last executing test programs: 8m15.897129741s ago: executing program 2 (id=3909): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, r2, {0x7, 0x1f, 0xffffffff, 0xa5a020f, 0x400, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0xe0d, {0x410000003, 0x13, 0x0, {0x0, 0x80002, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8001, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0xffffffff, 0x62}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x567, 0x2583, 0x0, 0x0, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x1b) 8m14.747754231s ago: executing program 2 (id=3912): r0 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x698c, 0x40, 0x2, 0xfffffffd}) fanotify_init(0x200, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000006ffc)=0x4000000000000200, 0x4) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 8m14.27484544s ago: executing program 2 (id=3915): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000004840)=0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'wlan1\x00', @broadcast}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af60, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) close(0x4) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGUCODE(r3, 0xc018480d, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, r4) mremap(&(0x7f00000ab000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x4, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0x0, r7, r8, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r9, &(0x7f00000000c0)='lp\x00', 0xfffffdef) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {0x1, 0x7}, [], {0x4, 0x7}, [], {0x10, 0x4}, {0x20, 0x1}}, 0x24, 0x0) r10 = dup2(r9, r5) fallocate(r10, 0x10, 0x9, 0x3ff) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) 8m10.011424267s ago: executing program 2 (id=3929): r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) r5 = socket(0x1e, 0x4, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xd7, 0xcc, 0x73, 0x20, 0x856, 0xac30, 0x7e79, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe1, 0x0, 0x0, 0xde, 0xf5, 0x9c}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0xfdff) 8m5.552510275s ago: executing program 2 (id=3942): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x10400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100, 0x0, 0x16e}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2}) io_uring_enter(r4, 0x3f80, 0x3697, 0x25, 0x0, 0x0) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r7, 0x400, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) ppoll(&(0x7f00000000c0)=[{r4, 0x10}, {r3, 0x50}, {r3, 0x8}], 0x3, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x10001]}, 0x8) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) syz_open_dev$sndctrl(&(0x7f0000000040), 0xfffffffffffffffc, 0xc6181) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000231001c0"]) 7m49.722463762s ago: executing program 32 (id=3942): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x10400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100, 0x0, 0x16e}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2}) io_uring_enter(r4, 0x3f80, 0x3697, 0x25, 0x0, 0x0) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r7, 0x400, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) ppoll(&(0x7f00000000c0)=[{r4, 0x10}, {r3, 0x50}, {r3, 0x8}], 0x3, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x10001]}, 0x8) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) syz_open_dev$sndctrl(&(0x7f0000000040), 0xfffffffffffffffc, 0xc6181) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000231001c0"]) 8.864967459s ago: executing program 5 (id=5788): r0 = socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x94) r1 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x204}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x6998, 0x4) sendmmsg$inet6(r4, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e27, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/29, 