last executing test programs: 7.891039453s ago: executing program 4 (id=1892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000e22000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000e24000/0x3000)=nil, &(0x7f0000e20000/0xb000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) r1 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x8, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x10, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x4c040, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r3) read$dsp(r4, &(0x7f00000002c0)=""/4087, 0xff7) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) brk(0x400000ffc000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000001f0000540000000e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xfc, r6, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5}, 0x20004000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x0) 7.870782326s ago: executing program 0 (id=1893): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800012000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) 7.655675487s ago: executing program 0 (id=1894): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa10901, 0x0, '\x00', @p_u8=&(0x7f0000000180)}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2403000900040102e0ffffc8fd0000000000000008000340003d00000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4040100}, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0x2) r3 = syz_io_uring_setup(0x21ce, &(0x7f0000000080)={0x0, 0x0, 0x8000}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_UNLINKAT={0x24, 0x53, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x200, 0x0, {0x0, r6}}) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) pwrite64(r2, &(0x7f00000003c0)="6175e53883047f9c8682f4bab97a3cff4643257af7740888c2f6eacb3bc9161f0635d3bf7f44f094280acb2ec09ca437a5cb5ebc45ba7ee3d4f3d3f6ea7b6f5d58c6819e70775dc15e05adfec189d077acc87933ee9e0f739af8c75feffc", 0x5e, 0xffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x8417f, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x2000001) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 7.52057862s ago: executing program 4 (id=1896): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x5f31, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x43f1, 0x4) 7.211693765s ago: executing program 2 (id=1897): r0 = socket(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x2c020400) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @empty=0xffffffff}, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc0000000800000005000000a1000000090000005d4541990d25b4287d88cfff260b328cb2e5e81f3acaf01a625d33ca8dada12713bb3fc69458eb907dd654720595dab34757408615529752b7bb3a6a542fff185c53307dfc947baedf81e1e3907b373b5f20a3f7e4a40af7311d7b2e309d2ba17dde312571312c384067cb9d6a0646b92d5aa0acf79d1d321e619253afe1adafe6125130f74f7e9c2858d546fcad515801653f34c9ac3a896de47d4cfb3d21eeef8a8ecfbb643c59b625a4aaa2ec2373c1a4a72f7e2a5435e6732645c47ec4f30cd6ff95b0e01c9b60b471f2c6e452685ff4ba5ef7e4bc2597fe1703b60241258f041676ab748cdba1ed17cb7c90c22b2300"/532], 0x214) 7.110840225s ago: executing program 4 (id=1898): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0xcd0, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xca0, 0x2, [@TCA_BASIC_ACT={0xc9c, 0x3, [@m_ct={0xcc, 0x10, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x1}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_LABELS_MASK={0x14, 0x8, "79d774b4f72e9dbe9c84cea07b8486f2"}]}, {0x7f, 0x6, "aed237f24f0882a4126efa9f6c1acd46ec0705584fde42335fe0d8fd3acdbcdc42c36c9c59f933cc34f4d60ed139716a1474a10c1872adf90637ac36b8e1e6a21d8704988bcd737ab3e846480783bdb9bf0a9f130f3ff6951a5597511b7a1155718f91353990b8264758340933a213a187ac274bb5524144689a36"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_bpf={0x114, 0xc, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xe0, 0x6, "85a99b37b922b4ca48c660a52b6c1fd43aeed98cb37f27b36f15116b3972bb81bac473758abeafc3d2d5c354b510fb2aae96bd38921df078282ca787e6aa9b183a6ff7d8f14a68818dac519ff469d3d096c73a66ba2f16d9880846b915592244b1fd1a844fcc138c0e4a3688d0b13e840549d1065776a7bdb77045dea99b0b88c4a3a5bea31823a644484cf5fe03c38d2a119c1baecf6a943d3d2dd95686d201871651a3677c54c138688ffbde39f92fcff0e367494337e0d3d275fff6839cad4e4b0f5a06ed522fd2a4cae9647a73d06057c699c17d70e70cda5a07"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x120, 0x1c, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x8001, 0x10000000, 0x5, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fffffff, 0x2, 0x5, 0x100}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xfffff801, 0x1, 0x5, 0x6}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x2, 0x6, 0x2, 0x5}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x400, 0x1, 0x0, 0x80000001, 0x80}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xff, 0x81, 0x2, 0x5, 0xfd}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x401, 0x1, 0x1, 0xb}, 0x0, r1}}]}, {0x12, 0x6, "d7193f2eb4c2a1c173da68373920"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x130, 0xb, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x2, 0x0, 0x94b, 0x8}, @remote, @multicast2, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xe0d, 0x4, 0x8, 0x3}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}]}, {0xb8, 0x6, "a94721b179668f53d674071e5cbaf80f891e08b14fc1e6c11ce9c2c07ada686c88cfa6757e42ca019824dfd365d1cceffe67d0ffdbab379570c428cec9284b181e3dfe180ce52c4186f6bb7283cb5825aa311a754544b485e9b218861a657c164f2fd8ef4405ae49867d8c442ed91898a0b3c19d26e1c20139069725392fbef4e71f02696228f4e54cc824671e18fea7446e8cc1987ed7edb8b3a902e386afdc25d6a594c0de956054c8d1fdeaa293b405718192"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x17c, 0x20, 0x0, 0x0, {{0xc}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PRIORITY={0x8}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x80000000, 0x3, 0xfc, 0x200}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0xf}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x0, 0x6, 0x12d}}]}, {0xe7, 0x6, "52b6a1f4ef60b38e203970352568ae9902465290a66c22712642f3f505adfd16f1d8c586254b7b8f687e296e4349ccc49ac260b3d074b6c2a19e289c5f9aee5604e64896a9c68927073572e2b7931044a162df62db815e588233e3968895e1b07ef39e8dea040bf9bc05f7f5304b969adec532c7760b4d4158b71647329320a8070e18b7d748de4292337ea578a0a9042207f2362323e9438809112751389ecbfc5dda7dfec9fcbcae3236b872fe77afd45300f704b3cfbedd754fb8cd81e4396c7c4f883b8dbed3dc07055284eee874d3452c7a45066af32e1fa026a2ebfc20ce9f92"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x124, 0x0, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x15fa, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xbeb}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x13ab, 0x8}}]}, {0xd2, 0x6, "1396783037266363196972a798884128cbb68bff43d873d8ea560f6c2a11baac3b63bc0c2e18b6b3eb7b1f0d31c807933b1dd827e0879c6e6c7fa846c9e526e78416fa3234cb45b4bfd1dae3a94db65b6de76e204a08d306cba2a442a43150a5ffaab12c4492754d065bd5b466a3563d24cdebf5bd794dc0ccfa7602e7e4e7d09fce00291ed812832f2124a028f13b23b11417f13e577670a13228e1b7be2ef4dc9af1f70a1de6bf340648f465db8bd835eea65d366827891680ed79fe58991069818f1b1da540bc629c63d309b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_ife={0x164, 0x6, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x1000}, @IFE_META_PRIO={0x8, 0x3, @val=0x7f}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x9, 0x4, 0x8000, 0x4e8}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0xf5, 0x6, "d0ae9effaa2945d54b414b0b0ac53cc311a9160c1eb99d6fb8ed94fccc91049714d9b9941a638c484078054c26cb48a7520b682932026275e9b2e3ee9b31f46f6a2fe590eaf4e666db11a0cb5e1ddec4e7d606d2db2a43a6b6d2dfc9b2b8b0c4a33fc156055eeb94576904ee62d2ba016907560228547f9bc616a2371eb0ec796de0de379c726a99bf1dccac15835fd8ab2d64326bf955706a68c95ae08835c78cba379a14a844b6dacd2441f9a037c1ee63e123181be1f2eae2ce576c5a3b49dac0777d3f368f69323fbe9d0f35eb77e0f4cff9954c0ec94e444289f639c1cf6d5b0209cd83696f2a613f89dff79e474e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_nat={0x1a0, 0xf, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x3, 0x20000000, 0x8, 0x8}, @local, @rand_addr=0x64010102, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x0, 0x4, 0x8, 0x16bb}, @broadcast, @dev={0xac, 0x14, 0x14, 0xb}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x3, 0x20000000, 0x6, 0xfffffff8}, @rand_addr=0x64010100, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7f, 0x5, 0x5, 0x7, 0x6a4d}, @broadcast, @multicast1, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x9, 0x6, 0x4, 0x1ff}, @remote, @rand_addr=0x64010102, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa1, 0x6, 0x3, 0x9, 0x4}, @multicast2, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x81, 0x8, 0xffffffffffffffff, 0x7, 0x7}, @multicast1, @multicast2}}]}, {0x60, 0x6, "eb1a099984f43a4109ca1e3e329acdaea74a8d53e78f33624aa0c2ef4696a7ef2ba3febc4e87df82924cf829162c8186077199a03c27726f6a01eae516f79151ea332e42f5765cbeee1fb9682e4ae44d9d3cb86cdb7ac496e8fbacbd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x214, 0x15, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffff0000, 0x0, 0x20000000, 0x3, 0x7}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3a}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf, 0x4, 0x4, 0x9, 0x200}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xe}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x82c1, 0x0, 0x0, 0x8}, @empty, @empty}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x2, 0x8, 0x6b, 0xe1b}, @dev={0xac, 0x14, 0x14, 0x13}, @remote, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x9, 0x2, 0xffff, 0x6}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x1, 0xffffffffffffffff, 0x0, 0xd}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffff00}}]}, {0xf9, 0x6, "496ba68a4f156c308672a55722b4dbff22d9324845e4c005c5a94189e9556bb5a921ca58e9f36a4990ca68ec63331c9f4d4a1c8fa80a96a3a4015fbc1f1824665f73b2254a46f4642e0de91b2b589dc889b8e5f138e4f921e699f3feafc3252d2c3f612ffda8a37f158c24f67fc417a2dee576c6b17545ce583ea1608de3e4d4346111c012a339033cc2cd08625e235c2564b32b0ce8b564ce30c0f2006ea96d0ca2a6ddd6f61d553dde0cab728eab2444825132b0f1aa1a6908eab760f2534ac7ffa6d13c9d122c3b5a9a9afa7f311517b02029b2172e58b545a6386ee78d356eae428130438ea93c9e36c44bbf47fc1524d1fe81"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0xb0, 0xa, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x7f, 0x7, 0x0, 0x8001}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xf8d, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x5, 0x7, 0x2, 0x4}}]}, {0x47, 0x6, "a61ea261d23967b8009d277e7783b56d5df43d1aec0374f4b54a73a1e18de4e2a8e0e67b9a256116fc89f118a017d215ddeb5415ed0095cf7c9cb4bc5dc88c4cd71a79"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0xcd0}}, 0x2000c800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.841926744s ago: executing program 1 (id=1899): ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x3, 'netpci0\x00', {0x1}, 0x4}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) (async) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r1, 0x58, &(0x7f00000000c0)}, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x28b2, 0x63f5, 0x40, &(0x7f0000000340)={[0x7]}, 0x8) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r6, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) (async) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r8, &(0x7f0000000200)='m', 0x1) r9 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x80010, 0xffffffffffffffff, 0x0) (async) r10 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r10, 0xc0844123, &(0x7f0000000180)=0x1) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r4, 0x3b8d, &(0x7f0000000c40)={0x20, r7, 0x0}) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe}, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e74"], 0x0) (async) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) (async) syz_usb_connect$uac1(0x3, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0}) (async) syz_emit_ethernet(0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="e6260a8b0180c200000e0180c2000001080500e40fd617a9122c330e"], &(0x7f0000000040)={0x1, 0x2, [0x9f5, 0xba8, 0xc81, 0xb48]}) 6.794358374s ago: executing program 4 (id=1900): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000025342610ac05dfab493d010203010902120001000000000904000100fffd01"], 0x0) request_key(0x0, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) sched_rr_get_interval(r3, &(0x7f0000000200)) landlock_restrict_self(r2, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004540)={0x18, 0x3d, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@generic="c237a410"]}, 0x18}}, 0xc000) unshare(0x3a000100) fsmount(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 6.299181587s ago: executing program 1 (id=1902): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x9, 0x0, 0x28) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20004000) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x2000, 0x1000, 0x0, 0xfffffffd}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4007, @fd=r3, 0x1ff, 0x0, 0x0, 0xe, 0x0, {0x3}}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) r7 = fsopen(&(0x7f0000000380)='pvfs2\x00', 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsetxattr$security_capability(r7, &(0x7f0000000040), &(0x7f00000001c0)=@v3={0x3000000, [{0x1, 0x6}, {0x6, 0x80}]}, 0x18, 0x2) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, 0x0, &(0x7f0000000100)='::.:\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r9], 0x30}}, 0x0) syz_clone(0x400a0000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 6.226605087s ago: executing program 2 (id=1903): syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaa0008ff"], 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x8) syz_80211_join_ibss(&(0x7f0000001b00)='wlan0\x00', &(0x7f0000001b40)=@default_ibss_ssid, 0x6, 0x2) close(0xffffffffffffffff) 4.972432627s ago: executing program 2 (id=1905): r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) wait4(0x0, &(0x7f0000000000), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x4b0, 0x98, 0x0, 0x248, 0x358, 0x358, 0x418, 0x418, 0x418, 0x418, 0x418, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3f}, @loopback, 0xff, 0xffffff00, 'ip6gre0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x33, 0x1, 0xa}, 0x0, 0xd8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x0, [0x7, 0x1, 0x1, 0x4, 0x1d], 0x0, 0x6}}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x0, 'macvlan1\x00', 'rose0\x00', {}, {}, 0x0, 0x0, 0x1d}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x102}, 0x1c) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) socket$kcm(0x29, 0x2, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0}], 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x70}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r8, 0x0, 0x0, 0xad}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r8}) 4.573936935s ago: executing program 1 (id=1906): r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x2, 0x1) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000180)=0x8000000000000001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x3ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x4e1, &(0x7f0000000100)={0x0, 0x8619, 0x10100, 0xfffffffe, 0x9}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x468b, 0xfb96, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x110003) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x10010, 0xffffffffffffffff, 0x562af000) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r10) ptrace$setopts(0x4200, r10, 0x4, 0x300003) r11 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) ftruncate(r11, 0x0) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r12, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r12, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r12, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_ABS_SETUP(r13, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0x8, 0x4, 0x5, 0x52}}) 4.30550091s ago: executing program 3 (id=1907): r0 = fsopen(&(0x7f0000000000)='nfsd\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0xd8e}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7c, &(0x7f00000000c0)={r3}, &(0x7f0000000400)=0x8) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r3, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffffffffffff9}) syz_emit_ethernet(0xe, &(0x7f00000000c0)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) remap_file_pages(&(0x7f00009e5000/0x4000)=nil, 0x4000, 0xf, 0xbba5, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd600a84513a140601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5059000090780000"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000000104010800000000004000000500000908000440000000050500010001000000"], 0x24}, 0x1, 0x0, 0x0, 0x24040000}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001800010025bd700000000000020000200100fe030008000008000400", @ANYRES32=0x0, @ANYBLOB="2e8dfd2cafccdca5125250a86c3f0934a6aa77ce3138fbb8fe4eadaa3337887e10ebd5400bc0e657ad0bb1076dd096c204765e0e339daeb85636e29453db65675d07b73228d850ce61da850f44dac210f99c77427d2bdfccc808fdf5daef05b7f5c632c165d3ffdc16aead205618a470e51f3130217b849ac778bb973ff7dbc7e383b193ccdd2e7cfaad735ae5e017e605e42457f7c0f57aa3f186f0836575c2740484d968c30ac220d05d661f00af78dd076798e6c27a13379a10272c8cb35afccd1e59190000ae0770adb89fbb24978ebb74ff386a89d3914908a1f22ada85"], 0x24}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x0, 'syz0\x00', 0x31}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a400000000010104000000000000000002000000380001801400018008000100ac1e000108000200e00000010c00028005000100000000001400018008000100e0000001080002000a010101240002800c000280050001000000000014000180080001000000000008000200e00000020800074000000000080008400000000008001540f2e700001c0018"], 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3.792988816s ago: executing program 2 (id=1909): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000000000007311320000000000166400000000010095007400000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb) pread64(r2, &(0x7f0000000400)=""/154, 0x9a, 0x51) pipe2$watch_queue(0x0, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) fcntl$addseals(r4, 0x409, 0xe) ftruncate(r4, 0x8000000) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x2b0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) keyctl$negate(0xd, 0x0, 0x8, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) 3.700695118s ago: executing program 0 (id=1910): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0xcd0, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xca0, 0x2, [@TCA_BASIC_ACT={0xc9c, 0x3, [@m_ct={0xcc, 0x10, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x1}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_LABELS_MASK={0x14, 0x8, "79d774b4f72e9dbe9c84cea07b8486f2"}]}, {0x7f, 0x6, "aed237f24f0882a4126efa9f6c1acd46ec0705584fde42335fe0d8fd3acdbcdc42c36c9c59f933cc34f4d60ed139716a1474a10c1872adf90637ac36b8e1e6a21d8704988bcd737ab3e846480783bdb9bf0a9f130f3ff6951a5597511b7a1155718f91353990b8264758340933a213a187ac274bb5524144689a36"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_bpf={0x114, 0xc, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xe0, 0x6, "85a99b37b922b4ca48c660a52b6c1fd43aeed98cb37f27b36f15116b3972bb81bac473758abeafc3d2d5c354b510fb2aae96bd38921df078282ca787e6aa9b183a6ff7d8f14a68818dac519ff469d3d096c73a66ba2f16d9880846b915592244b1fd1a844fcc138c0e4a3688d0b13e840549d1065776a7bdb77045dea99b0b88c4a3a5bea31823a644484cf5fe03c38d2a119c1baecf6a943d3d2dd95686d201871651a3677c54c138688ffbde39f92fcff0e367494337e0d3d275fff6839cad4e4b0f5a06ed522fd2a4cae9647a73d06057c699c17d70e70cda5a07"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x120, 0x1c, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x8001, 0x10000000, 0x5, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fffffff, 0x2, 0x5, 0x100}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xfffff801, 0x1, 0x5, 0x6}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x2, 0x6, 0x2, 0x5}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x400, 0x1, 0x0, 0x80000001, 0x80}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xff, 0x81, 0x2, 0x5, 