might_resched+0x10/0x10 [ 1167.181258][T19365] ? fs_reclaim_acquire+0x7d/0x100 [ 1167.181295][T19365] should_fail_ex+0x414/0x560 [ 1167.181333][T19365] should_failslab+0xa8/0x100 [ 1167.181364][T19365] __kmalloc_noprof+0xcb/0x4f0 [ 1167.181388][T19365] ? kfree+0x4d/0x440 [ 1167.181409][T19365] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1167.181437][T19365] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1167.181475][T19365] tomoyo_find_next_domain+0x311/0x1aa0 [ 1167.181506][T19365] ? __lock_acquire+0xab9/0xd20 [ 1167.181549][T19365] ? tomoyo_bprm_check_security+0xf0/0x180 [ 1167.181574][T19365] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 1167.181613][T19365] ? tomoyo_bprm_check_security+0xf0/0x180 [ 1167.181638][T19365] tomoyo_bprm_check_security+0x11c/0x180 [ 1167.181667][T19365] security_bprm_check+0x89/0x270 [ 1167.181702][T19365] bprm_execve+0x8ee/0x1450 [ 1167.181745][T19365] ? __pfx_bprm_execve+0x10/0x10 [ 1167.181772][T19365] ? copy_string_kernel+0x25f/0x2a0 [ 1167.181803][T19365] do_execveat_common+0x510/0x6a0 [ 1167.181841][T19365] __x64_sys_execveat+0xc4/0xe0 [ 1167.181871][T19365] do_syscall_64+0xfa/0x3b0 [ 1167.181892][T19365] ? lockdep_hardirqs_on+0x9c/0x150 [ 1167.181925][T19365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.181947][T19365] ? clear_bhb_loop+0x60/0xb0 [ 1167.181976][T19365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.181998][T19365] RIP: 0033:0x7f7b9e18e929 [ 1167.182018][T19365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1167.182038][T19365] RSP: 002b:00007f7b9efcb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1167.182066][T19365] RAX: ffffffffffffffda RBX: 00007f7b9e3b5fa0 RCX: 00007f7b9e18e929 [ 1167.182082][T19365] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1167.182096][T19365] RBP: 00007f7b9efcb090 R08: 0000000000001000 R09: 0000000000000000 [ 1167.182111][T19365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1167.182125][T19365] R13: 0000000000000000 R14: 00007f7b9e3b5fa0 R15: 00007f7b9e4dfa28 [ 1167.182159][T19365] [ 1167.449431][ C1] vkms_vblank_simulate: vblank timer overrun [ 1167.457338][T19365] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1168.180982][ T43] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1168.520977][ T977] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1168.645501][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1168.684632][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1168.732826][ T977] usb 3-1: Using ep0 maxpacket: 8 [ 1168.785742][ T977] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1168.808409][ T977] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1168.839460][ T977] usb 3-1: Product: syz [ 1168.839471][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1168.857970][ T977] usb 3-1: Manufacturer: syz [ 1168.876974][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1168.880705][ T977] usb 3-1: SerialNumber: syz [ 1168.906010][ T43] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1168.925252][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.013440][ T977] usb 3-1: config 0 descriptor?? [ 1169.018217][ T43] usb 4-1: config 0 descriptor?? [ 1169.372852][T19382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.385815][T19382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.667934][ T43] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1169.888895][ T43] usb 4-1: USB disconnect, device number 8 [ 1169.950382][T19397] fido_id[19397]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1170.035578][ T977] usb 3-1: USB disconnect, device number 5 [ 1170.205241][ C0] vkms_vblank_simulate: vblank timer overrun [ 1170.385659][ T5914] udevd[5914]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1170.861947][ T977] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1170.901167][ T5937] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1170.921828][T19411] loop6: detected capacity change from 0 to 63 [ 1170.955102][T19411] buffer_io_error: 1046 callbacks suppressed [ 1170.955123][T19411] Buffer I/O error on dev loop6, logical block 0, async page read [ 1170.998352][ T30] audit: type=1326 audit(1752454708.791:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19412 comm="syz.0.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5e58e929 code=0x7ffc0000 [ 1170.998492][T19411] Buffer I/O error on dev loop6, logical block 1, async page read [ 1171.025626][ T30] audit: type=1326 audit(1752454708.791:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19412 comm="syz.0.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5e58e929 code=0x7ffc0000 [ 1171.051868][T19411] Buffer I/O error on dev loop6, logical block 2, async page read [ 1171.060739][T19411] Buffer I/O error on dev loop6, logical block 3, async page read [ 1171.089473][ T30] audit: type=1326 audit(1752454708.791:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19412 comm="syz.0.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7b5e58e929 code=0x7ffc0000 [ 1171.123041][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 1171.123054][T19408] Buffer I/O error on dev loop6, logical block 0, async page read [ 1171.138712][T19408] Buffer I/O error on dev loop6, logical block 1, async page read [ 1171.147049][T19408] Buffer I/O error on dev loop6, logical block 2, async page read [ 1171.157101][T19408] Buffer I/O error on dev loop6, logical block 3, async page read [ 1171.157175][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.167531][ T5914] Buffer I/O error on dev loop6, logical block 0, async page read [ 1171.176788][ T977] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1171.200922][ T30] audit: type=1326 audit(1752454708.791:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19412 comm="syz.0.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5e58e929 code=0x7ffc0000 [ 1171.231142][ T5914] Buffer I/O error on dev loop6, logical block 1, async page read [ 1171.262784][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1171.275125][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1171.306696][ T30] audit: type=1326 audit(1752454708.791:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19412 comm="syz.0.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5e58e929 code=0x7ffc0000 [ 1171.310124][ T5937] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1171.354472][ T977] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1171.378529][ T977] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1171.394213][ T977] usb 4-1: Manufacturer: syz [ 1171.408633][ T977] usb 4-1: config 0 descriptor?? [ 1171.414231][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.479152][ T30] audit: type=1326 audit(1752454708.791:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19412 comm="syz.0.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f7b5e58e929 code=0x7ffc0000 [ 1171.501625][ T5937] usb 2-1: config 0 descriptor?? [ 1171.620948][ T30] audit: type=1326 audit(1752454708.791:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19412 comm="syz.0.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5e58e929 code=0x7ffc0000 [ 1171.680981][ T977] rc_core: IR keymap rc-hauppauge not found [ 1171.687001][ T977] Registered IR keymap rc-empty [ 1171.726781][ T977] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1171.731011][ T30] audit: type=1326 audit(1752454708.791:4385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19412 comm="syz.0.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5e58e929 code=0x7ffc0000 [ 1171.758771][ T977] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input93 [ 1171.762147][T19405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.781580][T19405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.828748][ T30] audit: type=1326 audit(1752454708.791:4386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19412 comm="syz.0.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b5e58e929 code=0x7ffc0000 [ 1171.870886][ T30] audit: type=1326 audit(1752454708.791:4387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19412 comm="syz.0.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5e58e929 code=0x7ffc0000 [ 1171.916941][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 1172.053895][ T5937] ft260 0003:0403:6030.0028: unknown main item tag 0x7 [ 1172.110695][T19428] bridge0: port 3(batadv0) entered blocking state [ 1172.128991][T19428] bridge0: port 3(batadv0) entered disabled state [ 1172.129194][T19428] batadv0: entered allmulticast mode [ 1172.132791][T19428] batadv0: entered promiscuous mode [ 1172.162962][T19428] bridge0: port 3(batadv0) entered blocking state [ 1172.169825][T19428] bridge0: port 3(batadv0) entered forwarding state [ 1172.196442][ T8205] usb 4-1: USB disconnect, device number 9 [ 1172.246325][ T5937] ft260 0003:0403:6030.0028: failed to retrieve chip version [ 1172.249057][ T5937] ft260 0003:0403:6030.0028: probe with driver ft260 failed with error -71 [ 1172.258984][ T5937] usb 2-1: USB disconnect, device number 118 [ 1172.333954][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1172.334009][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1172.774396][T19445] openvswitch: netlink: ct_state flags 02010164 unsupported [ 1173.841049][ T977] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1173.992559][ T977] usb 4-1: Using ep0 maxpacket: 8 [ 1174.000734][ T977] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1174.023382][ T977] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1174.192406][ T977] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1174.219740][ T977] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1174.250184][ T977] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1174.300672][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.451442][ T5937] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1174.503619][ T9] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1174.549806][ T977] usb 4-1: GET_CAPABILITIES returned 0 [ 1174.560888][ T977] usbtmc 4-1:16.0: can't read capabilities [ 1174.612930][ T5937] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1174.632332][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.644321][ T5937] usb 3-1: config 0 descriptor?? [ 1174.653395][ T5937] cp210x 3-1:0.0: cp210x converter detected [ 1174.692085][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1174.715061][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.743633][ T9] usb 1-1: config 0 descriptor?? [ 1174.767427][ T9] cp210x 1-1:0.0: cp210x converter detected [ 1174.900999][T19459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.917648][T19459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1175.057477][ T8205] usb 4-1: USB disconnect, device number 10 [ 1175.235436][ T5937] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1175.493570][ T9] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1176.040887][ T8230] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1176.099146][ T5937] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 1176.148951][ T5937] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1176.173095][ T5937] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1176.201069][ T5937] usb 3-1: USB disconnect, device number 6 [ 1176.232765][ T5937] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1176.253303][ T5937] cp210x 3-1:0.0: device disconnected [ 1176.261305][ T8230] usb 4-1: config 0 has no interfaces? [ 1176.269594][ T8230] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1176.319762][ T8230] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1176.336342][ T9] cp210x 1-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 1176.345231][ T8230] usb 4-1: Product: syz [ 1176.351009][ T8230] usb 4-1: Manufacturer: syz [ 1176.354921][ T9] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1176.357045][ T8230] usb 4-1: SerialNumber: syz [ 1176.381670][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1176.413947][ T9] usb 1-1: USB disconnect, device number 116 [ 1176.423186][ T8230] usb 4-1: config 0 descriptor?? [ 1176.463279][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1176.517869][ T9] cp210x 1-1:0.0: device disconnected [ 1176.855481][T19481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1176.897372][T19481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1176.907417][ T8230] usb 4-1: USB disconnect, device number 11 [ 1177.452483][T19496] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3636'. [ 1177.485218][T19496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3636'. [ 1177.508690][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.515283][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.636689][ T5898] hid-generic 000D:0006:0003.0029: unknown main item tag 0x0 [ 1177.668719][ T5898] hid-generic 000D:0006:0003.0029: unknown main item tag 0x0 [ 1177.730911][ T5898] hid-generic 000D:0006:0003.0029: unknown main item tag 0x0 [ 1177.774094][ T5898] hid-generic 000D:0006:0003.0029: unknown main item tag 0x0 [ 1177.817512][ T5898] hid-generic 000D:0006:0003.0029: unknown main item tag 0x0 [ 1177.881499][ T5898] hid-generic 000D:0006:0003.0029: unknown main item tag 0x0 [ 1177.900986][T17069] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1177.921138][ T5898] hid-generic 000D:0006:0003.0029: unknown main item tag 0x0 [ 1177.928643][ T5898] hid-generic 000D:0006:0003.0029: unknown main item tag 0x0 [ 1178.060664][ T5898] hid-generic 000D:0006:0003.0029: unknown main item tag 0x0 [ 1178.149225][T17069] usb 3-1: config 0 has no interfaces? [ 1178.160939][T17069] usb 3-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 1178.170248][ T5898] hid-generic 000D:0006:0003.0029: unknown main item tag 0x0 [ 1178.208112][T17069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.250896][ T5898] hid-generic 000D:0006:0003.0029: unknown main item tag 0x0 [ 1178.279355][ T5898] hid-generic 000D:0006:0003.0029: unknown main item tag 0x0 [ 1178.305392][T17069] usb 3-1: config 0 descriptor?? [ 1178.314827][ T5898] hid-generic 000D:0006:0003.0029: unknown main item tag 0x0 [ 1178.345875][ T5898] hid-generic 000D:0006:0003.0029: unknown main item tag 0x0 [ 1178.367053][ T5898] hid-generic 000D:0006:0003.0029: unknown main item tag 0x0 [ 1178.381953][ T5898] hid-generic 000D:0006:0003.0029: unknown main item tag 0x0 [ 1178.485805][ T5898] hid-generic 000D:0006:0003.0029: unknown main item tag 0x0 [ 1178.514779][ T5898] hid-generic 000D:0006:0003.0029: unknown main item tag 0x0 [ 1178.607183][ T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1178.613144][T19500] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1178.665038][ T5898] hid-generic 000D:0006:0003.0029: unknown main item tag 0x0 [ 1178.809924][ T5898] hid-generic 000D:0006:0003.0029: unknown main item tag 0x0 [ 1178.841549][ T5898] hid-generic 000D:0006:0003.0029: unknown main item tag 0x0 [ 1178.923633][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 1178.931706][ T5898] hid-generic 000D:0006:0003.0029: unknown main item tag 0x0 [ 1178.945246][ T43] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 1178.960933][ T43] usb 4-1: config 0 has no interface number 0 [ 1178.977672][ T5898] hid-generic 000D:0006:0003.0029: unknown main item tag 0x0 [ 1178.980161][ T43] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 1179.033302][ T5898] hid-generic 000D:0006:0003.0029: unknown main item tag 0x0 [ 1179.051434][ T5898] hid-generic 000D:0006:0003.0029: unknown main item tag 0x0 [ 1179.136129][ T5898] hid-generic 000D:0006:0003.0029: hidraw0: HID v0.05 Device [syz0] on syz0 [ 1179.156770][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.228597][ T43] usb 4-1: Product: syz [ 1179.354341][ T43] usb 4-1: Manufacturer: syz [ 1179.390003][ T43] usb 4-1: SerialNumber: syz [ 1179.452069][ T43] usb 4-1: config 0 descriptor?? [ 1180.211176][ T43] msi2500 4-1:0.246: Registered as swradio24 [ 1180.225906][ T43] msi2500 4-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 1181.044773][ T43] usb 3-1: USB disconnect, device number 7 [ 1181.360976][ T5992] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1181.402810][ T5898] usb 4-1: USB disconnect, device number 12 [ 1181.522764][T19532] x_tables: duplicate underflow at hook 3 [ 1181.530879][ T5992] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1181.556360][ T5992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.574396][T19532] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3646'. [ 1181.592442][ T5992] usb 2-1: config 0 descriptor?? [ 1181.618073][ T5992] cp210x 2-1:0.0: cp210x converter detected [ 1181.690919][T17069] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1181.894925][T17069] usb 1-1: Using ep0 maxpacket: 32 [ 1181.936206][T17069] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1181.945316][T17069] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1181.954166][T17069] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1181.963696][T17069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1181.991277][T17069] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1182.020909][T17069] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1182.073610][T17069] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1182.108831][T17069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.190511][ T5992] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1182.200540][T17069] usb 1-1: config 0 descriptor?? [ 1182.341118][ T8230] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1182.510963][ T8230] usb 4-1: Using ep0 maxpacket: 32 [ 1182.634045][ T8230] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.1f [ 1182.727802][ T8230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.744782][T17069] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 117 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1182.761631][ T8230] usb 4-1: Product: syz [ 1182.772805][ T8230] usb 4-1: Manufacturer: syz [ 1182.789589][ T8230] usb 4-1: SerialNumber: syz [ 1182.831974][ T8230] usb 4-1: config 0 descriptor?? [ 1182.864350][ T8230] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1183.251729][T19555] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1183.394016][ T8230] gspca_stk1135: reg_w 0x2 err -110 [ 1183.406505][ T8230] gspca_stk1135: serial bus timeout: status=0x00 [ 1183.440929][ T8230] gspca_stk1135: Sensor write failed [ 1183.453727][ T8230] gspca_stk1135: serial bus timeout: status=0x00 [ 1183.475825][ T8230] gspca_stk1135: Sensor write failed [ 1183.490880][ T8230] gspca_stk1135: serial bus timeout: status=0x00 [ 1183.513508][ T8230] gspca_stk1135: Sensor read failed [ 1183.528044][ T8230] gspca_stk1135: serial bus timeout: status=0x00 [ 1183.562070][ T8230] gspca_stk1135: Sensor read failed [ 1183.601222][ T8230] gspca_stk1135: Detected sensor type unknown (0x0) [ 1183.638415][ T8230] gspca_stk1135: serial bus timeout: status=0x00 [ 1183.665879][ T8230] gspca_stk1135: Sensor read failed [ 1183.691952][ T8230] gspca_stk1135: serial bus timeout: status=0x00 [ 1183.935096][ T8230] gspca_stk1135: Sensor read failed [ 1183.965892][ T8230] gspca_stk1135: serial bus timeout: status=0x00 [ 1183.982100][ T8230] gspca_stk1135: Sensor write failed [ 1184.000522][ T8230] gspca_stk1135: serial bus timeout: status=0x00 [ 1184.014966][ T8230] gspca_stk1135: Sensor write failed [ 1184.071610][ T8230] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 1184.741078][ T5992] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 1184.748726][ T5992] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1184.891405][ T5992] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1184.936048][ T8205] usb 4-1: USB disconnect, device number 13 [ 1184.937238][ T5992] usb 2-1: USB disconnect, device number 119 [ 1184.997567][ T5992] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1185.036014][ T5992] cp210x 2-1:0.0: device disconnected [ 1185.381060][ T5992] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1185.522873][ T5898] usb 1-1: USB disconnect, device number 117 [ 1185.533344][ T5992] usb 2-1: Using ep0 maxpacket: 8 [ 1185.550209][ T5898] usblp0: removed [ 1185.577161][ T5992] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1185.609025][ T5992] usb 2-1: config 179 has no interface number 0 [ 1185.650616][ T5992] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1185.680670][ T5992] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1185.897406][ T5992] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1185.958205][ T5992] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1186.060525][ T5992] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1186.085356][ T5992] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1186.100061][ T5992] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1186.261548][ T5992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.436187][ T5992] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input94 [ 1186.548503][T19564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.672217][T19564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1187.614690][T19586] 8021q: VLANs not supported on ipvlan0 [ 1187.942395][T19592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1188.185760][T19597] vti0: entered promiscuous mode [ 1188.194062][T19597] vti0: entered allmulticast mode [ 1188.359868][ T5992] usb 2-1: USB disconnect, device number 120 [ 1188.561170][ T5898] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1188.734246][ T5898] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1188.879192][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.019916][ T5898] usb 3-1: config 0 descriptor?? [ 1189.082939][ T5898] cp210x 3-1:0.0: cp210x converter detected [ 1189.231030][ T5992] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1189.395761][ T5992] usb 4-1: config 0 has no interfaces? [ 1189.447342][ T5992] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1189.681934][ T5992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.742521][ T43] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1189.797686][ T5898] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1189.806709][ T5992] usb 4-1: Product: syz [ 1189.851242][ T5992] usb 4-1: Manufacturer: syz [ 1189.925410][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 1189.930433][ T5992] usb 4-1: SerialNumber: syz [ 1189.943855][ T43] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.1f [ 1189.971471][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.980566][ T5992] usb 4-1: config 0 descriptor?? [ 1190.067184][ T43] usb 2-1: Product: syz [ 1190.079233][ T43] usb 2-1: Manufacturer: syz [ 1190.084016][ T43] usb 2-1: SerialNumber: syz [ 1190.093655][ T43] usb 2-1: config 0 descriptor?? [ 1190.133945][ T43] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1190.318925][T19604] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3665'. [ 1190.753804][ T43] gspca_stk1135: reg_w 0x2 err -110 [ 1190.760126][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1190.879028][T16046] hid (null): report_id 1334 is invalid [ 1190.998019][T16046] hid (null): unknown global tag 0x12 [ 1191.016478][ T43] gspca_stk1135: Sensor write failed [ 1191.022500][T16046] hid (null): nested delimiters [ 1191.027526][T16046] hid (null): report_id 3235166041 is invalid [ 1191.046992][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1191.089870][ T43] gspca_stk1135: Sensor write failed [ 1191.117097][T16046] hid-generic 0001:0003:0007.002A: collection stack underflow [ 1191.136888][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1191.178637][T16046] hid-generic 0001:0003:0007.002A: item 0 4 0 12 parsing failed [ 1191.190966][ T43] gspca_stk1135: Sensor read failed [ 1191.236967][ T5898] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 1191.244866][ T5898] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1191.261060][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1191.275732][T16046] hid-generic 0001:0003:0007.002A: probe with driver hid-generic failed with error -22 [ 1191.285839][ T43] gspca_stk1135: Sensor read failed [ 1191.305762][ T43] gspca_stk1135: Detected sensor type unknown (0x0) [ 1191.330905][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1191.337312][ T43] gspca_stk1135: Sensor read failed [ 1191.368400][ T5898] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1191.425533][ T5898] usb 3-1: USB disconnect, device number 8 [ 1191.435601][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1191.463604][ T43] gspca_stk1135: Sensor read failed [ 1191.475699][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1191.498876][ T5898] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1191.502010][ T43] gspca_stk1135: Sensor write failed [ 1191.530452][ T5898] cp210x 3-1:0.0: device disconnected [ 1191.548673][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1191.584676][ T43] gspca_stk1135: Sensor write failed [ 1191.599007][ T43] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 1191.627102][ T43] usb 2-1: USB disconnect, device number 121 [ 1191.998177][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1191.998197][ T30] audit: type=1800 audit(1752454729.811:4390): pid=19625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3671" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 1192.985041][T19636] netlink: 'syz.1.3673': attribute type 29 has an invalid length. [ 1193.218050][T19636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3673'. [ 1193.305969][ T43] usb 4-1: USB disconnect, device number 14 [ 1193.442643][T19640] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3674'. [ 1194.765429][T19653] sctp: [Deprecated]: syz.3.3677 (pid 19653) Use of int in maxseg socket option. [ 1194.765429][T19653] Use struct sctp_assoc_value instead [ 1195.111389][T19667] input: syz0 as /devices/virtual/input/input95 [ 1195.210935][ T5898] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1195.236684][ T30] audit: type=1326 audit(1752454733.051:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19663 comm="syz.4.3679" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fd118e929 code=0x0 [ 1195.258711][ C0] vkms_vblank_simulate: vblank timer overrun [ 1195.288077][T19669] netlink: 'syz.4.3679': attribute type 6 has an invalid length. [ 1195.375541][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 1195.415940][ T5898] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=4d.52 [ 1195.435784][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.464476][ T5898] usb 1-1: Product: syz [ 1195.469044][ T5898] usb 1-1: Manufacturer: syz [ 1195.473825][ T5898] usb 1-1: SerialNumber: syz [ 1195.699690][ T5898] usb_ehset_test 1-1:84.0: probe with driver usb_ehset_test failed with error -32 [ 1195.729563][ T5898] usb 1-1: USB disconnect, device number 118 [ 1196.593519][T19685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3687'. [ 1197.007657][T19706] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3690'. [ 1197.020029][T19706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3690'. [ 1197.252005][ T43] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1197.439456][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.450487][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1197.469202][ T43] usb 3-1: config 1 has no interface number 0 [ 1197.486392][ T43] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1197.517422][ T43] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1197.544922][T17069] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1197.588419][ T43] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1197.625055][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1197.634269][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.648009][ T43] usb 3-1: Product: syz [ 1197.654692][ T43] usb 3-1: Manufacturer: syz [ 1197.659401][ T43] usb 3-1: SerialNumber: syz [ 1197.789868][T17069] usb 2-1: Using ep0 maxpacket: 32 [ 1197.812934][T17069] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.1f [ 1197.849426][T17069] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.861318][T17069] usb 2-1: Product: syz [ 1197.873690][T17069] usb 2-1: Manufacturer: syz [ 1197.914281][T17069] usb 2-1: SerialNumber: syz [ 1197.978846][T17069] usb 2-1: config 0 descriptor?? [ 1198.029797][T17069] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1198.551584][T17069] gspca_stk1135: reg_w 0x2 err -110 [ 1198.578657][T17069] gspca_stk1135: serial bus timeout: status=0x00 [ 1198.604468][T17069] gspca_stk1135: Sensor write failed [ 1198.623179][T17069] gspca_stk1135: serial bus timeout: status=0x00 [ 1198.626668][ T43] cdc_ncm 3-1:1.1: bind() failure [ 1198.659214][T17069] gspca_stk1135: Sensor write failed [ 1198.704684][T17069] gspca_stk1135: serial bus timeout: status=0x00 [ 1198.739174][T17069] gspca_stk1135: Sensor read failed [ 1198.766872][T17069] gspca_stk1135: serial bus timeout: status=0x00 [ 1198.773557][T17069] gspca_stk1135: Sensor