0x1d}}], 0x1, 0x12141, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) r6 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000572000/0x4000)=nil, 0x4000}, 0x2}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000000800000a010102000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc010000000000000000000000000000000000000400"/180], 0xfc}}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000100)={0x1, 'wg1\x00', {}, 0x9}) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 8.545157321s ago: executing program 5 (id=5789): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x39, 0x7, 0x13}, 0x2c) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@fallback, 0xffffffffffffffff, 0x31, 0x1c}, 0x20) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000780), 0x40, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000007c0)=0x19) close_range(r2, 0xffffffffffffffff, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f00000006c0)="27050200590414000600002f1eafbcf706e10500000086ddffff1104ee1611d4b8bf4a82f6184b8a34f90186cee84400000000000000001900000000", 0x3c}, {&(0x7f0000001040)="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", 0x444}], 0x2}, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 7.454742485s ago: executing program 5 (id=5792): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="021800000b00000000000000df570000030005000000000002000200e00000010020080000000000030012000000000002000000000000000000000000000000030006000000000002"], 0x58}}, 0x0) 7.165828556s ago: executing program 1 (id=5794): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x561000, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000082f00fe88a43de1a400000000400000007d01ff0200000000000000000000000000010000883e"], 0xfdef) 7.087291348s ago: executing program 5 (id=5795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xc}]}]}], {0x14}}, 0x98}}, 0x0) 7.022035428s ago: executing program 5 (id=5796): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x6}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x44}}, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async) write$binfmt_aout(r2, 0x0, 0xffffffdb) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 6.509265724s ago: executing program 1 (id=5797): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000180)='A', 0x1, 0x40050, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6906bb2b0eb2fe32d2f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcc", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68c02bb40b6b870bd", 0x1c}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a872", 0xa0}, {&(0x7f0000000740)="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", 0x1d3}], 0x3}}], 0x2, 0xc0) 6.427511586s ago: executing program 1 (id=5798): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = semget$private(0x0, 0x4000000009, 0x42a) semctl$GETVAL(r2, 0x0, 0xc, &(0x7f0000000040)=""/119) semop(r2, &(0x7f00000002c0)=[{0x0, 0x9b6a}, {0x4, 0x202}, {0x0, 0x8, 0x1000}, {0x0, 0xfff, 0x1000}], 0x4) semop(r2, &(0x7f0000000200), 0x53) semctl$GETNCNT(r2, 0x0, 0xe, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000000c0), 0x0, 0x4040884) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) socket$kcm(0x2, 0x5, 0x84) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) 5.980526882s ago: executing program 0 (id=5801): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',x']) read$FUSE(r2, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r6, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x150, 0x0, 0x0, [{{0x3, 0x2, 0x37a, 0x6, 0x9b, 0xc4b0, {0x0, 0x3, 0x1, 0x2000000ec3, 0x7, 0x8, 0x7f, 0xfffff5e3, 0x1, 0xa000, 0x5, r4, r5, 0xfffff057, 0xa}}, {0x4, 0x0, 0xa3, 0x800, 