0xfd}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x401, 0x1, 0x1, 0xb}, 0x0, r1}}]}, {0x12, 0x6, "d7193f2eb4c2a1c173da68373920"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x130, 0xb, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x2, 0x0, 0x94b, 0x8}, @remote, @multicast2, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xe0d, 0x4, 0x8, 0x3}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}]}, {0xb8, 0x6, "a94721b179668f53d674071e5cbaf80f891e08b14fc1e6c11ce9c2c07ada686c88cfa6757e42ca019824dfd365d1cceffe67d0ffdbab379570c428cec9284b181e3dfe180ce52c4186f6bb7283cb5825aa311a754544b485e9b218861a657c164f2fd8ef4405ae49867d8c442ed91898a0b3c19d26e1c20139069725392fbef4e71f02696228f4e54cc824671e18fea7446e8cc1987ed7edb8b3a902e386afdc25d6a594c0de956054c8d1fdeaa293b405718192"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x17c, 0x20, 0x0, 0x0, {{0xc}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PRIORITY={0x8}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x80000000, 0x3, 0xfc, 0x200}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0xf}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x0, 0x6, 0x12d}}]}, {0xe7, 0x6, "52b6a1f4ef60b38e203970352568ae9902465290a66c22712642f3f505adfd16f1d8c586254b7b8f687e296e4349ccc49ac260b3d074b6c2a19e289c5f9aee5604e64896a9c68927073572e2b7931044a162df62db815e588233e3968895e1b07ef39e8dea040bf9bc05f7f5304b969adec532c7760b4d4158b71647329320a8070e18b7d748de4292337ea578a0a9042207f2362323e9438809112751389ecbfc5dda7dfec9fcbcae3236b872fe77afd45300f704b3cfbedd754fb8cd81e4396c7c4f883b8dbed3dc07055284eee874d3452c7a45066af32e1fa026a2ebfc20ce9f92"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x124, 0x0, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x15fa, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xbeb}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x13ab, 0x8}}]}, {0xd2, 0x6, "1396783037266363196972a798884128cbb68bff43d873d8ea560f6c2a11baac3b63bc0c2e18b6b3eb7b1f0d31c807933b1dd827e0879c6e6c7fa846c9e526e78416fa3234cb45b4bfd1dae3a94db65b6de76e204a08d306cba2a442a43150a5ffaab12c4492754d065bd5b466a3563d24cdebf5bd794dc0ccfa7602e7e4e7d09fce00291ed812832f2124a028f13b23b11417f13e577670a13228e1b7be2ef4dc9af1f70a1de6bf340648f465db8bd835eea65d366827891680ed79fe58991069818f1b1da540bc629c63d309b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_ife={0x164, 0x6, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x1000}, @IFE_META_PRIO={0x8, 0x3, @val=0x7f}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x9, 0x4, 0x8000, 0x4e8}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0xf5, 0x6, "d0ae9effaa2945d54b414b0b0ac53cc311a9160c1eb99d6fb8ed94fccc91049714d9b9941a638c484078054c26cb48a7520b682932026275e9b2e3ee9b31f46f6a2fe590eaf4e666db11a0cb5e1ddec4e7d606d2db2a43a6b6d2dfc9b2b8b0c4a33fc156055eeb94576904ee62d2ba016907560228547f9bc616a2371eb0ec796de0de379c726a99bf1dccac15835fd8ab2d64326bf955706a68c95ae08835c78cba379a14a844b6dacd2441f9a037c1ee63e123181be1f2eae2ce576c5a3b49dac0777d3f368f69323fbe9d0f35eb77e0f4cff9954c0ec94e444289f639c1cf6d5b0209cd83696f2a613f89dff79e474e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_nat={0x1a0, 0xf, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x3, 0x20000000, 0x8, 0x8}, @local, @rand_addr=0x64010102, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x0, 0x4, 0x8, 0x16bb}, @broadcast, @dev={0xac, 0x14, 0x14, 0xb}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x3, 0x20000000, 0x6, 0xfffffff8}, @rand_addr=0x64010100, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7f, 0x5, 0x5, 0x7, 0x6a4d}, @broadcast, @multicast1, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x9, 0x6, 0x4, 0x1ff}, @remote, @rand_addr=0x64010102, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa1, 0x6, 0x3, 0x9, 0x4}, @multicast2, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x81, 0x8, 0xffffffffffffffff, 0x7, 0x7}, @multicast1, @multicast2}}]}, {0x60, 0x6, "eb1a099984f43a4109ca1e3e329acdaea74a8d53e78f33624aa0c2ef4696a7ef2ba3febc4e87df82924cf829162c8186077199a03c27726f6a01eae516f79151ea332e42f5765cbeee1fb9682e4ae44d9d3cb86cdb7ac496e8fbacbd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x214, 0x15, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffff0000, 0x0, 0x20000000, 0x3, 0x7}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3a}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf, 0x4, 0x4, 0x9, 0x200}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xe}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x82c1, 0x0, 0x0, 0x8}, @empty, @empty}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x2, 0x8, 0x6b, 0xe1b}, @dev={0xac, 0x14, 0x14, 0x13}, @remote, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x9, 0x2, 0xffff, 0x6}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x1, 0xffffffffffffffff, 0x0, 0xd}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffff00}}]}, {0xf9, 0x6, "496ba68a4f156c308672a55722b4dbff22d9324845e4c005c5a94189e9556bb5a921ca58e9f36a4990ca68ec63331c9f4d4a1c8fa80a96a3a4015fbc1f1824665f73b2254a46f4642e0de91b2b589dc889b8e5f138e4f921e699f3feafc3252d2c3f612ffda8a37f158c24f67fc417a2dee576c6b17545ce583ea1608de3e4d4346111c012a339033cc2cd08625e235c2564b32b0ce8b564ce30c0f2006ea96d0ca2a6ddd6f61d553dde0cab728eab2444825132b0f1aa1a6908eab760f2534ac7ffa6d13c9d122c3b5a9a9afa7f311517b02029b2172e58b545a6386ee78d356eae428130438ea93c9e36c44bbf47fc1524d1fe81"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0xb0, 0xa, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x7f, 0x7, 0x0, 0x8001}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xf8d, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x5, 0x7, 0x2, 0x4}}]}, {0x47, 0x6, "a61ea261d23967b8009d277e7783b56d5df43d1aec0374f4b54a73a1e18de4e2a8e0e67b9a256116fc89f118a017d215ddeb5415ed0095cf7c9cb4bc5dc88c4cd71a79"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0xcd0}}, 0x2000c800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.363032265s ago: executing program 1 (id=1911): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000002000)={0x8, {"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", 0x1000}}, 0xfbb1fad8c32f63b) syz_usb_connect(0x0, 0x2d, &(0x7f0000001500)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x3c, 0x0, &(0x7f0000000000)) 3.090875714s ago: executing program 4 (id=1912): ioprio_set$pid(0x2, 0x0, 0x6000) io_setup(0x3, &(0x7f00000001c0)=0x0) r1 = eventfd2(0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x314, 0xa4, 0x138, 0xfeffffff, 0xa4, 0x1dc, 0x280, 0x280, 0xffffffff, 0x280, 0x280, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, '\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x10, @dev={0xac, 0x14, 0x14, 0x3c}, @private=0xa010100, @icmp_id=0x64, @port=0x4e20}}}}, {{@ip={@private, @broadcast, 0x0, 0xff, 'pimreg0\x00', 'syzkaller0\x00'}, 0x0, 0x70, 0x94, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x1dc}}, {{@uncond, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x0, 0x0, 0x6}, {0x0, 0x4}, {0x3, 0x1, 0x5}, 0x23f5, 0xfffffcbc}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x370) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001"], 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x1000001c}) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x8000006, 0x0, 0x1}) io_submit(r0, 0x1, &(0x7f0000002200)=[&(0x7f0000000040)={0x40000000, 0x0, 0x30, 0x1, 0x1a5, r1, 0x0, 0x0, 0x1, 0x0, 0x1, r1}]) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000080)={{0x5}, 0x0, 0x9, 0x3, {0x7, 0x6}, 0x4}) r6 = shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_INFO(r6, 0xe, &(0x7f00000003c0)=""/44) epoll_create(0x8) 3.040894604s ago: executing program 0 (id=1913): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xc2, 0x42, 0x7a, 0x20, 0x46d, 0x960, 0xa5af, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6f, 0x35, 0x1f}}]}}]}}, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2800, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xfffffffc}, 0xd0, 0x9}}) 2.479786121s ago: executing program 2 (id=1914): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x14, 0x5, 0xd}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000008002"]) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f0000000400)={0x4, &(0x7f0000000380)=[{0xd, 0xf9, &(0x7f0000000040)="489b45a589de5207481ec1cd851e580f168b75ce909cd53653de9b0eedafb821f98dc369d9b15032f8bba35e4bfb802ea49fdba759bd890eba29e0373633aeea6395bbaa8a8f5cc87a98261f2555f4861fb9f7752c26166d34422e0ec2ebd384ad34d4db038f773561efbdd29b0ae9ddcc0e59b1357855693db7fab1ffb5be012f02f86d1ba98cd36280afea28959d513dd11822a4a321ef5dac9989c8ed085e4f2f86b0611571da8eb5e7f73f20275a9055e3dbe9b6ae8964b264c6683a1d51369ca2c24a83d6c46c310599021ce326051e7e99b293d345d75b391f99bbdebfc3c122f241f30b7da16aa5d3136da99bf677566d29e81734f1", 0x1}, {0xed3, 0x11, &(0x7f0000000140)="887a6dd191b399f5eb3fe62fd6e70cd203", 0x0, 0x1}, {0x86, 0xce, &(0x7f0000000180)="aeb8fdad2852407bd5b75b83d0def629407e3033dd22d8eab0d7a3d10f262e987664517612f7fa1b7c7419abac70cc64187478d3a2dcc5556557ab93e89a7ed40afcba3ff6fc6f88f16aac15a9a3adf0fc1aaebba4fbf9b308da6a92619d00cd5df1fd2ce5805836b4068c8532690fe54bc02d1122abc01fc43cd2dc4104087a4edf569f8dc56fda98b10a778fa501eb2b9e174949ae0b73343e0d7809e3605dd53fd8e805c700843c183ea5bf239982fdd5eb0dc9a184693fb128be640a1f50886694e5b3e5e7770c929ce04a75", 0x0, 0x1}, {0x8, 0xc4, &(0x7f0000000280)="533180991c091f46a803d1a1c7aee8b82bd884d3a51e952b41d93ec2212c6a410bfd7923cef4245a958fb6da590922b75207c6f42e5b9ec224ebd3ccd9e374ecfd6a3a41db7fd79d5e2c83f91622d488624727e012aaf700f14a02649b35e631cbc8dc7aa3ea47643fb1fca844f3ba819852a0ce97bf2419a84da180ad0d0b60a424db949cf656156284086e32baa2c9954ceb30f2aca7b675dc20b14d2dabab875e960405b8a33d49c22e53066be09f2cd88c2783b332a21d3da43c886edd129a8edeb7", 0x1, 0x1}]}) unshare(0x20000400) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x24e380, 0x0) flock(r3, 0x1) getdents64(r3, 0x0, 0x0) 2.259850272s ago: executing program 2 (id=1915): bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev}, @CTA_NAT_PROTO={0x4}]}]}, 0x6c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r2, 0x80000000004, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0x8000, '\x00', @p_u16=&(0x7f00000000c0)=0xfffe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="28000000030601020000000200fdffffffffff0205000100070000000900020073797a32"], 0x28}, 0x1, 0x0, 0x0, 0x4c814}, 0x40814) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001ec0)={'ip6gretap0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 2.255246426s ago: executing program 3 (id=1916): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="4b979fc5100000dd46b001fe944e827bf253fea454", 0x15}, {&(0x7f0000000180)="e3", 0x1}, {&(0x7f00000002c0)="d8fa34", 0x3}], 0x3}}], 0x1, 0x24008804) sendmmsg$alg(r1, &(0x7f0000003b80)=[{0xf0ffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}], 0x1, 0x10) 2.102653132s ago: executing program 3 (id=1917): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4bfa, &(0x7f0000000180)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37ffff7, 0x4012011, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = fanotify_init(0x202, 0x0) fanotify_mark(r3, 0x1, 0x48000013, r1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20042, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x631083, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x800, 0x0, 0x103, 0x1}, 0x20) r6 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x3, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0x4204}}) syz_memcpy_off$IO_URING_METADATA_FLAGS(r7, 0x118, &(0x7f0000000040)=0x1, 0x0, 0x4) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, 0x0, 0x0) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) 2.088600097s ago: executing program 4 (id=1918): syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047d"], 0x0) r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) epoll_create(0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) socket$packet(0x11, 0x2, 0x300) fcntl$notify(r5, 0x402, 0x80000006) syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, 0x0) syz_usb_disconnect(r0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000040)={'pim6reg0\x00', {0x2, 0x0, @remote}}) r7 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) syz_usb_disconnect(r0) close_range(r7, 0xffffffffffffffff, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_expedited', 0x0, 0xa0) read$FUSE(r8, &(0x7f0000000300)={0x2020}, 0x2020) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r9, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @remote}, 0x1c) 1.279969818s ago: executing program 1 (id=1919): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$dsp(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) wait4(0x0, &(0x7f0000000000), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x4b0, 0x98, 0x0, 0x248, 0x358, 0x358, 0x418, 0x418, 0x418, 0x418, 0x418, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3f}, @loopback, 0xff, 0xffffff00, 'ip6gre0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x33, 0x1, 0xa}, 0x0, 0xd8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x0, [0x7, 0x1, 0x1, 0x4, 0x1d], 0x0, 0x6}}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x0, 'macvlan1\x00', 'rose0\x00', {}, {}, 0x0, 0x0, 0x1d}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x102}, 0x1c) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) socket$kcm(0x29, 0x2, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0}], 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x70}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r8, 0x0, 0x0, 0xad}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r8}) 852.802727ms ago: executing program 3 (id=1921): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0xa, @sliced={0x1, [0x4, 0x7, 0x7, 0xc, 0x6, 0x1, 0x4, 0x2, 0xc46d, 0x6, 0x200, 0x4, 0xe5, 0x80, 0xa104, 0x400, 0x6e, 0xea, 0x400, 0xd, 0x8, 0x7f, 0x3, 0x7ff, 0x0, 0x3ff, 0x77, 0x3, 0xfe34, 0x9b1a, 0x0, 0x4c4d, 0x7, 0x4000, 0x85, 0x5, 0x1, 0x3ff, 0x0, 0x5da4, 0x4, 0x7f, 0xffff, 0x2, 0x9, 0x8, 0x4, 0x81], 0x2}}) syz_open_dev$vbi(0x0, 0x2, 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x3, 0x1, &(0x7f0000002900)="9e", 0x1, 0x205a, 0x1ff, 0x0, 0x96c, 0x6, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) clock_adjtime(0x6, &(0x7f0000000000)={0x80000001, 0x3, 0x37, 0xae, 0xa9, 0x17d3, 0x0, 0x2cbf, 0x1, 0x7, 0x5, 0x3, 0x4, 0x401, 0x5, 0x1, 0xfffffffffffffff7, 0x7, 0x1, 0x1, 0x6, 0x8, 0xfffffffffffffffb, 0xa, 0x1, 0x3}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) 835.959168ms ago: executing program 1 (id=1922): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10010, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000190c0), 0x121381, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, "4bad89600716799a64be0304000000cddf00"}) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) write(r4, &(0x7f0000000640)='u', 0x1) r5 = syz_open_pts(r4, 0x0) r6 = dup(r5) read$FUSE(r6, &(0x7f0000004400)={0x2020}, 0x2020) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') socket$pppl2tp(0x18, 0x1, 0x1) read$FUSE(r7, &(0x7f00000001c0)={0x2020}, 0x2020) sendmsg$SMC_PNETID_GET(r0, 0x0, 0x800) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) 43.017842ms ago: executing program 3 (id=1923): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xa00965, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x86400, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000080)=0x7) r4 = syz_usb_connect(0x2, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd3619204433f0224def010203010902400001020000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000001380)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000306"], 0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000014001a80100004800c00058008"], 0x34}}, 0x0) 0s ago: executing program 0 (id=1924): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$6lowpan_enable(r2, &(0x7f0000000200)='0', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0x7, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x7, 0x4, 0x0, 0x700, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x2, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x87, 0x10000, 0x7785, 0x0, 0x4, 0x1, 0x8, 0x0, 0xffffffffeffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000002000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000000080)=0x800002, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e23, 0x200, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8df}}}, 0xa0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000240)=r8) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1, r8}) kernel console output (not intermixed with test programs): skipping garbage [ 477.184114][ T7350] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 477.200961][ T7350] cdc_wdm 3-1:1.0: Unknown control protocol [ 477.390191][ T7350] usb 3-1: USB disconnect, device number 44 [ 477.574353][T10903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1296'. [ 477.585911][T10903] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 477.593867][T10903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.775734][T10908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1290'. [ 478.020499][ T5990] usb 5-1: USB disconnect, device number 45 [ 478.072423][ T43] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 478.412335][ T43] usb 2-1: device descriptor read/64, error -71 [ 478.683252][ T43] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 478.882332][ T43] usb 2-1: device descriptor read/64, error -71 [ 478.972347][ T7350] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 478.992776][ T43] usb usb2-port1: attempt power cycle [ 479.132542][ T7350] usb 5-1: Using ep0 maxpacket: 8 [ 479.142619][ T7350] usb 5-1: unable to get BOS descriptor or descriptor too short [ 479.153177][ T7350] usb 5-1: config 4 interface 0 has no altsetting 0 [ 479.164792][ T7350] usb 5-1: string descriptor 0 read error: -22 [ 479.171351][ T7350] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 479.180587][ T7351] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 479.193233][ T7350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.227008][ T7350] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 479.258943][ T7350] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 479.277995][ T7350] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 479.286164][ T7350] usb 5-1: media controller created [ 479.332345][ T43] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 479.341028][ T7350] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 479.356045][ T7351] usb 1-1: Using ep0 maxpacket: 16 [ 479.363494][ T43] usb 2-1: device descriptor read/8, error -71 [ 479.368458][ T7351] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 479.378051][ T7351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 479.406845][T10918] usb 5-1: dvb_usb_au6610: wlen=151, aborting [ 479.438298][T10918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.453346][T10918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.488951][ T7351] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 479.580785][ T7351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.596418][ T7351] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 479.612698][ T43] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 479.619120][ T7351] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 479.632663][ T7351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.640836][ T7351] usb 1-1: Product: syz [ 479.642941][ T43] usb 2-1: device descriptor read/8, error -71 [ 479.645440][ T7351] usb 1-1: Manufacturer: syz [ 479.656886][ T7351] usb 1-1: SerialNumber: syz [ 479.699835][ T7351] usb 1-1: config 0 descriptor?? [ 479.706550][T10921] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 479.762813][ T43] usb usb2-port1: unable to enumerate USB device [ 479.766840][ T7351] mcba_usb 1-1:0.0 can0: couldn't setup read URBs [ 479.776279][ T7351] mcba_usb 1-1:0.0 can0: couldn't start device: -90 [ 480.003476][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1305'. [ 480.103656][T10931] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 480.111377][T10931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.455060][ T7351] mcba_usb 