read failed [ 1198.778832][T17069] gspca_stk1135: Detected sensor type unknown (0x0) [ 1198.787982][T17069] gspca_stk1135: serial bus timeout: status=0x00 [ 1198.796693][T17069] gspca_stk1135: Sensor read failed [ 1198.805260][T17069] gspca_stk1135: serial bus timeout: status=0x00 [ 1198.814570][T17069] gspca_stk1135: Sensor read failed [ 1198.821133][T17069] gspca_stk1135: serial bus timeout: status=0x00 [ 1198.827991][T17069] gspca_stk1135: Sensor write failed [ 1198.838515][T17069] gspca_stk1135: serial bus timeout: status=0x00 [ 1198.850053][T17069] gspca_stk1135: Sensor write failed [ 1198.868040][T17069] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 1199.106726][T17069] usb 3-1: USB disconnect, device number 9 [ 1199.524350][ T5898] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 1199.555877][ T43] usb 2-1: USB disconnect, device number 122 [ 1199.779512][ T5898] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 1199.789245][ T5898] usb 1-1: config 0 has an invalid interface number: 9 but max is 2 [ 1199.848012][ T5898] usb 1-1: config 0 has no interface number 0 [ 1199.867661][ T5898] usb 1-1: config 0 has no interface number 1 [ 1200.008603][ T5898] usb 1-1: config 0 interface 9 has no altsetting 0 [ 1200.028921][ T5898] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1200.094088][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.249355][ T5898] usb 1-1: config 0 descriptor?? [ 1200.468115][T19735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3701'. [ 1200.546828][T19722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3695'. [ 1200.583732][T19722] bridge0: port 1(macvlan2) entered blocking state [ 1200.590924][T19722] bridge0: port 1(macvlan2) entered disabled state [ 1200.597861][T19722] macvlan2: entered allmulticast mode [ 1200.603933][T19722] bridge0: entered allmulticast mode [ 1200.651735][T19722] macvlan2: left allmulticast mode [ 1200.657152][T19722] bridge0: left allmulticast mode [ 1202.360983][T17069] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1202.399423][T19753] binder: BINDER_SET_CONTEXT_MGR already set [ 1202.405612][T19753] binder: 19752:19753 ioctl 4018620d 200000000040 returned -16 [ 1202.555682][T17069] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1202.594142][T17069] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.676369][T17069] usb 4-1: config 0 descriptor?? [ 1202.705191][T17069] cp210x 4-1:0.0: cp210x converter detected [ 1203.299258][ T5898] usb 1-1: Could not set interface, error -71 [ 1203.370070][ T5898] usb 1-1: USB disconnect, device number 119 [ 1203.737004][T17069] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1204.535963][T19780] FAULT_INJECTION: forcing a failure. [ 1204.535963][T19780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1204.709175][T17069] cp210x 4-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 1204.753517][T17069] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1204.762329][T19780] CPU: 0 UID: 0 PID: 19780 Comm: syz.2.3714 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 1204.762363][T19780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1204.762377][T19780] Call Trace: [ 1204.762388][T19780] [ 1204.762398][T19780] dump_stack_lvl+0x189/0x250 [ 1204.762432][T19780] ? __pfx____ratelimit+0x10/0x10 [ 1204.762467][T19780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1204.762493][T19780] ? __pfx__printk+0x10/0x10 [ 1204.762523][T19780] ? __might_fault+0xb0/0x130 [ 1204.762561][T19780] should_fail_ex+0x414/0x560 [ 1204.762600][T19780] _copy_from_user+0x2d/0xb0 [ 1204.762629][T19780] csum_and_copy_from_iter_full+0x694/0x1eb0 [ 1204.762681][T19780] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 1204.762722][T19780] ? trace_kmalloc+0x1f/0xd0 [ 1204.762751][T19780] ip_generic_getfrag+0x12f/0x2b0 [ 1204.762790][T19780] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1204.762839][T19780] ? skb_put+0x11b/0x210 [ 1204.762871][T19780] __ip6_append_data+0x3843/0x3de0 [ 1204.762919][T19780] ? __lock_acquire+0xab9/0xd20 [ 1204.762946][T19780] ? __pfx_raw6_getfrag+0x10/0x10 [ 1204.762997][T19780] ? ip6_mtu+0x7d/0x3f0 [ 1204.763030][T19780] ? __pfx___ip6_append_data+0x10/0x10 [ 1204.763058][T19780] ? __pfx_ip6_mtu+0x10/0x10 [ 1204.763098][T19780] ip6_append_data+0x1c4/0x380 [ 1204.763133][T19780] ? __pfx_raw6_getfrag+0x10/0x10 [ 1204.763170][T19780] rawv6_sendmsg+0x124b/0x17f0 [ 1204.763218][T19780] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1204.763276][T19780] ? __lock_acquire+0xab9/0xd20 [ 1204.763299][T19780] ? __pfx_aa_sk_perm+0x10/0x10 [ 1204.763333][T19780] ? sock_rps_record_flow+0x19/0x410 [ 1204.763360][T19780] ? inet_sendmsg+0x2f4/0x370 [ 1204.763381][T19780] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1204.763419][T19780] __sock_sendmsg+0x19c/0x270 [ 1204.763445][T19780] ____sys_sendmsg+0x52d/0x830 [ 1204.763481][T19780] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1204.763521][T19780] ? import_iovec+0x74/0xa0 [ 1204.763552][T19780] ___sys_sendmsg+0x21f/0x2a0 [ 1204.763584][T19780] ? __pfx____sys_sendmsg+0x10/0x10 [ 1204.763654][T19780] ? __fget_files+0x2a/0x420 [ 1204.763683][T19780] ? __fget_files+0x3a0/0x420 [ 1204.763724][T19780] __sys_sendmmsg+0x227/0x430 [ 1204.763760][T19780] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1204.763786][T19780] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1204.763846][T19780] ? ksys_write+0x22a/0x250 [ 1204.763874][T19780] ? __pfx_ksys_write+0x10/0x10 [ 1204.763897][T19780] ? rcu_is_watching+0x15/0xb0 [ 1204.763931][T19780] __x64_sys_sendmmsg+0xa0/0xc0 [ 1204.763963][T19780] do_syscall_64+0xfa/0x3b0 [ 1204.763984][T19780] ? lockdep_hardirqs_on+0x9c/0x150 [ 1204.764018][T19780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.764041][T19780] ? clear_bhb_loop+0x60/0xb0 [ 1204.764068][T19780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.764090][T19780] RIP: 0033:0x7f7b9e18e929 [ 1204.764109][T19780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1204.764129][T19780] RSP: 002b:00007f7b9efaa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1204.764152][T19780] RAX: ffffffffffffffda RBX: 00007f7b9e3b6080 RCX: 00007f7b9e18e929 [ 1204.764169][T19780] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000004 [ 1204.764183][T19780] RBP: 00007f7b9efaa090 R08: 0000000000000000 R09: 0000000000000000 [ 1204.764197][T19780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1204.764211][T19780] R13: 0000000000000000 R14: 00007f7b9e3b6080 R15: 00007f7b9e4dfa28 [ 1204.764245][T19780] [ 1205.218667][T17069] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1205.261505][T17069] usb 4-1: USB disconnect, device number 15 [ 1205.276627][T17069] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1205.289143][T17069] cp210x 4-1:0.0: device disconnected [ 1205.437653][T16046] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 1205.508119][T16046] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1205.738605][ T43] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1205.760938][ T8230] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1205.915316][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 1205.935981][ T43] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.1f [ 1205.948490][ T8230] usb 1-1: Using ep0 maxpacket: 16 [ 1205.953882][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.987369][ T8230] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1205.997197][ T8230] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 1206.007025][ T43] usb 3-1: Product: syz [ 1206.018870][ T43] usb 3-1: Manufacturer: syz [ 1206.028953][ T8230] usb 1-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1206.057323][ T43] usb 3-1: SerialNumber: syz [ 1206.091629][ T43] usb 3-1: config 0 descriptor?? [ 1206.100858][ T8230] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1206.119947][ T43] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1206.149253][ T8230] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1206.159302][ T8230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.160921][T17069] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1206.229715][ T8230] usb 1-1: Product: syz [ 1206.257342][ T8230] usb 1-1: Manufacturer: syz [ 1206.291571][ T8230] usb 1-1: SerialNumber: syz [ 1206.330995][T17069] usb 4-1: Using ep0 maxpacket: 16 [ 1206.356328][T19798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3718'. [ 1206.376162][T19798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.451791][T19798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.691232][ T43] gspca_stk1135: reg_w 0x2 err -110 [ 1206.697747][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1206.705739][ T43] gspca_stk1135: Sensor write failed [ 1206.711674][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1206.718211][ T43] gspca_stk1135: Sensor write failed [ 1206.746918][ T8230] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 120 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8 [ 1206.765230][ T8230] usb 1-1: USB disconnect, device number 120 [ 1206.796094][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1206.808425][ T8230] usblp0: removed [ 1206.814859][ T43] gspca_stk1135: Sensor read failed [ 1206.845332][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1206.876213][ T43] gspca_stk1135: Sensor read failed [ 1206.887387][ T43] gspca_stk1135: Detected sensor type unknown (0x0) [ 1206.898194][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1206.908850][ T43] gspca_stk1135: Sensor read failed [ 1206.918505][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1206.968585][ T43] gspca_stk1135: Sensor read failed [ 1206.989913][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1207.007495][ T43] gspca_stk1135: Sensor write failed [ 1207.023889][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1207.043901][ T43] gspca_stk1135: Sensor write failed [ 1207.063015][ T43] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 1208.553838][T16046] usb 3-1: USB disconnect, device number 10 [ 1208.886420][T17069] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1208.956989][T17069] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1209.023480][T17069] usb 4-1: can't read configurations, error -71 [ 1209.800926][T16046] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1209.991211][T16046] usb 1-1: Using ep0 maxpacket: 8 [ 1210.024840][T16046] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.057329][T16046] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1210.096829][T16046] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1210.146524][T16046] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1210.191372][T19831] program syz.4.3728 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1210.240898][T16046] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1210.367516][T16046] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.448325][T16046] hub 1-1:1.0: bad descriptor, ignoring hub [ 1210.524589][T16046] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1210.595805][T16046] cdc_wdm 1-1:1.0: skipping garbage [ 1210.613987][T16046] cdc_wdm 1-1:1.0: skipping garbage [ 1210.664545][T16046] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1210.716055][T16046] cdc_wdm 1-1:1.0: Unknown control protocol [ 1210.767106][T16046] usb 1-1: USB disconnect, device number 121 [ 1210.875243][T19840] gretap0: entered promiscuous mode [ 1210.906058][T19840] vlan2: entered promiscuous mode [ 1211.210851][T16046] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1211.411752][T16046] usb 1-1: Using ep0 maxpacket: 8 [ 1211.428272][T16046] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.467516][T16046] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1211.488729][T17069] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 1211.529675][T17069] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1211.551159][T16046] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1211.598138][T16046] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1211.649849][T16046] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1211.706664][T16046] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.784381][T16046] hub 1-1:1.0: bad descriptor, ignoring hub [ 1211.824413][T16046] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1211.955006][T16046] cdc_wdm 1-1:1.0: skipping garbage [ 1212.031427][T19858] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3732'. [ 1212.138708][T16046] cdc_wdm 1-1:1.0: skipping garbage [ 1212.145951][T16046] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1212.337717][T16046] cdc_wdm 1-1:1.0: Unknown control protocol [ 1212.383874][T16046] usb 1-1: USB disconnect, device number 122 [ 1212.418076][T19853] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1214.587305][T17069] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1214.880930][T17069] usb 4-1: Using ep0 maxpacket: 16 [ 1215.162361][T17069] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1215.300934][T17069] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 1215.374003][T19903] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1215.384705][T19903] macsec1: entered allmulticast mode [ 1215.395103][T19903] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1215.462319][T19903] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1215.474592][T19903] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1215.569711][T17069] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1215.715120][T17069] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1215.774069][T17069] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1215.784153][T17069] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.171590][T17069] usb 4-1: Product: syz [ 1216.175845][T17069] usb 4-1: Manufacturer: syz [ 1216.180444][T17069] usb 4-1: SerialNumber: syz [ 1216.457046][T17069] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8 [ 1216.638160][T17069] usb 4-1: USB disconnect, device number 18 [ 1216.689849][T17069] usblp0: removed [ 1217.143818][T19909] netlink: 'syz.2.3743': attribute type 4 has an invalid length. [ 1217.486354][T19918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3744'. [ 1217.497196][T19918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3744'. [ 1218.330962][T17069] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1218.377311][T17069] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1220.919087][T19950] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1220.926854][T19950] macsec0: entered allmulticast mode [ 1220.932314][T19950] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1220.959439][T19950] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1221.000980][T19950] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1221.622287][T19966] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1223.070857][ T9] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 1223.293779][ T9] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 1223.330996][ T9] usb 1-1: config 8 has no interface number 0 [ 1223.357199][ T9] usb 1-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1223.469485][ T9] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid maxpacket 1023, setting to 64 [ 1223.490307][ T9] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1223.691199][ T9] usb 1-1: config 8 interface 177 has no altsetting 0 [ 1223.714601][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1223.763218][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.789638][T19975] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1224.051615][ T9] usb 1-1: string descriptor 0 read error: -71 [ 1224.138854][ T9] ir_toy 1-1:8.177: required endpoints not found [ 1224.209168][ T9] usb 1-1: USB disconnect, device number 123 [ 1224.229911][T19990] netlink: 'syz.2.3762': attribute type 11 has an invalid length. [ 1227.080936][T16046] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1227.308921][T16046] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.349093][T16046] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 1227.358462][T16046] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.385799][T16046] usb 3-1: config 0 descriptor?? [ 1227.475412][T16046] usb 3-1: bad CDC descriptors [ 1227.692390][T16046] usb 3-1: USB disconnect, device number 11 [ 1228.565519][T20037] binder: 20035:20037 ioctl c0306201 200000000280 returned -14 [ 1228.951127][ T9] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1229.117324][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1229.140116][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1229.160694][ T9] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 1229.187074][ T9] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.276789][T20048] random: crng reseeded on system resumption [ 1229.360143][ T9] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1229.441221][ T9] usb 1-1: config 128 has no interface number 0 [ 1229.496295][ T9] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1229.605992][ T9] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1229.655232][ T9] usb 1-1: config 128 interface 127 has no altsetting 0 [ 1229.666066][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1229.780875][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.789061][ T9] usb 1-1: Product: syz [ 1229.794470][ T9] usb 1-1: Manufacturer: syz [ 1229.799222][ T9] usb 1-1: SerialNumber: syz [ 1229.945250][T20059] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3778'. [ 1229.965518][T20059] openvswitch: netlink: Flow key attr not present in new flow. [ 1230.760911][T17069] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 1231.037876][T17069] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1231.053893][T17069] usb 2-1: config 0 has no interface number 0 [ 1231.066712][T17069] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1231.103575][T17069] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 59853, setting to 64 [ 1231.123396][T20071] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3783'. [ 1231.187692][T17069] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1231.292730][T17069] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1231.326693][T17069] usb 2-1: Product: syz [ 1231.336270][T17069] usb 2-1: SerialNumber: syz [ 1231.362517][T17069] usb 2-1: config 0 descriptor?? [ 1231.371367][T20069] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1231.448680][T17069] cm109 2-1:0.8: invalid payload size 64, expected 4 [ 1231.528177][T17069] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input96 [ 1231.756703][T20067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1231.780885][T20067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1231.805293][T20067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3782'. [ 1231.929550][T20067] netlink: 'syz.1.3782': attribute type 1 has an invalid length. [ 1231.971720][ T9] usb 1-1: USB disconnect, device number 124 [ 1232.020576][T20067] netlink: 'syz.1.3782': attribute type 2 has an invalid length. [ 1232.096073][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1232.103532][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1232.111364][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1232.118622][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1232.125988][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1232.133282][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1232.140497][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1232.149291][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1232.156812][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1232.164482][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1232.174547][ T5914] udevd[5914]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1232.177755][ T977] usb 2-1: USB disconnect, device number 123 [ 1232.190959][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1232.272120][ T977] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1232.330961][ T43] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1232.531052][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 1232.540541][ T43] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 1232.550279][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.625792][ T43] usb 4-1: Product: syz [ 1233.246927][ T43] usb 4-1: Manufacturer: syz [ 1233.258550][ T43] usb 4-1: SerialNumber: syz [ 1233.329671][ T43] usb 4-1: config 0 descriptor?? [ 1233.387987][ T43] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1233.530898][T16046] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1233.587819][T20076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.621259][T20076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1233.682797][T20095] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1233.689404][T20095] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1233.731921][T20095] vhci_hcd vhci_hcd.0: Device attached [ 1233.837253][T16046] usb 3-1: Using ep0 maxpacket: 16 [ 1233.861682][ T43] gspca_m5602: Failed to find a sensor [ 1233.867198][ T43] ALi m5602 4-1:0.0: ALi m5602 webcam failed [ 1233.902688][T20095] vivid-003: ================= START STATUS ================= [ 1234.030952][T17069] usb 36-1: SetAddress Request (2) to port 0 [ 1234.038519][T17069] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1234.080423][T20095] vivid-003: Radio HW Seek Mode: Bounded [ 1234.080513][T20095] vivid-003: Radio Programmable HW Seek: false [ 1234.080542][T20095] vivid-003: RDS Rx I/O Mode: Block I/O [ 1234.080571][T20095] vivid-003: Generate RBDS Instead of RDS: false [ 1234.080601][T20095] vivid-003: RDS Reception: true [ 1234.080629][T20095] vivid-003: RDS Program Type: 0 inactive [ 1234.080696][T20095] vivid-003: RDS PS Name: inactive [ 1234.082599][T20095] vivid-003: RDS Radio Text: inactive [ 1234.082639][T20095] vivid-003: RDS Traffic Announcement: false inactive [ 1234.082673][T20095] vivid-003: RDS Traffic Program: false inactive [ 1234.082708][T20095] vivid-003: RDS Music: false inactive [ 1234.082770][T20095] vivid-003: ================== END STATUS ================== [ 1234.084767][T16046] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1234.084797][T16046] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 1234.084823][T16046] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1234.084853][T16046] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1234.100895][T16046] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1234.100926][T16046] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.100946][T16046] usb 3-1: Product: syz [ 1234.100960][T16046] usb 3-1: Manufacturer: syz [ 1234.100975][T16046] usb 3-1: SerialNumber: syz [ 1234.130960][ T43] usb 4-1: USB disconnect, device number 19 [ 1234.190305][T20096] vhci_hcd: connection reset by peer [ 1234.212928][ T49] vhci_hcd: stop threads [ 1234.212964][ T49] vhci_hcd: release socket [ 1234.213018][ T49] vhci_hcd: disconnect device [ 1234.331333][T16046] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8 [ 1234.346226][T16046] usb 3-1: USB disconnect, device number 12 [ 1234.351558][T16046] usblp0: removed [ 1234.578999][T20106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3792'. [ 1234.607163][T20107] FAULT_INJECTION: forcing a failure. [ 1234.607163][T20107] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.607202][T20107] CPU: 1 UID: 0 PID: 20107 Comm: syz.4.3791 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 1234.607222][T20107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1234.607232][T20107] Call Trace: [ 1234.607239][T20107] [ 1234.607247][T20107] dump_stack_lvl+0x189/0x250 [ 1234.607271][T20107] ? __pfx____ratelimit+0x10/0x10 [ 1234.607296][T20107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1234.607315][T20107] ? __pfx__printk+0x10/0x10 [ 1234.607341][T20107] ? __pfx___might_resched+0x10/0x10 [ 1234.607360][T20107] ? fs_reclaim_acquire+0x7d/0x100 [ 1234.607386][T20107] should_fail_ex+0x414/0x560 [ 1234.607413][T20107] should_failslab+0xa8/0x100 [ 1234.607434][T20107] __kmalloc_noprof+0xcb/0x4f0 [ 1234.607452][T20107] ? kfree+0x4d/0x440 [ 1234.607467][T20107] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1234.607487][T20107] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1234.607504][T20107] ? tomoyo_domain+0xd9/0x130 [ 1234.607524][T20107] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1234.607546][T20107] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1234.607570][T20107] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1234.607595][T20107] ? sb_end_write+0xe9/0x1c0 [ 1234.607618][T20107] ? vfs_write+0x8d8/0xa90 [ 1234.607661][T20107] ? ksys_write+0x1e1/0x250 [ 1234.607683][T20107] security_file_ioctl+0xcb/0x2d0 [ 1234.607706][T20107] __se_sys_ioctl+0x47/0x170 [ 1234.607725][T20107] do_syscall_64+0xfa/0x3b0 [ 1234.607740][T20107] ? lockdep_hardirqs_on+0x9c/0x150 [ 1234.607764][T20107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.607788][T20107] ? clear_bhb_loop+0x60/0xb0 [ 1234.607808][T20107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.607823][T20107] RIP: 0033:0x7f5fd118e929 [ 1234.607837][T20107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1234.607853][T20107] RSP: 002b:00007f5fd2083038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1234.607869][T20107] RAX: ffffffffffffffda RBX: 00007f5fd13b5fa0 RCX: 00007f5fd118e929 [ 1234.607882][T20107] RDX: 0000200000000080 RSI: 000000004040ae79 RDI: 0000000000000004 [ 1234.607893][T20107] RBP: 00007f5fd2083090 R08: 0000000000000000 R09: 0000000000000000 [ 1234.607903][T20107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1234.607913][T20107] R13: 0000000000000000 R14: 00007f5fd13b5fa0 R15: 00007f5fd14dfa28 [ 1234.607936][T20107] [ 1234.607942][T20107] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1235.137388][T20114] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3794'. [ 1236.466506][T20141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3801'. [ 1236.923983][ T8230] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1237.253239][ T8230] usb 1-1: Using ep0 maxpacket: 16 [ 1237.717841][T20150] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3802'. [ 1237.728957][T20150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3802'. [ 1238.756138][T20158] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1238.979025][ T8230] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1239.022016][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.028433][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.030064][ T8230] usb 1-1: no configurations [ 1239.040085][ T8230] usb 1-1: can't read configurations, error -22 [ 1239.102527][T17069] usb 36-1: device descriptor read/8, error -110 [ 1239.172878][T20163] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3800'. [ 1239.512010][T17069] usb usb36-port1: attempt power cycle [ 1239.860549][T20170] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1239.888027][T20170] macsec0: entered allmulticast mode [ 1239.901116][T20170] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1240.035941][T20170] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1240.132771][T17069] usb usb36-port1: unable to enumerate USB device [ 1240.162764][T20170] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1241.094916][T20179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3810'. [ 1241.505902][T20193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3814'. [ 1242.404442][T20213] netlink: 'syz.1.3822': attribute type 4 has an invalid length. [ 1243.270523][T20227] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3826'. [ 1243.600532][T20237] loop2: detected capacity change from 0 to 7 [ 1243.612265][T20237] Dev loop2: unable to read RDB block 7 [ 1243.621062][T20237] loop2: AHDI p1 p2 p3 [ 1243.625300][T20237] loop2: partition table partially beyond EOD, truncated [ 1243.638102][T20237] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1243.646018][T20237] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1243.660857][ T8230] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1243.922295][ T8230] usb 2-1: Using ep0 maxpacket: 8 [ 1243.929619][ T8230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1243.940863][ T8230] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1243.949976][ T8230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.974661][ T8230] usb 2-1: config 0 descriptor?? [ 1244.127238][T20244] fuse: Bad value for 'rootmode' [ 1244.397526][ T8230] hid-multitouch 0003:0EEF:72C4.002E: unknown main item tag 0x0 [ 1244.436680][T20252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1244.446773][T20252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1244.487409][T20252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1244.495212][T20252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1244.603256][ T8230] hid-multitouch 0003:0EEF:72C4.002E: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.1-1/input0 [ 1244.618981][ T8230] usb 2-1: USB disconnect, device number 124 [ 1245.157424][T20255] fido_id[20255]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1246.665505][ T30] audit: type=1326 audit(1752454784.481:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20275 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9e18e929 code=0x7ffc0000 [ 1246.747358][ T30] audit: type=1326 audit(1752454784.511:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20275 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9e18e929 code=0x7ffc0000 [ 1246.771463][ T30] audit: type=1326 audit(1752454784.531:4394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20275 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f7b9e18e929 code=0x7ffc0000 [ 1246.796749][ T30] audit: type=1326 audit(1752454784.551:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20275 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9e18e929 code=0x7ffc0000 [ 1246.819619][ T30] audit: type=1326 audit(1752454784.551:4396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20275 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9e18e929 code=0x7ffc0000 [ 1246.855451][ T30] audit: type=1326 audit(1752454784.571:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20275 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f7b9e18e929 code=0x7ffc0000 [ 1246.933077][ T30] audit: type=1326 audit(1752454784.571:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20275 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9e18e929 code=0x7ffc0000 [ 1247.004068][ T30] audit: type=1326 audit(1752454784.571:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20275 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f7b9e18e929 code=0x7ffc0000 [ 1247.030029][T20281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3840'. [ 1247.044491][ T30] audit: type=1326 audit(1752454784.571:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20275 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9e18e929 code=0x7ffc0000 [ 1247.080280][ T30] audit: type=1326 audit(1752454784.571:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20275 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b9e18e929 code=0x7ffc0000 [ 1247.410641][T20288] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3842'. [ 1247.515180][ T8230] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1247.690835][ T8230] usb 3-1: Using ep0 maxpacket: 32 [ 1247.707972][ T8230] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1247.727920][ T8230] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1247.744518][ T8230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.753039][ T8230] usb 3-1: Product: syz [ 1247.757246][ T8230] usb 3-1: Manufacturer: syz [ 1247.762354][ T8230] usb 3-1: SerialNumber: syz [ 1247.777567][ T8230] usb 3-1: config 0 descriptor?? [ 1247.961523][T20286] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1247.995283][ T8230] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input97 [ 1247.999652][T20296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3844'. [ 1248.054458][T20296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3844'. [ 1248.120949][ T5898] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1248.281048][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 1248.339969][ T5898] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1248.530457][ T5898] usb 1-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 1248.614429][ T5898] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1248.671682][ T5898] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1248.682548][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.700208][ T5898] usb 1-1: Product: syz [ 1248.714926][ T5898] usb 1-1: Manufacturer: syz [ 1248.719597][ T5898] usb 1-1: SerialNumber: syz [ 1248.886071][T20309] xt_hashlimit: overflow, try lower: 17286/0 [ 1248.963120][T20309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.981758][T20305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.989660][T20305] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.030262][T20309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1249.107695][T20305] bond_slave_0: left promiscuous mode [ 1249.248785][T20305] bond_slave_1: left promiscuous mode [ 1249.874505][T20305] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.980999][T20305] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.096082][T20305] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.200881][T20305] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.221995][T20333] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3854'. [ 1251.540917][T20314] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1251.589157][T20317] usb 3-1: USB disconnect, device number 13 [ 1251.589217][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1251.681748][T20342] FAULT_INJECTION: forcing a failure. [ 1251.681748][T20342] name failslab, interval 1, probability 0, space 0, times 0 [ 1251.714056][T20342] CPU: 1 UID: 0 PID: 20342 Comm: syz.2.3856 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 1251.714094][T20342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1251.714108][T20342] Call Trace: [ 1251.714118][T20342] [ 1251.714126][T20342] dump_stack_lvl+0x189/0x250 [ 1251.714151][T20342] ? __pfx____ratelimit+0x10/0x10 [ 1251.714182][T20342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1251.714211][T20342] ? __pfx__printk+0x10/0x10 [ 1251.714247][T20342] ? __pfx___might_resched+0x10/0x10 [ 1251.714273][T20342] ? fs_reclaim_acquire+0x7d/0x100 [ 1251.714299][T20342] should_fail_ex+0x414/0x560 [ 1251.714328][T20342] ? alloc_netdev_mqs+0xa6/0x11e0 [ 1251.714364][T20342] should_failslab+0xa8/0x100 [ 1251.714395][T20342] __kvmalloc_node_noprof+0x161/0x5f0 [ 1251.714424][T20342] ? alloc_netdev_mqs+0xa6/0x11e0 [ 1251.714446][T20342] ? snprintf+0xda/0x120 [ 1251.714467][T20342] ? __pfx_macsec_setup+0x10/0x10 [ 1251.714488][T20342] alloc_netdev_mqs+0xa6/0x11e0 [ 1251.714522][T20342] ? __pfx_macsec_setup+0x10/0x10 [ 1251.714541][T20342] ? __pfx_snprintf+0x10/0x10 [ 1251.714576][T20342] rtnl_create_link+0x31f/0xd10 [ 1251.714605][T20342] rtnl_newlink_create+0x25c/0xb00 [ 1251.714630][T20342] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1251.714671][T20342] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1251.714696][T20342] ? rtnl_newlink+0x8db/0x1c70 [ 1251.714722][T20342] ? __pfx___mutex_lock+0x10/0x10 [ 1251.714750][T20342] ? ns_capable+0x8a/0xf0 [ 1251.714771][T20342] rtnl_newlink+0x16d6/0x1c70 [ 1251.714793][T20342] ? netlink_sendmsg+0x805/0xb30 [ 1251.714836][T20342] ? __pfx_rtnl_newlink+0x10/0x10 [ 1251.714886][T20342] ? kasan_quarantine_put+0xdd/0x220 [ 1251.714902][T20342] ? lockdep_hardirqs_on+0x9c/0x150 [ 1251.714931][T20342] ? nlmon_xmit+0xb0/0x100 [ 1251.714952][T20342] ? kmem_cache_free+0x18f/0x400 [ 1251.714989][T20342] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1251.715014][T20342] ? lockdep_hardirqs_on+0x9c/0x150 [ 1251.715057][T20342] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1251.715079][T20342] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1251.715107][T20342] ? __dev_queue_xmit+0x27e/0x3a70 [ 1251.715154][T20342] ? __lock_acquire+0xab9/0xd20 [ 1251.715201][T20342] ? __pfx_rtnl_newlink+0x10/0x10 [ 1251.715218][T20342] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1251.715238][T20342] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1251.715262][T20342] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1251.715285][T20342] ? ref_tracker_free+0x63a/0x7d0 [ 1251.715316][T20342] ? __copy_skb_header+0xa7/0x550 [ 1251.715348][T20342] ? __pfx_ref_tracker_free+0x10/0x10 [ 1251.715372][T20342] ? __skb_clone+0x63/0x7a0 [ 1251.715399][T20342] netlink_rcv_skb+0x208/0x470 [ 1251.715431][T20342] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1251.715462][T20342] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1251.715501][T20342] ? netlink_deliver_tap+0x2e/0x1b0 [ 1251.715520][T20342] ? netlink_deliver_tap+0x2e/0x1b0 [ 1251.715543][T20342] netlink_unicast+0x759/0x8e0 [ 1251.715580][T20342] netlink_sendmsg+0x805/0xb30 [ 1251.715619][T20342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1251.715650][T20342] ? aa_sock_msg_perm+0x94/0x160 [ 1251.715675][T20342] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1251.715699][T20342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1251.715731][T20342] __sock_sendmsg+0x219/0x270 [ 1251.715757][T20342] ____sys_sendmsg+0x505/0x830 [ 1251.715791][T20342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1251.715823][T20342] ? import_iovec+0x74/0xa0 [ 1251.715844][T20342] ___sys_sendmsg+0x21f/0x2a0 [ 1251.715874][T20342] ? __pfx____sys_sendmsg+0x10/0x10 [ 1251.715945][T20342] ? __fget_files+0x2a/0x420 [ 1251.715969][T20342] ? __fget_files+0x3a0/0x420 [ 1251.715998][T20342] __x64_sys_sendmsg+0x19b/0x260 [ 1251.716029][T20342] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1251.716075][T20342] ? __pfx_ksys_write+0x10/0x10 [ 1251.716097][T20342] ? rcu_is_watching+0x15/0xb0 [ 1251.716124][T20342] ? do_syscall_64+0xbe/0x3b0 [ 1251.716142][T20342] do_syscall_64+0xfa/0x3b0 [ 1251.716157][T20342] ? lockdep_hardirqs_on+0x9c/0x150 [ 1251.716192][T20342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.716215][T20342] ? clear_bhb_loop+0x60/0xb0 [ 1251.716240][T20342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.716262][T20342] RIP: 0033:0x7f7b9e18e929 [ 1251.716277][T20342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1251.716291][T20342] RSP: 002b:00007f7b9efcb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1251.716309][T20342] RAX: ffffffffffffffda RBX: 00007f7b9e3b5fa0 RCX: 00007f7b9e18e929 [ 1251.716326][T20342] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1251.716342][T20342] RBP: 00007f7b9efcb090 R08: 0000000000000000 R09: 0000000000000000 [ 1251.716357][T20342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1251.716370][T20342] R13: 0000000000000000 R14: 00007f7b9e3b5fa0 R15: 00007f7b9e4dfa28 [ 1251.716403][T20342] [ 1251.783472][T20314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1252.240311][T20314] usb 2-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 1252.249530][T20314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.258726][T20346] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3855'. [ 1252.262903][T20314] usb 2-1: config 0 descriptor?? [ 1252.354333][T20314] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1253.741883][T20375] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3869'. [ 1253.876638][ T5898] usb 1-1: cannot find UAC_HEADER [ 1254.033349][ T5898] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1254.259749][ T5914] udevd[5914]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1254.288419][T20314] usb 2-1: USB disconnect, device number 125 [ 1254.922369][T20314] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 1255.426557][T20314] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1255.440829][T20314] usb 2-1: config 0 has an invalid interface number: 2 but max is -1 [ 1255.448942][T20314] usb 2-1: config 0 has an invalid interface number: 2 but max is -1 [ 1255.490960][T20314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.650820][T20314] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1255.666616][T20314] usb 2-1: config 0 has no interface number 0 [ 1255.680829][T20314] usb 2-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1255.725517][T20314] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1255.736585][T20314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.756899][T20314] usb 2-1: Product: syz [ 1255.767055][T20314] usb 2-1: Manufacturer: syz [ 1255.787349][T20314] usb 2-1: SerialNumber: syz [ 1255.838667][T20314] usb 2-1: config 0 descriptor?? [ 1256.167531][T20314] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1256.196017][T20314] usb 2-1: MIDIStreaming interface descriptor not found [ 1256.369235][T20314] usb 2-1: USB disconnect, device number 126 [ 1256.519079][T20405] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3873'. [ 1257.093051][T20410] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1257.131802][T20410] macsec0: entered allmulticast mode [ 1257.183104][T20410] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1257.306180][T20410] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1257.315051][T20410] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1257.536320][T20417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1257.565792][T20417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.109332][T20423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3881'. [ 1258.218475][T20426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3881'. [ 1258.277857][T20423] netlink: 212400 bytes leftover after parsing attributes in process `syz.2.3881'. [ 1258.716881][T20434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3884'. [ 1258.894927][T20442] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1258.901529][T20442] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1258.912145][T20442] vhci_hcd vhci_hcd.0: Device attached [ 1259.090873][ T8230] vhci_hcd: vhci_device speed not set [ 1259.101108][T20445] vhci_hcd: connection closed [ 1259.111712][ T78] vhci_hcd: stop threads [ 1259.130853][ T78] vhci_hcd: release socket [ 1259.135632][ T78] vhci_hcd: disconnect device [ 1259.181103][ T8230] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 1259.188654][ T8230] usb 39-1: enqueue for inactive port 0 [ 1259.263765][ T8230] vhci_hcd: vhci_device speed not set [ 1259.551441][ T5938] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1259.746668][ T5938] usb 2-1: config 0 has no interfaces? [ 1259.793931][ T5938] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1259.804942][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.813465][ T5938] usb 2-1: Product: syz [ 1259.831009][ T5938] usb 2-1: Manufacturer: syz [ 1259.835687][ T5938] usb 2-1: SerialNumber: syz [ 1259.869601][ T5938] usb 2-1: config 0 descriptor?? [ 1260.769406][T20473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3893'. [ 1261.049789][T20462] IPVS: Error connecting to the multicast addr [ 1261.961722][T20480] macsec0: entered allmulticast mode [ 1261.968413][T20480] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1262.099651][T20480] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1262.251200][T20314] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1262.410818][T20314] usb 