last executing test programs: 7.572628149s ago: executing program 0 (id=110): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000000200)=[{r0, 0x80cb}, {r0, 0x8500}], 0x2, 0x0, 0x0, 0x0) signalfd(r0, &(0x7f0000000080)={[0x400]}, 0x8) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x0, 0xff, 0x2675, 0x200, 0x0, 0xcc, 0x8, {0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x1, 0x2, 0x8001, 0x2afd, 0x5b}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000100)={r2, 0x1, 0xa2, "a4bb8493409f51c94d72c0dc13a8dac41498647b3c8573c8ad37ea59b4fa55abdfc20f37a2477c3d82b069a3acda5aa6692500becf3ff740ec328662c423b58609ee5d08de69ba37eca0f22c9761984642bd2c74b33c66d1ffce3b8a5352ab7442681f165cb584f0c252bb68a64a5f33c57be2c1c6e706435548cf86e6e4f5ffcc3107e0b182ddd899ea7aa51ff732eaf069f4e99daa13e145db7ac7f5afdc2759d9"}, 0xaa) (async) syz_usb_connect(0x0, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0) 4.840283215s ago: executing program 3 (id=123): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40) r2 = dup(r1) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[@ANYBLOB="3b0b000000000000c910ff020000000000000000000000000001074800000001100208000000000000000000fc00000000000000be000000000000000600000000000000010000000000000000000020000000000600000000000000030000000000000000000020"], 0x68) dup2(r1, r2) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) socket$pptp(0x18, 0x1, 0x2) 4.68931298s ago: executing program 3 (id=124): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0xa00) 4.59268643s ago: executing program 2 (id=125): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000006000000000000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800004d5d00007b8af8ff00000000bfa200000000000109020000f8ffffffb703000008000000b7040000e080af5a85000000820000009500000000000000328c6c18d16bc1012577345936074b0d72992529df7ccb1b97da01fa08ccb5e1212903e29c8850befbc32cfb15277c556482ed38490f649e8dca2eeee23b6e213505522dfc42580304c72b053cf6977615f488a1238d1ad766f403b5dc137d4d0bc10249927e6830fe9f70861949a3c016e144962459c0a66480b51f58a617c61da1e6790b2f7990548061efc2958ff74d41045844cead0f3ef6200c55a42f70"], &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r5, 0xffffffffffffffff, 0x36, 0x0, @void}, 0x10) keyctl$KEYCTL_MOVE(0x3, r4, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r4, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x30024, 0x0, 0x1, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x90, 0x0, 0x3, {0x0, 0x200000000, 0x1, 0x4, 0xb, 0x1, {0x1, 0x10001, 0x1fffffffffff, 0x2, 0x0, 0x100, 0x10000, 0x2, 0xc88, 0x0, 0xd, r8, 0x0, 0xffff, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000004300)={0x50, 0x0, r7, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108) read$FUSE(r6, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) r10 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0/file0\x00') openat$binfmt(0xffffffffffffff9c, r10, 0x41, 0x1ff) syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004d0000480000000000059078ac1414004d50cfa044140503ac14141d00000000ffffffff000000008307407f000001940200000000000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) write$FUSE_INTERRUPT(r6, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r9}, 0x10) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 4.495708777s ago: executing program 3 (id=127): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000300)="a451f091f012eb2f06559ff1a9c0b3b9f683b31d80922d374e4f72869b", 0x1d}, {&(0x7f0000000280)="b3f64dbe90", 0x5}, {&(0x7f00000000c0)="b5b03f8c4ac82553f239b9168666e1c434879824ed9307759c549033cb7eac993024c5e437d7e1a9aa227bcad5d4edbb5193a986634f6d05ad43af74f2f67e3f4437f82963b7a088fd6b38d09a4515a465453a357e2215421499c271e48e326c8e9969a9c337cc1899725f66675a5f5f53e9ed968372289b6fa2929942c325051c34139ac205a1a5abe80af317412f4749f47d837cf06f8314a1ffd70106e7a112c46bc2e116bc5cccaebcaa54fa6acdc475c85fcff5", 0xb6}, {&(0x7f0000000340)="6d84920713b678051000de93c4e19a67ad8f9e19187f3affb32a07a4bd94843422ef93aaf22af65ce8c0094da84126283e63936d9f4c5318b562a61ddc9bced84bb4ad55cad91e403f20987ccb77ed4994db1be163c78edc64e974dfe2353157377003f702fb3c5e9ad203b7c8a1f481609f5066d2adf31e1743df084485c310b30c30364bf10fdf46dfa3bc89c3886cad927c9b38e86a313ead27", 0x9b}, {&(0x7f0000000980)='=', 0x1}], 0x5) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001900010000000000000000000a000000fe02c800003a0000080012"], 0x24}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000001680), 0x0) 4.392087231s ago: executing program 0 (id=128): socket(0x16, 0x4, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x449) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) utimensat(r1, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) sendmsg$nl_route(r2, 0x0, 0x48000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r6, 0x7b1, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) bind$netlink(r8, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x1}, 0x60044084) 4.254451686s ago: executing program 3 (id=130): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc0b, 0x9, &(0x7f0000000040)=0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) sigaltstack(0x0, 0x0) r0 = open(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x244c0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) utimes(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 3.971625238s ago: executing program 0 (id=132): syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000040)=""/36, &(0x7f0000000200)=0x24) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = syz_open_dev$audion(0x0, 0xa3a, 0x4043c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r1, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x41414770, 0x32314241, 0x422, 0x81, 0x6, 0xffff, 0x1, 0x6, 0x1, 0x6}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000080)={0x3, 0x781e, 0x1}) sendmsg(r1, &(0x7f0000001e40)={&(0x7f00000000c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f00000019c0)=[{&(0x7f00000002c0)="aa9d7149303769815223e8b799cf9416e72a9cbcf301788e9a327a11c731e376886e8ab8b662d10049e2b766f0cc886b5212f9069cce29774a6ebc5824398952559e1795ada04b7da9699e7f7e57d1d334cf187eb670d67790aa5a1ce4d908c28d9812081dacdbbf80859c4345fb861b17a15841d8fb2a63d96e5fec77dbaa6cf3bce4d2a971e0f554d8f926f84ac515e96824fa", 0x94}, {&(0x7f0000000840)="057b1d0913e2e757728e2136c72338c074fe8c0d7420a976b98f6024fb258bf7dbc9a20c8a8c2ac0ceae5784dbeca6f369ecf292e186764feaaf21ff4b6f8762ae8a6871dcf9325e34e647cc49a9c205e0a101112596018b06c8f4f9ffb08436766d0bf2d234b42c236570d5877eac5ddf5aef0e16d9097e6f61c3111db03ff13bfc9b17113466f45b4420cd39b950fba1eb1d8bd2371bffb480661affd04fd036ea000d71678a338da81f4f825296b90c437dab635749835667cb95", 0xbc}, {&(0x7f0000000900)="961acbd79cbd5395649ba4a70ff8220b29d78df3db86b6ecd3fb039d76af4eb0f7f54157c8c5fc38737bc09dd71439922b14f88eaf1bf2faf7e115124b19469b7687128426dee6938c93e3eca8bec71d1b622c98b9d7ea5a7e6433454749c004398d28ad9d77028e559e255240ac99e73e5195152f63fcda52a532b3de8a3312bf57bef0d6387a1e2aa7b073f0032e44121050270a3b8dfb35d75e0d75aa7ff76ef0962fea6506db2345c0849ad545664621a8da", 0xb4}, {&(0x7f00000009c0)="359ecdf01178d647987ede302578905fbc1b11bb956e04f1a776ee16b4868ffb48f43bf6eeed81be241e0e9196d27af17eb6618372d2c222b2823ebc8e49b13b4b8790a762392573b4d279051c4f906ea9dd2ef4d915c6451835e93db48f368ce8ab4cc5416302f99b9ac40a0804a2b799625b6a8e552d1220b141d8f8bdb89184a3c68eb9a373e3630a7583b4e7d3557b4c4c7f2da7f9ba921820f1b104a436b867c063fb6b5e2f9d94ab0d86b49eb1f21d0bfc464d64f59bc3ba13c4f0e27389a96d407d9418a8c44a18bff502a73fa7474661178688fc1307132fb716ce833f331310d56df8eaea498d2e5a3aec23e56ec4f894d498e3406b6d7ca4a40b0f7d94b3a6e480c0613d4110c4b564a08512034c2575ec647c3b026bd0c207fe06afa7ca33bbe0dd8c5356015787907fc1597ddb82c3379743c404bf10a3bb697b7d857e567c7283475829f04aae607d65686eec007de9b8d2d0932c6913322999ec183ff105f6c5053753328455c5c39d8144f06d927b1d53f43d85e196da3bbeb74ee3c2858d257ce3579c41e5692542c5114be6de3cf50a9d6f4ef32f183e1dd8d2b418143b56ad50ace4f88e6e58399b530c6772f38e695875229fe90c6b8a84ee21a873f59c15ed910511dc89ed1ae6046a0b1792ceabd3d943a66f10f4a137895c59ad31cc23739b1a985596fd620fd31600b8943415064d7626e8322547a149a10a3fdd949c1cce941a191ca799651cb906e69119a8a08ed725f418617bd8b7360004001f773b93c05ba6fb811d3157583e23be0e219e64a72861c21e7bf730dbe8f76db78eb2b49beffa08c2449fc24503f152b8e98d7ad2cb5e09b2b204355ffd7853315051afc352e1a492e5b5fed3d45f0ae76d7c2669e60ae4c00b92bc3ade5a1439417103ce1cb310ccba7418d2569447b0d8ff21132a8a97a570ca55b9ae1f03b0aadc16746a42c086e7fb07c68d2eda816ee239ea9887c5fa40e5e7194dcb75ec29041c7f2aa38cc405ede058affea008bdc62e6afdcf941b71bdad9224ae8b7531b6495cf88d43656fee83088901a7eb5e3c948ccc9cfaccb5c9d036126b17c3d2aab25afcdb86e31764ad46e857a3d33060d6e2580bfb8f3042d25c369afe3adef3b84ecd289b5809c21f194d868cfc337f4fc27871757ec15045672dac1ba9f96a2c9201634ee603e9bb2970bc9050f7f91f303f93061840d852692a83b2b3f62b9d3e872ffe8fc4b6515bd4eaddcf6d53bc7f8559e0ab418d7f318eb43d963bc47e7df17789a61a886d3efd16f158fd46311371d81c8b493ff26e4ec8188e0801ef6cc28a08fd0ddfb6563698d8d6813d0980889d6b5973ff3af9cc83f3e0b9c115bd3f5e4b637c84d655abc8e8c8e16689fd1605df4a7b53d0a2de3d231ceb14626f5067f5d7e08309937061a49513a1043c8c10cc603e42a29c1dc557543b0b208c1b3af4346708d638a905f9811c47cd514309461068068556b9ddf4b8c0c165e8bee2f8157634addd74c869aa0db7365ebddd1c3d8f921f78c77e53b070cf9ae7180f6fd88e94674520c1e131af46e0527a338896874c8bc6684e512d6dc68e3a495b3b9f7d5c91584fbc9d5a538503c332a09179677cec515fd40a550b0014172681dafddd99e5be554dc35e349f6ba7dfb496059e4b6455366bcd7f0ab1e1200e7a9b602a0c85f660a181011b83d4bacacb3dbb01433eb4ce8aca282830005b612d30510f72d30f58d66b615ddf2bfbc7241f57f538beb5afc002293ae435a6b126d199bf9425263725edfc1b0d278dfae70c65a1363cb8b374114e722a166e7f4c97b35b45082fcaf847c53775f5b914e035351a4f2124031ef2238538c7f7f4cfcd4bfe485e35545ae6b17fee2c63b853fe6ad323c6d18cff3e9b6056132eec01438c2b139aa9796e69b2ed045c668413db24a25eca7ab13785b3dc61a0dd2e0117a0fa3593731e0c21818d44a8e74645eb6be250b9c8f34ef67b4d0bd3d0ebcef99a3b86953ad8ebd13ed45ac38c899b009b4e2201126a71f7bcc960326d0b2d9a99ee5974d412c6bcc5792ae120b41493db397d75b0791254772db8c25ceac85b0171539e129fac5a387be4b086b442d972de8fa362c3956ca726dc5c1d7351ca39e06277bccba018ff6f6bf7a77eceb21bd9b20374ef4fb4f6fe0b7aea1703e41a45588c72518b4b938c7baa9f0ceba60ab3963ed5b3bed900874c3234175f43b1b9f0a4cdedece7d38a0f36ddfcd41a499fceeb3d727876d2c5e25e7ccbad2bdeedddb637323194513c64939f3fb86182cecdafb86ed0c3a5bd0d9077a07947432d7896737fabb9a1fba9b3e4e675117fa6808c4d5112c5e143f32d66c93e5b619f8f2e2d905df80433836a91ae080b882c5bff5db82c9c410d6e42dc9bf8738e2fb66821d44ba2a602a9b3ada193c322e67a20dc2263f3298b07642b7cf0b31038cad5c46d176ca7fc307bf4fc7b42c27d5ea5fde7a90265388ffcd6078f3fb60bc44df8af87f4a14692833cd10a57688444b7ad27992022b1518c0622192fdc285fa863157151cf79d2c644b555bee65d830d5bfd1bb473c38cd60ccd3c3db57c86a597ab1e2037dfb348fa5836b638e978a5548def1521b8bfb5e804ce6edaddc4f522625f7592dfed6f5963d713cd1429966aab4480077c53d312ecd66cbdc7d7fd7ab0b696fa1ab2c6a557d5ae61934f9c9a9272ce3edac3a0a8b3b4c010c805b5e0a737c444d06f57e5b9c7a92f846661ba2ccff8585a47b25692f294379bc70478cb22de894569d4c6ef771d15edfa3019595aff7e08a287e1aeb934be5879ed3ee843e5816e33eeab70675b9661f193c9136393bab3d00167c3f6167e4913987de9b8e8d6c0fc1c8671082b8dd80cd7b86aa643bd0179ff8e696ca346c2f918ca73e45e994c9271411ab5f5685a9d10227569e97e883b2eb00d11563039fc95ac0857542f5773138b4ea6ae1b4420e9692d18c546133cd0bc4c2370969b603570f4a5ee858db06634b6b6ea488ce038e5721756739d59d7875c48f25825a09ce7f5f6d70c8226f2dffd92e11f5306acb0398ab61e474de7de049b866852381c89867946584d10a19d7ccefd60deb34228591e0989262eeb2293e4a6960c3b9d94ecc12135bdede7f10ff47463044b8073498ec89c97d6e0753f37bb4a8e846eb0c412fbfb28bb866e56c039da3fe4c63f50ae2529759b9ab8eacbc9fb258f1f23260b67c63d1d61af6fce7e43d9497051aa85f9f54502d8b87ee5965b43412eab040c4d4567b526a1222d8e8ac0e2d53b2e670deaa1b1bdee31cec62e332f627d3ae211e6af04302b2c50d4d48fdef97c560abc8dbf54491a1b8d5cb9df911998f021b90cd89778a2c6a38cf5db520e5c0915c8a0d619b6894ee59312a835434d56c3e7d045639e8ddc1a2e50dc33fb9903a96a9b985932c01b3a475ea6f89e58cf59c195d290484014bbd470e1f78caa789c9afe1802f8a56ceaa8db24d4d6a588ceb0e97796874ffaa7b2bbc0a2a649d86cc89d889000d3c77cb13c3b01c63129e089e24f5e7b384bee994e992a1e00229350d5bfc8643a2217d001e0f5c56e7615f2f598cc80548093fa4e61874a4bf31e64c20ef074f4a104051a0bddc23c74890e3f5e1ac8c8309cfb8455745a8806048b56e8ee96d45a56ece604ad21be7e13e87b1d905c2e568d64271fc6f975e1cd9cc4b6b06bf32143ce1ee7275ce2353fe17c89dcdabb22461b35c6b749833f33debb85d826e20e6ae94eeef31d814068af1532485bd03e434dedb0b858b9b73f426f0c7414ac9e324b674c71e004f157d9c10eace48066ca568b7e8f62cb70959fd4d2a34c946385526fd116688150672227ae7e36af5b563335bb5db948bcde424e434f1de397ec00d75b5c8a9b40af784bc47b6ffe65a89c0542e7b2ffbbdfffd130363c80d4d157eb86b6b4a47a68eb9ee66066e0092077afb5221d1e8c809e192384ee143927290789ff1b360d155421b0f5e184e815670a668b510ccb3c25a6153f8f08ffebe68908c4241f9b01ffb3126f5ced9494312bcacbed716ca43c5d16b84946f91f888ab63eea1f814994dae21860dac2a086a767587906682e34267f629459a1b9a15f77f5634e908c794670ac7a480f9df4a931c32e4be84e5250c6f0378d9f0471801d1236929cc925f1743c9f41fc7207da4645ee370eade4991658c6000ec384361d982852ed2aa2786b4a451338ef7a2dc2df7372961807f84164078494ef69db6bffab100ba3ae88b1e1dcf9fec63cdc0b57f68d45aa4a11a4f63b8b39ac0643fee14082597c75d1617877513ba84238e212602d41146603a0df06d3cbb2fb9c838bc8a5ed3c6a16afabd3e8bbebe2eaaa3049f3a2d6b2dcb1b1c8a9009a51a30c2dbc7aed541f75049178dbf6993980b427c546b2ecd7bf7c76aa7f05649511208f3963865f99d52a970cc9daf46dea11008add3ee50ba2ca570c01dfc8ba91852994ed90776d9341472ac4f59c3ef7d3d17d69521be262340780d59ffb83f8575282ad5fd1ca70e1231f8d1a032b914716881760388ddca2e030c184ca91ef02a2282376ef2a6d75f014e9462af94aed661c6786cce52851922d547d213e6820df61b4da452d3a419c3546c8e1dc1993c3b962504e13bbfcc68d7b2c492e884eeb5be7e41f6c59bd8977a256903785d260adb017f9504774ad0ddbd68d17134f4a94b194633c1582d78e622afee7b7f93dd38484308aad65cc8f6bd5bcc33e4734cb8aa31b21765821af2d529c9f948bbf2c7759ec264fac40114cac4d84c03669cc3faf9d8abd20e256b3a07d134a343daec5e42578bd5918ac46f104fbf7ea2d3798f29207bc97acdbf51747d3211dd636602ab61d83d2d1502ab0db2647bbf7f0186a52cef5d291f51469d1274ec344c4ef519c2ee1292a6a18aca28ee2d031360a60f51270f402bbf3610a72f8477ba99152aa16aad00a49b5a3e889703f50b4acf3001256d4cbdb3cf171cb6f2c4f2b4a032d96f42b7829d44a3a62f92cc955552b763f88f79c078aee332374ce3d236a95c8b983b284898665dac6541efbb29adab971bc92bac045cb50bad9f3c2bc2ac99c5c7e7a8a5c225193d952b7a44ddf2833b83c8e42c68d311198ce963dc11135ed2dc56d94ade8d959df9e75cb4186f4cfbe87c823914cf4ef8666d397960d5416a12b9c26b622659c1997d6fce39c024e3c28692d016731d3eea5273320da6ea56fb96d6055db8f69eadf4eda5023b5492b21144aac46c4ea5bdb6e803ea30441114b6b7c11fb79fee347defca84b4eeb71597935f4440d1a8c9fe35b0f74ef6c98dcc701049abc1c9cf822dc693a08c03e57f1fbcf3f52e2e05c42bdb907c7d662475e54a07a38746a23c2aefd8a1bcd9d77184a0644d876cca910b5e1b68db952e268285d8c547f222517f7619959c0362e73c66ed0b05f25b4bb3a623967c0e1c24ebf0e3e6709b8dbb95477976ff7d79d1bafd025042dad6d1670079e2e3ceeb5031cbdf2d75f9ae7baf225a531a247eb4ee536047911deb2fe237c597f44163334d6fe68da0b03d5b167482b71902b24022b88e0204d5312d4aa8167cc8dfca1f4f898d624f41135d9f3bec4f68f1cc7db1d8da7782ffe759f7b52aa10db99d7622597599448aa92453bc0ed408eff312dc130b1788c4917858cc28d71c6a9ca71257be548081176cd1af30107f7293088a2f61ce18f3dbace583d93f02644112941267f1a79299c5433d5245996cb35d95369094c5fc32d68", 0x1000}], 0x4, &(0x7f0000001a00)=[{0xac, 0x110, 0x2, "da46bf41aba02947e4231cbe97c7786aa1c188b344706a0639bd7c12b839cf650570e656397a17b58e29fcffaf3279e42be49e7ac405ec021645841b5f6627da376cc532146dc4e6510ba7ac26fad46924dd5cbb6dea25f970d76b9cde3f65fcadb1bd5712f101a9edf51bc9b894e5f6986e9212c8cd0fa5ae5f4dd974faa00ab7228aa99b85c98be4ba85cae8bdc3a7729b05f3b223548a5c89066600"}, {0x80, 0x104, 0xb619, "8b481baf7e29db491403e2b99b58e4e4954d92231f136829c4dbadee12f8738dadb836ae39aaedf562a776b09690de7e8685cb6f8c941f7cf2dd1c47585bd588ea697655971d93d6d9666ae137b1ea4ee2082fa7a12a10d1eb3a97a329fc96c770cc72063cf8e9baafae437df148e9bdd8db"}, {0x10, 0x10f, 0x2, '\b'}, {0xd0, 0x10d, 0x2, "750a2ea434741a563b93286eba48627d044c1c895c922c10378f182253ec67502c0eaf97fc2b4820eb608576b67ba41998c0dea71cfb04f4213710ea2517f4b45068fc3383d371709e4b0f0501099f6b2a557f8451072167b67bbec0b8e5893acda7a1ad5c2a82a47d9998403695f90ea36f938d7f77df0acc97bd39808a90019737f95c4c964bf061e67107baa52f06bcc7e0c404e2a1a5f8c994d0f551d84fe30a914ab1a1ca6b882c68b1ebf1c43e8bb41d86f6b584410e07e6ca8ccd76f3aa"}, {0xa8, 0x115, 0xd8c, "c76f52462c2eec9e42b2e362154e787c1079dee9d357ecebc2a6d77406933f059e6719ee8ef3849eebb7b893f19e288817481d35eb45f7e3d044f9d19bc97338f1943848bec231779504f8291f87afcf6fc3ebc9ea7d4f5acef316af354f2a6d2ec3a3b3c2ace939bb26e6aa52553df16056cb69f9911d67239f2faa427a64fce3b54c569c82ea8aca07f6a1816fda9be3b82ffb9f2240f1d525a96f"}, {0x68, 0x0, 0x8, "f653ae20baf37e7adb2f6cbedddcb87e55144c728c39ef8d53c215e17b4288cf7883cf87b4d5b51b14ba38ff82ab5c1a533e6b7b1b63339e905c326e6472de23315b630e464e9a14ba84864e83f882ee092c445b2fd8ee9ef17e77"}, {0x30, 0x10b, 