1-1:0.0: probe with driver mcba_usb failed with error -90 [ 480.626410][ T7350] zl10353_read_register: readreg error (reg=127, ret==0) [ 481.184152][ T5990] usb 1-1: USB disconnect, device number 37 [ 481.255495][T10945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.267291][T10945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.402811][ T43] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 481.572393][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 481.581050][ T43] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 481.589269][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.599402][ T43] usb 2-1: config 0 has no interface number 0 [ 481.605590][ T43] usb 2-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 481.617892][ T43] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 481.628914][ T43] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 481.640189][ T43] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 481.653702][ T43] usb 2-1: config 0 interface 52 has no altsetting 0 [ 481.660454][ T43] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 481.669838][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.682321][ T43] usb 2-1: config 0 descriptor?? [ 481.722887][ T5990] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 481.882417][ T5990] usb 3-1: device descriptor read/64, error -71 [ 481.903114][ T43] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input30 [ 481.969846][ T43] usb 2-1: USB disconnect, device number 58 [ 481.970933][ T5204] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 482.132584][ T5990] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 482.186502][ T30] audit: type=1326 audit(1752283829.357:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.1.1316" exe="/root/syz-executor" sig=31 arch=c000003e syscall=15 compat=0 ip=0x7f981c72ab19 code=0x0 [ 482.272890][ T5990] usb 3-1: device descriptor read/64, error -71 [ 482.383905][ T5990] usb usb3-port1: attempt power cycle [ 482.562526][ T43] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 482.723714][ T5990] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 482.733609][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.744054][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 482.753775][ T5990] usb 3-1: device descriptor read/8, error -71 [ 482.761620][ T43] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 482.770782][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 482.779128][ T43] usb 2-1: SerialNumber: syz [ 482.992387][ T5990] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 483.014055][ T5990] usb 3-1: device descriptor read/8, error -71 [ 483.133311][ T5990] usb usb3-port1: unable to enumerate USB device [ 485.179928][ T43] usb 2-1: 0:2 : does not exist [ 485.189911][ T43] usb 2-1: unit 255 not found! [ 485.213662][ T43] usb 2-1: USB disconnect, device number 59 [ 485.456449][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.853753][ T43] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 486.092435][ T7351] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 486.138835][ T43] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 486.147699][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.180130][ T43] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 486.196347][ T43] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 486.207888][ T43] usb 3-1: Manufacturer: syz [ 486.219322][ T43] usb 3-1: config 0 descriptor?? [ 486.363348][T11012] FAULT_INJECTION: forcing a failure. [ 486.363348][T11012] name failslab, interval 1, probability 0, space 0, times 0 [ 486.380106][T11012] CPU: 1 UID: 0 PID: 11012 Comm: syz.0.1328 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 486.380127][T11012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 486.380135][T11012] Call Trace: [ 486.380141][T11012] [ 486.380147][T11012] dump_stack_lvl+0x189/0x250 [ 486.380168][T11012] ? __pfx____ratelimit+0x10/0x10 [ 486.380187][T11012] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.380201][T11012] ? __pfx__printk+0x10/0x10 [ 486.380229][T11012] ? ref_tracker_alloc+0x318/0x460 [ 486.380250][T11012] should_fail_ex+0x414/0x560 [ 486.380269][T11012] should_failslab+0xa8/0x100 [ 486.380286][T11012] kmem_cache_alloc_noprof+0x73/0x3c0 [ 486.380299][T11012] ? skb_clone+0x212/0x3a0 [ 486.380319][T11012] skb_clone+0x212/0x3a0 [ 486.380338][T11012] __netlink_deliver_tap+0x404/0x850 [ 486.380360][T11012] ? netlink_deliver_tap+0x2e/0x1b0 [ 486.380375][T11012] netlink_deliver_tap+0x19c/0x1b0 [ 486.380391][T11012] netlink_unicast+0x730/0x8e0 [ 486.380411][T11012] netlink_sendmsg+0x805/0xb30 [ 486.380431][T11012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.380447][T11012] ? aa_sock_msg_perm+0x94/0x160 [ 486.380466][T11012] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 486.380487][T11012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.380502][T11012] __sock_sendmsg+0x219/0x270 [ 486.380517][T11012] ____sys_sendmsg+0x505/0x830 [ 486.380536][T11012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 486.380557][T11012] ? import_iovec+0x74/0xa0 [ 486.380573][T11012] ___sys_sendmsg+0x21f/0x2a0 [ 486.380590][T11012] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.380627][T11012] ? __fget_files+0x2a/0x420 [ 486.380642][T11012] ? __fget_files+0x3a0/0x420 [ 486.380664][T11012] __x64_sys_sendmsg+0x19b/0x260 [ 486.380681][T11012] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 486.380702][T11012] ? __pfx_ksys_write+0x10/0x10 [ 486.380715][T11012] ? rcu_is_watching+0x15/0xb0 [ 486.380732][T11012] ? do_syscall_64+0xbe/0x3b0 [ 486.380746][T11012] do_syscall_64+0xfa/0x3b0 [ 486.380756][T11012] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.380775][T11012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.380786][T11012] ? clear_bhb_loop+0x60/0xb0 [ 486.380801][T11012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.380813][T11012] RIP: 0033:0x7f928d98e929 [ 486.380824][T11012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.380835][T11012] RSP: 002b:00007f928e7ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.380849][T11012] RAX: ffffffffffffffda RBX: 00007f928dbb5fa0 RCX: 00007f928d98e929 [ 486.380858][T11012] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 486.380865][T11012] RBP: 00007f928e7ae090 R08: 0000000000000000 R09: 0000000000000000 [ 486.380873][T11012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.380880][T11012] R13: 0000000000000000 R14: 00007f928dbb5fa0 R15: 00007f928dcdfa28 [ 486.380905][T11012] [ 486.712453][ T7351] usb 2-1: Using ep0 maxpacket: 8 [ 487.089450][ T7351] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 487.297428][ T7351] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 487.385973][ T7351] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 487.398652][ T7351] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 487.415985][ T7351] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 487.422619][ T43] rc_core: IR keymap rc-hauppauge not found [ 487.432119][ T7351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.440672][ T43] Registered IR keymap rc-empty [ 487.450588][ T43] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 487.524820][ T43] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input31 [ 487.707640][ C1] igorplugusb 3-1:0.0: receive overflow, at least 31 lost [ 487.860707][ T7351] usb 2-1: GET_CAPABILITIES returned 0 [ 487.921869][ T7351] usbtmc 2-1:16.0: can't read capabilities [ 488.656475][T11027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.702857][T11027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.815780][T11024] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1331'. [ 488.846807][T11024] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 488.953659][T11030] binder: 11029:11030 ioctl c018620b 0 returned -14 [ 489.757931][ T7351] usb 3-1: USB disconnect, device number 49 [ 489.794009][ T980] usb 2-1: USB disconnect, device number 60 [ 490.354873][T11059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.363939][T11059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.372971][T11058] CIFS: VFS: Malformed UNC in devname [ 490.506255][ T43] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 490.805131][ T43] usb 1-1: config 0 has no interfaces? [ 490.812401][ T980] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 490.831008][ T43] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 490.859426][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.890261][ T43] usb 1-1: Product: syz [ 490.900856][ T43] usb 1-1: Manufacturer: syz [ 490.916462][ T43] usb 1-1: SerialNumber: syz [ 491.017912][ T980] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.093846][ T980] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 491.095073][ T43] usb 1-1: config 0 descriptor?? [ 491.227274][ T980] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 491.249446][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 491.327073][ T980] usb 3-1: SerialNumber: syz [ 493.000773][ T980] usb 3-1: 0:2 : does not exist [ 493.012320][ T7351] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 493.033904][ T980] usb 3-1: unit 5: unexpected type 0x0e [ 493.220175][T11075] FAULT_INJECTION: forcing a failure. [ 493.220175][T11075] name failslab, interval 1, probability 0, space 0, times 0 [ 493.245419][ T7351] usb 4-1: config 0 has no interfaces? [ 493.251005][ T7351] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 493.270491][T11075] CPU: 1 UID: 0 PID: 11075 Comm: syz.2.1346 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 493.270517][T11075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 493.270525][T11075] Call Trace: [ 493.270530][T11075] [ 493.270535][T11075] dump_stack_lvl+0x189/0x250 [ 493.270554][T11075] ? __pfx____ratelimit+0x10/0x10 [ 493.270574][T11075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.270589][T11075] ? __pfx__printk+0x10/0x10 [ 493.270614][T11075] should_fail_ex+0x414/0x560 [ 493.270635][T11075] should_failslab+0xa8/0x100 [ 493.270651][T11075] kmem_cache_alloc_noprof+0x73/0x3c0 [ 493.270664][T11075] ? skb_clone+0x212/0x3a0 [ 493.270684][T11075] skb_clone+0x212/0x3a0 [ 493.270702][T11075] __netlink_deliver_tap+0x404/0x850 [ 493.270725][T11075] ? netlink_deliver_tap+0x2e/0x1b0 [ 493.270740][T11075] netlink_deliver_tap+0x19c/0x1b0 [ 493.270755][T11075] netlink_sendskb+0x68/0x140 [ 493.270769][T11075] nfnetlink_rcv+0x2290/0x2520 [ 493.270806][T11075] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 493.270834][T11075] ? ref_tracker_free+0x63a/0x7d0 [ 493.270870][T11075] ? __netlink_deliver_tap+0x807/0x850 [ 493.270894][T11075] ? netlink_deliver_tap+0x2e/0x1b0 [ 493.270907][T11075] ? netlink_deliver_tap+0x2e/0x1b0 [ 493.270925][T11075] netlink_unicast+0x759/0x8e0 [ 493.270944][T11075] netlink_sendmsg+0x805/0xb30 [ 493.270965][T11075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.270981][T11075] ? aa_sock_msg_perm+0x94/0x160 [ 493.271000][T11075] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 493.271018][T11075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.271033][T11075] __sock_sendmsg+0x219/0x270 [ 493.271047][T11075] ____sys_sendmsg+0x505/0x830 [ 493.271066][T11075] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.271088][T11075] ? import_iovec+0x74/0xa0 [ 493.271104][T11075] ___sys_sendmsg+0x21f/0x2a0 [ 493.271121][T11075] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.271166][T11075] ? __fget_files+0x2a/0x420 [ 493.271181][T11075] ? __fget_files+0x3a0/0x420 [ 493.271203][T11075] __x64_sys_sendmsg+0x19b/0x260 [ 493.271220][T11075] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 493.271242][T11075] ? __pfx_ksys_write+0x10/0x10 [ 493.271254][T11075] ? rcu_is_watching+0x15/0xb0 [ 493.271271][T11075] ? do_syscall_64+0xbe/0x3b0 [ 493.271285][T11075] do_syscall_64+0xfa/0x3b0 [ 493.271295][T11075] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.271312][T11075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.271324][T11075] ? clear_bhb_loop+0x60/0xb0 [ 493.271339][T11075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.271349][T11075] RIP: 0033:0x7fc057b8e929 [ 493.271361][T11075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.271372][T11075] RSP: 002b:00007fc058a3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.271386][T11075] RAX: ffffffffffffffda RBX: 00007fc057db5fa0 RCX: 00007fc057b8e929 [ 493.271395][T11075] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 493.271405][T11075] RBP: 00007fc058a3e090 R08: 0000000000000000 R09: 0000000000000000 [ 493.271413][T11075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 493.271420][T11075] R13: 0000000000000000 R14: 00007fc057db5fa0 R15: 00007fc057edfa28 [ 493.271443][T11075] [ 493.754732][ T7347] usb 1-1: USB disconnect, device number 38 [ 493.765377][ T980] usb 3-1: USB disconnect, device number 50 [ 494.002093][ T7351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.048815][ T7351] usb 4-1: config 0 descriptor?? [ 494.126627][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 494.223179][T11088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1350'. [ 496.415499][T11069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.424703][T11069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.510165][ T980] usb 4-1: USB disconnect, device number 44 [ 497.601552][T11140] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 500.684966][T11173] xt_TPROXY: Can be used only with -p tcp or -p udp [ 501.522008][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.530463][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.172286][ T43] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 502.374847][ T43] usb 1-1: config 0 has no interfaces? [ 502.400890][ T43] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 502.757932][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.786494][T11198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.796682][T11198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.940992][ T43] usb 1-1: Product: syz [ 502.950033][ T43] usb 1-1: Manufacturer: syz [ 502.962271][ T43] usb 1-1: SerialNumber: syz [ 503.063838][ T43] usb 1-1: config 0 descriptor?? [ 503.719485][T11188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.779339][T11188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.838492][ T980] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 505.086552][ T980] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 505.133582][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.175516][ T980] usb 3-1: Product: syz [ 505.194010][ T980] usb 3-1: Manufacturer: syz [ 505.209062][ T980] usb 3-1: SerialNumber: syz [ 505.241208][ T980] usb 3-1: config 0 descriptor?? [ 505.255553][ T980] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 505.485869][ T7351] usb 1-1: USB disconnect, device number 39 [ 506.262355][ T43] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 506.425293][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.441903][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.461525][ T43] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 506.481242][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.501598][ T43] usb 2-1: config 0 descriptor?? [ 506.686886][ T5924] kworker/0:5 (5924) used greatest stack depth: 19480 bytes left [ 507.003801][ T30] audit: type=1326 audit(1752283854.167:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11224 comm="syz.1.1386" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f981c78e929 code=0x0 [ 507.597670][ T30] audit: type=1326 audit(1752283854.737:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11224 comm="syz.1.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981c78e929 code=0x7ffc0000 [ 507.635183][ T30] audit: type=1326 audit(1752283854.737:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11224 comm="syz.1.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f981c78e929 code=0x7ffc0000 [ 507.690062][ T30] audit: type=1326 audit(1752283854.737:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11224 comm="syz.1.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981c78e929 code=0x7ffc0000 [ 507.725814][ T7351] usb 3-1: USB disconnect, device number 51 [ 507.875858][ T30] audit: type=1326 audit(1752283854.737:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11224 comm="syz.1.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f981c78e929 code=0x7ffc0000 [ 508.017417][ T30] audit: type=1326 audit(1752283854.747:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11224 comm="syz.1.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981c78e929 code=0x7ffc0000 [ 508.103827][ T30] audit: type=1326 audit(1752283854.747:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11224 comm="syz.1.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f981c78e929 code=0x7ffc0000 [ 508.310874][T11265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1393'. [ 508.320330][T11265] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 508.332421][T11265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.451173][ T30] audit: type=1326 audit(1752283854.747:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11224 comm="syz.1.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981c78e929 code=0x7ffc0000 [ 508.549354][ T30] audit: type=1326 audit(1752283854.747:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11224 comm="syz.1.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f981c78e929 code=0x7ffc0000 [ 508.630186][ T30] audit: type=1326 audit(1752283854.747:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11224 comm="syz.1.