3-1: Using ep0 maxpacket: 16 [ 1262.419235][T20314] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1262.427867][T20314] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.438463][T20314] usb 3-1: config 0 has no interface number 0 [ 1262.448878][T20314] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 1262.468499][T20314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.492143][T20314] usb 3-1: config 0 descriptor?? [ 1262.504722][T20314] usb 3-1: Found UVC 0.00 device (0bd3:0555) [ 1262.512135][T20314] usb 3-1: No valid video chain found. [ 1262.595067][T20489] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3898'. [ 1262.774252][T20490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3897'. [ 1262.828734][T20490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3897'. [ 1262.840260][T20492] FAULT_INJECTION: forcing a failure. [ 1262.840260][T20492] name failslab, interval 1, probability 0, space 0, times 0 [ 1262.891187][T20490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3897'. [ 1262.901384][T20490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3897'. [ 1262.922857][T20492] CPU: 1 UID: 0 PID: 20492 Comm: syz.0.3899 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 1262.922881][T20492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1262.922892][T20492] Call Trace: [ 1262.922899][T20492] [ 1262.922906][T20492] dump_stack_lvl+0x189/0x250 [ 1262.922931][T20492] ? __pfx____ratelimit+0x10/0x10 [ 1262.922957][T20492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1262.922976][T20492] ? __pfx__printk+0x10/0x10 [ 1262.923014][T20492] should_fail_ex+0x414/0x560 [ 1262.923041][T20492] should_failslab+0xa8/0x100 [ 1262.923064][T20492] __kmalloc_cache_noprof+0x70/0x3d0 [ 1262.923083][T20492] ? sctp_add_bind_addr+0x8c/0x370 [ 1262.923104][T20492] sctp_add_bind_addr+0x8c/0x370 [ 1262.923124][T20492] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1262.923144][T20492] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1262.923161][T20492] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1262.923180][T20492] ? sctp_v6_is_any+0x64/0x80 [ 1262.923200][T20492] ? sctp_copy_one_addr+0x93/0x360 [ 1262.923219][T20492] sctp_bind_addr_copy+0xb3/0x3c0 [ 1262.923239][T20492] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1262.923266][T20492] sctp_connect_new_asoc+0x2e0/0x690 [ 1262.923290][T20492] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1262.923317][T20492] ? sctp_inet6_send_verify+0x23a/0x300 [ 1262.923333][T20492] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 1262.923356][T20492] __sctp_connect+0x5ba/0xd50 [ 1262.923386][T20492] ? __pfx___sctp_connect+0x10/0x10 [ 1262.923405][T20492] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1262.923425][T20492] ? sctp_setsockopt_connectx_old+0xc1/0x160 [ 1262.923450][T20492] sctp_setsockopt+0x459/0x1200 [ 1262.923470][T20492] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1262.923488][T20492] do_sock_setsockopt+0x257/0x3e0 [ 1262.923511][T20492] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1262.923534][T20492] ? __fget_files+0x2a/0x420 [ 1262.923562][T20492] __x64_sys_setsockopt+0x18b/0x220 [ 1262.923586][T20492] do_syscall_64+0xfa/0x3b0 [ 1262.923601][T20492] ? lockdep_hardirqs_on+0x9c/0x150 [ 1262.923625][T20492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.923640][T20492] ? clear_bhb_loop+0x60/0xb0 [ 1262.923659][T20492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.923675][T20492] RIP: 0033:0x7f7b5e58e929 [ 1262.923689][T20492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1262.923703][T20492] RSP: 002b:00007f7b5f3f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1262.923719][T20492] RAX: ffffffffffffffda RBX: 00007f7b5e7b5fa0 RCX: 00007f7b5e58e929 [ 1262.923731][T20492] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000005 [ 1262.923740][T20492] RBP: 00007f7b5f3f7090 R08: 000000000000001c R09: 0000000000000000 [ 1262.923750][T20492] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000002 [ 1262.923760][T20492] R13: 0000000000000000 R14: 00007f7b5e7b5fa0 R15: 00007f7b5e8dfa28 [ 1262.923783][T20492] [ 1263.250863][ T5938] usb 2-1: USB disconnect, device number 127 [ 1263.329309][T20495] __nla_validate_parse: 48 callbacks suppressed [ 1263.329325][T20495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3900'. [ 1264.538230][T20507] syz.3.3903 (20507): drop_caches: 2 [ 1264.947604][T20523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1264.972193][ T8230] usb 3-1: USB disconnect, device number 14 [ 1265.006310][T20523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.496158][T20532] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3905'. [ 1266.769765][ T8230] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1267.200060][ T8230] usb 3-1: config 0 has no interfaces? [ 1267.217681][ T8230] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1267.229036][ T8230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.241893][ T8230] usb 3-1: Product: syz [ 1267.246093][ T8230] usb 3-1: Manufacturer: syz [ 1267.265533][ T8230] usb 3-1: SerialNumber: syz [ 1267.315225][ T8230] usb 3-1: config 0 descriptor?? [ 1268.391024][T20314] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 1268.542528][T20314] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1268.553847][T20314] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1268.633767][T20314] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1268.671743][T20314] usb 2-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 1268.715340][T20314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.745268][T20314] usb 2-1: config 0 descriptor?? [ 1269.081177][T20568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3920'. [ 1269.164980][T20570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.184599][T20570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.405467][T20564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3918'. [ 1269.437106][T20314] usb 2-1: USB disconnect, device number 2 [ 1269.640521][T20314] usb 3-1: USB disconnect, device number 15 [ 1269.814964][T20581] program syz.2.3925 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1269.971814][T20583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3924'. [ 1269.984014][T20583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3924'. [ 1272.288910][T20602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1272.290132][ T51] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1272.383769][T20604] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3931'. [ 1272.413240][T20604] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3931'. [ 1272.431137][T20605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1272.445619][T20602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1272.453782][T20604] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3931'. [ 1272.476769][T20605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1272.510315][T20604] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3931'. [ 1272.583634][T20605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1272.660896][T20605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1272.859493][T20602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1272.878792][T20602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1273.018131][T20314] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 1273.228606][T20314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1273.242373][T20314] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1273.260806][T20314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.303656][T20314] usb 2-1: config 0 descriptor?? [ 1273.328033][T20314] usb 2-1: Found UVC 0.00 device (10c4:ea90) [ 1273.335337][T20314] usb 2-1: No valid video chain found. [ 1273.502066][T20626] input: syz1 as /devices/virtual/input/input99 [ 1273.521859][T20612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3934'. [ 1273.544723][T20314] usb 2-1: USB disconnect, device number 3 [ 1274.273345][T20639] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3943'. [ 1274.284222][T20639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3943'. [ 1275.000856][ T5938] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1275.174693][ T5938] usb 4-1: config 0 has no interfaces? [ 1275.274737][ T5938] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1275.284058][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.292448][ T5938] usb 4-1: Product: syz [ 1275.296807][ T5938] usb 4-1: Manufacturer: syz [ 1275.311355][ T5938] usb 4-1: SerialNumber: syz [ 1275.353254][ T5938] usb 4-1: config 0 descriptor?? [ 1278.786438][ T8205] usb 4-1: USB disconnect, device number 20 [ 1279.290802][ T8205] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1279.433249][T20690] netlink: 'syz.1.3956': attribute type 4 has an invalid length. [ 1279.450926][ T8205] usb 4-1: Using ep0 maxpacket: 8 [ 1279.478665][ T8205] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1279.501945][ T8205] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1279.512485][ T8205] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1279.522855][ T8205] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1279.536398][ T8205] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1279.545779][ T8205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.763408][ T8205] usb 4-1: GET_CAPABILITIES returned 0 [ 1279.809182][ T8205] usbtmc 4-1:16.0: can't read capabilities [ 1280.130447][T20685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.139292][T20685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.157180][ T8205] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1280.165470][T20685] FAULT_INJECTION: forcing a failure. [ 1280.165470][T20685] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.198249][T20685] CPU: 1 UID: 0 PID: 20685 Comm: syz.3.3954 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 1280.198280][T20685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1280.198295][T20685] Call Trace: [ 1280.198304][T20685] [ 1280.198315][T20685] dump_stack_lvl+0x189/0x250 [ 1280.198349][T20685] ? __pfx____ratelimit+0x10/0x10 [ 1280.198375][T20685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1280.198394][T20685] ? __pfx__printk+0x10/0x10 [ 1280.198420][T20685] ? __pfx___might_resched+0x10/0x10 [ 1280.198438][T20685] ? fs_reclaim_acquire+0x7d/0x100 [ 1280.198464][T20685] should_fail_ex+0x414/0x560 [ 1280.198499][T20685] should_failslab+0xa8/0x100 [ 1280.198522][T20685] __kmalloc_noprof+0xcb/0x4f0 [ 1280.198539][T20685] ? kfree+0x4d/0x440 [ 1280.198554][T20685] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1280.198574][T20685] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1280.198592][T20685] ? tomoyo_domain+0xd9/0x130 [ 1280.198612][T20685] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1280.198634][T20685] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1280.198658][T20685] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1280.198693][T20685] ? __lock_acquire+0xab9/0xd20 [ 1280.198725][T20685] ? __fget_files+0x2a/0x420 [ 1280.198747][T20685] ? __fget_files+0x2a/0x420 [ 1280.198767][T20685] ? __fget_files+0x3a0/0x420 [ 1280.198787][T20685] ? __fget_files+0x2a/0x420 [ 1280.198811][T20685] security_file_ioctl+0xcb/0x2d0 [ 1280.198833][T20685] __se_sys_ioctl+0x47/0x170 [ 1280.198852][T20685] do_syscall_64+0xfa/0x3b0 [ 1280.198867][T20685] ? lockdep_hardirqs_on+0x9c/0x150 [ 1280.198891][T20685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.198907][T20685] ? clear_bhb_loop+0x60/0xb0 [ 1280.198926][T20685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.198942][T20685] RIP: 0033:0x7fa337f8e929 [ 1280.198956][T20685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1280.198970][T20685] RSP: 002b:00007fa338de7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1280.198986][T20685] RAX: ffffffffffffffda RBX: 00007fa3381b5fa0 RCX: 00007fa337f8e929 [ 1280.198998][T20685] RDX: 0000200000000700 RSI: 0000000040045b0a RDI: 0000000000000004 [ 1280.199009][T20685] RBP: 00007fa338de7090 R08: 0000000000000000 R09: 0000000000000000 [ 1280.199018][T20685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1280.199028][T20685] R13: 0000000000000000 R14: 00007fa3381b5fa0 R15: 00007fa3382dfa28 [ 1280.199052][T20685] [ 1280.199731][T20685] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1280.200359][T20699] kvm: user requested TSC rate below hardware speed [ 1280.229494][T20701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1280.484387][T20701] tty tty25: ldisc open failed (-12), clearing slot 24 [ 1280.655848][T20314] usb 4-1: USB disconnect, device number 21 [ 1280.868189][T20709] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1281.840041][T20722] netlink: 'syz.3.3967': attribute type 4 has an invalid length. [ 1282.471645][T20733] fuse: Bad value for 'fd' [ 1283.520852][T20317] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1283.745430][T20317] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1283.798964][T20317] usb 4-1: config 0 interface 0 has no altsetting 1 [ 1283.881186][T20317] usb 4-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 1283.890434][T20317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1283.951017][T20317] usb 4-1: Product: syz [ 1283.980921][T20317] usb 4-1: Manufacturer: syz [ 1283.985664][T20317] usb 4-1: SerialNumber: syz [ 1284.038440][T20741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1284.052013][T20317] usb 4-1: config 0 descriptor?? [ 1284.112765][T20741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1284.120319][T20741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1284.231626][T20741] bridge0: port 3(batadv0) entered disabled state [ 1284.500004][T20741] batadv0 (unregistering): left allmulticast mode [ 1284.508057][T20741] batadv0 (unregistering): left promiscuous mode [ 1284.518259][T20741] bridge0: port 3(batadv0) entered disabled state [ 1284.545491][T20752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3970'. [ 1284.767658][T20752] syz.3.3970: attempt to access beyond end of device [ 1284.767658][T20752] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1284.903298][T20757] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3971'. [ 1287.000386][T20771] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3972'. [ 1288.567852][T20317] usb 4-1: USB disconnect, device number 