last executing test programs: 14.955274738s ago: executing program 2 (id=177): socket$nl_route(0x10, 0x3, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) dup(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x20800) socket$netlink(0x10, 0x3, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c0016800800", @ANYRES64=r1], 0x38}}, 0x10) 14.46968292s ago: executing program 2 (id=182): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, r2, 0x0, 0x8a000) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xc) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000080)='./file1\x00', 0xc000, 0x1) unlinkat(r3, &(0x7f00000000c0)='./file1\x00', 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r2, 0x4068aea3, &(0x7f0000000f80)={0xc1, 0x0, 0x2}) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0d, &(0x7f0000000040)) 11.174594294s ago: executing program 2 (id=188): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x210) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="02000000000000000a004e2200000001ff020000000000000000000000000001000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000a009d8400000002fe8000000000000000000000000000bbc90d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000002fe8000000000000000000000000000bb02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e220000f2270000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300000009ff01000000000000000000000000000109000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e24000080010000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e200000000500000000000000000000000000000001f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000aff010000000000000000000000000001500a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000a004e2300000000fe8000000000000000000000000000bb"], 0x510) 10.486676177s ago: executing program 2 (id=193): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b40)={0x34, &(0x7f0000000940)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_connect$cdc_ecm(0x0, 0xbb, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa9, 0x1, 0x1, 0x9, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x9, 0x24, 0x6, 0x0, 0x0, "d212cee4"}, {0x5, 0x24, 0x0, 0x7b}, {0xd, 0x24, 0xf, 0x1, 0x40, 0x2, 0x9, 0x4}, [@network_terminal={0x7, 0x24, 0xa, 0x3, 0xd, 0x3, 0x8}, @ncm={0x6, 0x24, 0x1a, 0xff, 0x4}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x10}, @dmm={0x7, 0x24, 0x14, 0xfffc, 0x96c}, @mdlm_detail={0x50, 0x24, 0x13, 0x4, "2ac3548e425bdd7c425d7b0d8f2d379cc8c4e1277344c9ba08ef6f3ad6f120e49bf1ad32deed96e2f59f2d127db4990bc1df20f6ab5bc92ac4eaf8afbce413449d37d6eaaffb3a017a859216"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x5ff, 0x57, 0x9, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x8, 0x2, 0x5}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x4, 0x1, 0x9, 0xff, 0x1}, 0x37, &(0x7f0000000140)={0x5, 0xf, 0x37, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x4, 0x7, 0x8, 0x40}, @ssp_cap={0x24, 0x10, 0xa, 0x96, 0x6, 0x975, 0xf000, 0x8001, [0xc0, 0xffc000, 0xc00f, 0xc00f, 0xff3f30, 0xf]}]}, 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x419}}, {0x3d, &(0x7f0000000200)=@string={0x3d, 0x3, "43ddcae6ef705d1b13bd6c366b4178ca55a325cebb7799b0f6c5218e7111f509afa5dcceccb46244aefd1bc6809b7717f31ccf6ded361c4d09414d"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x380a}}]}) (rerun: 32) 9.040240995s ago: executing program 1 (id=198): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r1 = dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, r1, 0x0, 0x8a000) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000000080)='./file1\x00', 0xc000, 0x1) unlinkat(r2, &(0x7f00000000c0)='./file1\x00', 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000f80)={0xc1, 0x0, 0x2}) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0d, &(0x7f0000000040)) 7.309645578s ago: executing program 2 (id=201): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0x83b, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0xed, 0xc7, 0xbc, 0x10, 0xc251, 0x4003, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x829, 0x2, 0x5, 0x66, 0x40, 0x8, [{{0x9, 0x4, 0x4b, 0xfd, 0xd, 0x3, 0xef, 0x3a, 0xa8, [@hid_hid={0x9, 0x21, 0x100, 0x0, 0x1, {0x22, 0x28f}}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "ea8f8e4e1fdd"}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x3, 0xa5e2, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x81}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x72}, @obex={0x5, 0x24, 0x15, 0x80}]}], [{{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x4a, 0x36, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x2}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x5, 0x9, 0x2d, [@generic={0x89, 0x23, "734cf5648f18a060ae172d5e3041f845d58cb44429fa379369acabdfd8609307c05d4b14802371f562aafbfeef662101cf9f8f1b4d07dd0acec12e6e1bfd70745ef3f91ca895c080481ce0fc51833f462b7944a6a606f9e31477cd5fe80a9b3095ae4cf19fda041549b45c1526ab88aaf03c627e72714df31328f0abb796925d01ff3e7b72b542"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x1}]}}, {{0x9, 0x5, 0x0, 0x1, 0x0, 0xc, 0xc, 0x40, [@generic={0xf5, 0xd, "8c9a9dcecd53acfb9b51505d3ad8d475cfc3f7ca70098f28699046c6cce7bf34255bd4659347ee485c9061d80755f71121bf190888edea2d29a9f17ecc3a3c5d1706b6508e815e371153bc0eaec9c8d1cf7897b6e70abe764ac460b3e4ccb140ac1b273d31aecb8eb136b0c53e32ffb4820291895612f76d36d42f9a83be1062685b46af6bf48c2535429069be84c9892c4609d741b853695b22ce0ee9e7eea2d6e056f1974dda8b8ac74e46c11a6cd00fde8e9c087dd988f8d81e7873b7dd29883adb74781455911a4a3716b0e614958f170d9ca0a0f1cabacca5fcc198590ae5a5fd8e79d806d4ce2eac90be90bc6e6a0fe5"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x20, 0x8, 0xc, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfe, 0x28}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x5, 0x5, 0xa}}, {{0x9, 0x5, 0xa, 0x8, 0x20, 0xda, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xf}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xe8}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x5, 0x8, 0x74, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfe, 0x36}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x4, 0x2}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0xb, 0x1, 0xfe}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x7, 0x16, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf7}]}}, {{0x9, 0x5, 0xd, 0x3, 0x200, 0x9, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0x1, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x299}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x4, 0x0, 0x5}}, {{0x9, 0x5, 0xc, 0x4, 0x20, 0x3, 0xba, 0x10, [@generic={0x92, 0x8, "ad96723e90ef968176bae67420bd9cca26602685e097f473e74b0470ad969d3e012850ee9b53be7c79c1caf8864695976332c278975ecae13f64050d6279588617abff6cf503df2810961575f6ff9fcf0f222eea43097817d87106eca8164b8a396996d55d2c31ccf08fbeaab5b005c9251d9418445d117667694a157ed35b7309d5caf13be1a2050c35d08a9e41c179"}]}}]}}, {{0x9, 0x4, 0x4, 0x7, 0xf, 0xd2, 0x5d, 0x21, 0xfb, [], [{{0x9, 0x5, 0x7, 0xc, 0x200, 0x7, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x401}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x3, 0x0, 0x7, [@generic={0xe6, 0xc, "1da6abd8feb5623c56ff878c19afb4d656cf02cfa494d5471045592849a7cb7d7a844a06c03954639a8389026efc0b5cd6eaf2200e197aad710605527a5df3e5549a532ce61619356a2fe2f5be93bcf0020af6f25639facdcdd19a2d82000ebbd7018f39114b7c77b9b219e62ab8059265a5fec2c5e637372d8140fedc161fe808e486ea84150d7c5c067759132a05a2d6f1ce8820a928ccade20b0cbdf0023a42bde12e31bd78647541232a319a3d2d538dfaf210b88f8541f6446c90e2e1af01e62240fd3e6b4b6f359d610fd0f7e0f37b130f689c4372160758e996587fb7bc6fe953"}, @generic={0x26, 0xc, "84522fd71a096530e6936e57ade184ba1d697c2caa4d0553124a401296ee10b3bfbe9cf6"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x8, 0x7, 0xf7, 0x9}}, {{0x9, 0x5, 0xb, 0x1, 0x30, 0x70, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xff, 0xfd1}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x4, 0x4, 0x6}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0xef, 0x2, 0x8, [@generic={0xaf, 0x11, "78c34a70c2fe65b39b43f9d9302a6e68556a34c04710332df35d0a153fa2d38fb90d1cde96cf8ac64c715baa9414c977a1018ef1ce7bac91f944382dfcb587d0287dc053e06efd8a18e3f32998741a9fa76a088e54ddcd19db828057ece71512ee2c945f852fb6a31ebceb3ab98081dde1b3eed2193589bf9916461c9e5456f22d13560f5db473b7dd8a34b3f1aa423e5dda16aae97e6241b89472d3ae1493c223d33a6958c6571f85206adcfc"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x666f}]}}, {{0x9, 0x5, 0xa, 0x1, 0x40, 0x4, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x1}]}}, {{0x9, 0x5, 0xb, 0x2, 0x8, 0xfa, 0x7b, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xcd, 0x5}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x7, 0x7, 0x8, [@generic={0xea, 0x2, "5b14ce9339e671280b575abd764135319dc55fba2aa504f0b77b43c2bfc9fa2904d3a97fe260116b5d4b17a9ae8f1471e3a03158b792afafa73bb65e69dac1986ba6e97a064105c17446def0a4e58471a524d833b51c0eee0c0103d4e3aef7f310e84a297a5beeea8722c9814a732b6723c6953dc5071f2a051d2aa5ea686570405f93b6b445c66385975b86c8f6c7736121402d6391201696dbaafef9add19d34aefd9621b722537e4616bc0d6dca42482a3c0083fcd5c123f0594519d501c2478180a4d8cf640f335512dca418ed29764851d80e5c6546f148f602cbb9c9fe7e90d448cc7461df"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x8, 0x5, 0xcb, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0xd5}]}}, {{0x9, 0x5, 0xf, 0x1, 0x200, 0x6, 0x80, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1e, 0xfc}]}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0x9, 0x6e, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4b}, @uac_iso={0x7, 0x25, 0x1, 0x101, 0x4, 0xa026}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x1, 0x10, 0x80, [@generic={0x82, 0x2, "9a7174d7e33b919a9466ebc2001a391d05fdf0f8f4a5ba807472257a8623112053ab77ecbf31e87b5ae459bd29d7dbdadb0f304aab0ed09b03a635d31e3947b40592c15eaf3e6c8dcec32c018d13eba4adee2b46fa52bdc915bdc0a4cd480bd0da45fdee16091228ade710367703ee42826026d816626f0a5e517fab0538edee"}, @generic={0x26, 0x7, "82afa0e8423b8a35a611c7d83b0f2c2e432868f470c9837606b2dbdd20f0993e3f9caf4f"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x81, 0x6, 0xff, [@generic={0x8d, 0x6, "169d4818cf544d782935979aa358552684fc15d91a68e477103d8f22798c5c0cc09650857c1facc62a2096bed05fc664b127112fc9dfcfe7bb28972a6281a857a2d4b6044945761e89fac5b9179613c58d47263dcea491c42c7adbfcf287fa58fffd46e69f202cb3e96c95909c56c69dce60ffd29cca1bfcd106233e39914da2c29fb05b4b397ce0f5f240"}, @generic={0x6e, 0xd, "72194771f01e200d5456d00abb909b0ee69bbb0d25553ce0d9f87be342b2984aa782470ef86a7a276eb90d714913ea16736584960c23a8afbacfe93799cc45f593f99017d1f7de892c7702dd83f3e3572a75267453b6c5ff823beeaaa4c049458b90551de5a276d5237a7a03"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x20, 0x7f, 0x0, 0x80}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x5, 0x0, 0x2a, 0x10, 0x8}, 0x3a, &(0x7f0000000100)={0x5, 0xf, 0x3a, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x4, 0x3, 0xdb72, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x43, 0x9, 0x39, 0x0, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "8cf39f833a9b1c680bdf3f3cd22bef14"}, @wireless={0xb, 0x10, 0x1, 0x8, 0xa6, 0x4, 0x8, 0x1}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x140a}}, {0x1a, &(0x7f0000000180)=@string={0x1a, 0x3, "123e9fca6a5ccee6f5923fa0afc593295a5a18b7a8d5798f"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x421}}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000010c0)={{{@in6=@dev, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x2b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x3, 0xb7, 0x2}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 6.865327356s ago: executing program 0 (id=202): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000840), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000880)={0x2, 0x1, 0x2, "59e3f9b38465a27ebffc8dca149a9948566d6ae5fcf2e569f8c324e8950a0bc0", 0x31364d4e}) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r5, r4, 0x0, 0x21) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x3}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) syz_open_dev$sg(&(0x7f0000000300), 0x3, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x84) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r6, 0x0, 0x4ffe6, 0x0) 6.655121151s ago: executing program 4 (id=203): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="c4c160585508260f78070f017500663e660f38cf28f30f0966baf80cb8f0e06d8def66bafc0ced0fc77cd2003e0f2111f2a4660f1ba90e000000", 0x3a}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req={0x3, 0xb594, 0x3, 0x4}, 0x10) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @private2, 0x3}, 0x1c) 6.057053079s ago: executing program 4 (id=204): socket$nl_route(0x10, 0x3, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) dup(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x20800) socket$netlink(0x10, 0x3, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c001680080001", @ANYRES64=r1], 0x38}}, 0x10) 5.667042548s ago: executing program 0 (id=205): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x21182, 0x0) read$FUSE(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000180)={0x3, 'syz_tun\x00', {0x6522}, 0x3}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800290041010000080028"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) dup(r3) socket$inet(0x2, 0x800, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x20800) socket$netlink(0x10, 0x3, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r4], 0x38}}, 0x10) 5.620964513s ago: executing program 1 (id=206): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0xfffffffc}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x20}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc02c5341, &(0x7f0000000100)={{}, {0xaa, 0xfd}, 0x0, 0x0, 0x20}) 5.6190351s ago: executing program 4 (id=207): socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x5) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x129a82, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000001c0)={0x5, 0xa, 0x0, 0x0, 0xfc3c, 0x10, 0x0}) sendfile(r2, r2, 0x0, 0x8) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)={0x38, 0x4, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4014) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x13c, 0x3, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0xaf1e}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x81}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x400}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_USERDATA={0xaf, 0xc, "034b8605855c3f15c47b0267eb79357753575ba5741c36dee5fd96b13e45e71b51c7a0741a2c6558878b2b4f3a6f2643a98fbfcde920b4040433227664508d0e160b91fb82eef917348259a7c6bb6bcd5a84858cec9381ad3dc4e5dc6bcd1f29611d3ea65fc0f04d4aed3354dbe944addf67bca93d5d137a76ac42f4d7d0323d42d35626d5bab47842d29106f383e948ae28e53b58f66e960845e2f4adc48a2f57bcb6fdf4b5a1248de104"}, @NFTA_CHAIN_USERDATA={0xa, 0xc, "b693a870b502"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8}, @NFTA_NG_OFFSET={0x8}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x1f0}}, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40103d0b, 0x0) dup(r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x636}}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000200)={0xffffff81, [[0xb, 0x0, 0x10001, 0x1, 0x9, 0x2, 0x6, 0xfff], [0x100, 0xd, 0x3aa, 0x7fffffff, 0x0, 0x7, 0x4, 0x8], [0x6, 0x5, 0x95, 0xfff, 0xe, 0x0, 0x5926, 0x4]], '\x00', [{0x54d11a62, 0x5, 0x1}, {0xc, 0x8, 0x1, 0x1, 0x1}, {0x401, 0x1, 0x1, 0x1}, {0xff, 0xc8ce, 0x1, 0x0, 0x1}, {0xe057, 0x4, 0x1, 0x0, 0x1}, {0xa03, 0x5, 0x1}, {0x8000, 0x200, 0x1, 0x1, 0x1}, {0x81, 0x7a2, 0x0, 0x1}, {0x6, 0x7, 0x0, 0x1, 0x1}, {0x7, 0xacab, 0x0, 0x1, 0x0, 0x1}, {0xffffffc6, 0x3}, {0x3, 0x2566}], '\x00', 0x7}) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x8000000000000001, 0x0, 0xc3ad, 0x0, 0x3}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x26, 0x0, 0x1000000, 0x40, 0x2, 0x11, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x7}, 0x0, 0x0) 5.066122174s ago: executing program 1 (id=210): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2) syz_usb_connect(0x1, 0x36, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xaf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 4.30809799s ago: executing program 0 (id=211): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, {0x10, 0xb, 0x20}, {}, {0x0, 0x0, 0x8003}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x34, 0x0, 0x2}) 4.08990384s ago: executing program 4 (id=212): r0 = syz_open_dev$video(&(0x7f00000001c0), 0x3, 0x2500) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newroute={0x38, 0x18, 0x601, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfc, 0x1}, [@RTA_METRICS={0x7, 0x8, 0x0, 0x1, "1dbec1"}, @RTA_GATEWAY={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x38}}, 0x0) socket$packet(0x11, 0x3, 0x300) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ac1000/0x3000)=nil, 0x3000, 0x2000000, 0x5d031, 0xffffffffffffffff, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) socket$igmp(0x2, 0x3, 0x2) close_range(r5, r5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x42, 0x4, 0x518, 0xffffffff, 0x98, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x480, 0x480, 0x480, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'wg1\x00', 'ip6tnl0\x00'}, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x0, 0x98}}, @common=@unspec=@limit={{0x48}, {0x7004, 0x80000}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x2a0, 0x2e0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x15, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x578) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x121800, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) fcntl$dupfd(r0, 0x0, r0) 3.363241306s ago: executing program 0 (id=213): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00e4deb1f50505322c5002e8c55432ccb21ffbc5fd6ddfbc006c4fa5990c9514f009f5f22ed0c53e6cdb9e0ac4"], 0x0, 0x0, 0x0) (async) mount$fuseblk(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x330e0, 0x0) 2.210156281s ago: executing program 2 (id=214): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000000)=0xbe00, 0x4) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x10002, 0x1, 0x1}) r2 = gettid() timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0xc0405626, &(0x7f0000000100)=0x1) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x802, 0x0, 0x24}, 0x18) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x6, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f00000d6000/0x1000)=nil, 0x3000, 0x1}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x8010, 0xffffffffffffffff, 0x9e325000) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000440)="61b1ff50cf5aa13d18b9044199ad55359004e05944d3310f092adfca400a0de864341893eb1d0027245f906dc26c482a404c00a1733978246f37fffa8e96cffb834bdee310d47d8729f4af440c312bc201f194bfbed2eac2c754331405f5f2ea2c90bb775d19c72ece225f5144f7124ffcbd82fcecd1b465079e8049684173977699d29b1c1fcb309d7185c0840dbb95243d72c6f8ca612d0549169de7563faa814ecd694c67ed873818f3621738e23161390bc132700e98f84a848322f2251ffc06317a02ff31", 