'rootmode\x14\x02@\x19\xb3%j\xda\x91\x97\x92\x119\xffo1E\x18\xda\xd8\x02\xc6[m\xe2\x1b;\x01\xd5\x99\xe0\x96\x91\x94\x053\x06U\xc1\xcc\xeax\x80n\a\xf7W\f*YZa\xd3\x7f\xd7Q\xe8~\xdc\x18{\x12\xaf\xddq\xd4\xb69\x11\x9e\xc9\xc1\xf7\xba\xe56\x81e/\xdb\xb9@\t\x8c\xa5\x9b;qu\xfd\x8c+\x9b\xf2\xa0\xaf\xd4\xec\x0f3\xe9\"\xb3[\xed\xf2\xd4\x03s\xd1\xdeXp\xedU;\\*e\xf3o\xe4`\xc2T(\xc0\xda\vY\xd6\xb5N\x1d\xd9\x88}\v\xb0\x9f\xbb\x0f\rP\xb4w\x88\xb0\x04\xb2%e\x00\xdc\xbd'}}]}, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000005c0)={{0x3000, 0xd000, 0x9, 0x7, 0xe, 0x40, 0x9, 0x80, 0x0, 0x4, 0xb8, 0x9}, {0x8080000, 0x4, 0x4, 0xeb, 0xed, 0x1, 0x1, 0x8, 0x2c, 0x5, 0x2, 0xc}, {0x1, 0x2, 0x4, 0xb, 0x7, 0x40, 0x1, 0x0, 0x9, 0x4, 0xc, 0xc1}, {0x100000, 0x2000, 0x1, 0x9, 0xb5, 0x8, 0x4, 0x6, 0xa6, 0x8, 0x8, 0xb}, {0xdddd1000, 0xffff1000, 0xb, 0xc, 0xd0, 0xc, 0x3, 0xc, 0x4, 0x6, 0x10, 0x2b}, {0x0, 0x8000000, 0xd, 0x81, 0x6, 0xfb, 0x7, 0x5, 0x2, 0x67}, {0x8000000, 0x1000, 0x3, 0x8, 0x5, 0x3, 0x23, 0x0, 0xd, 0x8, 0x38}, {0x4, 0xeeee8000, 0x4, 0xc, 0x4, 0xb2, 0xbc, 0x80, 0x4, 0x9, 0x6, 0xb}, {0x102001, 0xa1b}, {0x6000, 0x7}, 0x0, 0x0, 0xeeee8000, 0x80, 0xc, 0x4000, 0x6000, [0x9, 0x81, 0x8, 0x8]}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0xd6, 0xc, 0x0, 0xfffffffffffff000, 0x8, 0x0, 0x80, 0x706, 0x0, 0x101, 0x4, 0x8000, 0x7ff, 0x400, 0x9, 0x80000000], 0x10000, 0x400}) unshare(0x22020600) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x8, 0x5, 0x470, 0x2c4, 0x2c4, 0xffffffff, 0x2c4, 0x0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'ip6erspan0\x00', 'wg2\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x5, @ipv4=@private, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@private, @ipv6=@dev, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'veth1_to_hsr\x00', 'veth0_vlan\x00', {}, {}, 0x84, 0x0, 0x0, 0x10}, 0x0, 0xa4, 0xec}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @local, [], [], 'vlan0\x00', 'veth0_vlan\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "8100000000000000000000005b37f9ca83139d1d43f7ff00"}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4cc) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r8, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r8, 0xc00464b4, &(0x7f00000000c0)={r10}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.308687589s ago: executing program 3 (id=5806): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000940)={0x38, 0x5, 0x0, 0x4, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x9}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20008840, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r5 = add_key$user(0x0, &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="00fd67c6d222406b096cc34801001000647418aaf9b90732f41ec9591b532723e017c8c54d863ecd9b0df09072030025c3a03ce14a48716ba2f4127d38d2129825d9fff7065d51f973ee7ad483b1b28e4aa696cd0d0000b1e1caee2a1ffdbff2b7601618da596d1db25ba3cd0e6c352a27bcb491e01f716712f22f38ce63658951ffe9c3e755a5669dfd0aa44a04dfd4e3df02b0bfd0781bc9607466d4fd536faac836e6252b3119c95587671b", 0xad, r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, 0x0, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(&(0x7f0000000380)='./file0\x00', 0x6ec58fa5834dfb19, 0xdb) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4004550d, &(0x7f0000000500)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r9, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 4.923242216s ago: executing program 0 (id=5808): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000000000014058000b4824ca945f64009400ff0325010ebc000b00000000008000f0fffeffe809005300fff5dd000000100001d80cf42098da03870000000000", 0x58}], 0x1) 4.756416853s ago: executing program 4 (id=5809): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x88}, @NFTA_SET_POLICY={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x2) preadv(r2, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xca80}], 0x1, 0x80000001, 0x3f7a) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x1006b, 0x8, 0x4}, 0x14) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, 0x0) 4.558781008s ago: executing program 0 (id=5810): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, &(0x7f0000000280)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000)={0x5, [0x1, 0x7, 0xb14, 0x8bd0, 0x3]}, &(0x7f0000000040)=0xe) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a9, 0x50001}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x80}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040890}, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000003b40)=0x0) (async) statx(0xffffffffffffffff, 0x0, 0x0, 0x7ff, &(0x7f0000003bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000003cc0)='./file0\x00', 0x6000, 0x40, &(0x7f0000003d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)="abe9ba6931401cc6bdf0a86f7b728182d3cd84a3191024e2ea1b06b0d0784ba91cd3b3114e4749bc2d35c8c6b3a4a20a2c50e3518ce993605353a675563d551e3222609d9097d18395c6cee46cf6a1c9a7be65f43185fcb007c0a144ac377321a74411a2d812f0bacefdc88b52ea7f7d58f95c414a82406b5b3fe4dc3ae6934332e240e1ac1c11e3fce8228a0a2ceec3eb8d9bf94b085d73088fe203e1c99bd537dc18d1de8d81", 0xa7}], 0x1, &(0x7f0000000900)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r4, r5, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48, 0x4000800}}, {{&(0x7f0000000980)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000001500)="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", 0xdff}, {&(0x7f00000002c0)="4ef4cd80e847ea3a7501cb69bb77eb48789d0ca1d8dcc7b670b714fbe7588f2e9277e4bc5cb330a66d827b93fc78bff40eed5d50edfe33771eaa79ab12f9", 0x3e}, {&(0x7f0000000a00)="2a6fb606f7930ce020a00c3b0a61f4a0794cf2b6a36c27b525c69b5e00b20c2a52e34b2947fc965ca7e826a6dec817a65c3f9165a240df169fab47ada9bec13f7b84985ac187ca8e965f8646c2a63b3ff10cf5d6a0e991771838bc731348d5be372d58c8d417e510f8ab3e8ce12bfa9e947f00ad284d2744e32341bdda7c627022be9592ae56fb5121bf9b38ed0cc2e39b6e0f0e19c46675b32c69a249dc7fefd34717c3e25022adf3295b52c413f5759a8dd123230068bc56f9b2173781897e22935139e525335519f6e88b18465db4cb5abeceb658c3933e", 0xd9}, {&(0x7f0000000b00)="4b7be85a1484f2a4364a710366d6df68538b4d28585bcb83276e0e599e6426838d2aec57df64547c4f581093f3428e5a4eb70735229d9e39ac25b9a165a73787d5155d87896c8acafe2fda020798d80116a45c5d5e880536eab10201bc138a8d9e462530ae50b93c177ecfe4dd03c6e2fe26f7888562723af4ce3e5dd66f1478811eecc2215cf4258fa35ff2396bddb18fac3645620d0e1b212104a74d1ed0c6e4acb05a5dd1cb76fd2f2a25fa410a6493737e338ef05719ca9a989021c2f52b850178a02920d5ab79edc79d006419a2024c9e8731f2266c7dcbcbe32ee9658e481cf25fa0ef648ad6534f8ff1992f370e35", 0xf2}, {&(0x7f0000000cc0)="5518b77eab8f73c4ae8efb520d9aef376eb7dc45c9d141eeb42355b2f9b7274a19a194292eefa708b8d2c1406aac1ef776940a", 0x33}, {&(0x7f0000000d00)="ebd70ad5b48abbfa8462dbc48f6c7647b942bb87dea19d8cd7fd9832b2335709b370a6981744bcb9", 0x28}, {&(0x7f0000000d40)="efd17c", 0x3}, {&(0x7f0000000d80)="a667cde0ef1e8289d449816a49da023344c8b8806ce77bccdf79341f1985e116489c5d9f6856d60f6bd08e6f2a", 0x2d}, {&(0x7f0000000dc0)="49f37e2cec05390f55b43d7341d156c1713c3ee679d9ed4fc1ae2a5c77a28086cf7ab202b80668f66bd3bcde6c8e2f0c9d0c2875eabce9a3d39d2d39ea3477e27b8e10802390bcece36578c03121bf9675158f87a21506346a803438fd48d299dd10c76bba601d91d5e081c0f934122fe420061bb93abf1a0163f5b32c015e542b4eec86c123cd9724edda1add385c2a613fe7e0f1ff9d04208ad6", 0x9b}], 0x9, &(0x7f0000000f80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff]}}], 0x28, 0x8000}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000fc0)="9c2bd7961ff17bcc28a0c29484649ad1e15a2796277fba7445a01ef0ad2f5aef06467a0503c7da4dfa20669ba96047f750f2634de12a5f69a4caebb6a93d990bedf4ac083116932366ee2d3aa65529941d169677a832b0b3a869d4b82752461183b0b9492e963745853b7325fdc34a5a57e3f9f27ebc35c4457c98fb2a43", 0x7e}, {&(0x7f0000001080)="33917417016fc667fdd1649dc36624b7943b4ff7e84bb125a0368acf1e4ff74ac6baff9c0c9bde89001face457dde9d93cd575c5942f3f963fefe24823fa0096249375d838d53f7279b6721690d103b1ab461b1918be9499339a9ca60dc157467837099018cf7701ccf4d46271ba3f2f2b5c5cd388ff1b7da098c118a1f47145d21ec457706d29bb7553ac5aca17afa1f4a505872224256f48f3074828146a52ae5e5b12d2781c88dfe28d4610f9eaab9bdf1e0ab3fa7f94f6543d2154e234c9204f", 