last executing test programs: 4m29.680345317s ago: executing program 3 (id=461): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x4000002) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffff0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}}) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) 4m26.596462299s ago: executing program 3 (id=475): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$FIONCLEX(r0, 0x5450) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$media(&(0x7f0000000000), 0xc, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66667a4, 0x0, &(0x7f0000000fc0)}) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000100)={@rand_addr=0x64010102, @local, 0x1, "6ad9ab92d677d260db0361fa18c86786414663d7ea0113c3c6c4eecde57a54d2", 0x6, 0x80000000, 0x800, 0x4}, 0x3c) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32=r3, @ANYBLOB="0a00060008021100000100000c"], 0x34}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x810) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0102000000000000000200000000000940000000010900010073797a300000000008000a4000000003140000001100010000000000000000000000000a"], 0x78}}, 0x4000800) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f00000002c0)=0xc) setfsuid(r7) 4m26.100085783s ago: executing program 3 (id=477): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0xffffffbc, 0x7, 0x0, 0x55a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000bc0)={0x800080, 0x858, 0x0, 0x7, 0x400, 0x558}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) 4m25.96502868s ago: executing program 3 (id=478): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x478, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0x980929, 0x6}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x200, 0x10000, 0x400, 0x1, 0x5, 0x400, 0x401}, 0x1c) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000001400)=0x3, 0x4) r4 = dup(r3) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f00000000c0)={0x30, 0x320, 0xf00, 0x78, 0x5, 0x2, 0x8, 0x0, {0x5, 0xffb7}, {0x8, 0x1, 0x1}, {0x5, 0x4}, {0x8, 0x6}, 0x2, 0x1, 0x2, 0x80000000, 0x0, 0x2, 0x9, 0x2, 0x0, 0x5, 0x6, 0x3, 0x25, 0x206, 0x1, 0x5}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') sendmsg$inet6(r6, &(0x7f0000000680)={&(0x7f00000001c0)={0xa, 0x4e24, 0xbb4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000200)="50f77f8a6479478e90757d3e007c069d6ebc49fa2d08e342bec6b580369ea1a95c011401810df46ab814618ef8c5ae999b4d693d2d9e75acf54f6d38e0f3bbee031bf8f5562ffc952e798b7a962abbcfeda56fd68c57249d4f7cd9d4b888a5e05106ffa08be0ab5a996009d2076c292ccfe3f6464780785997a4b2b884fb5acc120d8deb6111fcf2fb5bbe864dc392", 0x8f}, {&(0x7f00000002c0)="764ba01554cfbd28fdc487ca88c69b8e0703570dea37be85b5f478ebc76efcc264a4822a39b46ed922fd4b936837a7d9e0dc10c14e110f90432bfb33e5d9c3225b8438e8410d80f4c1ca50f87f6fb2d274045ba1f3963a2d25e028188ed332f54694603b12eee5ffa2695b8324788bda6c18c7a8db6cd28cbf6e028396867aba11b5b2962d38ef4732d31fb667a879a719c8bc73c2f2", 0x96}, {&(0x7f0000000380)="d5beaa400a84310793bd83b81aafa7fecb57a12d77b7cacb722aeae6c6279e04983e8282d89a", 0x26}, {&(0x7f00000003c0)="8bb8782c8e533c8108f7e46e9e6799586d93946f6f03b0cd28da771f988ba0408b1335ea9c", 0x25}, {&(0x7f0000000400)="1cc8b30c3493505dd77943db17ae2752829b945dbe0bd2cb3a1b5bb442dcaada92e10936a9382cdce00472da41a97b9010f1894d46b740cd1c2e030e1607add655a1e93b43f0b23a4de224ca3097e7bbd3df466e04390fdc68fa51be92c32ff0b3b76fecc738034646cde953106c3a1794a196178a3e27d7e301f4d8b2231febd97ee9ec4eacb0fce4d93211ef5c764ab40cf2f25291515f3f2ee713878aabd644923c49f68b96de6432bd68e22615173da31e30f979aea7d7b8a3977d830dd3835bb5", 0xc3}], 0x5, &(0x7f00000006c0)=[@rthdr={{0x78, 0x29, 0x39, {0x32, 0xc, 0x0, 0x9, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2f}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0, @mcast2, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x5c, 0x2, 0x0, 0x6, 0x0, [@dev={0xfe, 0x80, '\x00', 0x16}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0xe8}, 0x44) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x5, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) syz_clone(0x1080000, 0x0, 0xffffffffffffff8c, 0x0, 0x0, 0x0) fchdir(r6) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1c8, 0x12) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x91303c, 0x0) 4m25.535834288s ago: executing program 3 (id=483): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1fe, 0xa, 0x1, 0x0, 0xfd}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@multiplanar_overlay={0x1, 0x2, 0x4, 0x400, 0xc92, {}, {0x5, 0xd, 0x6, 0x8, 0x7, 0x4d, "6fc05c3d"}, 0x1000, 0x3, {0x0}, 0x6}) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000008010100000a2401000000020102132406000006000000000000000000000000000924030000000500000000000000f8431cfd0924030001030004030624050400fd0904010000010200000904010101010200000905010900000000000725010000000009040200000102000009040201010102000009051abcef"], 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) socket$key(0xf, 0x3, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffb, 0x7, 0xfee, 0x3, 0x3]}, &(0x7f0000000340)=0x78) futex(&(0x7f0000000dc0)=0x2, 0xc, 0x1, 0x0, &(0x7f0000000e40)=0x2, 0x0) 4m25.366414532s ago: executing program 3 (id=485): r0 = memfd_create(&(0x7f0000000540)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xec\xcf\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x15\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x8d\xf2:\a\xad\xf5\xfa\x91\xed\xa57\x85\xd1\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d', 0x4) unshare(0x28000600) fcntl$addseals(r0, 0x409, 0xe) r1 = socket$tipc(0x1e, 0x2, 0x0) io_setup(0x440, &(0x7f0000000340)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x7, 0x0, r1, 0x0, 0x0, 0x446, 0x0, 0x2}]) syz_open_dev$sg(&(0x7f0000000000), 0x7, 0x181001) 4m24.804591312s ago: executing program 32 (id=485): r0 = memfd_create(&(0x7f0000000540)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xec\xcf\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x15\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x8d\xf2:\a\xad\xf5\xfa\x91\xed\xa57\x85\xd1\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d', 0x4) unshare(0x28000600) fcntl$addseals(r0, 0x409, 0xe) r1 = socket$tipc(0x1e, 0x2, 0x0) io_setup(0x440, &(0x7f0000000340)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x7, 0x0, r1, 0x0, 0x0, 0x446, 0x0, 0x2}]) syz_open_dev$sg(&(0x7f0000000000), 0x7, 0x181001) 10.66797043s ago: executing program 1 (id=1506): syz_emit_vhci(&(0x7f00000021c0)=ANY=[@ANYRESHEX=0x0], 0xf) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) socket$inet(0x2, 0x3, 0x2) 10.247326338s ago: executing program 1 (id=1507): r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x79a8, 0x8, 0x1, 0x5000032f}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x4, 0x4, &(0x7f0000000600)=[{0x0}], 0x1, 0x12, 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) r6 = userfaultfd(0x1) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8100) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000240)={0x0, 0x2, 0x8}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000600000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000, 0x3, 0x2}) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="000202aa00000000000002000000000000000000"], 0x18) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000200)={0xc, r8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_CONTINUE(r9, 0xc028aa05, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1000000}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffdd, 0x11, 0x0, 0x100000}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0xfffffffffffffffe}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x19}, 0x94) r10 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r10, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r10, 0x82, 0xa8, &(0x7f0000000040)=ANY=[]) 10.101422807s ago: executing program 0 (id=1508): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x400402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f0000000040)=[{0xa75d, 0x3000, 0x5, &(0x7f00000000c0)="515b8e7646"}], 0x1}) 7.787831189s ago: executing program 2 (id=1515): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8002e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_snmp6\x00') getdents(r1, &(0x7f0000000240)=""/35, 0x23) getdents(r1, 0xffffffffffffffff, 0x5a) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0) io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095fc749b"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000240)="00214717a70700000000030640710a069d317ebbaaa6", 0x16}], 0x1, 0x7, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) syz_open_dev$vim2m(0x0, 0x0, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r7 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/242, 0xf2}], 0x1}, 0x18}], 0x1, 0x101, 0x0) r8 = io_uring_setup(0x2a42, &(0x7f0000000080)={0x0, 0x4f0c, 0x100, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f0000002700)={0x2, 0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x0}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r8, 0x1, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x40) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 7.619185576s ago: executing program 0 (id=1516): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x3, 0x8, 0x2, {0x1, @sliced={0xffff, [0x5, 0xc, 0x2800, 0x4, 0x6, 0x804, 0x3, 0x1, 0x7, 0x1, 0x5, 0x7ff, 0x4, 0x1, 0x6, 0x70b, 0x2, 0x3, 0x5, 0x6, 0xf, 0xc, 0x5, 0x1, 0x4, 0x10, 0x93d, 0x3, 0x5, 0x3, 0x9, 0x0, 0x3, 0x2f24, 0x6, 0x8, 0x3, 0x6, 0x3, 0xe1e, 0x2, 0x6, 0x7b, 0x6, 0xa, 0xe0, 0x20, 0xb], 0x7}}, 0x3ff}) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0xc, @string={0xc, 0x3, "f58ce70fab0d3eaa30fc"}}, 0x0, 0x0}, 0x0) r2 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x20, 0xff, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x40, 0x0, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x0, 0x8}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x201, 0x0, 0x2, 0x1, 0xff, 0xcc}, 0xf, &(0x7f00000002c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x9, 0x9, 0x1}]}, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x444}}]}) syz_usb_control_io$printer(r2, &(0x7f0000000500)={0x14, &(0x7f00000003c0)={0x0, 0x23, 0x74, {0x74, 0x30, "c211b74228c0197c5275a1e7bb1c4113b105cefe85f4107842e5edea09d50111fd1905ce51c656249601e1650b5f6c0983b2d6eb303cd42ae4be141eb2ed98551ba3ec46a78c9816eb36ed562704abaad4694edd1214f8680e5f57450d0e84bc90829c43ac56e5a27184a8d092a18a4d607f"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}}, &(0x7f0000000840)={0x34, &(0x7f0000000540)={0x20, 0x1, 0xe7, "a4dd27a6f74dc86bc6106e719b7f5b1645fdc1092339dc5c4e1836f489683d18519e6b36c189b2583bb7616764be87af110918eb20ca5e2fef8a434fb72d2a2f26161891d2476931ddcaa473fea13e291247bb86ad35d0f47f55f65051fc23ce069beb16aebfa5ac88cc8f426dabe9f8ac201a47bd61d923e098bf4300b9e55653aafd864393636a74ac3445f9a58c48ba48db73050a8b61cc7d691245338fe3882a7080804623c8f7c5b648ad355583486d7613d7d0af84c312ad40337ed7650e2700cce3e9a087baf992bf9acc40d9b25f649beb67e67d71226824ae1186ff80c42e11b5d89f"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000006c0)={0x20, 0x0, 0xc4, {0xc2, "aab7bfbda4e75c2a7e90c854bc5e396e887652779966b6a459819dbd6aae3f8cc24e0d23329ad94272fa955a2c588a923a25f90c91288a25f0623ae6ed03c4fc32b7952c00586eb78f71bcc7b159680116de96f98544b13831b1d3487f49c4c1073d715bfe03df5096cc0ef56e4311797be0653732f4282421613a1418af1f26a527a4bc2319c27ed0a011138722095957d21466b136a15f6d5fa086a07d3153a3079bbfaeb1e39dd9452464db1864538d4ce19c84947babe1d99a91e2cf14c31869"}}, &(0x7f00000007c0)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000800)={0x20, 0x0, 0x1, 0x9}}) rmdir(&(0x7f0000000880)='./file0\x00') syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @string={0x4, 0x3, "063e"}}, 0x0, 0x0}, 0x0) 5.745559551s ago: executing program 1 (id=1522): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host, 0xfffffffd}, 0xfffffbfffffffffc, 0x800000000000002, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@mcast1, 0x4e22, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x29}, {0xfffffffffffffffc, 0x0, 0x1}, {0x0, 0x0, 0x8865, 0x2}}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast, 0x4, 0x3, 0x1, 0x0, 0xf000002}}, 0xe8) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='J`\x00\x00\x00x\x00\x00'], 0x0) 4.941887606s ago: executing program 1 (id=1526): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001f000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000005900008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60ee, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000ac0)={0x2c, &(0x7f0000000740)={0x0, 0xd, 0x7, {0x7, 0x0, "8c8fde8535"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.803933043s ago: executing program 4 (id=1528): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x84000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x4080) 4.705387243s ago: executing program 4 (id=1529): syz_emit_vhci(&(0x7f00000021c0)=ANY=[@ANYRESHEX=0x0], 0xf) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) socket$inet(0x2, 0x3, 0x2) 4.603135983s ago: executing program 2 (id=1530): r0 = socket$inet(0x2, 0x5, 0x0) close(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x40, 0x21, 0x33}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) renameat2(r2, &(0x7f0000000180)='./file0\x00', r3, &(0x7f0000000300)='./file0\x00', 0x5) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r4 = syz_io_uring_setup(0x55d4, &(0x7f0000000340)={0x0, 0xf40e, 0x10000, 0x0, 0x1a6, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r0, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.366023818s ago: executing program 4 (id=1531): ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x5, r0, 0x0, &(0x7f0000000040)="a3874f8f82ddb4fa64ff21c1fb078bc38520744eccb4016755c7fd198de408171b660321735293888a7aa7a85539e6d58dac72dcdd135090d92f7be0cea4d7ddeabcafa7dac10e39a96b61e0f3991409914d1f75766732ee402df448487ab4b2fe67c2a8a3205a62", 0x68, 0xffffffffffff0302}) r1 = syz_open_dev$swradio(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000240)={0x12, 0x59, &(0x7f0000000140)="d836b4523b3c92f21fad0c6371e8ee828e125112e7ec7ebcf695e62c2b2778a214f0027eb7741a03c97e59b3b343cf7cecc3d86473a103040172694232046882a0b16d4034e27c4e60dd5414a2be6977ae463314698fccc29d3971d49444d7c3a0ff1cb199efe8efec174ba2beac2a8a3cee1fa59e8e67c1161906ee4c415529d316e38911efeb09c291704f690c58ff7f396b2d42bb1e1c24b7f95455324f30c7b5499dda313c9dfa219560166d50b5ecab6ee969767f60771d8369f9a9a1b07256bd42b84d861d92b664230dc639881821ec96", {0x6, 0xf8580000, 0x56544943, 0x1, 0x9, 0xa00000, 0xf, 0xfffffffa}}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000300)=0xffffffffffffffff) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000340)=@userptr={0x2201, 0x6, 0x4, 0x1000, 0x2, {r2, r3/1000+10000}, {0x3, 0xc, 0x1, 0x7, 0xc, 0xff, "75e7b893"}, 0x5, 0x2, {&(0x7f00000002c0)}, 0xfffffff0, 0x0, r4}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r6, 0x0, 0x1, 0x0, 0x1, 0x80000000}) r7 = fsmount(0xffffffffffffffff, 0x1, 0x0) recvmmsg$unix(r7, &(0x7f0000000700)=[{{&(0x7f0000000500), 0x6e, &(0x7f0000000580), 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}], 0x1, 0x1, &(0x7f0000000740)={0x77359400}) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000780)=@usbdevfs_connect={0x96}) r15 = fcntl$getown(r12, 0x9) sched_setattr(r15, &(0x7f00000007c0)={0x38, 0x0, 0x0, 0x6, 0x1, 0xfffffffffffff897, 0x90000000, 0x6, 0x8000, 0xb1f5}, 0x0) ioctl$IOMMU_IOAS_MAP(r9, 0x3b85, &(0x7f0000000840)={0x28, 0x6, r0, 0x0, &(0x7f0000000800)="95f53783427e98d28d04649a95adc7e6111850dd84fa8530d1c71ba0c24e4ddf8e6553557b6f87c4", 0x28}) mkdir(&(0x7f0000000880)='./file0\x00', 0x24) ioctl$vim2m_VIDIOC_S_FMT(r13, 0xc0d05605, &(0x7f00000008c0)={0x1, @pix_mp={0x6, 0xb, 0x3436324d, 0x8, 0x8, [{0xff, 0x4}, {0x7f, 0x80000000}, {0x2, 0x10}, {0x3ff, 0x4e2b}, {}, {0xfffffff7, 0x4}, {0x4}, {0x3, 0x3}], 0xf2, 0x3, 0x1, 0x9f71340c773dd989, 0x5}}) open(&(0x7f00000009c0)='./file0\x00', 0x508000, 0x2) socket(0xa, 0x4, 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000a00)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x33e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x6, 0x8, 0x1, {0x22, 0x8af}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x75, 0x2}}}}}]}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x200, 0x5, 0x1, 0x9, 0x40, 0x1}, 0x1a8, &(0x7f0000000a80)={0x5, 0xf, 0x1a8, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "ec43dd47f6af1de743cd5bc0abed32b5"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "d819ee15f1c32555cd27b158c6d086fa"}, @generic={0xad, 0x10, 0xa, "54b7ac183f50517558de65b09505bb1dca2ab168f8c5db7f70e5aad28a7f0a42e28392c8d8b9ad3bf251af9054e06d97efdb6ec379766c5c2fa09125b50322fa3770db73a7342bb9a219114fb6b31965a479dfcefb069c174f88cda97dc1d508dd3abdae5b821b22123e3d75e30aff968ada4fd91d04231b12bb2bc99e8b27eef14596945e4ba93b082aa293b98d85bc5950efd0b353d813ad4f2b73953e98142a29fddbf08013ae44a1"}, @generic={0xcb, 0x10, 0x3, "f8d2b1f3ac8ca138db23c023c633fd57bbb5c1d4a84ab302aa963666200b75163dc562610dafd507553d4fe797a9b47109802a10d7339ee1158ed4cc3df8959e4c2f1816380e25f953baad68804b8d1980dc03c8a2513a02b7454c7e443d1f15db382990070bccbd3192fdf2869a6e479731279777d1c62542010cdb99707af3be7b1cc805ee73dc1d6a7b1dd02587131fccf651772f8bc1c0725b7d54fad28ce6929e7d8cda00cc8a1d44a5ed6dc29898fbc91ade83c9823a2c9b399330598a52f4e4d90c5abe11"}]}, 0xa, [{0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x6a, &(0x7f0000000c80)=@string={0x6a, 0x3, "6ad43003e1683fe23284e8b71353e58dd2fad2f22fc2cee82775d20457d095f757c0720651d97f6f70e65bac0a48aa1bc627fd70956229ab630e25104506bd48c3ea1f984961e6137f5e02aca4ed0e1e57d86716ea700051fe22ad663b2c4a2093ee538362fa2280"}}, {0xd, &(0x7f0000000d00)=@string={0xd, 0x3, "79c64d464c1f47890ca2d7"}}, {0x7d, &(0x7f0000000d40)=@string={0x7d, 0x3, "33c3f6e1a9986d13ecbe752afbe83558e3e573168995ff1e9744c1ade27565afa780a8da2eea61112275b9dfca77b63d464e0eda442c87d02f34c17450fa40efc8be50c2de0861f10f2da1739e4d396ce69d7d4c3737c95b3faddcc5a8b17ea526e3f0f3e4b9667c2023ffc3b798730191c1a5994f687355c4aca6"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x44e}}, {0xde, &(0x7f0000000e00)=@string={0xde, 0x3, "6ea2b851f3dc67a865bda39203c59974c128966b62dd69f4c32abb8811467514e342e675e74dcceeb2d253d6310fa64940b0ce9b55784d21185a65cbc53ed9663ae6796c2941eee974ea630ae163d6a54b61e8ec0e0270a398400239b8595f030aa9a3fe850d57729c37ee7f2333403d7ff7f838ba94ff96122d2af9d9fc8aed7ed10718c0574b50b4822426708283e17391d41085a82852a3ea19b78dbdc98b3f9654fe64cc23f8b32a11098e57af353f9f61090c63933c81366856264279264115a4fb72b909ef477007dff65fe8d75b1c9f78aeec00b7cd1570ae"}}, {0x66, &(0x7f0000000f00)=@string={0x66, 0x3, "0ea7bef119e5bd8db7ceb6ebfbbfa2eaf97a13a99a32ff30a4292938766074ab7561a04516f66972676ef3b38088dac9d91ed52218637bc732b4f40933505b35348413bf5caff6db56c93915ec47419e01878c63550f6587ad9b6db5b5d829836c4c082f"}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x42d}}, {0x46, &(0x7f0000000fc0)=@string={0x46, 0x3, "c9ab6cbde4f638e7129081cc74b593d987b3a1ca1e92ea28b6ec26900bb22c5233cd778b25fae05cc96dcce6d6e3a6478f597668a8a1efaba15ad846c000f9fb83e1fbb2"}}, {0x57, &(0x7f0000001040)=@string={0x57, 0x3, "bb406dea5aa11b2bd577e790e3aad4f791f9370f6625df76b097a6fc86798933df75329c7cab339839c1e1de7977e576fafcb59c7261c0af4db87ce70576b9627a34fdc0a0f756eb48da15a2a9d5360fb1fae3c4c9"}}]}) r16 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r16, 0x89e0, &(0x7f0000001180)={0x2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r10, 0x3ba0, &(0x7f0000001200)={0x48, 0x2, r0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r14, 0x3b89, &(0x7f00000012c0)={0x28, 0x3, r17, r0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001280)="a78886"}) fanotify_mark(r8, 0x40, 0x100a, r11, &(0x7f0000001300)='./file0\x00') r18 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r18, &(0x7f0000001340)={0xa, 0x4e20, 0xd46, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) syz_open_dev$char_usb(0xc, 0xb4, 0x7f) setsockopt$inet6_tcp_int(r9, 0x6, 0x9, &(0x7f0000001380)=0x67, 0x4) 4.313130361s ago: executing program 2 (id=1532): r0 = add_key$fscrypt_provisioning(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000000000006162636454666768ba1294464c38a6"], 0x18, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000280)="eae3f7cd98a43605c4ccdf546be05a34a8e8cef393e8287e1d2bb79594c3eb4389078687d3d0becbae261a43eb048c9b6aabf87ddcd3f1cbd7820efadc9148ef1444f69ef939f30c23c22b6e8988758e4b1c6d5b5e71abdb1ed8b5abd082a082b000e8dce28c0c0fc5276aec827470ee03f4fcdf598d38fc8c1ff094a246e06d236f0b966a", 0x85}], 0x2, r0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x9f, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xf0, 0x9, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x0, 0x8, 0x50}}}}}]}}]}}, &(0x7f0000001440)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x310, 0x7, 0xd, 0x8, 0x40, 0x1}, 0xaa, &(0x7f0000000800)={0x5, 0xf, 0xaa, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0xcb, 0x6, 0x4, 0x1e000, 0x8, [0xc030, 0x3f00, 0x3f00, 0xf, 0xff3f0f, 0xff0018]}, @generic={0x54, 0x10, 0x1, "9876b2d704ca0b5857296ad8a69a6ab30280e0ccca06c16cf06ae860cce020d31bcbb942e9bf611fed7707354b4b3cb1e4a630ee6352a57c6287aea1a6c4191ad6ce5814074542d8b4c5f6060ec1e81e5f"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x4, 0xfff6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xff, 0xf9, 0x339}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x5, 0xf00f, 0xfffa, [0x3f60, 0xf, 0x3f00, 0xffc0ff]}]}, 0x7, [{0x5, &(0x7f00000008c0)=@string={0x5, 0x3, "b159c3"}}, {0x76, &(0x7f00000010c0)=@string={0x76, 0x3, "7c3b78eb700598cee81ecd29db097d4face2687e17550629078ba5c5d9d077b9cfc4bf2d6614ee67edbf25d8e0d88159c8f2aac98d80ed38622058a696168f36fd6795a76fa5d69c8498f388f4db22df452726387b61c3062fb7d12f556c3b85702014325b80268096703c0fd0e7250b62dac483"}}, {0xe8, &(0x7f0000001140)=@string={0xe8, 0x3, "756104917ca588d9dcea19de28fb0380cb3b80c90beaf88765a5c1d1bc8fe22a9b60a65600fae6e675b3b82f9687be15559a0f01186e47130485ebc8cf3d540aa7ef78f4e3ffc5e6334a951faf41f84c7f8f26c09ca1310a59d5bc6bd4d9d0bc9e14bc32712fe5a67141fef4fa9c58ae2e6a4bcdfb827000884d4611db362dabf13564a08271775e724f7a73249a8ad998b0ace4c1c099f436d0174cdcde59343a4abf20ad289505b648db8eed37a604869ecd9d7bbd0175f1176258f5654d9eda1e4329d66f8d1f7042e6b44ed7fd5bbfdfe9fbb5c7b1636f4e736f46677820832ca21bc41e"}}, {0xda, &(0x7f0000001240)=@string={0xda, 0x3, "94f3a0061ce5534e8a386b04c23919642e78d9ffba02777950150d0e5479733a369272d8b02acc8a6e6a2240f38cdf6afaaaf302c4edbca56929d7ca185a81717a13a54f434989d8ad8c4b4622975a5ae81df9d96392b722bda3bf32612ddb5443ddd68297e25bb46ffaf1c0ae05939c935900ae3c7b2c38539ad433ff6f37141dd9d824eca56e0fb06401c8f78f4ec2717e3ac225788be766f68033eb5ea70d5ee6ac7fe22367c54905a373b1f1216bdf9ce21aadcde0bc7fdda943a6135a424a81c6f3f6e66bb7787f19404f373611ee6059cf5f940a27"}}, {0xdf, &(0x7f0000001340)=@string={0xdf, 