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981c78e929 code=0x7ffc0000 [ 510.156882][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 510.167058][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 510.213177][ T43] usb 2-1: USB disconnect, device number 61 [ 510.392306][ T7351] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 510.534525][ T7351] usb 4-1: device descriptor read/64, error -71 [ 510.972780][ T7351] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 511.110273][ T7351] usb 4-1: device descriptor read/64, error -71 [ 511.215582][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1400'. [ 511.225177][T11292] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 511.233351][ T7351] usb usb4-port1: attempt power cycle [ 511.238886][T11292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.822476][ T7351] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 511.882339][ T7351] usb 4-1: device descriptor read/8, error -71 [ 512.112520][ T51] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 512.122941][ T7351] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 512.143057][ T7351] usb 4-1: device descriptor read/8, error -71 [ 512.354685][ T7351] usb usb4-port1: unable to enumerate USB device [ 512.832091][T11302] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 512.840109][T11302] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 512.994078][T11302] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 513.002153][T11302] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 513.319375][T11302] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 513.326628][T11302] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 513.339086][T11302] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 513.453638][T11302] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 513.460120][T11302] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 514.882126][T11326] xt_TPROXY: Can be used only with -p tcp or -p udp [ 514.898329][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 515.022408][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 515.358394][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 515.364557][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 515.503931][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 515.962289][ T43] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 516.317458][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 516.349547][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 516.386607][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 516.481091][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 516.510103][ T43] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 516.519360][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.532108][ T43] usb 1-1: Product: syz [ 516.539462][ T43] usb 1-1: Manufacturer: syz [ 516.545710][ T43] usb 1-1: SerialNumber: syz [ 516.557869][ T43] usb 1-1: config 0 descriptor?? [ 516.566574][ T43] iguanair 1-1:0.0: probe with driver iguanair failed with error -12 [ 516.787161][T11331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.796108][T11331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.943953][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 517.003651][T11343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.084859][T11343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.107013][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 517.191563][ T7351] usb 1-1: USB disconnect, device number 40 [ 517.425050][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 517.622453][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 518.317927][ T43] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 518.418270][T11368] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1421'. [ 518.612449][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 519.058643][T11368] binder: BINDER_SET_CONTEXT_MGR already set [ 519.068087][T11368] binder: 11367:11368 ioctl 4018620d 2000000002c0 returned -16 [ 519.094404][ T43] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 519.112672][ T43] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 519.152309][ T43] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 519.161414][ T43] usb 2-1: config 250 has no interface number 0 [ 519.208837][ T43] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 519.261153][ T43] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 519.346978][ T43] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 519.382272][ T43] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 519.439475][ T43] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 519.542577][ T43] usb 2-1: config 250 interface 228 has no altsetting 0 [ 519.560769][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 519.570910][ T43] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 519.585396][ T43] usb 2-1: Product: syz [ 519.596575][ T43] usb 2-1: SerialNumber: syz [ 519.634576][ T43] hub 2-1:250.228: bad descriptor, ignoring hub [ 519.696179][ T43] hub 2-1:250.228: probe with driver hub failed with error -5 [ 519.950550][ T43] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 62 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 520.261173][T11385] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1424'. [ 520.270559][ T980] usb 2-1: USB disconnect, device number 62 [ 520.291196][ T980] usblp0: removed [ 520.862551][T11399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.871430][T11399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.071461][T11399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.110383][T11399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.189401][T11407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.432382][ T980] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 521.732753][ T980] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 522.011279][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.218183][ T980] usb 3-1: config 0 descriptor?? [ 522.268217][ T980] cp210x 3-1:0.0: cp210x converter detected [ 522.473139][T11404] binder: BINDER_SET_CONTEXT_MGR already set [ 522.479188][T11404] binder: 11403:11404 ioctl 4018620d 200000000040 returned -16 [ 522.497547][ T43] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 522.560231][T11413] tap0: tun_chr_ioctl cmd 1074025677 [ 523.106105][T11413] tap0: linktype set to 825 [ 523.520420][ T980] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 523.531932][ T980] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 523.539135][ T43] usb 2-1: config 0 has no interfaces? [ 523.544718][ T980] usb 3-1: cp210x converter now attached to ttyUSB0 [ 523.547153][ T980] usb 3-1: USB disconnect, device number 52 [ 523.576031][ T43] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 523.599700][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.635982][ T43] usb 2-1: Product: syz [ 523.657200][ T43] usb 2-1: Manufacturer: syz [ 523.672823][ T43] usb 2-1: SerialNumber: syz [ 523.692823][ T980] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 523.707858][ T980] cp210x 3-1:0.0: device disconnected [ 523.727821][ T43] usb 2-1: config 0 descriptor?? [ 524.001543][T11418] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1436'. [ 524.862773][ T43] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 525.003017][ T43] usb 4-1: device descriptor read/64, error -71 [ 525.242425][ T43] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 525.392914][ T43] usb 4-1: device descriptor read/64, error -71 [ 525.519479][ T43] usb usb4-port1: attempt power cycle [ 525.596805][T11446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.652611][T11446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.711763][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1444'. [ 525.743355][T11446] tipc: Enabled bearer , priority 10 [ 525.772686][ T5990] usb 2-1: USB disconnect, device number 63 [ 525.892375][ T43] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 525.933424][ T43] usb 4-1: device descriptor read/8, error -71 [ 526.183437][ T43] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 526.214345][ T43] usb 4-1: device descriptor read/8, error -71 [ 526.302589][ T5990] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 526.332758][ T43] usb usb4-port1: unable to enumerate USB device [ 526.464546][ T5990] usb 3-1: Using ep0 maxpacket: 8 [ 526.484121][ T5990] usb 3-1: config 6 has an invalid interface number: 113 but max is 0 [ 526.492311][ T980] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 526.521852][ T5990] usb 3-1: config 6 has no interface number 0 [ 526.532046][ T5990] usb 3-1: config 6 interface 113 has no altsetting 0 [ 526.563456][ T5990] usb 3-1: New USB device found, idVendor=03f0, idProduct=070c, bcdDevice= 0.00 [ 526.579665][ T5990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.598187][ T5990] usb 3-1: Product: syz [ 526.608626][ T5990] usb 3-1: Manufacturer: syz [ 526.614864][ T43] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 526.631714][ T5990] usb 3-1: SerialNumber: syz [ 526.794676][ T43] usb 1-1: config 0 has no interfaces? [ 526.808071][ T43] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 526.817764][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.828782][ T43] usb 1-1: Product: syz [ 526.833643][ T43] usb 1-1: Manufacturer: syz [ 526.838413][ T43] usb 1-1: SerialNumber: syz [ 526.851805][ T43] usb 1-1: config 0 descriptor?? [ 526.882422][T11466] xt_TPROXY: Can be used only with -p tcp or -p udp [ 526.944855][ T980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.102509][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 527.131544][ T980] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 527.215025][T11470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.235652][T11470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.323447][ T980] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 527.345504][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.872929][ T980] usb 2-1: config 0 descriptor?? [ 527.918468][ T5990] usb-storage 3-1:6.113: USB Mass Storage device detected [ 527.934827][ T5990] usb-storage 3-1:6.113: Quirks match for vid 03f0 pid 070c: 8000 [ 527.970401][ T980] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 527.997804][ T5990] usb 3-1: USB disconnect, device number 53 [ 528.945197][T11494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.963320][T11494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.982012][T11494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.008270][T11494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.031616][T11494] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1448'. [ 529.349886][ T5990] usb 1-1: USB disconnect, device number 41 [ 529.873148][T11500] FAULT_INJECTION: forcing a failure. [ 529.873148][T11500] name failslab, interval 1, probability 0, space 0, times 0 [ 529.950747][T11500] CPU: 1 UID: 0 PID: 11500 Comm: syz.0.1458 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 529.950776][T11500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 529.950788][T11500] Call Trace: [ 529.950795][T11500] [ 529.950804][T11500] dump_stack_lvl+0x189/0x250 [ 529.950833][T11500] ? __pfx____ratelimit+0x10/0x10 [ 529.950863][T11500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 529.950887][T11500] ? __pfx__printk+0x10/0x10 [ 529.950930][T11500] ? __pfx___might_resched+0x10/0x10 [ 529.950958][T11500] should_fail_ex+0x414/0x560 [ 529.950992][T11500] should_failslab+0xa8/0x100 [ 529.951019][T11500] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 529.951043][T11500] ? __alloc_skb+0x112/0x2d0 [ 529.951071][T11500] __alloc_skb+0x112/0x2d0 [ 529.951098][T11500] netlink_sendmsg+0x5c6/0xb30 [ 529.951134][T11500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.951162][T11500] ? aa_sock_msg_perm+0x94/0x160 [ 529.951193][T11500] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 529.951221][T11500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.951244][T11500] __sock_sendmsg+0x219/0x270 [ 529.951266][T11500] ____sys_sendmsg+0x505/0x830 [ 529.951297][T11500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 529.951333][T11500] ? import_iovec+0x74/0xa0 [ 529.951360][T11500] ___sys_sendmsg+0x21f/0x2a0 [ 529.951389][T11500] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.951455][T11500] ? __fget_files+0x2a/0x420 [ 529.951480][T11500] ? __fget_files+0x3a0/0x420 [ 529.951518][T11500] __x64_sys_sendmsg+0x19b/0x260 [ 529.951547][T11500] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 529.951584][T11500] ? __pfx_ksys_write+0x10/0x10 [ 529.951604][T11500] ? rcu_is_watching+0x15/0xb0 [ 529.951633][T11500] ? do_syscall_64+0xbe/0x3b0 [ 529.951657][T11500] do_syscall_64+0xfa/0x3b0 [ 529.951674][T11500] ? lockdep_hardirqs_on+0x9c/0x150 [ 529.951702][T11500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.951722][T11500] ? clear_bhb_loop+0x60/0xb0 [ 529.951747][T11500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.951766][T11500] RIP: 0033:0x7f928d98e929 [ 529.951784][T11500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.951801][T11500] RSP: 002b:00007f928e7ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.951825][T11500] RAX: ffffffffffffffda RBX: 00007f928dbb5fa0 RCX: 00007f928d98e929 [ 529.951839][T11500] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 529.951852][T11500] RBP: 00007f928e7ae090 R08: 0000000000000000 R09: 0000000000000000 [ 529.951864][T11500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.951876][T11500] R13: 0000000000000000 R14: 00007f928dbb5fa0 R15: 00007f928dcdfa28 [ 529.951919][T11500] [ 530.291625][ T5990] usb 2-1: USB disconnect, device number 64 [ 530.712638][ T5990] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 530.864839][ T5990] usb 2-1: device descriptor read/64, error -71 [ 531.123431][ T5990] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 531.267470][ T5990] usb 2-1: device descriptor read/64, error -71 [ 531.349580][T11528] input: syz1 as /devices/virtual/input/input33 [ 531.386737][T11528] program syz.3.1467 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 531.489436][ T5990] usb usb2-port1: attempt power cycle [ 531.862991][ T5990] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 531.893306][ T5990] usb 2-1: device descriptor read/8, error -71 [ 532.052063][T11531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.109915][T11531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.123798][T11531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.136191][T11531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.156815][ T5990] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 532.188996][ T5990] usb 2-1: device descriptor read/8, error -71 [ 532.303834][ T5990] usb usb2-port1: unable to enumerate USB device [ 532.821890][T11533] fuse: root generation should be zero [ 533.568838][T11520] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1465'. [ 533.579298][T11520] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1465'. [ 533.969675][T11551] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1475'. [ 534.349750][T11569] xt_TPROXY: Can be used only with -p tcp or -p udp [ 534.847069][T11567] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1479'. [ 534.848508][T11569] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 535.316707][T11571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.343881][T11571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.783042][T11577] libceph: resolve '0.0' (ret=-3): failed [ 535.835743][T11582] fuse: Invalid rootmode [ 536.047229][T11590] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1489'. [ 537.332287][ T980] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 537.472379][ T7347] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 537.492329][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 537.504451][ T980] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 537.531022][ T980] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 537.550856][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.581906][ T980] usb 2-1: config 0 descriptor?? [ 537.642521][ T7347] usb 3-1: Using ep0 maxpacket: 32 [ 537.650099][ T7347] usb 3-1: config 0 has an invalid interface number: 149 but max is 0 [ 537.663616][ T7347] usb 3-1: config 0 has no interface number 0 [ 537.676879][ T7347] usb 3-1: config 0 interface 149 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 537.685428][T11621] fuse: Invalid rootmode [ 537.692985][ T7347] usb 3-1: config 0 interface 149 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 537.709706][ T7347] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=44.19 [ 537.729346][ T7347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.737886][ T7347] usb 3-1: Product: syz [ 537.742086][ T7347] usb 3-1: Manufacturer: syz [ 537.759358][ T7347] usb 3-1: SerialNumber: syz [ 537.767759][ T7347] usb 3-1: config 0 descriptor?? [ 538.215240][ T43] usb 2-1: USB disconnect, device number 69 [ 538.282320][ T5990] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 538.786792][ T5990] usb 1-1: config 0 has no interfaces? [ 539.182388][ T7347] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 539.400520][ T7347] usb 2-1: config 0 has no interfaces? [ 539.419766][ T7347] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 539.431506][ T7347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.469906][ T5990] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 539.479319][ T5990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.479382][ T7347] usb 2-1: Product: syz [ 539.487901][ T5990] usb 1-1: Product: syz [ 539.508949][ T5990] usb 1-1: Manufacturer: syz [ 539.514085][ T5990] usb 1-1: SerialNumber: syz [ 539.585615][ T5990] usb 1-1: config 0 descriptor?? [ 539.609646][ T7347] usb 2-1: Manufacturer: syz [ 539.635978][ T7347] usb 2-1: SerialNumber: syz [ 539.694803][ T7347] usb 2-1: config 0 descriptor?? [ 540.336699][ T5990] usb 3-1: USB disconnect, device number 54 [ 541.601747][ T5990] usb 1-1: USB disconnect, device number 42 [ 541.873138][T11677] fuse: Bad value for 'rootmode' [ 542.192012][ T7347] usb 2-1: USB disconnect, device number 70 [ 542.933183][T11699] netlink: 14220 bytes leftover after parsing attributes in process `syz.2.1518'. [ 543.362340][ T980] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 543.582461][ T980] usb 4-1: Using ep0 maxpacket: 8 [ 543.590953][ T980] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 543.598741][ T980] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 543.632598][ T980] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 543.675928][ T980] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 543.729065][ T980] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 543.736772][ T980] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 543.810276][ T980] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 543.874672][ T980] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 543.943093][ T980] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 543.952505][ T980] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 543.984498][ T980] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 544.073654][ T980] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 544.096510][ T980] usb 4-1: string descriptor 0 read error: -22 [ 544.103272][ T980] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 544.115292][T11713] fuse: Bad value for 'rootmode' [ 544.124190][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.156358][ T980] adutux 4-1:168.0: interrupt endpoints not found [ 544.605797][T11723] netlink: 368 bytes leftover after parsing attributes in process `syz.1.1525'. [ 544.623628][T11726] syzkaller1: entered promiscuous mode [ 544.632357][T11726] syzkaller1: entered allmulticast mode [ 544.657021][T11714] futex_wake_op: syz.4.1521 tries to shift op by 32; fix this program [ 544.732041][T11726] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 544.988078][T11728] fuse: Bad value for 'fd' [ 546.533676][T11754] fuse: Bad value for 'rootmode' [ 546.701382][T11757] netlink: 'syz.2.1533': attribute type 1 has an invalid length. [ 546.878978][T11764] bond1: entered promiscuous mode [ 546.913318][T11764] bond1: entered allmulticast mode [ 546.921498][T11764] 8021q: adding VLAN 0 to HW filter on device bond1 [ 546.924659][T11757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1533'. [ 547.365431][T11770] FAULT_INJECTION: forcing a failure. [ 547.365431][T11770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.378650][T11770] CPU: 1 UID: 0 PID: 11770 Comm: syz.4.1539 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 547.378669][T11770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 547.378677][T11770] Call Trace: [ 547.378682][T11770] [ 547.378687][T11770] dump_stack_lvl+0x189/0x250 [ 547.378707][T11770] ? __pfx____ratelimit+0x10/0x10 [ 547.378726][T11770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 547.378740][T11770] ? __pfx__printk+0x10/0x10 [ 547.378764][T11770] should_fail_ex+0x414/0x560 [ 547.378785][T11770] _copy_to_user+0x31/0xb0 [ 547.378801][T11770] simple_read_from_buffer+0xe1/0x170 [ 547.378819][T11770] proc_fail_nth_read+0x1df/0x250 [ 547.378839][T11770] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 547.378857][T11770] ? rw_verify_area+0x258/0x650 [ 547.378870][T11770] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 547.378888][T11770] vfs_read+0x200/0x980 [ 547.378905][T11770] ? __pfx___mutex_lock+0x10/0x10 [ 547.378917][T11770] ? __pfx_vfs_read+0x10/0x10 [ 547.378931][T11770] ? __fget_files+0x2a/0x420 [ 547.378949][T11770] ? __fget_files+0x3a0/0x420 [ 547.378968][T11770] ? __fget_files+0x2a/0x420 [ 547.379003][T11770] ksys_read+0x145/0x250 [ 547.379028][T11770] ? __pfx_ksys_read+0x10/0x10 [ 547.379048][T11770] ? rcu_is_watching+0x15/0xb0 [ 547.379071][T11770] ? do_syscall_64+0xbe/0x3b0 [ 547.379085][T11770] do_syscall_64+0xfa/0x3b0 [ 547.379095][T11770] ? lockdep_hardirqs_on+0x9c/0x150 [ 547.379112][T11770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.379124][T11770] ? clear_bhb_loop+0x60/0xb0 [ 547.379138][T11770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.379150][T11770] RIP: 0033:0x7f267d78d33c [ 547.379161][T11770] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 547.379172][T11770] RSP: 002b:00007f267b5f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 547.379186][T11770] RAX: ffffffffffffffda RBX: 00007f267d9b5fa0 RCX: 00007f267d78d33c [ 547.379195][T11770] RDX: 000000000000000f RSI: 00007f267b5f60a0 RDI: 0000000000000004 [ 547.379203][T11770] RBP: 00007f267b5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 547.379210][T11770] R10: 000000000000005c R11: 0000000000000246 R12: 0000000000000001 [ 547.379217][T11770] R13: 0000000000000000 R14: 00007f267d9b5fa0 R15: 00007f267dadfa28 [ 547.379235][T11770] [ 547.728112][ T980] IPVS: starting estimator thread 0... [ 547.904424][T11776] IPVS: using max 28 ests per chain, 67200 per kthread [ 548.166793][T11789] fuse: Unknown parameter 'use00000000000000000000' [ 548.185540][ T43] usb 4-1: USB disconnect, device number 53 [ 548.469434][T11797] CIFS: VFS: Malformed UNC in devname [ 549.333929][T11811] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1554'. [ 549.621511][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1555'. [ 549.631054][T11823] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 549.638865][T11823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.865453][T11828] fuse: Unknown parameter 'use00000000000000000000' [ 550.820538][T11842] netlink: 14220 bytes leftover after parsing attributes in process `syz.1.1558'. [ 551.766081][T11858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.790364][T11858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.824018][T11858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.844887][T11860] xt_ipcomp: unknown flags 12 [ 551.846010][T11858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.868411][T11861] xt_ipcomp: unknown flags 12 [ 551.876367][T11861] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1565'. [ 552.078633][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1564'. [ 552.299151][T11869] fuse: Unknown parameter 'use00000000000000000000' [ 552.863483][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 552.863505][ T30] audit: type=1326 audit(1752283900.037:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11879 comm="syz.4.