0xc2}, {&(0x7f0000002500)="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", 0xffe}, {&(0x7f0000001180)="1bef8c8bca271d3289347b37ec4402079878fdf8dce79cbb4b89d13ed3f7f34a6bf44d869113b9676434e49e20153f3c5b8184588ea133b4fd695597ffc87ac3640c008048adf4", 0x47}], 0x4, &(0x7f0000003500)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r4, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r5, r4, r4]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, r4, r4]}}], 0xd0, 0x40000}}, {{&(0x7f0000001440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003640)=[{&(0x7f0000003600)="3e2c4cbc71c32a908796bcfbc667", 0xe}], 0x1, &(0x7f00000037c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff, r5, r4]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r5]}}], 0x90, 0x10044000}}, {{&(0x7f0000003880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003b00)=[{&(0x7f0000003900)="1699c5172b9a9011fb12d00d068d1b94c9fcfa73d141259e138011d167ea55491885e805d8f51fc3e1d61ab7602e5b4a12fa46d99dcf87d0b548e583ca47b572c72b79d4860822acd37bd603aae81974bee187d99bf12c8c5a4dac15b2f18433720749a485ad567c808211cbae4453da210a7a810c10e3fd04a6f8b2a47f3482f6a79ebb5692d64fcffbadfebeac31a5820861fe6ad483b7f7f4d56d6e588e8846bda97cafa4fe284e6e0703b6b83e571dfb7c644402b152e42d83fa9c78d0daa31e09826afa8bd8388ff15daf941e9634b081307b01b988bf453b656a6db5e6f1c516aafcd3ec06c2d3d32d", 0xec}, {&(0x7f0000003a00)="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", 0xfc}], 0x2, &(0x7f0000003e00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r5, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="6248aea9"], 0xc0, 0x8044}}], 0x5, 0x4008000) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x3d, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x8}}) r10 = syz_io_uring_complete(0x0) (async) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r11, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r11, 0xc02064b6, &(0x7f00000001c0)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r11, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r13, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r11, 0xc03864bc, &(0x7f00000002c0)={0x0, 0x1, &(0x7f0000000380)=[r13], &(0x7f0000000180)=[0x4], &(0x7f0000000580)=[r14, r14], &(0x7f00000003c0), 0x0, 0x1}) (async) r15 = gettid() ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000005580)={0x4, 0xf5, {0x0}, {0xee00}, 0x5, 0x10001}) fstat(r0, &(0x7f00000055c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000056c0)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000180)="b78641c618dd78eb9223726d51ddaacb530058555201455596c29c6c", 0x1c}, {&(0x7f00000001c0)}], 0x2, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x800}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="3be9d43276de2c5d5b90b91912d034440f7b7c3743b6bf328a9266e8067bb67d325a6aa1ac209505d2c57d832c84e6f8604700ebb0", 0x35}, {&(0x7f0000000300)="609467ce81754860c6ac430d56e001ed67595203abf0de8aee2cb6ceae6d97a143e3f42e8e9aff49b76ebebce24b39eafe1d45111e9e684f5555130e64b095c6e417419926f2bdc07439ec8f0aac8303d5b31eeba3314dd4074441d54fc4f01c0ab2991f7b8d7fc25b083ba5dab28714d2f1ab99ebc98dc8e4d3cead660faf37665508d78892db7d7dd47060684c6a88c2a48a9732b972", 0x97}], 0x2, &(0x7f0000000500)=[@rights={{0x28, 0x1, 0x1, [r0, r2, r1, r0, r2, r1]}}, @cred={{0xfffffffffffffea2, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r1, r1, r0, r0, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r3, r1, r11, r0, r3, r2]}}], 0xa0}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000880), 0x4, &(0x7f0000003a80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r0, r1, r0, 0xffffffffffffffff, r1]}}], 0x88, 0x4080}}, {{&(0x7f0000003b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003d40)=[{&(0x7f0000003bc0)="082948711cc9b571c75727078564925881052ad63c36939979051b382871b313f0dd72cb37567693d5ed5768aa22cb17e8636281fd90eae4f982a4d99c2c5e09b1ea21160fc6d529844dd9238a8096593d3deafe79a2cdb1a2d226e9c1c5e727400ba3f7200cc0f70b", 