0x3, "35a7f43a0640b1dd672e1778f25b2d49d7283785672388571f8698c5f4aa43eddb5bbf7908145096eeac07ab9914cb40712b01d09b1da792c2ab2d1f02f23bc8826780781cdfc7bfdfda5751d26fd500fe4201bb24cbd4f808d163a1fda020a789344f0fd047779bb875b0818c091df13e93fdd33e1ad5061478de44e811bc6637cab6da0e9d904aa0a18709e2ae210d26b196c15182a8f8f8e7ed301483ca9d981f71c58e5d817977fcf6433d925b99a53008d0adbb02c04c4bc410aa4ae83eab487d59f93d5017bf888dffd43e9338704a6fdc9b3bb726d19b5ba849"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x2c01}}]}) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f00000009c0)={{0x8, 0x0, 0x4, 0xfffeffff, '\x00', 0x7}, 0x1, [0x7, 0x1, 0x0, 0x7, 0x3, 0x8, 0xffffffff, 0x3, 0xa969, 0x4, 0xd, 0x9, 0xa, 0x7, 0xbcc, 0x0, 0xffffffffffffffff, 0x325a, 0x3, 0x1b1059c3, 0x3, 0x8, 0x1, 0x8, 0x2, 0x9, 0x5, 0x8, 0x800, 0xd35f, 0x7, 0x6, 0x0, 0xb, 0x6, 0x100000000, 0x0, 0x1, 0x1, 0x9, 0x4, 0xdd3, 0x4, 0x100, 0x9, 0xde7, 0x80, 0x93, 0x3, 0x3, 0x9, 0x7fffffff, 0x376, 0x800, 0xc4dd, 0x6, 0x9, 0x7ff, 0x0, 0x2, 0x200, 0x9, 0x200, 0x8c5, 0x1, 0x0, 0x8, 0x7f, 0x5, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2000008, 0xbbd, 0x4d3f97e3, 0x0, 0x0, 0x7, 0x8, 0x23e, 0x6, 0x8, 0x9108, 0x3, 0x5, 0x4221, 0x40, 0x7, 0xf4d4, 0x1, 0x8, 0x8, 0x8000000000000000, 0x6, 0x6, 0xce37, 0xb81, 0x200, 0x0, 0x800000000, 0x6, 0xb, 0x8000000000000001, 0x9c4f, 0xe0000, 0xc08f, 0x8, 0xc, 0x9, 0x6, 0x5, 0x1, 0xe4, 0x6, 0x875f, 0x0, 0x9, 0x8, 0xeb, 0x70, 0x2, 0x7fffffff, 0x10000, 0xfffffffffffffff8, 0x5, 0x4, 0x4, 0x5, 0x80]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000940)={&(0x7f0000000000)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000040)="26a9ceddb232abf1039289636491552e280713aa320534ab9333686acf9cd758c44826497f6a9f991c8561055dbca0aa7cb84afbb426226d6bb691e1e779d0a1bc3210ac", 0x44}, {&(0x7f0000000140)="dc6b157b03ff3135eda4ad553213a1ca8769853e14b00fba62cac5c006def26d0f7043e1a2d85242331b694f9420e5562bb20fd60e9b775d507429f3caffb5094263819a53a3a9ad21be9e3a7791db53a7c27e730e370b0d72dd2d0a1e1bec270166140adf489bf379fc47a712ae0817078ce307dbf89a9aa66298bc5cc0ab844e06b4", 0x83}, {&(0x7f00000004c0)="f58d1587d22fdb08686ca2f98ee74340333e347438ed875f21cedab5c3b3de6f2c92818e2c7309262e81fa95097377f84e63c8d355896483411640083db462d5ce459fda63018fa3280f83a67b966a4880975e32e45dd488743cf4dea0dd10e442e5bd8307189fcfa92d418e95ba5929c951998a8df28a05d740f6484375f0ae2c043a722aae57e2580c", 0x8a}, {&(0x7f00000000c0)="2a7347c8e1156b", 0x7}, {&(0x7f0000000200)="c8e3f69d2e7d7741995ad35e6fdf58491400048adc983c8a32b048ac4bc494265436aa4db153097dc19c1f6571aadc1c6d918b2a55bb18b0b175c232edd8720444fc5d04fbc9c1eee8d8445e44da38b040656724a075f26fa66dc42601914eef3fcb32d051dd9f30af1d3c7bbc1261", 0x6f}, {&(0x7f0000000580)="6f8dc039e2830bd851d63f29bfbab055b05210a1341ab64acae138fdce19444a1d95b9c4f7e62b0ccc726d0e211356173cb081dfe6345a99188ae28dc6dd0eb55fbf367224734233a79b566e6ca3d0c006eb3affd6a8a328cf006ff67c6242ec9d8ae9deb3941e9c11347246d7a269c915d6238d4dac42bf4106201e423214bc9b6dc1a50f21e295712ae3410860898d490f75dd6a8f049df6091d7e5e6d75fc8e8ad097e747de71b297a69529d7b3b39a210f3e9e9a47d35bc56595c0494c77a415034234f0f7923ddb978256723ff16ef740d1bf17e1e76267e0430b85a60f83c689", 0xe3}, {&(0x7f0000000340)="fea23a0e2404e117a3ae74d8678217cbc1e8a1df8f51266ed495f6e4df27ec3aa70d6db0a5afdc60daea25d20f5a8c862cb8fa0f7579a1509604fd73d084af6c25c4bda80f421bea056c4c83aac4a440811e85c9b91521d01b6e1fc89388badecff43f7a229fea87889303657306eaaf69cf", 0x72}, {&(0x7f0000000680)="8549750c3c63ff7a214316dbe25c43395d7edc8410c7524e9dbd23c0b01e9f60e64ffdd0ebc4aadf970545fba688155caa83c5732afda3aa7608e5ef27354b8ee4d0ac889811f08b0c48b30f9bfc28ed7a52e7e1b1f16d2baea7cb89c42f369fbe34f881e0f528b6ca97c863986c", 0x6e}], 0x8, &(0x7f0000000ec0)=ANY=[@ANYBLOB="06000000000000002900000037000000870a0000000000004039cb4bd4c2ff6a4507dfc3fccd1b1bb2d3699cacb243017b78ccd200a9ed7c4ef617a7a30c4a7b0a95ec1000000000000000000000000000000001040101300000000000000029000800360000000402000000000000c910fc02000000000000000000000000000100000000000068000000000000002900000039000000320a000500000000fc0200000000000000000000100000010000000000000000000000000000000100000000000000000000ffff0a010100ff020000000000000000000000000001fe80000000000000000000000000000e900000000000000029000000370000002e0e000000000000010300000004010207580000000114026d0009000000000000000500000000000000050000000000000000000008000000000100000000000000a01b0000000000000900000000000000010000000000000005000000000000002614000000000000c2040000000e04012d010400000000000000000000006af949a4d6cc194c798927d0f8267c4a2b485ae97f69a73f175401aab2c8488f0f3d541dd6cffa82640000000000000000000000000000000000f46d25f5d0ba91321b03713a7f794606655f960ac445f8701067f4335025d4d881"], 0x190}, 0x4000080) 4.076996834s ago: executing program 0 (id=1535): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000040), 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x7, 0x8e, 0x10001, 0xaa5d, 0x3}, &(0x7f0000000000)=0x98) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYBLOB="09000500010000e20515b80500ffa6e700762de8d53af3307c37c87581969db83aa015f72b34390ee64f4ccd3219df6fee7bf99ff640e1ba9a694b2483805612cfdcf20487f7a2efb41e6a586f795c1dc045c3913b10fcee1079e44958bf"], 0x12) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 3.950720465s ago: executing program 0 (id=1537): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="0000000200"}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004085}, 0x0) 3.885391367s ago: executing program 5 (id=1538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000f5ff00000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c000380140001006361696630000000000000000000000014000100"], 0x110}}, 0x800) 3.84701001s ago: executing program 0 (id=1539): r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x79a8, 0x8, 0x1, 0x5000032f}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x4, 0x4, &(0x7f0000000600)=[{0x0}], 0x1, 0x12, 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) r6 = userfaultfd(0x1) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8100) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000240)={0x0, 0x2, 0x8}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000600000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000, 0x3, 0x2}) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="000202aa00000000000002000000000000000000"], 0x18) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000200)={0xc, r8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_CONTINUE(r9, 0xc028aa05, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1000000}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffdd, 0x11, 0x0, 0x100000}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0xfffffffffffffffe}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x19}, 0x94) r10 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r10, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r10, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB]) 3.759710202s ago: executing program 5 (id=1540): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000340)=ANY=[], &(0x7f0000000000)=0x28) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000380)={r6, 0x0, 0x1ff, 0x0, 0x0, [0x0], [0x9, 0x0, 0x0, 0x8], [0x3, 0x20000000, 0x100, 0xd], [0x1000010000000, 0x0, 0x7fffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000200)={r7}) ioctl$SIOCSIFHWADDR(r3, 0x401c5820, &(0x7f0000000180)={'veth0_to_bond\x00', @random="059354c1cea4"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x84, 0x0, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x401}, 0x8) r11 = syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') read$FUSE(r11, &(0x7f00000020c0)={0x2020}, 0x354) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote}, r2}}, 0x30) r12 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r12, 0x28, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r13, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r14, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r13, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.837457614s ago: executing program 5 (id=1541): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) socket$inet(0x2, 0x3, 0x2) 2.635789469s ago: executing program 5 (id=1542): setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001a000100000000000400000002002000", @ANYRES32=0x0, @ANYBLOB="00000000040001"], 0x30}}, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@deltclass={0x3c, 0x29, 0x0, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xfff3, 0xa}, {0xf, 0xfff6}, {0xffff, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x2}}, @TCA_RATE={0x6, 0x5, {0xd, 0xbe}}, @TCA_RATE={0x6, 0x5, {0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6008044}, 0x20000840) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0x0, 0x9, 0x4, 0x9e, 0x8, 0x0, 0x4, 0x5, [{0x6, 0xfffffff8, 0x2}, {0x0, 0x20000000, 0x8, 0x1a15}, {0x1000, 0x3, 0x1ff, 0x7}, {0xc9, 0x1, 0x7, 0x4}]}}]}}]}, 0x84}}, 0x24040084) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r4, &(0x7f0000000580)={0x208, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) 2.575229695s ago: executing program 1 (id=1543): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getpid() getsockopt(r4, 0x200000000114, 0x2713, 0x0, &(0x7f00000000c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$igmp(0x2, 0x3, 0x2) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r6, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x89b8622cb3938d6}, 0x40) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000027000100000000000000000a01"], 0x50}, 0x1, 0x3000000}, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r9, 0x80045530, &(0x7f00000000c0)=""/111) 2.457918202s ago: executing program 4 (id=1544): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) write(r1, 0x0, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r7, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x5e, &(0x7f0000000780)={&(0x7f0000002740)=@deltfilter={0x24, 0x2d, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xe}, {0xc, 0xd}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x8800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r10, 0x1, 0x300, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc0c4) accept4$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast2}, &(0x7f00000001c0)=0x10, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000380), &(0x7f00000003c0)) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000500)) statx(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x1000, 0x200, &(0x7f0000000600)) 1.592354187s ago: executing program 4 (id=1545): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x306) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) shmctl$IPC_RMID(r3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 1.471345082s ago: executing program 5 (id=1546): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000010880)=@newtaction={0x3694, 0x30, 0x2, 0x70bd25, 0x25dfdbff, {}, [{0x1a54, 0x1, [@m_csum={0x16c, 0x13, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x57, 0xffffffffffffffff, 0xe, 0x1}, 0x4d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x9, 0x20000000, 0xfa48, 0x6}, 0x7}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xcb, 0xa9, 0x1, 0x7f, 0x100}, 0x24}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10001, 0x7, 0x0, 0x79, 0x9dd1}, 0x1f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x81, 0x1, 0xb, 0x8}, 0x62}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xe, 0x1, 0xe6, 0x4}, 0x44}}]}, {0x98, 0x6, "91cceb1f71d4717807a051410484cc7080b7f078227b07ee2f9b96308d617882cd0b6dabde18c0722230628d99cafa529f394290eb5b5ca6aa9557d8ea73341d68950fdea6c6d3306cbe9db08baa79a0841cb1fbde1c695cee2b7a915ebe8e9107e4a76d0e23de7b9950535ce9c962ca670c89a4e7cfb21ae390cc3cac1ec53acfa94f6588b55560c202d78a4281289427ea4fe6"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0xbc, 0xd, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x80000001}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0x8}}]}, {0x6d, 0x6, "f08746b3e1b7d3c890974438a5190d698ac0d3f77051f06aa16d3895b3b2ab0f3a71eda5a4b0a78706cbd9273605f59d879ae5d63cb27504197eb90e7856e3ff4a80ba569097ad3769294c0f57cfcf0dc4bab0d86489f9d78a37148b589d3dc31f9a8db4438cc818fa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x134, 0x1f, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xa2c}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x80}]}, {0xf0, 0x6, "1a06ebd3e6bbec5d5dcb9495cd5fc5264de29f9410556c2ee8ebad5f122c9cf28814496a311db757152284690f267c9da782a365a5a1c246afb4126643b0d142e90b75cbf9168371465335a317818b1765f7333a3dd27e71595b2605a3ad1a62e058c16c9ef73a6adc5418217f536e3a58b67cf7f4e033d7a6e866804d822734f710d74a266c4fe911e4ca570dd0dc77edb30b61e7bc849da2c0e9ff051d024b167777aaa8e9d0adcc22de94c545b290a1a91d25885d34f30b06bce4dd091c7e23b74a462eb0636304014bafc70c89853c683efe2a2dc003c2370cc1beb549cc9d1637eace3507b94ac90347"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x140, 0xa, 0x0, 0x0, {{0x8}, {0x80, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0xad58, 0x22, 0xfd, 0x8}, {0xfff9, 0xf9, 0x0, 0xf66164b}]}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x175, 0x4, 0x1, 0x8}, {0xd, 0x7, 0x12, 0x5}, {0x3, 0x81, 0x0, 0x6}, {0x3, 0x81, 0x7, 0x1000}, {0x100, 0x6, 0x6, 0x7fff}, {0x0, 0x8, 0xc, 0x7ff}, {0xd0, 0x1, 0xf5, 0x8}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x7514, 0x7, 0x8000, 0x5}}]}, {0x9b, 0x6, "8ecedd4f189ffd0ea76e698fb265568ff9cc348d95e9cc0d263aa4efc87ba35f95935cfad0d15bd7cd1dcb27cff8127d25fd84de09829b184535fd7c330bdc90665f6f98d46828b66f2bfd7b82c9b17f7367db7f2876a00a61e3cb1ec008012450070f0876bc00ad52f39ffd287865ad73c1ca59f8aa915902e9d5b41c849110e8b05be14e51f2eb42dfb47fc0f356ad6db76d03a6bb73"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0x15b4, 0x1d, 0x0, 0x0, {{0xb}, {0x150c, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7ff}, @TCA_POLICE_RATE={0x404, 0x2, [0x7841f4c9, 0x842c, 0xfffffffc, 0x6, 0x7, 0x7, 0x4, 0x0, 0x3, 0x2, 0xffff, 0x254e, 0xa, 0x9, 0x9, 0x4, 0x0, 0x4, 0x5, 0x1, 0x8, 0x5, 0x2, 0x5, 0x1, 0x6, 0xfff, 0x5a, 0x9, 0x400, 0x9, 0x2, 0x8, 0xcc, 0x5, 0x3, 0x0, 0x4, 0x7a9, 0x4, 0x9, 0x7, 0x5, 0x0, 0x8, 0x56b, 0x3, 0x800000, 0x2, 0x574, 0x1e, 0x7, 0xfffffff7, 0x31da, 0x4, 0x9, 0x9, 0x401, 0x5, 0xffffffff, 0x7f, 0x6, 0xf7e1, 0x4, 0x6, 0x100, 0x7, 0x6, 0xf11a4d0, 0x4, 0x2e, 0x3, 0x9, 0x7, 0x6, 0x0, 0xb, 0x0, 0x401, 0x6, 0x4c, 0x0, 0x3, 0x7fffffff, 0x5, 0x3, 0x0, 0x6, 0x7, 0x3b, 0xb8e3, 0xfff, 0x6, 0x4, 0xc, 0x3, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0xfffffffa, 0xfffffffb, 0x1, 0x9, 0x8, 0x6c, 0x9, 0x7f, 0x0, 0x7fffffff, 0x4, 0x3ff, 0xe2, 0xd, 0x2, 0xffff851a, 0xaaaa, 0xffff098e, 0x100, 0x3, 0x5dd, 0x4, 0xcac, 0xd807, 0x3, 0x6, 0x1, 0x1, 0x7c, 0x1, 0x3ff, 0x4, 0x7, 0x1, 0x4e86, 0x2, 0x8, 0xe, 0x1, 0x3, 0x8, 0x10, 0x2, 0x7, 0xffffffff, 0x81, 0x3, 0x6, 0x1, 0x0, 0x2, 0x0, 0x6, 0xe, 0x3, 0x6, 0xffffffff, 0x1, 0x5, 0x1b73, 0x3, 0x5, 0x1, 0x6, 0x3f4, 0x7, 0x7f, 0x3ff, 0x3ff, 0x1, 0x1, 0xff, 0x4, 0x8, 0x0, 0x1, 0x1, 0x81, 0x1, 0x6, 0x6, 0x8, 0x9, 0x7fff, 0x7, 0x1, 0x2, 0x8, 0x3, 0x1000, 0x5e830832, 0x7, 0x4, 0x6, 0x7fffffff, 0x0, 0x7ff, 0x400, 0x3, 0x5, 0x8001, 0x0, 0xfff, 0xad6, 0x7, 0x6, 0x0, 0x5, 0x5, 0x7, 0x1, 0x3, 0x5, 0x8, 0xfff, 0x0, 0x4, 0x2, 0xbc, 0x5, 0x4, 0x1000, 0x40, 0x4, 0x9, 0x2, 0x3, 0x5bf9, 0x3, 0x75, 0x5, 0x5, 0x2, 0x80000000, 0x6, 0xf, 0x0, 0x5, 0x1, 0x101, 0xb6, 0x2591, 0xe7, 0x451c, 0xfffffe01, 0x5, 0x81, 0x1, 0xee65, 0x1ff, 0x1, 0x9, 0x6, 0xab19, 0xf0]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x3, 0x7fff, 0x7, 0x5, {0x9, 0x0, 0x100, 0x2, 0x125, 0x6}, {0x4, 0x1, 0x1, 0x5, 0x7, 0x3}, 0xd0, 0x3, 0x5}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x1, 0x8, 0x2, 0x2, 0x1000, 0x18b0d35c, 0x4, 0x6, 0x0, 0xb, 0x6, 0x6, 0x6, 0x46, 0x3, 0x8001, 0xa, 0x0, 0x0, 0xffffff80, 0x3ff, 0x2, 0xae, 0x1, 0x1, 0x1000, 0xfffffffc, 0x7, 0x8, 0x4, 0x10001, 0x8001, 0xb, 0xdc7, 0x78, 0x9, 0xfffffffe, 0x4, 0x8, 0x4, 0x1, 0x4, 0x80000000, 0x60, 0x3ff, 0x4, 0xc, 0x2, 0x2, 0x4, 0x8000, 0x4, 0xfffffff7, 0x2, 0x1, 0x3, 0xa, 0x17c, 0x5, 0x3, 0x0, 0x9, 0xfffffff8, 0x3ce, 0x7, 0xf, 0x7, 0x50000, 0x9d12, 0x0, 0x3, 0x3ff, 0x4, 0x2, 0xfffffff8, 0x1, 0x8, 0xffffffff, 0x6, 0x4, 0x1, 0x7, 0x10000, 0x4, 0x8000, 0xffff, 0xf298, 0x5, 0x5, 0x1, 0x2, 0x8, 0x7, 0x2, 0xff, 0x8, 0x800, 0x200, 0x2, 0x0, 0x5, 0xad6, 0x3, 0x6, 0x3, 0x20d3, 0x1, 0x1, 0xffffffff, 0xa4ce, 0x120c600, 0xfff, 0x1, 0x1, 0x6, 0xfffffffa, 0xe, 0x6, 0xf2a3, 0x40d06796, 0x0, 0x7b, 0xa164, 0xf, 0x2, 0x2, 0x5, 0xb, 0x6, 0x80, 0x400, 0x98, 0x8, 0xe0000, 0xc, 0xfffffff7, 0x100, 0x4, 0x682, 0x7, 0x1, 0x9, 0x4, 0x1, 0x8, 0x2, 0x761, 0x804, 0x7, 0x81, 0x2, 0x9, 0x50, 0xff, 0x1, 0x353d, 0xcd, 0xfff, 0x9, 0x76, 0x3, 0x9, 0x6, 0x3, 0x40, 0x78000, 0x8, 0xb, 0x3, 0x116, 0x100, 0xf2, 0x34ab, 0x2, 0x8, 0x0, 0x80000000, 0x40bc, 0xd85, 0x3, 0x7ff, 0x9, 0x3, 0x4, 0xdd, 0x40000, 0x7, 0x16, 0x8, 0x1, 0xfffff800, 0xb96, 0x101, 0x80000001, 0x5, 0x2, 0x0, 0x80000001, 0xc8, 0x7, 0x92, 0x0, 0x7f, 0x6, 0x80000000, 0x0, 0x7, 0x800, 0x3, 0x395ea58f, 0x5, 0x8, 0x9, 0x9, 0x8a, 0x3ff, 0x5, 0x401, 0xfffffff2, 0x3, 0x400, 0x200, 0x7, 0x5, 0x6, 0x2000, 0x1, 0x400, 0x9, 0x7, 0x7, 0x0, 0x9, 0x14dafc78, 0x1, 0x10000, 0xecaf, 0x9, 0x3251, 0x9, 0x7fff, 0xff, 0x6, 0x0, 0x10001, 0x2, 0x929, 0x1, 0x80000000, 0x2, 0x2, 0x6, 0x3, 0x2, 0x7f]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffef, 0x81, 0x1684933a, 0x6, 0x3ff, 0x7fff, 0x8, 0x80, 0x4e27, 0x9, 0xdd8, 0x4, 0x800, 0x5, 0x7, 0xfffffff9, 0x8, 0x71999908, 0x4, 0xfffffffa, 0xcad, 0x1, 0x1, 0xfffffa13, 0x7, 0x0, 0x3, 0x80000000, 0x0, 0x5a, 0x101, 0x0, 0x3, 0x0, 0x8000, 0x8001, 0x1, 0x786, 0x8, 0x1, 0x1, 0x40, 0xff, 0x2d, 0x0, 0x39a, 0x3, 0x8000, 0x1, 0x7, 0x49, 0x2, 0x5, 0x3, 0x0, 0xfffffff1, 0x40, 0x93, 0x68, 0x1, 0x7f, 0x7ff, 0x9, 0x7fffffff, 0x1, 0x5, 0x0, 0xee4, 0xbc7, 0x0, 0x3, 0x6, 0x6, 0x8, 0x0, 0x9, 0x5, 0x101, 0xb, 0x5, 0x2027e30b, 0xb2, 0x100, 0x800, 0x9, 0x0, 0x0, 0x6, 0xffff8000, 0x7, 0x7ff, 0x8, 0x5, 0x2, 0x3, 0x4, 0x9, 0x3, 0xfffffffa, 0x3, 0x400, 0x8000, 0xf98, 0x266c, 0x2, 0x4, 0x6, 0x10001, 0xe2a, 0x52b, 0xe4c, 0x8, 0x81, 0x8, 0x1, 0xfffffc00, 0x7, 0x10001, 0x10001, 0x2, 0x6, 0x8, 0x7, 0x1000, 0x6, 0xd8a, 0x2bc, 0x4, 0x3, 0x3, 0x95, 0x3, 0x2, 0xfffffff7, 0x6, 0x6, 0x2, 0x10000, 0x4, 0x3, 0x3, 0xa215, 0x7, 0xc153, 0x8, 0x3c, 0x4a, 0x9, 0x3, 0x2, 0x8, 0x707, 0xb, 0xd9f, 0x2, 0x9, 0x7, 0x8001, 0xde7, 0x6, 0x81, 0x40, 0x7fff, 0x4eb9, 0xffffde34, 0x6, 0x0, 0x10001, 0x10001, 0x9, 0x6, 0xcca, 0x100, 0x2, 0x7fffffff, 0x8, 0x4, 0x5, 0x2, 0xf9, 0x7, 0x9, 0xd, 0x4, 0x5, 0x8, 0x9, 0x1, 0x7, 0x1, 0xc, 0x4, 0x6, 0x2, 0x7, 0x5, 0xfff, 0x40, 0xce79, 0x8c0f, 0x5, 0x91, 0x8, 0x5, 0x9, 0x4, 0x80000000, 0x5, 0x1, 0x3ff, 0xd8f3, 0xde, 0xd82a, 0x9, 0x7, 0x9, 0x9, 0x6fe4, 0xffffffff, 0x1ff, 0xfffffe00, 0x3, 0x94f, 0x6, 0x45b, 0xe37, 0x4, 0x129, 0x5, 0x5, 0xf41, 0xffff, 0x6, 0x3ff, 0x9, 0x1, 0x0, 0xffff, 0x401, 0x7, 0x6, 0x30f9, 0x6, 0xce, 0x5c, 0x9, 0x9, 0xfffff57a, 0x7fffffff, 0xfffffff7, 0x5, 0x1, 0xffff, 0x5, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80, 0x7, 0xfffffffe, 0x9, 0x8, {0x8, 0x1, 0xf, 0x1, 0x6b5, 0xffffffff}, {0x0, 0x1, 0x0, 0xfffb, 0xbe71, 0x9}, 0x3, 0xffffff80, 0x1ff}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x3, 0xadd, 0x6, 0x8, 0x6, 0x100, 0x8, 0x3, 0x1, 0x4, 0x4a1d, 0x4, 0x2, 0x37d0, 0x1, 0x0, 0xfff, 0x7, 0x10, 0x4, 0x2, 0xb99bffe, 0x8, 0x4, 0x10000, 0x7, 0x80, 0x8001, 0x2, 0x7, 0x9a32, 0x8, 0x2, 0x80000001, 0x1fc0, 0x7fff, 0x1, 0x7, 0x6, 0x9, 0xf, 0x7, 0x8, 0x9, 0x80000000, 0x5, 0x0, 0xd, 0x3, 0x0, 0x3, 0xb, 0x1, 0x9, 0x7fffffff, 0x1, 0xad, 0x4, 0xc, 0x4000008, 0x4, 0xff, 0x61, 0x9, 0x0, 0x1, 0x3, 0xfff, 0x1, 0xd, 0x7, 0x3, 0x50df, 0x2, 0x7fff, 0x5, 0xfff, 0x0, 0x4, 0x9, 0x2, 0x1ff, 0x9f, 0x0, 0x39, 0x4, 0x2, 0x9, 0x4, 0xdc4, 0x1000, 0x1, 0x6, 0x4, 0x4, 0x2, 0x8000, 0x6, 0x2, 0x4, 0x0, 0x3d8d, 0x4, 0x80000000, 0x969, 0xffff, 0x4, 0x401, 0x1521, 0x81, 0x6, 0x1, 0x17, 0x5, 0x5, 0xcaf, 0x4, 0x5, 0x6, 0x6, 0x5, 0x3, 0x0, 0xfff, 0x3, 0x4, 0x7fff, 0x1, 0x4, 0xfffffffa, 0x161, 0xfffffff6, 0x6, 0x9, 0x9, 0x5, 0x3, 0x2, 0x6, 0xe, 0x10000, 0x800, 0x7, 0xca, 0xfffffffe, 0x80000001, 0x0, 0xe0000000, 0x5, 0x2a3d, 0xffffffc0, 0x3, 0x2, 0x0, 0x8000, 0xfffffffe, 0x80000001, 0x4, 0xc, 0xc, 0xffffffff, 0x4, 0x1, 0xbb2, 0x8, 0x7, 0xbc0, 0x9, 0xbe, 0xb, 0x1, 0x5, 0xfffff000, 0x6, 0xcfe, 0x7, 0x0, 0x0, 0x8, 0xffffe51e, 0x0, 0x81, 0x7, 0x2, 0x3825892f, 0x80000001, 0x81, 0x6, 0xc4, 0x1, 0x8, 0x7, 0xffffffff, 0x1000, 0x5, 0x1, 0x2, 0xfffffffd, 0x0, 0x5, 0x2b3d4227, 0x5, 0x1, 0x3ac, 0x7f, 0x8, 0x97, 0x0, 0x5, 0xad2e, 0x3, 0xfff, 0x9, 0xffffff59, 0xfff, 0x0, 0x3, 0x3, 0x73, 0x5, 0x0, 0x9a, 0x9, 0xffffffff, 0x9a, 0x314, 0x1935, 0x3, 0xe, 0x4, 0x49, 0x2222, 0x72c, 0x4, 0x7, 0x8, 0x55, 0xf, 0x10001, 0x5, 0x8, 0x7, 0x3ff, 0x9, 0x8, 0x6, 0x7, 0x7, 0x9, 0x47, 0x2, 0x2, 0x3, 0x81, 0x8001]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x10000006, 0x3, 0x852, 0x7, {0x20, 0x1, 0x2, 0x2, 0xac76}, {0x90, 0x0, 0x7fff, 0x1, 0x3d1, 0x67}, 0x7, 0x0, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x101, 0x80000001, 0x401, 0xdf3c, 0x9, 0x6a5a, 0x2, 0x6, 0xffff9d5b, 0x0, 0xfffeffff, 0x4, 0x1, 0x8, 0x6, 0x1ff, 0x774f, 0x8, 0xa81cb09, 0x9, 0x1, 0xfffffffb, 0x8, 0x49, 0x3, 0x10000, 0x4, 0x2, 0x1, 0x2, 0x3, 0xa, 0x0, 0x6, 0x7f, 0x54cc8216, 0x800, 0xffff7ed4, 0x9, 0x3, 0x6fdf6000, 0x9, 0xff, 0x3, 0x4, 0x9, 0x1, 0x3c4, 0xa57, 0xc, 0x0, 0x1, 0x3dd, 0x6, 0xfb2, 0x5, 0x4, 0x401, 0x0, 0xf176, 0x5, 0xc6c, 0x20000, 0x3, 0x3, 0x3, 0x0, 0x0, 0x8, 0x2, 0x2, 0x8, 0x45b2, 0x5, 0x6, 0x8, 0x8, 0x8, 0x6, 0x7, 0xc, 0xa6f5, 0x3c, 0x8, 0x8, 0x8000, 0x80000001, 0x5, 0x4, 0x4, 0x0, 0x1, 0xfe, 0x805, 0x6, 0x0, 0x3, 0x8, 0x3ff, 0x4, 0x1, 0x8, 0x100, 0x7fff, 0x9, 0x5, 0x3, 0x1, 0x400, 0x7, 0x4, 0x34, 0x5, 0x7fd, 0x380, 0x3, 0x93b, 0x1, 0x2, 0x40, 0x3, 0x81, 0x4, 0xd, 0xefdf, 0x6, 0x7, 0x93, 0x74d506ee, 0x8001, 0x2, 0xfffffffa, 0x7fff, 0x5, 0x5, 0x0, 0x40, 0x3, 0x7, 0x6, 0x4, 0x2, 0x80000001, 0x7, 0xa2, 0x2, 0x9, 0x47, 0x1000, 0x10000, 0x6, 0x7, 0x1, 0x2, 0x400, 0x2, 0x6, 0xff, 0x5, 0x7, 0x7, 0x7, 0x16c, 0x10001, 0x8, 0x3, 0x40, 0x4, 0x1, 0x1ff, 0x7fff, 0x29e, 0x1315, 0x8, 0x800, 0x0, 0x5, 0x3, 0xc845, 0x8, 0x5, 0x1, 0xf7, 0x6, 0x4, 0x5, 0x5, 0x173, 0x5, 0x7ff, 0x10000, 0x0, 0xc, 0x5, 0x5, 0x1000, 0xfbd8, 0x6, 0x1, 0xf14b, 0x6c6, 0x48a9710f, 0x8, 0x6000, 0x1, 0x6, 0x143, 0x1, 0x4, 0xc2d, 0x3, 0x7, 0x40, 0x20, 0x5, 0x3, 0x7, 0x7ff, 0x3, 0x7, 0x0, 0x2, 0xcfa, 0xff, 0xe8, 0x7d6d1ee1, 0x3, 0x5, 0x6, 0x8, 0x4800000, 0x502f3030, 0x400, 0x3, 0x401, 0xd7f, 0x80000001, 0x0, 0x8, 0x10000, 0xffff, 0x0, 0x6, 0x7, 0x1, 0x4, 0x5d, 0x8, 0x1, 0x7, 0x8000, 0xffffffff, 0x5, 0x80, 0xc]}]]}, {0x7d, 0x6, "47d83f6218d59af1f4657666c6f6d3a1a96b8e3193aec58d37668e8155cf5decdeed14f85746e56a8656d9f718ad7e9773f3ab5f233e15eca1906bce940c0bd139c3ff12de6a6706e524cc093449dae89f16dedd3b07e0da4ac9400f7bb3250cb58cc8131ac0476adf770438759f69aabe7d18844d0ec82664"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x758, 0x1, [@m_sample={0xd8, 0x1a, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7f}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x200, 0x3, 0x2, 0x8}}]}, {0x83, 0x6, "a9c59fb5fd904deef430de1fea26d1c37e9915ee4a14b6de92d197d18a5b1f998063226ada7050b3e885212b629817551ee561385ff6266ebe5f3c4940d420dcac11086174831b1471891a813a1d9ccb0c415ea5301372d57c43853171ba7c2a34b79766df4b517357312b104317ae4847a706b56a4aee10a92d9e957d6d90"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x84, 0x2, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x800, 0x3, 0x4, 0x1}, 0x6}}]}, {0x31, 