0x2, "01f4f3dd77ea5993715a9457b17af0a1f65b88db253546281793c14c4e9338566e04"}, {0x7c, 0x110, 0x0, "777b08ff11efc72712f18d9eb5527e1bd1493b26308286185641203bd972cf931cb22da82126b54e209ce2c927c2d438fe09127107f81e0d024962823efbcca77aad3def43ac5b510ce5faecdd8bb809cb95bf61a4b5711f9970fd0c88e9c4f1a4d22c84faee9ef8362d10c8668bb7"}, {0x58, 0x84, 0x6, "7a1c78e94c4ed2accf523952b45d22f72b70b3fe13c9697a2c4126dca2ebc1d69686521a8e98d57a8d6ff2de2a349f66c25a6639261bdb0b23f4b5e80ad54bed86b513e20b776468f05d1d"}], 0x420}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) r5 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000480)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff}) syz_usb_connect$uac1(0x1, 0xbe, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3042, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac, 0x3, 0x1, 0x8, 0xe0, 0x5d, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x1c}, [@processing_unit={0xa, 0x24, 0x7, 0x5, 0x4, 0x5, "cb3652"}, @extension_unit={0x8, 0x24, 0x8, 0x6, 0x0, 0x9, '%'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xb, 0x7, 0x1002}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xbe, 0x1, 0x8, 0x51, ']kv'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x1, 0x1, 0x9, 0x9, "bf"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xa, 0x81, 0x5, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x7, 0x3, {0x7, 0x25, 0x1, 0x0, 0x86, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x2, 0x5}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x5, 0x3, 0x4, 0x5, "3f1b8c550a8bec"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xb, 0xa, 0x7f, {0x7, 0x25, 0x1, 0xc, 0xf2, 0x3}}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0xff, 0x6, 0x9, 0x40, 0x3}, 0xd2, &(0x7f0000000740)={0x5, 0xf, 0xd2, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x101, 0xff00, 0x3, [0x3f00]}, @generic={0x6b, 0x10, 0x2, "d756f857929d8d4f2f13cf1de0bfc4bb1ecc42ee0829c740e0f022129ad141e1b6a7248b04bbb6237eafd22b04fabd73ff23708d469aa9ccb4846acd13637e3cd271791cedcc291ab339b56b3de10844f50f896dafbf1ba000"/104}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x3, 0xff08, 0x7, [0x30, 0xffc000, 0xff000f, 0x3f30, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "8c4d9a134d4b5900"}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "f8291b5937205d3e948fcf8a082a33dc"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x5, 0x6, 0x9}]}, 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc04}}, {0xac, &(0x7f00000005c0)=ANY=[@ANYBLOB="ac0387917e51cec3b5b2bed2697cb364bef76923bb7f39d8ff90c753dd1d9ea55be0d1c531bdff6fcb0741b81e5166f3cb5910c49da563c9bb9b74c6665d56f989b4c6381013095691e80c474ea069fcf42ec6b93afe86b8ff00000002008c11a1795342888c90ae5e931f5a3b9853adb348207ccaa8f1c04c013b69d3d171f1abd43cd49d8e50c3ade9478187fd769fa66a26e8e93f38951bcb3ba3cec32837adb2e7fdbf85e08a254e9c44"]}, {0x5d, &(0x7f0000000400)=ANY=[@ANYBLOB="5d032fa91783f9cca30e08001a6214d2747785cdac44dd4eaf1339b84cae6bf27989ad1cb1fe8065e8252e69c1a5464c06c3e840caefd7fd3076140d57cf0500685805909dd3d35f788e9b64e0db4cb34bf6d83af2fe3970b5fc6f299f8dc7ffb2b044fb7337405777e222216a087b0f"]}]}) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010007081000418e000fff04fcff", 0x58}], 0x1) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r7, 0x1000006) fcntl$addseals(r7, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r6, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{r7, 0x0, 0x4000, 0x8000}, {0xffffffffffffffff, 0x0, 0x1000}]}) ioctl$SG_BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000580)={'\x00', 0x1, 0xdd37, 0x80, 0xa3, 0x81}) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x0) 3.614872613s ago: executing program 4 (id=133): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r4], 0x48}}, 0x0) 3.377208882s ago: executing program 2 (id=135): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40) r2 = dup(r1) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[@ANYBLOB="3b0b000000000000c910ff020000000000000000000000000001074800000001100208000000000000000000fc00000000000000be000000000000000600000000000000010000000000000000000020000000000600000000000000030000000000000000000020"], 0x68) dup2(r1, r2) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) socket$pptp(0x18, 0x1, 0x2) 3.358057158s ago: executing program 4 (id=136): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a40)}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)="11115c52657e53e3fc2d417b24cdd566de7d6546aeb519a48cb1b62c0f52ad569b0f98a048876c71f0e0a592f514321872b8082cd1a7ce23607ff80fae6015230c98222de1b7d797dcb57b24eacbb094296ca10fb834fb9a14ce640ca2000040a5aa22ad573781b7a7c8facf95aa748e905b9a35d335b895840417f0e92f53c3fb2c18aed9dbcaa33f8b2d52f4dcd9355589af2fad79beebf8222e6f53e1f351f37dd13d74b6c58d49a9e85659c7f321e326b97e25dd15ed0a0bf0fcd5d57ae2f014478ba673", 0xc6}], 0x1, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x108}}, {{&(0x7f0000000800)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000880)="1d84fb4acb86230e5984e38d3ab48c3c2fa8dfd9492f62514814406c2fd1cecb1bee3ca6858b1ef2e9ac95d3ce0eba4a368773f74659aa387d84b11c7113395f31297602c565081b720f82f500108201792f6c", 0x53}, {&(0x7f0000000900)}], 0x2}}], 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a31000000000800054000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = syz_open_dev$audion(&(0x7f00000000c0), 0xff, 0x20000) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x84, 0x2b, 0x800, 0x70bd2a, 0x25dfdbfb, {0x1c}, [@generic="9375aef2e007767fc902a64c76fa573c972795f074624dd10a33866bc34b0dceb24c1f8a7fe1337587fbc7ebde0f978d8123019fae492602ad7418f7479987acdb843ef10b2a7e645c4f9bf297ad6b1823bdf94f78800557eeb567cf9856d09d30f433c967da7af15dfa09532b890a"]}, 0x84}, 0x1, 0x0, 0x0, 0x40001}, 0x2000c001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r2, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb50a245d5cde0080045000028000000000002907800000000ff00008100010000000000000000"], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x301000, 0x0) ioctl$KVM_GET_API_VERSION(r4, 0x541b, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000200)={&(0x7f00000001c0)=[{0xd, 0x0, 0x0, 0x0}, {0x5, 0x2201, 0x0, 0x0}], 0x2}) 3.136500063s ago: executing program 2 (id=138): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), r1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) add_key(&(0x7f0000000080)='big_key\x00', 0x0, &(0x7f00000000c0)="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", 0x581, 0xfffffffffffffffb) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x80, 0x0, 0xfffffffd, 0x26, 0x0, 0x1}) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000880)=@filter={'filter\x00', 0xe, 0x5, 0x766, [0x0, 0x80000100, 0x800001f6, 0x80000492], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x2, 0x18, 'pimreg1\x00', 'xfrm0\x00', 'pimreg1\x00', 'vlan1\x00', @multicast, [0xff, 0xff, 0x0, 0xff, 0xff], @remote, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0x9e, 0x9e, 0xc6, [@mac={{'mac\x00', 0x0, 0xc}, {{@broadcast, 0x1}}}], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x4, {{0x3}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0x9, 0x35, 0x9200, 'bridge0\x00', 'ip6tnl0\x00', 'vlan0\x00', 'wlan1\x00', @remote, [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0xf6, 0xf6, 0x13e, [@mac={{'mac\x00', 0x0, 0xc}, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}}}, @arp={{'arp\x00', 0x0, 0x34}, {{0x5, 0x1, 0x1, @remote, 0xffffffff, @empty, 0x100ffff01, @link_local, [0x0, 0xff, 0xff, 0xff, 0xff], @remote, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0x0, 0xe1}}}], [], @common=@log={'log\x00', 0x24, {{0xfb, "6722d790ea5845933330d5a12caee1c73cc666d403f9bb0512df74557cfd", 0x1}}}}, {0x3, 0x46, 0x88a8, 'macvlan0\x00', 'dummy0\x00', 'batadv_slave_1\x00', '\x00', @broadcast, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, [0x61001b6c1c7d8c32, 0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xe2, 0x12e, [], [@common=@CLASSIFY={'CLASSIFY\x00', 0x4}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x4, {0x5}}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x1, 'syz0\x00', {0xa}}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x1b, 0x1, 0x10, 'batadv0\x00', 'gre0\x00', 'vxcan1\x00', 'veth0_to_batadv\x00', @random="f92b93883d33", [0xff, 0xff, 0xff, 0xff], @remote, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xca, 0x11a, 0x142, [@realm={{'realm\x00', 0x0, 0xc}, {{0x2, 0x7}}}, @cpu={{'cpu\x00', 0x0, 0x8}, {{0x4}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x4, {{0x2e00}}}, @common=@AUDIT={'AUDIT\x00', 0x4, {{0x1}}}], @common=@STANDARD={'\x00', 0x4, {0xfffffffffffffffe}}}, {0x9, 0x1, 0x8917, 'erspan0\x00', 'pimreg\x00', 'veth0_to_batadv\x00', 'rose0\x00', @broadcast, [0x0, 0x0, 0xff, 0x101], @multicast, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x192, 0x206, 0x232, [@comment={{'comment\x00', 0x0, 0x100}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x4, {{0x4}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x9, 'syz1\x00', {0x65e}}}}], @common=@mark={'mark\x00', 0x8, {{0xfffffff0, 0xffffffffffffffff}}}}]}]}, 0x7b6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x140}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r6, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 1.98830423s ago: executing program 3 (id=143): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)=@newtaction={0x18, 0x76, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000000}, 0x8080) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x3, 0x5, 0x4, 0x5, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffffb, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8b, 0x2, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xfb, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x1, 0x4, 0x8000, 0x809, 0x400, 0x5, 0x6, 0x7, 0xfffffffd, 0x400005, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x6, 0x9, 0x8, 0x801, 0x6, 0x0, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x1, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xa, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x5, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0x10, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x920000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x83, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x5, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x0, 0x200, 0xffbf2441, 0xfff]}, 0x45c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050028bd7000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="0c002380050007"], 0x28}}, 0x0) 1.987247143s ago: executing program 1 (id=144): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x514}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000040)={0x8000}, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000280)={@val={0x0, 0x9000}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfffffffffffffd65, 0x4000, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x600, 0x0, 0x4}}}}}, 0x4e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x9, 0x3a, '-', 0x3a, '\xc8rF\xcf$,%\x9f7M\xef,', 0x3a, './cgroup', 0x3a, [0x50]}, 0x36) 1.897545919s ago: executing program 4 (id=145): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000407d1e383100000000000109022400010000100309040002fe0300000009210000020122050009058103"], 0x0) (async) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000407d1e383100000000000109022400010000100309040002fe0300000009210000020122050009058103"], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) (async) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x7, "56dbb4bc"}]}}, 0x0}, 0x0) 1.704641546s ago: executing program 1 (id=146): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040001}, 0x10) (fail_nth: 4) 1.611283762s ago: executing program 1 (id=147): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x800}}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x9) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000340)={0x1, 0x1fd, 0x7f, 0x0, 0x11}) 1.280367353s ago: executing program 1 (id=148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0xa, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x44) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 1.074610131s ago: executing program 1 (id=149): syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000002f40)={0x2020}, 0x2020) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) stat(&(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)) 896.831711ms ago: executing program 0 (id=150): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000007c0)=[@in6={0xa, 0x4e20, 0x0, @loopback, 0x4b26e94}, @in={0x2, 0x4e20, @loopback}], 0x2c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000900)=[@in6={0xa, 0x4e20, 0x7fd, @loopback}, @in={0x2, 0x4e20, @private=0xa010102}]}, &(0x7f0000000000)=0x10) (fail_nth: 4) 458.207524ms ago: executing program 3 (id=151): r0 = socket(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000380)={0x20, 0x15, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)={0x20, 0x14, 0x4, "00bd24ba"}, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1d5) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0xe, 0x0, &(0x7f0000019100)) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200100, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1, 0x100004, 0x81) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'rose0\x00'}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) recvmmsg$unix(r8, &(0x7f0000007480)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000000900)=[{&(0x7f0000000680)=""/150, 0x96}, {&(0x7f0000000780)=""/192, 0xc0}, {&(0x7f0000000840)=""/189, 0xbd}], 0x3}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000004300)=[{&(0x7f00000009c0)=""/67, 0x43}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/223, 0xdf}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/36, 0x24}], 0x5, &(0x7f0000004340)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x90}}, {{&(0x7f0000004400)=@abs, 0x6e, &(0x7f0000004600)=[{&(0x7f0000004480)=""/234, 0xea}, {&(0x7f0000004580)=""/105, 0x69}], 0x2}}, {{&(0x7f0000004640)=@abs, 0x6e, &(0x7f0000005900)=[{&(0x7f00000046c0)=""/93, 0x5d}, {&(0x7f0000004740)=""/160, 0xa0}, {&(0x7f0000004800)=""/83, 0x53}, {&(0x7f0000004880)=""/4096, 0x1000}, {&(0x7f0000005880)=""/5, 0x5}, {&(0x7f00000058c0)=""/59, 0x3b}], 0x6, &(0x7f0000005940)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000059c0), 0x6e, &(0x7f0000006e80)=[{&(0x7f0000005a40)=""/72, 0x48}, {&(0x7f0000005ac0)=""/126, 0x7e}, {&(0x7f0000005b40)=""/13, 0xd}, {&(0x7f0000005b80)=""/201, 0xc9}, {&(0x7f0000005c80)=""/25, 0x19}, {&(0x7f0000005cc0)=""/167, 0xa7}, {&(0x7f0000005d80)=""/22, 0x16}, {&(0x7f0000005dc0)=""/4096, 0x1000}, {&(0x7f0000006dc0)=""/91, 0x5b}, {&(0x7f0000006e40)=""/59, 0x3b}], 0xa}}, {{&(0x7f0000006f00), 0x6e, &(0x7f0000007400)=[{&(0x7f0000006f80)=""/193, 0xc1}, {&(0x7f0000007080)=""/191, 0xbf}, {&(0x7f0000007140)=""/115, 0x73}, {&(0x7f00000071c0)=""/211, 0xd3}, {&(0x7f00000072c0)=""/234, 0xea}, {&(0x7f00000073c0)=""/11, 0xb}], 0x6, &(0x7f0000007440)}}], 0x6, 0x40000002, &(0x7f0000007540)={0x77359400}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x38, 0x28, 0x800, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xf}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 392.010702ms ago: executing program 0 (id=152): syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 391.159332ms ago: executing program 2 (id=153): syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) (fail_nth: 2) 390.867791ms ago: executing program 4 (id=154): r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@ipv6_newroute={0x30, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @multicast2}}, @RTA_PREF={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) 295.658556ms ago: executing program 4 (id=155): socket(0x16, 0x4, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x449) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) utimensat(r1, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) sendmsg$nl_route(r2, 0x0, 0x48000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r6, 0x7b1, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) bind$netlink(r8, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7ce", 0x6c}], 0x1}, 0x60044084) 224.540205ms ago: executing program 2 (id=156): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040001}, 0x10) 193.740914ms ago: executing program 0 (id=157): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) fsopen(0x0, 0x1) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)=0x7) syz_open_dev$usbmon(&(0x7f0000000200), 0x8, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/123, 0x7b}], 0x1, 0x67, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000240)={r4, 0x1, &(0x7f0000000140)=[0xa], &(0x7f0000000180)=[0x7, 0x0, 0x4ad, 0x3, 0x2, 0x1, 0x8], &(0x7f00000001c0)=[0x7f, 0x4, 0x7, 0x7, 0x2]}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@hyper, 