0x69}, {&(0x7f0000003c40)="f4c41f6798ae1f6c60a1a35c98e45d38aac2c30e9d803f468f8fad0ed66fc9bb106bc4d7985d16f97debb27662a792e7565b38ba1c1c79e090f1f748a9412303218ccb2da6ae4773c045c050c9c31cf04cf7321b740a80ac9c9d039079af7899c9ad319c0adac36ea73ab8f358ec8e1bdbd7969a6f010cca65f86a20c28f5237bee44e45b0b5f39e64405a6e90150d7fa96cbb73113b3fd21cf6879ebd4430cb75781feb31183f2bed13a22dabaf7f430f33669dd9ca76663f424833b96a77b8081334373b328da1a5e2e8369a96c56e30e07ada9629df376216aaf92613a8", 0xdf}], 0x2, &(0x7f0000001240)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r0, r1, r3, r2, r2, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}, @cred={{0x0, 0x1, 0x2, {r16, r17, r18}}}, @cred={{0x0, 0x1, 0x2, {r6, 0x0, r8}}}], 0xc8, 0x10}}, {{&(0x7f0000004000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000005500)=[{&(0x7f0000004080)="9b267e523834f39870436318d00cdd1ae9c110dec8fb0cf60300979b5fc7496a058902f1388f342317a97f745c0ff9ab0787aac50132bbeebbfe3e2b0606a24ff456afd18317d47e503ce82357b968f9b2da8c4b10d8940a75e2aa539906c1b692588c", 0x63}, {&(0x7f0000004100)="b997eca1914ab476ec7d5b05fd59bd89c068d940b581f772119ad3a5fe18843dacf2dd2c4a8651f80029366a492fb2441ef5d412371df4479265bd7f3a5fcac48d5e836c64f5ada91ecd24a9341f33b6a7cd0df42ff89ce69fba70263081797e00c1959d65350247ca90c3b085251392cc83876e6cce7a2031aa3316f9d5855f3f4fa04497e0622b716875e6369fa4cad26c6b02c7e1027162073bd8bd8f29556c7732588c2ec47614eff5158c098e0b0120f97ea20f4cfa53ba67a223fda727e3eaf9f0c6ca0302cd5574a40a0d0faeb2eb1706507146715d5d611f30689c3fc9", 0xe1}, {&(0x7f0000004200)="32a525bd449b33e56db801f2eaca371986f2990da7ad60923c52857f800f10c4b5c77c8c02aff5e03d7112959fdb0eba30397f824adaa5a3e152d1fbf5d3fcfb3ce2d792d5b31795534ec222bd65c5ced7ae604c3ee2789da1a9032b20faefa59be79927b8ff22e2f9e13176dbeb4afff46d0ac92a67a7e29fb6b233ee0464b33a0d8a5a77b3c081b7b891578052af14d82ab383b37e853b06fc3b8ecb7749f7095186150361042d96b4a4b19466d18fdfeb200c27106669a882c981b841c38eb3610e30b4de443c1c9bceddf9e7d69eae7cdd5ec3344d9bdfdec3616bd0eeb8c6af4cbd718ee4e3a63acbde5cd3e7cb4377b812cfc0fa4a4c86fefa6e9dc7c6c69191480cdccf3c44874cf93d8c8fc6ffae1c0420dfc2b238a6edf58a5a0e9a3257ff7628916e7071054d9175840fa85f158fc5f60839f7d2750147b8b6858e2e8c48792d52625068e3848ce9b1d23a2643e879e1c909c766d66597a10da1adf12e67c846f0bc04e8b282973696dc9af834ee5bde4a57af4e2ac2eb0ec88ddc4aa8e3f746856ca43b5d40729cc7441934317f9bf44a58bf993cf53d4a5d7ef99b2923b4adeae8cf6ab8415983a08a8114fd98187bc0e03e8c6178321017d336848c943ed94cb99a89db39714fc536f3864f47aeeb240475bd9519ce9f8f853bd3b1c3a7ee86e5d3c1f27190e5f23f5a8640d07e68a4a4deb92c9a0b2dfc187faca5a22a7b45a631eaf050d066d9a08fa7c902f34f48b48dcb6edcb97170e41bf4c42531f316f44fbbc6b2ee1584d9b0aa7e5152318f34916e182c317b6f74d67263185c1a6aad4304e123b332cfbcd50074fda6d68f7292b805234e8da32b05e04b002d1515af778068c94f61d927289f8a3c0f76a683f9576e3203a7475a926175c0f10ad32b952061bf62c61c83bd16c92b2ed2eb294ef70d58364698c281fc0cc3544e0ce0ab0d5b5fb2a2102c55a8fb76619626888a796ee4625472452568ae2550189da3da20bed7541d5b17c7a38f56bfa5802e58513c0f2775b379700010aabe61aca5bc2d4fed99204ea35e668735772574c2ebcffc803c082eea48ab0c56d3df6cd13b925ede2e71fe8bf76accb2ca3ae1ae4fb3b4710912296753f0b5fab6d19484d129994cd6a1480e9298d222e86541b2d32d7f281dbe043c9f60f63bc3e01572dacc39f68804633bb84d2b76e81d15b5f9c903db9251fa95836791bd0a82a6ccb61a04fe60da1c692bb3fc4f210cd8c7e71d6d5d54aa7074597f9f0164a1e517f4fea5ffa887b6efbaa7f03bb7f943cbfd0a22a878194babb14a5f435880343b91317b9941e719d3e8c4e586a51e58d3468273f201bf44bd1d830fc4bc52532b713cfb061bf8300d3e5a570a039b6f4cf105e3a9e51dab38617087879d44122569b691aeabeeb9cdada280ac9f09b96b3ff8238c38f79e483f888a3be2610d442da4115603dc92afff454425d194c0ab5e9c0a90ef4645341084ff0b8c16f37c382bec26c1cf491deea33863e6dbd60a42674268eb652683e2445c79116f4b1473c69e0f0d0ffd5fc2e03075a36785f42c07664424851ce3e75ef055f12dc