0x6, "3289f0a2f1417c58e65ba534b436a8dc3da6fa6c1d45b7d111980f3c74735366f297094676d48fa59eb8ff415d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0xa0, 0xa, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0xbc56, 0x5, 0x2, 0x7fffffff}, 0x3}}]}, {0x46, 0x6, "20085940d16e7de4221cbe6276d1990318a594e4a37f4245578f9824eb5764a86e6c3ec9ec7b2b923db9a4c3e4594950963a43163f2553bd7a8802adadd8290ef3ff"}, {0xc}, {0xc}}}, @m_vlan={0xbc, 0x0, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x10, 0x1, 0x2, 0x2, 0x18c15302}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa29}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4c, 0x6, "e42d53f2f676488bfe70a1d2bc179ea5281b89d76e1c19ddfb39cefc3fed51c7940176e0e110b261f8ddb66a663f0f5a180d5f5b2c39e30b1105889e4feb12e0d21224f9fddd1a77"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0x49c, 0x3, 0x0, 0x0, {{0x7}, {0x400, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xbc, 0x6, {0x7, 'filter\x00', 0x43, 0x1, "f4df7329b2fbd00100b9736729035ec68a65eefaf47dfd824244cf95ca11e7bec040da40ccaa42d9571f0d74abae31301d5f87d05f19fe67b36bcb9722f81c210b2fc13d61e6a2481182a564681e765aa8e0f8bd6c68b6f94ce5609ad58888a3accf2962f4c918882d6d828521a8e5868e562f29547ac6ff435c8a84a42897cbd7b20b2cc9af9872c456df03b075962d043b"}}, @TCA_IPT_TARG={0xf3, 0x6, {0x6, 'raw\x00', 0x7, 0x4, "88aaca05cafb73ac4ec6befc73ce51c8cfa6b3077ecf2a1f9fe65aa2b5f034326b980e591b4658d269286bc64ce8dcdd4d4f0f808461fcabe86b96542c4f3a1b17c70bce081d71e62c02aa6d0b504e470af2dba0eccd8ec5c74b9ebf7a869dedd58fc19d33b270d3e64d9b5de39f3da6e7367a4f5a886b24671fcb375c77d99f1941a4bba12fce2a8c52a4e359831101d1717c0b64d9541c9e6fe74b02fbf257b70b775025e1728e5765226ee7911f602a4abf2f7d8d7711756956830263bd7fe986ca022a39ec4212"}}, @TCA_IPT_TARG={0xec, 0x6, {0xc1a, 'security\x00', 0x0, 0xc, "f87254564967d434e2ae16f9920b08e55454e40fe9faf893554645405a5c7dcb6e161f4511cf2a13e77b3606932225d685b175bc907c1ab0f2e917ddc63f4786c3956ecf47bb703211d209122da4660b9908981f666a9f4ca75d9b3ed62a0579e7c37056c4f5caf1816632462d1d4fa91df43051b93f26a36ae96ac6f13d58d675804dd5f733da56fe30b3642a2eec51d04a01f9976453569231a79ae9d0f65005db2a1267da527b597edc44e262629f49c9e7b7a36a4680ac4785b695aa49741798"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x68, 0x6, {0xaa3b, 'nat\x00', 0x3a, 0xacdf, "9cdb58507780603fc12e5660cd3b20aa0252ede27a6d3d79d9c224a9341efadc8dabc563a663826cc049a7f8e4f08e756279281295c9505e0b14b06c4d73"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x99a}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x95, 0x6, {0x7, 'filter\x00', 0xa6, 0x7, "7cd6848369bb0f9fc524a2678249ce2520b26717f759c156e7a3740c71c4822fbbf0f82219a590a07f18773c9a72bcb1396ca545d6a69fa0ecbc51d68f4632631efc38880798291c6b22032aa03e6e0ff4e9f8507ab10186137efd2e7fca939af40bee306bbdbab014ba4e"}}]}, {0x75, 0x6, "4b3642a55db15b322b9cbbf1806d9e708f1d0a431e1d531e94bceb5e894958db3418b0c4a5535d6713b4c7511f7a8065e9f88f9b66adfda73647668c6f0eeb56ce8882893b984b74f7c75e98bb3a77379acdd9577ee5db85e710a4b52a7ba9ca432dfac58541a80e4df619bd3de6c55842"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x14d0, 0x1, [@m_ife={0x94, 0x2, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x9}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_METALST={0x3c, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xfffffffa}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x401}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, {0x10, 0x6, "3cb682a67427ed92f972194e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_connmark={0xc8, 0x7, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x2, 0x0, 0x401, 0x8}, 0x9}}]}, {0x7a, 0x6, "7afcfe141bb80f2372383c04c476092ac4220df9f912be326d7f2a8eff3fd45a4b7739d79b79c9b2ccf5a5efc98dc3739c71c511374cb74c8adfd753b4d3357ac5ce9cbf3948d57dad3cf848af5a90a47fb8bcc481c1c6d562169719a8772e9c33a1ba9a438056f5984e15e26fca80a8cdcb1c1447cd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0xa8, 0x10, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x49, 0x3, 0x1ff, 0x1}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x0, 0xa, 0x7}, 0x9}}]}, {0x40, 0x6, "da6346dabc8099b0372faf20b171bc677c4e2e67947fa261533a618930b5261695f47c64fd1347ab891f35e33b0cdc9699d30d63c78295476e06ca9e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_nat={0x21c, 0x1c, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x4, 0x1, 0xcbc8}, @multicast1, @private=0xa010101, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xb0, 0x6, 0x5, 0x6c, 0x2}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffd, 0x5, 0x20000000, 0xfff, 0x400}, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7f, 0x10000, 0x10000000, 0x4, 0xb6}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x28}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0x1, 0x6, 0x77c1, 0x7fff}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7f, 0x0, 0x7, 0x1}, @multicast1, @local, 0xffffff00, 0x1}}]}, {0x103, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0xb8, 0x8, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x1ff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}]}, {0x7b, 0x6, "73c632699ec92397b0167a07b1f7bb40a2a665197859cab09a8e6906837b746c6cb0dde0d6b23d7c1437754d6e9eb3612c64d258c6774a0a4811385add16212bfb3558e1379c588eb1d357d2da3ef52601c9971a80a180f72df88cba407ca64584ea595508a938eefa23da75a18cc8d2f3e9b52735284f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x40, 0x20, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x8000, 0x3, 0xf8, 0xd7}]}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0xfb4, 0xc, 0x0, 0x0, {{0x8}, {0x4}, {0xf8c, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x4}]}, 0x3694}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000003000000050010000b00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r1}, 0x38) 1.123218194s ago: executing program 2 (id=1547): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a100000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1], 0x44}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 761.355788ms ago: executing program 2 (id=1548): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a100000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1], 0x44}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) (fail_nth: 1) 635.911064ms ago: executing program 1 (id=1549): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$NS_GET_USERNS(r1, 0x8004b709, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x200000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) ioctl$HIDIOCGCOLLECTIONINFO(r2, 0xc0104811, &(0x7f00000000c0)={0x0, 0x43f, 0xfffffe01, 0xffffffff}) unshare(0x22020400) r4 = creat(&(0x7f0000001c40)='./file0\x00', 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000000)={0x100000, 0x70, 0x0, {r4}}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a100000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3], 0x44}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @private=0xa010100}, 0x1}}, 0x26) 352.084854ms ago: executing program 2 (id=1550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) socket$inet(0xa, 0x801, 0x84) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x58400, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unlink(&(0x7f0000000000)='./file1\x00') r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x10, 0xffe0}, {}, {0x8, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x34, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x6, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xfc}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 283.588783ms ago: executing program 5 (id=1551): io_uring_enter(0xffffffffffffffff, 0x4739, 0x293c, 0x0, &(0x7f0000000180)={[0x5]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x200, 0x800, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {0xc, 0x6}, {0x5, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x4f5e7fc9}, @TCA_CODEL_ECN={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x44e, 0x120c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000005c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xe255}}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "db19ff47"}]}}, 0x0}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x28440, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x8108551b, &(0x7f0000000280)={0x5, 0x0, "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"}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040814}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtclass={0x498, 0x28, 0x100, 0x70bd23, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xfff4, 0x6}, {0xb, 0xfff2}, {0x7, 0x10}}, [@tclass_kind_options=@c_htb={{0x8}, {0x40c, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RTAB={0x404, 0x4, [0x5, 0x10000, 0x10001, 0x6, 0xffff5808, 0x8fa, 0x8, 0xfffffffc, 0x0, 0x7, 0xffffffff, 0x7, 0x80, 0x0, 0x13900, 0x8000, 0x8598, 0x7fff, 0x1, 0x6, 0xe, 0x2, 0x4, 0xb5, 0x3, 0x3, 0x8000, 0x80000000, 0x7fffffff, 0x2, 0x6, 0x4, 0x1, 0x80000001, 0x1, 0x77cc, 0x8, 0x6, 0x5, 0x5, 0x68, 0x1a9af693, 0x4, 0x29da, 0x4, 0x3, 0x3754090e, 0x6, 0xf, 0x84ac, 0x311, 0x7, 0x2, 0xca3, 0x4, 0x0, 0x80000000, 0xfffff001, 0x8, 0x8000, 0x87, 0x8, 0x9, 0xfffff000, 0x81, 0x0, 0xdc2, 0x9, 0x0, 0x4, 0x5, 0x1ff, 0xfffffff8, 0x7, 0x0, 0x2, 0x30, 0x40, 0xc, 0x7, 0x3, 0x6, 0x3, 0x5, 0xfffffffe, 0x1, 0x7fff, 0x7, 0x40, 0x7ff, 0x80000001, 0xffffff00, 0x7fff, 0x6, 0x6, 0x7, 0xd, 0x4, 0x6, 0x5, 0x0, 0x8, 0x2, 0x5, 0x4, 0x1000, 0x7, 0xffffffff, 0x3, 0x8, 0xfffffffd, 0xfffffff9, 0x4, 0x4, 0x9, 0xb6, 0xbb21, 0x2, 0x9, 0x400, 0xdc, 0x4, 0x9, 0x5, 0x5, 0x2, 0x8, 0x6, 0xff, 0xe55, 0x1000, 0x3, 0x5, 0x7d6e, 0x0, 0x81, 0xf, 0x6, 0x5, 0x101, 0x6, 0x7, 0x200, 0x7, 0xfffffffd, 0x2, 0x1, 0x0, 0x6, 0x10, 0x2, 0x0, 0xfffffff8, 0x6cd2cb21, 0x1, 0x9, 0x9, 0x5, 0x6, 0x3, 0x5, 0x91, 0x4, 0x1, 0x3, 0x1, 0xffff, 0x8, 0x95, 0x5, 0x4096f832, 0x85, 0x3, 0x0, 0x1, 0x1, 0x7, 0xffffffff, 0xfb2, 0x9, 0x4, 0x3, 0x80, 0x401, 0x7, 0xfffffffe, 0x7, 0x4, 0xff, 0x4bc, 0x4, 0x2, 0x7f, 0x9, 0x863e, 0x100, 0x8, 0x9, 0x2, 0x2, 0x9, 0x4, 0x1a0, 0x0, 0x4, 0x7, 0x3bdc, 0x800, 0x10001, 0x5, 0x800, 0x8, 0x7fff, 0x7, 0x8, 0x8001, 0x1ff, 0x7, 0x8a, 0x73d, 0x3, 0x78c, 0x0, 0x7, 0x3, 0xfffffffa, 0xcfb, 0x8, 0x0, 0x0, 0x4ec8c481, 0x8001, 0xe52, 0x7, 0xdf4c, 0xb413, 0x2afc, 0xff, 0x606, 0x3ff, 0x4010000, 0x6, 0x7, 0x6, 0x0, 0x7, 0x6, 0x80, 0x2, 0x180000, 0x0, 0x400, 0x0, 0xfffffffa, 0x1ff, 0xe]}]}}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x200}}}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_tbf={0x8}]}, 0x498}}, 0x400c084) 185.734331ms ago: executing program 0 (id=1552): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) 0s ago: executing program 4 (id=1553): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000010004b0400000005000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b0001006272696467650000280002800600060000040000050007000700000005"], 0x58}}, 0x0) kernel console output (not intermixed with test programs): ocess `syz.0.1196'. [ 406.945568][ T977] usb 5-1: Manufacturer: syz [ 406.953746][ T977] usb 5-1: SerialNumber: syz [ 407.169861][ T977] cdc_ncm 5-1:1.0: invalid descriptor buffer length [ 407.211576][ T977] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 407.233119][ T977] cdc_ncm 5-1:1.0: bind() failure [ 407.255791][ T977] usb 5-1: USB disconnect, device number 54 [ 407.366423][ T5894] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 407.526413][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 407.551566][ T5894] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 407.591352][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.608044][ T5894] usb 6-1: Product: syz [ 407.621527][ T5894] usb 6-1: Manufacturer: syz [ 407.630537][ T5894] usb 6-1: SerialNumber: syz [ 407.641870][ T5894] usb 6-1: config 0 descriptor?? [ 407.652714][ T5894] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 407.901341][ T5894] gspca_stk1135: reg_w 0x2 err -71 [ 407.912923][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 407.929748][ T5894] gspca_stk1135: Sensor write failed [ 407.935690][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 407.978523][ T5894] gspca_stk1135: Sensor write failed [ 407.983994][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 408.015417][ T5894] gspca_stk1135: Sensor read failed [ 408.027299][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 408.041551][ T5894] gspca_stk1135: Sensor read failed [ 408.056233][ T5894] gspca_stk1135: Detected sensor type unknown (0x0) [ 408.063390][T10324] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1202'. [ 408.099840][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 408.125815][ T5894] gspca_stk1135: Sensor read failed [ 408.136435][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 408.149905][ T5894] gspca_stk1135: Sensor read failed [ 408.155846][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 408.176370][ T5894] gspca_stk1135: Sensor write failed [ 408.181759][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 408.218557][ T5894] gspca_stk1135: Sensor write failed [ 408.235114][ T5894] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 408.254788][ T5894] usb 6-1: USB disconnect, device number 27 [ 408.285579][ T5832] Bluetooth: hci0: unexpected event for opcode 0x200f [ 408.882135][T10350] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 410.146704][ T5841] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 410.172324][ T5894] hid-generic 0000:0005:0009.0012: unknown main item tag 0x0 [ 410.201156][ T5894] hid-generic 0000:0005:0009.0012: unknown main item tag 0x0 [ 410.275411][ T5894] hid-generic 0000:0005:0009.0012: unknown main item tag 0x0 [ 410.316752][ T5894] hid-generic 0000:0005:0009.0012: hidraw0: HID v0.02 Device [syz0] on syz1 [ 410.338743][ T5841] usb 2-1: config index 0 descriptor too short (expected 126, got 72) [ 410.403263][ T5841] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 410.430779][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.457338][ T5841] usb 2-1: Product: syz [ 410.468909][ T5841] usb 2-1: Manufacturer: syz [ 410.478985][ T5841] usb 2-1: SerialNumber: syz [ 410.501321][ T5841] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 410.544953][ T5887] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 410.573886][T10369] fido_id[10369]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 411.069668][T10376] FAULT_INJECTION: forcing a failure. [ 411.069668][T10376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.106738][T10376] CPU: 1 UID: 0 PID: 10376 Comm: syz.0.1219 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 411.106771][T10376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 411.106787][T10376] Call Trace: [ 411.106795][T10376] [ 411.106803][T10376] dump_stack_lvl+0x189/0x250 [ 411.106836][T10376] ? __pfx____ratelimit+0x10/0x10 [ 411.106859][T10376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.106882][T10376] ? __pfx__printk+0x10/0x10 [ 411.106913][T10376] should_fail_ex+0x414/0x560 [ 411.106944][T10376] _copy_to_user+0x31/0xb0 [ 411.106967][T10376] simple_read_from_buffer+0xe1/0x170 [ 411.106995][T10376] proc_fail_nth_read+0x1df/0x250 [ 411.107021][T10376] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 411.107046][T10376] ? rw_verify_area+0x258/0x650 [ 411.107067][T10376] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 411.107084][T10376] vfs_read+0x200/0x980 [ 411.107116][T10376] ? __pfx___mutex_lock+0x10/0x10 [ 411.107139][T10376] ? __pfx_vfs_read+0x10/0x10 [ 411.107162][T10376] ? __fget_files+0x2a/0x420 [ 411.107181][T10376] ? __fget_files+0x3a0/0x420 [ 411.107195][T10376] ? __fget_files+0x2a/0x420 [ 411.107218][T10376] ksys_read+0x145/0x250 [ 411.107238][T10376] ? __fget_files+0x3a0/0x420 [ 411.107255][T10376] ? __pfx_ksys_read+0x10/0x10 [ 411.107280][T10376] ? do_syscall_64+0xbe/0x3b0 [ 411.107304][T10376] do_syscall_64+0xfa/0x3b0 [ 411.107325][T10376] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.107345][T10376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.107360][T10376] ? clear_bhb_loop+0x60/0xb0 [ 411.107377][T10376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.107391][T10376] RIP: 0033:0x7fb20778d33c [ 411.107404][T10376] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 411.107416][T10376] RSP: 002b:00007fb2086b4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 411.107432][T10376] RAX: ffffffffffffffda RBX: 00007fb2079b5fa0 RCX: 00007fb20778d33c [ 411.107442][T10376] RDX: 000000000000000f RSI: 00007fb2086b40a0 RDI: 0000000000000004 [ 411.107451][T10376] RBP: 00007fb2086b4090 R08: 0000000000000000 R09: 0000000000000000 [ 411.107460][T10376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.107468][T10376] R13: 0000000000000000 R14: 00007fb2079b5fa0 R15: 00007fb207adfa28 [ 411.107489][T10376] [ 411.414498][T10378] xt_TPROXY: Can be used only with -p tcp or -p udp [ 411.697107][T10382] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1220'. [ 411.791308][T10383] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1220'. [ 411.915516][T10383] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1220'. [ 411.944241][T10366] sctp: [Deprecated]: syz.1.1216 (pid 10366) Use of int in maxseg socket option. [ 411.944241][T10366] Use struct sctp_assoc_value instead [ 412.054648][ T5887] usb 2-1: Service connection timeout for: 257 [ 412.081587][ T5887] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 412.185320][ T5887] ath9k_htc: Failed to initialize the device [ 412.246989][ T5887] usb 2-1: ath9k_htc: USB layer deinitialized [ 412.266648][T10392] xt_SECMARK: invalid mode: 2 [ 412.340823][ T5894] usb 2-1: USB disconnect, device number 58 [ 413.160005][ T5841] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 413.340889][T10418] program syz.4.1232 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 413.396803][ T5841] usb 1-1: config 0 has an invalid interface number: 92 but max is 0 [ 413.404954][ T5841] usb 1-1: config 0 has no interface number 0 [ 413.411476][ T5841] usb 1-1: config 0 interface 92 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 413.422396][ T5841] usb 1-1: config 0 interface 92 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 413.434379][ T5841] usb 1-1: config 0 interface 92 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 413.445701][ T5841] usb 1-1: config 0 interface 92 altsetting 0 endpoint 0x84 has invalid maxpacket 49879, setting to 1024 [ 413.457152][ T5841] usb 1-1: config 0 interface 92 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 413.471723][ T5841] usb 1-1: New USB device found, idVendor=093b, idProduct=a005, bcdDevice= 9.81 [ 413.488837][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.498173][T10420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1234'. [ 413.547827][ T5841] usb 1-1: config 0 descriptor?? [ 413.556562][T10406] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 413.574083][ T5841] em28xx 1-1:0.92: New device @ 480 Mbps (093b:a005, interface 92, class 92) [ 413.601633][ T5841] em28xx 1-1:0.92: DVB interface 92 found: isoc [ 413.826527][ T5841] em28xx 1-1:0.92: unknown em28xx chip ID (0) [ 414.005579][ T5841] em28xx 1-1:0.92: reading from i2c device at 0xa0 failed (error=-5) [ 414.254833][ T5841] em28xx 1-1:0.92: board has no eeprom [ 414.290386][T10434] vlan0: entered promiscuous mode [ 414.295939][T10434] vlan0: entered allmulticast mode [ 414.301441][ T5894] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 414.312292][T10434] veth0_vlan: entered allmulticast mode [ 414.355865][ T5841] em28xx 1-1:0.92: Identified as Plextor ConvertX PX-TV100U (card=40) [ 414.378625][ T5841] em28xx 1-1:0.92: dvb set to isoc mode. [ 414.417187][ T5887] em28xx 1-1:0.92: Remote control support is not available for this card. [ 414.462648][ T5841] usb 1-1: USB disconnect, device number 61 [ 414.473958][ T5894] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.484511][ T5841] em28xx 1-1:0.92: Disconnecting em28xx [ 414.504367][ T5841] em28xx 1-1:0.92: Closing input extension [ 414.505426][ T5894] usb 3-1: config 0 interface 0 has no altsetting 0 [ 414.547736][ T5841] em28xx 1-1:0.92: Freeing device [ 414.562121][ T5894] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 414.613789][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.629847][ T5894] usb 3-1: config 0 descriptor?? [ 414.858002][ T5894] kye 0003:0458:5019.0013: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 414.889335][ T5894] kye 0003:0458:5019.0013: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 414.925404][T10450] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1244'. [ 414.955146][ T5894] kye 0003:0458:5019.0013: tablet-enabling feature report not found [ 414.977116][ T5894] kye 0003:0458:5019.0013: tablet enabling failed [ 415.069317][ T5894] usb 3-1: USB disconnect, device number 36 [ 415.521489][ T30] audit: type=1326 audit(1751103188.272:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10458 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20778e929 code=0x7ffc0000 [ 415.548132][ T30] audit: type=1326 audit(1751103188.302:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10458 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20778e929 code=0x7ffc0000 [ 415.570507][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.589814][ T30] audit: type=1326 audit(1751103188.302:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10458 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fb20778e929 code=0x7ffc0000 [ 415.612965][ T30] audit: type=1326 audit(1751103188.302:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10458 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20778e929 code=0x7ffc0000 [ 415.635400][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.688660][ T30] audit: type=1326 audit(1751103188.302:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10458 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb20778e929 code=0x7ffc0000 [ 415.742537][ T30] audit: type=1326 audit(1751103188.302:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10458 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20778e929 code=0x7ffc0000 [ 415.776369][ T5887] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 416.562464][ T5841] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 416.720513][ T30] audit: type=1326 audit(1751103188.302:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10458 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20778e929 code=0x7ffc0000 [ 416.759931][ T30] audit: type=1326 audit(1751103188.302:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10458 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb20778e929 code=0x7ffc0000 [ 416.782701][ T5887] usb 6-1: Using ep0 maxpacket: 8 [ 416.805316][ T5887] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 416.819453][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.832692][ T30] audit: type=1326 audit(1751103188.302:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10458 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20778e929 code=0x7ffc0000 [ 416.923354][T10475] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1252'. [ 417.146310][ T5841] usb 1-1: Using ep0 maxpacket: 8 [ 417.152726][ T5887] usb 6-1: Product: syz [ 417.246273][ T5887] usb 6-1: Manufacturer: syz [ 417.259021][ T5887] usb 6-1: SerialNumber: syz [ 417.265942][ T5841] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 417.276510][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.285766][ T5887] usb 6-1: config 0 descriptor?? [ 417.295213][ T30] audit: type=1326 audit(1751103188.302:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10458 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20778e929 code=0x7ffc0000 [ 417.356460][ T5841] pvrusb2: Hardware description: Terratec Grabster AV400 [ 417.471946][T10478] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1251'. [ 417.515648][ T5841] pvrusb2: ********** [ 417.528862][ T5887] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 417.556137][ T5841] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 417.598298][ T5841] pvrusb2: Important functionality might not be entirely working. [ 417.623969][ T5841] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 417.734287][ T5887] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 417.955237][ T5887] usb 6-1: USB disconnect, device number 28 [ 417.973869][ T5841] pvrusb2: ********** [ 417.981752][ C1] hrtimer: interrupt took 20930 ns [ 418.005579][ T2341] pvrusb2: Invalid write control endpoint [ 418.107306][T10488] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1254'. [ 418.190525][ T2341] pvrusb2: Invalid write control endpoint [ 418.211776][ T5887] usb 1-1: USB disconnect, device number 62 [ 418.258823][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 418.302380][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 418.344361][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 418.443459][ T2341] pvrusb2: Device being rendered inoperable [ 418.460552][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 418.494692][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 418.534736][ T2341] pvrusb2: Attached sub-driver cx25840 [ 418.566098][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 418.611764][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 420.042785][T10521] program syz.5.1262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 420.353246][T10523] ALSA: mixer_oss: invalid index 40000 [ 421.016126][ T5894] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 421.268482][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 421.310313][ T5894] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 421.326334][ T5894] usb 6-1: config 0 has no interface number 0 [ 421.353068][ T5894] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 421.676838][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.709943][ T5894] usb 6-1: Product: syz [ 421.719557][ T5894] usb 6-1: Manufacturer: syz [ 421.739698][ T5894] usb 6-1: SerialNumber: syz [ 421.790435][ T5894] usb 6-1: config 0 descriptor?? [ 421.822264][ T5894] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 422.099641][T10529] netlink: 'syz.2.1264': attribute type 2 has an invalid length. [ 422.127922][ T5894] usb 6-1: qt2_setup_urbs - submit read urb failed -8 [ 422.155606][ T5894] quatech2 6-1:0.51: probe with driver quatech2 failed with error -8 [ 422.175209][T10529] netlink: 151 bytes leftover after parsing attributes in process `syz.2.1264'. [ 422.388828][T10532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1265'. [ 422.482349][T10536] FAULT_INJECTION: forcing a failure. [ 422.482349][T10536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.508375][T10532] bond0: (slave syz_tun): Releasing backup interface [ 422.583295][T10536] CPU: 1 UID: 0 PID: 10536 Comm: syz.0.1266 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 422.583325][T10536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 422.583348][T10536] Call Trace: [ 422.583356][T10536] [ 422.583365][T10536] dump_stack_lvl+0x189/0x250 [ 422.583400][T10536] ? __pfx____ratelimit+0x10/0x10 [ 422.583429][T10536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.583459][T10536] ? __pfx__printk+0x10/0x10 [ 422.583480][T10536] ? __might_fault+0xb0/0x130 [ 422.583509][T10536] should_fail_ex+0x414/0x560 [ 422.583537][T10536] _copy_from_user+0x2d/0xb0 [ 422.583557][T10536] snd_seq_oss_write+0x382/0x930 [ 422.583601][T10536] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 422.583631][T10536] ? common_file_perm+0x199/0x200 [ 422.583659][T10536] ? security_file_permission+0x75/0x290 [ 422.583684][T10536] odev_write+0x5a/0x80 [ 422.583706][T10536] ? __pfx_odev_write+0x10/0x10 [ 422.583729][T10536] vfs_write+0x27e/0xa90 [ 422.583767][T10536] ? __pfx_vfs_write+0x10/0x10 [ 422.583799][T10536] ? __fget_files+0x2a/0x420 [ 422.583823][T10536] ? __fget_files+0x2a/0x420 [ 422.583859][T10536] ? __fget_files+0x3a0/0x420 [ 422.583879][T10536] ? __fget_files+0x2a/0x420 [ 422.583928][T10536] ksys_write+0x145/0x250 [ 422.583950][T10536] ? __pfx_ksys_write+0x10/0x10 [ 422.583975][T10536] ? do_syscall_64+0xbe/0x3b0 [ 422.584011][T10536] do_syscall_64+0xfa/0x3b0 [ 422.584042][T10536] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.584072][T10536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.584093][T10536] ? clear_bhb_loop+0x60/0xb0 [ 422.584125][T10536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.584145][T10536] RIP: 0033:0x7fb20778e929 [ 422.584164][T10536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.584184][T10536] RSP: 002b:00007fb208693038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 422.584207][T10536] RAX: ffffffffffffffda RBX: 00007fb2079b6080 RCX: 00007fb20778e929 [ 422.584222][T10536] RDX: 0000000000000458 RSI: 0000200000000140 RDI: 0000000000000003 [ 422.584236][T10536] RBP: 00007fb208693090 R08: 0000000000000000 R09: 0000000000000000 [ 422.584248][T10536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 422.584264][T10536] R13: 0000000000000001 R14: 00007fb2079b6080 R15: 00007fb207adfa28 [ 422.584296][T10536] [ 423.163149][T10532] bond0: (slave bridge0): Releasing backup interface [ 423.303059][T10532] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.409303][T10532] bridge_slave_0: left allmulticast mode [ 423.430312][T10532] bridge_slave_0: left promiscuous mode [ 423.442956][T10532] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.511688][T10532] bridge_slave_1: left allmulticast mode [ 423.520285][T10532] bridge_slave_1: left promiscuous mode [ 423.529064][T10532] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.529375][ T5894] usb 6-1: USB disconnect, device number 29 [ 423.659231][T10532] bond0: (slave bond_slave_0): Releasing backup interface [ 423.765097][T10532] bond0: (slave bond_slave_1): Releasing backup interface [ 423.854056][T10532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.902632][T10532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.975483][T10532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.019298][T10532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.338085][T10554] FAULT_INJECTION: forcing a failure. [ 424.338085][T10554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.366637][T10554] CPU: 1 UID: 0 PID: 10554 Comm: syz.5.1274 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 424.366669][T10554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 424.366681][T10554] Call Trace: [ 424.366689][T10554] [ 424.366698][T10554] dump_stack_lvl+0x189/0x250 [ 424.366736][T10554] ? __pfx____ratelimit+0x10/0x10 [ 424.366768][T10554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.366801][T10554] ? __pfx__printk+0x10/0x10 [ 424.366836][T10554] should_fail_ex+0x414/0x560 [ 424.366867][T10554] _copy_to_user+0x31/0xb0 [ 424.366889][T10554] kvm_arch_vcpu_ioctl+0x1d50/0x2a40 [ 424.366918][T10554] ? __lock_acquire+0xab9/0xd20 [ 424.366953][T10554] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 424.366992][T10554] ? __lock_acquire+0xab9/0xd20 [ 424.367042][T10554] ? is_bpf_text_address+0x26/0x2b0 [ 424.367079][T10554] ? is_bpf_text_address+0x292/0x2b0 [ 424.367109][T10554] ? is_bpf_text_address+0x26/0x2b0 [ 424.367144][T10554] ? kernel_text_address+0xa5/0xe0 [ 424.367171][T10554] ? __kernel_text_address+0xd/0x40 [ 424.367195][T10554] ? unwind_get_return_address+0x4d/0x90 [ 424.367226][T10554] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 424.367250][T10554] ? arch_stack_walk+0xfc/0x150 [ 424.367283][T10554] ? stack_trace_save+0x9c/0xe0 [ 424.367308][T10554] ? stack_depot_save_flags+0x40/0x900 [ 424.367344][T10554] ? kasan_save_track+0x4f/0x80 [ 424.367373][T10554] ? kasan_save_track+0x3e/0x80 [ 424.367414][T10554] ? __lock_acquire+0xab9/0xd20 [ 424.367452][T10554] ? __mutex_trylock_common+0x153/0x260 [ 424.367477][T10554] ? __pfx___mutex_trylock_common+0x10/0x10 [ 424.367504][T10554] ? rcu_is_watching+0x15/0xb0 [ 424.367536][T10554] ? trace_contention_end+0x39/0x120 [ 424.367557][T10554] ? __mutex_lock+0x330/0xe80 [ 424.367591][T10554] ? kasan_quarantine_put+0xdd/0x220 [ 424.367633][T10554] ? __pfx___mutex_lock+0x10/0x10 [ 424.367665][T10554] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 424.367691][T10554] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 424.367716][T10554] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 424.367748][T10554] kvm_vcpu_ioctl+0x74d/0xe90 [ 424.367777][T10554] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 424.367796][T10554] ? __lock_acquire+0xab9/0xd20 [ 424.367847][T10554] ? __fget_files+0x2a/0x420 [ 424.367873][T10554] ? __fget_files+0x2a/0x420 [ 424.367895][T10554] ? __fget_files+0x3a0/0x420 [ 424.367916][T10554] ? __fget_files+0x2a/0x420 [ 424.367942][T10554] ? bpf_lsm_file_ioctl+0x9/0x20 [ 424.367979][T10554] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 424.368001][T10554] __se_sys_ioctl+0xf9/0x170 [ 424.368035][T10554] do_syscall_64+0xfa/0x3b0 [ 424.368065][T10554] ? lockdep_hardirqs_on+0x9c/0x150 [ 424.368094][T10554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.368114][T10554] ? clear_bhb_loop+0x60/0xb0 [ 424.368140][T10554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.368161][T10554] RIP: 0033:0x7f379358e929 [ 424.368180][T10554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.368199][T10554] RSP: 002b:00007f3794413038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.368221][T10554] RAX: ffffffffffffffda RBX: 00007f37937b5fa0 RCX: 00007f379358e929 [ 424.368236][T10554] RDX: 0000200000000200 RSI: 00000000c048aeca RDI: 000000000000000a [ 424.368249][T10554] RBP: 00007f3794413090 R08: 0000000000000000 R09: 0000000000000000 [ 424.368262][T10554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.368273][T10554] R13: 0000000000000000 R14: 00007f37937b5fa0 R15: 00007f37938dfa28 [ 424.368304][T10554] [ 424.822208][T10551] batman_adv: batadv0: Removing interface: ip6gretap1 [ 424.882020][T10547] FAULT_INJECTION: forcing a failure. [ 424.882020][T10547] name failslab, interval 1, probability 0, space 0, times 0 [ 424.894847][T10547] CPU: 1 UID: 0 PID: 10547 Comm: syz.0.1271 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 424.894873][T10547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 424.894885][T10547] Call Trace: [ 424.894893][T10547] [ 424.894902][T10547] dump_stack_lvl+0x189/0x250 [ 424.894938][T10547] ? __pfx____ratelimit+0x10/0x10 [ 424.894977][T10547] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.895006][T10547] ? __pfx__printk+0x10/0x10 [ 424.895032][T10547] ? __pfx___might_resched+0x10/0x10 [ 424.895066][T10547] should_fail_ex+0x414/0x560 [ 424.895094][T10547] should_failslab+0xa8/0x100 [ 424.895116][T10547] __kmalloc_noprof+0xcb/0x4f0 [ 424.895132][T10547] ? __kasan_kmalloc+0x93/0xb0 [ 424.895147][T10547] ? nla_strdup+0x9d/0x140 [ 424.895176][T10547] nla_strdup+0x9d/0x140 [ 424.895204][T10547] nf_tables_newtable+0x491/0x1890 [ 424.895226][T10547] ? __pfx_nfnl_pernet+0x1/0x10 [ 424.895268][T10547] nfnetlink_rcv+0x1132/0x2520 [ 424.895325][T10547] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 424.895363][T10547] ? __lock_acquire+0xab9/0xd20 [ 424.895432][T10547] ? netlink_deliver_tap+0x2e/0x1b0 [ 424.895453][T10547] ? netlink_deliver_tap+0x2e/0x1b0 [ 424.895479][T10547] netlink_unicast+0x75b/0x8d0 [ 424.895507][T10547] netlink_sendmsg+0x805/0xb30 [ 424.895537][T10547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.895561][T10547] ? aa_sock_msg_perm+0x94/0x160 [ 424.895586][T10547] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 424.895609][T10547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.895631][T10547] __sock_sendmsg+0x21c/0x270 [ 424.895668][T10547] ____sys_sendmsg+0x505/0x830 [ 424.895695][T10547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 424.895725][T10547] ? import_iovec+0x74/0xa0 [ 424.895745][T10547] ___sys_sendmsg+0x21f/0x2a0 [ 424.895770][T10547] ? __pfx____sys_sendmsg+0x10/0x10 [ 424.895826][T10547] ? __fget_files+0x2a/0x420 [ 424.895847][T10547] ? __fget_files+0x3a0/0x420 [ 424.895877][T10547] __x64_sys_sendmsg+0x19b/0x260 [ 424.895903][T10547] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 424.895935][T10547] ? __pfx_ksys_write+0x10/0x10 [ 424.895957][T10547] ? do_syscall_64+0xbe/0x3b0 [ 424.895988][T10547] do_syscall_64+0xfa/0x3b0 [ 424.896015][T10547] ? lockdep_hardirqs_on+0x9c/0x150 [ 424.896044][T10547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.896062][T10547] ? clear_bhb_loop+0x60/0xb0 [ 424.896083][T10547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.896101][T10547] RIP: 0033:0x7fb20778e929 [ 424.896117][T10547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.896133][T10547] RSP: 002b:00007fb208693038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.896152][T10547] RAX: ffffffffffffffda RBX: 00007fb2079b6080 RCX: 00007fb20778e929 [ 424.896165][T10547] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 424.896176][T10547] RBP: 00007fb208693090 R08: 0000000000000000 R09: 0000000000000000 [ 424.896187][T10547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.896198][T10547] R13: 0000000000000000 R14: 00007fb2079b6080 R15: 00007fb207adfa28 [ 424.896243][T10547] [ 425.253032][T10551] bond2: (slave batadv1): Releasing active interface [ 425.266371][T10551] bond2: (slave batadv1): the permanent HWaddr of slave - a6:5b:b3:3a:1a:ed - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 425.292300][T10551] bond2: (slave batadv2): making interface the new active one [ 425.338319][T10551] bond2: (slave batadv2): Releasing active interface [ 425.535181][T10565] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1270'. [ 427.188176][T10590] program syz.1.1282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 428.050500][ T5887] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 428.246655][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 428.265960][ T5887] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 428.303001][ T5887] usb 2-1: config 0 has no interface number 0 [ 428.319489][ T5887] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 428.336608][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.366210][ T5841] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 428.380159][ T5887] usb 2-1: Product: syz [ 428.390779][ T5887] usb 2-1: Manufacturer: syz [ 428.410187][ T5887] usb 2-1: SerialNumber: syz [ 428.455947][ T5887] usb 2-1: config 0 descriptor?? [ 428.477335][ T5887] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 428.540266][ T5841] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 428.576456][ T5841] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 428.621246][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.682324][ T5887] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 428.703842][ T5841] usb 5-1: config 0 descriptor?? [ 428.722239][ T5887] quatech2 2-1:0.51: probe with driver quatech2 failed with error -8 [ 428.754861][ T5841] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 429.402182][T10611] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 429.954931][ T5841] usb 2-1: USB disconnect, device number 59 [ 430.064647][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1283'. [ 430.915856][T10625] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 431.161518][T10632] fuse: Bad value for 'rootmode' [ 431.466237][ T5894] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 431.627372][ T5894] usb 3-1: no configurations [ 431.632548][ T5894] usb 3-1: can't read configurations, error -22 [ 431.786217][ T5894] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 431.918805][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1295'. [ 431.938950][T10638] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1295'. [ 431.975742][T10634] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1293'. [ 431.989485][ T5894] usb 3-1: no configurations [ 432.005820][ T5894] usb 3-1: can't read configurations, error -22 [ 432.032634][ T5894] usb usb3-port1: attempt power cycle [ 432.268225][ T5841] usb 5-1: USB disconnect, device number 55 [ 432.274256][ T5887] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 432.436290][ T5894] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 432.456413][ T5887] usb 6-1: Using ep0 maxpacket: 16 [ 432.467597][ T5894] usb 3-1: no configurations [ 432.472245][ T5894] usb 3-1: can't read configurations, error -22 [ 432.474861][ T5887] usb 6-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.520499][ T5887] usb 6-1: config 0 interface 0 has no altsetting 0 [ 432.540674][ T5887] usb 6-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 432.576073][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.615800][ T5887] usb 6-1: config 0 descriptor?? [ 432.628656][ T5894] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 432.671746][ T5894] usb 3-1: no configurations [ 432.676961][ T5894] usb 3-1: can't read configurations, error -22 [ 432.704106][ T5894] usb usb3-port1: unable to enumerate USB device [ 433.040445][ T5887] playstation 0003:054C:0BA0.0014: unknown main item tag 0x0 [ 433.090109][ T5887] playstation 0003:054C:0BA0.0014: hidraw0: USB HID v7d.d9 Device [HID 054c:0ba0] on usb-dummy_hcd.5-1/input0 [ 433.238543][T10638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.247873][T10638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.289497][ T5887] playstation 0003:054C:0BA0.0014: Failed to retrieve feature with reportID 18: -71 [ 433.315803][ T5887] playstation 0003:054C:0BA0.0014: Failed to retrieve DualShock4 pairing info: -71 [ 433.357190][ T5887] playstation 0003:054C:0BA0.0014: Failed to get MAC address from DualShock4 [ 433.386346][ T5887] playstation 0003:054C:0BA0.0014: Failed to create dualshock4. [ 433.406531][ T5887] playstation 0003:054C:0BA0.0014: probe with driver playstation failed with error -71 [ 433.465550][ T5887] usb 6-1: USB disconnect, device number 30 [ 434.389288][T10655] program syz.4.1300 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 434.457204][T10660] FAULT_INJECTION: forcing a failure. [ 434.457204][T10660] name failslab, interval 1, probability 0, space 0, times 0 [ 434.470151][T10660] CPU: 1 UID: 0 PID: 10660 Comm: syz.2.1302 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 434.470181][T10660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 434.470199][T10660] Call Trace: [ 434.470209][T10660] [ 434.470218][T10660] dump_stack_lvl+0x189/0x250 [ 434.470259][T10660] ? __pfx____ratelimit+0x10/0x10 [ 434.470292][T10660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.470327][T10660] ? __pfx__printk+0x10/0x10 [ 434.470354][T10660] ? __pfx___might_resched+0x10/0x10 [ 434.470389][T10660] ? fs_reclaim_acquire+0x7d/0x100 [ 434.470420][T10660] should_fail_ex+0x414/0x560 [ 434.470453][T10660] should_failslab+0xa8/0x100 [ 434.470478][T10660] __kmalloc_noprof+0xcb/0x4f0 [ 434.470498][T10660] ? tomoyo_mount_permission+0x27a/0x970 [ 434.470524][T10660] ? tomoyo_encode+0x28b/0x550 [ 434.470557][T10660] tomoyo_encode+0x28b/0x550 [ 434.470591][T10660] ? tomoyo_mount_permission+0x27a/0x970 [ 434.470620][T10660] tomoyo_mount_permission+0x331/0x970 [ 434.470656][T10660] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 434.470717][T10660] ? __lock_acquire+0xab9/0xd20 [ 434.470778][T10660] security_sb_mount+0xec/0x350 [ 434.470814][T10660] path_mount+0xbc/0xfe0 [ 434.470835][T10660] ? user_path_at+0x44/0x60 [ 434.470870][T10660] ? kmem_cache_free+0x18f/0x400 [ 434.470902][T10660] __se_sys_mount+0x317/0x410 [ 434.470934][T10660] ? __pfx___se_sys_mount+0x10/0x10 [ 434.470957][T10660] ? rcu_is_watching+0x15/0xb0 [ 434.470996][T10660] ? do_syscall_64+0xbe/0x3b0 [ 434.471028][T10660] ? __x64_sys_mount+0x20/0xc0 [ 434.471054][T10660] do_syscall_64+0xfa/0x3b0 [ 434.471086][T10660] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.471120][T10660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.471143][T10660] ? clear_bhb_loop+0x60/0xb0 [ 434.471170][T10660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.471196][T10660] RIP: 0033:0x7f45de78e929 [ 434.471216][T10660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.471246][T10660] RSP: 002b:00007f45dc5f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 434.471268][T10660] RAX: ffffffffffffffda RBX: 00007f45de9b5fa0 RCX: 00007f45de78e929 [ 434.471284][T10660] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000000 [ 434.471296][T10660] RBP: 00007f45dc5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 434.471309][T10660] R10: 0000000000b1303c R11: 0000000000000246 R12: 0000000000000001 [ 434.471322][T10660] R13: 0000000000000000 R14: 00007f45de9b5fa0 R15: 00007f45deadfa28 [ 434.471355][T10660] [ 434.666169][ T5894] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 435.226799][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 435.244196][ T5894] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 435.252935][ T5894] usb 6-1: config 0 has no interface number 0 [ 435.263801][ T5894] usb 6-1: too many endpoints for config 0 interface 12 altsetting 2: 235, using maximum allowed: 30 [ 435.325337][ T5894] usb 6-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 435.356144][ T10] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 435.416146][ T5841] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 435.439683][ T5894] usb 6-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 435.514972][ T5894] usb 6-1: config 0 interface 12 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 235 [ 435.536237][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 435.555601][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 435.595040][ T5894] usb 6-1: config 0 interface 12 has no altsetting 0 [ 435.602247][ T5841] usb 5-1: Using ep0 maxpacket: 32 [ 435.610615][ T5841] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 435.619608][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 435.624898][ T5841] usb 5-1: config 0 has no interface number 0 [ 435.664413][ T5894] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 435.681196][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.685989][ T5841] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 435.706502][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.710244][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.753971][ T5894] usb 6-1: Product: syz [ 435.773681][ T5841] usb 5-1: Product: syz [ 435.779514][ T5894] usb 6-1: Manufacturer: syz [ 435.795000][ T5841] usb 5-1: Manufacturer: syz [ 435.802705][ T5894] usb 6-1: SerialNumber: syz [ 435.813559][ T5841] usb 5-1: SerialNumber: syz [ 435.874305][ T5841] usb 5-1: config 0 descriptor?? [ 435.877430][ T5894] usb 6-1: config 0 descriptor?? [ 435.912701][ T5841] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 435.943140][ T5894] f81534 6-1:0.12: unsupported endpoint max packet size [ 436.036486][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 436.113513][ T10] usbtmc 3-1:16.0: can't read capabilities [ 436.113760][ T5841] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 436.144467][ T5894] usb 6-1: USB disconnect, device number 31 [ 436.174683][ T5841] quatech2 5-1:0.51: probe with driver quatech2 failed with error -8 [ 436.235838][ T10] usb 3-1: USB disconnect, device number 41 [ 436.337899][T10676] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1306'. [ 436.940936][T10682] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1308'. [ 437.172524][T10687] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1310'. [ 437.256196][ T5894] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 437.407895][ T5894] usb 3-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 437.437609][ T5894] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 437.455486][ T5894] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 437.470145][T10693] xt_TCPMSS: Only works on TCP SYN packets [ 437.477408][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.533181][ T5894] usb 3-1: config 0 descriptor?? [ 437.590406][ T43] usb 5-1: USB disconnect, device number 56 [ 437.774470][ T10] usb 3-1: USB disconnect, device number 42 [ 438.265431][T10708] netlink: 'syz.1.1317': attribute type 4 has an invalid length. [ 438.437172][ T5150] Bluetooth: hci3: command 0x0405 tx timeout [ 438.445701][T10715] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1320'. [ 438.536299][ T10] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 438.656341][ T5894] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 438.696795][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 438.816654][ T5894] usb 5-1: device descriptor read/64, error -71 [ 438.950232][ T977] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 438.980675][T10730] program syz.2.1326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 439.153737][ T977] usb 1-1: Using ep0 maxpacket: 16 [ 439.250105][ T5894] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 439.386634][ T5894] usb 5-1: device descriptor read/64, error -71 [ 439.436152][ T43] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 439.475700][ T977] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 439.568186][ T977] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 439.576324][ T977] usb 1-1: config 0 has no interface number 0 [ 439.615346][ T977] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 439.626325][ T9] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 439.636303][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 439.636490][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.645262][ T43] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 439.668937][ T977] usb 1-1: Product: syz [ 439.676860][ T5894] usb usb5-port1: attempt power cycle [ 439.701757][ T977] usb 1-1: Manufacturer: syz [ 439.710225][ T977] usb 1-1: SerialNumber: syz [ 439.714951][ T43] usb 3-1: config 0 has no interface number 0 [ 439.739223][ T977] usb 1-1: config 0 descriptor?? [ 439.754685][ T977] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 439.765126][ T977] usb 1-1: No valid video chain found. [ 439.768048][ T43] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 439.979192][ T9] usb 6-1: config 0 has no interfaces? [ 439.992443][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.999102][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.015491][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.022034][ T9] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 440.033534][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.049030][ T977] usb 1-1: USB disconnect, device number 63 [ 440.094728][ T9] usb 6-1: Product: syz [ 440.099213][ T5894] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 440.101568][ T43] usb 3-1: Product: syz [ 440.112167][ T9] usb 6-1: Manufacturer: syz [ 440.126992][ T5894] usb 5-1: device descriptor read/8, error -71 [ 440.140145][ T9] usb 6-1: SerialNumber: syz [ 440.154963][ T43] usb 3-1: Manufacturer: syz [ 440.179390][ T9] usb 6-1: config 0 descriptor?? [ 440.240136][ T43] usb 3-1: SerialNumber: syz [ 440.309143][ T43] usb 3-1: config 0 descriptor?? [ 440.363383][ T43] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 440.378004][ T5894] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 440.417300][ T5894] usb 5-1: device descriptor read/8, error -71 [ 440.526795][ T5894] usb usb5-port1: unable to enumerate USB device [ 440.697454][ T43] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 440.744462][ T43] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 441.223723][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 441.297815][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 441.343707][ T10] usb 2-1: can't read configurations, error -71 [ 441.424678][T10748] fuse: Bad value for 'fd' [ 442.022710][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 442.091308][ T43] usb 3-1: USB disconnect, device number 43 [ 442.108318][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 442.178362][T10757] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1332'. [ 442.223285][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 442.376829][ T43] quatech2 3-1:0.51: device disconnected [ 442.687487][ T5887] usb 6-1: USB disconnect, device number 32 [ 442.926137][ T43] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 443.081260][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 443.083260][ T43] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 242, using maximum allowed: 30 [ 443.083291][ T43] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 443.083311][ T43] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.083327][ T43] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 443.083346][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 443.083370][ T43] usb 3-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 443.083387][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.085503][ T43] usb 3-1: config 0 descriptor?? [ 443.248334][ T5887] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 443.300400][T10762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.300671][T10762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.524600][ T43] microsoft 0003:045E:00F9.0015: hidraw0: USB HID v0.03 Device [HID 045e:00f9] on usb-dummy_hcd.2-1/input0 [ 443.524636][ T43] microsoft 0003:045E:00F9.0015: no inputs found [ 443.524652][ T43] microsoft 0003:045E:00F9.0015: could not initialize ff, continuing anyway [ 443.526363][ T5887] usb 6-1: config 0 has no interfaces? [ 443.539028][ T5887] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 443.539058][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.539080][ T5887] usb 6-1: Product: syz [ 443.539096][ T5887] usb 6-1: Manufacturer: syz [ 443.539113][ T5887] usb 6-1: SerialNumber: syz [ 443.644184][ T5887] usb 6-1: config 0 descriptor?? [ 443.706659][ T10] usb 3-1: USB disconnect, device number 44 [ 443.722961][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1336'. [ 443.913620][T10772] fido_id[10772]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 444.946817][T10796] program syz.2.1342 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 444.976184][ T10] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 444.977327][T10797] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1344'. [ 445.172288][ T10] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 445.228440][ T10] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 445.414493][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 445.466231][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.865009][ T5894] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 446.091970][ T43] usb 6-1: USB disconnect, device number 33 [ 446.206179][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 446.225598][T10789] fuse: Unknown parameter '00000000000000000008' [ 446.473167][ T5894] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 446.662731][T10808] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1346'. [ 446.741135][ T5894] usb 3-1: config 0 has no interface number 0 [ 446.976374][ T5894] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 447.080571][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1347'. [ 447.098492][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.143675][ T5894] usb 3-1: Product: syz [ 447.156120][ T5894] usb 3-1: Manufacturer: syz [ 447.163132][ T5894] usb 3-1: SerialNumber: syz [ 447.182801][ T5894] usb 3-1: config 0 descriptor?? [ 447.234604][ T5894] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 447.289273][T10816] IPv6: NLM_F_REPLACE set, but no existing node found! [ 447.809603][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1350'. [ 447.833649][ T10] usb 1-1: USB disconnect, device number 64 [ 447.844425][T10787] delete_channel: no stack [ 447.900492][ T5894] usb 3-1: qt2_attach - failed to power on unit: -71 [ 447.969528][ T5894] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 448.086388][ T5894] usb 3-1: USB disconnect, device number 45 [ 448.329704][T10836] FAULT_INJECTION: forcing a failure. [ 448.329704][T10836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.419373][T10836] CPU: 1 UID: 0 PID: 10836 Comm: syz.1.1354 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 448.419400][T10836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 448.419411][T10836] Call Trace: [ 448.419418][T10836] [ 448.419427][T10836] dump_stack_lvl+0x189/0x250 [ 448.419479][T10836] ? __pfx____ratelimit+0x10/0x10 [ 448.419509][T10836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.419540][T10836] ? __pfx__printk+0x10/0x10 [ 448.419574][T10836] ? __might_fault+0xb0/0x130 [ 448.419606][T10836] should_fail_ex+0x414/0x560 [ 448.419636][T10836] _copy_from_user+0x2d/0xb0 [ 448.419655][T10836] snd_seq_oss_write+0x515/0x930 [ 448.419705][T10836] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 448.419736][T10836] ? common_file_perm+0x199/0x200 [ 448.419764][T10836] ? security_file_permission+0x75/0x290 [ 448.419788][T10836] odev_write+0x5a/0x80 [ 448.419809][T10836] ? __pfx_odev_write+0x10/0x10 [ 448.419833][T10836] vfs_write+0x27e/0xa90 [ 448.419872][T10836] ? __pfx_vfs_write+0x10/0x10 [ 448.419903][T10836] ? __fget_files+0x2a/0x420 [ 448.419927][T10836] ? __fget_files+0x2a/0x420 [ 448.419947][T10836] ? __fget_files+0x3a0/0x420 [ 448.419966][T10836] ? __fget_files+0x2a/0x420 [ 448.419995][T10836] ksys_write+0x145/0x250 [ 448.420015][T10836] ? __pfx_ksys_write+0x10/0x10 [ 448.420038][T10836] ? do_syscall_64+0xbe/0x3b0 [ 448.420087][T10836] do_syscall_64+0xfa/0x3b0 [ 448.420135][T10836] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.420164][T10836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.420185][T10836] ? clear_bhb_loop+0x60/0xb0 [ 448.420211][T10836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.420231][T10836] RIP: 0033:0x7fee0398e929 [ 448.420250][T10836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.420268][T10836] RSP: 002b:00007fee04815038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 448.420290][T10836] RAX: ffffffffffffffda RBX: 00007fee03bb6080 RCX: 00007fee0398e929 [ 448.420306][T10836] RDX: 0000000000000458 RSI: 0000200000000140 RDI: 0000000000000003 [ 448.420320][T10836] RBP: 00007fee04815090 R08: 0000000000000000 R09: 0000000000000000 [ 448.420332][T10836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 448.420345][T10836] R13: 0000000000000001 R14: 00007fee03bb6080 R15: 00007fee03cdfa28 [ 448.420377][T10836] [ 449.096245][ T977] IPVS: starting estimator thread 0... [ 449.176209][ T5894] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 449.246811][T10848] IPVS: using max 43 ests per chain, 103200 per kthread [ 449.316518][ T5894] usb 5-1: device descriptor read/64, error -71 [ 449.556916][ T5894] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 449.756204][ T5894] usb 5-1: device descriptor read/64, error -71 [ 449.876912][ T5894] usb usb5-port1: attempt power cycle [ 450.106152][ T43] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 450.241226][ T5894] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 450.278072][ T5894] usb 5-1: device descriptor read/8, error -71 [ 450.286528][ T24] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 450.326916][ T43] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 450.347087][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.370570][ T43] usb 2-1: Product: syz [ 450.374803][ T43] usb 2-1: Manufacturer: syz [ 450.387449][ T43] usb 2-1: SerialNumber: syz [ 450.417671][ T43] usb 2-1: config 0 descriptor?? [ 450.473577][T10879] FAULT_INJECTION: forcing a failure. [ 450.473577][T10879] name failslab, interval 1, probability 0, space 0, times 0 [ 450.487402][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 450.493833][T10879] CPU: 1 UID: 0 PID: 10879 Comm: syz.0.1366 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 450.493861][T10879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 450.493878][T10879] Call Trace: [ 450.493887][T10879] [ 450.493895][T10879] dump_stack_lvl+0x189/0x250 [ 450.493933][T10879] ? __pfx____ratelimit+0x10/0x10 [ 450.493963][T10879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.493994][T10879] ? __pfx__printk+0x10/0x10 [ 450.494020][T10879] ? __pfx___might_resched+0x10/0x10 [ 450.494046][T10879] should_fail_ex+0x414/0x560 [ 450.494068][T10879] should_failslab+0xa8/0x100 [ 450.494085][T10879] __kmalloc_cache_noprof+0x70/0x3d0 [ 450.494099][T10879] ? snd_seq_port_connect+0x6b/0x430 [ 450.494121][T10879] snd_seq_port_connect+0x6b/0x430 [ 450.494138][T10879] ? do_raw_read_unlock+0x3d/0x80 [ 450.494155][T10879] ? _raw_read_unlock+0x28/0x50 [ 450.494178][T10879] snd_seq_ioctl_subscribe_port+0x339/0x710 [ 450.494203][T10879] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 450.494224][T10879] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 450.494252][T10879] snd_seq_oss_midi_open+0x39d/0x7b0 [ 450.494271][T10879] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 450.494300][T10879] snd_seq_oss_synth_reset+0x3c4/0x880 [ 450.494323][T10879] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 450.494358][T10879] ? __pfx_snd_seq_oss_synth_reset+0x10/0x10 [ 450.494378][T10879] ? kasan_quarantine_put+0xdd/0x220 [ 450.494406][T10879] snd_seq_oss_reset+0x5a/0x240 [ 450.494426][T10879] snd_seq_oss_ioctl+0x6c8/0x1090 [ 450.494445][T10879] ? __mutex_trylock_common+0x153/0x260 [ 450.494459][T10879] ? __pfx_snd_seq_oss_ioctl+0x10/0x10 [ 450.494478][T10879] ? __pfx___mutex_trylock_common+0x10/0x10 [ 450.494495][T10879] ? rcu_is_watching+0x15/0xb0 [ 450.494517][T10879] ? trace_contention_end+0x39/0x120 [ 450.494531][T10879] ? __mutex_lock+0x330/0xe80 [ 450.494552][T10879] ? __lock_acquire+0xab9/0xd20 [ 450.494575][T10879] ? odev_ioctl+0x81/0xf0 [ 450.494594][T10879] ? __pfx___mutex_lock+0x10/0x10 [ 450.494621][T10879] ? __fget_files+0x2a/0x420 [ 450.494635][T10879] ? __fget_files+0x3a0/0x420 [ 450.494649][T10879] ? __fget_files+0x2a/0x420 [ 450.494665][T10879] ? __pfx_odev_ioctl+0x10/0x10 [ 450.494682][T10879] odev_ioctl+0xb2/0xf0 [ 450.494700][T10879] __se_sys_ioctl+0xf9/0x170 [ 450.494721][T10879] do_syscall_64+0xfa/0x3b0 [ 450.494742][T10879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.494755][T10879] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 450.494774][T10879] ? clear_bhb_loop+0x60/0xb0 [ 450.494790][T10879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.494803][T10879] RIP: 0033:0x7fb20778e929 [ 450.494815][T10879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.494827][T10879] RSP: 002b:00007fb2086b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.494841][T10879] RAX: ffffffffffffffda RBX: 00007fb2079b5fa0 RCX: 00007fb20778e929 [ 450.494851][T10879] RDX: 0000000000000000 RSI: 0000000000005100 RDI: 0000000000000004 [ 450.494859][T10879] RBP: 00007fb2086b4090 R08: 0000000000000000 R09: 0000000000000000 [ 450.494868][T10879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.494876][T10879] R13: 0000000000000000 R14: 00007fb2079b5fa0 R15: 00007fb207adfa28 [ 450.494896][T10879] [ 450.526401][ T5894] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 450.554198][ T24] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 450.681442][ T5894] usb 5-1: device descriptor read/8, error -71 [ 450.688199][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 450.816843][ T5894] usb usb5-port1: unable to enumerate USB device [ 450.824542][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 450.969428][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 450.984426][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.998094][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 451.007330][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.257431][ T24] usb 6-1: usb_control_msg returned -71 [ 451.280375][ T24] usbtmc 6-1:16.0: can't read capabilities [ 451.303170][ T24] usb 6-1: USB disconnect, device number 34 [ 451.493631][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1374'. [ 451.544167][ T43] usb 2-1: non-Atmel transceiver xxxx0008 [ 451.606496][ T10] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 451.768876][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 451.779024][ T10] usb 5-1: config 0 has an invalid interface number: 236 but max is 0 [ 451.810528][ T43] usb 2-1: Firmware version (0.0) predates our first public release. [ 451.815842][ T10] usb 5-1: config 0 has no interface number 0 [ 451.840992][ T10] usb 5-1: New USB device found, idVendor=0100, idProduct=0000, bcdDevice= 0.00 [ 451.850001][ T43] usb 2-1: Please update to version 0.2 or newer [ 451.868113][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 451.869931][ T43] usb 2-1: atusb_probe: initialization failed, error = -19 [ 451.914745][ T10] usb 5-1: SerialNumber: syz [ 451.919964][ T43] usb 2-1: USB disconnect, device number 62 [ 451.943500][ T10] usb 5-1: config 0 descriptor?? [ 452.155363][ T43] IPVS: starting estimator thread 0... [ 452.250138][ T10] usb 5-1: USB disconnect, device number 65 [ 452.278779][T10928] IPVS: using max 29 ests per chain, 69600 per kthread [ 452.620664][ T43] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 452.771980][T10936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 452.849128][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.860374][ T43] usb 3-1: config 0 has no interfaces? [ 452.865894][ T43] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=40.85 [ 452.878411][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.933455][ T43] usb 3-1: config 0 descriptor?? [ 453.165563][ T8348] IPVS: stop unused estimator thread 0... [ 453.273365][ T43] usb 3-1: USB disconnect, device number 46 [ 453.326183][ T5841] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 453.502393][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 453.513667][ T5841] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 453.533288][T10954] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 453.571838][ T5841] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 453.660669][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.721610][ T5841] usb 5-1: Product: syz [ 453.736180][ T5841] usb 5-1: Manufacturer: syz [ 453.740922][ T5841] usb 5-1: SerialNumber: syz [ 453.762964][ T5841] usb 5-1: config 0 descriptor?? [ 453.787036][T10947] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 453.795892][ T5841] usb 5-1: ucan: probing device on interface #0 [ 453.805073][ T5841] usb 5-1: ucan: invalid EP count (1) [ 453.824724][ T5841] usb 5-1: ucan: probe failed; try to update the device firmware [ 454.020202][ T10] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 454.186115][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 454.224024][ T10] usb 2-1: config 0 has an invalid interface number: 61 but max is 1 [ 454.252581][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 454.286088][ T10] usb 2-1: config 0 has no interface number 0 [ 454.302775][ T10] usb 2-1: New USB device found, idVendor=2058, idProduct=9005, bcdDevice=b5.f6 [ 454.312906][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.362273][ T10] usb 2-1: Product: syz [ 454.382772][ T10] usb 2-1: Manufacturer: syz [ 454.403343][ T10] usb 2-1: SerialNumber: syz [ 454.430057][ T10] usb 2-1: config 0 descriptor?? [ 454.483811][T10947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.509850][T10947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.576447][ T5841] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 454.786397][ T5841] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 454.996126][ T5841] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 455.032962][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.167701][ T5841] usb 3-1: config 0 descriptor?? [ 455.190415][ T5841] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 456.316547][ T5841] usb 5-1: USB disconnect, device number 66 [ 456.897571][ T10] usb 2-1: USB disconnect, device number 63 [ 457.053725][ T5841] IPVS: starting estimator thread 0... [ 457.166602][T11002] IPVS: using max 35 ests per chain, 84000 per kthread [ 457.191223][T11006] netlink: 'syz.1.1403': attribute type 10 has an invalid length. [ 457.225430][T11006] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 457.345421][ T5914] usb 3-1: USB disconnect, device number 47 [ 457.644692][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 457.644710][ T30] audit: type=1326 audit(1751103230.402:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.5.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379358e929 code=0x7fc00000 [ 457.772412][ T30] audit: type=1326 audit(1751103230.402:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.5.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f379358e929 code=0x7fc00000 [ 457.860655][ T30] audit: type=1326 audit(1751103230.402:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.5.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379358e929 code=0x7fc00000 [ 457.883690][ C0] vkms_vblank_simulate: vblank timer overrun [ 457.912179][ T30] audit: type=1326 audit(1751103230.402:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.5.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379358e929 code=0x7fc00000 [ 457.934548][ C0] vkms_vblank_simulate: vblank timer overrun [ 457.961217][T11020] FAULT_INJECTION: forcing a failure. [ 457.961217][T11020] name failslab, interval 1, probability 0, space 0, times 0 [ 457.998923][ T30] audit: type=1326 audit(1751103230.402:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.5.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379358e929 code=0x7fc00000 [ 458.033265][ T30] audit: type=1326 audit(1751103230.402:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.5.