22 [ 1288.643586][ T5914] udevd[5914]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1289.590061][T20795] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1290.176687][T20811] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3987'. [ 1290.186010][T20811] openvswitch: netlink: Flow key attr not present in new flow. [ 1291.717739][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 1292.420576][T20836] overlayfs: missing 'lowerdir' [ 1293.500978][T20849] macsec0: entered allmulticast mode [ 1293.506380][T20849] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1293.522499][T20849] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1295.364691][ T5938] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1295.510847][ T5938] usb 2-1: Using ep0 maxpacket: 32 [ 1295.518550][ T5938] usb 2-1: config 0 has an invalid interface number: 184 but max is 11 [ 1295.518584][ T5938] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 12 [ 1295.518608][ T5938] usb 2-1: config 0 has no interface number 0 [ 1295.518674][ T5938] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1295.521461][ T5938] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1295.521493][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.521517][ T5938] usb 2-1: Product: syz [ 1295.521534][ T5938] usb 2-1: Manufacturer: syz [ 1295.521553][ T5938] usb 2-1: SerialNumber: syz [ 1295.525123][ T5938] usb 2-1: config 0 descriptor?? [ 1295.530026][ T5938] smsc75xx v1.0.0 [ 1296.142247][ T5938] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1296.210786][ T5938] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1296.286979][ T5938] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1296.328996][ T5938] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1296.354161][T20897] FAULT_INJECTION: forcing a failure. [ 1296.354161][T20897] name failslab, interval 1, probability 0, space 0, times 0 [ 1296.366919][ T5938] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1296.366962][ T5938] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1296.367269][ T5938] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1296.428802][ T5938] usb 2-1: USB disconnect, device number 5 [ 1296.450968][T20897] CPU: 0 UID: 0 PID: 20897 Comm: syz.1.4014 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 1296.451001][T20897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1296.451015][T20897] Call Trace: [ 1296.451024][T20897] [ 1296.451034][T20897] dump_stack_lvl+0x189/0x250 [ 1296.451067][T20897] ? __pfx____ratelimit+0x10/0x10 [ 1296.451102][T20897] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1296.451140][T20897] ? __pfx__printk+0x10/0x10 [ 1296.451179][T20897] ? __pfx___might_resched+0x10/0x10 [ 1296.451211][T20897] should_fail_ex+0x414/0x560 [ 1296.451247][T20897] should_failslab+0xa8/0x100 [ 1296.451278][T20897] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1296.451306][T20897] ? __alloc_skb+0x112/0x2d0 [ 1296.451338][T20897] __alloc_skb+0x112/0x2d0 [ 1296.451369][T20897] netlink_sendmsg+0x5c6/0xb30 [ 1296.451408][T20897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1296.451440][T20897] ? aa_sock_msg_perm+0x94/0x160 [ 1296.451476][T20897] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1296.451511][T20897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1296.451540][T20897] __sock_sendmsg+0x219/0x270 [ 1296.451574][T20897] ____sys_sendmsg+0x505/0x830 [ 1296.451610][T20897] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1296.451651][T20897] ? import_iovec+0x74/0xa0 [ 1296.451687][T20897] ___sys_sendmsg+0x21f/0x2a0 [ 1296.451719][T20897] ? __pfx____sys_sendmsg+0x10/0x10 [ 1296.451786][T20897] ? __fget_files+0x2a/0x420 [ 1296.451815][T20897] ? __fget_files+0x3a0/0x420 [ 1296.451855][T20897] __x64_sys_sendmsg+0x19b/0x260 [ 1296.451888][T20897] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1296.451928][T20897] ? __pfx_ksys_write+0x10/0x10 [ 1296.451951][T20897] ? rcu_is_watching+0x15/0xb0 [ 1296.451983][T20897] ? do_syscall_64+0xbe/0x3b0 [ 1296.452010][T20897] do_syscall_64+0xfa/0x3b0 [ 1296.452030][T20897] ? lockdep_hardirqs_on+0x9c/0x150 [ 1296.452065][T20897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.452087][T20897] ? clear_bhb_loop+0x60/0xb0 [ 1296.452114][T20897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.452136][T20897] RIP: 0033:0x7f179818e929 [ 1296.452155][T20897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1296.452175][T20897] RSP: 002b:00007f1798fa3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1296.452199][T20897] RAX: ffffffffffffffda RBX: 00007f17983b5fa0 RCX: 00007f179818e929 [ 1296.452216][T20897] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1296.452230][T20897] RBP: 00007f1798fa3090 R08: 0000000000000000 R09: 0000000000000000 [ 1296.452244][T20897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1296.452257][T20897] R13: 0000000000000000 R14: 00007f17983b5fa0 R15: 00007f17984dfa28 [ 1296.452290][T20897] [ 1296.860976][ T8230] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1296.981842][T20904] bridge1: entered promiscuous mode [ 1297.058054][ T8230] usb 4-1: device descriptor read/64, error -71 [ 1297.713346][ T8230] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1297.793756][T20916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.803917][T20916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1297.834360][T20917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4018'. [ 1297.880830][ T8230] usb 4-1: device descriptor read/64, error -71 [ 1298.068846][T20314] IPVS: starting estimator thread 0... [ 1298.091697][ T8230] usb usb4-port1: attempt power cycle [ 1298.182878][T20920] IPVS: using max 36 ests per chain, 86400 per kthread [ 1298.461041][ T8230] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1298.502015][ T8230] usb 4-1: device descriptor read/8, error -71 [ 1298.740806][ T8230] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1298.793280][ T8230] usb 4-1: device descriptor read/8, error -71 [ 1298.951613][ T8230] usb usb4-port1: unable to enumerate USB device [ 1299.280924][T20314] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1299.292889][T20931] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1299.303872][T20317] IPVS: starting estimator thread 0... [ 1299.410941][T20933] IPVS: using max 27 ests per chain, 64800 per kthread [ 1299.431113][T20314] usb 2-1: device descriptor read/64, error -71 [ 1299.675904][T20314] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1299.831534][T20314] usb 2-1: device descriptor read/64, error -71 [ 1299.951321][T20314] usb usb2-port1: attempt power cycle [ 1300.395193][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.493981][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.508719][T20314] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1300.553916][T20314] usb 2-1: device descriptor read/8, error -71 [ 1300.791276][T20314] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1300.841834][T20314] usb 2-1: device descriptor read/8, error -71 [ 1300.956838][T20314] usb usb2-port1: unable to enumerate USB device [ 1301.203233][T20962] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1301.211252][T20962] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1301.641011][T20463] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1301.863732][T20463] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1301.925554][T20463] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1301.987041][T20463] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1302.103104][T20463] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1302.172478][T20463] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.210635][T20463] usb 4-1: config 0 descriptor?? [ 1302.701719][T20463] plantronics 0003:047F:FFFF.0030: reserved main item tag 0xe [ 1302.721255][T20463] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1302.853244][T20463] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1303.105425][T20962] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4033'. [ 1303.690770][T20987] netlink: 'syz.0.4038': attribute type 4 has an invalid length. [ 1304.146908][T20994] dlm: Unknown command passed to DLM device : 16 [ 1304.146908][T20994] [ 1304.232636][T20313] usb 4-1: reset high-speed USB device number 27 using dummy_hcd [ 1304.891033][ T5898] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1304.984648][T21003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1305.055529][T21003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1305.070915][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 1305.088269][ T5898] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1305.170877][ T5898] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 1305.279099][ T5898] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1305.544676][ T5898] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1305.761491][ T5898] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1305.870342][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.107319][ T5898] usb 2-1: Product: syz [ 1306.251155][ T5898] usb 2-1: Manufacturer: syz [ 1306.311851][ T5898] usb 2-1: SerialNumber: syz [ 1306.403168][T21020] netlink: 'syz.2.4050': attribute type 3 has an invalid length. [ 1306.503015][T20317] usb 4-1: USB disconnect, device number 27 [ 1306.946930][ T5898] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 10 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8 [ 1307.011271][ T5898] usb 2-1: USB disconnect, device number 10 [ 1307.484732][ T5898] usblp1: removed [ 1308.246499][T21034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.350267][T21034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1308.521172][T21034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4054'. [ 1308.594747][T21034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4054'. [ 1308.653138][T21036] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1308.792065][T21035] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1309.098126][T21053] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1309.240928][ T5898] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1309.401001][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 1309.416875][ T5898] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.427561][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1309.463000][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1309.481088][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1309.491029][ T5898] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1309.509800][ T5898] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1309.519426][ T5898] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1309.527699][ T5898] usb 3-1: Manufacturer: syz [ 1309.648571][ T5898] usb 3-1: config 0 descriptor?? [ 1310.270994][ T5898] rc_core: IR keymap rc-hauppauge not found [ 1310.277668][ T5898] Registered IR keymap rc-empty [ 1310.286350][ T5898] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1310.311158][ T5898] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1310.332398][ T5898] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1310.395491][ T5898] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input100 [ 1310.483826][ T5898] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1310.558096][ T5898] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1310.651151][ T5898] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1310.758538][T21082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.808158][ T5898] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1310.829052][T21082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.892507][ T5898] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1310.971247][ T5898] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1311.054594][ T5898] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1311.152953][T21082] bond1: entered allmulticast mode [ 1311.158789][T21082] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1311.263438][ T5898] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1311.291336][ T5898] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1311.350885][ T5898] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1311.384411][ T5898] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1311.457994][ T5898] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1311.553641][ T5898] usb 3-1: USB disconnect, device number 16 [ 1311.598358][T21096] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4069'. [ 1311.657120][T21096] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1311.726766][T21096] macsec0: entered allmulticast mode [ 1311.766078][T21096] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1311.849175][T21096] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1311.868495][T21096] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1311.916764][T21100] syz_tun: entered allmulticast mode [ 1311.975341][T21097] syz_tun: left allmulticast mode [ 1314.096839][ T5898] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1314.276164][ T5898] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1314.285148][ T5898] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1314.322803][ T5898] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.340867][ T5898] usb 3-1: config 220 has no interface number 2 [ 1314.390907][ T5898] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1314.442604][ T5898] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1314.459655][ T5898] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1314.486771][ T5898] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1314.512206][ T5898] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1314.521903][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.525068][T21129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1314.534167][ T5898] usb 3-1: Product: syz [ 1314.542675][T21129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1314.599692][ T5898] usb 3-1: Manufacturer: syz [ 1314.609880][ T5898] usb 3-1: SerialNumber: syz [ 1314.734964][T21134] ================================================================== [ 1314.743092][T21134] BUG: KASAN: slab-out-of-bounds in string+0x231/0x2b0 [ 1314.749985][T21134] Read of size 1 at addr ffff88805ba4a0c8 by task syz.3.4078/21134 [ 1314.757894][T21134] [ 1314.760245][T21134] CPU: 1 UID: 0 PID: 21134 Comm: syz.3.4078 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 