0xc7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x1, &(0x7f0000000540)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xb, 0xffffffffffffffab, 0x0, 0x0, 0x50, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000600)="518a719791533efe5c70556f5744f6aca8d4a819924843afc3267f36b89c83b8d57dac2a73b23e4716e141af3d286a7e42128d793973d39836fa5e276c5988536ea77ddfc00addfe05f00ae77464a84f896424e13ef64d88b39f6569ae7301f7e7cd44f6ecc9df6681db65e4dec680cb125ed34665a63b2ca5b2f81ff54347343f", 0x81}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)="aea602009c", 0x5}], 0x1}}], 0x2, 0x0) 2.107067469s ago: executing program 0 (id=215): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000001580)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5f92400905080aff03f70709090504"], 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x1dd880, 0x100, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x4}}, 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) r2 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r2, r0, 0x80000) accept4(r2, 0x0, &(0x7f0000000080), 0x800) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000001580)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5f92400905080aff03f70709090504"], 0x0) (async) read$FUSE(r0, &(0x7f0000006340)={0x2020}, 0x2058) (async) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x1dd880, 0x100, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x4}}, 0x50) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) (async) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) dup3(r2, r0, 0x80000) (async) accept4(r2, 0x0, &(0x7f0000000080), 0x800) (async) 1.883283225s ago: executing program 3 (id=216): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={0x0, 0xffff0fd7}, &(0x7f0000000080)=0x8) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'vlan1\x00', &(0x7f0000000000)=@ethtool_rxfh={0x1}}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x137b, 0xc001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_TXQLEN={0x8, 0xd, 0x4}, @IFLA_OPERSTATE={0x5, 0x10, 0x3}]}, 0x44}}, 0x20000844) unshare(0x2040400) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0) fcntl$setstatus(r3, 0x403, 0x26800) socket(0x28, 0x80000, 0x100) 1.646890629s ago: executing program 3 (id=217): setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040)=0x8, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x3e, 0x10b, 0xfffffffc, 0x25dfdbfd, {0x4, 0x7c}, [@nested={0x8, 0x136, 0x0, 0x1, [@typed={0x4, 0x2, 0x0, 0x0, @binary}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1.423631382s ago: executing program 1 (id=218): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x64010101, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}, @common=@inet=@multiport={{0x50}, {0x40, 0x0, [0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x3, 0x0, [0x6, 0x25, 0xd, 0x13, 0x39, 0x3f, 0x38, 0x8, 0x3b, 0x5, 0x15, 0x8, 0x4, 0x20, 0x13, 0x3], 0x1, 0x8, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000540)={r3, 0x1, 0xe3}, &(0x7f0000000580)=0x10) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x1c, r5, 0xd01, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1.274990458s ago: executing program 3 (id=219): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x1, 0x15e, [0x0, 0x2000000002c0, 0x2000000002f0, 0x200000000320], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x1d6) 1.023342258s ago: executing program 3 (id=220): r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x12b, 0x0, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x12}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) r4 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r4, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @local}, 0x1c) sendto$inet6(r4, &(0x7f0000000000)="17", 0x1, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303031303030302c757365725f69643d5989eab32ca7740806f568a0119c99309b3854fa63f6f876393129c4df780890686a90b450eedae67d36d7150ac3451b40afe7d99dac9d21ace3392c11b6c6f0b2705c26a6fca1fa938af5158ec87d7ed15cf590cde8c68723af6343110b66e0b84d0ced3b868312b415040000005fbafa998dd8cb917b21c616d1735d1d8c8e1b85bcb0515dc71e442dc9b0a86d8489a16c1f675940c84e00003f76e2c0f82ebde0afe94e6c1cc270d586e0df9da62874d3322c956acb43a7e264cad93822a7", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x157942, 0x80) write$FUSE_DIRENTPLUS(r6, &(0x7f00000005c0)={0x10}, 0x10) recvfrom(r0, &(0x7f0000000040)=""/180, 0xb4, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1000080002, 0x100000000000088) (async) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x0, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x12b, 0x0, 0x0, 0x4}]}, 0x8) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x12}) (async) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) (async) socket$inet6(0xa, 0x802, 0x88) (async) setsockopt$inet6_udp_int(r4, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) (async) sendto$inet6(r4, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @local}, 0x1c) (async) sendto$inet6(r4, &(0x7f0000000000)="17", 0x1, 0x0, 0x0, 0x0) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303031303030302c757365725f69643d5989eab32ca7740806f568a0119c99309b3854fa63f6f876393129c4df780890686a90b450eedae67d36d7150ac3451b40afe7d99dac9d21ace3392c11b6c6f0b2705c26a6fca1fa938af5158ec87d7ed15cf590cde8c68723af6343110b66e0b84d0ced3b868312b415040000005fbafa998dd8cb917b21c616d1735d1d8c8e1b85bcb0515dc71e442dc9b0a86d8489a16c1f675940c84e00003f76e2c0f82ebde0afe94e6c1cc270d586e0df9da62874d3322c956acb43a7e264cad93822a7", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x157942, 0x80) (async) write$FUSE_DIRENTPLUS(r6, &(0x7f00000005c0)={0x10}, 0x10) (async) recvfrom(r0, &(0x7f0000000040)=""/180, 0xb4, 0x0, 0x0, 0x0) (async) 997.799107ms ago: executing program 4 (id=221): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) read$FUSE(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000180)={0x3, 'syz_tun\x00', {0x6522}, 0x3}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800290041010000080028"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) dup(r3) socket$inet(0x2, 0x800, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x20800) socket$netlink(0x10, 0x3, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r4], 0x38}}, 0x10) 959.463285ms ago: executing program 1 (id=222): socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x5) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x129a82, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000001c0)={0x5, 0xa, 0x0, 0x0, 0xfc3c, 0x10, 0x0}) sendfile(r2, r2, 0x0, 0x8) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)={0x38, 0x4, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4014) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x13c, 0x3, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0xaf1e}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x81}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x400}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_USERDATA={0xaf, 0xc, "034b8605855c3f15c47b0267eb79357753575ba5741c36dee5fd96b13e45e71b51c7a0741a2c6558878b2b4f3a6f2643a98fbfcde920b4040433227664508d0e160b91fb82eef917348259a7c6bb6bcd5a84858cec9381ad3dc4e5dc6bcd1f29611d3ea65fc0f04d4aed3354dbe944addf67bca93d5d137a76ac42f4d7d0323d42d35626d5bab47842d29106f383e948ae28e53b58f66e960845e2f4adc48a2f57bcb6fdf4b5a1248de104"}, @NFTA_CHAIN_USERDATA={0xa, 0xc, "b693a870b502"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8}, @NFTA_NG_OFFSET={0x8}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x1f0}}, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40103d0b, 0x0) dup(r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x636}}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000200)={0xffffff81, [[0xb, 0x0, 0x10001, 0x1, 0x9, 0x2, 0x6, 0xfff], [0x100, 0xd, 0x3aa, 0x7fffffff, 0x0, 0x7, 0x4, 0x8], [0x6, 0x5, 0x95, 0xfff, 0xe, 0x0, 0x5926, 0x4]], '\x00', [{0x54d11a62, 0x5, 0x1}, {0xc, 0x8, 0x1, 0x1, 0x1}, {0x401, 0x1, 0x1, 0x1}, {0xff, 0xc8ce, 0x1, 0x0, 0x1}, {0xe057, 0x4, 0x1, 0x0, 0x1}, {0xa03, 0x5, 0x1}, {0x8000, 0x200, 0x1, 0x1, 0x1}, {0x81, 0x7a2, 0x0, 0x1}, {0x6, 0x7, 0x0, 0x1, 0x1}, {0x7, 0xacab, 0x0, 0x1, 0x0, 0x1}, {0xffffffc6, 0x3}, {0x3, 0x2566}], '\x00', 0x7}) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x8000000000000001, 0x0, 0xc3ad, 0x0, 0x3}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x26, 0x0, 0x1000000, 0x40, 0x2, 0x11, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x7}, 0x0, 0x0) 719.049885ms ago: executing program 0 (id=223): syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x4]}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x4000000}}}}}}}}, 0x0) socket$inet(0x2, 0x3, 0x2) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x3, 0x40000003, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0x80000001, 0x7, 0x9, 0xffff, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x1f461e2c, 0x2, 0xfffffffa, 0x3, 0x3, 0x3, 0x7fff, 0x4c74, 0xf, 0x8001, 0x4, 0xa, 0x0, 0x80071, 0x5, 0xfffff000, 0x103, 0x0, 0x5, 0x3c, 0x4, 0x1, 0x1000, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffe], [0x10000007, 0xfffd, 0xfff, 0x8000, 0xc, 0xfffffff5, 0x129432e6, 0x3, 0x6, 0x0, 0x2bf, 0x8, 0x9, 0xffff7ffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0x10000ea3, 0xa, 0xe, 0x0, 0x8000, 0xb, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x0, 0xffff, 0x2000002, 0x7f, 0xb, 0xfff, 0x1000, 0x4, 0x143, 0x7, 0xb, 0x9, 0x48c93690, 0x6, 0x3], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x5, 0x8d2, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x2, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0xf, 0x88, 0x0, 0x5, 0x5, 0x3b, 0x3, 0x5, 0x80, 0x3, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x1, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x0, 0x400002, 0x3, 0x4, 0x5, 0xf23, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10003, 0x2006, 0x7fff, 0x8ffff, 0xfffffffb, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x400007, 0x2, 0x5, 0x735, 0x8, 0x3, 0x50fd, 0x10001, 0x3, 0x9, 0x54, 0x9602, 0xa, 0x2, 0x80000007, 0x6, 0x1, 0x10000, 0xfffffffe, 0x8, 0x2b94, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0x4b1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r1 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x2, 0x17b}, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) fanotify_init(0x8, 0x40000) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) write$uinput_user_dev(r4, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, &(0x7f0000000a40)={'syz1\x00', {0xfffd, 0x80}, 0x4d, [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7fffffc, 0x0, 0x0, 0x7fff, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x2], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0xe, 0x0, 0x3, 0x0, 0x1, 0x1ff]}, 0x45c) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 293.538169ms ago: executing program 3 (id=224): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="060000000000000071100a00000000000f000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) 192.190419ms ago: executing program 3 (id=225): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) unshare(0x4000400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@ipv6_getroute={0x4c, 0x1a, 0x0, 0x70bd28, 0x25dfdbfb, {0xa, 0x14, 0x20, 0x0, 0xff, 0x0, 0xfe, 0x7, 0x700}, [@RTA_GATEWAY={0x14, 0x5, @empty}, @RTA_PRIORITY={0x8, 0x6, 0x8004}, @RTA_GATEWAY={0x14, 0x5, @mcast2}]}, 0x4c}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x400, 0x7, 0x7, 0x200, 0xffffffffffffffff, 0xa8, '\x00', r2, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000140)="e403402e6d69aa1cef9ef9a6a8a811114a73730561f86ec24fbd20a031516af10645443ba1ea91a31e618c729fb36241fc852cf7795cc3c0d78ae4de1e5110eafba42f764d048680", 0x0, 0x48) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000840)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x3, [{{0x2, 0x0, @empty}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @empty}}]}, 0x1fffc) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x1a3c, 0xba}) 74.897277ms ago: executing program 4 (id=226): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x2, 0xf, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x78}, 0x1, 0x7}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x51}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x101c40, 0x0) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000080)) 0s ago: executing program 1 (id=227): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) (async) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n 1 [ 89.067177][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.072488][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.074982][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.089319][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.090929][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.097692][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.111380][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.122316][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.130658][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.138529][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.163253][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.171665][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.181595][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.190848][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.198826][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.225481][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.233704][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.234001][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.249849][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.258093][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.288194][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.300334][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.310921][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.318796][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.968544][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 90.007172][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 90.136114][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 90.224374][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 90.303030][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 90.381083][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.389168][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.396708][ T5843] bridge_slave_0: entered allmulticast mode [ 90.404741][ T5843] bridge_slave_0: entered promiscuous mode [ 90.456276][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.463799][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.471116][ T5843] bridge_slave_1: entered allmulticast mode [ 90.478417][ T5843] bridge_slave_1: entered promiscuous mode [ 90.486348][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.494044][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.502124][ T5842] bridge_slave_0: entered allmulticast mode [ 90.509411][ T5842] bridge_slave_0: entered promiscuous mode [ 90.571364][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.578594][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.586206][ T5842] bridge_slave_1: entered allmulticast mode [ 90.593572][ T5842] bridge_slave_1: entered promiscuous mode [ 90.622402][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.629620][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.637196][ T5846] bridge_slave_0: entered allmulticast mode [ 90.644582][ T5846] bridge_slave_0: entered promiscuous mode [ 90.659541][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.666937][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.674681][ T5846] bridge_slave_1: entered allmulticast mode [ 90.683737][ T5846] bridge_slave_1: entered promiscuous mode [ 90.764214][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.776569][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.831131][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.845855][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.869825][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.879794][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.887194][ T5848] bridge_slave_0: entered allmulticast mode [ 90.895388][ T5848] bridge_slave_0: entered promiscuous mode [ 90.902989][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.910665][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.918000][ T5849] bridge_slave_0: entered allmulticast mode [ 90.925552][ T5849] bridge_slave_0: entered promiscuous mode [ 90.935443][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.949949][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.988406][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.996485][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.004213][ T5848] bridge_slave_1: entered allmulticast mode [ 91.012395][ T5848] bridge_slave_1: entered promiscuous mode [ 91.019601][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.027654][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.036156][ T5849] bridge_slave_1: entered allmulticast mode [ 91.044346][ T5849] bridge_slave_1: entered promiscuous mode [ 91.082818][ T5842] team0: Port device team_slave_0 added [ 91.092454][ T5843] team0: Port device team_slave_0 added [ 91.143598][ T5846] team0: Port device team_slave_0 added [ 91.153635][ T5842] team0: Port device team_slave_1 added [ 91.162084][ T5846] team0: Port device team_slave_1 added [ 91.172065][ T5843] team0: Port device team_slave_1 added [ 91.187811][ T51] Bluetooth: hci0: command tx timeout [ 91.187804][ T5840] Bluetooth: hci1: command tx timeout [ 91.206498][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.260507][ T51] Bluetooth: hci2: command tx timeout [ 91.309376][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.335742][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.345564][ T51] Bluetooth: hci3: command tx timeout [ 91.353260][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.360522][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.387752][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.403519][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.410673][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.437074][ T51] Bluetooth: hci4: command tx timeout [ 