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379358e929 code=0x7fc00000 [ 458.055725][T11020] CPU: 1 UID: 0 PID: 11020 Comm: syz.4.1407 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 458.055755][T11020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 458.055767][T11020] Call Trace: [ 458.055776][T11020] [ 458.055784][T11020] dump_stack_lvl+0x189/0x250 [ 458.055822][T11020] ? __pfx____ratelimit+0x10/0x10 [ 458.055852][T11020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 458.055885][T11020] ? __pfx__printk+0x10/0x10 [ 458.055931][T11020] ? __pfx___might_resched+0x10/0x10 [ 458.055967][T11020] should_fail_ex+0x414/0x560 [ 458.055996][T11020] should_failslab+0xa8/0x100 [ 458.056019][T11020] kmem_cache_alloc_noprof+0x73/0x3c0 [ 458.056053][T11020] ? ptlock_alloc+0x20/0x70 [ 458.056075][T11020] ptlock_alloc+0x20/0x70 [ 458.056093][T11020] pte_alloc_one+0x7d/0x170 [ 458.056131][T11020] __pte_alloc+0x25/0x1a0 [ 458.056158][T11020] __handle_mm_fault+0x4b8a/0x5620 [ 458.056209][T11020] ? __pfx___handle_mm_fault+0x10/0x10 [ 458.056260][T11020] ? find_vma+0xe7/0x160 [ 458.056277][T11020] ? __pfx_find_vma+0x10/0x10 [ 458.056297][T11020] handle_mm_fault+0x40a/0x8e0 [ 458.056337][T11020] do_user_addr_fault+0x764/0x1390 [ 458.056379][T11020] exc_page_fault+0x76/0xf0 [ 458.056404][T11020] ? __might_fault+0xb0/0x130 [ 458.056424][T11020] asm_exc_page_fault+0x26/0x30 [ 458.056442][T11020] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 458.056465][T11020] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 00 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 458.056482][T11020] RSP: 0018:ffffc90003b2fb90 EFLAGS: 00050202 [ 458.056502][T11020] RAX: 00007ffffffff001 RBX: 000000000000000c RCX: 000000000000000c [ 458.056518][T11020] RDX: 0000000000000001 RSI: 0000200000004b00 RDI: ffffc90003b2fca0 [ 458.056533][T11020] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 458.056547][T11020] R10: dffffc0000000000 R11: fffff52000765f95 R12: dffffc0000000000 [ 458.056565][T11020] R13: 0000000000000023 R14: ffffc90003b2fca0 R15: 0000200000004b00 [ 458.056601][T11020] _copy_from_user+0x7a/0xb0 [ 458.056624][T11020] copy_from_sockptr+0x5e/0xa0 [ 458.056662][T11020] do_ip_setsockopt+0x1e60/0x2d00 [ 458.056704][T11020] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 458.056743][T11020] ? aa_sk_perm+0x81e/0x950 [ 458.056783][T11020] ? __pfx_aa_sk_perm+0x10/0x10 [ 458.056804][T11020] ? __lock_acquire+0xab9/0xd20 [ 458.056843][T11020] ip_setsockopt+0x66/0x110 [ 458.056879][T11020] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 458.056916][T11020] do_sock_setsockopt+0x257/0x3e0 [ 458.056947][T11020] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 458.056976][T11020] ? __fget_files+0x2a/0x420 [ 458.057011][T11020] __x64_sys_setsockopt+0x18b/0x220 [ 458.057044][T11020] do_syscall_64+0xfa/0x3b0 [ 458.057074][T11020] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.057105][T11020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.057137][T11020] ? clear_bhb_loop+0x60/0xb0 [ 458.057163][T11020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.057185][T11020] RIP: 0033:0x7fd5df78e929 [ 458.057203][T11020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.057221][T11020] RSP: 002b:00007fd5e0674038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 458.057243][T11020] RAX: ffffffffffffffda RBX: 00007fd5df9b5fa0 RCX: 00007fd5df78e929 [ 458.057259][T11020] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000003 [ 458.057271][T11020] RBP: 00007fd5e0674090 R08: 0000000000000010 R09: 0000000000000000 [ 458.057285][T11020] R10: 0000200000004b00 R11: 0000000000000246 R12: 0000000000000001 [ 458.057297][T11020] R13: 0000000000000000 R14: 00007fd5df9b5fa0 R15: 00007fd5dfadfa28 [ 458.057333][T11020] [ 459.140487][ T30] audit: type=1326 audit(1751103230.402:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.5.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379358e929 code=0x7fc00000 [ 459.378754][ T12] IPVS: stop unused estimator thread 0... [ 459.428507][ T30] audit: type=1326 audit(1751103230.402:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.5.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379358e929 code=0x7fc00000 [ 459.450846][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.593719][ T30] audit: type=1326 audit(1751103230.402:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.5.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379358e929 code=0x7fc00000 [ 459.616123][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.682694][ T30] audit: type=1326 audit(1751103230.402:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.5.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379358e929 code=0x7fc00000 [ 460.002495][ T5832] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 460.015878][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: kworker/u9:3 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 460.015898][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 460.015907][ T5832] Workqueue: hci1 hci_rx_work [ 460.015930][ T5832] Call Trace: [ 460.015936][ T5832] [ 460.015942][ T5832] dump_stack_lvl+0x189/0x250 [ 460.015965][ T5832] ? kernfs_path_from_node+0x2c/0x260 [ 460.016006][ T5832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.016040][ T5832] ? __pfx__printk+0x10/0x10 [ 460.016064][ T5832] ? kernfs_path_from_node+0x2c/0x260 [ 460.016085][ T5832] ? kernfs_path_from_node+0x2c/0x260 [ 460.016109][ T5832] ? kernfs_path_from_node+0x22c/0x260 [ 460.016129][ T5832] ? kernfs_path_from_node+0x2c/0x260 [ 460.016155][ T5832] sysfs_create_dir_ns+0x259/0x280 [ 460.016179][ T5832] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 460.016197][ T5832] ? do_raw_spin_unlock+0x122/0x240 [ 460.016222][ T5832] kobject_add_internal+0x59f/0xb40 [ 460.016251][ T5832] kobject_add+0x155/0x220 [ 460.016287][ T5832] ? __pfx_kobject_add+0x10/0x10 [ 460.016319][ T5832] ? _raw_spin_unlock+0x28/0x50 [ 460.016340][ T5832] ? get_device_parent+0x366/0x3a0 [ 460.016357][ T5832] device_add+0x408/0xb50 [ 460.016373][ T5832] hci_conn_add_sysfs+0xd5/0x1e0 [ 460.016395][ T5832] le_conn_complete_evt+0xc3a/0x1220 [ 460.016419][ T5832] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 460.016435][ T5832] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 460.016455][ T5832] ? __asan_memcpy+0x40/0x70 [ 460.016476][ T5832] ? __pfx___mutex_lock+0x10/0x10 [ 460.016497][ T5832] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 460.016517][ T5832] ? skb_pull_data+0xfb/0x200 [ 460.016540][ T5832] hci_le_conn_complete_evt+0x187/0x450 [ 460.016560][ T5832] hci_event_packet+0x78f/0x1200 [ 460.016582][ T5832] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 460.016598][ T5832] ? __pfx_hci_event_packet+0x10/0x10 [ 460.016619][ T5832] ? kcov_remote_start+0x4d3/0x7f0 [ 460.016637][ T5832] ? warn_bogus_irq_restore+0x30/0x40 [ 460.016659][ T5832] ? hci_send_to_monitor+0xe2/0x570 [ 460.016677][ T5832] hci_rx_work+0x46a/0xe80 [ 460.016702][ T5832] ? process_scheduled_works+0x9ef/0x17b0 [ 460.016725][ T5832] process_scheduled_works+0xae1/0x17b0 [ 460.016768][ T5832] ? __pfx_process_scheduled_works+0x10/0x10 [ 460.016802][ T5832] worker_thread+0x8a0/0xda0 [ 460.016826][ T5832] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 460.016861][ T5832] ? __kthread_parkme+0x7b/0x200 [ 460.016889][ T5832] kthread+0x70e/0x8a0 [ 460.016917][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 460.016938][ T5832] ? __pfx_kthread+0x10/0x10 [ 460.016954][ T5832] ? _raw_spin_unlock_irq+0x23/0x50 [ 460.016971][ T5832] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.016995][ T5832] ? __pfx_kthread+0x10/0x10 [ 460.017011][ T5832] ret_from_fork+0x3fc/0x770 [ 460.017033][ T5832] ? __pfx_ret_from_fork+0x10/0x10 [ 460.017058][ T5832] ? __switch_to_asm+0x39/0x70 [ 460.017071][ T5832] ? __switch_to_asm+0x33/0x70 [ 460.017084][ T5832] ? __pfx_kthread+0x10/0x10 [ 460.017100][ T5832] ret_from_fork_asm+0x1a/0x30 [ 460.017126][ T5832] [ 460.315106][ T5832] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 460.329306][ T5832] Bluetooth: hci1: failed to register connection device [ 460.438872][T11064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1422'. [ 460.521976][ T5914] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 460.699245][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.821207][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.853934][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 460.873441][ T5841] IPVS: starting estimator thread 0... [ 460.883456][ T5914] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 460.926167][ T5894] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 460.948491][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.966230][T11073] IPVS: using max 27 ests per chain, 64800 per kthread [ 460.981136][T11076] xt_SECMARK: invalid mode: 2 [ 460.987164][ T5914] usb 5-1: config 0 descriptor?? [ 461.076297][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 461.090123][ T5894] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 461.099047][ T5894] usb 3-1: config 179 has no interface number 0 [ 461.140864][ T5894] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 461.298849][ T5894] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 461.327983][ T5894] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 461.353632][ T5894] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 461.393946][ T5894] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 461.455370][ T5894] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 461.472350][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.533436][T11063] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 461.802645][ T5894] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input33 [ 461.846202][ T13] IPVS: stop unused estimator thread 0... [ 461.909794][T11093] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1431'. [ 461.926340][ T5841] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 461.947700][T11094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1419'. [ 462.005748][ T5894] usb 3-1: USB disconnect, device number 48 [ 462.011776][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 462.011829][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 462.062449][ T5894] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 462.159848][ T5841] usb 2-1: Using ep0 maxpacket: 16 [ 462.166511][ T5841] usb 2-1: too many configurations: 98, using maximum allowed: 8 [ 462.179120][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.215959][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.243336][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.282125][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.303100][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.322250][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.337000][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.354689][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.370943][ T5841] usb 2-1: New USB device found, idVendor=de58, idProduct=22cf, bcdDevice=4e.aa [ 462.380636][ T5841] usb 2-1: New USB device strings: Mfr=209, Product=111, SerialNumber=117 [ 462.453181][ T5841] usb 2-1: Product: syz [ 462.485326][ T5841] usb 2-1: Manufacturer: syz [ 462.519861][ T5841] usb 2-1: SerialNumber: syz [ 462.528064][ T5841] usb 2-1: config 0 descriptor?? [ 462.710385][ T5150] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 462.950914][T11087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.959836][T11087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.982560][ T5841] usbhid 2-1:0.0: can't add hid device: -71 [ 462.994648][ T5841] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 463.088237][ T5841] usb 2-1: USB disconnect, device number 64 [ 463.231541][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 463.396522][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 463.405589][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 463.415652][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 463.466348][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 463.537138][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 463.548942][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 463.616919][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 463.635078][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 463.691108][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 463.705021][T11114] FAULT_INJECTION: forcing a failure. [ 463.705021][T11114] name failslab, interval 1, probability 0, space 0, times 0 [ 463.745845][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 463.756168][T11114] CPU: 1 UID: 0 PID: 11114 Comm: syz.1.1440 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 463.756202][T11114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 463.756217][T11114] Call Trace: [ 463.756225][T11114] [ 463.756235][T11114] dump_stack_lvl+0x189/0x250 [ 463.756275][T11114] ? __pfx____ratelimit+0x10/0x10 [ 463.756308][T11114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 463.756342][T11114] ? __pfx__printk+0x10/0x10 [ 463.756373][T11114] ? __pfx___might_resched+0x10/0x10 [ 463.756421][T11114] should_fail_ex+0x414/0x560 [ 463.756454][T11114] should_failslab+0xa8/0x100 [ 463.756479][T11114] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 463.756501][T11114] ? __alloc_skb+0x112/0x2d0 [ 463.756530][T11114] __alloc_skb+0x112/0x2d0 [ 463.756557][T11114] netlink_sendmsg+0x5c6/0xb30 [ 463.756592][T11114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.756622][T11114] ? aa_sock_msg_perm+0x94/0x160 [ 463.756650][T11114] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 463.756678][T11114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.756703][T11114] __sock_sendmsg+0x21c/0x270 [ 463.756739][T11114] ____sys_sendmsg+0x505/0x830 [ 463.756770][T11114] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.756807][T11114] ? import_iovec+0x74/0xa0 [ 463.756831][T11114] ___sys_sendmsg+0x21f/0x2a0 [ 463.756859][T11114] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.756924][T11114] ? __fget_files+0x2a/0x420 [ 463.756944][T11114] ? __fget_files+0x3a0/0x420 [ 463.756973][T11114] __x64_sys_sendmsg+0x19b/0x260 [ 463.756997][T11114] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 463.757029][T11114] ? __pfx_ksys_write+0x10/0x10 [ 463.757043][T11114] ? rcu_is_watching+0x15/0xb0 [ 463.757077][T11114] ? do_syscall_64+0xbe/0x3b0 [ 463.757109][T11114] do_syscall_64+0xfa/0x3b0 [ 463.757137][T11114] ? lockdep_hardirqs_on+0x9c/0x150 [ 463.757163][T11114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.757181][T11114] ? clear_bhb_loop+0x60/0xb0 [ 463.757203][T11114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.757221][T11114] RIP: 0033:0x7fee0398e929 [ 463.757237][T11114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.757255][T11114] RSP: 002b:00007fee04836038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.757275][T11114] RAX: ffffffffffffffda RBX: 00007fee03bb5fa0 RCX: 00007fee0398e929 [ 463.757290][T11114] RDX: 0000000004000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 463.757322][T11114] RBP: 00007fee04836090 R08: 0000000000000000 R09: 0000000000000000 [ 463.757337][T11114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.757352][T11114] R13: 0000000000000000 R14: 00007fee03bb5fa0 R15: 00007fee03cdfa28 [ 463.757387][T11114] [ 464.155106][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 464.172715][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 464.212638][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 464.236104][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 464.280017][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 464.303330][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 464.325649][ T10] usb 3-1: string descriptor 0 read error: -22 [ 464.332846][ T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 464.363717][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.528766][T11123] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 464.535297][T11123] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 464.543043][ T5914] usbhid 5-1:0.0: can't add hid device: -71 [ 464.560245][ T5914] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 464.587944][ T5914] usb 5-1: USB disconnect, device number 67 [ 464.660271][ T10] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 464.698557][T11123] vhci_hcd vhci_hcd.0: Device attached [ 464.759063][T11126] vhci_hcd: connection closed [ 464.805648][T11134] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1445'. [ 465.136208][ T5894] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 465.146589][ T49] vhci_hcd: stop threads [ 465.150927][ T49] vhci_hcd: release socket [ 465.170578][ T49] vhci_hcd: disconnect device [ 466.001058][ T5832] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 466.014678][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: kworker/u9:3 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 466.014699][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 466.014709][ T5832] Workqueue: hci0 hci_rx_work [ 466.014734][ T5832] Call Trace: [ 466.014740][ T5832] [ 466.014746][ T5832] dump_stack_lvl+0x189/0x250 [ 466.014771][ T5832] ? kernfs_path_from_node+0x2c/0x260 [ 466.014789][ T5832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.014811][ T5832] ? __pfx__printk+0x10/0x10 [ 466.014827][ T5832] ? kernfs_path_from_node+0x2c/0x260 [ 466.014842][ T5832] ? kernfs_path_from_node+0x2c/0x260 [ 466.014859][ T5832] ? kernfs_path_from_node+0x22c/0x260 [ 466.014875][ T5832] ? kernfs_path_from_node+0x2c/0x260 [ 466.014893][ T5832] sysfs_create_dir_ns+0x259/0x280 [ 466.014911][ T5832] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 466.014928][ T5832] ? do_raw_spin_unlock+0x122/0x240 [ 466.014947][ T5832] kobject_add_internal+0x59f/0xb40 [ 466.014967][ T5832] kobject_add+0x155/0x220 [ 466.014992][ T5832] ? __pfx_kobject_add+0x10/0x10 [ 466.015014][ T5832] ? _raw_spin_unlock+0x28/0x50 [ 466.015035][ T5832] ? get_device_parent+0x366/0x3a0 [ 466.015052][ T5832] device_add+0x408/0xb50 [ 466.015069][ T5832] hci_conn_add_sysfs+0xd5/0x1e0 [ 466.015090][ T5832] le_conn_complete_evt+0xc3a/0x1220 [ 466.015115][ T5832] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 466.015131][ T5832] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 466.015151][ T5832] ? __asan_memcpy+0x40/0x70 [ 466.015173][ T5832] ? __pfx___mutex_lock+0x10/0x10 [ 466.015193][ T5832] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 466.015213][ T5832] ? skb_pull_data+0xfb/0x200 [ 466.015240][ T5832] hci_le_conn_complete_evt+0x187/0x450 [ 466.015260][ T5832] hci_event_packet+0x78f/0x1200 [ 466.015282][ T5832] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 466.015298][ T5832] ? __pfx_hci_event_packet+0x10/0x10 [ 466.015320][ T5832] ? kcov_remote_start+0x4d3/0x7f0 [ 466.015338][ T5832] ? warn_bogus_irq_restore+0x30/0x40 [ 466.015360][ T5832] ? hci_send_to_monitor+0xe2/0x570 [ 466.015378][ T5832] hci_rx_work+0x46a/0xe80 [ 466.015404][ T5832] ? process_scheduled_works+0x9ef/0x17b0 [ 466.015427][ T5832] process_scheduled_works+0xae1/0x17b0 [ 466.015468][ T5832] ? __pfx_process_scheduled_works+0x10/0x10 [ 466.015509][ T5832] worker_thread+0x8a0/0xda0 [ 466.015532][ T5832] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 466.015557][ T5832] ? __kthread_parkme+0x7b/0x200 [ 466.015578][ T5832] kthread+0x70e/0x8a0 [ 466.015596][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 466.015617][ T5832] ? __pfx_kthread+0x10/0x10 [ 466.015634][ T5832] ? _raw_spin_unlock_irq+0x23/0x50 [ 466.015652][ T5832] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.015670][ T5832] ? __pfx_kthread+0x10/0x10 [ 466.015686][ T5832] ret_from_fork+0x3fc/0x770 [ 466.015713][ T5832] ? __pfx_ret_from_fork+0x10/0x10 [ 466.015736][ T5832] ? __switch_to_asm+0x39/0x70 [ 466.015750][ T5832] ? __switch_to_asm+0x33/0x70 [ 466.015763][ T5832] ? __pfx_kthread+0x10/0x10 [ 466.015779][ T5832] ret_from_fork_asm+0x1a/0x30 [ 466.015804][ T5832] [ 466.015843][ T5832] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 466.343169][ T5832] Bluetooth: hci0: failed to register connection device [ 467.011292][ T43] usb 3-1: USB disconnect, device number 49 [ 467.105126][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1452'. [ 467.331708][T11163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1454'. [ 467.357960][T11163] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1454'. [ 467.626150][ T43] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 467.929010][ T5150] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 468.003658][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.015988][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.078752][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 468.093062][ T43] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 468.124652][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.140911][ T43] usb 3-1: config 0 descriptor?? [ 468.694132][T11189] raw_sendmsg: syz.0.1463 forgot to set AF_INET. Fix it! [ 469.126137][ T5841] IPVS: starting estimator thread 0... [ 469.160788][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1455'. [ 469.246724][T11202] IPVS: using max 36 ests per chain, 86400 per kthread [ 470.145005][T11212] netlink: 'syz.5.1468': attribute type 21 has an invalid length. [ 470.270081][ T5894] vhci_hcd: vhci_device speed not set [ 470.383979][ T5832] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 470.573819][T11221] FAULT_INJECTION: forcing a failure. [ 470.573819][T11221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.616473][T11221] CPU: 0 UID: 0 PID: 11221 Comm: syz.0.1471 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 470.616503][T11221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 470.616516][T11221] Call Trace: [ 470.616523][T11221] [ 470.616530][T11221] dump_stack_lvl+0x189/0x250 [ 470.616568][T11221] ? __pfx____ratelimit+0x10/0x10 [ 470.616594][T11221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.616620][T11221] ? __pfx__printk+0x10/0x10 [ 470.616638][T11221] ? __might_fault+0xb0/0x130 [ 470.616663][T11221] should_fail_ex+0x414/0x560 [ 470.616690][T11221] _copy_from_user+0x2d/0xb0 [ 470.616713][T11221] snd_seq_oss_write+0x382/0x930 [ 470.616752][T11221] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 470.616779][T11221] ? common_file_perm+0x199/0x200 [ 470.616803][T11221] ? security_file_permission+0x75/0x290 [ 470.616825][T11221] odev_write+0x5a/0x80 [ 470.616856][T11221] ? __pfx_odev_write+0x10/0x10 [ 470.616878][T11221] vfs_write+0x27e/0xa90 [ 470.616911][T11221] ? __pfx_vfs_write+0x10/0x10 [ 470.616938][T11221] ? __fget_files+0x2a/0x420 [ 470.616959][T11221] ? __fget_files+0x2a/0x420 [ 470.616981][T11221] ? __fget_files+0x3a0/0x420 [ 470.616998][T11221] ? __fget_files+0x2a/0x420 [ 470.617023][T11221] ksys_write+0x145/0x250 [ 470.617040][T11221] ? __pfx_ksys_write+0x10/0x10 [ 470.617059][T11221] ? do_syscall_64+0xbe/0x3b0 [ 470.617088][T11221] do_syscall_64+0xfa/0x3b0 [ 470.617116][T11221] ? lockdep_hardirqs_on+0x9c/0x150 [ 470.617142][T11221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.617159][T11221] ? clear_bhb_loop+0x60/0xb0 [ 470.617179][T11221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.617195][T11221] RIP: 0033:0x7fb20778e929 [ 470.617210][T11221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.617225][T11221] RSP: 002b:00007fb208693038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 470.617244][T11221] RAX: ffffffffffffffda RBX: 00007fb2079b6080 RCX: 00007fb20778e929 [ 470.617259][T11221] RDX: 0000000000000458 RSI: 0000200000000140 RDI: 0000000000000003 [ 470.617271][T11221] RBP: 00007fb208693090 R08: 0000000000000000 R09: 0000000000000000 [ 470.617281][T11221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 470.617302][T11221] R13: 0000000000000001 R14: 00007fb2079b6080 R15: 00007fb207adfa28 [ 470.617341][T11221] [ 470.852885][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.924750][T11224] mmap: syz.5.1468 (11224): VmData 37855232 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 470.981957][ T49] IPVS: stop unused estimator thread 0... [ 471.837665][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1475'. [ 471.900790][T11241] FAULT_INJECTION: forcing a failure. [ 471.900790][T11241] name failslab, interval 1, probability 0, space 0, times 0 [ 471.924865][T11238] netlink: 'syz.5.1475': attribute type 5 has an invalid length. [ 471.949357][T11238] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1475'. [ 472.076623][T11241] CPU: 0 UID: 0 PID: 11241 Comm: syz.1.1477 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 472.076650][T11241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 472.076661][T11241] Call Trace: [ 472.076668][T11241] [ 472.076676][T11241] dump_stack_lvl+0x189/0x250 [ 472.076709][T11241] ? __pfx____ratelimit+0x10/0x10 [ 472.076746][T11241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.076778][T11241] ? __pfx__printk+0x10/0x10 [ 472.076805][T11241] ? __pfx___might_resched+0x10/0x10 [ 472.076839][T11241] should_fail_ex+0x414/0x560 [ 472.076867][T11241] should_failslab+0xa8/0x100 [ 472.076888][T11241] __kmalloc_cache_noprof+0x70/0x3d0 [ 472.076910][T11241] ? snd_seq_port_connect+0x6b/0x430 [ 472.076941][T11241] snd_seq_port_connect+0x6b/0x430 [ 472.076964][T11241] ? do_raw_read_unlock+0x3d/0x80 [ 472.076985][T11241] ? _raw_read_unlock+0x28/0x50 [ 472.077013][T11241] snd_seq_ioctl_subscribe_port+0x339/0x710 [ 472.077038][T11241] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 472.077075][T11241] snd_seq_oss_midi_open+0x4b9/0x7b0 [ 472.077102][T11241] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 472.077140][T11241] snd_seq_oss_synth_reset+0x3c4/0x880 [ 472.077167][T11241] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 472.077190][T11241] ? __pfx_snd_seq_oss_synth_reset+0x10/0x10 [ 472.077211][T11241] ? kasan_quarantine_put+0xdd/0x220 [ 472.077253][T11241] snd_seq_oss_reset+0x5a/0x240 [ 472.077284][T11241] snd_seq_oss_ioctl+0x6c8/0x1090 [ 472.077312][T11241] ? __mutex_trylock_common+0x153/0x260 [ 472.077330][T11241] ? __pfx_snd_seq_oss_ioctl+0x10/0x10 [ 472.077354][T11241] ? __pfx___mutex_trylock_common+0x10/0x10 [ 472.077372][T11241] ? rcu_is_watching+0x15/0xb0 [ 472.077400][T11241] ? trace_contention_end+0x39/0x120 [ 472.077421][T11241] ? __mutex_lock+0x330/0xe80 [ 472.077467][T11241] ? __lock_acquire+0xab9/0xd20 [ 472.077497][T11241] ? odev_ioctl+0x81/0xf0 [ 472.077517][T11241] ? __pfx___mutex_lock+0x10/0x10 [ 472.077553][T11241] ? __fget_files+0x2a/0x420 [ 472.077576][T11241] ? __fget_files+0x3a0/0x420 [ 472.077596][T11241] ? __fget_files+0x2a/0x420 [ 472.077619][T11241] ? __pfx_odev_ioctl+0x10/0x10 [ 472.077644][T11241] odev_ioctl+0xb2/0xf0 [ 472.077666][T11241] __se_sys_ioctl+0xf9/0x170 [ 472.077690][T11241] do_syscall_64+0xfa/0x3b0 [ 472.077722][T11241] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.077756][T11241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.077775][T11241] ? clear_bhb_loop+0x60/0xb0 [ 472.077797][T11241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.077811][T11241] RIP: 0033:0x7fee0398e929 [ 472.077823][T11241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.077836][T11241] RSP: 002b:00007fee04836038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.077857][T11241] RAX: ffffffffffffffda RBX: 00007fee03bb5fa0 RCX: 00007fee0398e929 [ 472.077874][T11241] RDX: 0000000000000000 RSI: 0000000000005100 RDI: 0000000000000004 [ 472.077887][T11241] RBP: 00007fee04836090 R08: 0000000000000000 R09: 0000000000000000 [ 472.077898][T11241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.077910][T11241] R13: 0000000000000000 R14: 00007fee03bb5fa0 R15: 00007fee03cdfa28 [ 472.077942][T11241] [ 472.404088][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.448297][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 472.487237][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 472.685806][ T43] usb 3-1: USB disconnect, device number 50 [ 472.705225][T11246] FAULT_INJECTION: forcing a failure. [ 472.705225][T11246] name failslab, interval 1, probability 0, space 0, times 0 [ 472.721592][T11246] CPU: 0 UID: 0 PID: 11246 Comm: syz.2.1478 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 472.721613][T11246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 472.721622][T11246] Call Trace: [ 472.721629][T11246] [ 472.721635][T11246] dump_stack_lvl+0x189/0x250 [ 472.721663][T11246] ? __pfx____ratelimit+0x10/0x10 [ 472.721685][T11246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.721709][T11246] ? __pfx__printk+0x10/0x10 [ 472.721729][T11246] ? __pfx___might_resched+0x10/0x10 [ 472.721753][T11246] ? fs_reclaim_acquire+0x7d/0x100 [ 472.721775][T11246] should_fail_ex+0x414/0x560 [ 472.721796][T11246] should_failslab+0xa8/0x100 [ 472.721813][T11246] __kmalloc_noprof+0xcb/0x4f0 [ 472.721826][T11246] ? kfree+0x4d/0x440 [ 472.721847][T11246] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 472.721871][T11246] tomoyo_realpath_from_path+0xe3/0x5d0 [ 472.721903][T11246] ? tomoyo_domain+0xd9/0x130 [ 472.721928][T11246] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 472.721945][T11246] tomoyo_path_number_perm+0x1e8/0x5a0 [ 472.721964][T11246] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 472.721993][T11246] ? __lock_acquire+0xab9/0xd20 [ 472.722029][T11246] ? __fget_files+0x2a/0x420 [ 472.722048][T11246] ? __fget_files+0x2a/0x420 [ 472.722062][T11246] ? __fget_files+0x3a0/0x420 [ 472.722077][T11246] ? __fget_files+0x2a/0x420 [ 472.722096][T11246] security_file_ioctl+0xcb/0x2d0 [ 472.722113][T11246] __se_sys_ioctl+0x47/0x170 [ 472.722137][T11246] do_syscall_64+0xfa/0x3b0 [ 472.722159][T11246] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.722179][T11246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.722194][T11246] ? clear_bhb_loop+0x60/0xb0 [ 472.722212][T11246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.722227][T11246] RIP: 0033:0x7f45de78e929 [ 472.722240][T11246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.722253][T11246] RSP: 002b:00007f45dc5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.722269][T11246] RAX: ffffffffffffffda RBX: 00007f45de9b5fa0 RCX: 00007f45de78e929 [ 472.722280][T11246] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000010 [ 472.722290][T11246] RBP: 00007f45dc5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 472.722299][T11246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.722308][T11246] R13: 0000000000000000 R14: 00007f45de9b5fa0 R15: 00007f45deadfa28 [ 472.722330][T11246] [ 472.722336][T11246] ERROR: Out of memory at tomoyo_realpath_from_path. [ 472.915824][ C0] vkms_vblank_simulate: vblank timer overrun [ 473.368903][ T5150] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 473.646276][ T5914] IPVS: starting estimator thread 0... [ 473.736290][T11257] IPVS: using max 29 ests per chain, 69600 per kthread [ 474.316105][ T5914] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 474.368906][T11277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1491'. [ 474.480392][ T49] IPVS: stop unused estimator thread 0... [ 474.525578][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.566706][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.610960][ T5914] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 474.678973][ T5914] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 474.709006][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.754377][ T5914] usb 1-1: config 0 descriptor?? [ 474.780107][ T5150] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 474.790054][ T5150] CPU: 0 UID: 0 PID: 5150 Comm: kworker/u9:1 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 474.790071][ T5150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 474.790098][ T5150] Workqueue: hci3 hci_rx_work [ 474.790127][ T5150] Call Trace: [ 474.790133][ T5150] [ 474.790140][ T5150] dump_stack_lvl+0x189/0x250 [ 474.790167][ T5150] ? kernfs_path_from_node+0x2c/0x260 [ 474.790186][ T5150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.790211][ T5150] ? __pfx__printk+0x10/0x10 [ 474.790229][ T5150] ? kernfs_path_from_node+0x2c/0x260 [ 474.790245][ T5150] ? kernfs_path_from_node+0x2c/0x260 [ 474.790265][ T5150] ? kernfs_path_from_node+0x22c/0x260 [ 474.790282][ T5150] ? kernfs_path_from_node+0x2c/0x260 [ 474.790303][ T5150] sysfs_create_dir_ns+0x259/0x280 [ 474.790322][ T5150] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 474.790341][ T5150] ? do_raw_spin_unlock+0x122/0x240 [ 474.790363][ T5150] kobject_add_internal+0x59f/0xb40 [ 474.790385][ T5150] kobject_add+0x155/0x220 [ 474.790413][ T5150] ? __pfx_kobject_add+0x10/0x10 [ 474.790438][ T5150] ? _raw_spin_unlock+0x28/0x50 [ 474.790461][ T5150] ? get_device_parent+0x366/0x3a0 [ 474.790490][ T5150] device_add+0x408/0xb50 [ 474.790509][ T5150] hci_conn_add_sysfs+0xd5/0x1e0 [ 474.790533][ T5150] le_conn_complete_evt+0xc3a/0x1220 [ 474.790561][ T5150] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 474.790579][ T5150] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 474.790601][ T5150] ? __asan_memcpy+0x40/0x70 [ 474.790624][ T5150] ? __pfx___mutex_lock+0x10/0x10 [ 474.790647][ T5150] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 474.790669][ T5150] ? skb_pull_data+0xfb/0x200 [ 474.790694][ T5150] hci_le_conn_complete_evt+0x187/0x450 [ 474.790716][ T5150] hci_event_packet+0x78f/0x1200 [ 474.790740][ T5150] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 474.790758][ T5150] ? __pfx_hci_event_packet+0x10/0x10 [ 474.790781][ T5150] ? kcov_remote_start+0x4d3/0x7f0 [ 474.790800][ T5150] ? warn_bogus_irq_restore+0x30/0x40 [ 474.790824][ T5150] ? hci_send_to_monitor+0xe2/0x570 [ 474.790844][ T5150] hci_rx_work+0x46a/0xe80 [ 474.790873][ T5150] ? process_scheduled_works+0x9ef/0x17b0 [ 474.790898][ T5150] process_scheduled_works+0xae1/0x17b0 [ 474.790944][ T5150] ? __pfx_process_scheduled_works+0x10/0x10 [ 474.790981][ T5150] worker_thread+0x8a0/0xda0 [ 474.791014][ T5150] ? __kthread_parkme+0x7b/0x200 [ 474.791036][ T5150] kthread+0x70e/0x8a0 [ 474.791056][ T5150] ? __pfx_worker_thread+0x10/0x10 [ 474.791079][ T5150] ? __pfx_kthread+0x10/0x10 [ 474.791097][ T5150] ? _raw_spin_unlock_irq+0x23/0x50 [ 474.791117][ T5150] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.791137][ T5150] ? __pfx_kthread+0x10/0x10 [ 474.791155][ T5150] ret_from_fork+0x3fc/0x770 [ 474.791179][ T5150] ? __pfx_ret_from_fork+0x10/0x10 [ 474.791217][ T5150] ? __switch_to_asm+0x39/0x70 [ 474.791230][ T5150] ? __switch_to_asm+0x33/0x70 [ 474.791243][ T5150] ? __pfx_kthread+0x10/0x10 [ 474.791270][ T5150] ret_from_fork_asm+0x1a/0x30 [ 474.791294][ T5150] [ 474.791330][ T5150] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 474.836277][ T43] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 474.840646][ T5150] Bluetooth: hci3: failed to register connection device [ 475.296159][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 475.322399][ T43] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 475.372887][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 475.403001][ T43] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 475.421891][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.436319][ T43] usb 3-1: Product: syz [ 475.445701][ T43] usb 3-1: Manufacturer: syz [ 475.445722][ T43] usb 3-1: SerialNumber: syz [ 475.451557][ T43] usb 3-1: config 0 descriptor?? [ 475.469951][ T43] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 475.469984][ T43] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 475.743574][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1488'. [ 475.854911][T11289] FAULT_INJECTION: forcing a failure. [ 475.854911][T11289] name failslab, interval 1, probability 0, space 0, times 0 [ 475.868295][T11289] CPU: 1 UID: 0 PID: 11289 Comm: syz.4.1495 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 475.868321][T11289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 475.868334][T11289] Call Trace: [ 475.868342][T11289] [ 475.868350][T11289] dump_stack_lvl+0x189/0x250 [ 475.868392][T11289] ? __pfx____ratelimit+0x10/0x10 [ 475.868419][T11289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.868448][T11289] ? __pfx__printk+0x10/0x10 [ 475.868474][T11289] ? __pfx___might_resched+0x10/0x10 [ 475.868503][T11289] ? fs_reclaim_acquire+0x7d/0x100 [ 475.868530][T11289] should_fail_ex+0x414/0x560 [ 475.868557][T11289] should_failslab+0xa8/0x100 [ 475.868580][T11289] __kmalloc_noprof+0xcb/0x4f0 [ 475.868598][T11289] ? fib_nl2rule+0x2f5/0x19f0 [ 475.868623][T11289] fib_nl2rule+0x2f5/0x19f0 [ 475.868652][T11289] ? __pfx_fib_nl2rule+0x10/0x10 [ 475.868674][T11289] ? __nla_parse+0x40/0x60 [ 475.868703][T11289] fib_newrule+0x2c8/0xf20 [ 475.868722][T11289] ? is_bpf_text_address+0x292/0x2b0 [ 475.868758][T11289] ? __pfx_fib_newrule+0x10/0x10 [ 475.868812][T11289] ? __pfx_fib_nl_newrule+0x10/0x10 [ 475.868833][T11289] rtnetlink_rcv_msg+0x7cf/0xb70 [ 475.868854][T11289] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 475.868872][T11289] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 475.868906][T11289] netlink_rcv_skb+0x208/0x470 [ 475.868927][T11289] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 475.868947][T11289] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 475.868979][T11289] ? netlink_deliver_tap+0x2e/0x1b0 [ 475.868999][T11289] ? netlink_deliver_tap+0x2e/0x1b0 [ 475.869025][T11289] netlink_unicast+0x75b/0x8d0 [ 475.869053][T11289] netlink_sendmsg+0x805/0xb30 [ 475.869082][T11289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.869106][T11289] ? aa_sock_msg_perm+0x94/0x160 [ 475.869148][T11289] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 475.869174][T11289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.869197][T11289] __sock_sendmsg+0x21c/0x270 [ 475.869247][T11289] ____sys_sendmsg+0x505/0x830 [ 475.869278][T11289] ? __pfx_____sys_sendmsg+0x10/0x10 [ 475.869319][T11289] ? import_iovec+0x74/0xa0 [ 475.869341][T11289] ___sys_sendmsg+0x21f/0x2a0 [ 475.869369][T11289] ? __pfx____sys_sendmsg+0x10/0x10 [ 475.869438][T11289] ? __fget_files+0x2a/0x420 [ 475.869462][T11289] ? __fget_files+0x3a0/0x420 [ 475.869496][T11289] __x64_sys_sendmsg+0x19b/0x260 [ 475.869525][T11289] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 475.869561][T11289] ? __pfx_ksys_write+0x10/0x10 [ 475.869578][T11289] ? rcu_is_watching+0x15/0xb0 [ 475.869617][T11289] ? do_syscall_64+0xbe/0x3b0 [ 475.869652][T11289] do_syscall_64+0xfa/0x3b0 [ 475.869684][T11289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.869704][T11289] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 475.869725][T11289] ? clear_bhb_loop+0x60/0xb0 [ 475.869751][T11289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.869772][T11289] RIP: 0033:0x7fd5df78e929 [ 475.869790][T11289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.869807][T11289] RSP: 002b:00007fd5e0674038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.869829][T11289] RAX: ffffffffffffffda RBX: 00007fd5df9b5fa0 RCX: 00007fd5df78e929 [ 475.869845][T11289] RDX: 0000000000040000 RSI: 0000200000000140 RDI: 0000000000000003 [ 475.869859][T11289] RBP: 00007fd5e0674090 R08: 0000000000000000 R09: 0000000000000000 [ 475.869872][T11289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.869884][T11289] R13: 0000000000000000 R14: 00007fd5df9b5fa0 R15: 00007fd5dfadfa28 [ 475.869916][T11289] [ 476.716789][ T43] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 476.732933][ T43] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 476.773410][ T43] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 476.865005][ T43] em28xx 3-1:0.0: No AC97 audio processor [ 477.053144][ T43] usb 3-1: USB disconnect, device number 51 [ 477.086632][ T43] em28xx 3-1:0.0: Disconnecting em28xx [ 477.125146][ T43] em28xx 3-1:0.0: Freeing device [ 477.924325][T11326] block device autoloading is deprecated and will be removed. [ 478.078715][T11326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1503'. [ 478.744062][ T5841] IPVS: starting estimator thread 0... [ 478.808605][ T5914] usbhid 1-1:0.0: can't add hid device: -71 [ 478.825772][ T5914] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 478.849308][T11335] IPVS: using max 38 ests per chain, 91200 per kthread [ 478.905229][ T5914] usb 1-1: USB disconnect, device number 65 [ 479.011766][T11338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1505'. [ 479.339844][ T5832] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 479.350886][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: kworker/u9:3 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 479.350917][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 479.350933][ T5832] Workqueue: hci4 hci_rx_work [ 479.350971][ T5832] Call Trace: [ 479.350982][ T5832] [ 479.350992][ T5832] dump_stack_lvl+0x189/0x250 [ 479.351030][ T5832] ? kernfs_path_from_node+0x2c/0x260 [ 479.351059][ T5832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.351096][ T5832] ? __pfx__printk+0x10/0x10 [ 479.351123][ T5832] ? kernfs_path_from_node+0x2c/0x260 [ 479.351147][ T5832] ? kernfs_path_from_node+0x2c/0x260 [ 479.351175][ T5832] ? kernfs_path_from_node+0x22c/0x260 [ 479.351199][ T5832] ? kernfs_path_from_node+0x2c/0x260 [ 479.351241][ T5832] sysfs_create_dir_ns+0x259/0x280 [ 479.351268][ T5832] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 479.351295][ T5832] ? do_raw_spin_unlock+0x122/0x240 [ 479.351335][ T5832] kobject_add_internal+0x59f/0xb40 [ 479.351371][ T5832] kobject_add+0x155/0x220 [ 479.351409][ T5832] ? __pfx_kobject_add+0x10/0x10 [ 479.351442][ T5832] ? _raw_spin_unlock+0x28/0x50 [ 479.351472][ T5832] ? get_device_parent+0x366/0x3a0 [ 479.351498][ T5832] device_add+0x408/0xb50 [ 479.351523][ T5832] hci_conn_add_sysfs+0xd5/0x1e0 [ 479.351554][ T5832] le_conn_complete_evt+0xc3a/0x1220 [ 479.351590][ T5832] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 479.351613][ T5832] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 479.351642][ T5832] ? __asan_memcpy+0x40/0x70 [ 479.351671][ T5832] ? __pfx___mutex_lock+0x10/0x10 [ 479.351701][ T5832] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 479.351729][ T5832] ? skb_pull_data+0xfb/0x200 [ 479.351762][ T5832] hci_le_conn_complete_evt+0x187/0x450 [ 479.351791][ T5832] hci_event_packet+0x78f/0x1200 [ 479.351823][ T5832] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 479.351847][ T5832] ? __pfx_hci_event_packet+0x10/0x10 [ 479.351879][ T5832] ? kcov_remote_start+0x4d3/0x7f0 [ 479.351904][ T5832] ? warn_bogus_irq_restore+0x30/0x40 [ 479.351936][ T5832] ? hci_send_to_monitor+0xe2/0x570 [ 479.351962][ T5832] hci_rx_work+0x46a/0xe80 [ 479.352001][ T5832] ? process_scheduled_works+0x9ef/0x17b0 [ 479.352033][ T5832] process_scheduled_works+0xae1/0x17b0 [ 479.352094][ T5832] ? __pfx_process_scheduled_works+0x10/0x10 [ 479.352143][ T5832] worker_thread+0x8a0/0xda0 [ 479.352178][ T5832] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 479.352214][ T5832] ? __kthread_parkme+0x7b/0x200 [ 479.352243][ T5832] kthread+0x70e/0x8a0 [ 479.352269][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 479.352300][ T5832] ? __pfx_kthread+0x10/0x10 [ 479.352325][ T5832] ? _raw_spin_unlock_irq+0x23/0x50 [ 479.352356][ T5832] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.352382][ T5832] ? __pfx_kthread+0x10/0x10 [ 479.352406][ T5832] ret_from_fork+0x3fc/0x770 [ 479.352438][ T5832] ? __pfx_ret_from_fork+0x10/0x10 [ 479.352472][ T5832] ? __switch_to_asm+0x39/0x70 [ 479.352492][ T5832] ? __switch_to_asm+0x33/0x70 [ 479.352512][ T5832] ? __pfx_kthread+0x10/0x10 [ 479.352535][ T5832] ret_from_fork_asm+0x1a/0x30 [ 479.352573][ T5832] [ 479.352601][ T5832] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 479.673136][ T5832] Bluetooth: hci4: failed to register connection device [ 480.150305][T11354] program syz.1.1507 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 480.296127][ T43] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 480.376558][T11357] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1504'. [ 480.512300][ T13] IPVS: stop unused estimator thread 0... [ 480.567928][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 480.584657][ T43] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 480.596215][ T43] usb 1-1: config 0 has no interface number 0 [ 480.611170][ T43] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 480.638617][ T43] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 480.655159][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.673729][ T43] usb 1-1: Product: syz [ 480.707993][ T43] usb 1-1: Manufacturer: syz [ 480.733209][ T43] usb 1-1: SerialNumber: syz [ 480.768066][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1510'. [ 480.843966][ T43] usb 1-1: config 0 descriptor?? [ 480.945955][ T43] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 481.086327][ T5914] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 481.138252][ T43] em28xx 1-1:0.132: Video interface 132 found: [ 481.287361][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 481.319282][ T5914] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 481.372521][ T5914] usb 2-1: config 0 has no interface number 0 [ 481.379933][ T43] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 481.553240][ T5914] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 481.590957][ T43] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 481.618406][ T43] em28xx 1-1:0.132: board has no eeprom [ 481.670853][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.680417][ T5914] usb 2-1: Product: syz [ 481.684626][ T5914] usb 2-1: Manufacturer: syz [ 481.705266][ T43] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 481.712935][ T5914] usb 2-1: SerialNumber: syz [ 481.764785][ T5914] usb 2-1: config 0 descriptor?? [ 481.975061][ T5914] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 481.983971][ T43] em28xx 1-1:0.132: analog set to bulk mode. [ 481.985056][ T5841] em28xx 1-1:0.132: Registering V4L2 extension [ 482.031257][ T43] usb 1-1: USB disconnect, device number 66 [ 482.063804][ T43] em28xx 1-1:0.132: Disconnecting em28xx [ 482.223046][ T5914] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 