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f267d72ab19 code=0x7ffc0000 [ 552.952359][ T980] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 553.086024][ T30] audit: type=1326 audit(1752283900.037:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11879 comm="syz.4.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f267d72ab19 code=0x7ffc0000 [ 553.109351][ T30] audit: type=1326 audit(1752283900.037:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11879 comm="syz.4.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f267d72ab19 code=0x7ffc0000 [ 553.132611][ T30] audit: type=1326 audit(1752283900.037:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11879 comm="syz.4.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f267d72ab19 code=0x7ffc0000 [ 553.192479][ T30] audit: type=1326 audit(1752283900.037:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11879 comm="syz.4.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f267d72ab19 code=0x7ffc0000 [ 553.219374][ T980] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 553.229347][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.237961][ T980] usb 2-1: Product: syz [ 553.242128][ T980] usb 2-1: Manufacturer: syz [ 553.242302][ T43] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 553.247276][ T30] audit: type=1326 audit(1752283900.037:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11879 comm="syz.4.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f267d72ab19 code=0x7ffc0000 [ 553.282107][ T980] usb 2-1: SerialNumber: syz [ 553.292765][ T30] audit: type=1326 audit(1752283900.037:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11879 comm="syz.4.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f267d72ab19 code=0x7ffc0000 [ 553.296028][T11884] netlink: 'syz.0.1574': attribute type 30 has an invalid length. [ 553.318323][ T30] audit: type=1326 audit(1752283900.037:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11879 comm="syz.4.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f267d72ab19 code=0x7ffc0000 [ 553.319808][ T980] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 553.360494][ T30] audit: type=1326 audit(1752283900.037:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11879 comm="syz.4.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f267d72ab19 code=0x7ffc0000 [ 553.396595][ T7347] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 553.423806][ T30] audit: type=1326 audit(1752283900.037:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11879 comm="syz.4.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f267d72ab19 code=0x7ffc0000 [ 553.529604][T11884] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.538507][T11884] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.547322][T11884] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.556103][T11884] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.578462][ T43] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 553.615886][T11878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.625097][T11878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.638721][ T43] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 553.680664][ T43] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 553.704965][T11884] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.713993][T11884] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.722978][T11884] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.731880][T11884] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.757184][ T43] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 553.790063][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.830721][T11881] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 553.863634][ T980] usb 2-1: USB disconnect, device number 71 [ 554.259219][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1576'. [ 554.384412][T11893] overlayfs: missing 'lowerdir' [ 554.423537][ T7351] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 554.465400][ T7347] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 554.484080][ T7347] ath9k_htc: Failed to initialize the device [ 554.491461][ T980] usb 2-1: ath9k_htc: USB layer deinitialized [ 554.585716][ T7351] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 554.599700][T11898] kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 554.610525][ T7351] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 62976, setting to 1024 [ 554.638679][ T7351] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 554.659814][ T7351] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 554.673157][ T7351] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 554.673950][ T43] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 554.698577][ T7351] usb 1-1: Product: syz [ 554.706403][ T43] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input34 [ 554.715943][ T7351] usb 1-1: Manufacturer: syz [ 554.732874][ T7351] usb 1-1: SerialNumber: syz [ 554.766126][ T7351] cdc_mbim 1-1:1.0: skipping garbage [ 554.814454][ T43] usb 4-1: USB disconnect, device number 54 [ 554.820458][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 554.967777][T11887] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 555.056997][T11903] fuse: Unknown parameter 'user_i00000000000000000000' [ 555.292815][T11913] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1583'. [ 555.350720][T11915] fuse: Unknown parameter 'user_i00000000000000000000' [ 555.379340][ T7351] cdc_mbim 1-1:1.0: failed GET_NTB_PARAMETERS [ 555.402359][ T7351] cdc_mbim 1-1:1.0: bind() failure [ 555.432377][ T7351] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 555.449478][ T7351] cdc_ncm 1-1:1.1: bind() failure [ 555.629927][T11928] netlink: 356 bytes leftover after parsing attributes in process `syz.1.1588'. [ 555.872299][ T7347] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 556.004176][ T7347] usb 2-1: device descriptor read/64, error -71 [ 556.086244][T11936] xt_TPROXY: Can be used only with -p tcp or -p udp [ 556.184998][T11939] fuse: Unknown parameter 'user_i00000000000000000000' [ 556.273234][ T7347] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 556.415525][ T7347] usb 2-1: device descriptor read/64, error -71 [ 556.480384][T11946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1593'. [ 556.524110][T11936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 556.559165][ T7347] usb usb2-port1: attempt power cycle [ 556.613643][ T7351] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 556.774123][ T7351] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 556.989730][T11950] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 557.052339][ T7347] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 557.124722][ T7347] usb 2-1: device descriptor read/8, error -71 [ 557.179659][ T43] usb 1-1: USB disconnect, device number 43 [ 557.467965][ T7347] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 557.526823][ T7347] usb 2-1: device descriptor read/8, error -71 [ 557.643128][ T7347] usb usb2-port1: unable to enumerate USB device [ 557.791780][T11960] fuse: Unknown parameter 'user_i00000000000000000000' [ 558.125295][T11970] fuse: Unknown parameter 'user_i00000000000000000000' [ 558.260667][T11962] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1599'. [ 558.313456][T11980] netlink: 'syz.4.1601': attribute type 1 has an invalid length. [ 558.377274][T11982] bond1: entered promiscuous mode [ 558.382524][T11982] bond1: entered allmulticast mode [ 558.388605][T11982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 558.403386][T11980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1601'. [ 558.652400][ T7347] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 558.854308][T11988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1605'. [ 558.863601][T11988] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 558.871249][T11988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.922422][ T7347] usb 4-1: Using ep0 maxpacket: 8 [ 559.347388][ T7351] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 559.792902][ T7351] usb 2-1: Using ep0 maxpacket: 16 [ 559.816051][ T7351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.836289][ T7347] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 559.864977][ T7351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.874961][ T7347] usb 4-1: config 179 has no interface number 0 [ 559.907308][ T7347] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 559.927624][ T7351] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 559.952260][ T7347] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 559.968371][ T7351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.002640][ T7347] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 560.015251][ T7351] usb 2-1: config 0 descriptor?? [ 560.043334][ T7347] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 560.058984][ T7347] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 560.072950][ T7347] usb 4-1: config 179 interface 65 has no altsetting 0 [ 560.079852][ T7347] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 560.089640][ T7347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.224674][ T7347] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input35 [ 560.328222][ T43] usb 4-1: USB disconnect, device number 55 [ 560.511529][ T7351] aquacomputer_d5next 0003:0C70:F00A.000C: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.1-1/input0 [ 560.672648][ T7351] usb 2-1: USB disconnect, device number 76 [ 560.760133][T11996] fido_id[11996]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 560.963380][T12006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.981095][T12010] fuse: Unknown parameter 'user_id00000000000000000000' [ 560.998007][T12006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.601000][T12050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1621'. [ 562.956951][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.963511][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.127195][T12065] fuse: Unknown parameter 'user_id00000000000000000000' [ 564.658048][T12075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1631'. [ 564.693166][ T30] kauditd_printk_skb: 860 callbacks suppressed [ 564.693182][ T30] audit: type=1326 audit(1752283911.867:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12080 comm="syz.4.1630" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f267d78e929 code=0x0 [ 564.792484][ T43] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 564.823940][T12082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.838039][T12082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.985429][ T43] usb 4-1: device descriptor read/64, error -71 [ 565.252310][ T43] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 565.492751][ T43] usb 4-1: device descriptor read/64, error -71 [ 565.631710][ T43] usb usb4-port1: attempt power cycle [ 566.052393][ T43] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 566.113105][ T43] usb 4-1: device descriptor read/8, error -71 [ 566.602512][ T43] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 566.667141][ T43] usb 4-1: device descriptor read/8, error -71 [ 566.859839][ T43] usb usb4-port1: unable to enumerate USB device [ 567.662467][T12109] FAULT_INJECTION: forcing a failure. [ 567.662467][T12109] name failslab, interval 1, probability 0, space 0, times 0 [ 567.675546][T12109] CPU: 1 UID: 0 PID: 12109 Comm: syz.3.1636 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 567.675566][T12109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 567.675573][T12109] Call Trace: [ 567.675579][T12109] [ 567.675584][T12109] dump_stack_lvl+0x189/0x250 [ 567.675603][T12109] ? __pfx____ratelimit+0x10/0x10 [ 567.675622][T12109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 567.675637][T12109] ? __pfx__printk+0x10/0x10 [ 567.675662][T12109] should_fail_ex+0x414/0x560 [ 567.675683][T12109] should_failslab+0xa8/0x100 [ 567.675699][T12109] kmem_cache_alloc_noprof+0x73/0x3c0 [ 567.675713][T12109] ? skb_clone+0x212/0x3a0 [ 567.675732][T12109] skb_clone+0x212/0x3a0 [ 567.675751][T12109] __netlink_deliver_tap+0x404/0x850 [ 567.675773][T12109] ? netlink_deliver_tap+0x2e/0x1b0 [ 567.675788][T12109] netlink_deliver_tap+0x19c/0x1b0 [ 567.675803][T12109] netlink_sendskb+0x68/0x140 [ 567.675816][T12109] netlink_rcv_skb+0x28c/0x470 [ 567.675831][T12109] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 567.675846][T12109] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 567.675868][T12109] ? netlink_deliver_tap+0x2e/0x1b0 [ 567.675881][T12109] ? netlink_deliver_tap+0x2e/0x1b0 [ 567.675898][T12109] netlink_unicast+0x759/0x8e0 [ 567.675918][T12109] netlink_sendmsg+0x805/0xb30 [ 567.675938][T12109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.675955][T12109] ? aa_sock_msg_perm+0x94/0x160 [ 567.675974][T12109] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 567.675992][T12109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.676006][T12109] __sock_sendmsg+0x219/0x270 [ 567.676020][T12109] ____sys_sendmsg+0x505/0x830 [ 567.676039][T12109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 567.676060][T12109] ? import_iovec+0x74/0xa0 [ 567.676077][T12109] ___sys_sendmsg+0x21f/0x2a0 [ 567.676094][T12109] ? __pfx____sys_sendmsg+0x10/0x10 [ 567.676134][T12109] ? __fget_files+0x2a/0x420 [ 567.676150][T12109] ? __fget_files+0x3a0/0x420 [ 567.676172][T12109] __x64_sys_sendmsg+0x19b/0x260 [ 567.676189][T12109] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 567.676211][T12109] ? __pfx_ksys_write+0x10/0x10 [ 567.676223][T12109] ? rcu_is_watching+0x15/0xb0 [ 567.676240][T12109] ? do_syscall_64+0xbe/0x3b0 [ 567.676254][T12109] do_syscall_64+0xfa/0x3b0 [ 567.676265][T12109] ? lockdep_hardirqs_on+0x9c/0x150 [ 567.676282][T12109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.676294][T12109] ? clear_bhb_loop+0x60/0xb0 [ 567.676308][T12109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.676319][T12109] RIP: 0033:0x7f3ca498e929 [ 567.676331][T12109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.676341][T12109] RSP: 002b:00007f3ca5849038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.676363][T12109] RAX: ffffffffffffffda RBX: 00007f3ca4bb5fa0 RCX: 00007f3ca498e929 [ 567.676372][T12109] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 567.676379][T12109] RBP: 00007f3ca5849090 R08: 0000000000000000 R09: 0000000000000000 [ 567.676387][T12109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.676394][T12109] R13: 0000000000000000 R14: 00007f3ca4bb5fa0 R15: 00007f3ca4cdfa28 [ 567.676412][T12109] [ 568.256392][T12117] fuse: Unknown parameter 'user_id00000000000000000000' [ 568.761079][T12130] fuse: Unknown parameter 'user_id00000000000000000000' [ 569.238922][T12140] netlink: 'syz.4.1645': attribute type 10 has an invalid length. [ 569.332055][T12140] lo: entered promiscuous mode [ 569.361174][T12140] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 569.408129][T12142] xt_TPROXY: Can be used only with -p tcp or -p udp [ 569.679385][T12146] netlink: 'syz.1.1646': attribute type 12 has an invalid length. [ 569.853036][T12142] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 571.077542][T12169] fuse: Bad value for 'fd' [ 571.271417][T12172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.301434][T12172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.432525][ T7351] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 571.582431][ T7347] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 571.605065][ T7351] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 571.614255][ T7351] usb 4-1: config 1 has no interface number 0 [ 571.620665][ T7351] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.633376][ T7351] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 571.644303][ T7351] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 571.666107][ T7351] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 571.679276][ T7351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.740096][ T7351] usb 4-1: Product: syz [ 571.768648][ T7351] usb 4-1: Manufacturer: syz [ 571.782491][ T7347] usb 3-1: Using ep0 maxpacket: 16 [ 571.788748][ T7351] usb 4-1: SerialNumber: syz [ 571.835550][ T7347] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 571.873025][ T7347] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.886387][ T7347] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 571.900028][ T7347] usb 3-1: config 0 interface 0 has no altsetting 0 [ 571.954773][ T7347] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 571.989724][ T7347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.072389][ T7351] cdc_ncm 4-1:1.1: bind() failure [ 572.087147][ T7351] usb 4-1: USB disconnect, device number 60 [ 572.164504][ T7347] usb 3-1: config 0 descriptor?? [ 573.083813][ T7347] hid-alps 0003:044E:120B.000D: item fetching failed at offset 0/3 [ 573.094724][ T7347] hid-alps 0003:044E:120B.000D: parse failed [ 573.100860][ T7347] hid-alps 0003:044E:120B.000D: probe with driver hid-alps failed with error -22 [ 573.206626][ T7347] usb 3-1: USB disconnect, device number 55 [ 573.595469][T12209] fuse: Bad value for 'fd' [ 573.642437][ T5990] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 573.719369][T12211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.728692][ T7347] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 573.772823][T12211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.802357][ T5990] usb 1-1: Using ep0 maxpacket: 32 [ 573.809679][T12211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.834806][ T5990] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 573.843458][ T5990] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.854384][T12211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.866641][ T5990] usb 1-1: config 0 has no interface number 0 [ 573.866696][ T5990] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 573.870354][ T5990] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 573.870386][ T5990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.870407][ T5990] usb 1-1: Product: syz [ 573.870423][ T5990] usb 1-1: Manufacturer: syz [ 573.870439][ T5990] usb 1-1: SerialNumber: syz [ 573.874126][ T5990] usb 1-1: config 0 descriptor?? [ 573.888489][ T5990] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 573.888582][ T5990] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 573.913003][ T7347] usb 4-1: Using ep0 maxpacket: 16 [ 574.118180][ T7347] usb 4-1: config 0 interface 0 has no altsetting 0 [ 574.126595][ T7347] usb 4-1: New USB device found, idVendor=05ac, idProduct=abdf, bcdDevice=3d.49 [ 574.126628][ T7347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.126648][ T7347] usb 4-1: Product: syz [ 574.126663][ T7347] usb 4-1: Manufacturer: syz [ 574.126674][ T7347] usb 4-1: SerialNumber: syz [ 574.134353][ T7347] usb 4-1: config 0 descriptor?? [ 574.139129][ T5990] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 574.146060][ T7347] ipheth 4-1:0.0: Unable to find endpoints [ 574.849709][ T5990] radio-raremono 1-1:0.35: raremono_cmd_main failed (-71) [ 574.860570][ T5990] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 574.870710][ T5990] usb 1-1: USB disconnect, device number 44 [ 574.878282][ T5990] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 575.150880][T12232] xt_TPROXY: Can be used only with -p tcp or -p udp [ 575.474830][T12236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1671'. [ 575.484195][T12236] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 575.491839][T12236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 575.753650][T12232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 577.519087][ T7347] usb 4-1: USB disconnect, device number 61 [ 578.043528][T12255] fuse: Bad value for 'fd' [ 578.548704][T12269] input: syz1 as /devices/virtual/input/input36 [ 578.579734][T12269] program syz.4.1677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 579.743503][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1683'. [ 579.755596][T12288] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 579.771028][T12288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.630998][T12287] futex_wake_op: syz.1.1685 tries to shift op by 144; fix this program [ 581.426849][T12303] netlink: 14220 bytes leftover after parsing attributes in process `syz.2.1688'. [ 581.683513][T12305] fuse: Unknown parameter '0x0000000000000005' [ 581.712797][T12307] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1690'. [ 583.669430][T12329] netem: change failed [ 583.814421][T12324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.196796][T12344] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1701'. [ 584.394445][T12352] netlink: 14220 bytes leftover after parsing attributes in process `syz.4.1704'. [ 584.397822][T12351] fuse: Unknown parameter '0x0000000000000005' [ 585.096058][T12359] input: syz1 as /devices/virtual/input/input37 [ 585.136764][T12359] program syz.2.1706 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 585.599933][T12367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.620451][T12367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.732783][ T30] audit: type=1326 audit(1752283932.897:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12364 comm="syz.4.