346a0e91ad4426bf18a3c4d69840d5337349724f6be70d1bf385eefd82d4338012783aed05b73d883211ed7d0f132f3d577850d2bd67b17fc8d621ebf4c5622a687d0de2ed5db47d621ab26480519e8f2c7f49654ca27e5131eb434c5129bbacdcf53ae4bc254dae76d5da8c01f3a63d54c83df6efead6253c26eb41b4815d6c6056d52c5467002a0694e2a9bb659896e601c760ec7f544b13ac9ba66d5faabe965799b58d52f4823f4f03bfeecd209e997bd9c8973aa7622b818ad6b953d6f379bcc1c745eae4a5d0dd8a0dbbeb10d444cce743a149b7548b91eff4ef6c5928092379155dc893a0984ea6979d39e863236e47046db173bf9450bcf3604551039c1868ae595b62210144db410bb8fd3dc13fa555b24e76bd3447bf2482055a1d8085d3070cc5fb8e052d13012c19384ead55402d6ed1977142381151394d24866b043bf04b3dbdf52b4db8d94a8696cd8a051d3bac026d6dc5a883ce35288c0b4a9e1f995b4a5434f3fd2b083e61e7482b5edc00ca06dc54f40ecfca924c01f7ac94a29de168664520e6a5fefd24259a1c30f8ffb3d5fbbad51b3ae6ef4378dc4ff92981050af0e189affae400bf4527e30e8ec8e59957406417800ffbb3e26355ad4b9a2a46cdb8361126fb86e30adbc29a0afc55a7b5982be7d60277803c432ae026023e6035542f65c9eabedff7ffebf8b5a1e8dd32883480c74a55c35acca5fdbf5c74ab8aaeaf88b4ff5089815bb975d901bd4dcfb5720994cc09cd18350143ee77b1cf33089c1e8b3552ffb2cab1a709f995c32853cc2962daa2431de985e9bf311e3fd17d7d704b18bb7fb583c93b7aa042838f8c23a12cbe386d52db378896ba8fc2c186119a8f2c1f1a5c0f44cced8b70586647cae2fabdec61f1f9b0563bd1b7f78f0e66e18bdeedb18959600d775ff592e82f1b42d2aab45f4e9e072a23e65d68536dd5978fbb488dd2955b996e6623835c22dcccec4c1dcc6c222d2de34afe3347ce163e9381f3a1f1372b83943b75007c09ef2152db8cd44f6b2297b66f6365c1bc2d1e91916800171254f251128182ab4900cb0c274a599e9e5785ae3304ed6f71c74840b6078651e4387fc646871c1db6202a6f6e53277d0b087b4d1efc91f390930c1740b71a916d01e8878fb17913beaa7c036aa1bc17cbee3acc57b22963b0a262c0f0048aa63157ccee2cf291ef75de2a73bb5e0c83519c21d9d40bb4a490d10ee23877359b140adcee48f8f68ff5cdc0bf01217927ec8517d3ea417bd66b74edf416c724b09f4f00839aa35f78d1467842c51c1237e45dac0db29db388036cd42c2d215b2cd8931455dfe8cac619065955c4e3c4892d336b22b9b077c8501ff7d52abdf5149770f92ebd41da883bdce60925de05999ddbde2185a3db459ce09510500fa26e6bac2b976a355f20a6d767f570e4e0ec670b7e73661d727434e8fbbf1ce68f81719cd65e93dc5c2dc38947484c79f9e9b7918409e09d54d453d75725e6515e034f95137792b6b22a1f88691e8ec0e35dcc5d37fab5fff6cd43146466c23aa9ac03b493eca524f4a1a84179bd16b36f474c3f072952c88d409efe9329c434ef583cd765238721cb7a26aa65dafbf58f6a9c57e95490183bff1c14490611f0e433e9838f1169bd79df9284d7b89659e51e46890e41a1da84cce6418190fe34d195f11fd85c40362d4fbbb49992548a8436545129ded592ba40e7b3857564df4fc3ddea10e6a31216cf83331aa5b19caffec4fdbcdae6a4c0e8ef2d58b4e6d7576ef9ab432e27288c0a60efc33fd4bf5e306585d001f4d298ccf63e67234e0eb77637f069d4a6e969a550f1d537cce952b1ae9f80214cc7242a44021cc94bee6b21054b35bf8ee1095eb3753a22a2ca90c935d75b82db08887e573e2a0a868ed7f5a2beae4a7c48ab3fce0e209ba11bc937f38962d6e182846668e0823fc4ad15538fcbf55da07ee63370c96df17cebb1ea60b814842029156c0d32b1a6820696fc7c84ef7916093bea998827a3a7ce18a012244fe6d383212a720545c7cd20f0167613672b3443b9faab10b54ceefab8233212f9ac5804eace10baa6c2098a159831213f72d7dc12a00ea86296a6de072c58f5be0b382ef872346137217ce64d4f4dd571578e361d922f67601dd1090f4bcca5a8f5cbdaa09f77350be0613fdc26c389ebaffabfa8b1c34f942c170287e4a9932323852ea1c9c548c6ffe5b1fdea22a7ce3d63174f6ff72a0b4297517808fcd36cbb536a36a63f48958a3245290c65517ec5c83a293f45cf33aaef676b4ef111221457feccd028c9bd4d7230ad4ac4d9e7f6b34db057ffa038ceb9be86cce503d5e5eaf5433a0ac7ef5442cafef18f842fb74ad24334e47641307765645349a48fa5790cd67f0f0deee9ee517a2c64b600f50bd834c96bfbc26c8b2c684c558d3cc9f3c18458f93e3a8981de52f50aa74680de237f0168768592c798f4b1f02a85df9b03cb3ec457be84879b11f0bfe80727b8a1fe9b071c29cd8b520483c84c1713220302f3e3b0f85e52a29f006b94f1f92bf91a6c4400d7606ae5663087fd58c132a4f0806558c5090b56d655deca89d645abee34fcdffe888c95a0c2d7df82a4d233f03e8d5feef219feb071a4300183d3df74979602886a4980859e923553639850f71f7dbce271a9a6eda34f6af5d8fdc1941dc1fe017a26c4e25bea54fb34cde777f45a1c7984bd14ef9c082ab364d6f45406af44fa821ee39424d8db070abfc340aa630e70