0x1}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b69b26200444040000000000000092eaef", 0x13) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000600)="8b4efad9459f08282d662cbb788a96bffed9d0bacd80657f3cac600356fe667d18f545a3b175a706442b241be0a2567c90703acce7d9a42940c375c89c1bb489f90616095f98a44bbdc43262ebb02f06c2203b51c10ed0dc402d9edeaf264f445dac81ee8ff173582bb39e1ed1fbe15dc78029f2f7251fb4a913a7b44102935204dd07d88b7cf62bc026f175d50f6244cff261aa08d00e8280396cf056fe22da23925ea986992276abcfd3ba5f78", 0xae}], 0x1, 0x0, 0x0, 0x4051}], 0x1, 0x40800) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f00000000c0)={{@hyper, 0x1}, 0x1, 0x2}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) 153.00022ms ago: executing program 1 (id=158): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0xc008aeba, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) 55.047467ms ago: executing program 4 (id=159): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x1, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0xfff5, 0xfff1}, {0xffff, 0x2}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x10001}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_getnetconf={0x5c, 0x52, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xac}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x1}, @NETCONFA_FORWARDING={0x8, 0x2, 0x10001}, @NETCONFA_IFINDEX={0x8, 0x1, r2}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x3ff}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xff}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x6}, @NETCONFA_IFINDEX={0x8, 0x1, r2}, @NETCONFA_IFINDEX={0x8, 0x1, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000114) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0x29bc8c3c67235b19, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0xf}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4018848}, 0x20004804) 0s ago: executing program 2 (id=160): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) (fail_nth: 4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.23' (ED25519) to the list of known hosts. [ 72.594214][ T5617] cgroup: Unknown subsys name 'net' [ 72.727591][ T5617] cgroup: Unknown subsys name 'cpuset' [ 72.736331][ T5617] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.072200][ T5617] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.736801][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.745770][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.755183][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.762868][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.773242][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.790455][ T5639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.798847][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.806898][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.817267][ T5639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.818318][ T5640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.826697][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.833442][ T5640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.839473][ T5639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.854837][ T5645] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.857230][ T5644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.863388][ T5645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.870509][ T5644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.885006][ T5644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.885006][ T5645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.885657][ T5645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.908231][ T5645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.916768][ T5645] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.924527][ T5645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.933050][ T5645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.945902][ T4948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.912664][ T5646] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.920289][ T5646] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.927853][ T5646] bridge_slave_0: entered allmulticast mode [ 78.934921][ T5646] bridge_slave_0: entered promiscuous mode [ 78.970146][ T5646] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.977559][ T5646] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.985544][ T5646] bridge_slave_1: entered allmulticast mode [ 78.993337][ T5646] bridge_slave_1: entered promiscuous mode [ 79.008729][ T5650] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.015957][ T5650] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.023085][ T5650] bridge_slave_0: entered allmulticast mode [ 79.030424][ T5650] bridge_slave_0: entered promiscuous mode [ 79.058167][ T5648] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.065467][ T5648] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.072572][ T5648] bridge_slave_0: entered allmulticast mode [ 79.079901][ T5648] bridge_slave_0: entered promiscuous mode [ 79.086869][ T5650] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.094046][ T5650] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.101169][ T5650] bridge_slave_1: entered allmulticast mode [ 79.108148][ T5650] bridge_slave_1: entered promiscuous mode [ 79.139870][ T5648] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.147123][ T5648] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.154591][ T5648] bridge_slave_1: entered allmulticast mode [ 79.161428][ T5648] bridge_slave_1: entered promiscuous mode [ 79.186306][ T5651] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.193476][ T5651] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.200737][ T5651] bridge_slave_0: entered allmulticast mode [ 79.207679][ T5651] bridge_slave_0: entered promiscuous mode [ 79.217778][ T5646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.252993][ T5651] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.260294][ T5651] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.267509][ T5651] bridge_slave_1: entered allmulticast mode [ 79.274437][ T5651] bridge_slave_1: entered promiscuous mode [ 79.283317][ T5646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.302737][ T5650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.312099][ T5649] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.319651][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.327285][ T5649] bridge_slave_0: entered allmulticast mode [ 79.334494][ T5649] bridge_slave_0: entered promiscuous mode [ 79.361529][ T5648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.372908][ T5650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.382164][ T5649] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.389505][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.396801][ T5649] bridge_slave_1: entered allmulticast mode [ 79.403847][ T5649] bridge_slave_1: entered promiscuous mode [ 79.430515][ T5648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.458001][ T5651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.471375][ T5646] team0: Port device team_slave_0 added [ 79.505935][ T5651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.528601][ T5646] team0: Port device team_slave_1 added [ 79.544787][ T5650] team0: Port device team_slave_0 added [ 79.552792][ T5649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.580753][ T5648] team0: Port device team_slave_0 added [ 79.589038][ T5648] team0: Port device team_slave_1 added [ 79.596423][ T5650] team0: Port device team_slave_1 added [ 79.603845][ T5649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.614586][ T5651] team0: Port device team_slave_0 added [ 79.658217][ T5651] team0: Port device team_slave_1 added [ 79.664788][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.671750][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.698615][ T5646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.748607][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.755855][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.782368][ T5646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.794199][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.801143][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.827575][ T5648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.839382][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.846382][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.872787][ T5650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.886417][ T5649] team0: Port device team_slave_0 added [ 79.904333][ T4948] Bluetooth: hci4: command tx timeout [ 79.907641][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.916812][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.943015][ T5648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.955069][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.962014][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.988510][ T4948] Bluetooth: hci3: command tx timeout [ 79.988584][ T5650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.994799][ T5634] Bluetooth: hci2: command tx timeout [ 80.005041][ T50] Bluetooth: hci0: command tx timeout [ 80.010808][ T5645] Bluetooth: hci1: command tx timeout [ 80.026185][ T5649] team0: Port device team_slave_1 added [ 80.032396][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.039592][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.065542][ T5651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.078020][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.085013][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.110926][ T5651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.209405][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.216733][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.242684][ T5649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.259887][ T5646] hsr_slave_0: entered promiscuous mode [ 80.266313][ T5646] hsr_slave_1: entered promiscuous mode [ 80.286149][ T5650] hsr_slave_0: entered promiscuous mode [ 80.292377][ T5650] hsr_slave_1: entered promiscuous mode [ 80.298676][ T5650] debugfs: 'hsr0' already exists in 'hsr' [ 80.304492][ T5650] Cannot create hsr debugfs directory [ 80.319822][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.326894][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.353076][ T5649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.374154][ T5648] hsr_slave_0: entered promiscuous mode [ 80.380740][ T5648] hsr_slave_1: entered promiscuous mode [ 80.387383][ T5648] debugfs: 'hsr0' already exists in 'hsr' [ 80.393132][ T5648] Cannot create hsr debugfs directory [ 80.450961][ T5651] hsr_slave_0: entered promiscuous mode [ 80.457284][ T5651] hsr_slave_1: entered promiscuous mode [ 80.463255][ T5651] debugfs: 'hsr0' already exists in 'hsr' [ 80.469050][ T5651] Cannot create hsr debugfs directory [ 80.591911][ T5649] hsr_slave_0: entered promiscuous mode [ 80.598690][ T5649] hsr_slave_1: entered promiscuous mode [ 80.604935][ T5649] debugfs: 'hsr0' already exists in 'hsr' [ 80.610664][ T5649] Cannot create hsr debugfs directory [ 81.012537][ T5648] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.028417][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.036903][ T5648] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.046447][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.054630][ T5648] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.065452][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.073390][ T5648] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.084461][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.166119][ T5646] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.177058][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.188844][ T5646] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.197589][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.205737][ T5646] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.215112][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.228083][ T5646] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.239032][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.320095][ T5650] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.332338][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.349701][ T5650] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.360068][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.368903][ T5650] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.378778][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.399715][ T5650] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.408800][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.499204][ T5648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.541865][ T5651] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.556398][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.566038][ T5651] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.576981][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.611690][ T5651] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.629727][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.638334][ T5651] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.649738][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.725974][ T5648] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.781239][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.788701][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.808791][ T5649] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.818793][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.827354][ T5649] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.836892][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.855189][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.862358][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.870278][ T5649] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.880268][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.896303][ T5649] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.906918][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.934188][ T5646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.994001][ T5634] Bluetooth: hci4: command tx timeout [ 82.015668][ T5650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.025266][ T5646] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.039617][ T5648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.063949][ T5634] Bluetooth: hci2: command tx timeout [ 82.064261][ T5645] Bluetooth: hci1: command tx timeout [ 82.069417][ T4948] Bluetooth: hci3: command tx timeout [ 82.074926][ T50] Bluetooth: hci0: command tx timeout [ 82.097088][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.104245][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.125564][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.132709][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.165763][ T5650] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.206075][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.213184][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.231628][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.238772][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.263480][ T5648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.278919][ T5651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.345023][ T5651] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.372373][ T5649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.388930][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.396077][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.424321][ T5649] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.439583][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.446751][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.467949][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.475078][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.493451][ T5646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.513294][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.520439][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.565098][ T5648] veth0_vlan: entered promiscuous mode [ 82.620665][ T5648] veth1_vlan: entered promiscuous mode [ 82.640687][ T5650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.709046][ T5646] veth0_vlan: entered promiscuous mode [ 82.746178][ T5646] veth1_vlan: entered promiscuous mode [ 82.759002][ T5651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.788627][ T5648] veth0_macvtap: entered promiscuous mode [ 82.798962][ T5649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.819582][ T5650] veth0_vlan: entered promiscuous mode [ 82.832419][ T5648] veth1_macvtap: entered promiscuous mode [ 82.867208][ T5650] veth1_vlan: entered promiscuous mode [ 