91.442553][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.444408][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.460498][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.487340][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.530491][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.548638][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.556178][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.582164][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.593829][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.601200][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.627341][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.642837][ T5848] team0: Port device team_slave_0 added [ 91.682334][ T5849] team0: Port device team_slave_0 added [ 91.696983][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.704046][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.730677][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.751896][ T5848] team0: Port device team_slave_1 added [ 91.761371][ T5849] team0: Port device team_slave_1 added [ 91.872935][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.881336][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.910839][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.974299][ T5846] hsr_slave_0: entered promiscuous mode [ 91.982434][ T5846] hsr_slave_1: entered promiscuous mode [ 91.996331][ T5843] hsr_slave_0: entered promiscuous mode [ 92.003010][ T5843] hsr_slave_1: entered promiscuous mode [ 92.009453][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.017713][ T5843] Cannot create hsr debugfs directory [ 92.038060][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.045167][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.071498][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.094394][ T5842] hsr_slave_0: entered promiscuous mode [ 92.101131][ T5842] hsr_slave_1: entered promiscuous mode [ 92.107295][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.115129][ T5842] Cannot create hsr debugfs directory [ 92.121482][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.128461][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.155043][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.167743][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.174978][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.201029][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.355521][ T5848] hsr_slave_0: entered promiscuous mode [ 92.363001][ T5848] hsr_slave_1: entered promiscuous mode [ 92.369208][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.376899][ T5848] Cannot create hsr debugfs directory [ 92.504026][ T5849] hsr_slave_0: entered promiscuous mode [ 92.513377][ T5849] hsr_slave_1: entered promiscuous mode [ 92.519592][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.528032][ T5849] Cannot create hsr debugfs directory [ 93.061568][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.082753][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.094878][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.125825][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.173073][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.208883][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.225261][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.251876][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.261317][ T5840] Bluetooth: hci1: command tx timeout [ 93.266893][ T51] Bluetooth: hci0: command tx timeout [ 93.327891][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.338936][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.346460][ T51] Bluetooth: hci2: command tx timeout [ 93.362680][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.389875][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.420886][ T51] Bluetooth: hci3: command tx timeout [ 93.486673][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.500872][ T51] Bluetooth: hci4: command tx timeout [ 93.515937][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.539228][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.575723][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.663902][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.678117][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.709363][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.737451][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.794452][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.825767][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.893386][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.904906][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.946057][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.953455][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.967397][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.974576][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.993720][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.016379][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.023664][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.033224][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.040475][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.076059][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.126570][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.133770][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.144917][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.152097][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.268294][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.310965][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.346421][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.379353][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.386613][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.415853][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.435505][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.453720][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.460905][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.492709][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.499864][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.529509][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.542346][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.549522][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.582914][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.678217][ T5846] veth0_vlan: entered promiscuous mode [ 94.721871][ T5842] veth0_vlan: entered promiscuous mode [ 94.744420][ T5846] veth1_vlan: entered promiscuous mode [ 94.778550][ T5842] veth1_vlan: entered promiscuous mode [ 94.849415][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.874437][ T5849] veth0_vlan: entered promiscuous mode [ 94.897266][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.908912][ T5842] veth0_macvtap: entered promiscuous mode [ 94.921339][ T5846] veth0_macvtap: entered promiscuous mode [ 94.935788][ T5842] veth1_macvtap: entered promiscuous mode [ 94.949479][ T5846] veth1_macvtap: entered promiscuous mode [ 94.964888][ T5849] veth1_vlan: entered promiscuous mode [ 95.023713][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.036239][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.069609][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.086975][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.097400][ T5849] veth0_macvtap: entered promiscuous mode [ 95.113365][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.122345][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.133363][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.142184][ T5842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.157668][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.166878][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.176922][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.186885][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.219645][ T5849] veth1_macvtap: entered promiscuous mode [ 95.287964][ T5848] veth0_vlan: entered promiscuous mode [ 95.308968][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.340831][ T5840] Bluetooth: hci1: command tx timeout [ 95.346373][ T51] Bluetooth: hci0: command tx timeout [ 95.374218][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.389821][ T5843] veth0_vlan: entered promiscuous mode [ 95.421446][ T5848] veth1_vlan: entered promiscuous mode [ 95.421955][ T51] Bluetooth: hci2: command tx timeout [ 95.436968][ T5849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.449669][ T5849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.459463][ T5849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.468389][ T5849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.500783][ T51] Bluetooth: hci3: command tx timeout [ 95.545486][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.554620][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.574180][ T5843] veth1_vlan: entered promiscuous mode [ 95.580594][ T51] Bluetooth: hci4: command tx timeout [ 95.588893][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.603741][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.687609][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.701313][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.756033][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.766731][ T5843] veth0_macvtap: entered promiscuous mode [ 95.780671][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.795408][ T5843] veth1_macvtap: entered promiscuous mode [ 95.847959][ T5848] veth0_macvtap: entered promiscuous mode [ 95.869648][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.896810][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.910806][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.940003][ T5848] veth1_macvtap: entered promiscuous mode [ 95.966378][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.020367][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.040634][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.048521][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.106894][ T5843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.121781][ T5843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.131495][ T5843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.141871][ T5843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.157227][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.206032][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.229386][ T5927] syz_tun: entered allmulticast mode [ 96.298953][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.340471][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.381355][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.403769][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.729668][ T5940] fuse: Unknown parameter 'f' [ 96.747382][ T5941] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[5941] [ 96.759190][ T5941] fuse: Bad value for 'user_id' [ 96.764177][ T5941] fuse: Bad value for 'user_id' [ 96.792713][ T5943] capability: warning: `syz.1.10' uses 32-bit capabilities (legacy support in use) [ 96.834828][ T5943] Zero length message leads to an empty skb [ 96.873802][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.897913][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.975543][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.986918][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.000883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.010539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.109311][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.127676][ T5154] cfg80211: failed to load regulatory.db [ 97.129716][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.238255][ T5950] loop2: detected capacity change from 0 to 7 [ 97.263191][ T5950] Dev loop2: unable to read RDB block 7 [ 97.275977][ T5950] loop2: unable to read partition table [ 97.292151][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.297249][ T5950] loop2: partition table beyond EOD, truncated [ 97.307233][ T5950] loop_reread_partitions: partition scan of loop2 (þ被xü—Ÿ®à– ) failed (rc=-5) [ 97.340140][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.411735][ T30] audit: type=1326 audit(1749890273.257:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.2.11" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb3dbf8e929 code=0x0 [ 97.446795][ T51] Bluetooth: hci0: command tx timeout [ 97.453186][ T51] Bluetooth: hci1: command tx timeout [ 97.465196][ T5950] syz.1.12 (5950): drop_caches: 0 [ 97.473357][ T5953] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 97.479692][ T5953] syzkaller1: Refused to change device type [ 97.501038][ T51] Bluetooth: hci2: command tx timeout [ 97.580704][ T51] Bluetooth: hci3: command tx timeout [ 97.660291][ T51] Bluetooth: hci4: command tx timeout [ 97.711219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.150404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.630821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.639650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.650861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 98.661115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.983483][ T5976] mmap: syz.3.13 (5976) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 99.360793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 99.770365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 99.801723][ T5900] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.879442][ T5991] random: crng reseeded on system resumption [ 99.943773][ T5996] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.984274][ T5900] usb 5-1: Using ep0 maxpacket: 32 [ 100.002500][ T5900] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 100.059688][ T5900] usb 5-1: config 0 has no interface number 0 [ 100.070056][ T5900] usb 5-1: config 0 interface 12 has no altsetting 0 [ 100.162767][ T5900] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 100.244637][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.449798][ T5900] usb 5-1: Product: syz [ 100.484212][ T5900] usb 5-1: Manufacturer: syz [ 100.551922][ T5900] usb 5-1: SerialNumber: syz [ 100.646039][ T5900] usb 5-1: config 0 descriptor?? [ 100.650263][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.056271][ T10] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 101.176416][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.278588][ T10] usb 3-1: Product: syz [ 101.310280][ T10] usb 3-1: Manufacturer: syz [ 101.327381][ T10] usb 3-1: SerialNumber: syz [ 101.416514][ T5900] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: e0 failed: -71 [ 101.439061][ T10] usb 3-1: config 0 descriptor?? [ 101.480396][ T5900] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 101.487781][ T5900] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 101.559424][ T5900] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 101.596331][ T10] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 101.665517][ T5900] usb 5-1: USB disconnect, device number 2 [ 101.764329][ T6063] netlink: 'syz.4.28': attribute type 39 has an invalid length. [ 101.830209][ T5836] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.876973][ T6069] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.031422][ T5836] usb 1-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 102.048178][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 102.080138][ T5836] usb 1-1: Product: syz [ 102.084382][ T5836] usb 1-1: SerialNumber: syz [ 102.124070][ T5836] usb 1-1: config 0 descriptor?? [ 102.220641][ T5154] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 102.344295][ T6057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.412840][ T5154] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.434158][ T6057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.500587][ T5154] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.523377][ T5836] ldusb 1-1:0.0: Interrupt in endpoint not found [ 102.558349][ T5836] usb 1-1: USB disconnect, device number 2 [ 102.573211][ T5154] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.597087][ T10] gspca_sunplus: reg_w_riv err -71 [ 102.611199][ T10] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 102.775833][ T5154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.797797][ T10] usb 3-1: USB disconnect, device number 2 [ 102.880858][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.070431][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 103.098209][ T9] usb 5-1: config 0 has no interfaces? [ 103.106851][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 103.127571][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.186634][ T9] usb 5-1: config 0 descriptor?? [ 103.217911][ T5154] usb 4-1: GET_CAPABILITIES returned 0 [ 103.238049][ T6083] netlink: 108 bytes leftover after parsing attributes in process `syz.0.33'. [ 103.282431][ T5154] usbtmc 4-1:16.0: can't read capabilities [ 103.479090][ T5154] usb 4-1: USB disconnect, device number 2 [ 103.595357][ T5836] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.611859][ T6094] syz.0.36 uses obsolete (PF_INET,SOCK_PACKET) [ 103.656099][ T5836] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 103.838679][ T6096] netlink: 'syz.3.37': attribute type 10 has an invalid length. [ 104.055892][ T6096] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 104.200404][ T5836] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.405598][ T5836] usb 1-1: config 180 has an invalid descriptor of length 0, skipping remainder of the config [ 104.439591][ T5836] usb 1-1: config 180 has 0 interfaces, different from the descriptor's value: 14 [ 104.457668][ T5836] usb 1-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 104.476150][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.637347][ T5154] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.726526][ T6102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.737934][ T6102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.762785][ T6102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.773688][ T6102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.790455][ T5154] usb 2-1: Using ep0 maxpacket: 8 [ 104.803434][ T5154] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 104.816575][ T5154] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.831077][ T5154] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.840561][ T5154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.888749][ T5154] usbtmc 2-1:16.0: bulk endpoints not found [ 105.143419][ T6106] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.240187][ T6115] netlink: 'syz.3.40': attribute type 10 has an invalid length. [ 106.442117][ T9] usb 5-1: USB disconnect, device number 3 [ 106.520357][ T5154] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.627286][ T10] usb 2-1: USB disconnect, device number 2 [ 106.716266][ T30] audit: type=1800 audit(1749890282.567:3): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.44" name="dmabuf" dev="dmabuf" ino=1 res=0 errno=0 [ 106.735037][ T5154] usb 3-1: Using ep0 maxpacket: 16 [ 106.757797][ T5154] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 106.790289][ T5154] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 106.841661][ T5154] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 106.887873][ T5154] usb 3-1: config 8 has no interface number 0 [ 106.909490][ T5154] usb 3-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 106.946461][ T5154] usb 3-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 106.987755][ T5154] usb 3-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.022809][ T5154] usb 3-1: config 8 interface 223 has no altsetting 0 [ 107.048525][ T5154] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 107.248872][ T5154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.271004][ T5154] usb 3-1: Product: syz [ 107.279487][ T5154] usb 3-1: Manufacturer: syz [ 107.288458][ T5154] usb 3-1: SerialNumber: syz [ 107.492397][ T5836] usb 1-1: string descriptor 0 read error: -71 [ 107.500494][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 107.508067][ T5836] usb 1-1: USB disconnect, device number 3 [ 107.522002][ T6121] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 107.797631][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 107.815650][ T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 107.831540][ T6121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.854758][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 107.930725][ T10] usb 5-1: config 0 has no interface number 0 [ 107.961036][ T6121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.970315][ T5836] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.974004][ T10] usb 5-1: config 0 interface 184 has no altsetting 0 [ 108.085848][ T5154] usb 3-1: USB disconnect, device number 3 [ 108.130356][ T5836] usb 1-1: Using ep0 maxpacket: 8 [ 108.139150][ T5836] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.173092][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 108.194748][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 108.223358][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 108.232411][ T5836] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 108.232445][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.232466][ T5836] usb 1-1: Product: syz [ 108.232481][ T5836] usb 1-1: Manufacturer: syz [ 108.232497][ T5836] usb 1-1: SerialNumber: syz [ 108.236151][ T5836] usb 1-1: config 0 descriptor?? [ 108.281928][ T6134] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 108.319800][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.338435][ T10] usb 5-1: Product: syz [ 108.396906][ T10] usb 5-1: Manufacturer: syz [ 108.415134][ T10] usb 5-1: SerialNumber: syz [ 108.436186][ T10] usb 5-1: config 0 descriptor?? [ 108.466223][ T10] smsc75xx v1.0.0 [ 108.469911][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 108.482409][ T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 108.523058][ T6134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.535312][ T6134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.546226][ T10] usb 1-1: USB disconnect, device number 4 [ 108.598472][ T6123] netlink: 56 bytes leftover after parsing attributes in process `syz.3.43'. [ 108.639961][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.43'. [ 108.913331][ T6139] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.43'. [ 109.180450][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.342658][ T10] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 109.351249][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.364832][ T10] usb 3-1: config 0 has no interface number 0 [ 109.408790][ T10] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 109.503451][ T10] usb 3-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 109.534425][ T10] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 109.552784][ T6145] loop2: detected capacity change from 0 to 7 [ 109.565911][ T6145] Dev loop2: unable to read RDB block 7 [ 109.571767][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.595252][ T6145] loop2: unable to read partition table [ 109.627486][ T10] usb 3-1: Product: syz [ 109.637650][ T10] usb 3-1: Manufacturer: syz [ 109.642712][ T6145] loop2: partition table beyond EOD, truncated [ 109.655762][ T10] usb 3-1: SerialNumber: syz [ 109.665205][ T6145] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 109.754794][ T10] usb 3-1: config 0 descriptor?? [ 109.770700][ T5836] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.946501][ T5836] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 109.956580][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.977849][ T5836] usb 4-1: Product: syz [ 109.984083][ T5836] usb 4-1: Manufacturer: syz [ 109.990053][ T5836] usb 4-1: SerialNumber: syz [ 110.002856][ T6141] trusted_key: syz.2.48 sent an empty control message without MSG_MORE. [ 110.003097][ T5836] usb 4-1: config 0 descriptor?? [ 110.121428][ T10] usb 3-1: USB disconnect, device number 4 [ 110.318812][ T5921] usb 5-1: USB disconnect, device number 4 [ 110.320271][ T5154] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 110.337141][ T6149] netlink: 16 bytes leftover after parsing attributes in process `syz.3.50'. [ 110.346283][ T6149] netlink: 16 bytes leftover after parsing attributes in process `syz.3.50'. [ 110.401863][ T5836] hso 4-1:0.0: Failed to find INT IN ep [ 110.411050][ T5836] usb-storage 4-1:0.0: USB Mass Storage device detected [ 110.495556][ T6153] tipc: Failed to remove unknown binding: 66,3,3/0:2758481429/2758481430 [ 110.558825][ T5154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 110.586331][ T5154] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 110.615421][ T5154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 110.643286][ T5154] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 110.682785][ T5154] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 110.693439][ T5154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.707338][ T5154] usb 1-1: Product: syz [ 110.713156][ T5154] usb 1-1: Manufacturer: syz [ 110.718271][ T5154] usb 1-1: SerialNumber: syz [ 110.742166][ T5154] usb 1-1: config 0 descriptor?? [ 110.753950][ T5154] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 111.000649][ T5154] ums-isd200 1-1:0.0: probe with driver ums-isd200 failed with error -22 [ 111.030348][ T5836] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 111.171118][ T5154] usb 1-1: USB disconnect, device number 5 [ 111.194863][ T5836] usb 5-1: config 0 has an invalid interface number: 178 but max is 0 [ 111.194895][ T5836] usb 5-1: config 0 has no interface number 0 [ 111.194939][ T5836] usb 5-1: config 0 interface 178 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 111.194984][ T5836] usb 5-1: New USB device found, idVendor=05da, idProduct=00a3, bcdDevice=9d.36 [ 111.195010][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.223215][ T5836] usb 5-1: config 0 descriptor?? [ 111.224103][ T6162] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 111.429217][ T5836] usb 5-1: string descriptor 0 read error: -71 [ 111.437370][ T5836] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 6 is not bulk. [ 111.437406][ T5836] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 11 is not bulk. [ 111.437430][ T5836] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 111.484087][ T5836] usb 5-1: USB disconnect, device number 5 [ 111.580233][ T5921] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.742992][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 111.758924][ T5921] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 111.775026][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 111.789711][ T5921] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 111.799371][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.809435][ T5921] usb 2-1: Product: syz [ 111.813982][ T5921] usb 2-1: Manufacturer: syz [ 111.819535][ T5921] usb 2-1: SerialNumber: syz [ 111.866758][ T5921] usb 2-1: config 0 descriptor?? [ 111.882356][ T5921] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 111.916326][ T5921] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 111.972989][ T6180] loop2: detected capacity change from 0 to 7 [ 111.984581][ T6011] Dev loop2: unable to read RDB block 7 [ 111.991910][ T6011] loop2: unable to read partition table [ 111.998025][ T6011] loop2: partition table beyond EOD, truncated [ 112.015603][ T6180] Dev loop2: unable to read RDB block 7 [ 112.021615][ T6180] loop2: unable to read partition table [ 112.046404][ T6180] loop2: partition table beyond EOD, truncated [ 112.054044][ T6180] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 112.487541][ T5921] em28xx 2-1:0.0: chip ID is em28178 [ 112.540777][ T5154] usb 4-1: USB disconnect, device number 3 [ 112.699294][ T6199] FAULT_INJECTION: forcing a failure. [ 112.699294][ T6199] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 112.714183][ T5836] usb 2-1: USB disconnect, device number 3 [ 112.733954][ T5836] em28xx 2-1:0.0: Disconnecting em28xx [ 112.746169][ T6199] CPU: 0 UID: 0 PID: 6199 Comm: syz.3.67 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 112.746196][ T6199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.746214][ T6199] Call Trace: [ 112.746226][ T6199] [ 112.746236][ T6199] dump_stack_lvl+0x189/0x250 [ 112.746283][ T6199] ? __pfx____ratelimit+0x10/0x10 [ 112.746317][ T6199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.746350][ T6199] ? __pfx__printk+0x10/0x10 [ 112.746374][ T6199] ? __might_fault+0xb0/0x130 [ 112.746407][ T6199] should_fail_ex+0x414/0x560 [ 112.746439][ T6199] _copy_from_user+0x2d/0xb0 [ 112.746463][ T6199] kstrtouint_from_user+0xc4/0x170 [ 112.746498][ T6199] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 112.746548][ T6199] proc_fail_nth_write+0x88/0x240 [ 112.746575][ T6199] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 112.746608][ T6199] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 112.746636][ T6199] vfs_write+0x27b/0xa90 [ 112.746681][ T6199] ? __pfx_vfs_write+0x10/0x10 [ 112.746717][ T6199] ? __fget_files+0x2a/0x420 [ 112.746746][ T6199] ? __fget_files+0x3a0/0x420 [ 112.746768][ T6199] ? __fget_files+0x2a/0x420 [ 112.746800][ T6199] ksys_write+0x145/0x250 [ 112.746817][ T6199] ? __fget_files+0x2a/0x420 [ 112.746842][ T6199] ? __pfx_ksys_write+0x10/0x10 [ 112.746868][ T6199] ? do_syscall_64+0xbe/0x3b0 [ 112.746893][ T6199] do_syscall_64+0xfa/0x3b0 [ 112.746911][ T6199] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.746943][ T6199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.746964][ T6199] ? clear_bhb_loop+0x60/0xb0 [ 112.746989][ T6199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.747009][ T6199] RIP: 0033:0x7fc60e38d3df [ 112.747035][ T6199] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 112.747059][ T6199] RSP: 002b:00007fc60f285030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 112.747081][ T6199] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc60e38d3df [ 112.747096][ T6199] RDX: 0000000000000001 RSI: 00007fc60f2850a0 RDI: 0000000000000004 [ 112.747108][ T6199] RBP: 00007fc60f285090 R08: 0000000000000000 R09: 0000000000000000 [ 112.747121][ T6199] R10: 0000200000000080 R11: 0000000000000293 R12: 0000000000000001 [ 112.747134][ T6199] R13: 0000000000000000 R14: 00007fc60e5b5fa0 R15: 00007fc60e6dfa28 [ 112.747165][ T6199] [ 113.029337][ T5836] em28xx 2-1:0.0: Freeing device [ 113.364095][ T6212] lo: entered allmulticast mode [ 113.460937][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.71'. [ 113.461055][ T6213] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.461127][ T6213] IPv6: NLM_F_CREATE should be set when creating new route [ 114.195877][ T6230] loop2: detected capacity change from 0 to 7 [ 114.204243][ T6230] Dev loop2: unable to read RDB block 7 [ 114.212361][ T6230] loop2: unable to read partition table [ 114.237489][ T6230] loop2: partition table beyond EOD, truncated [ 114.265170][ T6230] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 114.277756][ T6233] x_tables: duplicate underflow at hook 1 [ 114.457824][ T6237] FAULT_INJECTION: forcing a failure. [ 114.457824][ T6237] name failslab, interval 1, probability 0, space 0, times 0 [ 114.569097][ T6237] CPU: 0 UID: 0 PID: 6237 Comm: syz.2.78 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 114.569130][ T6237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.569143][ T6237] Call Trace: [ 114.569151][ T6237] [ 114.569161][ T6237] dump_stack_lvl+0x189/0x250 [ 114.569202][ T6237] ? __pfx____ratelimit+0x10/0x10 [ 114.569236][ T6237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.569270][ T6237] ? __pfx__printk+0x10/0x10 [ 114.569301][ T6237] ? rcu_is_watching+0x15/0xb0 [ 114.569346][ T6237] should_fail_ex+0x414/0x560 [ 114.569380][ T6237] should_failslab+0xa8/0x100 [ 114.569405][ T6237] kmem_cache_alloc_noprof+0x73/0x3c0 [ 114.569438][ T6237] ? _sctp_make_chunk+0x14e/0x430 [ 114.569468][ T6237] _sctp_make_chunk+0x14e/0x430 [ 114.569499][ T6237] sctp_make_init+0x58b/0xd30 [ 114.569535][ T6237] ? __pfx_sctp_make_init+0x10/0x10 [ 114.569558][ T6237] ? arch_stack_walk+0xfc/0x150 [ 114.569593][ T6237] ? stack_trace_save+0x9c/0xe0 [ 114.569620][ T6237] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 114.569656][ T6237] sctp_do_sm+0x1e4/0x5a20 [ 114.569674][ T6237] ? __pfx_sctp_pname+0x10/0x10 [ 114.569708][ T6237] ? kasan_save_track+0x3e/0x80 [ 114.569741][ T6237] ? sctp_stream_init_ext+0x57/0x180 [ 114.569773][ T6237] ? sctp_sendmsg_to_asoc+0x12fd/0x1810 [ 114.569798][ T6237] ? sctp_sendmsg+0x1941/0x2810 [ 114.569822][ T6237] ? __sock_sendmsg+0x19c/0x270 [ 114.569840][ T6237] ? __sys_sendto+0x3bd/0x520 [ 114.569880][ T6237] ? do_syscall_64+0xfa/0x3b0 [ 114.569899][ T6237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.569931][ T6237] ? __pfx_sctp_do_sm+0x10/0x10 [ 114.570008][ T6237] ? __sk_mem_raise_allocated+0xaa9/0x1240 [ 114.570051][ T6237] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 114.570088][ T6237] sctp_sendmsg_to_asoc+0x102d/0x1810 [ 114.570113][ T6237] ? __asan_memcpy+0x40/0x70 [ 114.570151][ T6237] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 114.570196][ T6237] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 114.570225][ T6237] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 114.570255][ T6237] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 114.570283][ T6237] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 114.570310][ T6237] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 114.570339][ T6237] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 114.570370][ T6237] ? security_sctp_bind_connect+0x7e/0x2e0 [ 114.570398][ T6237] sctp_sendmsg+0x1941/0x2810 [ 114.570440][ T6237] ? __pfx_sctp_sendmsg+0x10/0x10 [ 114.570471][ T6237] ? aa_sk_perm+0x81e/0x950 [ 114.570503][ T6237] ? __pfx_aa_sk_perm+0x10/0x10 [ 114.570532][ T6237] ? sock_rps_record_flow+0x19/0x410 [ 114.570557][ T6237] ? inet_sendmsg+0x2f4/0x370 [ 114.570577][ T6237] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 114.570617][ T6237] __sock_sendmsg+0x19c/0x270 [ 114.570640][ T6237] __sys_sendto+0x3bd/0x520 [ 114.570668][ T6237] ? __pfx___sys_sendto+0x10/0x10 [ 114.570690][ T6237] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 114.570726][ T6237] ? __fget_files+0x3a0/0x420 [ 114.570762][ T6237] ? ksys_write+0x22a/0x250 [ 114.570783][ T6237] ? __pfx_ksys_write+0x10/0x10 [ 114.570799][ T6237] ? rcu_is_watching+0x15/0xb0 [ 114.570837][ T6237] __x64_sys_sendto+0xde/0x100 [ 114.570865][ T6237] do_syscall_64+0xfa/0x3b0 [ 114.570883][ T6237] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.570921][ T6237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.570941][ T6237] ? clear_bhb_loop+0x60/0xb0 [ 114.570967][ T6237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.570987][ T6237] RIP: 0033:0x7fb3dbf8e929 [ 114.571007][ T6237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.571024][ T6237] RSP: 002b:00007fb3dce83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 114.571046][ T6237] RAX: ffffffffffffffda RBX: 00007fb3dc1b5fa0 RCX: 00007fb3dbf8e929 [ 114.571062][ T6237] RDX: 000000000000cf88 RSI: 0000200000847fff RDI: 0000000000000004 [ 114.571074][ T6237] RBP: 00007fb3dce83090 R08: 000020000005ffe4 R09: 000000000000001c [ 114.571086][ T6237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.571095][ T6237] R13: 0000000000000000 R14: 00007fb3dc1b5fa0 R15: 00007fb3dc2dfa28 [ 114.571120][ T6237] [ 115.073187][ T6247] syz_tun: entered allmulticast mode [ 115.276996][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.77'. [ 115.355612][ T6251] usb usb1: usbfs: process 6251 (syz.0.82) did not claim interface 0 before use [ 115.368817][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.84'. [ 115.382081][ T6252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 115.765045][ T6264] loop8: detected capacity change from 0 to 1 [ 115.774277][ T5949] Dev loop8: unable to read RDB block 1 [ 115.774327][ T5949] loop8: unable to read partition table [ 115.774581][ T5949] loop8: partition table beyond EOD, truncated [ 115.782170][ T6264] Dev loop8: unable to read RDB block 1 [ 115.782219][ T6264] loop8: unable to read partition table [ 115.782431][ T6264] loop8: partition table beyond EOD, truncated [ 115.782466][ T6264] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 115.939333][ T6270] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 115.939395][ T6270] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 115.940492][ T6270] vhci_hcd vhci_hcd.0: Device attached [ 116.137114][ T6262] netlink: 44 bytes leftover after parsing attributes in process `syz.1.88'. [ 116.180651][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 116.190338][ T5921] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 116.332206][ T9] usb 3-1: config 0 has an invalid interface number: 154 but max is 2 [ 116.332239][ T9] usb 3-1: config 0 has an invalid interface number: 26 but max is 2 [ 116.332262][ T9] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 116.332284][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.332305][ T9] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 116.332328][ T9] usb 3-1: config 0 has no interface number 0 [ 116.332347][ T9] usb 3-1: config 0 has no interface number 1 [ 116.332400][ T9] usb 3-1: config 0 interface 154 altsetting 12 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 116.443648][ T9] usb 3-1: config 0 interface 154 altsetting 12 has an endpoint descriptor with address 0xCC, changing to 0x8C [ 116.443690][ T9] usb 3-1: config 0 interface 26 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 116.443721][ T9] usb 3-1: config 0 interface 154 has no altsetting 0 [ 116.443742][ T9] usb 3-1: config 0 interface 26 has no altsetting 0 [ 116.466100][ T9] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a3d, bcdDevice=a1.3c [ 116.466137][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.466161][ T9] usb 3-1: Product: syz [ 116.466178][ T9] usb 3-1: Manufacturer: syz [ 116.466195][ T9] usb 3-1: SerialNumber: syz [ 116.473696][ T9] usb 3-1: config 0 descriptor?? [ 116.781526][ T6281] syz_tun: entered allmulticast mode [ 116.888884][ T6283] FAULT_INJECTION: forcing a failure. [ 116.888884][ T6283] name failslab, interval 1, probability 0, space 0, times 0 [ 116.921172][ T6283] CPU: 1 UID: 0 PID: 6283 Comm: syz.3.93 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 116.921203][ T6283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.921215][ T6283] Call Trace: [ 116.921223][ T6283] [ 116.921232][ T6283] dump_stack_lvl+0x189/0x250 [ 116.921263][ T6283] ? __pfx____ratelimit+0x10/0x10 [ 116.921290][ T6283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.921333][ T6283] ? __pfx__printk+0x10/0x10 [ 116.921363][ T6283] ? rcu_is_watching+0x15/0xb0 [ 116.921397][ T6283] should_fail_ex+0x414/0x560 [ 116.921422][ T6283] should_failslab+0xa8/0x100 [ 116.921440][ T6283] kmem_cache_alloc_noprof+0x73/0x3c0 [ 116.921472][ T6283] ? _sctp_make_chunk+0x14e/0x430 [ 116.921502][ T6283] _sctp_make_chunk+0x14e/0x430 [ 116.921530][ T6283] sctp_make_init+0x58b/0xd30 [ 116.921558][ T6283] ? __pfx_sctp_make_init+0x10/0x10 [ 116.921574][ T6283] ? arch_stack_walk+0xfc/0x150 [ 116.921598][ T6283] ? stack_trace_save+0x9c/0xe0 [ 116.921624][ T6283] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 116.921659][ T6283] sctp_do_sm+0x1e4/0x5a20 [ 116.921676][ T6283] ? __pfx_sctp_pname+0x10/0x10 [ 116.921710][ T6283] ? kasan_save_track+0x3e/0x80 [ 116.921733][ T6283] ? sctp_stream_init_ext+0x57/0x180 [ 116.921759][ T6283] ? sctp_sendmsg_to_asoc+0x12fd/0x1810 [ 116.921785][ T6283] ? sctp_sendmsg+0x1941/0x2810 [ 116.921808][ T6283] ? __sock_sendmsg+0x19c/0x270 [ 116.921825][ T6283] ? __sys_sendto+0x3bd/0x520 [ 116.921845][ T6283] ? do_syscall_64+0xfa/0x3b0 [ 116.921859][ T6283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.921876][ T6283] ? __pfx_sctp_do_sm+0x10/0x10 [ 116.921944][ T6283] ? __sk_mem_raise_allocated+0xaa9/0x1240 [ 116.921986][ T6283] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 116.922012][ T6283] sctp_sendmsg_to_asoc+0x102d/0x1810 [ 116.922031][ T6283] ? __asan_memcpy+0x40/0x70 [ 116.922062][ T6283] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 116.922107][ T6283] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 116.922133][ T6283] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 116.922156][ T6283] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 116.922178][ T6283] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 116.922210][ T6283] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 116.922240][ T6283] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 116.922270][ T6283] ? security_sctp_bind_connect+0x7e/0x2e0 [ 116.922296][ T6283] sctp_sendmsg+0x1941/0x2810 [ 116.922331][ T6283] ? __pfx_sctp_sendmsg+0x10/0x10 [ 116.922361][ T6283] ? aa_sk_perm+0x81e/0x950 [ 116.922392][ T6283] ? __pfx_aa_sk_perm+0x10/0x10 [ 116.922419][ T6283] ? sock_rps_record_flow+0x19/0x410 [ 116.922440][ T6283] ? inet_sendmsg+0x2f4/0x370 [ 116.922454][ T6283] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 116.922476][ T6283] __sock_sendmsg+0x19c/0x270 [ 116.922495][ T6283] __sys_sendto+0x3bd/0x520 [ 116.922524][ T6283] ? __pfx___sys_sendto+0x10/0x10 [ 116.922545][ T6283] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 116.922579][ T6283] ? __fget_files+0x3a0/0x420 [ 116.922605][ T6283] ? ksys_write+0x22a/0x250 [ 116.922620][ T6283] ? __pfx_ksys_write+0x10/0x10 [ 116.922632][ T6283] ? rcu_is_watching+0x15/0xb0 [ 116.922670][ T6283] __x64_sys_sendto+0xde/0x100 [ 116.922698][ T6283] do_syscall_64+0xfa/0x3b0 [ 116.922721][ T6283] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.922747][ T6283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.922761][ T6283] ? clear_bhb_loop+0x60/0xb0 [ 116.922780][ T6283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.922798][ T6283] RIP: 0033:0x7fc60e38e929 [ 116.922817][ T6283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.922835][ T6283] RSP: 002b:00007fc60f285038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 116.922856][ T6283] RAX: ffffffffffffffda RBX: 00007fc60e5b5fa0 RCX: 00007fc60e38e929 [ 116.922871][ T6283] RDX: 000000000000cf88 RSI: 0000200000847fff RDI: 0000000000000004 [ 116.922883][ T6283] RBP: 00007fc60f285090 R08: 000020000005ffe4 R09: 000000000000001c [ 116.922893][ T6283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.922901][ T6283] R13: 0000000000000000 R14: 00007fc60e5b5fa0 R15: 00007fc60e6dfa28 [ 116.922924][ T6283] [ 117.506704][ T6287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.95'. [ 117.515994][ T6287] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.525855][ T30] audit: type=1326 audit(1749890293.377:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7977b8e929 code=0x7ffc0000 [ 117.632724][ T30] audit: type=1326 audit(1749890293.377:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7977b8e929 code=0x7ffc0000 [ 117.655133][ T30] audit: type=1326 audit(1749890293.377:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7977b8e929 code=0x7ffc0000 [ 117.678753][ T30] audit: type=1326 audit(1749890293.377:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7977b8e929 code=0x7ffc0000 [ 117.702476][ T30] audit: type=1326 audit(1749890293.377:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7977b8e929 code=0x7ffc0000 [ 117.729351][ T30] audit: type=1326 audit(1749890293.437:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7977b8e929 code=0x7ffc0000 [ 117.754855][ T30] audit: type=1326 audit(1749890293.437:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7977b8e929 code=0x7ffc0000 [ 117.780505][ T30] audit: type=1326 audit(1749890293.437:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7977b8e929 code=0x7ffc0000 [ 117.805278][ T30] audit: type=1326 audit(1749890293.447:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7977b8e929 code=0x7ffc0000 [ 118.736569][ T6301] FAULT_INJECTION: forcing a failure. [ 118.736569][ T6301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.755253][ T6271] vhci_hcd: connection reset by peer [ 118.772529][ T78] vhci_hcd: stop threads [ 118.777076][ T78] vhci_hcd: release socket [ 118.835258][ T6301] CPU: 1 UID: 0 PID: 6301 Comm: syz.1.97 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 118.835290][ T6301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.835303][ T6301] Call Trace: [ 118.835311][ T6301] [ 118.835320][ T6301] dump_stack_lvl+0x189/0x250 [ 118.835360][ T6301] ? __pfx____ratelimit+0x10/0x10 [ 118.835393][ T6301] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.835426][ T6301] ? __pfx__printk+0x10/0x10 [ 118.835457][ T6301] ? __might_fault+0xb0/0x130 [ 118.835490][ T6301] should_fail_ex+0x414/0x560 [ 118.835531][ T6301] _copy_from_user+0x2d/0xb0 [ 118.835555][ T6301] ___sys_sendmsg+0x158/0x2a0 [ 118.835587][ T6301] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.835653][ T6301] ? __fget_files+0x2a/0x420 [ 118.835677][ T6301] ? __fget_files+0x3a0/0x420 [ 118.835712][ T6301] __sys_sendmmsg+0x227/0x430 [ 118.835752][ T6301] ? __pfx___sys_sendmmsg+0x10/0x10 [ 118.835778][ T6301] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 118.835836][ T6301] ? ksys_write+0x22a/0x250 [ 118.835859][ T6301] ? __pfx_ksys_write+0x10/0x10 [ 118.835882][ T6301] ? rcu_is_watching+0x15/0xb0 [ 118.835923][ T6301] __x64_sys_sendmmsg+0xa0/0xc0 [ 118.835964][ T6301] do_syscall_64+0xfa/0x3b0 [ 118.835986][ T6301] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.836018][ T6301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.836042][ T6301] ? clear_bhb_loop+0x60/0xb0 [ 118.836068][ T6301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.836086][ T6301] RIP: 0033:0x7f7977b8e929 [ 118.836102][ T6301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.836116][ T6301] RSP: 002b:00007f7978a8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 118.836135][ T6301] RAX: ffffffffffffffda RBX: 00007f7977db5fa0 RCX: 00007f7977b8e929 [ 118.836147][ T6301] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000003 [ 118.836157][ T6301] RBP: 00007f7978a8a090 R08: 0000000000000000 R09: 0000000000000000 [ 118.836168][ T6301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.836177][ T6301] R13: 0000000000000000 R14: 00007f7977db5fa0 R15: 00007f7977edfa28 [ 118.836202][ T6301] [ 118.855688][ T9] usb 3-1: USB disconnect, device number 5 [ 119.072805][ T78] vhci_hcd: disconnect device [ 119.231627][ T6307] netlink: 'syz.2.99': attribute type 21 has an invalid length. [ 119.268894][ T6307] netlink: 132 bytes leftover after parsing attributes in process `syz.2.99'. [ 119.296240][ T6307] team0: entered promiscuous mode [ 119.301815][ T6307] team_slave_0: entered promiscuous mode [ 119.313961][ T6307] team_slave_1: entered promiscuous mode [ 119.332983][ T6307] batadv_slave_0: entered promiscuous mode [ 119.348174][ T6303] batadv_slave_0: left promiscuous mode [ 119.356237][ T6303] team0: left promiscuous mode [ 119.367006][ T6303] team_slave_0: left promiscuous mode [ 119.373522][ T6303] team_slave_1: left promiscuous mode [ 119.560250][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 119.743338][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 119.778239][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 119.793091][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 119.806110][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.820335][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.829385][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.891264][ T10] usb 4-1: config 0 descriptor?? [ 120.454015][ T6331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.106'. [ 120.454085][ T6331] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.454095][ T6331] IPv6: NLM_F_CREATE should be set when creating new route [ 120.482799][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 120.482891][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 120.484862][ T10] usb 4-1: USB disconnect, device number 4 [ 120.980470][ T43] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 121.161022][ T5836] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 121.173379][ T5900] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 121.195811][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.216312][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 121.227699][ T5154] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 121.277434][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 121.303043][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 121.327498][ T43] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 121.338910][ T43] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 121.340682][ T5921] vhci_hcd: vhci_device speed not set [ 121.348881][ T43] usb 3-1: Manufacturer: syz [ 121.360285][ T5836] usb 1-1: Using ep0 maxpacket: 16 [ 121.374113][ T43] usb 3-1: config 0 descriptor?? [ 121.380777][ T5900] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.400820][ T5154] usb 4-1: Using ep0 maxpacket: 16 [ 121.415136][ T5836] usb 1-1: config 0 has no interfaces? [ 121.440382][ T5900] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.452144][ T5154] usb 4-1: config 0 has no interfaces? [ 121.457684][ T5154] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 121.470259][ T5836] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 121.486298][ T5900] usb 5-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 121.500254][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.511649][ T5154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.534591][ T5836] usb 1-1: config 0 descriptor?? [ 121.549762][ T5900] usb 5-1: config 0 interface 0 has no altsetting 0 [ 121.563268][ T5154] usb 4-1: config 0 descriptor?? [ 121.584487][ T5900] usb 5-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00 [ 121.601695][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.632422][ T5900] usb 5-1: config 0 descriptor?? [ 121.713856][ T43] rc_core: IR keymap rc-hauppauge not found [ 121.726514][ T43] Registered IR keymap rc-empty [ 121.737224][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.815650][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 121.819722][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.845553][ T6343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.881566][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 121.883042][ T6343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.953470][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 121.988616][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 122.022265][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 122.034648][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 122.048174][ T9] usb 2-1: New USB device found, idVendor=2ccd, idProduct=0093, bcdDevice=23.5a [ 122.068240][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 122.085819][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.100591][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 122.120307][ T9] usb 2-1: Product: syz [ 122.129707][ T9] usb 2-1: Manufacturer: syz [ 122.134929][ T9] usb 2-1: SerialNumber: syz [ 122.149503][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 122.157240][ T9] usb 2-1: config 0 descriptor?? [ 122.301360][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 122.340303][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 122.370379][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 122.390403][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 122.404890][ T5836] usb 2-1: USB disconnect, device number 4 [ 122.432565][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 122.520653][ T5900] usbhid 5-1:0.0: can't add hid device: -71 [ 122.530617][ T5900] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 122.557583][ T43] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 122.589238][ T5900] usb 5-1: USB disconnect, device number 6 [ 122.595222][ T43] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 123.668553][ T6358] Failed to get privilege flags for destination (handle=0x0:0x20000) [ 123.892632][ T43] usb 3-1: USB disconnect, device number 6 [ 124.195329][ T6367] netlink: 44 bytes leftover after parsing attributes in process `syz.2.115'. [ 124.204361][ T9] usb 1-1: USB disconnect, device number 6 [ 124.204603][ T5921] usb 4-1: USB disconnect, device number 5 [ 124.276835][ T6367] netlink: 44 bytes leftover after parsing attributes in process `syz.2.115'. [ 124.306031][ T6369] loop2: detected capacity change from 0 to 7 [ 124.385264][ T6369] Dev loop2: unable to read RDB block 7 [ 124.391366][ T6367] netlink: 44 bytes leftover after parsing attributes in process `syz.2.115'. [ 124.410643][ T6369] loop2: unable to read partition table [ 124.447167][ T6369] loop2: partition table beyond EOD, truncated [ 124.480434][ T6369] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 124.492853][ T6367] netlink: 44 bytes leftover after parsing attributes in process `syz.2.115'. [ 124.511518][ T6367] netlink: 44 bytes leftover after parsing attributes in process `syz.2.115'. [ 124.560426][ T6367] netlink: 44 bytes leftover after parsing attributes in process `syz.2.115'. [ 124.596112][ T6367] netlink: 44 bytes leftover after parsing attributes in process `syz.2.115'. [ 124.671669][ T6367] netlink: 44 bytes leftover after parsing attributes in process `syz.2.115'. [ 124.693211][ T6367] netlink: 44 bytes leftover after parsing attributes in process `syz.2.115'. [ 124.810537][ T43] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 124.875782][ T5203] Dev loop2: unable to read RDB block 7 [ 124.891003][ T5203] loop2: unable to read partition table [ 124.897450][ T6386] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.904759][ T6386] IPv6: NLM_F_CREATE should be set when creating new route [ 124.914028][ T5203] loop2: partition table beyond EOD, truncated [ 124.950742][ T43] usb 5-1: device descriptor read/64, error -71 [ 125.207126][ T6391] FAULT_INJECTION: forcing a failure. [ 125.207126][ T6391] name failslab, interval 1, probability 0, space 0, times 0 [ 125.207228][ T6391] CPU: 0 UID: 0 PID: 6391 Comm: syz.0.122 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 125.207254][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.207271][ T6391] Call Trace: [ 125.207279][ T6391] [ 125.207289][ T6391] dump_stack_lvl+0x189/0x250 [ 125.207335][ T6391] ? __pfx____ratelimit+0x10/0x10 [ 125.207379][ T6391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.207419][ T6391] ? __pfx__printk+0x10/0x10 [ 125.207464][ T6391] should_fail_ex+0x414/0x560 [ 125.207505][ T6391] should_failslab+0xa8/0x100 [ 125.207534][ T6391] kmem_cache_alloc_noprof+0x73/0x3c0 [ 125.207572][ T6391] ? skb_clone+0x212/0x3a0 [ 125.207605][ T6391] ? __pfx_skb_network_protocol+0x10/0x10 [ 125.207644][ T6391] skb_clone+0x212/0x3a0 [ 125.207677][ T6391] ? dev_queue_xmit_nit+0x26f/0xcc0 [ 125.207709][ T6391] dev_queue_xmit_nit+0x416/0xcc0 [ 125.207737][ T6391] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 125.207782][ T6391] dev_hard_start_xmit+0x1be/0x830 [ 125.207837][ T6391] __dev_queue_xmit+0x1adf/0x3a70 [ 125.207887][ T6391] ? __dev_queue_xmit+0x27e/0x3a70 [ 125.207923][ T6391] ? ip6t_do_table+0x1db/0x1560 [ 125.207959][ T6391] ? __pfx_ip6t_do_table+0x10/0x10 [ 125.207998][ T6391] ? __pfx___dev_queue_xmit+0x10/0x10 [ 125.208043][ T6391] ? ip6table_mangle_hook+0x2a2/0x6c0 [ 125.208085][ T6391] ? __lock_acquire+0xab9/0xd20 [ 125.208132][ T6391] ? ip6_finish_output+0x234/0x7d0 [ 125.208170][ T6391] ? ip6_finish_output2+0xf99/0x16a0 [ 125.208210][ T6391] ip6_finish_output2+0x11bc/0x16a0 [ 125.208249][ T6391] ? ip6_finish_output2+0x701/0x16a0 [ 125.208292][ T6391] ? __pfx_ip6_finish_output2+0x10/0x10 [ 125.208328][ T6391] ? ip6_mtu+0x7d/0x3f0 [ 125.208362][ T6391] ? ip6_mtu+0x7d/0x3f0 [ 125.208393][ T6391] ip6_finish_output+0x234/0x7d0 [ 125.208429][ T6391] ip6_xmit+0x107a/0x1840 [ 125.208475][ T6391] ? __pfx_ip6_xmit+0x10/0x10 [ 125.208513][ T6391] ? sctp_v6_xmit+0x60f/0x12f0 [ 125.208553][ T6391] ? sctp_v6_xmit+0x60f/0x12f0 [ 125.208581][ T6391] sctp_v6_xmit+0xa22/0x12f0 [ 125.208630][ T6391] ? __pfx_sctp_v6_xmit+0x10/0x10 [ 125.208656][ T6391] ? kasan_quarantine_put+0xdd/0x220 [ 125.208693][ T6391] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.208739][ T6391] ? kmem_cache_free+0x18f/0x400 [ 125.208771][ T6391] sctp_packet_transmit+0x2581/0x2bb0 [ 125.208850][ T6391] sctp_packet_singleton+0x233/0x330 [ 125.208893][ T6391] ? __pfx_sctp_packet_singleton+0x10/0x10 [ 125.208945][ T6391] ? sctp_outq_select_transport+0x462/0x570 [ 125.208983][ T6391] ? sctp_transport_burst_limited+0x19c/0x280 [ 125.209014][ T6391] sctp_outq_flush+0x4f0/0x3140 [ 125.209066][ T6391] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 125.209110][ T6391] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 125.209145][ T6391] ? rcu_is_watching+0x15/0xb0 [ 125.209189][ T6391] ? __pfx_sctp_outq_flush+0x10/0x10 [ 125.209234][ T6391] ? sctp_outq_tail+0x612/0x8c0 [ 125.209270][ T6391] ? sctp_outq_uncork+0x4d/0xa0 [ 125.209308][ T6391] sctp_do_sm+0x5332/0x5a20 [ 125.209346][ T6391] ? sctp_stream_init_ext+0x57/0x180 [ 125.209382][ T6391] ? sctp_sendmsg_to_asoc+0x12fd/0x1810 [ 125.209410][ T6391] ? sctp_sendmsg+0x1941/0x2810 [ 125.209437][ T6391] ? __sock_sendmsg+0x19c/0x270 [ 125.209466][ T6391] ? __pfx_sctp_do_sm+0x10/0x10 [ 125.209555][ T6391] ? __sk_mem_raise_allocated+0xaa9/0x1240 [ 125.209604][ T6391] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 125.209643][ T6391] sctp_sendmsg_to_asoc+0x102d/0x1810 [ 125.209672][ T6391] ? __asan_memcpy+0x40/0x70 [ 125.209716][ T6391] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 125.209766][ T6391] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 125.209799][ T6391] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 125.209833][ T6391] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 125.209864][ T6391] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 125.209893][ T6391] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 125.209926][ T6391] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 125.209960][ T6391] ? security_sctp_bind_connect+0x7e/0x2e0 [ 125.209991][ T6391] sctp_sendmsg+0x1941/0x2810 [ 125.210037][ T6391] ? __pfx_sctp_sendmsg+0x10/0x10 [ 125.210079][ T6391] ? aa_sk_perm+0x81e/0x950 [ 125.210114][ T6391] ? __pfx_aa_sk_perm+0x10/0x10 [ 125.210145][ T6391] ? sock_rps_record_flow+0x19/0x410 [ 125.210173][ T6391] ? inet_sendmsg+0x2f4/0x370 [ 125.210196][ T6391] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 125.210233][ T6391] __sock_sendmsg+0x19c/0x270 [ 125.210261][ T6391] __sys_sendto+0x3bd/0x520 [ 125.210293][ T6391] ? __pfx___sys_sendto+0x10/0x10 [ 125.210319][ T6391] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 125.210365][ T6391] ? __fget_files+0x3a0/0x420 [ 125.210407][ T6391] ? ksys_write+0x22a/0x250 [ 125.210431][ T6391] ? __pfx_ksys_write+0x10/0x10 [ 125.210450][ T6391] ? rcu_is_watching+0x15/0xb0 [ 125.210493][ T6391] __x64_sys_sendto+0xde/0x100 [ 125.210527][ T6391] do_syscall_64+0xfa/0x3b0 [ 125.210548][ T6391] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.210584][ T6391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.210609][ T6391] ? clear_bhb_loop+0x60/0xb0 [ 125.210638][ T6391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.210661][ T6391] RIP: 0033:0x7f0976b8e929 [ 125.210691][ T6391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.210715][ T6391] RSP: 002b:00007f0977a2a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 125.210740][ T6391] RAX: ffffffffffffffda RBX: 00007f0976db5fa0 RCX: 00007f0976b8e929 [ 125.210758][ T6391] RDX: 000000000000cf88 RSI: 0000200000847fff RDI: 0000000000000004 [ 125.210774][ T6391] RBP: 00007f0977a2a090 R08: 000020000005ffe4 R09: 000000000000001c [ 125.210788][ T6391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.210802][ T6391] R13: 0000000000000000 R14: 00007f0976db5fa0 R15: 00007f0976edfa28 [ 125.210840][ T6391] [ 125.224390][ T43] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 125.350322][ T43] usb 5-1: device descriptor read/64, error -71 [ 125.460717][ T43] usb usb5-port1: attempt power cycle [ 125.830238][ T43] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 125.851968][ T43] usb 5-1: device descriptor read/8, error -71 [ 126.198831][ T6395] IPVS: set_ctl: invalid protocol: 22 172.30.1.1:20004 [ 126.201666][ T9] IPVS: starting estimator thread 0... [ 126.271018][ T43] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 126.301121][ T43] usb 5-1: device descriptor read/8, error -71 [ 126.304267][ T6397] IPVS: using max 37 ests per chain, 88800 per kthread [ 126.410560][ T43] usb usb5-port1: unable to enumerate USB device [ 127.349245][ T6399] FAULT_INJECTION: forcing a failure. [ 127.349245][ T6399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.349282][ T6399] CPU: 0 UID: 0 PID: 6399 Comm: syz.4.124 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 127.349307][ T6399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.349319][ T6399] Call Trace: [ 127.349328][ T6399] [ 127.349337][ T6399] dump_stack_lvl+0x189/0x250 [ 127.349376][ T6399] ? __pfx____ratelimit+0x10/0x10 [ 127.349409][ T6399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.349443][ T6399] ? __pfx__printk+0x10/0x10 [ 127.349468][ T6399] ? __might_fault+0xb0/0x130 [ 127.349501][ T6399] should_fail_ex+0x414/0x560 [ 127.349535][ T6399] _copy_from_user+0x2d/0xb0 [ 127.349558][ T6399] ___sys_sendmsg+0x158/0x2a0 [ 127.349590][ T6399] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.349665][ T6399] ? __might_fault+0xb0/0x130 [ 127.349690][ T6399] __sys_sendmmsg+0x227/0x430 [ 127.349725][ T6399] ? __pfx___sys_sendmmsg+0x10/0x10 [ 127.349750][ T6399] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 127.349800][ T6399] ? ksys_write+0x22a/0x250 [ 127.349823][ T6399] ? __pfx_ksys_write+0x10/0x10 [ 127.349840][ T6399] ? rcu_is_watching+0x15/0xb0 [ 127.349880][ T6399] __x64_sys_sendmmsg+0xa0/0xc0 [ 127.349911][ T6399] do_syscall_64+0xfa/0x3b0 [ 127.349931][ T6399] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.349964][ T6399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.349985][ T6399] ? clear_bhb_loop+0x60/0xb0 [ 127.350012][ T6399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.350033][ T6399] RIP: 0033:0x7f814e78e929 [ 127.350057][ T6399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.350074][ T6399] RSP: 002b:00007f814f532038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 127.350095][ T6399] RAX: ffffffffffffffda RBX: 00007f814e9b5fa0 RCX: 00007f814e78e929 [ 127.350110][ T6399] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000003 [ 127.350123][ T6399] RBP: 00007f814f532090 R08: 0000000000000000 R09: 0000000000000000 [ 127.350136][ T6399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.350148][ T6399] R13: 0000000000000000 R14: 00007f814e9b5fa0 R15: 00007f814eadfa28 [ 127.350180][ T6399] [ 127.852648][ T6401] __nla_validate_parse: 25 callbacks suppressed [ 127.852664][ T6401] netlink: 104 bytes leftover after parsing attributes in process `syz.4.125'. [ 128.000871][ T43] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 128.152340][ T43] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 128.152375][ T43] usb 1-1: config 0 has no interface number 0 [ 128.152420][ T43] usb 1-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 128.152449][ T43] usb 1-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 128.152478][ T43] usb 1-1: config 0 interface 230 has no altsetting 0 [ 128.155108][ T43] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 128.155139][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.155160][ T43] usb 1-1: Product: syz [ 128.155176][ T43] usb 1-1: Manufacturer: syz [ 128.155191][ T43] usb 1-1: SerialNumber: syz [ 128.157423][ T43] usb 1-1: config 0 descriptor?? [ 128.158555][ T6403] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 128.158659][ T6403] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 128.159916][ T43] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 128.249258][ T43] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 129.020375][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 129.314207][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 129.381407][ T9] usb 4-1: config 0 has no interfaces? [ 129.423950][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 129.427217][ T43] ums-usbat 1-1:0.230: probe with driver ums-usbat failed with error -5 [ 129.500126][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.536738][ T9] usb 4-1: config 0 descriptor?? [ 129.586289][ T43] usb 1-1: USB disconnect, device number 7 [ 129.732190][ T6425] binder: BINDER_SET_CONTEXT_MGR already set [ 129.743031][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.132'. [ 129.745802][ T6425] binder: 6423:6425 ioctl 4018620d 200000000300 returned -16 [ 129.794141][ T6427] binder: BINDER_SET_CONTEXT_MGR already set [ 129.809888][ T6427] binder: 6423:6427 ioctl 4018620d 200000000040 returned -16 [ 130.085359][ T6435] FAULT_INJECTION: forcing a failure. [ 130.085359][ T6435] name failslab, interval 1, probability 0, space 0, times 0 [ 130.099172][ T6435] CPU: 1 UID: 0 PID: 6435 Comm: syz.4.135 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 130.099202][ T6435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.099215][ T6435] Call Trace: [ 130.099223][ T6435] [ 130.099232][ T6435] dump_stack_lvl+0x189/0x250 [ 130.099272][ T6435] ? __pfx____ratelimit+0x10/0x10 [ 130.099306][ T6435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.099340][ T6435] ? __pfx__printk+0x10/0x10 [ 130.099370][ T6435] ? __pfx___might_resched+0x10/0x10 [ 130.099409][ T6435] should_fail_ex+0x414/0x560 [ 130.099443][ T6435] should_failslab+0xa8/0x100 [ 130.099469][ T6435] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 130.099491][ T6435] ? __alloc_skb+0x112/0x2d0 [ 130.099522][ T6435] __alloc_skb+0x112/0x2d0 [ 130.099552][ T6435] __ip6_append_data+0x2b8c/0x3de0 [ 130.099604][ T6435] ? __lock_acquire+0xab9/0xd20 [ 130.099638][ T6435] ? __pfx_raw6_getfrag+0x10/0x10 [ 130.099689][ T6435] ? ip6_mtu+0x7d/0x3f0 [ 130.099720][ T6435] ? __pfx___ip6_append_data+0x10/0x10 [ 130.099748][ T6435] ? __pfx_ip6_mtu+0x10/0x10 [ 130.099793][ T6435] ip6_append_data+0x1c4/0x380 [ 130.099828][ T6435] ? __pfx_raw6_getfrag+0x10/0x10 [ 130.099864][ T6435] rawv6_sendmsg+0x124b/0x17f0 [ 130.099915][ T6435] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 130.099973][ T6435] ? __lock_acquire+0xab9/0xd20 [ 130.100003][ T6435] ? __pfx_aa_sk_perm+0x10/0x10 [ 130.100033][ T6435] ? sock_rps_record_flow+0x19/0x410 [ 130.100058][ T6435] ? inet_sendmsg+0x2f4/0x370 [ 130.100077][ T6435] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 130.100108][ T6435] __sock_sendmsg+0x19c/0x270 [ 130.100131][ T6435] ____sys_sendmsg+0x52d/0x830 [ 130.100164][ T6435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.100204][ T6435] ? import_iovec+0x74/0xa0 [ 130.100231][ T6435] ___sys_sendmsg+0x21f/0x2a0 [ 130.100262][ T6435] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.100339][ T6435] ? __might_fault+0xb0/0x130 [ 130.100365][ T6435] __sys_sendmmsg+0x227/0x430 [ 130.100400][ T6435] ? __pfx___sys_sendmmsg+0x10/0x10 [ 130.100426][ T6435] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 130.100478][ T6435] ? ksys_write+0x22a/0x250 [ 130.100501][ T6435] ? __pfx_ksys_write+0x10/0x10 [ 130.100518][ T6435] ? rcu_is_watching+0x15/0xb0 [ 130.100559][ T6435] __x64_sys_sendmmsg+0xa0/0xc0 [ 130.100591][ T6435] do_syscall_64+0xfa/0x3b0 [ 130.100610][ T6435] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.100643][ T6435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.100665][ T6435] ? clear_bhb_loop+0x60/0xb0 [ 130.100691][ T6435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.100712][ T6435] RIP: 0033:0x7f814e78e929 [ 130.100731][ T6435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.100749][ T6435] RSP: 002b:00007f814f532038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 130.100771][ T6435] RAX: ffffffffffffffda RBX: 00007f814e9b5fa0 RCX: 00007f814e78e929 [ 130.100793][ T6435] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000003 [ 130.100807][ T6435] RBP: 00007f814f532090 R08: 0000000000000000 R09: 0000000000000000 [ 130.100820][ T6435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.100833][ T6435] R13: 0000000000000000 R14: 00007f814e9b5fa0 R15: 00007f814eadfa28 [ 130.100865][ T6435] [ 130.526095][ T6434] fuse: Bad value for 'fd' [ 130.553974][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'. [ 130.584165][ T6436] fuse: Bad value for 'group_id' [ 130.589190][ T6436] fuse: Bad value for 'group_id' [ 130.633599][ T6438] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.660419][ T6446] binder: 6443:6446 ioctl c0306201 0 returned -14 [ 130.667640][ T6446] binder: 6443:6446 ioctl c018aec0 0 returned -22 [ 130.750372][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 130.980904][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 130.997180][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 130.997215][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.039504][ T6456] syz.0.140: attempt to access beyond end of device [ 131.039504][ T6456] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 131.062693][ T9] usb 2-1: Product: syz [ 131.063846][ T9] usb 2-1: Manufacturer: syz [ 131.063869][ T9] usb 2-1: SerialNumber: syz [ 131.068665][ T9] usb 2-1: config 0 descriptor?? [ 131.758996][ T9] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 131.964857][ T9] usb write operation failed. (-71) [ 131.993859][ T43] usb 4-1: USB disconnect, device number 6 [ 132.020275][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 132.042162][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 132.049765][ T9] usb 2-1: media controller created [ 132.062521][ T9] usb read operation failed. (-71) [ 132.068631][ T9] usb write operation failed. (-71) [ 132.092620][ T9] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 132.112101][ T6460] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.119431][ T6460] IPv6: NLM_F_CREATE should be set when creating new route [ 132.139570][ T6460] lo: entered allmulticast mode [ 132.149016][ T6460] tunl0: entered allmulticast mode [ 132.156805][ T9] usb 2-1: USB disconnect, device number 5 [ 132.180781][ T6460] gre0: entered allmulticast mode [ 132.233398][ T6460] gretap0: entered allmulticast mode [ 132.259979][ T6460] erspan0: entered allmulticast mode [ 132.260738][ T6462] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 132.299727][ T6460] ip_vti0: entered allmulticast mode [ 132.311904][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.143'. [ 132.324950][ T6460] ip6_vti0: entered allmulticast mode [ 132.344378][ T6460] sit0: entered allmulticast mode [ 132.379313][ T6460] ip6tnl0: entered allmulticast mode [ 132.395276][ T6460] ip6gre0: entered allmulticast mode [ 132.427062][ T6460] ip6gretap0: entered allmulticast mode [ 132.454712][ T6460] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.463175][ T6460] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.503065][ T6460] bridge0: entered allmulticast mode [ 132.523311][ T6460] vcan0: entered allmulticast mode [ 132.566916][ T6460] bond0: entered allmulticast mode [ 132.598758][ T6460] bond_slave_0: entered allmulticast mode [ 132.615067][ T6460] bond_slave_1: entered allmulticast mode [ 132.671289][ T6460] team0: entered allmulticast mode [ 132.676871][ T6460] team_slave_0: entered allmulticast mode [ 132.708645][ T6460] team_slave_1: entered allmulticast mode [ 132.748090][ T6460] dummy0: entered allmulticast mode [ 132.800328][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 132.803146][ T6460] nlmon0: entered allmulticast mode [ 132.990900][ T6460] caif0: entered allmulticast mode [ 132.996954][ T6460] batadv0: entered allmulticast mode [ 133.018189][ T6460] vxcan0: entered allmulticast mode [ 133.057717][ T9] usb 1-1: config 0 has no interfaces? [ 133.066719][ T6460] vxcan1: entered allmulticast mode [ 133.093019][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 133.105087][ T6460] veth0: entered allmulticast mode [ 133.129424][ T6472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.144278][ T6460] veth1: entered allmulticast mode [ 133.157448][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.188678][ T9] usb 1-1: Product: syz [ 133.202395][ T6460] wg0: entered allmulticast mode [ 133.215678][ T9] usb 1-1: Manufacturer: syz [ 133.246170][ T9] usb 1-1: SerialNumber: syz [ 133.263489][ T6460] wg1: entered allmulticast mode [ 133.269987][ T9] usb 1-1: config 0 descriptor?? [ 133.289780][ T6460] wg2: entered allmulticast mode [ 133.299502][ T6460] veth0_to_bridge: entered allmulticast mode [ 133.339562][ T6460] veth1_to_bridge: entered allmulticast mode [ 133.371678][ T6460] veth0_to_bond: entered allmulticast mode [ 133.385157][ T6460] veth1_to_bond: entered allmulticast mode [ 133.399507][ T6460] veth0_to_team: entered allmulticast mode [ 133.415450][ T6460] veth1_to_team: entered allmulticast mode [ 133.426416][ T6460] veth0_to_batadv: entered allmulticast mode [ 133.438321][ T6460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.447459][ T30] audit: type=1326 audit(1749890309.307:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814e78e929 code=0x7ffc0000 [ 133.447940][ T6460] batadv_slave_0: entered allmulticast mode [ 133.486943][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.146'. [ 133.489857][ T30] audit: type=1326 audit(1749890309.307:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814e78e929 code=0x7ffc0000 [ 133.501862][ T6460] veth1_to_batadv: entered allmulticast mode [ 133.546130][ T5947] usb 1-1: USB disconnect, device number 8 [ 133.576948][ T6460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.580170][ T30] audit: type=1326 audit(1749890309.327:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f814e790847 code=0x7ffc0000 [ 133.588164][ T6460] batadv_slave_1: entered allmulticast mode [ 133.636331][ T6460] xfrm0: entered allmulticast mode [ 133.642853][ T30] audit: type=1326 audit(1749890309.327:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f814e7907bc code=0x7ffc0000 [ 133.649079][ T6460] veth0_to_hsr: entered allmulticast mode [ 133.686312][ T6460] hsr_slave_0: entered allmulticast mode [ 133.692290][ T30] audit: type=1326 audit(1749890309.337:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f814e7906f4 code=0x7ffc0000 [ 133.692385][ T30] audit: type=1326 audit(1749890309.337:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f814e7906f4 code=0x7ffc0000 [ 133.745929][ T30] audit: type=1326 audit(1749890309.337:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f814e78d58a code=0x7ffc0000 [ 133.747549][ T6460] veth1_to_hsr: entered allmulticast mode [ 133.770771][ T30] audit: type=1326 audit(1749890309.337:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814e78e929 code=0x7ffc0000 [ 133.789268][ T6460] hsr_slave_1: entered allmulticast mode [ 133.799095][ T30] audit: type=1326 audit(1749890309.337:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814e78e929 code=0x7ffc0000 [ 133.811587][ T6460] hsr0: entered allmulticast mode [ 133.833987][ T30] audit: type=1326 audit(1749890309.337:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f814e78e929 code=0x7ffc0000 [ 133.837248][ T6460] veth1_virt_wifi: entered allmulticast mode [ 133.875424][ T6460] veth0_virt_wifi: entered