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267d78e929 code=0x7ffc0000 [ 585.780235][ T30] audit: type=1326 audit(1752283932.927:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12364 comm="syz.4.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267d78e929 code=0x7ffc0000 [ 586.042586][ T7347] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 586.334223][ T7347] usb 4-1: Using ep0 maxpacket: 16 [ 586.344526][ T7347] usb 4-1: config 2 has an invalid interface number: 203 but max is 3 [ 586.353114][ T7347] usb 4-1: config 2 has an invalid interface number: 8 but max is 3 [ 586.362509][ T7347] usb 4-1: config 2 has an invalid interface number: 187 but max is 3 [ 586.408987][ T7347] usb 4-1: config 2 has an invalid interface number: 152 but max is 3 [ 586.417803][ T7347] usb 4-1: config 2 has an invalid interface number: 141 but max is 3 [ 586.443324][ T7347] usb 4-1: config 2 has 5 interfaces, different from the descriptor's value: 4 [ 586.454544][ T7347] usb 4-1: config 2 has no interface number 0 [ 586.461883][ T7347] usb 4-1: config 2 has no interface number 1 [ 586.485504][T12380] xt_hashlimit: size too large, truncated to 1048576 [ 586.508491][ T7347] usb 4-1: config 2 has no interface number 2 [ 586.561147][ T7347] usb 4-1: config 2 has no interface number 3 [ 586.579613][ T7347] usb 4-1: config 2 has no interface number 4 [ 586.589783][ T7347] usb 4-1: config 2 interface 203 altsetting 1 has an endpoint descriptor with address 0x4A, changing to 0xA [ 586.929750][ T7347] usb 4-1: config 2 interface 203 altsetting 1 endpoint 0xA has invalid maxpacket 21956, setting to 64 [ 587.165835][ T7347] usb 4-1: config 2 interface 203 altsetting 1 endpoint 0xE has an invalid bInterval 130, changing to 7 [ 587.268297][ T7347] usb 4-1: config 2 interface 203 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 587.344205][ T7347] usb 4-1: config 2 interface 8 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 587.374903][ T7347] usb 4-1: config 2 interface 8 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 587.402281][ T7347] usb 4-1: config 2 interface 8 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 587.416853][ T7347] usb 4-1: config 2 interface 8 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 587.450231][ T7347] usb 4-1: config 2 interface 8 altsetting 9 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 587.500621][ T7347] usb 4-1: too many endpoints for config 2 interface 187 altsetting 175: 169, using maximum allowed: 30 [ 587.532252][ T7347] usb 4-1: config 2 interface 187 altsetting 175 has a duplicate endpoint with address 0xE, skipping [ 587.532349][T12388] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1714'. [ 587.562357][ T7347] usb 4-1: config 2 interface 187 altsetting 175 has 2 endpoint descriptors, different from the interface descriptor's value: 169 [ 587.604610][ T7347] usb 4-1: config 2 interface 152 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 587.653707][ T7347] usb 4-1: config 2 interface 152 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 587.690529][ T7347] usb 4-1: config 2 interface 152 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 587.702262][ T7347] usb 4-1: config 2 interface 152 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 587.713327][ T7347] usb 4-1: config 2 interface 152 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 587.729501][ T7347] usb 4-1: config 2 interface 152 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 587.742969][ T7347] usb 4-1: config 2 interface 141 altsetting 3 endpoint 0x1 has invalid maxpacket 1032, setting to 1024 [ 587.768180][ T7347] usb 4-1: config 2 interface 141 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 587.838355][ T7347] usb 4-1: config 2 interface 141 altsetting 3 bulk endpoint 0x88 has invalid maxpacket 1024 [ 587.863490][T12395] fuse: Unknown parameter '0x0000000000000005' [ 587.880546][ T7347] usb 4-1: config 2 interface 141 altsetting 3 bulk endpoint 0x8 has invalid maxpacket 8 [ 587.947157][ T7347] usb 4-1: config 2 interface 141 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 587.996605][ T7347] usb 4-1: config 2 interface 203 has no altsetting 0 [ 588.022567][ T7347] usb 4-1: config 2 interface 8 has no altsetting 0 [ 588.036875][ T7347] usb 4-1: config 2 interface 187 has no altsetting 0 [ 588.057186][ T7347] usb 4-1: config 2 interface 152 has no altsetting 0 [ 588.092059][ T7347] usb 4-1: config 2 interface 141 has no altsetting 0 [ 588.126395][ T7347] usb 4-1: Dual-Role OTG device on HNP port [ 588.133123][ T7347] usb 4-1: New USB device found, idVendor=05c6, idProduct=9274, bcdDevice=1f.d2 [ 588.142275][ T7347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.150438][ T7347] usb 4-1: Product: syz [ 588.154913][ T7347] usb 4-1: Manufacturer: ã Š [ 588.159507][ T7347] usb 4-1: SerialNumber: syz [ 588.463578][ T7347] hub 4-1:2.203: Invalid hub with more than one config or interface [ 588.471636][ T7347] hub 4-1:2.203: probe with driver hub failed with error -22 [ 588.598631][T12407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1721'. [ 588.631431][ T7347] usb 4-1: USB disconnect, device number 62 [ 589.479181][T12428] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1726'. [ 589.572507][ T7347] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 590.014079][ T7347] usb 3-1: config 0 has no interfaces? [ 590.029390][ T7347] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 590.039130][ T7347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.082224][ T7347] usb 3-1: Product: syz [ 590.089426][ T7347] usb 3-1: Manufacturer: syz [ 590.094673][ T7347] usb 3-1: SerialNumber: syz [ 590.106600][ T7347] usb 3-1: config 0 descriptor?? [ 590.247671][T12439] fuse: Unknown parameter '0x0000000000000005' [ 590.357990][T12423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.367664][T12423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.072526][T12445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1731'. [ 591.276107][T12446] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 591.521943][ T7347] usb 3-1: USB disconnect, device number 56 [ 592.248279][T12460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1735'. [ 592.261814][T12460] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 592.271801][T12460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 592.830568][T12466] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1738'. [ 593.155384][ T43] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 593.347860][ T43] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 593.362504][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.429660][T12480] fuse: Unknown parameter '0x0000000000000005' [ 593.446550][ T43] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 593.459958][ T43] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 593.651477][ T43] usb 2-1: Manufacturer: syz [ 593.744856][ T43] usb 2-1: config 0 descriptor?? [ 593.763702][T12484] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1745'. [ 594.203989][ T43] rc_core: IR keymap rc-hauppauge not found [ 594.209967][ T43] Registered IR keymap rc-empty [ 594.253810][ T43] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 594.315268][ T43] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input38 [ 594.374970][ T7347] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 594.457708][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 594.545168][ T43] usb 2-1: USB disconnect, device number 77 [ 594.841755][T12502] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1750'. [ 594.854445][ T7347] usb 3-1: config 0 has no interfaces? [ 594.928201][ T7347] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 594.937508][ T7347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.952427][ T7347] usb 3-1: Product: syz [ 594.964971][ T7347] usb 3-1: Manufacturer: syz [ 594.995012][ T7347] usb 3-1: SerialNumber: syz [ 595.011811][ T7347] usb 3-1: config 0 descriptor?? [ 595.282450][T12491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.321769][T12491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.543151][T12514] fuse: Unknown parameter '0x0000000000000005' [ 595.610010][ T43] usb 3-1: USB disconnect, device number 57 [ 595.740709][T12519] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1756'. [ 595.981954][T12526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.991415][T12526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.001919][T12526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1757'. [ 596.011105][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1757'. [ 596.020095][T12526] netlink: 'syz.4.1757': attribute type 14 has an invalid length. [ 596.028120][T12526] netlink: 'syz.4.1757': attribute type 12 has an invalid length. [ 596.058756][T12526] program syz.4.1757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 596.068432][T12526] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 596.138819][ T30] audit: type=1800 audit(1752283943.307:1931): pid=12525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1758" name="memory.events" dev="tmpfs" ino=1997 res=0 errno=0 [ 597.051621][ T43] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 597.100854][ T43] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 597.510008][T12549] No such timeout policy "syz0" [ 598.426700][T12559] fuse: Unknown parameter 'fd0x0000000000000005' [ 598.636361][T12562] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1768'. [ 598.919244][T12573] xt_TPROXY: Can be used only with -p tcp or -p udp [ 599.180045][T12573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 600.769475][T12601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1778'. [ 601.733515][T12612] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1781'. [ 602.862976][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 602.894010][T12600] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 602.999980][T12626] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1787'. [ 603.431968][T12600] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 603.438899][T12600] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 603.447529][T12600] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 603.454180][T12600] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 603.650620][T12572] block device autoloading is deprecated and will be removed. [ 603.663674][T12572] syz.0.1772: attempt to access beyond end of device [ 603.663674][T12572] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 603.930208][T12640] fuse: Unknown parameter '2d' [ 604.206131][T12646] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1792'. [ 605.053660][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 605.179553][T12667] xt_TPROXY: Can be used only with -p tcp or -p udp [ 605.505901][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 605.505940][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 605.511946][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 606.005394][T12683] FAULT_INJECTION: forcing a failure. [ 606.005394][T12683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.117622][T12683] CPU: 0 UID: 0 PID: 12683 Comm: syz.0.1801 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 606.117654][T12683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 606.117668][T12683] Call Trace: [ 606.117676][T12683] [ 606.117684][T12683] dump_stack_lvl+0x189/0x250 [ 606.117706][T12683] ? __pfx____ratelimit+0x10/0x10 [ 606.117726][T12683] ? __pfx_dump_stack_lvl+0x10/0x10 [ 606.117740][T12683] ? __pfx__printk+0x10/0x10 [ 606.117764][T12683] should_fail_ex+0x414/0x560 [ 606.117786][T12683] _copy_from_user+0x2d/0xb0 [ 606.117801][T12683] vmemdup_user+0x59/0xd0 [ 606.117821][T12683] map_lookup_and_delete_elem+0x33a/0x870 [ 606.117837][T12683] ? bpf_lsm_bpf+0x9/0x20 [ 606.117852][T12683] __sys_bpf+0x4ca/0x860 [ 606.117865][T12683] ? __pfx___sys_bpf+0x10/0x10 [ 606.117883][T12683] ? ksys_write+0x1e1/0x250 [ 606.117899][T12683] ? __pfx_ksys_write+0x10/0x10 [ 606.117911][T12683] ? rcu_is_watching+0x15/0xb0 [ 606.117930][T12683] __x64_sys_bpf+0x7c/0x90 [ 606.117947][T12683] do_syscall_64+0xfa/0x3b0 [ 606.117958][T12683] ? lockdep_hardirqs_on+0x9c/0x150 [ 606.117977][T12683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.117989][T12683] ? clear_bhb_loop+0x60/0xb0 [ 606.118003][T12683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.118014][T12683] RIP: 0033:0x7f928d98e929 [ 606.118026][T12683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.118037][T12683] RSP: 002b:00007f928e78d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 606.118052][T12683] RAX: ffffffffffffffda RBX: 00007f928dbb6080 RCX: 00007f928d98e929 [ 606.118062][T12683] RDX: 0000000000000020 RSI: 0000200000000580 RDI: 0000000000000015 [ 606.118070][T12683] RBP: 00007f928e78d090 R08: 0000000000000000 R09: 0000000000000000 [ 606.118078][T12683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.118085][T12683] R13: 0000000000000000 R14: 00007f928dbb6080 R15: 00007f928dcdfa28 [ 606.118104][T12683] [ 606.322406][ C0] vkms_vblank_simulate: vblank timer overrun [ 606.525923][T12687] openvswitch: netlink: IP tunnel TTL not specified. [ 606.577687][T12691] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1803'. [ 607.090646][ T43] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 607.257456][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 607.268200][ T43] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 124, changing to 10 [ 607.280057][ T43] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 607.299087][ T43] usb 4-1: config 1 interface 0 has no altsetting 0 [ 607.323229][ T43] usb 4-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 607.332612][ T5990] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 607.391319][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.425565][ T43] usb 4-1: Product: syz [ 607.433870][ T43] usb 4-1: Manufacturer: syz [ 607.448270][ T43] usb 4-1: SerialNumber: syz [ 607.593805][ T5990] usb 2-1: config 0 has no interfaces? [ 607.603283][ T5990] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 607.612883][ T5990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.620990][ T5990] usb 2-1: Product: syz [ 607.630384][ T5990] usb 2-1: Manufacturer: syz [ 607.639885][ T5990] usb 2-1: SerialNumber: syz [ 607.692259][T12714] FAULT_INJECTION: forcing a failure. [ 607.692259][T12714] name failslab, interval 1, probability 0, space 0, times 0 [ 607.705899][T12714] CPU: 0 UID: 0 PID: 12714 Comm: syz.4.1810 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 607.705928][T12714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 607.705941][T12714] Call Trace: [ 607.705950][T12714] [ 607.705960][T12714] dump_stack_lvl+0x189/0x250 [ 607.705991][T12714] ? __pfx____ratelimit+0x10/0x10 [ 607.706025][T12714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 607.706051][T12714] ? __pfx__printk+0x10/0x10 [ 607.706087][T12714] ? __pfx___might_resched+0x10/0x10 [ 607.706112][T12714] ? fs_reclaim_acquire+0x7d/0x100 [ 607.706146][T12714] should_fail_ex+0x414/0x560 [ 607.706182][T12714] ? nf_hook_entries_grow+0x27c/0x710 [ 607.706205][T12714] should_failslab+0xa8/0x100 [ 607.706235][T12714] __kvmalloc_node_noprof+0x161/0x5f0 [ 607.706261][T12714] ? nf_hook_entries_grow+0x27c/0x710 [ 607.706292][T12714] nf_hook_entries_grow+0x27c/0x710 [ 607.706334][T12714] __nf_register_net_hook+0x2c9/0x930 [ 607.706371][T12714] nf_register_net_hook+0xb2/0x190 [ 607.706399][T12714] nf_register_net_hooks+0x44/0x1b0 [ 607.706428][T12714] nf_ct_netns_do_get+0x3bf/0x5a0 [ 607.706459][T12714] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 607.706486][T12714] ? __mutex_trylock_common+0x153/0x260 [ 607.706517][T12714] ? __pfx___mutex_trylock_common+0x10/0x10 [ 607.706561][T12714] xt_ct_tg_check+0xf1/0xa90 [ 607.706597][T12714] ? __pfx_xt_ct_tg_check+0x10/0x10 [ 607.706624][T12714] ? xt_find_target+0x1f3/0x240 [ 607.706661][T12714] xt_check_target+0x3c0/0xa90 [ 607.706692][T12714] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 607.706715][T12714] ? __pfx_xt_check_target+0x10/0x10 [ 607.706751][T12714] ? xt_find_match+0xda/0x250 [ 607.706785][T12714] ? xt_find_target+0x1f3/0x240 [ 607.706821][T12714] translate_table+0x1811/0x2000 [ 607.706866][T12714] ? __pfx_translate_table+0x10/0x10 [ 607.706887][T12714] ? __might_fault+0xb0/0x130 [ 607.706925][T12714] ? _copy_from_user+0x94/0xb0 [ 607.706949][T12714] do_ipt_set_ctl+0x967/0xcd0 [ 607.706975][T12714] ? rcu_is_watching+0x15/0xb0 [ 607.706993][T12714] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 607.707031][T12714] ? __pfx___mutex_lock+0x10/0x10 [ 607.707047][T12714] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 607.707062][T12714] ? aa_sk_perm+0x81e/0x950 [ 607.707089][T12714] ? __pfx_aa_sk_perm+0x10/0x10 [ 607.707117][T12714] nf_setsockopt+0x26f/0x290 [ 607.707140][T12714] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 607.707160][T12714] do_sock_setsockopt+0x257/0x3e0 [ 607.707183][T12714] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 607.707207][T12714] ? __fget_files+0x2a/0x420 [ 607.707237][T12714] __x64_sys_setsockopt+0x18b/0x220 [ 607.707263][T12714] do_syscall_64+0xfa/0x3b0 [ 607.707278][T12714] ? lockdep_hardirqs_on+0x9c/0x150 [ 607.707301][T12714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.707317][T12714] ? clear_bhb_loop+0x60/0xb0 [ 607.707337][T12714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.707352][T12714] RIP: 0033:0x7f267d78e929 [ 607.707368][T12714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.707382][T12714] RSP: 002b:00007f267b5b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 607.707400][T12714] RAX: ffffffffffffffda RBX: 00007f267d9b6160 RCX: 00007f267d78e929 [ 607.707413][T12714] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000004 [ 607.707424][T12714] RBP: 00007f267b5b4090 R08: 0000000000000318 R09: 0000000000000000 [ 607.707434][T12714] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 607.707444][T12714] R13: 0000000000000000 R14: 00007f267d9b6160 R15: 00007f267dadfa28 [ 607.707471][T12714] [ 608.067193][ C0] vkms_vblank_simulate: vblank timer overrun [ 608.473729][ T5990] usb 2-1: config 0 descriptor?? [ 608.499014][ T43] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input39 [ 608.548845][ T5204] bcm5974 4-1:1.0: could not read from device [ 608.568682][ T43] usb 4-1: USB disconnect, device number 63 [ 608.642946][ T5204] bcm5974 4-1:1.0: could not read from device [ 608.652071][ T5204] bcm5974 4-1:1.0: could not read from device [ 608.669917][ T5204] bcm5974 4-1:1.0: could not read from device [ 609.023499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.646642][T12721] netlink: 'syz.2.1814': attribute type 9 has an invalid length. [ 609.969499][T12731] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1817'. [ 610.216866][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1818'. [ 610.250388][T12740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.260195][T12740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.314900][ T5938] usb 2-1: USB disconnect, device number 78 [ 610.530335][T12747] fuse: Unknown parameter 'rootm/š^CU-íIode' [ 610.826638][ T5938] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 611.023301][ T5938] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.039204][ T5938] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 611.075307][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.120116][ T5938] usb 2-1: config 0 descriptor?? [ 611.142654][ T43] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 611.177524][ T5938] pwc: Askey VC010 type 2 USB webcam detected. [ 611.345182][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.359384][ T43] usb 1-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 611.385377][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.409178][ T43] usb 1-1: Product: syz [ 611.441664][ T43] usb 1-1: Manufacturer: syz [ 611.454189][ T43] usb 1-1: SerialNumber: syz [ 611.463023][ T43] usb 1-1: config 0 descriptor?? [ 611.510991][ T43] ljca 1-1:0.0: bulk endpoints not found [ 611.572561][ T5938] pwc: recv_control_msg error -32 req 02 val 2b00 [ 611.580423][ T5938] pwc: recv_control_msg error -32 req 02 val 2700 [ 611.591054][ T5938] pwc: recv_control_msg error -32 req 02 val 2c00 [ 611.599530][ T5938] pwc: recv_control_msg error -32 req 04 val 1000 [ 611.608224][T12749] Set syz0 is full, maxelem 0 reached [ 611.616376][ T5938] pwc: recv_control_msg error -32 req 04 val 1300 [ 611.702286][ T5938] pwc: recv_control_msg error -32 req 04 val 1400 [ 611.717863][T12760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.733150][ T5938] pwc: recv_control_msg error -32 req 02 val 2000 [ 611.757565][ T5938] pwc: recv_control_msg error -32 req 02 val 2100 [ 611.772891][T12760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.782976][ T5938] pwc: recv_control_msg error -32 req 04 val 1500 [ 611.814052][ T43] usb 1-1: USB disconnect, device number 45 [ 611.824629][ T5938] pwc: recv_control_msg error -32 req 02 val 2500 [ 612.063977][ T5938] pwc: recv_control_msg error -71 req 02 val 2600 [ 612.122348][ T5938] pwc: recv_control_msg error -71 req 02 val 2900 [ 612.139409][ T5938] pwc: recv_control_msg error -71 req 02 val 2800 [ 612.207825][ T5938] pwc: recv_control_msg error -71 req 04 val 1100 [ 612.217622][ T5938] pwc: recv_control_msg error -71 req 04 val 1200 [ 612.254261][ T5938] pwc: Registered as video103. [ 612.312058][ T5938] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input40 [ 612.401003][ T5938] usb 2-1: USB disconnect, device number 79 [ 612.455099][T12774] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1828'. [ 612.771713][T12783] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 612.803251][T12783] syzkaller1: linktype set to 773 [ 612.896332][T12798] xt_TPROXY: Can be used only with -p tcp or -p udp [ 613.062289][ T7351] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 613.106953][T12802] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 613.245814][T12807] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1838'. [ 613.389910][T12807] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1838'. [ 613.414690][ T7351] usb 4-1: config 0 has no interfaces? [ 613.432021][ T7351] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 613.491137][ T7351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.550441][T12798] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 613.629037][ T5938] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 613.648288][ T7351] usb 4-1: Product: syz [ 613.662572][ T7351] usb 4-1: Manufacturer: syz [ 613.720190][ T7351] usb 4-1: SerialNumber: syz [ 613.746287][ T7351] usb 4-1: config 0 descriptor?? [ 614.007896][ T5938] usb 2-1: config 0 has no interfaces? [ 614.055584][ T5938] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 614.089422][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.090311][T12796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1832'. [ 614.098511][ T5938] usb 2-1: Product: syz [ 614.098530][ T5938] usb 2-1: Manufacturer: syz [ 614.098545][ T5938] usb 2-1: SerialNumber: syz [ 614.108144][ T5938] usb 2-1: config 0 descriptor?? [ 615.208339][T12829] xt_TPROXY: Can be used only with -p tcp or -p udp [ 615.327908][T12829] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 615.451278][T12832] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1843'. [ 615.946327][T12837] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1845'. [ 616.514972][ T7351] usb 2-1: USB disconnect, device number 80 [ 616.675955][ T980] usb 4-1: USB disconnect, device number 64 [ 616.872912][ T5938] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 616.931096][T12859] FAULT_INJECTION: forcing a failure. [ 616.931096][T12859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.948911][T12859] CPU: 1 UID: 0 PID: 12859 Comm: syz.4.1852 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 616.948941][T12859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 616.948954][T12859] Call Trace: [ 616.948962][T12859] [ 616.948971][T12859] dump_stack_lvl+0x189/0x250 [ 616.949002][T12859] ? __pfx____ratelimit+0x10/0x10 [ 616.949031][T12859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 616.949055][T12859] ? __pfx__printk+0x10/0x10 [ 616.949082][T12859] ? __might_fault+0xb0/0x130 [ 616.949117][T12859] should_fail_ex+0x414/0x560 [ 616.949152][T12859] _copy_to_iter+0x3f5/0x16f0 [ 616.949187][T12859] ? __pfx__copy_to_iter+0x10/0x10 [ 616.949205][T12859] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 616.949241][T12859] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 616.949274][T12859] __skb_datagram_iter+0xf8/0x990 [ 616.949305][T12859] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 616.949343][T12859] skb_copy_datagram_iter+0xc5/0x230 [ 616.949377][T12859] netlink_recvmsg+0x2ab/0xa30 [ 616.949412][T12859] ? __pfx_netlink_recvmsg+0x10/0x10 [ 616.949443][T12859] ? aa_sock_msg_perm+0x94/0x160 [ 616.949474][T12859] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 616.949503][T12859] ? security_socket_recvmsg+0x7e/0x2e0 [ 616.949526][T12859] ? __pfx_netlink_recvmsg+0x10/0x10 [ 616.949552][T12859] sock_recvmsg+0x229/0x270 [ 616.949578][T12859] ____sys_recvmsg+0x1c9/0x460 [ 616.949615][T12859] ? __pfx_____sys_recvmsg+0x10/0x10 [ 616.949669][T12859] ? import_iovec+0x74/0xa0 [ 616.949698][T12859] ___sys_recvmsg+0x1b5/0x510 [ 616.949732][T12859] ? __pfx____sys_recvmsg+0x10/0x10 [ 616.949787][T12859] ? __fget_files+0x3a0/0x420 [ 616.949826][T12859] do_recvmmsg+0x307/0x770 [ 616.949863][T12859] ? __pfx_do_recvmmsg+0x10/0x10 [ 616.949904][T12859] ? _copy_from_user+0x94/0xb0 [ 616.949946][T12859] __x64_sys_recvmmsg+0x1af/0x240 [ 616.949977][T12859] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 616.950002][T12859] ? rcu_is_watching+0x15/0xb0 [ 616.950033][T12859] ? do_syscall_64+0xbe/0x3b0 [ 616.950057][T12859] do_syscall_64+0xfa/0x3b0 [ 616.950076][T12859] ? lockdep_hardirqs_on+0x9c/0x150 [ 616.950106][T12859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.950127][T12859] ? clear_bhb_loop+0x60/0xb0 [ 616.950152][T12859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.950172][T12859] RIP: 0033:0x7f267d78e929 [ 616.950192][T12859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.950210][T12859] RSP: 002b:00007f267b5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 616.950233][T12859] RAX: ffffffffffffffda RBX: 00007f267d9b5fa0 RCX: 00007f267d78e929 [ 616.950248][T12859] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 616.950263][T12859] RBP: 00007f267b5f6090 R08: 0000200000003700 R09: 0000000000000000 [ 616.950276][T12859] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 616.950289][T12859] R13: 0000000000000000 R14: 00007f267d9b5fa0 R15: 00007f267dadfa28 [ 616.950323][T12859] [ 617.247695][ T7351] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 617.364050][ T5938] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.374284][ T5938] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 617.383248][ T5938] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 617.392338][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.403973][ T5938] usb 3-1: config 0 descriptor?? [ 617.416719][ T5938] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 617.423404][ T5938] dvb-usb: bulk message failed: -22 (3/0) [ 617.431294][ T5938] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 617.440543][ T5938] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 617.447670][ T5938] usb 3-1: media controller created [ 617.454862][ T5938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 617.470090][ T5938] dvb-usb: bulk message failed: -22 (6/0) [ 617.476294][ T5938] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 617.486831][ T5938] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input41 [ 617.499786][ T5938] dvb-usb: schedule remote query interval to 150 msecs. [ 617.507007][ T5938] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 617.518109][ T7351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.556731][ T7351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.620052][ T7351] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 617.643296][ T7351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.652879][ T5938] usb 3-1: USB disconnect, device number 58 [ 617.675911][ T5990] dvb-usb: bulk message failed: -22 (1/0) [ 617.689569][ T5990] dvb-usb: error while querying for an remote control event. [ 617.716389][ T7351] usb 2-1: config 0 descriptor?? [ 617.784098][ T5938] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 617.979766][T12874] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1856'. [ 617.999408][T12875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.009490][T12875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.164440][ T7351] hid_mf 0003:0079:1846.000F: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.1-1/input0 [ 618.191345][ T7351] hid_mf 0003:0079:1846.000F: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 618.212444][ T5990] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 618.385873][ T5990] usb 1-1: Using ep0 maxpacket: 16 [ 618.406581][ T5990] usb 1-1: config 0 interface 0 has no altsetting 0 [ 618.425616][ T5990] usb 1-1: New USB device found, idVendor=05ac, idProduct=abdf, bcdDevice=3d.49 [ 618.436207][ T5990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.472781][ T5990] usb 1-1: Product: syz [ 618.477116][ T5990] usb 1-1: Manufacturer: syz [ 618.490651][ T5990] usb 1-1: SerialNumber: syz [ 618.511970][T12886] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1860'. [ 618.528077][ T5990] usb 1-1: config 0 descriptor?? [ 618.553765][ T5990] ipheth 1-1:0.0: Unable to find endpoints [ 618.570663][T12886] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 618.675467][ T7351] usb 2-1: USB disconnect, device number 81 [ 618.842323][ T5990] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 618.964387][ T30] audit: type=1326 audit(1752283966.137:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.1.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981c78e929 code=0x7ffc0000 [ 619.017620][ T5990] usb 3-1: Using ep0 maxpacket: 32 [ 619.026503][ T5990] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 619.037799][ T5990] usb 3-1: config 0 has no interface number 0 [ 619.094290][T12890] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1861'. [ 619.161255][ T5990] usb 3-1: config 0 interface 89 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 619.161983][T12890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1861'. [ 619.200256][ T30] audit: type=1326 audit(1752283966.137:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.1.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f981c78e929 code=0x7ffc0000 [ 619.225168][ T5990] usb 3-1: config 0 interface 89 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 619.313587][ T30] audit: type=1326 audit(1752283966.137:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.1.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981c78e929 code=0x7ffc0000 [ 619.355157][ T5990] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0114, bcdDevice= 4.be [ 619.597620][ T5990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.606741][ T30] audit: type=1326 audit(1752283966.137:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.1.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f981c78e929 code=0x7ffc0000 [ 619.629990][ T5990] usb 3-1: Product: syz [ 619.636291][ T5990] usb 3-1: Manufacturer: syz [ 619.643095][ T5990] usb 3-1: SerialNumber: syz [ 619.665988][ T30] audit: type=1326 audit(1752283966.137:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.1.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981c78e929 code=0x7ffc0000 [ 619.691332][ T30] audit: type=1326 audit(1752283966.137:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.1.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981c78e929 code=0x7ffc0000 [ 619.724938][ T5990] usb 3-1: config 0 descriptor?? [ 619.733721][T12886] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 619.748820][ T5990] kvaser_usb 3-1:0.89: error -ENODEV: Cannot get usb endpoint(s) [ 619.900784][ T30] audit: type=1326 audit(1752283966.167:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.1.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f981c78e929 code=0x7ffc0000 [ 619.945721][ T30] audit: type=1326 audit(1752283966.167:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.1.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981c78e929 code=0x7ffc0000 [ 620.021208][ T30] audit: type=1326 audit(1752283966.167:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.1.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981c78e929 code=0x7ffc0000 [ 620.063088][ T30] audit: type=1326 audit(1752283966.167:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.1.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f981c78e929 code=0x7ffc0000 [ 621.334892][ T7351] usb 1-1: USB disconnect, device number 46 [ 621.522505][T12909] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1867'. [ 621.541622][ T980] usb 3-1: USB disconnect, device number 59 [ 621.590017][T12914] xt_TPROXY: Can be used only with -p tcp or -p udp [ 621.634969][T12914] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 622.122338][ T5990] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 622.278979][ T5990] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 622.327810][ T5990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.342365][ T5990] usb 1-1: Product: syz [ 622.351891][ T5990] usb 1-1: Manufacturer: syz [ 622.622552][ T980] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 622.655755][ T5990] usb 1-1: SerialNumber: syz [ 622.667429][ T5990] usb 1-1: config 0 descriptor?? [ 622.792322][ T980] usb 3-1: Using ep0 maxpacket: 16 [ 622.894599][ T980] usb 3-1: config 0 has no interfaces? [ 622.900119][ T980] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 622.917427][T12919] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 622.924817][T12919] IPv6: NLM_F_CREATE should be set when creating new route [ 622.932060][T12919] IPv6: NLM_F_CREATE should be set when creating new route [ 622.980550][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.046138][ T5990] usb 1-1: USB disconnect, device number 47 [ 623.073796][ T980] usb 3-1: config 0 descriptor?? [ 623.362404][T12929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1871'. [ 623.624596][T12948] vlan2: entered allmulticast mode [ 623.629785][T12948] bond2: entered allmulticast mode [ 623.692294][ T980] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 623.852261][ T980] usb 2-1: Using ep0 maxpacket: 8 [ 623.869514][ T980] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 623.880668][ T980] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 623.895380][ T980] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 623.913339][ T980] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 623.997016][ T980] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 624.077401][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.093378][T12952] FAULT_INJECTION: forcing a failure. [ 624.093378][T12952] name failslab, interval 1, probability 0, space 0, times 0 [ 624.152489][T12952] CPU: 0 UID: 0 PID: 12952 Comm: syz.0.1877 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 624.152511][T12952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 624.152519][T12952] Call Trace: [ 624.152525][T12952] [ 624.152530][T12952] dump_stack_lvl+0x189/0x250 [ 624.152551][T12952] ? __pfx____ratelimit+0x10/0x10 [ 624.152571][T12952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 624.152586][T12952] ? __pfx__printk+0x10/0x10 [ 624.152604][T12952] ? __pfx___might_resched+0x10/0x10 [ 624.152620][T12952] ? fs_reclaim_acquire+0x7d/0x100 [ 624.152640][T12952] should_fail_ex+0x414/0x560 [ 624.152662][T12952] should_failslab+0xa8/0x100 [ 624.152679][T12952] __kmalloc_noprof+0xcb/0x4f0 [ 624.152693][T12952] ? tomoyo_encode+0x28b/0x550 [ 624.152708][T12952] tomoyo_encode+0x28b/0x550 [ 624.152724][T12952] tomoyo_realpath_from_path+0x58d/0x5d0 [ 624.152743][T12952] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 624.152759][T12952] tomoyo_path_number_perm+0x1e8/0x5a0 [ 624.152778][T12952] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 624.152805][T12952] ? __lock_acquire+0xab9/0xd20 [ 624.152830][T12952] ? __fget_files+0x2a/0x420 [ 624.152848][T12952] ? __fget_files+0x2a/0x420 [ 624.152863][T12952] ? __fget_files+0x3a0/0x420 [ 624.152878][T12952] ? __fget_files+0x2a/0x420 [ 624.152897][T12952] security_file_ioctl+0xcb/0x2d0 [ 624.152914][T12952] __se_sys_ioctl+0x47/0x170 [ 624.152928][T12952] do_syscall_64+0xfa/0x3b0 [ 624.152940][T12952] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.152958][T12952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.152970][T12952] ? clear_bhb_loop+0x60/0xb0 [ 624.152985][T12952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.152997][T12952] RIP: 0033:0x7f928d98e929 [ 624.153009][T12952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.153020][T12952] RSP: 002b:00007f928e7ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 624.153035][T12952] RAX: ffffffffffffffda RBX: 00007f928dbb5fa0 RCX: 00007f928d98e929 [ 624.153044][T12952] RDX: 0000200000000080 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 624.153052][T12952] RBP: 00007f928e7ae090 R08: 0000000000000000 R09: 0000000000000000 [ 624.153060][T12952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.153068][T12952] R13: 0000000000000000 R14: 00007f928dbb5fa0 R15: 00007f928dcdfa28 [ 624.153086][T12952] [ 