82.897654][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.906038][ T5646] veth0_macvtap: entered promiscuous mode [ 82.926157][ T5646] veth1_macvtap: entered promiscuous mode [ 82.938164][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.995941][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.013213][ T5651] veth0_vlan: entered promiscuous mode [ 83.020278][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.029430][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.042529][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.052507][ T5650] veth0_macvtap: entered promiscuous mode [ 83.062989][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.088617][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.099686][ T5649] veth0_vlan: entered promiscuous mode [ 83.116547][ T5650] veth1_macvtap: entered promiscuous mode [ 83.126823][ T5651] veth1_vlan: entered promiscuous mode [ 83.133400][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.142555][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.167517][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.177635][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.217110][ T5649] veth1_vlan: entered promiscuous mode [ 83.241395][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.280903][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.298444][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.309065][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.355049][ T1163] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.364929][ T1163] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.379969][ T5651] veth0_macvtap: entered promiscuous mode [ 83.402270][ T1163] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.411294][ T1163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.426523][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.435488][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.439688][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.443405][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.466979][ T5651] veth1_macvtap: entered promiscuous mode [ 83.481943][ T5649] veth0_macvtap: entered promiscuous mode [ 83.515056][ T5649] veth1_macvtap: entered promiscuous mode [ 83.534596][ T5648] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.566767][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.575815][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.639101][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.672332][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.731198][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.768369][ T1163] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.816736][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.833111][ T1163] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.842968][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.853830][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.863443][ T1163] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.899314][ T1163] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.938251][ T1163] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.947645][ T1163] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.976912][ T1163] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.013407][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.033751][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.041070][ T1163] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.073730][ T5645] Bluetooth: hci4: command tx timeout [ 84.144850][ T50] Bluetooth: hci0: command tx timeout [ 84.150629][ T5645] Bluetooth: hci1: command tx timeout [ 84.156759][ T50] Bluetooth: hci2: command tx timeout [ 84.156773][ T5634] Bluetooth: hci3: command tx timeout [ 84.239632][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.247407][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.332772][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.348763][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.459503][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.479303][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.535091][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.561288][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.627567][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.657278][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.693321][ T5741] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.814913][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.952573][ T5745] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 85.004044][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 85.044101][ T24] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 85.073804][ T24] usb 2-1: config 0 has no interface number 0 [ 85.079881][ T5748] syzkaller0: entered promiscuous mode [ 85.091005][ T5748] syzkaller0: entered allmulticast mode [ 85.102582][ T24] usb 2-1: config 0 interface 12 has no altsetting 0 [ 85.139525][ T24] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 85.174572][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.211909][ T24] usb 2-1: Product: syz [ 85.219418][ T24] usb 2-1: Manufacturer: syz [ 85.225883][ T24] usb 2-1: SerialNumber: syz [ 85.271674][ T24] usb 2-1: config 0 descriptor?? [ 85.654314][ T5757] netlink: 'syz.3.10': attribute type 4 has an invalid length. [ 85.662993][ T5757] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10'. [ 85.719766][ T5757] .`: renamed from bond0 (while UP) [ 85.743952][ T5692] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.913790][ T5692] usb 1-1: Using ep0 maxpacket: 8 [ 85.945581][ T5756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.967141][ T5756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.017497][ T5756] syz.0.9 uses obsolete (PF_INET,SOCK_PACKET) [ 86.082288][ T5756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.105877][ T5756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.146011][ T5756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.146155][ T5634] Bluetooth: hci4: command tx timeout [ 86.165926][ T5713] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.181244][ T5756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.225346][ T50] Bluetooth: hci1: command tx timeout [ 86.231250][ T5645] Bluetooth: hci0: command tx timeout [ 86.235576][ T4948] Bluetooth: hci3: command tx timeout [ 86.237666][ T5634] Bluetooth: hci2: command tx timeout [ 86.291781][ T5756] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 86.356024][ T5713] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 86.394877][ T5713] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 86.423200][ T5713] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 86.447909][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.485792][ T5692] usb 1-1: unable to get BOS descriptor or descriptor too short [ 86.511110][ T5762] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 86.534509][ T5692] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 86.552010][ T43] cfg80211: failed to load regulatory.db [ 86.561677][ T5692] usb 1-1: can't read configurations, error -71 [ 86.582421][ T5713] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 86.745071][ T5739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.767084][ T5739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.781336][ T5762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.816526][ T5762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.879809][ T24] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 86.899504][ T24] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 86.917480][ T24] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 86.933726][ T24] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 86.958467][ T24] usb 2-1: USB disconnect, device number 2 [ 87.062633][ T5770] bridge_slave_0: left allmulticast mode [ 87.093504][ T5770] bridge_slave_0: left promiscuous mode [ 87.125353][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.219646][ T5770] bridge_slave_1: left allmulticast mode [ 87.234319][ T5770] bridge_slave_1: left promiscuous mode [ 87.252759][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.302215][ T5770] .`: (slave bond_slave_0): Releasing backup interface [ 87.343521][ T5770] .`: (slave bond_slave_1): Releasing backup interface [ 87.375608][ T5700] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.391636][ T5770] team0: Port device team_slave_0 removed [ 87.417489][ T5770] team0: Port device team_slave_1 removed [ 87.426117][ T5770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.433775][ T5770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.449321][ T5770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.467360][ T5770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.492928][ T5770] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 87.554978][ T5700] usb 5-1: Using ep0 maxpacket: 32 [ 87.599085][ T5700] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 87.644595][ T5692] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.664636][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.758882][ T5700] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 87.827445][ T5692] usb 1-1: Using ep0 maxpacket: 8 [ 87.851183][ T5692] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 87.873230][ T5778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 87.882354][ T5692] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 87.894923][ T5778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15'. [ 87.911551][ T5692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.939794][ T5783] syzkaller0: entered promiscuous mode [ 87.948633][ T5692] usb 1-1: config 0 descriptor?? [ 87.959575][ T5783] syzkaller0: entered allmulticast mode [ 87.993979][ T5778] netlink: 'syz.2.15': attribute type 4 has an invalid length. [ 88.001825][ T5778] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15'. [ 88.027156][ T5778] .`: renamed from bond0 (while UP) [ 88.044636][ T5700] gspca_nw80x: reg_w err -71 [ 88.051615][ T5700] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 88.081258][ T5700] usb 5-1: USB disconnect, device number 2 [ 88.268003][ T5788] wireguard0: entered allmulticast mode [ 88.281457][ T5788] netlink: 'syz.1.18': attribute type 11 has an invalid length. [ 88.406116][ T5775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.441106][ T5775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.482211][ T5775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'. [ 88.527589][ T5692] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 88.537381][ T5692] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 88.545464][ T5692] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 88.552772][ T5692] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 88.560748][ T5692] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 88.567781][ T5692] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 88.575870][ T5692] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 88.582862][ T5692] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 88.591151][ T5692] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 88.598276][ T5692] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 88.616227][ T5692] lenovo 0003:17EF:6047.0001: hidraw0: USB HID v0.08 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 88.673694][ T5700] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.845952][ T5700] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.863824][ T1224] usb 1-1: USB disconnect, device number 3 [ 88.871195][ T5700] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 88.913039][ T5700] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 88.947509][ T5700] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.996106][ T5700] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 89.013706][ T5700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.046227][ T5700] usb 2-1: config 0 descriptor?? [ 89.089990][ T5692] usb 4-1: USB disconnect, device number 2 [ 89.347171][ T5805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 89.395617][ T5805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22'. [ 89.418554][ T5809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.463112][ T5809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.505661][ T5811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'. [ 89.543203][ T5794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'. [ 89.556147][ T5794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19'. [ 89.660544][ T5794] ALSA: mixer_oss: invalid OSS volume '' [ 90.443737][ T5700] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.606380][ T5700] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.618535][ T5700] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 90.628579][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.636621][ T5700] usb 5-1: Product: syz [ 90.640766][ T5700] usb 5-1: Manufacturer: syz [ 90.645401][ T5700] usb 5-1: SerialNumber: syz [ 90.656805][ T5700] usb 5-1: config 0 descriptor?? [ 90.668742][ T5700] cyberjack 5-1:0.0: required endpoints missing [ 90.800467][ T29] audit: type=1326 audit(1780217608.126:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.2.27" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3601c code=0x7ffc0000 [ 90.837611][ T29] audit: type=1326 audit(1780217608.156:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.2.27" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=264 compat=1 ip=0xf7f3601c code=0x7ffc0000 [ 90.863715][ T29] audit: type=1326 audit(1780217608.156:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.2.27" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3601c code=0x7ffc0000 [ 90.912958][ T29] audit: type=1326 audit(1780217608.156:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.2.27" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7f3601c code=0x7ffc0000 [ 90.959692][ T5821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.977987][ T5821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.990204][ T29] audit: type=1326 audit(1780217608.156:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.2.27" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3601c code=0x7ffc0000 [ 91.047477][ T29] audit: type=1326 audit(1780217608.156:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.2.27" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f3601c code=0x7ffc0000 [ 91.085343][ T5835] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 91.086005][ T5822] IPVS: stopping backup sync thread 5835 ... [ 91.110688][ T29] audit: type=1326 audit(1780217608.156:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.2.27" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3601c code=0x7ffc0000 [ 91.156797][ T29] audit: type=1326 audit(1780217608.156:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.2.27" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f3601c code=0x7ffc0000 [ 91.207685][ T29] audit: type=1326 audit(1780217608.156:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.2.27" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3601c code=0x7ffc0000 [ 91.257946][ T29] audit: type=1326 audit(1780217608.156:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.2.27" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=238 compat=1 ip=0xf7f3601c code=0x7ffc0000 [ 91.325328][ T5822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.340661][ T5822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.467467][ T1224] usb 2-1: USB disconnect, device number 3 [ 91.994225][ T5692] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 92.146719][ T5692] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.158805][ T5692] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 92.169771][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.178172][ T5692] usb 2-1: Product: syz [ 92.182413][ T5692] usb 2-1: Manufacturer: syz [ 92.189191][ T5692] usb 2-1: SerialNumber: syz [ 92.200373][ T5692] usb 2-1: config 0 descriptor?? [ 92.213411][ T5692] cyberjack 2-1:0.0: required endpoints missing [ 92.469168][ T5837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.479508][ T5837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.495896][ T5847] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 92.505895][ T5837] IPVS: stopping backup sync thread 5847 ... [ 92.589159][ T5838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.606901][ T5838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.923247][ T5853] __nla_validate_parse: 1 callbacks suppressed [ 92.923259][ T5853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'. [ 92.987524][ T5853] loop9: detected capacity change from 0 to 7 [ 93.032842][ T5853] Dev loop9: unable to read RDB block 7 [ 93.042464][ T5853] loop9: unable to read partition table [ 93.050448][ T5853] loop9: partition table beyond EOD, truncated [ 93.057754][ T5853] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 93.149574][ T1224] usb 5-1: USB disconnect, device number 3 [ 93.668120][ T5864] process 'syz.4.35' launched './file0' with NULL argv: empty string added [ 93.800443][ T5871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'. [ 94.013747][ T24] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 94.228130][ T5692] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 94.269846][ T24] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 94.313387][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.379978][ T24] usb 5-1: config 0 has no interface number 0 [ 94.410816][ T24] usb 5-1: config 0 interface 205 has no altsetting 0 [ 94.459435][ T5692] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 94.483114][ T24] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 94.502365][ T5692] usb 1-1: config 0 has no interface number 0 [ 94.521281][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.529535][ T5692] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.549654][ T24] usb 5-1: Product: syz [ 94.576608][ T24] usb 5-1: Manufacturer: syz [ 94.581389][ T5692] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 94.594772][ T24] usb 5-1: SerialNumber: syz [ 94.616913][ T24] usb 5-1: config 0 descriptor?? [ 94.625693][ T5692] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 94.653866][ T43] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.712642][ T24] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 94.724638][ T5713] usb 2-1: USB disconnect, device number 4 [ 94.739922][ T5692] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 94.769543][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 94.776498][ T5692] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 94.796188][ T5692] usb 1-1: Product: syz [ 94.805705][ T5692] usb 1-1: SerialNumber: syz [ 94.855488][ T5692] usb 1-1: config 0 descriptor?? [ 94.861381][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 94.885463][ T43] usb 4-1: device descriptor read/64, error -71 [ 94.905140][ T5692] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 94.932162][ T24] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 94.949227][ T5692] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input5 [ 94.997140][ T24] usb 5-1: media controller created [ 95.030608][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.077088][ T5864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.145106][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 95.153713][ T43] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 95.181225][ T24] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 95.213331][ T5864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.270987][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 95.315510][ T43] usb 4-1: device descriptor read/64, error -71 [ 95.396905][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 95.443756][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 95.474274][ T43] usb usb4-port1: attempt power cycle [ 95.514024][ T24] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 95.596417][ T5692] dvb-usb: bulk message failed: -22 (1/0) [ 95.630337][ T5692] dvb-usb: error while querying for an remote control event. [ 95.848585][ T5692] dvb-usb: bulk message failed: -22 (1/0) [ 95.873751][ T43] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 95.897763][ T5692] dvb-usb: error while querying for an remote control event. [ 95.955195][ T43] usb 4-1: device descriptor read/8, error -71 [ 96.006229][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'. [ 96.051363][ T5891] netlink: 'syz.2.43': attribute type 30 has an invalid length. [ 96.095481][ T5892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'. [ 96.129983][ T5692] dvb-usb: bulk message failed: -22 (1/0) [ 96.200049][ T5692] dvb-usb: error while querying for an remote control event. [ 96.233789][ T43] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 96.275561][ T5892] netlink: 'syz.2.43': attribute type 30 has an invalid length. [ 96.304615][ T43] usb 4-1: device descriptor read/8, error -71 [ 96.348568][ T5896] Zero length message leads to an empty skb [ 96.367353][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.412696][ T5895] netlink: 32 bytes leftover after parsing attributes in process `syz.1.44'. [ 96.424253][ T43] usb usb4-port1: unable to enumerate USB device [ 96.430892][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.456743][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 96.477523][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.488887][ T43] dvb-usb: error while querying for an remote control event. [ 96.493715][ T1224] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 96.504728][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.673732][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 96.685675][ T1224] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.723510][ T1224] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 96.747840][ T43] dvb-usb: error while querying for an remote control event. [ 96.817788][ T1224] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 96.848452][ T1224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.910487][ T1224] usb 3-1: config 0 descriptor?? [ 96.933694][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 96.957571][ T43] dvb-usb: error while querying for an remote control event. [ 96.992508][ T1224] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 97.023013][ T1224] dvb-usb: bulk message failed: -22 (3/0) [ 97.058275][ T1224] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 97.111167][ T1224] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 97.137163][ T1224] usb 3-1: media controller created [ 97.143704][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 97.177612][ T43] dvb-usb: error while querying for an remote control event. [ 97.199627][ T1224] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.228042][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 97.232839][ T9] usb 1-1: USB disconnect, device number 4 [ 97.235233][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 97.269209][ T5692] usb 5-1: USB disconnect, device number 4 [ 97.278433][ T5891] dvb-usb: bulk message failed: -22 (2/0) [ 97.294026][ T9] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 97.308074][ T5895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.326278][ T1224] dvb-usb: bulk message failed: -22 (6/0) [ 97.348509][ T1224] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 97.470424][ T1224] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 97.486419][ T5895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.539783][ T1224] dvb-usb: schedule remote query interval to 150 msecs. [ 97.582954][ T1224] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 97.603070][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.45'. [ 97.667081][ T5907] loop9: detected capacity change from 0 to 7 [ 97.689882][ T5907] Dev loop9: unable to read RDB block 7 [ 97.697634][ T5907] loop9: unable to read partition table [ 97.706891][ T5907] loop9: partition table beyond EOD, truncated [ 97.719879][ T5907] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 97.733697][ T5714] dvb-usb: bulk message failed: -22 (1/0) [ 97.740277][ T5714] dvb-usb: error while querying for an remote control event. [ 97.776533][ T5895] wireguard0: left allmulticast mode [ 97.838295][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.848109][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.872519][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.892067][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.904503][ T5751] dvb-usb: bulk message failed: -22 (1/0) [ 97.915433][ T5751] dvb-usb: error while querying for an remote control event. [ 97.919960][ T5692] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 97.945721][ T24] usb 3-1: USB disconnect, device number 2 [ 97.966069][ T1224] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 98.027317][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 98.128502][ T1224] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.141853][ T1224] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 98.151484][ T1224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.159916][ T1224] usb 4-1: Product: syz [ 98.164802][ T1224] usb 4-1: Manufacturer: syz [ 98.170306][ T1224] usb 4-1: SerialNumber: syz [ 98.178696][ T1224] usb 4-1: config 0 descriptor?? [ 98.183773][ T5366] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.192394][ T1224] cyberjack 4-1:0.0: required endpoints missing [ 98.343673][ T5366] usb 2-1: Using ep0 maxpacket: 32 [ 98.350024][ T5366] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 98.359104][ T5366] usb 2-1: config 0 has no interface number 0 [ 98.370295][ T5366] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 98.379624][ T5366] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.387930][ T5366] usb 2-1: Product: syz [ 98.392120][ T5366] usb 2-1: Manufacturer: syz [ 98.397122][ T5366] usb 2-1: SerialNumber: syz [ 98.408840][ T5366] usb 2-1: config 0 descriptor?? [ 98.431394][ T5366] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 98.448369][ T5903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.464546][ T5903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.495422][ T5903] IPVS: stopping backup sync thread 5918 ... [ 98.504965][ T5918] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 98.573991][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 98.590727][ T5906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.600087][ T5920] netlink: 'syz.2.50': attribute type 33 has an invalid length. [ 98.608082][ T5920] netlink: 152 bytes leftover after parsing attributes in process `syz.2.50'. [ 98.611353][ T5906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.650060][ T5366] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 98.701763][ T5366] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 98.743904][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 98.758946][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.787320][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.811078][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.833655][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.848189][ T24] usb 5-1: Product: syz [ 98.855428][ T24] usb 5-1: Manufacturer: syz [ 98.860077][ T24] usb 5-1: SerialNumber: syz [ 98.909788][ T24] usb 5-1: 0:2 : does not exist [ 99.269291][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'. [ 99.293559][ T5929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.307064][ T5929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.337823][ T5929] program syz.1.47 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.676732][ T24] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 99.753855][ T5366] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.838772][ T24] usb 5-1: USB disconnect, device number 5 [ 99.913126][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.955760][ T5366] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.972943][ T5366] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 99.985017][ T5366] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.993311][ T5366] usb 3-1: Product: syz [ 99.998525][ T5366] usb 3-1: Manufacturer: syz [ 100.003221][ T5366] usb 3-1: SerialNumber: syz [ 100.017042][ T5366] usb 3-1: config 0 descriptor?? [ 100.036950][ T5366] cyberjack 3-1:0.0: required endpoints missing [ 100.246575][ T5931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.262256][ T5931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.285730][ T5941] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 100.286049][ T5931] IPVS: stopping backup sync thread 5941 ... [ 100.597139][ T24] usb 4-1: USB disconnect, device number 7 [ 101.037474][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 101.045734][ T5366] usb 2-1: USB disconnect, device number 5 [ 101.243090][ T5366] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 101.310837][ T5366] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 101.334802][ T5951] loop2: detected capacity change from 0 to 7 [ 101.389291][ T5366] quatech2 2-1:0.51: device disconnected [ 101.783690][ T5751] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 101.904440][ T5366] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 101.941461][ T5751] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 101.965000][ T5966] FAULT_INJECTION: forcing a failure. [ 101.965000][ T5966] name failslab, interval 1, probability 0, space 0, times 1 [ 101.978086][ T5966] CPU: 1 UID: 0 PID: 5966 Comm: syz.4.64 Not tainted syzkaller #0 PREEMPT(full) [ 101.978107][ T5966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 101.978125][ T5966] Call Trace: [ 101.978132][ T5966] [ 101.978140][ T5966] dump_stack_lvl+0xe8/0x150 [ 101.978157][ T5966] should_fail_ex+0x412/0x560 [ 101.978170][ T5966] should_failslab+0xa8/0x100 [ 101.978181][ T5966] __kmalloc_noprof+0xe8/0x760 [ 101.978194][ T5966] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 101.978207][ T5966] tomoyo_realpath_from_path+0xe3/0x5d0 [ 101.978216][ T5966] ? tomoyo_domain+0xd7/0x130 [ 101.978228][ T5966] ? tomoyo_path_number_perm+0x219/0x630 [ 101.978247][ T5966] tomoyo_path_number_perm+0x246/0x630 [ 101.978260][ T5966] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 101.978272][ T5966] ? __lock_acquire+0x6b5/0x2cf0 [ 101.978301][ T5966] ? __fget_files+0x2a/0x420 [ 101.978315][ T5966] ? __fget_files+0x3a0/0x420 [ 101.978325][ T5966] ? __fget_files+0x2a/0x420 [ 101.978338][ T5966] security_file_ioctl_compat+0xc3/0x2a0 [ 101.978351][ T5966] __ia32_compat_sys_ioctl+0x139/0x950 [ 101.978368][ T5966] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 101.978384][ T5966] ? __fget_files+0x3a0/0x420 [ 101.978398][ T5966] ? fput+0xa0/0xd0 [ 101.978416][ T5966] __do_fast_syscall_32+0x23e/0x6f0 [ 101.978427][ T5966] ? do_fast_syscall_32+0x33/0x70 [ 101.978436][ T5966] ? lockdep_hardirqs_on+0x7a/0x110 [ 101.978444][ T5966] ? asm_int80_emulation+0x1a/0x20 [ 101.978453][ T5966] ? do_int80_emulation+0x29f/0x550 [ 101.978464][ T5966] do_fast_syscall_32+0x33/0x70 [ 101.978474][ T5966] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 101.978485][ T5966] RIP: 0023:0xf700f01c [ 101.978500][ T5966] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 101.978508][ T5966] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 101.978518][ T5966] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c04c565d [ 101.978524][ T5966] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.978529][ T5966] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.978534][ T5966] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 101.978539][ T5966] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.978553][ T5966] [ 101.978558][ T5966] ERROR: Out of memory at tomoyo_realpath_from_path. [ 102.231160][ T5751] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 102.248406][ T5751] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 102.259490][ T5751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.286842][ T5958] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 102.303718][ T5366] usb 2-1: Using ep0 maxpacket: 32 [ 102.312467][ T5751] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 102.326311][ T5366] usb 2-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 102.355850][ T5366] usb 2-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 102.365179][ T5366] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.374546][ T5366] usb 2-1: Product: syz [ 102.393150][ T5366] usb 2-1: Manufacturer: syz [ 102.423085][ T5366] usb 2-1: SerialNumber: syz [ 102.479952][ T5366] pwc: Askey VC010 type 1 USB webcam detected. [ 102.490001][ T5692] usb 3-1: USB disconnect, device number 3 [ 102.679862][ T24] usb 1-1: USB disconnect, device number 5 [ 102.691530][ T5366] pwc: send_video_command error -71 [ 102.740949][ T5366] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 102.789177][ T5366] Philips webcam 2-1:76.0: probe with driver Philips webcam failed with error -71 [ 102.859446][ T5366] usb 2-1: USB disconnect, device number 6 [ 103.375391][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 103.490793][ T5366] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 103.675057][ T5366] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.693548][ T5993] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 103.740876][ T5993] kAFS: unable to lookup cell 'ÿ' [ 103.850279][ T5366] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 103.891039][ T5366] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 103.938648][ T5366] usb 4-1: Product: syz [ 103.950822][ T5366] usb 4-1: Manufacturer: syz [ 103.983484][ T5366] usb 4-1: SerialNumber: syz [ 104.153720][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 104.283455][ T5366] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 104.314479][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 104.463765][ T43] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 104.565059][ C0] usblp0: nonzero write bulk status received: -71 [ 104.589190][ T9] usb 4-1: USB disconnect, device number 8 [ 104.611935][ T9] usblp0: removed [ 104.653978][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 104.667723][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 104.680133][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 104.708466][ T43] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 104.719692][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.736685][ T43] usb 1-1: Product: syz [ 104.744511][ T43] usb 1-1: Manufacturer: syz [ 104.752873][ T43] usb 1-1: SerialNumber: syz [ 104.777503][ T43] usb 1-1: config 0 descriptor?? [ 104.799971][ T43] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 104.815572][ T43] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 105.217396][ T6014] FAULT_INJECTION: forcing a failure. [ 105.217396][ T6014] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 105.237600][ T6014] CPU: 0 UID: 0 PID: 6014 Comm: syz.4.78 Not tainted syzkaller #0 PREEMPT(full) [ 105.237624][ T6014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 105.237633][ T6014] Call Trace: [ 105.237640][ T6014] [ 105.237647][ T6014] dump_stack_lvl+0xe8/0x150 [ 105.237670][ T6014] should_fail_ex+0x412/0x560 [ 105.237693][ T6014] _copy_from_iter+0x1d3/0x1670 [ 105.237714][ T6014] ? rcu_is_watching+0x15/0xb0 [ 105.237738][ T6014] ? __pfx__copy_from_iter+0x10/0x10 [ 105.237762][ T6014] ? netlink_sendmsg+0x650/0xb40 [ 105.237783][ T6014] ? skb_put+0x11b/0x210 [ 105.237807][ T6014] netlink_sendmsg+0x6c0/0xb40 [ 105.237836][ T6014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.237861][ T6014] ? aa_sock_msg_perm+0xf1/0x1b0 [ 105.237883][ T6014] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 105.237905][ T6014] ____sys_sendmsg+0x972/0x9f0 [ 105.237928][ T6014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.237949][ T6014] ? kstrtoull+0x12f/0x1d0 [ 105.237977][ T6014] ___sys_sendmsg+0x2a5/0x360 [ 105.237992][ T6014] ? __lock_acquire+0x6b5/0x2cf0 [ 105.238012][ T6014] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.238030][ T6014] ? get_pid_task+0x20/0x1f0 [ 105.238048][ T6014] ? get_pid_task+0x20/0x1f0 [ 105.238064][ T6014] ? get_pid_task+0x20/0x1f0 [ 105.238103][ T6014] ? __fget_files+0x2a/0x420 [ 105.238120][ T6014] ? __fget_files+0x3a0/0x420 [ 105.238146][ T6014] __sys_sendmsg+0x183/0x260 [ 105.238163][ T6014] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.238195][ T6014] __do_fast_syscall_32+0x23e/0x6f0 [ 105.238213][ T6014] ? do_fast_syscall_32+0x33/0x70 [ 105.238228][ T6014] ? lockdep_hardirqs_on+0x7a/0x110 [ 105.238243][ T6014] ? asm_int80_emulation+0x1a/0x20 [ 105.238257][ T6014] ? do_int80_emulation+0x29f/0x550 [ 105.238277][ T6014] do_fast_syscall_32+0x33/0x70 [ 105.238294][ T6014] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.238311][ T6014] RIP: 0023:0xf700f01c [ 105.238326][ T6014] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 105.238339][ T6014] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 105.238355][ T6014] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000500 [ 105.238366][ T6014] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.238375][ T6014] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.238383][ T6014] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 105.238392][ T6014] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.238417][ T6014] [ 105.514907][ T43] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 105.524521][ T43] em28xx 1-1:0.0: Config register raw data: 0x9f [ 105.573665][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.622598][ T6018] FAULT_INJECTION: forcing a failure. [ 105.622598][ T6018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.635957][ T6018] CPU: 1 UID: 0 PID: 6018 Comm: syz.4.80 Not tainted syzkaller #0 PREEMPT(full) [ 105.635971][ T6018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 105.635977][ T6018] Call Trace: [ 105.635981][ T6018] [ 105.635985][ T6018] dump_stack_lvl+0xe8/0x150 [ 105.636001][ T6018] should_fail_ex+0x412/0x560 [ 105.636014][ T6018] _copy_from_iter+0x1d3/0x1670 [ 105.636029][ T6018] ? rcu_is_watching+0x15/0xb0 [ 105.636043][ T6018] ? __pfx__copy_from_iter+0x10/0x10 [ 105.636056][ T6018] ? netlink_sendmsg+0x650/0xb40 [ 105.636070][ T6018] ? skb_put+0x11b/0x210 [ 105.636091][ T6018] netlink_sendmsg+0x6c0/0xb40 [ 105.636120][ T6018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.636143][ T6018] ? aa_sock_msg_perm+0xf1/0x1b0 [ 105.636166][ T6018] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 105.636187][ T6018] ____sys_sendmsg+0x972/0x9f0 [ 105.636200][ T6018] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.636211][ T6018] ? kstrtoull+0x12f/0x1d0 [ 105.636228][ T6018] ___sys_sendmsg+0x2a5/0x360 [ 105.636236][ T6018] ? __lock_acquire+0x6b5/0x2cf0 [ 105.636248][ T6018] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.636258][ T6018] ? get_pid_task+0x20/0x1f0 [ 105.636269][ T6018] ? get_pid_task+0x20/0x1f0 [ 105.636279][ T6018] ? get_pid_task+0x20/0x1f0 [ 105.636302][ T6018] ? __fget_files+0x2a/0x420 [ 105.636313][ T6018] ? __fget_files+0x3a0/0x420 [ 105.636328][ T6018] __sys_sendmsg+0x183/0x260 [ 105.636338][ T6018] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.636356][ T6018] __do_fast_syscall_32+0x23e/0x6f0 [ 105.636367][ T6018] ? do_fast_syscall_32+0x33/0x70 [ 105.636375][ T6018] ? lockdep_hardirqs_on+0x7a/0x110 [ 105.636384][ T6018] ? asm_int80_emulation+0x1a/0x20 [ 105.636393][ T6018] ? do_int80_emulation+0x29f/0x550 [ 105.636401][ T6018] ? trace_irq_disable+0x3b/0x140 [ 105.636417][ T6018] do_fast_syscall_32+0x33/0x70 [ 105.636427][ T6018] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.636438][ T6018] RIP: 0023:0xf700f01c [ 105.636450][ T6018] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 105.636457][ T6018] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 105.636468][ T6018] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000500 [ 105.636474][ T6018] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.636479][ T6018] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.636484][ T6018] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 105.636489][ T6018] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.636502][ T6018] [ 105.916664][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 105.930291][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 105.940160][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.961214][ T6020] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 105.961214][ T6020] Please contact the netfilter-devel mailing list or update your nftables rules. [ 105.982146][ T5994] kvm: apic: phys broadcast and lowest prio [ 105.990595][ T9] usb 3-1: New USB device found, idVendor=04b8, idProduct=0602, bcdDevice= 0.40 [ 106.001889][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.018039][ T9] usb 3-1: Product: syz [ 106.025790][ T9] usb 3-1: Manufacturer: syz [ 106.048443][ T9] usb 3-1: SerialNumber: syz [ 106.059210][ T6022] Option 'å%%*UÄ' to dns_resolver key: bad/missing value [ 106.294868][ T43] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 106.301998][ T43] em28xx 1-1:0.0: No AC97 audio processor [ 106.335717][ T43] usb 1-1: USB disconnect, device number 6 [ 106.359911][ T43] em28xx 1-1:0.0: Disconnecting em28xx [ 106.393270][ T43] em28xx 1-1:0.0: Freeing device [ 106.393392][ T6012] syzkaller0: entered promiscuous mode [ 106.418428][ T6012] syzkaller0: entered allmulticast mode [ 106.503229][ T9] usb 3-1: USB disconnect, device number 4 [ 106.609583][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 106.635185][ T24] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 106.660148][ T24] usb 2-1: can't read configurations, error -71 [ 106.711109][ T6032] FAULT_INJECTION: forcing a failure. [ 106.711109][ T6032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.724767][ T6032] CPU: 1 UID: 0 PID: 6032 Comm: syz.1.84 Not tainted syzkaller #0 PREEMPT(full) [ 106.724788][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 106.724797][ T6032] Call Trace: [ 106.724804][ T6032] [ 106.724811][ T6032] dump_stack_lvl+0xe8/0x150 [ 106.724853][ T6032] should_fail_ex+0x412/0x560 [ 106.724876][ T6032] _copy_from_iter+0x1d3/0x1670 [ 106.724894][ T6032] ? rcu_is_watching+0x15/0xb0 [ 106.724917][ T6032] ? __pfx__copy_from_iter+0x10/0x10 [ 106.724940][ T6032] ? netlink_sendmsg+0x650/0xb40 [ 106.724961][ T6032] ? skb_put+0x11b/0x210 [ 106.724985][ T6032] netlink_sendmsg+0x6c0/0xb40 [ 106.725014][ T6032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.725038][ T6032] ? aa_sock_msg_perm+0xf1/0x1b0 [ 106.725061][ T6032] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 106.725083][ T6032] ____sys_sendmsg+0x972/0x9f0 [ 106.725106][ T6032] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.725125][ T6032] ? kstrtoull+0x12f/0x1d0 [ 106.725153][ T6032] ___sys_sendmsg+0x2a5/0x360 [ 106.725168][ T6032] ? __lock_acquire+0x6b5/0x2cf0 [ 106.725188][ T6032] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.725205][ T6032] ? get_pid_task+0x20/0x1f0 [ 106.725224][ T6032] ? get_pid_task+0x20/0x1f0 [ 106.725239][ T6032] ? get_pid_task+0x20/0x1f0 [ 106.725281][ T6032] ? __fget_files+0x2a/0x420 [ 106.725298][ T6032] ? __fget_files+0x3a0/0x420 [ 106.725325][ T6032] __sys_sendmsg+0x183/0x260 [ 106.725343][ T6032] ? __pfx___sys_sendmsg+0x10/0x10 [ 106.725378][ T6032] __do_fast_syscall_32+0x23e/0x6f0 [ 106.725402][ T6032] ? do_fast_syscall_32+0x33/0x70 [ 106.725417][ T6032] ? lockdep_hardirqs_on+0x7a/0x110 [ 106.725432][ T6032] ? asm_int80_emulation+0x1a/0x20 [ 106.725447][ T6032] ? do_int80_emulation+0x29f/0x550 [ 106.725461][ T6032] ? trace_irq_disable+0x3b/0x140 [ 106.725485][ T6032] do_fast_syscall_32+0x33/0x70 [ 106.725501][ T6032] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.725519][ T6032] RIP: 0023:0xf7f8801c [ 106.725534][ T6032] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 106.725545][ T6032] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 106.725562][ T6032] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 106.725572][ T6032] RDX: 0000000020004800 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.725581][ T6032] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.725589][ T6032] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 106.725598][ T6032] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.725623][ T6032] [ 107.277428][ T6042] FAULT_INJECTION: forcing a failure. [ 107.277428][ T6042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.290802][ T6042] CPU: 1 UID: 0 PID: 6042 Comm: syz.4.87 Not tainted syzkaller #0 PREEMPT(full) [ 107.290824][ T6042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 107.290831][ T6042] Call Trace: [ 107.290837][ T6042] [ 107.290843][ T6042] dump_stack_lvl+0xe8/0x150 [ 107.290865][ T6042] should_fail_ex+0x412/0x560 [ 107.290884][ T6042] _copy_from_user+0x2d/0xb0 [ 107.290903][ T6042] get_compat_msghdr+0xb3/0x4c0 [ 107.290920][ T6042] ? _parse_integer_limit+0x1ae/0x1f0 [ 107.290939][ T6042] ? __pfx_get_compat_msghdr+0x10/0x10 [ 107.290954][ T6042] ? kstrtoull+0x12f/0x1d0 [ 107.290981][ T6042] ___sys_sendmsg+0x201/0x360 [ 107.290996][ T6042] ? __lock_acquire+0x6b5/0x2cf0 [ 107.291016][ T6042] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.291032][ T6042] ? get_pid_task+0x20/0x1f0 [ 107.291050][ T6042] ? get_pid_task+0x20/0x1f0 [ 107.291064][ T6042] ? get_pid_task+0x20/0x1f0 [ 107.291101][ T6042] ? __fget_files+0x2a/0x420 [ 107.291117][ T6042] ? __fget_files+0x3a0/0x420 [ 107.291143][ T6042] __sys_sendmsg+0x183/0x260 [ 107.291161][ T6042] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.291194][ T6042] __do_fast_syscall_32+0x23e/0x6f0 [ 107.291211][ T6042] ? do_fast_syscall_32+0x33/0x70 [ 107.291226][ T6042] ? lockdep_hardirqs_on+0x7a/0x110 [ 107.291241][ T6042] ? asm_int80_emulation+0x1a/0x20 [ 107.291255][ T6042] ? do_int80_emulation+0x29f/0x550 [ 107.291270][ T6042] ? trace_irq_disable+0x3b/0x140 [ 107.291293][ T6042] do_fast_syscall_32+0x33/0x70 [ 107.291310][ T6042] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 107.291327][ T6042] RIP: 0023:0xf700f01c [ 107.291351][ T6042] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 107.291363][ T6042] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 107.291380][ T6042] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800012c0 [ 107.291390][ T6042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.291399][ T6042] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 107.291408][ T6042] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 107.291416][ T6042] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.291438][ T6042] [ 107.722991][ T6054] FAULT_INJECTION: forcing a failure. [ 107.722991][ T6054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.759776][ T6054] CPU: 0 UID: 0 PID: 6054 Comm: syz.4.92 Not tainted syzkaller #0 PREEMPT(full) [ 107.759797][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 107.759806][ T6054] Call Trace: [ 107.759812][ T6054] [ 107.759820][ T6054] dump_stack_lvl+0xe8/0x150 [ 107.759841][ T6054] should_fail_ex+0x412/0x560 [ 107.759861][ T6054] _copy_to_user+0x31/0xb0 [ 107.759880][ T6054] simple_read_from_buffer+0xe1/0x170 [ 107.759903][ T6054] proc_fail_nth_read+0x1bb/0x230 [ 107.759926][ T6054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.759947][ T6054] ? rw_verify_area+0x2a6/0x4d0 [ 107.759967][ T6054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.759985][ T6054] vfs_read+0x20c/0xa70 [ 107.760008][ T6054] ? __pfx___mutex_lock+0x10/0x10 [ 107.760026][ T6054] ? __pfx_vfs_read+0x10/0x10 [ 107.760045][ T6054] ? __fget_files+0x2a/0x420 [ 107.760067][ T6054] ? __fget_files+0x3a0/0x420 [ 107.760082][ T6054] ? __fget_files+0x2a/0x420 [ 107.760106][ T6054] ksys_read+0x150/0x270 [ 107.760127][ T6054] ? __pfx_ksys_read+0x10/0x10 [ 107.760151][ T6054] ? asm_int80_emulation+0x1a/0x20 [ 107.760170][ T6054] do_int80_emulation+0x19a/0x550 [ 107.760185][ T6054] ? trace_irq_disable+0x3b/0x140 [ 107.760205][ T6054] ? asm_int80_emulation+0x1a/0x20 [ 107.760217][ T6054] ? clear_bhb_loop+0x40/0x90 [ 107.760231][ T6054] ? clear_bhb_loop+0x40/0x90 [ 107.760249][ T6054] asm_int80_emulation+0x1a/0x20 [ 107.760262][ T6054] RIP: 0023:0xf71461ab [ 107.760277][ T6054] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 107.760289][ T6054] RSP: 002b:00000000f53fd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 107.760305][ T6054] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53fd5d0 [ 107.760315][ T6054] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 107.760322][ T6054] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 107.760330][ T6054] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 107.760338][ T6054] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.760369][ T6054] [ 107.981540][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 108.033930][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 108.123816][ T5751] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 108.145280][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.156207][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.166686][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.180042][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.189100][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.200370][ T9] usb 1-1: config 0 descriptor?? [ 108.223667][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 108.236835][ T24] usb 2-1: config 0 has no interface number 0 [ 108.243737][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.255378][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.267343][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 108.275785][ T5751] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.288220][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.288224][ T5751] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 108.323726][ T5715] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 108.333406][ T24] usb 2-1: config 0 descriptor?? [ 108.343185][ T5751] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 108.368586][ T5751] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.378314][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.387256][ T5751] usb 4-1: Product: syz [ 108.392190][ T5751] usb 4-1: Manufacturer: syz [ 108.404663][ T5751] usb 4-1: SerialNumber: syz [ 108.430562][ T5751] cdc_mbim 4-1:1.0: MBIM functional descriptor missing [ 108.437877][ T5751] cdc_mbim 4-1:1.0: bind() failure [ 108.473843][ T5715] usb 5-1: Using ep0 maxpacket: 32 [ 108.482373][ T5715] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 108.497249][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.516740][ T5715] usb 5-1: config 0 descriptor?? [ 108.539804][ T5715] gspca_main: sq930x-2.14.0 probing 041e:403c [ 108.679345][ T6063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.694681][ T6063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.741358][ T5715] gspca_sq930x: reg_r 001f failed -71 [ 108.748820][ T5715] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 108.761656][ T24] usbhid 2-1:0.1: can't add hid device: -71 [ 108.770182][ T5715] usb 5-1: USB disconnect, device number 6 [ 108.792208][ T24] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 108.835936][ T24] usb 2-1: USB disconnect, device number 8 [ 109.584778][ T5715] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 109.748864][ T5715] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 109.760788][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.774787][ T5715] usb 5-1: Product: syz [ 109.779045][ T5715] usb 5-1: Manufacturer: syz [ 109.785110][ T5715] usb 5-1: SerialNumber: syz [ 110.206588][ T5715] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 110.233780][ T5715] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 110.249814][ T5715] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 110.289216][ T5715] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 110.309729][ T5715] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 110.311681][ T6085] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.101'. [ 110.341725][ T5715] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 110.346503][ T6085] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.101'. [ 110.375704][ T5715] usb 5-1: USB disconnect, device number 7 [ 110.630981][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 110.640528][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 110.690717][ T9] usb 1-1: USB disconnect, device number 7 [ 110.734903][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 110.780261][ T5715] usb 4-1: USB disconnect, device number 9 [ 110.913995][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 110.933781][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 110.953002][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 110.973210][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 110.984390][ T6106] netlink: 368 bytes leftover after parsing attributes in process `syz.4.106'. [ 110.993464][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.002281][ T6106] openvswitch: netlink: Flow actions attr not present in new flow. [ 111.010322][ T24] usb 2-1: Product: syz [ 111.010341][ T24] usb 2-1: Manufacturer: syz [ 111.010351][ T24] usb 2-1: SerialNumber: syz [ 111.028233][ T24] usb 2-1: config 0 descriptor?? [ 111.037382][ T24] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 111.053727][ T5713] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 111.055443][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 111.090729][ T24] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 111.093310][ T6108] kAFS: unable to lookup cell 'ÿ' [ 111.224135][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 111.236884][ T5713] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.242475][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 111.258738][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.286194][ T9] usb 1-1: config 0 descriptor?? [ 111.309907][ T9] gspca_main: sq930x-2.14.0 probing 041e:403c [ 111.325323][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 111.347952][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.358274][ T5713] usb 3-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 111.370599][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.420585][ T5713] usb 3-1: config 0 descriptor?? [ 111.453767][ T5366] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 111.508150][ T9] gspca_sq930x: reg_r 001f failed -71 [ 111.521407][ T9] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 111.549895][ T9] usb 1-1: USB disconnect, device number 8 [ 111.615311][ T5366] usb 5-1: Using ep0 maxpacket: 8 [ 111.663415][ T24] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 111.678291][ T24] em28xx 2-1:0.0: Config register raw data: 0x9f [ 111.857064][ T6093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.875074][ T6093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.947803][ T6079] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 111.992409][ T5713] usbhid 3-1:0.0: can't add hid device: -71 [ 111.998564][ T6082] kvm: apic: phys broadcast and lowest prio [ 112.007759][ T5713] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 112.034930][ T5713] usb 3-1: USB disconnect, device number 5 [ 112.136520][ T24] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 112.160867][ T24] em28xx 2-1:0.0: No AC97 audio processor [ 112.199082][ T24] usb 2-1: USB disconnect, device number 9 [ 112.233276][ T24] em28xx 2-1:0.0: Disconnecting em28xx [ 112.288886][ T24] em28xx 2-1:0.0: Freeing device [ 112.553944][ T5713] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 112.727373][ T5713] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 112.748603][ T5713] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.781333][ T5713] usb 1-1: config 0 has no interface number 0 [ 112.795970][ T5713] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 112.827744][ T5713] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 112.847129][ T5713] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.895359][ T5713] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 112.924354][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.943175][ T5713] usb 1-1: Product: syz [ 112.956796][ T5713] usb 1-1: Manufacturer: syz [ 112.977073][ T5713] usb 1-1: SerialNumber: syz [ 113.006188][ T5713] usb 1-1: config 0 descriptor?? [ 113.573281][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'. [ 113.606539][ T6127] netlink: 'syz.2.114': attribute type 30 has an invalid length. [ 113.625060][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'. [ 113.634670][ T6128] netlink: 'syz.2.114': attribute type 30 has an invalid length. [ 113.654622][ T9] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 113.826898][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 113.840985][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 113.856889][ T9] usb 4-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice=ae.13 [ 113.874934][ T9] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 113.883042][ T9] usb 4-1: Product: syz [ 113.887525][ T9] usb 4-1: Manufacturer: syz [ 113.892884][ T9] usb 4-1: SerialNumber: syz [ 113.926217][ T5366] usb 5-1: unable to get BOS descriptor or descriptor too short [ 113.936242][ T24] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 113.956611][ T5366] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 113.974277][ T5366] usb 5-1: can't read configurations, error -71 [ 114.138473][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.138903][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 114.160980][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 114.184255][ T24] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 114.211885][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.236058][ T24] usb 3-1: config 0 descriptor?? [ 114.238947][ T9] snd-usb-audio 4-1:8.0: probe with driver snd-usb-audio failed with error -2 [ 114.262919][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 114.273225][ T9] usb 4-1: USB disconnect, device number 10 [ 114.279383][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 114.297531][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 114.341160][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.358201][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 114.370064][ T24] usb 3-1: media controller created [ 114.381354][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.427025][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 114.435137][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 114.462846][ T6138] fuse: Unexpected value for 'default_permissions' [ 114.465387][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 114.515127][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 114.529856][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 114.561206][ T24] usb 3-1: USB disconnect, device number 6 [ 114.622457][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 114.623333][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.120'. [ 114.667905][ T6145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.120'. [ 114.867032][ T24] hid_parser_main: 33 callbacks suppressed [ 114.867051][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 114.935772][ T24] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 115.291783][ T5713] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 115.340383][ T5713] usb 1-1: USB disconnect, device number 9 [ 115.385233][ T6161] qrtr: Invalid version 164 [ 115.760219][ T6179] FAULT_INJECTION: forcing a failure. [ 115.760219][ T6179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.810494][ T6179] CPU: 0 UID: 0 PID: 6179 Comm: syz.1.131 Not tainted syzkaller #0 PREEMPT(full) [ 115.810517][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 115.810526][ T6179] Call Trace: [ 115.810533][ T6179] [ 115.810539][ T6179] dump_stack_lvl+0xe8/0x150 [ 115.810570][ T6179] should_fail_ex+0x412/0x560 [ 115.810592][ T6179] _copy_from_iter+0x1d3/0x1670 [ 115.810613][ T6179] ? rcu_is_watching+0x15/0xb0 [ 115.810636][ T6179] ? __pfx__copy_from_iter+0x10/0x10 [ 115.810659][ T6179] ? netlink_sendmsg+0x650/0xb40 [ 115.810679][ T6179] ? skb_put+0x11b/0x210 [ 115.810702][ T6179] netlink_sendmsg+0x6c0/0xb40 [ 115.810731][ T6179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.810755][ T6179] ? aa_sock_msg_perm+0xf1/0x1b0 [ 115.810779][ T6179] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 115.810802][ T6179] ____sys_sendmsg+0x972/0x9f0 [ 115.810825][ T6179] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.810844][ T6179] ? kstrtoull+0x12f/0x1d0 [ 115.810872][ T6179] ___sys_sendmsg+0x2a5/0x360 [ 115.810886][ T6179] ? __lock_acquire+0x6b5/0x2cf0 [ 115.810907][ T6179] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.810923][ T6179] ? get_pid_task+0x20/0x1f0 [ 115.810941][ T6179] ? get_pid_task+0x20/0x1f0 [ 115.810957][ T6179] ? get_pid_task+0x20/0x1f0 [ 115.810998][ T6179] ? __fget_files+0x2a/0x420 [ 115.811016][ T6179] ? __fget_files+0x3a0/0x420 [ 115.811042][ T6179] __sys_sendmsg+0x183/0x260 [ 115.811060][ T6179] ? __pfx___sys_sendmsg+0x10/0x10 [ 115.811094][ T6179] __do_fast_syscall_32+0x23e/0x6f0 [ 115.811112][ T6179] ? do_fast_syscall_32+0x33/0x70 [ 115.811127][ T6179] ? lockdep_hardirqs_on+0x7a/0x110 [ 115.811141][ T6179] ? asm_int80_emulation+0x1a/0x20 [ 115.811156][ T6179] ? do_int80_emulation+0x29f/0x550 [ 115.811177][ T6179] ? trace_irq_disable+0x3b/0x140 [ 115.811201][ T6179] do_fast_syscall_32+0x33/0x70 [ 115.811217][ T6179] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 115.811235][ T6179] RIP: 0023:0xf7f8801c [ 115.811257][ T6179] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 115.811273][ T6179] RSP: 002b:00000000f540450c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 115.811293][ T6179] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 115.811304][ T6179] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 115.811313][ T6179] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 115.811321][ T6179] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 115.811329][ T6179] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 115.811353][ T6179] [ 116.327268][ T6186] netlink: 24 bytes leftover after parsing attributes in process `syz.1.134'. [ 116.333709][ T9] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 116.376023][ T6185] netlink: 132 bytes leftover after parsing attributes in process `syz.1.134'. [ 116.412383][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.136'. [ 116.434537][ T6188] netlink: 'syz.4.136': attribute type 30 has an invalid length. [ 116.453888][ T35] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.467338][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.136'. [ 116.480751][ T35] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.492399][ T6189] netlink: 'syz.4.136': attribute type 30 has an invalid length. [ 116.500936][ T9] usb 1-1: Invalid ep0 maxpacket: 64 [ 116.508757][ T35] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.526522][ T35] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.635208][ T9] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 116.758974][ T5715] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 116.793708][ T9] usb 1-1: Invalid ep0 maxpacket: 64 [ 116.799822][ T9] usb usb1-port1: attempt power cycle [ 116.893718][ T5751] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 116.916752][ T5715] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.927912][ T6197] netlink: 28 bytes leftover after parsing attributes in process `syz.1.139'. [ 116.937028][ T5715] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 116.946558][ T6197] netlink: 7 bytes leftover after parsing attributes in process `syz.1.139'. [ 116.956107][ T5715] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 116.978553][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.999028][ T5715] usb 5-1: config 0 descriptor?? [ 117.017297][ T5715] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 117.031510][ T5715] dvb-usb: bulk message failed: -22 (3/0) [ 117.045647][ T5751] usb 3-1: Using ep0 maxpacket: 16 [ 117.066779][ T5751] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 117.091543][ T5715] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 117.101620][ T5751] usb 3-1: config 0 has no interface number 0 [ 117.124567][ T5715] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 117.134422][ T5715] usb 5-1: media controller created [ 117.140686][ T5751] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 117.150133][ T5751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.162744][ T5715] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.172807][ T9] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 117.180579][ T5751] usb 3-1: Product: syz [ 117.186134][ T5751] usb 3-1: Manufacturer: syz [ 117.192604][ T5751] usb 3-1: SerialNumber: syz [ 117.199660][ T5715] dvb-usb: bulk message failed: -22 (6/0) [ 117.207353][ T9] usb 1-1: Invalid ep0 maxpacket: 64 [ 117.222163][ T5715] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 117.232018][ T5751] usb 3-1: config 0 descriptor?? [ 117.245702][ T5715] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 117.259333][ T5751] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 117.278767][ T5715] dvb-usb: schedule remote query interval to 150 msecs. [ 117.287998][ T5715] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 117.310282][ T5715] usb 5-1: USB disconnect, device number 10 [ 117.344228][ T9] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 117.378924][ T5715] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 117.393974][ T9] usb 1-1: Invalid ep0 maxpacket: 64 [ 117.405631][ T9] usb usb1-port1: unable to enumerate USB device [ 117.826762][ T6211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.851210][ T6211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.892951][ T6215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.073693][ T1224] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 118.089597][ T6217] FAULT_INJECTION: forcing a failure. [ 118.089597][ T6217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.089618][ T6217] CPU: 0 UID: 0 PID: 6217 Comm: syz.1.146 Not tainted syzkaller #0 PREEMPT(full) [ 118.089629][ T6217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 118.089634][ T6217] Call Trace: [ 118.089638][ T6217] [ 118.089643][ T6217] dump_stack_lvl+0xe8/0x150 [ 118.089664][ T6217] should_fail_ex+0x412/0x560 [ 118.089688][ T6217] _copy_from_iter+0x1d3/0x1670 [ 118.089708][ T6217] ? rcu_is_watching+0x15/0xb0 [ 118.089732][ T6217] ? __pfx__copy_from_iter+0x10/0x10 [ 118.089755][ T6217] ? netlink_sendmsg+0x650/0xb40 [ 118.089770][ T6217] ? skb_put+0x11b/0x210 [ 118.089785][ T6217] netlink_sendmsg+0x6c0/0xb40 [ 118.089803][ T6217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.089818][ T6217] ? aa_sock_msg_perm+0xf1/0x1b0 [ 118.089832][ T6217] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 118.089847][ T6217] ____sys_sendmsg+0x972/0x9f0 [ 118.089860][ T6217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.089871][ T6217] ? kstrtoull+0x12f/0x1d0 [ 118.089889][ T6217] ___sys_sendmsg+0x2a5/0x360 [ 118.089897][ T6217] ? __lock_acquire+0x6b5/0x2cf0 [ 118.089909][ T6217] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.089918][ T6217] ? get_pid_task+0x20/0x1f0 [ 118.089930][ T6217] ? get_pid_task+0x20/0x1f0 [ 118.089940][ T6217] ? get_pid_task+0x20/0x1f0 [ 118.089962][ T6217] ? __fget_files+0x2a/0x420 [ 118.089980][ T6217] ? __fget_files+0x3a0/0x420 [ 118.089996][ T6217] __sys_sendmsg+0x183/0x260 [ 118.090006][ T6217] ? __pfx___sys_sendmsg+0x10/0x10 [ 118.090024][ T6217] __do_fast_syscall_32+0x23e/0x6f0 [ 118.090035][ T6217] ? do_fast_syscall_32+0x33/0x70 [ 118.090043][ T6217] ? lockdep_hardirqs_on+0x7a/0x110 [ 118.090052][ T6217] ? asm_int80_emulation+0x1a/0x20 [ 118.090061][ T6217] ? do_int80_emulation+0x29f/0x550 [ 118.090070][ T6217] ? trace_irq_disable+0x3b/0x140 [ 118.090085][ T6217] do_fast_syscall_32+0x33/0x70 [ 118.090096][ T6217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.090106][ T6217] RIP: 0023:0xf7f8801c [ 118.090116][ T6217] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 118.090123][ T6217] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 118.090133][ T6217] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800012c0 [ 118.090140][ T6217] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.090145][ T6217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.090149][ T6217] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 118.090155][ T6217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.090167][ T6217] [ 118.226120][ T1224] usb 5-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 118.226162][ T1224] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 118.226206][ T1224] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.226226][ T1224] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 118.226247][ T1224] usb 5-1: config 0 interface 0 has no altsetting 0 [ 118.226276][ T1224] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 118.226295][ T1224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.229606][ T1224] usb 5-1: config 0 descriptor?? [ 118.354371][ T5751] gspca_spca1528: reg_w err -110 [ 118.530266][ T5713] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 118.549557][ T5713] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 118.554700][ T1224] usbhid 5-1:0.0: can't add hid device: -71 [ 118.625915][ T5751] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 118.652870][ T5751] usb 3-1: USB disconnect, device number 7 [ 118.722913][ T1224] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 118.745792][ T1224] usb 5-1: USB disconnect, device number 11 [ 118.885344][ T6231] FAULT_INJECTION: forcing a failure. [ 118.885344][ T6231] name failslab, interval 1, probability 0, space 0, times 0 [ 118.898472][ T6231] CPU: 0 UID: 0 PID: 6231 Comm: syz.0.150 Not tainted syzkaller #0 PREEMPT(full) [ 118.898493][ T6231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 118.898503][ T6231] Call Trace: [ 118.898509][ T6231] [ 118.898516][ T6231] dump_stack_lvl+0xe8/0x150 [ 118.898540][ T6231] should_fail_ex+0x412/0x560 [ 118.898562][ T6231] should_failslab+0xa8/0x100 [ 118.898580][ T6231] __kmalloc_cache_noprof+0x88/0x660 [ 118.898602][ T6231] ? sctp_association_new+0x89/0x25e0 [ 118.898626][ T6231] sctp_association_new+0x89/0x25e0 [ 118.898648][ T6231] ? sctp_has_association+0x1cd/0x1f0 [ 118.898667][ T6231] ? sctp_has_association+0x2f/0x1f0 [ 118.898688][ T6231] ? __ipv6_addr_type+0x247/0x2f0 [ 118.898708][ T6231] sctp_connect_new_asoc+0x2e4/0x6b0 [ 118.898731][ T6231] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 118.898750][ T6231] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 118.898769][ T6231] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 118.898785][ T6231] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 118.898805][ T6231] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 118.898826][ T6231] __sctp_connect+0x5cb/0xdc0 [ 118.898856][ T6231] ? __pfx___sctp_connect+0x10/0x10 [ 118.898873][ T6231] ? security_sctp_bind_connect+0x7e/0x2c0 [ 118.898894][ T6231] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 118.898919][ T6231] sctp_getsockopt_connectx3+0x227/0x360 [ 118.898934][ T6231] ? lock_sock_nested+0x6a/0x100 [ 118.898954][ T6231] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 118.898980][ T6231] ? __local_bh_enable_ip+0xd0/0x130 [ 118.899001][ T6231] sctp_getsockopt+0x984/0xb90 [ 118.899020][ T6231] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 118.899040][ T6231] do_sock_getsockopt+0x51d/0x7e0 [ 118.899068][ T6231] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 118.899087][ T6231] ? __fget_files+0x2a/0x420 [ 118.899119][ T6231] ? __fget_files+0x2a/0x420 [ 118.899136][ T6231] ? __fget_files+0x3a0/0x420 [ 118.899152][ T6231] ? __fget_files+0x2a/0x420 [ 118.899177][ T6231] __ia32_sys_getsockopt+0x1a4/0x240 [ 118.899207][ T6231] __do_fast_syscall_32+0x23e/0x6f0 [ 118.899224][ T6231] ? do_fast_syscall_32+0x33/0x70 [ 118.899240][ T6231] ? lockdep_hardirqs_on+0x7a/0x110 [ 118.899254][ T6231] ? asm_int80_emulation+0x1a/0x20 [ 118.899269][ T6231] ? do_int80_emulation+0x29f/0x550 [ 118.899284][ T6231] ? trace_irq_disable+0x3b/0x140 [ 118.899308][ T6231] do_fast_syscall_32+0x33/0x70 [ 118.899325][ T6231] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.899342][ T6231] RIP: 0023:0xf6fdf01c [ 118.899357][ T6231] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 118.899378][ T6231] RSP: 002b:00000000f53cd50c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 118.899395][ T6231] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 118.899405][ T6231] RDX: 000000000000006f RSI: 0000000080000280 RDI: 0000000080000000 [ 118.899415][ T6231] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.899424][ T6231] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 118.899433][ T6231] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.899458][ T6231] [ 119.396613][ T6238] IPv6: NLM_F_REPLACE set, but no existing node found! [ 119.565011][ T5713] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 119.637181][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 119.637195][ T29] audit: type=1326 audit(1780217636.966:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.0.157" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x0 [ 119.771508][ T6256] [ 119.773877][ T6256] ====================================================== [ 119.780892][ T6256] WARNING: possible circular locking dependency detected [ 119.787912][ T6256] syzkaller #0 Not tainted [ 119.792308][ T6256] ------------------------------------------------------ [ 119.799304][ T6256] syz.2.160/6256 is trying to acquire lock: [ 119.805172][ T6256] ffffffff8ea5f960 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x261/0x19c0 [ 119.814727][ T6256] [ 119.814727][ T6256] but task is already holding lock: [ 119.822072][ T6256] ffff8880272bb840 (&q->q_usage_counter(io)#17){++++}-{0:0}, at: blk_throtl_init+0x279/0x410 [ 119.832230][ T6256] [ 119.832230][ T6256] which lock already depends on the new lock. [ 119.832230][ T6256] [ 119.842615][ T6256] [ 119.842615][ T6256] the existing dependency chain (in reverse order) is: [ 119.851609][ T6256] [ 119.851609][ T6256] -> #2 (&q->q_usage_counter(io)#17){++++}-{0:0}: [ 119.860194][ T6256] blk_alloc_queue+0x546/0x680 [ 119.865466][ T6256] __blk_mq_alloc_disk+0x197/0x390 [ 119.871083][ T6256] loop_add+0x482/0xb40 [ 119.875739][ T6256] loop_init+0xd9/0x170 [ 119.880402][ T6256] do_one_initcall+0x250/0x870 [ 119.885664][ T6256] do_initcall_level+0x104/0x190 [ 119.891103][ T6256] do_initcalls+0x59/0xa0 [ 119.895935][ T6256] kernel_init_freeable+0x2a6/0x3e0 [ 119.901631][ T6256] kernel_init+0x1d/0x1d0 [ 119.906463][ T6256] ret_from_fork+0x514/0xb70 [ 119.911561][ T6256] ret_from_fork_asm+0x1a/0x30 [ 119.916824][ T6256] [ 119.916824][ T6256] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 119.924040][ T6256] fs_reclaim_acquire+0x71/0x100 [ 119.929483][ T6256] prepare_alloc_pages+0x152/0x650 [ 119.935132][ T6256] __alloc_frozen_pages_noprof+0x12f/0x380 [ 119.941461][ T6256] __alloc_pages_noprof+0x10/0x100 [ 119.947106][ T6256] pcpu_populate_chunk+0x182/0xb30 [ 119.952729][ T6256] pcpu_alloc_noprof+0xcc2/0x19c0 [ 119.958266][ T6256] xt_percpu_counter_alloc+0x161/0x220 [ 119.964238][ T6256] translate_table+0x1332/0x20b0 [ 119.969685][ T6256] ip6t_register_table+0x11b/0x330 [ 119.975301][ T6256] ip6table_nat_table_init+0x43/0x300 [ 119.981182][ T6256] xt_find_table_lock+0x30c/0x3f0 [ 119.986708][ T6256] xt_request_find_table_lock+0x26/0x100 [ 119.992842][ T6256] do_ip6t_get_ctl+0x716/0x1230 [ 119.998201][ T6256] nf_getsockopt+0x26e/0x290 [ 120.003293][ T6256] ipv6_getsockopt+0x1fd/0x2b0 [ 120.008563][ T6256] do_sock_getsockopt+0x51d/0x7e0 [ 120.014094][ T6256] __sys_getsockopt+0x127/0x1c0 [ 120.019449][ T6256] __ia32_compat_sys_socketcall+0x86a/0xa10 [ 120.025840][ T6256] __do_fast_syscall_32+0x23e/0x6f0 [ 120.031558][ T6256] do_fast_syscall_32+0x33/0x70 [ 120.036909][ T6256] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.043740][ T6256] [ 120.043740][ T6256] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 120.051490][ T6256] __lock_acquire+0x15a5/0x2cf0 [ 120.056845][ T6256] lock_acquire+0x106/0x350 [ 120.061851][ T6256] __mutex_lock+0x1a3/0x1550 [ 120.066942][ T6256] pcpu_alloc_noprof+0x261/0x19c0 [ 120.072470][ T6256] __percpu_counter_init_many+0x43/0x380 [ 120.078602][ T6256] blkg_rwstat_init+0x2c/0x170 [ 120.083873][ T6256] throtl_pd_alloc+0xb6/0x460 [ 120.089051][ T6256] blkcg_activate_policy+0x692/0xb40 [ 120.094847][ T6256] blk_throtl_init+0x2f6/0x410 [ 120.100113][ T6256] tg_set_conf+0x1d6/0x4c0 [ 120.105026][ T6256] cgroup_file_write+0x331/0x8f0 [ 120.110465][ T6256] kernfs_fop_write_iter+0x3af/0x540 [ 120.116248][ T6256] vfs_write+0x61d/0xb90 [ 120.120992][ T6256] ksys_write+0x150/0x270 [ 120.125824][ T6256] __do_fast_syscall_32+0x23e/0x6f0 [ 120.131527][ T6256] do_fast_syscall_32+0x33/0x70 [ 120.136878][ T6256] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.143710][ T6256] [ 120.143710][ T6256] other info that might help us debug this: [ 120.143710][ T6256] [ 120.153935][ T6256] Chain exists of: [ 120.153935][ T6256] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#17 [ 120.153935][ T6256] [ 120.167564][ T6256] Possible unsafe locking scenario: [ 120.167564][ T6256] [ 120.174992][ T6256] CPU0 CPU1 [ 120.180335][ T6256] ---- ---- [ 120.185676][ T6256] lock(&q->q_usage_counter(io)#17); [ 120.191034][ T6256] lock(fs_reclaim); [ 120.197514][ T6256] lock(&q->q_usage_counter(io)#17); [ 120.205387][ T6256] lock(pcpu_alloc_mutex); [ 120.209871][ T6256] [ 120.209871][ T6256] *** DEADLOCK *** [ 120.209871][ T6256] [ 120.217991][ T6256] 7 locks held by syz.2.160/6256: [ 120.222989][ T6256] #0: ffff888036f89430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 120.232019][ T6256] #1: ffff888035c34410 (sb_writers#10){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 120.240966][ T6256] #2: ffff888037296080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 120.250686][ T6256] #3: ffff888059ef03c8 (kn->active#65){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 120.260673][ T6256] #4: ffff8880272bba40 (&q->rq_qos_mutex){+.+.}-{4:4}, at: blkg_conf_open_bdev+0x2b0/0x3c0 [ 120.270746][ T6256] #5: ffff8880272bb840 (&q->q_usage_counter(io)#17){++++}-{0:0}, at: blk_throtl_init+0x279/0x410 [ 120.281351][ T6256] #6: ffff8880272bb878 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: blk_throtl_init+0x279/0x410 [ 120.291942][ T6256] [ 120.291942][ T6256] stack backtrace: [ 120.297810][ T6256] CPU: 1 UID: 0 PID: 6256 Comm: syz.2.160 Not tainted syzkaller #0 PREEMPT(full) [ 120.297824][ T6256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 120.297831][ T6256] Call Trace: [ 120.297837][ T6256] [ 120.297843][ T6256] dump_stack_lvl+0xe8/0x150 [ 120.297857][ T6256] print_circular_bug+0x2e1/0x300 [ 120.297873][ T6256] check_noncircular+0x12e/0x150 [ 120.297888][ T6256] __lock_acquire+0x15a5/0x2cf0 [ 120.297906][ T6256] ? pcpu_alloc_noprof+0x261/0x19c0 [ 120.297922][ T6256] lock_acquire+0x106/0x350 [ 120.297932][ T6256] ? pcpu_alloc_noprof+0x261/0x19c0 [ 120.297950][ T6256] __mutex_lock+0x1a3/0x1550 [ 120.297962][ T6256] ? pcpu_alloc_noprof+0x261/0x19c0 [ 120.297978][ T6256] ? kasan_save_track+0x4f/0x80 [ 120.297992][ T6256] ? kasan_save_track+0x3e/0x80 [ 120.298005][ T6256] ? __kasan_kmalloc+0x93/0xb0 [ 120.298019][ T6256] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 120.298034][ T6256] ? throtl_pd_alloc+0x9d/0x460 [ 120.298048][ T6256] ? blkcg_activate_policy+0x692/0xb40 [ 120.298060][ T6256] ? blk_throtl_init+0x2f6/0x410 [ 120.298074][ T6256] ? tg_set_conf+0x1d6/0x4c0 [ 120.298083][ T6256] ? cgroup_file_write+0x331/0x8f0 [ 120.298097][ T6256] ? vfs_write+0x61d/0xb90 [ 120.298111][ T6256] ? pcpu_alloc_noprof+0x261/0x19c0 [ 120.298125][ T6256] ? do_fast_syscall_32+0x33/0x70 [ 120.298137][ T6256] ? __pfx___mutex_lock+0x10/0x10 [ 120.298153][ T6256] pcpu_alloc_noprof+0x261/0x19c0 [ 120.298171][ T6256] ? rcu_is_watching+0x15/0xb0 [ 120.298184][ T6256] __percpu_counter_init_many+0x43/0x380 [ 120.298196][ T6256] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 120.298212][ T6256] blkg_rwstat_init+0x2c/0x170 [ 120.298226][ T6256] throtl_pd_alloc+0xb6/0x460 [ 120.298241][ T6256] ? __pfx_throtl_pd_alloc+0x10/0x10 [ 120.298254][ T6256] blkcg_activate_policy+0x692/0xb40 [ 120.298273][ T6256] blk_throtl_init+0x2f6/0x410 [ 120.298291][ T6256] tg_set_conf+0x1d6/0x4c0 [ 120.298301][ T6256] ? kernfs_root+0x1c/0x230 [ 120.298316][ T6256] ? __pfx_tg_set_conf+0x10/0x10 [ 120.298327][ T6256] ? kernfs_root+0x1c/0x230 [ 120.298339][ T6256] ? kernfs_root+0x1c/0x230 [ 120.298351][ T6256] ? kernfs_root+0x1c/0x230 [ 120.298364][ T6256] ? kernfs_root+0x1ea/0x230 [ 120.298377][ T6256] ? __pfx_tg_set_conf_uint+0x10/0x10 [ 120.298387][ T6256] cgroup_file_write+0x331/0x8f0 [ 120.298402][ T6256] ? __pfx_cgroup_file_write+0x10/0x10 [ 120.298418][ T6256] ? __pfx_cgroup_file_write+0x10/0x10 [ 120.298431][ T6256] kernfs_fop_write_iter+0x3af/0x540 [ 120.298444][ T6256] vfs_write+0x61d/0xb90 [ 120.298460][ T6256] ? __pfx_vfs_write+0x10/0x10 [ 120.298477][ T6256] ? __fget_files+0x2a/0x420 [ 120.298493][ T6256] ksys_write+0x150/0x270 [ 120.298508][ T6256] ? __pfx_ksys_write+0x10/0x10 [ 120.298525][ T6256] __do_fast_syscall_32+0x23e/0x6f0 [ 120.298536][ T6256] ? do_fast_syscall_32+0x33/0x70 [ 120.298547][ T6256] ? lockdep_hardirqs_on+0x7a/0x110 [ 120.298557][ T6256] ? asm_int80_emulation+0x1a/0x20 [ 120.298568][ T6256] ? do_int80_emulation+0x29f/0x550 [ 120.298579][ T6256] ? trace_irq_disable+0x3b/0x140 [ 120.298595][ T6256] do_fast_syscall_32+0x33/0x70 [ 120.298607][ T6256] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.298620][ T6256] RIP: 0023:0xf7f3601c [ 120.298631][ T6256] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 120.298640][ T6256] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 120.298652][ T6256] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 120.298660][ T6256] RDX: 000000000000006a RSI: 0000000000000000 RDI: 0000000000000000 [ 120.298666][ T6256] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 120.298673][ T6256] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 120.298679][ T6256] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.298690][ T6256] [ 120.675649][ T1224] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 120.677159][ T5713] usb 4-1: Using ep0 maxpacket: 32 [ 120.700726][ T5713] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 120.709095][ T5713] usb 4-1: config 0 has no interface number 0 [ 120.715401][ T5713] usb 4-1: config 0 interface 184 has no altsetting 0 [ 120.726306][ T5713] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 120.735549][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.743567][ T5713] usb 4-1: Product: syz [ 120.748106][ T5713] usb 4-1: Manufacturer: syz [ 120.752711][ T5713] usb 4-1: SerialNumber: syz [ 120.758920][ T5713] usb 4-1: config 0 descriptor?? [ 120.833710][ T1224] usb 1-1: Using ep0 maxpacket: 32 [ 120.841611][ T1224] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 120.850806][ T1224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.859824][ T1224] usb 1-1: Product: syz [ 120.864045][ T1224] usb 1-1: Manufacturer: syz [ 120.868772][ T1224] usb 1-1: SerialNumber: syz [ 120.875407][ T1224] usb 1-1: config 0 descriptor?? [ 120.882188][ T1224] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 121.373659][ T5713] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 121.385039][ T5713] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 122.265173][ T5713] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 122.278080][ T5713] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 122.288017][ T5713] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 122.297692][ T5713] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 122.308641][ T5713] usb 4-1: USB disconnect, device number 11 [ 122.624002][ T1224] gspca_ov534_9: reg_r err -110 [ 122.883643][ T1224] gspca_ov534_9: Unknown sensor 0000 [ 122.883700][ T1224] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 123.305008][ T24] usb 1-1: USB disconnect, device number 14