allmulticast mode [ 133.884025][ T6460] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 133.892354][ T6460] veth1_vlan: entered allmulticast mode [ 133.900995][ T6460] veth0_vlan: entered allmulticast mode [ 133.916504][ T6460] vlan0: entered allmulticast mode [ 133.921960][ T6460] vlan1: entered allmulticast mode [ 133.927972][ T6460] macvlan0: entered allmulticast mode [ 133.938212][ T6460] macvlan1: entered allmulticast mode [ 133.947737][ T6460] ipvlan0: entered allmulticast mode [ 133.953393][ T6460] ipvlan1: entered allmulticast mode [ 133.959317][ T6460] veth1_macvtap: entered allmulticast mode [ 133.968504][ T6460] veth0_macvtap: entered allmulticast mode [ 133.987019][ T6460] macvtap0: entered allmulticast mode [ 133.996680][ T6460] macsec0: entered allmulticast mode [ 134.006999][ T6460] geneve0: entered allmulticast mode [ 134.015550][ T6460] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.025852][ T6460] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.035209][ T6460] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.044182][ T6460] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.053478][ T6460] geneve1: entered allmulticast mode [ 134.082326][ T6460] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 134.096475][ T6460] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 134.108879][ T6460] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 134.123319][ T6460] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 134.186409][ T6460] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 134.216815][ T6460] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 134.623811][ T6494] netlink: 128 bytes leftover after parsing attributes in process `syz.2.153'. [ 134.643692][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'. [ 134.663330][ T6494] netlink: 128 bytes leftover after parsing attributes in process `syz.2.153'. [ 134.709867][ T6494] netlink: 128 bytes leftover after parsing attributes in process `syz.2.153'. [ 134.709972][ T6494] netlink: 128 bytes leftover after parsing attributes in process `syz.2.153'. [ 134.710181][ T6494] netlink: 128 bytes leftover after parsing attributes in process `syz.2.153'. [ 134.710321][ T6494] netlink: 128 bytes leftover after parsing attributes in process `syz.2.153'. [ 134.710472][ T6494] netlink: 128 bytes leftover after parsing attributes in process `syz.2.153'. [ 134.711067][ T6494] netlink: 128 bytes leftover after parsing attributes in process `syz.2.153'. [ 134.851901][ T5921] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 135.012570][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 135.030923][ T5921] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 135.030958][ T5921] usb 4-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 135.030976][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.034991][ T5921] usb 4-1: config 0 descriptor?? [ 135.190184][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 135.240233][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 135.365979][ T9] usb 2-1: config 0 has no interfaces? [ 135.366018][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 135.366036][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.376142][ T9] usb 2-1: config 0 descriptor?? [ 135.390212][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 135.392321][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.392392][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.396021][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.396052][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.396075][ T10] usb 3-1: Product: syz [ 135.396091][ T10] usb 3-1: Manufacturer: syz [ 135.396108][ T10] usb 3-1: SerialNumber: syz [ 137.220339][ T5900] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 137.366915][ T9] usb 4-1: USB disconnect, device number 7 [ 137.402411][ T5900] usb 1-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 137.461783][ T5900] usb 1-1: config 0 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 137.495337][ T5900] usb 1-1: config 0 interface 0 has no altsetting 0 [ 137.512564][ T5900] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 137.530748][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.576143][ T5900] usb 1-1: config 0 descriptor?? [ 137.609863][ T5900] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 138.063835][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.073479][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.162282][ T10] usb 3-1: 0:2 : does not exist [ 138.227394][ T43] usb 2-1: USB disconnect, device number 6 [ 138.232224][ T6547] block device autoloading is deprecated and will be removed. [ 138.288853][ T10] usb 3-1: USB disconnect, device number 7 [ 138.295577][ T6547] syz.4.166: attempt to access beyond end of device [ 138.295577][ T6547] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 138.378496][ T6549] binder: 6546:6549 ioctl 5410 200000000040 returned -22 [ 138.393323][ T6552] binder: 6546:6552 ioctl c018620b 200000000000 returned -14 [ 138.394841][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.460418][ T5900] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 138.612126][ T5900] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.612158][ T5900] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 138.612182][ T5900] usb 4-1: config 1 has no interface number 0 [ 138.612227][ T5900] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 138.614942][ T5900] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.678550][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.678581][ T5900] usb 4-1: Product: syz [ 138.678598][ T5900] usb 4-1: Manufacturer: syz [ 138.678615][ T5900] usb 4-1: SerialNumber: syz [ 138.726892][ T5900] usb 4-1: selecting invalid altsetting 1 [ 138.782405][ T6562] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 138.782568][ T6562] syzkaller0: linktype set to 786 [ 138.923390][ T6566] binder: 6563:6566 ioctl c0306201 0 returned -14 [ 138.936098][ T6550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.936506][ T6550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.937559][ T6550] openvswitch: netlink: Flow key attr not present in new flow. [ 139.020562][ T10] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 139.149968][ T5900] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 139.150023][ T5900] cdc_ncm 4-1:1.1: bind() failure [ 139.164182][ T5900] usb 4-1: USB disconnect, device number 8 [ 139.188554][ T10] usb 2-1: config 0 has an invalid interface number: 201 but max is 0 [ 139.188585][ T10] usb 2-1: config 0 has no interface number 0 [ 139.188630][ T10] usb 2-1: config 0 interface 201 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 139.188656][ T10] usb 2-1: config 0 interface 201 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 139.203759][ T10] usb 2-1: New USB device found, idVendor=04fc, idProduct=0235, bcdDevice=ef.15 [ 139.203793][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.203814][ T10] usb 2-1: Product: syz [ 139.203830][ T10] usb 2-1: Manufacturer: syz [ 139.203847][ T10] usb 2-1: SerialNumber: syz [ 139.207350][ T10] usb 2-1: config 0 descriptor?? [ 139.236494][ T10] spcp8x5 2-1:0.201: SPCP8x5 converter detected [ 139.256106][ T10] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 139.428879][ T5900] usb 2-1: USB disconnect, device number 7 [ 139.486448][ T5900] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 139.499044][ T5900] spcp8x5 2-1:0.201: device disconnected [ 139.543642][ T6568] __nla_validate_parse: 60 callbacks suppressed [ 139.543659][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.174'. [ 140.014216][ T5900] usb 1-1: USB disconnect, device number 9 [ 140.590185][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 140.590214][ T30] audit: type=1326 audit(1749890316.427:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6587 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814e78e929 code=0x7ffc0000 [ 140.712390][ T30] audit: type=1326 audit(1749890316.427:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6587 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814e78e929 code=0x7ffc0000 [ 140.845484][ T30] audit: type=1326 audit(1749890316.427:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6587 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f814e78e929 code=0x7ffc0000 [ 140.881010][ T5900] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 140.891393][ T30] audit: type=1326 audit(1749890316.427:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6587 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814e78e929 code=0x7ffc0000 [ 140.929703][ T30] audit: type=1326 audit(1749890316.517:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6587 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f814e72ab19 code=0x7ffc0000 [ 141.046249][ T30] audit: type=1326 audit(1749890316.517:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6587 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f814e72ab19 code=0x7ffc0000 [ 141.080170][ T5907] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 141.103063][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 141.111227][ T30] audit: type=1326 audit(1749890316.517:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6587 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f814e72ab19 code=0x7ffc0000 [ 141.140300][ T5900] usb 2-1: config 0 has no interfaces? [ 141.146214][ T5900] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 141.158492][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.170381][ T5900] usb 2-1: config 0 descriptor?? [ 141.204996][ T30] audit: type=1326 audit(1749890316.517:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6587 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f814e72ab19 code=0x7ffc0000 [ 141.230194][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 141.233208][ T30] audit: type=1326 audit(1749890316.517:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6587 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f814e72ab19 code=0x7ffc0000 [ 141.294254][ T30] audit: type=1326 audit(1749890316.517:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6587 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f814e78e929 code=0x7ffc0000 [ 141.316919][ T5907] usb 3-1: Using ep0 maxpacket: 8 [ 141.376300][ T5907] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 141.396003][ T5907] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 141.530502][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 141.553562][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 141.569593][ T5907] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 141.590784][ T5907] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.601945][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.630868][ T5907] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 141.658268][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.676434][ T10] usb 4-1: Product: syz [ 141.685246][ T10] usb 4-1: Manufacturer: syz [ 141.801112][ T10] usb 4-1: SerialNumber: syz [ 141.858691][ T10] usb 4-1: config 0 descriptor?? [ 142.114344][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 143.529623][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 143.563521][ T10] usb 4-1: USB disconnect, device number 9 [ 143.693564][ T5154] usb 2-1: USB disconnect, device number 8 [ 143.770262][ T5907] usb 3-1: usb_control_msg returned -71 [ 143.775933][ T5907] usbtmc 3-1:16.0: can't read capabilities [ 143.827944][ T5907] usb 3-1: USB disconnect, device number 8 [ 144.045237][ T6615] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 144.693760][ T6628] netlink: 32 bytes leftover after parsing attributes in process `syz.1.190'. [ 144.850305][ T5922] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 145.043460][ T5922] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 145.057464][ T10] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 145.075281][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.105938][ T5922] usb 3-1: config 0 descriptor?? [ 145.130718][ T5922] gspca_main: spca508-2.14.0 probing 8086:0110 [ 145.242509][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.276193][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.323946][ T6630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.334792][ T5922] gspca_spca508: reg_read err -32 [ 145.340886][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 145.370918][ T6630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.379958][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.422873][ T6630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.457302][ T6630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.508659][ T6630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.526611][ T6630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.546436][ T6630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.559674][ T6630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.582332][ T6630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.598150][ T6630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.669515][ T10] usb 1-1: GET_CAPABILITIES returned 0 [ 145.695504][ T10] usbtmc 1-1:16.0: can't read capabilities [ 147.005278][ T6601] syz.4.184 (6601): drop_caches: 1 [ 147.040266][ T5154] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 147.122524][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 147.210170][ T5154] usb 2-1: Using ep0 maxpacket: 8 [ 147.224777][ T5154] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 147.239848][ T5154] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 147.267664][ T5154] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 147.282411][ T5154] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.297565][ T5154] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 147.309713][ T5154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.310416][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 147.358718][ T5947] usb 1-1: USB disconnect, device number 10 [ 147.374798][ T9] usb 4-1: config 0 has no interfaces? [ 147.382869][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 147.398113][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.421192][ T9] usb 4-1: config 0 descriptor?? [ 147.470553][ T5921] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 147.613928][ T5922] gspca_spca508: reg write: error -71 [ 147.636196][ T5922] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 147.656942][ T5921] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 147.673846][ T5922] usb 3-1: USB disconnect, device number 9 [ 147.679975][ T5921] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 147.714780][ T5921] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 147.729956][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.754018][ T6653] raw-gadget.9 gadget.4: fail, usb_ep_enable returned -22 [ 147.783031][ T5921] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 147.986134][ T5921] usb 5-1: USB disconnect, device number 11 [ 148.190300][ T5900] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 148.324050][ T6664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.202'. [ 148.391646][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 148.461966][ T5900] usb 3-1: config 5 has an invalid interface number: 75 but max is 1 [ 148.565683][ T5900] usb 3-1: config 5 has an invalid interface number: 4 but max is 1 [ 148.632633][ T5900] usb 3-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 148.643857][ T5900] usb 3-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 148.657127][ T5900] usb 3-1: config 5 has no interface number 0 [ 148.674756][ T5900] usb 3-1: config 5 has no interface number 1 [ 148.689791][ T5900] usb 3-1: config 5 interface 75 altsetting 253 bulk endpoint 0xA has invalid maxpacket 1023 [ 148.728494][ T5900] usb 3-1: config 5 interface 75 altsetting 253 has an invalid descriptor for endpoint zero, skipping [ 148.751727][ T5900] usb 3-1: config 5 interface 75 altsetting 253 has a duplicate endpoint with address 0xA, skipping [ 148.785482][ T5900] usb 3-1: config 5 interface 75 altsetting 253 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 148.818079][ T5900] usb 3-1: config 5 interface 75 altsetting 253 has an invalid descriptor for endpoint zero, skipping [ 148.833498][ T5900] usb 3-1: config 5 interface 75 altsetting 253 has a duplicate endpoint with address 0x6, skipping [ 148.856490][ T5900] usb 3-1: config 5 interface 4 altsetting 7 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 148.888241][ T5900] usb 3-1: config 5 interface 4 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 148.917980][ T5900] usb 3-1: config 5 interface 4 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 148.956478][ T5900] usb 3-1: config 5 interface 4 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 149.011171][ T5900] usb 3-1: config 5 interface 4 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 149.040601][ T5900] usb 3-1: config 5 interface 4 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 149.099895][ T5900] usb 3-1: config 5 interface 4 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 149.117031][ T5900] usb 3-1: config 5 interface 4 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 149.138620][ T5900] usb 3-1: config 5 interface 4 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 149.224748][ T5900] usb 3-1: config 5 interface 4 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 149.292603][ T43] usb 4-1: USB disconnect, device number 10 [ 149.304800][ T5154] usb 2-1: usb_control_msg returned -71 [ 149.354504][ T5154] usbtmc 2-1:16.0: can't read capabilities [ 149.360858][ T5900] usb 3-1: config 5 interface 4 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 149.414148][ T5154] usb 2-1: USB disconnect, device number 9 [ 149.420897][ T5900] usb 3-1: config 5 interface 4 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 149.499358][ T5900] usb 3-1: config 5 interface 4 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 149.573225][ T5900] usb 3-1: config 5 interface 75 has no altsetting 0 [ 149.601000][ T5900] usb 3-1: config 5 interface 4 has no altsetting 0 [ 149.641695][ T5900] usb 3-1: New USB device found, idVendor=c251, idProduct=4003, bcdDevice= 1.00 [ 149.657367][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.670789][ T5900] usb 3-1: Product: ﳿ [ 149.726316][ T5900] usb 3-1: Manufacturer: 㸒쪟屪鋵ꀿ얯⦓婚뜘햨轹 [ 149.773516][ T5900] usb 3-1: SerialNumber: С [ 149.826126][ T6659] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 150.342128][ T43] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 150.584935][ T43] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 150.596398][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.678448][ T43] usb 4-1: config 0 descriptor?? [ 150.931127][ T6685] netlink: 'syz.3.209': attribute type 3 has an invalid length. [ 150.972281][ T43] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 151.943239][ T6717] ======================================================= [ 151.943239][ T6717] WARNING: The mand mount option has been deprecated and [ 151.943239][ T6717] and is ignored by this kernel. Remove the mand [ 151.943239][ T6717] option from the mount to silence this warning. [ 151.943239][ T6717] ======================================================= [ 152.411495][ T43] [drm:udl_init] *ERROR* Selecting channel failed [ 152.556793][ T43] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 152.581693][ T43] [drm] Initialized udl on minor 2 [ 152.604545][ T43] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 152.633528][ T43] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 152.684160][ T5836] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 152.693854][ T5900] usb-storage 3-1:5.75: USB Mass Storage device detected [ 152.709750][ T43] usb 4-1: USB disconnect, device number 11 [ 152.750477][ T5836] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 152.761827][ T5900] usb-storage 3-1:5.75: Quirks match for vid c251 pid 4003: 80 [ 152.891654][ T5900] usbhid 3-1:5.75: couldn't find an input interrupt endpoint [ 152.982770][ T5900] usb-storage 3-1:5.4: USB Mass Storage device detected [ 153.025010][ T5900] usb-storage 3-1:5.4: Quirks match for vid c251 pid 4003: 80 [ 153.185343][ T5900] usb 3-1: USB disconnect, device number 10 [ 153.300188][ T5907] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 153.533100][ T5907] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 153.551556][ T5907] usb 1-1: config 8 has no interface number 0 [ 153.578231][ T5907] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 153.723204][ T5907] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x4 has invalid wMaxPacketSize 0 [ 153.786283][ T5907] usb 1-1: config 8 interface 177 has no altsetting 0 [ 153.804270][ T5907] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 153.823611][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.888019][ T6727] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 154.157094][ T5907] usb 1-1: string descriptor 0 read error: -71 [ 154.168175][ T6721] syz.2.214: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 154.191588][ T5907] ir_toy 1-1:8.177: required endpoints not found [ 154.223165][ T5907] usb 1-1: USB disconnect, device number 11 [ 154.229248][ T6721] CPU: 1 UID: 0 PID: 6721 Comm: syz.2.214 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 154.229276][ T6721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.229288][ T6721] Call Trace: [ 154.229297][ T6721] [ 154.229306][ T6721] dump_stack_lvl+0x189/0x250 [ 154.229353][ T6721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.229388][ T6721] ? __pfx__printk+0x10/0x10 [ 154.229412][ T6721] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 154.229438][ T6721] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 154.229464][ T6721] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 154.229493][ T6721] warn_alloc+0x214/0x310 [ 154.229525][ T6721] ? __pfx_warn_alloc+0x10/0x10 [ 154.229562][ T6721] ? __get_vm_area_node+0x28f/0x300 [ 154.229586][ T6721] ? vb2_vmalloc_alloc+0xef/0x340 [ 154.229615][ T6721] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 154.229673][ T6721] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 154.229706][ T6721] ? __kasan_kmalloc+0x93/0xb0 [ 154.229731][ T6721] vmalloc_user_noprof+0xad/0xf0 [ 154.229757][ T6721] ? vb2_vmalloc_alloc+0xef/0x340 [ 154.229782][ T6721] vb2_vmalloc_alloc+0xef/0x340 [ 154.229807][ T6721] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 154.229832][ T6721] __vb2_queue_alloc+0x9c2/0x15a0 [ 154.229880][ T6721] vb2_core_reqbufs+0xc31/0x1420 [ 154.229933][ T6721] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 154.229954][ T6721] ? vb2_verify_memory_type+0x1fc/0x570 [ 154.229979][ T6721] ? vb2_reqbufs+0x3a9/0x630 [ 154.230023][ T6721] v4l2_m2m_ioctl_reqbufs+0x10d/0x200 [ 154.230060][ T6721] __video_do_ioctl+0xc9b/0xdb0 [ 154.230095][ T6721] ? __pfx___video_do_ioctl+0x10/0x10 [ 154.230134][ T6721] video_usercopy+0x871/0x14f0 [ 154.230169][ T6721] ? __pfx___video_do_ioctl+0x10/0x10 [ 154.230193][ T6721] ? __pfx_video_usercopy+0x10/0x10 [ 154.230229][ T6721] ? __fget_files+0x2a/0x420 [ 154.230258][ T6721] ? __fget_files+0x2a/0x420 [ 154.230282][ T6721] ? __fget_files+0x3a0/0x420 [ 154.230310][ T6721] v4l2_ioctl+0x18a/0x1e0 [ 154.230335][ T6721] ? __pfx_v4l2_ioctl+0x10/0x10 [ 154.230358][ T6721] __se_sys_ioctl+0xf9/0x170 [ 154.230395][ T6721] do_syscall_64+0xfa/0x3b0 [ 154.230417][ T6721] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.230451][ T6721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.230473][ T6721] ? clear_bhb_loop+0x60/0xb0 [ 154.230501][ T6721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.230522][ T6721] RIP: 0033:0x7fb3dbf8e929 [ 154.230541][ T6721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.230560][ T6721] RSP: 002b:00007fb3dce83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.230583][ T6721] RAX: ffffffffffffffda RBX: 00007fb3dc1b5fa0 RCX: 00007fb3dbf8e929 [ 154.230599][ T6721] RDX: 0000200000000240 RSI: 00000000c0145608 RDI: 0000000000000004 [ 154.230613][ T6721] RBP: 00007fb3dc010b39 R08: 0000000000000000 R09: 0000000000000000 [ 154.230627][ T6721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.230640][ T6721] R13: 0000000000000000 R14: 00007fb3dc1b5fa0 R15: 00007fb3dc2dfa28 [ 154.230674][ T6721] [ 154.560764][ T6721] Mem-Info: [ 154.563971][ T6721] active_anon:6327 inactive_anon:0 isolated_anon:0 [ 154.563971][ T6721] active_file:1125 inactive_file:3617 isolated_file:0 [ 154.563971][ T6721] unevictable:768 dirty:94 writeback:0 [ 154.563971][ T6721] slab_reclaimable:10099 slab_unreclaimable:96694 [ 154.563971][ T6721] mapped:30099 shmem:1363 pagetables:1242 [ 154.563971][ T6721] sec_pagetables:3 bounce:0 [ 154.563971][ T6721] kernel_misc_reclaimable:0 [ 154.563971][ T6721] free:1347603 free_pcp:18866 free_cma:0 [ 154.619333][ T6763] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 154.704031][ T6721] Node 0 active_anon:25308kB inactive_anon:0kB active_file:4500kB inactive_file:14332kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120496kB dirty:376kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:12300kB pagetables:4928kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB [ 154.774876][ T6721] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 154.813034][ T6764] input: syz0 as /devices/virtual/input/input7 [ 154.822050][ T6721] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 154.857405][ T6721] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 154.893472][ T6721] Node 0 DMA32 free:1468064kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25124kB inactive_anon:0kB active_file:4320kB inactive_file:12880kB unevictable:1536kB writepending:376kB present:3129332kB managed:2561024kB mlocked:0kB bounce:0kB free_pcp:56800kB local_pcp:24032kB free_cma:0kB [ 154.983287][ T6721] lowmem_reserve[]: 0 0 1 1 1 [ 154.997365][ T6721] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:212kB inactive_anon:0kB active_file:180kB inactive_file:1452kB unevictable:0kB writepending:8kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:16kB free_cma:0kB [ 155.083573][ T6721] lowmem_reserve[]: 0 0 0 0 0 [ 155.088563][ T6721] Node 1 Normal free:3902036kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17376kB local_pcp:7616kB free_cma:0kB [ 155.131967][ T6774] loop8: detected capacity change from 1 to 0 [ 155.139053][ T6774] [ 155.141434][ T6774] ====================================================== [ 155.148478][ T6774] WARNING: possible circular locking dependency detected [ 155.155545][ T6774] 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 Not tainted [ 155.162683][ T6774] ------------------------------------------------------ [ 155.162878][ T6721] lowmem_reserve[]: [ 155.169709][ T6774] syz.1.227/6774 is trying to acquire lock: [ 155.169724][ T6774] ffffffff8f87ab28 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 155.169784][ T6774] [ 155.169784][ T6774] but task is already holding lock: [ 155.169792][ T6774] ffff88814335ec40 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: loop_set_status+0x227/0xaf0 [ 155.169851][ T6774] [ 155.169851][ T6774] which lock already depends on the new lock. [ 155.169851][ T6774] [ 155.169859][ T6774] [ 155.169859][ T6774] the existing dependency chain (in reverse order) is: [ 155.169867][ T6774] [ 155.169867][ T6774] -> #2 (&q->q_usage_counter(io)#25){++++}-{0:0}: [ 155.169906][ T6774] lock_acquire+0x120/0x360 [ 155.169934][ T6774] blk_alloc_queue+0x538/0x620 [ 155.169963][ T6774] __blk_mq_alloc_disk+0x162/0x340 [ 155.169994][ T6774] loop_add+0x41b/0xad0 [ 155.170017][ T6774] loop_init+0x173/0x230 [ 155.170048][ T6774] do_one_initcall+0x233/0x820 [ 155.170067][ T6774] do_initcall_level+0x137/0x1f0 [ 155.170089][ T6774] do_initcalls+0x69/0xd0 [ 155.170108][ T6774] kernel_init_freeable+0x3d9/0x570 [ 155.170129][ T6774] kernel_init+0x1d/0x1d0 [ 155.170152][ T6774] ret_from_fork+0x3fc/0x770 [ 155.170180][ T6774] ret_from_fork_asm+0x1a/0x30 [ 155.170202][ T6774] [ 155.170202][ T6774] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 155.170234][ T6774] lock_acquire+0x120/0x360 [ 155.174670][ T6721] 0 [ 155.179936][ T6774] fs_reclaim_acquire+0x72/0x100 [ 155.190824][ T6721] 0 [ 155.197799][ T6774] kmem_cache_alloc_node_noprof+0x47/0x3c0 [ 155.197828][ T6774] __alloc_skb+0x112/0x2d0 [ 155.216539][ T6721] 0 [ 155.218376][ T6774] alloc_uevent_skb+0x7d/0x230 [ 155.218410][ T6774] kobject_uevent_net_broadcast+0x2fa/0x560 [ 155.227703][ T6721] 0 [ 155.236000][ T6774] kobject_uevent_env+0x55b/0x8c0 [ 155.236037][ T6774] kobject_synth_uevent+0x527/0xb00 [ 155.241331][ T6721] 0 [ 155.246357][ T6774] bus_uevent_store+0x115/0x170 [ 155.246384][ T6774] kernfs_fop_write_iter+0x378/0x4f0 [ 155.254239][ T6721] [ 155.256686][ T6774] vfs_write+0x548/0xa90 [ 155.261575][ T6721] Node 0 [ 155.266744][ T6774] ksys_write+0x145/0x250 [ 155.266788][ T6774] do_syscall_64+0xfa/0x3b0 [ 155.266808][ T6774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.273475][ T6721] DMA: [ 155.277113][ T6774] [ 155.277113][ T6774] -> #0 (uevent_sock_mutex){+.+.}-{4:4}: [ 155.282972][ T6721] 0*4kB [ 155.287708][ T6774] validate_chain+0xb9b/0x2140 [ 155.287734][ T6774] __lock_acquire+0xab9/0xd20 [ 155.287763][ T6774] lock_acquire+0x120/0x360 [ 155.293082][ T6721] 0*8kB [ 155.298139][ T6774] __mutex_lock+0x182/0xe80 [ 155.298164][ T6774] kobject_uevent_net_broadcast+0x27e/0x560 [ 155.307520][ T6721] 0*16kB [ 155.310366][ T6774] kobject_uevent_env+0x55b/0x8c0 [ 155.310395][ T6774] loop_set_status+0x4d3/0xaf0 [ 155.312976][ T6721] 0*32kB [ 155.318356][ T6774] lo_ioctl+0xa5e/0x2410 [ 155.318383][ T6774] blkdev_ioctl+0x5a8/0x6d0 [ 155.318414][ T6774] __se_sys_ioctl+0xf9/0x170 [ 155.321102][ T6721] 0*64kB [ 155.327223][ T6774] do_syscall_64+0xfa/0x3b0 [ 155.327249][ T6774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.332440][ T6721] 0*128kB [ 155.334683][ T6774] [ 155.334683][ T6774] other info that might help us debug this: [ 155.334683][ T6774] [ 155.334696][ T6774] Chain exists of: [ 155.334696][ T6774] uevent_sock_mutex --> [ 155.340138][ T6721] 0*256kB [ 155.346407][ T6774] fs_reclaim --> &q->q_usage_counter(io)#25 [ 155.346407][ T6774] [ 155.346442][ T6774] Possible unsafe locking scenario: [ 155.346442][ T6774] [ 155.346449][ T6774] CPU0 CPU1 [ 155.346457][ T6774] ---- ---- [ 155.346465][ T6774] lock(&q->q_usage_counter(io) [ 155.349146][ T6721] 0*512kB [ 155.354505][ T6774] #25); [ 155.354526][ T6774] lock(fs_reclaim); [ 155.354544][ T6774] lock(&q->q_usage_counter(io)#25); [ 155.354568][ T6774] lock(uevent_sock_mutex); [ 155.354585][ T6774] [ 155.354585][ T6774] *** DEADLOCK *** [ 155.354585][ T6774] [ 155.354590][ T6774] 3 locks held by syz.1.227/6774: [ 155.354602][ T6774] #0: ffff888143393400 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0x2c/0xaf0 [ 155.354667][ T6774] #1: ffff88814335ec40 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: loop_set_status+0x227/0xaf0 [ 155.354735][ T6774] #2: ffff88814335ec78 (&q->q_usage_counter(queue)#19){+.+.}-{0:0}, at: loop_set_status+0x227/0xaf0 [ 155.354811][ T6774] [ 155.354811][ T6774] stack backtrace: [ 155.354823][ T6774] CPU: 0 UID: 0 PID: 6774 Comm: syz.1.227 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 155.354846][ T6774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.354859][ T6774] Call Trace: [ 155.354868][ T6774] [ 155.354875][ T6774] dump_stack_lvl+0x189/0x250 [ 155.354910][ T6774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.354941][ T6774] ? __pfx__printk+0x10/0x10 [ 155.354963][ T6774] ? print_lock_name+0xde/0x100 [ 155.354985][ T6774] print_circular_bug+0x2ee/0x310 [ 155.355009][ T6774] check_noncircular+0x134/0x160 [ 155.355031][ T6774] validate_chain+0xb9b/0x2140 [ 155.355061][ T6774] __lock_acquire+0xab9/0xd20 [ 155.355093][ T6774] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 155.355120][ T6774] lock_acquire+0x120/0x360 [ 155.355147][ T6774] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 155.355179][ T6774] __mutex_lock+0x182/0xe80 [ 155.355199][ T6774] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 155.355225][ T6774] ? vsnprintf+0xe11/0xf00 [ 155.355252][ T6774] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 155.355278][ T6774] ? __pfx___mutex_lock+0x10/0x10 [ 155.355297][ T6774] ? add_uevent_var+0x278/0x450 [ 155.355320][ T6774] ? kobject_uevent_env+0x50a/0x8c0 [ 155.355344][ T6774] ? __pfx_add_uevent_var+0x10/0x10 [ 155.355368][ T6774] kobject_uevent_net_broadcast+0x27e/0x560 [ 155.355397][ T6774] kobject_uevent_env+0x55b/0x8c0 [ 155.355431][ T6774] loop_set_status+0x4d3/0xaf0 [ 155.355471][ T6774] lo_ioctl+0xa5e/0x2410 [ 155.355507][ T6774] ? __pfx_lo_ioctl+0x10/0x10 [ 155.355537][ T6774] ? is_bpf_text_address+0x26/0x2b0 [ 155.355576][ T6774] ? is_bpf_text_address+0x292/0x2b0 [ 155.355612][ T6774] ? is_bpf_text_address+0x26/0x2b0 [ 155.355649][ T6774] ? kernel_text_address+0xa5/0xe0 [ 155.355679][ T6774] ? __kernel_text_address+0xd/0x40 [ 155.355708][ T6774] ? unwind_get_return_address+0x4d/0x90 [ 155.355745][ T6774] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 155.355772][ T6774] ? arch_stack_walk+0xfc/0x150 [ 155.355808][ T6774] ? __lock_acquire+0xab9/0xd20 [ 155.355844][ T6774] ? __lock_acquire+0xab9/0xd20 [ 155.355883][ T6774] ? __lock_acquire+0xab9/0xd20 [ 155.355921][ T6774] ? __lock_acquire+0xab9/0xd20 [ 155.355962][ T6774] ? is_bpf_text_address+0x26/0x2b0 [ 155.356001][ T6774] ? is_bpf_text_address+0x292/0x2b0 [ 155.356049][ T6774] ? is_bpf_text_address+0x26/0x2b0 [ 155.356087][ T6774] ? kernel_text_address+0xa5/0xe0 [ 155.356118][ T6774] ? __kernel_text_address+0xd/0x40 [ 155.356147][ T6774] ? unwind_get_return_address+0x4d/0x90 [ 155.356183][ T6774] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 155.356208][ T6774] ? arch_stack_walk+0xfc/0x150 [ 155.356235][ T6774] ? stack_trace_save+0x9c/0xe0 [ 155.356268][ T6774] ? kasan_save_track+0x4f/0x80 [ 155.356303][ T6774] ? kasan_save_track+0x3e/0x80 [ 155.356335][ T6774] ? kasan_save_free_info+0x46/0x50 [ 155.356362][ T6774] ? __kasan_slab_free+0x62/0x70 [ 155.356383][ T6774] ? kfree+0x18e/0x440 [ 155.356415][ T6774] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 155.356442][ T6774] ? security_file_ioctl+0xcb/0x2d0 [ 155.356468][ T6774] ? __se_sys_ioctl+0x47/0x170 [ 155.356499][ T6774] ? do_syscall_64+0xfa/0x3b0 [ 155.356535][ T6774] ? do_vfs_ioctl+0xf37/0x1990 [ 155.356571][ T6774] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 155.356608][ T6774] ? kasan_quarantine_put+0xdd/0x220 [ 155.356646][ T6774] ? blkdev_common_ioctl+0xfc3/0x2450 [ 155.356682][ T6774] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 155.356710][ T6774] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 155.356737][ T6774] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 155.356772][ T6774] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 155.356807][ T6774] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 155.356836][ T6774] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 155.356873][ T6774] ? __lock_acquire+0xab9/0xd20 [ 155.356916][ T6774] ? __pfx_lo_ioctl+0x10/0x10 [ 155.356945][ T6774] blkdev_ioctl+0x5a8/0x6d0 [ 155.356981][ T6774] ? __pfx_blkdev_ioctl+0x10/0x10 [ 155.357014][ T6774] ? __fget_files+0x2a/0x420 [ 155.357042][ T6774] ? bpf_lsm_file_ioctl+0x9/0x20 [ 155.357076][ T6774] ? __pfx_blkdev_ioctl+0x10/0x10 [ 155.357110][ T6774] __se_sys_ioctl+0xf9/0x170 [ 155.357145][ T6774] do_syscall_64+0xfa/0x3b0 [ 155.357166][ T6774] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.357201][ T6774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.357224][ T6774] ? clear_bhb_loop+0x60/0xb0 [ 155.357250][ T6774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.357274][ T6774] RIP: 0033:0x7f7977b8e929 [ 155.357295][ T6774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.357316][ T6774] RSP: 002b:00007f7978a8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.357341][ T6774] RAX: ffffffffffffffda RBX: 00007f7977db5fa0 RCX: 00007f7977b8e929 [ 155.357359][ T6774] RDX: 00002000000001c0 RSI: 0000000000004c02 RDI: 0000000000000004 [ 155.357375][ T6774] RBP: 00007f7977c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 155.357389][ T6774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.357404][ T6774] R13: 0000000000000000 R14: 00007f7977db5fa0 R15: 00007f7977edfa28 [ 155.357430][ T6774] [ 156.137248][ T6721] 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 156.144601][ T6721] Node 0 DMA32: 112*4kB (U) 85*8kB (UE) 635*16kB (UM) 533*32kB (ME) 398*64kB (UME) 218*128kB (UME) 91*256kB (UM) 39*512kB (UM) 20*1024kB (M) 20*2048kB (UME) 313*4096kB (M) = 1468472kB [ 156.163574][ T6721] Node 0 Normal: 8*4kB (M) 2*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 48kB [ 156.196896][ T6721] Node 1 Normal: 201*4kB (UME) 48*8kB (UME) 35*16kB (UME) 110*32kB (UME) 33*64kB (UME) 5*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 950*4096kB (ME) = 3902036kB [ 156.214816][ T6721] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.239880][ T6721] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.249921][ T6721] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.270134][ T6721] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.279517][ T6721] 6120 total pagecache pages [ 156.284267][ T6721] 0 pages in swap cache [ 156.288447][ T6721] Free swap = 124996kB [ 156.292685][ T6721] Total swap = 124996kB [ 156.297248][ T6721] 2097051 pages RAM [ 156.301756][ T6721] 0 pages HighMem/MovableOnly [ 156.306525][ T6721] 424689 pages reserved [ 156.310796][ T6721] 0 pages cma reserved