624.153100][T12952] ERROR: Out of memory at tomoyo_realpath_from_path. [ 624.413549][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.419831][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.480340][ T5990] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 624.712657][ T5990] usb 4-1: Using ep0 maxpacket: 8 [ 624.729489][ T5990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.761014][ T5990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.806642][ T5990] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 624.841186][ T5990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.866274][ T5990] usb 4-1: config 0 descriptor?? [ 624.892092][ T980] usb 2-1: GET_CAPABILITIES returned 0 [ 624.913711][ T980] usbtmc 2-1:16.0: can't read capabilities [ 625.214571][ T5938] usb 3-1: USB disconnect, device number 60 [ 625.276351][T12950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1878'. [ 625.287812][T12950] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 625.304088][T12950] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 625.369767][T12960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.385227][T12960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.410005][T12960] program syz.4.1880 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 625.591211][ T5990] aureal 0003:0755:2626.0010: unknown main item tag 0x0 [ 625.598611][ T5990] aureal 0003:0755:2626.0010: unknown main item tag 0x0 [ 625.606183][ T5990] aureal 0003:0755:2626.0010: unknown main item tag 0x0 [ 625.619159][T12960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.638268][ T5990] aureal 0003:0755:2626.0010: unknown main item tag 0x0 [ 625.647549][T12960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.656681][ T5990] aureal 0003:0755:2626.0010: unknown main item tag 0x0 [ 625.671954][ T5990] aureal 0003:0755:2626.0010: unknown main item tag 0x0 [ 625.716804][ T5990] aureal 0003:0755:2626.0010: unknown main item tag 0x0 [ 625.731758][ T5990] aureal 0003:0755:2626.0010: unknown main item tag 0x0 [ 625.756303][ T5990] aureal 0003:0755:2626.0010: unknown main item tag 0x0 [ 625.769849][ T5990] aureal 0003:0755:2626.0010: unknown main item tag 0x0 [ 625.783230][ T5990] aureal 0003:0755:2626.0010: unknown main item tag 0x0 [ 625.819492][ T5990] aureal 0003:0755:2626.0010: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.3-1/input0 [ 625.925556][ T5990] usb 4-1: USB disconnect, device number 65 [ 626.682442][ T5990] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 626.733100][T12983] xt_TPROXY: Can be used only with -p tcp or -p udp [ 626.961734][ T5938] usb 2-1: USB disconnect, device number 82 [ 626.976779][T12983] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 626.994876][ T5990] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 627.027114][ T5990] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 627.040968][ T5990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.076235][ T5990] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 627.084345][ T5990] usb 1-1: No valid video chain found. [ 627.296889][ T5938] usb 1-1: USB disconnect, device number 48 [ 628.090593][T12996] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1891'. [ 628.127186][T12996] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1891'. [ 629.272293][ T5990] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 629.474140][ T5990] usb 1-1: Using ep0 maxpacket: 8 [ 629.513447][ T5990] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 629.523402][ T5990] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 629.557136][ T5990] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 629.577942][ T5990] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 629.598275][T13020] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 629.607503][ T5990] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 629.626907][ T5990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.759506][T13029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.770375][T13029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.928046][T13030] netlink: 'syz.3.1901': attribute type 2 has an invalid length. [ 629.952551][T13030] netlink: 'syz.3.1901': attribute type 8 has an invalid length. [ 629.960438][ T5990] usb 1-1: GET_CAPABILITIES returned 0 [ 629.966992][ T5990] usbtmc 1-1:16.0: can't read capabilities [ 630.028868][T13032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1901'. [ 630.038074][T13030] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1901'. [ 630.070525][T13032] IPv6: sit2: Disabled Multicast RS [ 631.015837][T13041] netlink: 'syz.3.1904': attribute type 4 has an invalid length. [ 631.023874][T13041] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1904'. [ 631.118753][T13043] x_tables: duplicate underflow at hook 2 [ 631.169415][T13041] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 631.475450][T13049] xt_TPROXY: Can be used only with -p tcp or -p udp [ 631.719393][T13049] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 631.996677][T13054] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1907'. [ 632.297533][ T980] usb 1-1: USB disconnect, device number 49 [ 633.189473][T13080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.203853][T13080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.385252][T13065] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 633.396992][T13065] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1908'. [ 633.524682][ T7351] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 633.802282][ T7351] usb 2-1: Using ep0 maxpacket: 8 [ 633.809757][ T7351] usb 2-1: unable to get BOS descriptor or descriptor too short [ 633.828094][ T7351] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 633.848078][ T7351] usb 2-1: config 0 has no interface number 0 [ 633.854473][ T980] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 633.882269][ T7351] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 633.893866][ T7351] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 633.904163][ T7351] usb 2-1: config 0 interface 88 has no altsetting 0 [ 633.914337][ T7351] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 633.936586][ T7351] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 633.952774][ T7351] usb 2-1: Product: syz [ 633.965242][ T7351] usb 2-1: Manufacturer: syz [ 633.969896][ T7351] usb 2-1: SerialNumber: syz [ 633.987247][ T7351] usb 2-1: config 0 descriptor?? [ 634.012705][ T980] usb 1-1: Using ep0 maxpacket: 32 [ 634.024961][ T980] usb 1-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 634.034613][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.046014][ T980] usb 1-1: Product: syz [ 634.050277][ T980] usb 1-1: Manufacturer: syz [ 634.055100][ T980] usb 1-1: SerialNumber: syz [ 634.066726][ T980] usb 1-1: config 0 descriptor?? [ 634.078103][ T980] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 634.280385][ T980] gspca_sunplus: reg_w_riv err -71 [ 634.338073][ T7351] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input43 [ 634.347623][ T980] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 634.354917][T13094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.369762][ T980] usb 1-1: USB disconnect, device number 50 [ 634.374004][T13094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.455969][ T7351] usb 2-1: USB disconnect, device number 83 [ 634.463107][T13094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.475514][T13094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.200890][ T6772] udevd[6772]: Error opening device "/dev/input/event4": No such file or directory [ 635.231982][ T6772] udevd[6772]: Unable to EVIOCGABS device "/dev/input/event4" [ 635.270213][ T6772] udevd[6772]: Unable to EVIOCGABS device "/dev/input/event4" [ 635.503928][T13113] xt_TPROXY: Can be used only with -p tcp or -p udp [ 635.862884][T13113] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 638.120734][ T31] INFO: task kworker/0:13:7350 blocked for more than 143 seconds. [ 638.161282][ T31] Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 [ 638.180409][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 638.203894][ T5990] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 638.385662][ T31] task:kworker/0:13 state:D stack:21880 pid:7350 tgid:7350 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 638.419625][ T31] Workqueue: usb_hub_wq hub_event [ 638.437099][ T31] Call Trace: [ 638.444984][ T31] [ 638.460605][ T31] __schedule+0x16f5/0x4d00 [ 638.467590][ T31] ? schedule+0x165/0x360 [ 638.479867][ T31] ? __pfx___schedule+0x10/0x10 [ 638.496225][ T31] ? schedule+0x91/0x360 [ 638.506329][ T31] schedule+0x165/0x360 [ 638.519583][ T31] schedule_timeout+0x9a/0x270 [ 638.532286][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 638.540550][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 638.547441][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 638.547500][ T5990] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 638.567844][ T31] ? wait_for_completion+0x267/0x5d0 [ 638.588332][ T31] wait_for_completion+0x2bf/0x5d0 [ 638.604590][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 638.631861][ T31] i2c_del_adapter+0x581/0x6e0 [ 638.646121][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 638.659733][ T5990] usb 4-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 638.669549][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 638.675142][ T5990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.692337][ T31] ? dvb_usbv2_exit+0x85a/0x9e0 [ 638.697392][ T5990] usb 4-1: Product: syz [ 638.707538][ T31] dvb_usbv2_probe+0x4ae/0x41a0 [ 638.714917][ T5990] usb 4-1: Manufacturer: syz [ 638.725045][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 638.732421][ T5990] usb 4-1: SerialNumber: syz [ 638.752317][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 638.789678][ T31] usb_probe_interface+0x641/0xbc0 [ 638.802320][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 638.817161][ T31] really_probe+0x26a/0x9a0 [ 638.825431][ T31] __driver_probe_device+0x18c/0x2f0 [ 638.845555][ T31] driver_probe_device+0x4f/0x430 [ 638.864148][ T31] __device_attach_driver+0x2ce/0x530 [ 638.879266][ T31] bus_for_each_drv+0x251/0x2e0 [ 638.894726][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 638.904631][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 638.918307][ T31] __device_attach+0x2b8/0x400 [ 638.932289][ T31] ? __pfx___device_attach+0x10/0x10 [ 638.945129][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 638.968764][ T31] bus_probe_device+0x185/0x260 [ 638.975243][ T5990] usb 4-1: selecting invalid altsetting 1 [ 638.990717][ T31] device_add+0x7b6/0xb50 [ 639.007893][ T31] usb_set_configuration+0x1a87/0x20e0 [ 639.014775][ T31] usb_generic_driver_probe+0x8d/0x150 [ 639.022284][ T31] usb_probe_device+0x1c4/0x390 [ 639.027294][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 639.033009][ T31] really_probe+0x26a/0x9a0 [ 639.037671][ T31] __driver_probe_device+0x18c/0x2f0 [ 639.043210][ T31] driver_probe_device+0x4f/0x430 [ 639.048385][ T31] __device_attach_driver+0x2ce/0x530 [ 639.054215][ T31] bus_for_each_drv+0x251/0x2e0 [ 639.059229][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 639.079649][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 639.095318][ T31] __device_attach+0x2b8/0x400 [ 639.112391][ T31] ? __pfx___device_attach+0x10/0x10 [ 639.124223][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 639.140279][ T31] bus_probe_device+0x185/0x260 [ 639.154600][ T31] device_add+0x7b6/0xb50 [ 639.171350][ T31] usb_new_device+0xa39/0x16c0 [ 639.181728][ T5990] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 639.181812][ T5990] dvb_usb_lmedm04 4-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 639.209109][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 639.220129][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 639.230423][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 639.247801][ T31] hub_event+0x2941/0x4a00 [ 639.265202][ T31] ? __pfx_hub_event+0x10/0x10 [ 639.286784][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 639.303014][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 639.308442][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 639.314762][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 639.320625][ T31] process_scheduled_works+0xae1/0x17b0 [ 639.330253][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 639.336664][ T31] worker_thread+0x8a0/0xda0 [ 639.341355][ T31] kthread+0x70e/0x8a0 [ 639.345532][ T31] ? __pfx_worker_thread+0x10/0x10 [ 639.350840][ T31] ? __pfx_kthread+0x10/0x10 [ 639.355508][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 639.360745][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 639.365991][ T31] ? __pfx_kthread+0x10/0x10 [ 639.370626][ T31] ret_from_fork+0x3fc/0x770 [ 639.375286][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 639.380434][ T31] ? __switch_to_asm+0x39/0x70 [ 639.385295][ T31] ? __switch_to_asm+0x33/0x70 [ 639.390110][ T31] ? __pfx_kthread+0x10/0x10 [ 639.396004][ T31] ret_from_fork_asm+0x1a/0x30 [ 639.400830][ T31] [ 639.403952][ T31] [ 639.403952][ T31] Showing all locks held in the system: [ 639.411778][ T31] 1 lock held by khungtaskd/31: [ 639.414887][ T980] usb 4-1: USB disconnect, device number 66 [ 639.417763][ T31] #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 639.435926][ T31] 3 locks held by kworker/0:3/980: [ 639.441106][ T31] #0: ffff888020eaf548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 639.452553][ T31] #1: ffffc90003bb7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 639.464482][ T31] #2: ffff88802836f198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 639.473414][ T31] 4 locks held by kworker/u8:7/1110: [ 639.478713][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 639.489636][ T31] #1: ffffc9000404fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 639.500250][ T31] #2: ffffffff8f510c90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 639.510081][ T31] #3: ffffffff8e144b40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 639.520178][ T31] 2 locks held by getty/5611: [ 639.524948][ T31] #0: ffff8880308ca0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 639.534794][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 639.545138][ T31] 6 locks held by kworker/u8:10/6973: [ 639.550544][ T31] 5 locks held by kworker/0:13/7350: [ 639.555899][ T31] #0: ffff888020eaf548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 639.567306][ T31] #1: ffffc9001ca77bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 639.579268][ T31] #2: ffff88802840d198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 639.588226][ T31] #3: ffff88807ddc3198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 639.597506][ T31] #4: ffff8880308ff160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 639.607426][ T31] 3 locks held by kworker/0:14/7351: [ 639.612773][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 639.623822][ T31] #1: ffffc9001ca87bc0 (key_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 639.634010][ T31] #2: ffffffff8e144c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 639.645011][ T31] 2 locks held by syz.4.1918/13098: [ 639.650237][ T31] #0: ffff88807edf6808 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 639.660511][ T31] #1: ffffffff8e144c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 639.671566][ T31] 1 lock held by dhcpcd/13131: [ 639.676472][ T31] #0: ffff888028a8e258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 639.686252][ T31] [ 639.719256][ T31] ============================================= [ 639.719256][ T31] [ 639.728373][ T31] NMI backtrace for cpu 0 [ 639.728392][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 639.728415][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 639.728427][ T31] Call Trace: [ 639.728436][ T31] [ 639.728445][ T31] dump_stack_lvl+0x189/0x250 [ 639.728473][ T31] ? __wake_up_klogd+0xd9/0x110 [ 639.728504][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 639.728539][ T31] ? __pfx__printk+0x10/0x10 [ 639.728590][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 639.728621][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 639.728650][ T31] ? _printk+0xcf/0x120 [ 639.728681][ T31] ? __pfx__printk+0x10/0x10 [ 639.728715][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 639.728738][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 639.728768][ T31] watchdog+0xfee/0x1030 [ 639.728790][ T31] ? watchdog+0x1de/0x1030 [ 639.728823][ T31] kthread+0x70e/0x8a0 [ 639.728861][ T31] ? __pfx_watchdog+0x10/0x10 [ 639.728879][ T31] ? __pfx_kthread+0x10/0x10 [ 639.728914][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 639.728942][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 639.728969][ T31] ? __pfx_kthread+0x10/0x10 [ 639.728997][ T31] ret_from_fork+0x3fc/0x770 [ 639.729022][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 639.729050][ T31] ? __switch_to_asm+0x39/0x70 [ 639.729103][ T31] ? __switch_to_asm+0x33/0x70 [ 639.729127][ T31] ? __pfx_kthread+0x10/0x10 [ 639.729155][ T31] ret_from_fork_asm+0x1a/0x30 [ 639.729198][ T31] [ 639.729207][ T31] Sending NMI from CPU 0 to CPUs 1: [ 639.888317][ C1] NMI backtrace for cpu 1 [ 639.888337][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 639.888356][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 639.888366][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 639.888396][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 0d 19 00 f3 0f 1e fa fb f4 c8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 639.888410][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 639.888426][ C1] RAX: 6df460eb0dd6fa00 RBX: ffffffff81976c78 RCX: 6df460eb0dd6fa00 [ 639.888438][ C1] RDX: 0000000000000001 RSI: ffffffff8d998a4b RDI: ffffffff8be29dc0 [ 639.888450][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 639.888467][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa1f3f0 [ 639.888479][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a52b40 [ 639.888490][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 639.888503][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 639.888515][ C1] CR2: 000055556c65e5c8 CR3: 0000000078188000 CR4: 00000000003526f0 [ 639.888531][ C1] Call Trace: [ 639.888538][ C1] [ 639.888545][ C1] default_idle+0x13/0x20 [ 639.888562][ C1] default_idle_call+0x74/0xb0 [ 639.888579][ C1] do_idle+0x1e8/0x510 [ 639.888601][ C1] ? __pfx_do_idle+0x10/0x10 [ 639.888627][ C1] cpu_startup_entry+0x44/0x60 [ 639.888645][ C1] start_secondary+0x101/0x110 [ 639.888660][ C1] common_startup_64+0x13e/0x147 [ 639.888688][ C1] [ 640.112683][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 640.119612][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 640.131458][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 640.141556][ T31] Call Trace: [ 640.144873][ T31] [ 640.147832][ T31] dump_stack_lvl+0x99/0x250 [ 640.152459][ T31] ? __asan_memcpy+0x40/0x70 [ 640.157085][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 640.162323][ T31] ? __pfx__printk+0x10/0x10 [ 640.166982][ T31] panic+0x2db/0x790 [ 640.170916][ T31] ? __pfx_panic+0x10/0x10 [ 640.175368][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 640.181217][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 640.186619][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 640.192828][ T31] watchdog+0x102d/0x1030 [ 640.197190][ T31] ? watchdog+0x1de/0x1030 [ 640.201660][ T31] kthread+0x70e/0x8a0 [ 640.205794][ T31] ? __pfx_watchdog+0x10/0x10 [ 640.210516][ T31] ? __pfx_kthread+0x10/0x10 [ 640.215158][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 640.220406][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 640.225655][ T31] ? __pfx_kthread+0x10/0x10 [ 640.230273][ T31] ret_from_fork+0x3fc/0x770 [ 640.234878][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 640.240001][ T31] ? __switch_to_asm+0x39/0x70 [ 640.244871][ T31] ? __switch_to_asm+0x33/0x70 [ 640.249652][ T31] ? __pfx_kthread+0x10/0x10 [ 640.254258][ T31] ret_from_fork_asm+0x1a/0x30 [ 640.259051][ T31] [ 640.262271][ T31] Kernel Offset: disabled [ 640.266593][ T31] Rebooting in 86400 seconds..