482.324261][T11375] netlink: 'syz.2.1515': attribute type 10 has an invalid length. [ 482.386591][ T5914] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 482.617820][ T977] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 482.774269][ T977] usb 3-1: device descriptor read/64, error -71 [ 482.808997][ T5841] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 482.830269][ T5841] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 482.853273][ T5841] em28xx 1-1:0.132: No AC97 audio processor [ 482.874011][ T5841] usb 1-1: Decoder not found [ 482.924588][ T5841] em28xx 1-1:0.132: failed to create media graph [ 482.976205][ T5841] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 483.003240][ T5841] em28xx 1-1:0.132: Remote control support is not available for this card. [ 483.015709][ T5832] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 483.038477][ T977] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 483.047763][ T43] em28xx 1-1:0.132: Closing input extension [ 483.082090][ T43] em28xx 1-1:0.132: Freeing device [ 483.141489][T11384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1518'. [ 483.189707][ T977] usb 3-1: device descriptor read/64, error -71 [ 483.336894][ T977] usb usb3-port1: attempt power cycle [ 483.407439][ T43] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 483.455965][T11395] loop4: detected capacity change from 0 to 524255232 [ 483.528228][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1521'. [ 483.592362][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.648195][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.689066][ T43] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 483.696162][ T977] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 483.729156][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.737303][ T977] usb 3-1: device descriptor read/8, error -71 [ 483.787755][ T43] usb 1-1: config 0 descriptor?? [ 483.979493][ T977] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 484.026896][ T977] usb 3-1: device descriptor read/8, error -71 [ 484.095782][ T10] IPVS: starting estimator thread 0... [ 484.124381][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 484.176703][ T5841] usb 2-1: USB disconnect, device number 65 [ 484.196532][ T977] usb usb3-port1: unable to enumerate USB device [ 484.218146][ T5841] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 484.296258][T11398] IPVS: using max 27 ests per chain, 64800 per kthread [ 484.304525][ T5841] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 484.387330][ T5841] quatech2 2-1:0.51: device disconnected [ 485.052077][T11379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.061250][T11379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.102492][ T43] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0016/input/input34 [ 485.150174][ T8348] IPVS: stop unused estimator thread 0... [ 485.228795][T11420] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1527'. [ 485.284616][ T43] uclogic 0003:256C:006D.0016: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 485.326475][ T43] usb 1-1: USB disconnect, device number 67 [ 485.477496][ T5841] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 485.485778][T11423] fido_id[11423]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 485.540436][T11420] bond0 (unregistering): Released all slaves [ 485.660683][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.685895][ T5841] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 485.733790][ T5841] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 485.748191][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.777983][ T5841] usb 2-1: config 0 descriptor?? [ 486.008072][ T43] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 486.016977][ T977] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 486.060657][T11446] macvlan2: entered promiscuous mode [ 486.070199][T11446] bridge0: entered promiscuous mode [ 486.166361][ T977] usb 3-1: device descriptor read/64, error -71 [ 486.176173][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 486.183743][ T43] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 486.212198][ T5841] lenovo 0003:17EF:60EE.0017: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.1-1/input0 [ 486.228060][ T43] usb 5-1: New USB device found, idVendor=056a, idProduct=033e, bcdDevice= 0.40 [ 486.238315][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.250718][ T43] usb 5-1: Product: 왹䙍Ὄ襇ꈌ [ 486.256551][ T43] usb 5-1: Manufacturer: 푪̰棡萲럨匓跥㮝숯甧Ӓ큗쁗ٲ潿걛䠊᮪⟆烽投ꬩ๣ဥم䢽頟慉Ꮶ广갂Ḏᙧ烪儀⋾暭ⰻ⁊荓謁耢 [ 486.448063][T11460] program syz.0.1539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 486.504185][ T43] usb 5-1: SerialNumber: 쌳颩፭뻬⩵堵ᙳ閉ỿ䒗귁痢꽥肧ᅡ產矊㶶乆ⱄ킇㐯瓁祖뻈쉐ࣞⴏ玡䶞氹鷦䱽㜷寉괿엜놨ꕾ매籦⌠쏿颷ų솑馥桏啳계 [ 486.524920][ T10] usb 2-1: USB disconnect, device number 66 [ 486.531155][ T977] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 486.906386][ T977] usb 3-1: device descriptor read/64, error -71 [ 486.925437][ T43] usbhid 5-1:1.0: can't add hid device: -71 [ 486.935129][ T43] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 486.952003][ T43] usb 5-1: USB disconnect, device number 68 [ 487.027394][ T977] usb usb3-port1: attempt power cycle [ 487.036300][ T5914] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 487.196311][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 487.362695][ T5914] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 487.371190][ T5914] usb 1-1: config 0 has no interface number 0 [ 487.377463][ T977] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 487.407171][ T5914] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 487.416758][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.434134][ T5914] usb 1-1: Product: syz [ 487.438908][ T977] usb 3-1: device descriptor read/8, error -71 [ 487.445319][ T5914] usb 1-1: Manufacturer: syz [ 487.450080][ T5914] usb 1-1: SerialNumber: syz [ 487.457706][ T5914] usb 1-1: config 0 descriptor?? [ 487.471111][ T5914] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 487.738736][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1544'. [ 487.802872][ T977] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 488.015935][T11475] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1543'. [ 488.265716][ T5914] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 488.293226][ T977] usb 3-1: device descriptor read/8, error -71 [ 488.303098][ T5914] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 488.406750][ T977] usb usb3-port1: unable to enumerate USB device [ 489.000435][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1547'. [ 489.297916][T11492] FAULT_INJECTION: forcing a failure. [ 489.297916][T11492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.349230][T11492] CPU: 0 UID: 0 PID: 11492 Comm: syz.2.1548 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 489.349262][T11492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 489.349276][T11492] Call Trace: [ 489.349285][T11492] [ 489.349295][T11492] dump_stack_lvl+0x189/0x250 [ 489.349348][T11492] ? __pfx____ratelimit+0x10/0x10 [ 489.349378][T11492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.349409][T11492] ? __pfx__printk+0x10/0x10 [ 489.349431][T11492] ? __might_fault+0xb0/0x130 [ 489.349461][T11492] should_fail_ex+0x414/0x560 [ 489.349491][T11492] _copy_from_user+0x2d/0xb0 [ 489.349511][T11492] ___sys_sendmsg+0x158/0x2a0 [ 489.349539][T11492] ? __pfx____sys_sendmsg+0x10/0x10 [ 489.349604][T11492] ? __fget_files+0x2a/0x420 [ 489.349626][T11492] ? __fget_files+0x3a0/0x420 [ 489.349659][T11492] __x64_sys_sendmsg+0x19b/0x260 [ 489.349687][T11492] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 489.349721][T11492] ? __pfx_ksys_write+0x10/0x10 [ 489.349737][T11492] ? rcu_is_watching+0x15/0xb0 [ 489.349793][T11492] ? do_syscall_64+0xbe/0x3b0 [ 489.349830][T11492] do_syscall_64+0xfa/0x3b0 [ 489.349861][T11492] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.349890][T11492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.349912][T11492] ? clear_bhb_loop+0x60/0xb0 [ 489.349937][T11492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.349958][T11492] RIP: 0033:0x7f45de78e929 [ 489.349977][T11492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.349996][T11492] RSP: 002b:00007f45dc5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 489.350019][T11492] RAX: ffffffffffffffda RBX: 00007f45de9b5fa0 RCX: 00007f45de78e929 [ 489.350036][T11492] RDX: 0000000000000810 RSI: 0000200000000280 RDI: 0000000000000003 [ 489.350051][T11492] RBP: 00007f45dc5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 489.350064][T11492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.350077][T11492] R13: 0000000000000000 R14: 00007f45de9b5fa0 R15: 00007f45deadfa28 [ 489.350108][T11492] [ 489.563026][ C0] vkms_vblank_simulate: vblank timer overrun [ 489.623356][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1549'. [ 489.706133][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 489.766455][ T977] usb 1-1: USB disconnect, device number 68 [ 489.779235][ T977] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 489.803411][ T977] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 489.816699][ T977] quatech2 1-1:0.51: device disconnected [ 489.964187][T11494] macsec0: entered promiscuous mode [ 489.970020][T11494] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:579 [ 489.979424][T11494] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 11494, name: syz.1.1549 [ 489.988605][T11494] preempt_count: 201, expected: 0 [ 489.993657][T11494] RCU nest depth: 0, expected: 0 [ 489.998676][T11494] 3 locks held by syz.1.1549/11494: [ 490.003905][T11494] #0: ffffffff8fa147e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 490.013508][T11494] #1: ffffffff8f50fcc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 490.022692][T11494] #2: ffff88806b29a368 (&macsec_netdev_addr_lock_key/1){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 490.033265][T11494] Preemption disabled at: [ 490.033283][T11494] [] dev_uc_add+0x56/0x120 [ 490.043690][T11494] CPU: 1 UID: 0 PID: 11494 Comm: syz.1.1549 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 490.043719][T11494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 490.043734][T11494] Call Trace: [ 490.043744][T11494] [ 490.043753][T11494] dump_stack_lvl+0x189/0x250 [ 490.043796][T11494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.043832][T11494] ? __pfx__printk+0x10/0x10 [ 490.043860][T11494] ? print_lock_name+0xde/0x100 [ 490.043881][T11494] ? dev_uc_add+0x56/0x120 [ 490.043910][T11494] __might_resched+0x495/0x610 [ 490.043948][T11494] ? dev_uc_add+0x56/0x120 [ 490.043972][T11494] ? __pfx___might_resched+0x10/0x10 [ 490.044024][T11494] __mutex_lock+0x106/0xe80 [ 490.044068][T11494] ? dev_set_promiscuity+0x10e/0x260 [ 490.044094][T11494] ? __pfx___mutex_lock+0x10/0x10 [ 490.044124][T11494] ? netdev_info+0x10a/0x160 [ 490.044157][T11494] ? __pfx_netdev_info+0x10/0x10 [ 490.044196][T11494] dev_set_promiscuity+0x10e/0x260 [ 490.044230][T11494] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 490.044263][T11494] __dev_set_promiscuity+0x531/0x740 [ 490.044291][T11494] ? __hw_addr_add_ex+0x3c5/0x770 [ 490.044320][T11494] __dev_set_rx_mode+0x17c/0x260 [ 490.044348][T11494] dev_uc_add+0xc8/0x120 [ 490.044377][T11494] macvlan_open+0x446/0x8e0 [ 490.044409][T11494] __dev_open+0x46d/0x880 [ 490.044435][T11494] ? __pfx___dev_open+0x10/0x10 [ 490.044456][T11494] ? __pfx_macvlan_change_rx_flags+0x10/0x10 [ 490.044488][T11494] __dev_change_flags+0x1ea/0x6d0 [ 490.044520][T11494] ? __pfx___dev_change_flags+0x10/0x10 [ 490.044542][T11494] ? netdev_is_rx_handler_busy+0x6e/0x140 [ 490.044570][T11494] ? __pfx_tap_handle_frame+0x10/0x10 [ 490.044597][T11494] ? macvtap_newlink+0x166/0x1b0 [ 490.044625][T11494] rtnl_newlink_create+0x555/0xb00 [ 490.044666][T11494] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 490.044688][T11494] ? rtnl_newlink+0x8db/0x1c70 [ 490.044711][T11494] ? __pfx___mutex_lock+0x10/0x10 [ 490.044753][T11494] ? ns_capable+0x8a/0xf0 [ 490.044789][T11494] rtnl_newlink+0x16d6/0x1c70 [ 490.044812][T11494] ? netlink_sendmsg+0x805/0xb30 [ 490.044850][T11494] ? __pfx_rtnl_newlink+0x10/0x10 [ 490.044896][T11494] ? kasan_quarantine_put+0xdd/0x220 [ 490.044929][T11494] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.044965][T11494] ? nlmon_xmit+0xb0/0x100 [ 490.044993][T11494] ? kmem_cache_free+0x18f/0x400 [ 490.045024][T11494] ? __local_bh_enable_ip+0x12d/0x1c0 [ 490.045058][T11494] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.045089][T11494] ? __local_bh_enable_ip+0x12d/0x1c0 [ 490.045121][T11494] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 490.045158][T11494] ? __dev_queue_xmit+0x27e/0x3a70 [ 490.045200][T11494] ? __lock_acquire+0xab9/0xd20 [ 490.045266][T11494] ? __pfx_rtnl_newlink+0x10/0x10 [ 490.045288][T11494] rtnetlink_rcv_msg+0x7cf/0xb70 [ 490.045314][T11494] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 490.045335][T11494] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 490.045354][T11494] ? ref_tracker_free+0x63a/0x7d0 [ 490.045381][T11494] ? __copy_skb_header+0xa7/0x550 [ 490.045421][T11494] ? __pfx_ref_tracker_free+0x10/0x10 [ 490.045447][T11494] ? __skb_clone+0x63/0x7a0 [ 490.045480][T11494] netlink_rcv_skb+0x208/0x470 [ 490.045504][T11494] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 490.045526][T11494] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 490.045562][T11494] ? netlink_deliver_tap+0x2e/0x1b0 [ 490.045585][T11494] ? netlink_deliver_tap+0x2e/0x1b0 [ 490.045613][T11494] netlink_unicast+0x75b/0x8d0 [ 490.045644][T11494] netlink_sendmsg+0x805/0xb30 [ 490.045677][T11494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.045704][T11494] ? aa_sock_msg_perm+0x94/0x160 [ 490.045731][T11494] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 490.045757][T11494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.045781][T11494] __sock_sendmsg+0x21c/0x270 [ 490.045814][T11494] ____sys_sendmsg+0x505/0x830 [ 490.045844][T11494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.045878][T11494] ? import_iovec+0x74/0xa0 [ 490.045902][T11494] ___sys_sendmsg+0x21f/0x2a0 [ 490.045929][T11494] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.045962][T11494] ? futex_wake+0x4b2/0x560 [ 490.046034][T11494] __x64_sys_sendmsg+0x19b/0x260 [ 490.046064][T11494] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 490.046100][T11494] ? rcu_is_watching+0x15/0xb0 [ 490.046136][T11494] ? do_syscall_64+0xbe/0x3b0 [ 490.046171][T11494] do_syscall_64+0xfa/0x3b0 [ 490.046201][T11494] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.046237][T11494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.046257][T11494] ? clear_bhb_loop+0x60/0xb0 [ 490.046283][T11494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.046301][T11494] RIP: 0033:0x7fee0398e929 [ 490.046320][T11494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.046338][T11494] RSP: 002b:00007fee04836038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.046359][T11494] RAX: ffffffffffffffda RBX: 00007fee03bb5fa0 RCX: 00007fee0398e929 [ 490.046375][T11494] RDX: 0000000000000810 RSI: 0000200000000280 RDI: 0000000000000003 [ 490.046388][T11494] RBP: 00007fee03a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 490.046401][T11494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.046413][T11494] R13: 0000000000000000 R14: 00007fee03bb5fa0 R15: 00007fee03cdfa28 [ 490.046444][T11494] [ 490.556273][T11494] [ 490.558628][T11494] ============================= [ 490.563493][T11494] [ BUG: Invalid wait context ] [ 490.568372][T11494] 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 Tainted: G W [ 490.577070][T11494] ----------------------------- [ 490.581937][T11494] syz.1.1549/11494 is trying to lock: [ 490.587322][T11494] ffff88807ad9cd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 490.597806][T11494] other info that might help us debug this: [ 490.603714][T11494] context-{5:5} [ 490.607196][T11494] 3 locks held by syz.1.1549/11494: [ 490.612409][T11494] #0: ffffffff8fa147e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 490.621968][T11494] #1: ffffffff8f50fcc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 490.631073][T11494] #2: ffff88806b29a368 (&macsec_netdev_addr_lock_key/1){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 490.641614][T11494] stack backtrace: [ 490.645349][T11494] CPU: 1 UID: 0 PID: 11494 Comm: syz.1.1549 Tainted: G W 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 490.645379][T11494] Tainted: [W]=WARN [ 490.645386][T11494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 490.645399][T11494] Call Trace: [ 490.645406][T11494] [ 490.645415][T11494] dump_stack_lvl+0x189/0x250 [ 490.645449][T11494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.645478][T11494] ? __pfx__printk+0x10/0x10 [ 490.645499][T11494] ? print_lock_name+0xde/0x100 [ 490.645520][T11494] __lock_acquire+0xbcb/0xd20 [ 490.645547][T11494] ? dev_set_promiscuity+0x10e/0x260 [ 490.645567][T11494] lock_acquire+0x120/0x360 [ 490.645590][T11494] ? dev_set_promiscuity+0x10e/0x260 [ 490.645617][T11494] __mutex_lock+0x182/0xe80 [ 490.645644][T11494] ? dev_set_promiscuity+0x10e/0x260 [ 490.645668][T11494] ? dev_set_promiscuity+0x10e/0x260 [ 490.645689][T11494] ? __pfx___mutex_lock+0x10/0x10 [ 490.645716][T11494] ? netdev_info+0x10a/0x160 [ 490.645739][T11494] ? __pfx_netdev_info+0x10/0x10 [ 490.645766][T11494] dev_set_promiscuity+0x10e/0x260 [ 490.645787][T11494] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 490.645815][T11494] __dev_set_promiscuity+0x531/0x740 [ 490.645837][T11494] ? __hw_addr_add_ex+0x3c5/0x770 [ 490.645860][T11494] __dev_set_rx_mode+0x17c/0x260 [ 490.645880][T11494] dev_uc_add+0xc8/0x120 [ 490.645902][T11494] macvlan_open+0x446/0x8e0 [ 490.645924][T11494] __dev_open+0x46d/0x880 [ 490.645942][T11494] ? __pfx___dev_open+0x10/0x10 [ 490.645959][T11494] ? __pfx_macvlan_change_rx_flags+0x10/0x10 [ 490.645981][T11494] __dev_change_flags+0x1ea/0x6d0 [ 490.646006][T11494] ? __pfx___dev_change_flags+0x10/0x10 [ 490.646026][T11494] ? netdev_is_rx_handler_busy+0x6e/0x140 [ 490.646051][T11494] ? __pfx_tap_handle_frame+0x10/0x10 [ 490.646071][T11494] ? macvtap_newlink+0x166/0x1b0 [ 490.646093][T11494] rtnl_newlink_create+0x555/0xb00 [ 490.646119][T11494] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 490.646140][T11494] ? rtnl_newlink+0x8db/0x1c70 [ 490.646169][T11494] ? __pfx___mutex_lock+0x10/0x10 [ 490.646202][T11494] ? ns_capable+0x8a/0xf0 [ 490.646231][T11494] rtnl_newlink+0x16d6/0x1c70 [ 490.646250][T11494] ? netlink_sendmsg+0x805/0xb30 [ 490.646275][T11494] ? __pfx_rtnl_newlink+0x10/0x10 [ 490.646302][T11494] ? kasan_quarantine_put+0xdd/0x220 [ 490.646330][T11494] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.646360][T11494] ? nlmon_xmit+0xb0/0x100 [ 490.646402][T11494] ? kmem_cache_free+0x18f/0x400 [ 490.646426][T11494] ? __local_bh_enable_ip+0x12d/0x1c0 [ 490.646455][T11494] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.646482][T11494] ? __local_bh_enable_ip+0x12d/0x1c0 [ 490.646512][T11494] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 490.646542][T11494] ? __dev_queue_xmit+0x27e/0x3a70 [ 490.646574][T11494] ? __lock_acquire+0xab9/0xd20 [ 490.646620][T11494] ? __pfx_rtnl_newlink+0x10/0x10 [ 490.646637][T11494] rtnetlink_rcv_msg+0x7cf/0xb70 [ 490.646656][T11494] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 490.646673][T11494] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 490.646690][T11494] ? ref_tracker_free+0x63a/0x7d0 [ 490.646713][T11494] ? __copy_skb_header+0xa7/0x550 [ 490.646737][T11494] ? __pfx_ref_tracker_free+0x10/0x10 [ 490.646760][T11494] ? __skb_clone+0x63/0x7a0 [ 490.646785][T11494] netlink_rcv_skb+0x208/0x470 [ 490.646805][T11494] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 490.646823][T11494] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 490.646848][T11494] ? netlink_deliver_tap+0x2e/0x1b0 [ 490.646867][T11494] ? netlink_deliver_tap+0x2e/0x1b0 [ 490.646889][T11494] netlink_unicast+0x75b/0x8d0 [ 490.646911][T11494] netlink_sendmsg+0x805/0xb30 [ 490.646936][T11494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.646958][T11494] ? aa_sock_msg_perm+0x94/0x160 [ 490.646981][T11494] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 490.647004][T11494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.647025][T11494] __sock_sendmsg+0x21c/0x270 [ 490.647053][T11494] ____sys_sendmsg+0x505/0x830 [ 490.647077][T11494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.647103][T11494] ? import_iovec+0x74/0xa0 [ 490.647121][T11494] ___sys_sendmsg+0x21f/0x2a0 [ 490.647144][T11494] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.647178][T11494] ? futex_wake+0x4b2/0x560 [ 490.647220][T11494] __x64_sys_sendmsg+0x19b/0x260 [ 490.647244][T11494] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 490.647270][T11494] ? rcu_is_watching+0x15/0xb0 [ 490.647300][T11494] ? do_syscall_64+0xbe/0x3b0 [ 490.647329][T11494] do_syscall_64+0xfa/0x3b0 [ 490.647356][T11494] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.647381][T11494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.647400][T11494] ? clear_bhb_loop+0x60/0xb0 [ 490.647421][T11494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.647440][T11494] RIP: 0033:0x7fee0398e929 [ 490.647457][T11494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.647474][T11494] RSP: 002b:00007fee04836038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.647495][T11494] RAX: ffffffffffffffda RBX: 00007fee03bb5fa0 RCX: 00007fee0398e929 [ 490.647510][T11494] RDX: 0000000000000810 RSI: 0000200000000280 RDI: 0000000000000003 [ 490.647523][T11494] RBP: 00007fee03a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 490.647535][T11494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.647547][T11494] R13: 0000000000000000 R14: 00007fee03bb5fa0 R15: 00007fee03cdfa28 [ 490.647566][T11494] [ 491.274511][T11508] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1551'. [ 491.363447][T11508] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.372494][T11508] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.381557][T11508] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.390531][T11508] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.413829][T11508] vxlan0: entered promiscuous mode [ 491.427734][T11514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1553'. [ 491.826394][ T43] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 491.976124][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 491.982969][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 491.994167][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.004450][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 492.017302][ T43] usb 6-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 492.026381][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.035598][ T43] usb 6-1: config 0 descriptor?? [ 492.462152][ T43] hid-alps 0003:044E:120C.0018: hidraw0: USB HID v0.00 Device [HID 044e:120c] on usb-dummy_hcd.5-1/input0 [ 493.728234][ T977] usb 6-1: USB disconnect, device number 35