1314.760275][T21134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1314.760290][T21134] Call Trace: [ 1314.760301][T21134] [ 1314.760312][T21134] dump_stack_lvl+0x189/0x250 [ 1314.760341][T21134] ? __kasan_check_byte+0x12/0x40 [ 1314.760362][T21134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1314.760381][T21134] ? lock_release+0x4b/0x3e0 [ 1314.760409][T21134] ? __virt_addr_valid+0x4a5/0x5c0 [ 1314.760441][T21134] print_report+0xca/0x230 [ 1314.760460][T21134] ? string+0x231/0x2b0 [ 1314.760487][T21134] kasan_report+0x118/0x150 [ 1314.760506][T21134] ? __kasan_check_byte+0x12/0x40 [ 1314.760525][T21134] ? string+0x231/0x2b0 [ 1314.760553][T21134] string+0x231/0x2b0 [ 1314.760584][T21134] vsnprintf+0x739/0xf00 [ 1314.760615][T21134] vprintk_store+0x3c7/0xd00 [ 1314.760645][T21134] ? __pfx_vprintk_store+0x10/0x10 [ 1314.760664][T21134] ? stack_trace_save+0x9c/0xe0 [ 1314.760686][T21134] ? __pfx_stack_trace_save+0x10/0x10 [ 1314.760714][T21134] ? __is_module_percpu_address+0x28/0x3f0 [ 1314.760743][T21134] ? __lock_acquire+0xab9/0xd20 [ 1314.760777][T21134] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1314.760820][T21134] vprintk_emit+0x21e/0x7a0 [ 1314.760841][T21134] ? __pfx_vprintk_emit+0x10/0x10 [ 1314.760860][T21134] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1314.760890][T21134] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1314.760932][T21134] _printk+0xcf/0x120 [ 1314.760960][T21134] ? __pfx____ratelimit+0x10/0x10 [ 1314.760990][T21134] ? __pfx__printk+0x10/0x10 [ 1314.761013][T21134] ? __flush_work+0xd2/0xbc0 [ 1314.761038][T21134] ? __flush_work+0xa5b/0xbc0 [ 1314.761068][T21134] nfacct_mt_checkentry+0xd2/0xe0 [ 1314.761094][T21134] xt_check_match+0x3d1/0xab0 [ 1314.761123][T21134] ? __pfx___flush_work+0x10/0x10 [ 1314.761149][T21134] ? __pfx_xt_check_match+0x10/0x10 [ 1314.761173][T21134] ? __pfx___might_resched+0x10/0x10 [ 1314.761198][T21134] ? nft_pernet+0x23/0x240 [ 1314.761230][T21134] ? nft_pernet+0x23/0x240 [ 1314.761259][T21134] ? nft_pernet+0x23/0x240 [ 1314.761292][T21134] __nft_match_init+0x63a/0x840 [ 1314.761312][T21134] ? __pfx___nft_match_init+0x10/0x10 [ 1314.761345][T21134] ? rcu_is_watching+0x15/0xb0 [ 1314.761374][T21134] ? trace_kmalloc+0x1f/0xd0 [ 1314.761399][T21134] ? nf_tables_newrule+0x1506/0x2890 [ 1314.761430][T21134] nf_tables_newrule+0x178c/0x2890 [ 1314.761462][T21134] ? __pfx_nf_tables_newrule+0x10/0x10 [ 1314.761485][T21134] ? nfnl_pernet+0x23/0x240 [ 1314.761522][T21134] ? __nla_parse+0x40/0x60 [ 1314.761548][T21134] nfnetlink_rcv+0x1132/0x2520 [ 1314.761596][T21134] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1314.761625][T21134] ? __lock_acquire+0xab9/0xd20 [ 1314.761664][T21134] ? netlink_deliver_tap+0x2e/0x1b0 [ 1314.761692][T21134] ? netlink_deliver_tap+0x2e/0x1b0 [ 1314.761720][T21134] netlink_unicast+0x759/0x8e0 [ 1314.761748][T21134] netlink_sendmsg+0x805/0xb30 [ 1314.761771][T21134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1314.761822][T21134] ? aa_sock_msg_perm+0x94/0x160 [ 1314.761858][T21134] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1314.761890][T21134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1314.761913][T21134] __sock_sendmsg+0x219/0x270 [ 1314.761930][T21134] ____sys_sendmsg+0x505/0x830 [ 1314.761954][T21134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1314.761990][T21134] ? import_iovec+0x74/0xa0 [ 1314.762017][T21134] ___sys_sendmsg+0x21f/0x2a0 [ 1314.762047][T21134] ? __pfx____sys_sendmsg+0x10/0x10 [ 1314.762088][T21134] ? __fget_files+0x2a/0x420 [ 1314.762111][T21134] ? __fget_files+0x3a0/0x420 [ 1314.762148][T21134] __x64_sys_sendmsg+0x19b/0x260 [ 1314.762177][T21134] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1314.762212][T21134] ? rcu_is_watching+0x15/0xb0 [ 1314.762232][T21134] ? do_syscall_64+0xbe/0x3b0 [ 1314.762249][T21134] do_syscall_64+0xfa/0x3b0 [ 1314.762265][T21134] ? lockdep_hardirqs_on+0x9c/0x150 [ 1314.762302][T21134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.762324][T21134] ? clear_bhb_loop+0x60/0xb0 [ 1314.762347][T21134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.762368][T21134] RIP: 0033:0x7fa337f8e929 [ 1314.762384][T21134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1314.762400][T21134] RSP: 002b:00007fa338de7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1314.762421][T21134] RAX: ffffffffffffffda RBX: 00007fa3381b5fa0 RCX: 00007fa337f8e929 [ 1314.762439][T21134] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1314.762456][T21134] RBP: 00007fa338010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1314.762470][T21134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1314.762483][T21134] R13: 0000000000000000 R14: 00007fa3381b5fa0 R15: 00007fa3382dfa28 [ 1314.762506][T21134] [ 1314.762516][T21134] [ 1315.229713][T21134] Allocated by task 21134: [ 1315.234159][T21134] kasan_save_track+0x3e/0x80 [ 1315.238865][T21134] __kasan_kmalloc+0x93/0xb0 [ 1315.243474][T21134] __kmalloc_noprof+0x27a/0x4f0 [ 1315.248373][T21134] nf_tables_newrule+0x1506/0x2890 [ 1315.253540][T21134] nfnetlink_rcv+0x1132/0x2520 [ 1315.258335][T21134] netlink_unicast+0x759/0x8e0 [ 1315.263119][T21134] netlink_sendmsg+0x805/0xb30 [ 1315.267902][T21134] __sock_sendmsg+0x219/0x270 [ 1315.272600][T21134] ____sys_sendmsg+0x505/0x830 [ 1315.277392][T21134] ___sys_sendmsg+0x21f/0x2a0 [ 1315.282089][T21134] __x64_sys_sendmsg+0x19b/0x260 [ 1315.287048][T21134] do_syscall_64+0xfa/0x3b0 [ 1315.291569][T21134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.297484][T21134] [ 1315.299821][T21134] The buggy address belongs to the object at ffff88805ba4a080 [ 1315.299821][T21134] which belongs to the cache kmalloc-cg-96 of size 96 [ 1315.313989][T21134] The buggy address is located 0 bytes to the right of [ 1315.313989][T21134] allocated 72-byte region [ffff88805ba4a080, ffff88805ba4a0c8) [ 1315.328508][T21134] [ 1315.330848][T21134] The buggy address belongs to the physical page: [ 1315.337278][T21134] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5ba4a [ 1315.346053][T21134] memcg:ffff88804cd9c001 [ 1315.350318][T21134] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1315.357460][T21134] page_type: f5(slab) [ 1315.361553][T21134] raw: 00fff00000000000 ffff88801a449640 ffffea00012a8940 dead000000000006 [ 1315.370160][T21134] raw: 0000000000000000 0000000080200020 00000000f5000000 ffff88804cd9c001 [ 1315.378856][T21134] page dumped because: kasan: bad access detected [ 1315.385293][T21134] page_owner tracks the page as allocated [ 1315.391022][T21134] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5862, tgid 5862 (syz-executor), ts 95688183733, free_ts 95688069190 [ 1315.410322][T21134] post_alloc_hook+0x240/0x2a0 [ 1315.415124][T21134] get_page_from_freelist+0x21e4/0x22c0 [ 1315.420712][T21134] __alloc_frozen_pages_noprof+0x181/0x370 [ 1315.426556][T21134] alloc_pages_mpol+0x232/0x4a0 [ 1315.431431][T21134] allocate_slab+0x8a/0x3b0 [ 1315.435969][T21134] ___slab_alloc+0xbfc/0x1480 [ 1315.440673][T21134] __kvmalloc_node_noprof+0x429/0x5f0 [ 1315.446083][T21134] nf_hook_entries_grow+0x27c/0x710 [ 1315.451316][T21134] __nf_register_net_hook+0x2c9/0x930 [ 1315.456801][T21134] nf_register_net_hook+0xb2/0x190 [ 1315.461946][T21134] nf_register_net_hooks+0x44/0x1b0 [ 1315.467165][T21134] ebt_register_table+0xd05/0x10e0 [ 1315.472300][T21134] find_inlist_lock_noload+0x180/0x270 [ 1315.477783][T21134] do_ebt_get_ctl+0x25d/0x1c50 [ 1315.482658][T21134] nf_getsockopt+0x26b/0x290 [ 1315.487285][T21134] ip_getsockopt+0x1c4/0x220 [ 1315.491893][T21134] page last free pid 5862 tgid 5862 stack trace: [ 1315.498237][T21134] __free_frozen_pages+0xc71/0xe70 [ 1315.503382][T21134] kasan_populate_vmalloc+0x118/0x1a0 [ 1315.508790][T21134] alloc_vmap_area+0xd51/0x1490 [ 1315.513696][T21134] __get_vm_area_node+0x1f8/0x300 [ 1315.518842][T21134] __vmalloc_node_range_noprof+0x301/0x12f0 [ 1315.524766][T21134] vmalloc_noprof+0xb2/0xf0 [ 1315.529294][T21134] ebt_register_table+0x231/0x10e0 [ 1315.534430][T21134] find_inlist_lock_noload+0x180/0x270 [ 1315.539920][T21134] do_ebt_get_ctl+0x25d/0x1c50 [ 1315.544979][T21134] nf_getsockopt+0x26b/0x290 [ 1315.549699][T21134] ip_getsockopt+0x1c4/0x220 [ 1315.554311][T21134] do_sock_getsockopt+0x35d/0x650 [ 1315.559357][T21134] __x64_sys_getsockopt+0x1a5/0x250 [ 1315.564590][T21134] do_syscall_64+0xfa/0x3b0 [ 1315.569111][T21134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.575027][T21134] [ 1315.577369][T21134] Memory state around the buggy address: [ 1315.583016][T21134] ffff88805ba49f80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 1315.591100][T21134] ffff88805ba4a000: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1315.599184][T21134] >ffff88805ba4a080: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 1315.607259][T21134] ^ [ 1315.613698][T21134] ffff88805ba4a100: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 1315.621789][T21134] ffff88805ba4a180: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1315.629865][T21134] ================================================================== [ 1315.637952][T21134] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1315.645169][T21134] CPU: 1 UID: 0 PID: 21134 Comm: syz.3.4078 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 1315.657251][T21134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1315.667321][T21134] Call Trace: [ 1315.670617][T21134] [ 1315.673573][T21134] dump_stack_lvl+0x99/0x250 [ 1315.678215][T21134] ? __asan_memcpy+0x40/0x70 [ 1315.682835][T21134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1315.688055][T21134] ? __pfx__printk+0x10/0x10 [ 1315.692687][T21134] panic+0x2db/0x790 [ 1315.696606][T21134] ? __pfx_panic+0x10/0x10 [ 1315.701059][T21134] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1315.706992][T21134] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1315.713361][T21134] ? print_memory_metadata+0x314/0x400 [ 1315.718854][T21134] ? string+0x231/0x2b0 [ 1315.723041][T21134] check_panic_on_warn+0x89/0xb0 [ 1315.728065][T21134] ? string+0x231/0x2b0 [ 1315.732248][T21134] end_report+0x78/0x160 [ 1315.736521][T21134] kasan_report+0x129/0x150 [ 1315.741055][T21134] ? __kasan_check_byte+0x12/0x40 [ 1315.746193][T21134] ? string+0x231/0x2b0 [ 1315.750384][T21134] string+0x231/0x2b0 [ 1315.754480][T21134] vsnprintf+0x739/0xf00 [ 1315.758750][T21134] vprintk_store+0x3c7/0xd00 [ 1315.763370][T21134] ? __pfx_vprintk_store+0x10/0x10 [ 1315.768505][T21134] ? stack_trace_save+0x9c/0xe0 [ 1315.773388][T21134] ? __pfx_stack_trace_save+0x10/0x10 [ 1315.778789][T21134] ? __is_module_percpu_address+0x28/0x3f0 [ 1315.784632][T21134] ? __lock_acquire+0xab9/0xd20 [ 1315.789545][T21134] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1315.795129][T21134] vprintk_emit+0x21e/0x7a0 [ 1315.799674][T21134] ? __pfx_vprintk_emit+0x10/0x10 [ 1315.804730][T21134] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1315.810663][T21134] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1315.817074][T21134] _printk+0xcf/0x120 [ 1315.821097][T21134] ? __pfx____ratelimit+0x10/0x10 [ 1315.826156][T21134] ? __pfx__printk+0x10/0x10 [ 1315.830788][T21134] ? __flush_work+0xd2/0xbc0 [ 1315.835415][T21134] ? __flush_work+0xa5b/0xbc0 [ 1315.840125][T21134] nfacct_mt_checkentry+0xd2/0xe0 [ 1315.845183][T21134] xt_check_match+0x3d1/0xab0 [ 1315.849900][T21134] ? __pfx___flush_work+0x10/0x10 [ 1315.854961][T21134] ? __pfx_xt_check_match+0x10/0x10 [ 1315.860184][T21134] ? __pfx___might_resched+0x10/0x10 [ 1315.865498][T21134] ? nft_pernet+0x23/0x240 [ 1315.869948][T21134] ? nft_pernet+0x23/0x240 [ 1315.874387][T21134] ? nft_pernet+0x23/0x240 [ 1315.878842][T21134] __nft_match_init+0x63a/0x840 [ 1315.883722][T21134] ? __pfx___nft_match_init+0x10/0x10 [ 1315.889138][T21134] ? rcu_is_watching+0x15/0xb0 [ 1315.893931][T21134] ? trace_kmalloc+0x1f/0xd0 [ 1315.898635][T21134] ? nf_tables_newrule+0x1506/0x2890 [ 1315.904045][T21134] nf_tables_newrule+0x178c/0x2890 [ 1315.909195][T21134] ? __pfx_nf_tables_newrule+0x10/0x10 [ 1315.914688][T21134] ? nfnl_pernet+0x23/0x240 [ 1315.919227][T21134] ? __nla_parse+0x40/0x60 [ 1315.923663][T21134] nfnetlink_rcv+0x1132/0x2520 [ 1315.928476][T21134] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1315.933640][T21134] ? __lock_acquire+0xab9/0xd20 [ 1315.938534][T21134] ? netlink_deliver_tap+0x2e/0x1b0 [ 1315.943769][T21134] ? netlink_deliver_tap+0x2e/0x1b0 [ 1315.948997][T21134] netlink_unicast+0x759/0x8e0 [ 1315.953789][T21134] netlink_sendmsg+0x805/0xb30 [ 1315.958589][T21134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1315.963908][T21134] ? aa_sock_msg_perm+0x94/0x160 [ 1315.968876][T21134] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1315.974197][T21134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1315.979503][T21134] __sock_sendmsg+0x219/0x270 [ 1315.984207][T21134] ____sys_sendmsg+0x505/0x830 [ 1315.989005][T21134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1315.994409][T21134] ? import_iovec+0x74/0xa0 [ 1315.998937][T21134] ___sys_sendmsg+0x21f/0x2a0 [ 1316.003651][T21134] ? __pfx____sys_sendmsg+0x10/0x10 [ 1316.008899][T21134] ? __fget_files+0x2a/0x420 [ 1316.013525][T21134] ? __fget_files+0x3a0/0x420 [ 1316.018238][T21134] __x64_sys_sendmsg+0x19b/0x260 [ 1316.023206][T21134] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1316.028703][T21134] ? rcu_is_watching+0x15/0xb0 [ 1316.033494][T21134] ? do_syscall_64+0xbe/0x3b0 [ 1316.038195][T21134] do_syscall_64+0xfa/0x3b0 [ 1316.042719][T21134] ? lockdep_hardirqs_on+0x9c/0x150 [ 1316.047967][T21134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.054145][T21134] ? clear_bhb_loop+0x60/0xb0 [ 1316.058851][T21134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.064768][T21134] RIP: 0033:0x7fa337f8e929 [ 1316.069201][T21134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1316.088837][T21134] RSP: 002b:00007fa338de7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1316.097283][T21134] RAX: ffffffffffffffda RBX: 00007fa3381b5fa0 RCX: 00007fa337f8e929 [ 1316.105276][T21134] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1316.113277][T21134] RBP: 00007fa338010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1316.121268][T21134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1316.129519][T21134] R13: 0000000000000000 R14: 00007fa3381b5fa0 R15: 00007fa3382dfa28 [ 1316.137559][T21134] [ 1316.140942][T21134] Kernel Offset: disabled [ 1316.145286][T21134] Rebooting in 86400 seconds..