c7cf5f5b0711f7eefbfe143ca48d3f999005a7896db5d79cf277904e9da9fe2b8709907fe8084adaed48d9f50512573fb76533c8b3ad1f2b66a9e38f7c442a2d17a96e857146dfa39be8c6ee64c6fc0b6642a03b24150fdeeabad9dc60905ce3e6ee7b787a972f775b56ebfdbe14a8fde7491ad5d113654159fe06b73b16fad2d0ea808d9751c760309d55550f38d7ef7be702833f4b9cc5b1f53e2e22a623f17b6ed9d4ee98592700eaffd62f95ed7dbffb293a7d275d35dd6e847eebdc91e2f9aa25a749188de55e133102ca6f11d8f984219b8736629e8af7af8b696688fdf73c24bf1503a8825e5c0d477f1e555f10d6252ddc7f64d606cf0daa935f44cf2cd747f009764790cf34d8f2966996b9603f3a9e5c28340c46eabae4656e3a7d1bd0b2f25e379dce404037e83e4dd2ccd545905d64fbee30c5e29c040fccf1bb828264354847dcc67638fd2873e2955a947d0db1cf15c6851c98bf45fd62b5d5e9b7bcccafda25f4dab2ef93385c52c96f1356c7cdf7d3f96b1ceb34e6ec4f228fc59c0fd07859e61f7d6d181fa1ac8d9a69ef427dc1d796fb3468942966e75c7706f903332752b47e63e3c9253ecff18ccd636d9d3abf7c5913fde3b9e09e4bc0629a399612195651c678e0b2fca3f25def00563f36714f17f313c16813341ae4506a876a41c048d426e5d4783955018a8cdce796f4865d64825c3bd4cf0d57790f96a6d21c70f8b9e643a53095d7bf18ad5cd6923ed9bb39103be870435c1853171cddddc72e1d0a088ed8b6637fb4a3d0c30edca332c29c27c82c424ac75779fa253c658faf4307ca3692b344b783da7616891e235ed7763989978b72635d29e3d814c3b704c27330d553c32d0c45eb91412a727777287c7af18d4d3687e9c30f834ed018d2b1324511e0474e1c0697c38e5fbcffa3c09002fce96c39deb42708ef60995d65638fc222cd5b15625daf17422d1832f63d7f583054698212a6dff845ee04cca20ac33501ac0852ee7584eb486b4cfb637344687db407adcf84ecee6ca7b7f6a6a1ec7d5812fa3002a001e6d3a9d2f717824e1245087aac3ac0705451cb8fe01b973854687bd1b23cbd42a24a13ce2f425e574e552f71d278c1593e54a5ff102437de7a22f647822c459c84a2a4144065a904a983e83f4f5166e0d89fd8128535811e997f374a9799d83d9f1801abda65b6121574c9e20813d46b1266100f65c42e0c4f3c1001223bd39c5482344d07c34bbd3e153ac20daa18269e839f620045b768a4633fdb2ff35d2f636cf83abe49a893ce5921bd4909ae88fbf8d6a789b61a098d3b60dbf194633134babe765fe2820c3f08103000fb5c056bd3e2074e27d0f05efb78a0cc4b81ca26c003e5d8b61d27be79f88847856e3b20fb18e3a6e172e0b1809d55b43b69e", 0x1000}, {&(0x7f0000005200)="a699f9da1d645017189e19c79b70", 0xe}, {&(0x7f0000005240)="125bb85e621db7a473a9db79de3c1ff063f5c74ab2648125c600e0d2fecdbd025e785a414d02f181c25c4d6b0599483ec706f3c3ae23b8b197b9d0095f70c0ce5d48939cfea7e0c219440dbe3cdb026cc98d29a136ad543f647ef02e7c445fa1e2cc31fac55baa55fc9b73c8", 0x6c}, {&(0x7f00000052c0)="85ee910fd3e3837ac635d3a8eeaa9325ffb6b24cd443c06db9e31b25df8e9ad604294d2d1ef20c0a57a92776d47549fc277ea015172ca610c7664dcd4149f850709f6513c538324b6e34f5ece5709498e758b1255b2d192db4d3c56d6ed568646697e66a45bf1ec38af28b61e815d75901cc889f85239aec146a44e1d21c980a81887677185edaaecd724786262de3cb", 0x90}, {&(0x7f0000005380)="31d6409025c96ec3f3b8109280249c7632ade267644fc69e17dbfd3c1c6bbb84a2fa9bcc240753ad592f8684818db895aca1c928436c5dbaaa1b51cf14c8a83124bb9830525cb1c2baef76990ef040d66d75c14f2f8b85c64c13045993016e8300aee7be6a706330531a521d81419607b1a5df1753c77d89b007ae66de8187310ef77613e8f3e8f92d7038d4d46a061042966d824361aff98932688b1bfe57825e16b6e681b3d147ab50c6f564b9cdd901366e79453048a4947e67abf847cce146d8b9fa335e92f12eb12d94d969638c6cf83d80c54d8f7447d7570f5f856af35df48bf21b7589285e571ee45a05e666", 0xf0}, {&(0x7f0000005480)="b5b5c1a4042d7092a903831cea1610eb15e76de7b97a9972d9ca31a2a610f5c7c19325d8238349754fb2f4061a85379d99f270137ebaba47fe7a79f71c561ee13b55a97faa910c3e3813bcfcd0c4b8b9d2fe9faf145998dd6076adc1824f880bb048f176785d2a9e1706", 0x6a}], 0x8, &(0x7f0000005640)=[@rights={{0x2c, 0x1, 0x1, [r9, r1, r10, r1, r9, r2, r11]}}, @cred={{0x1c, 0x1, 0x2, {r15, r17, r18}}}], 0x50, 0x810}}], 0x5, 0x60) 4.35925635s ago: executing program 1 (id=5811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0xfffffff8}, 0x0) syz_usb_connect(0x0, 0x8c5f574df46ece93, 0x0, 0x0) r4 = syz_open_dev$media(&(0x7f0000000080), 0x3, 0x101180) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000009c0)={0x80000000, 0x0, 0x0}) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\xf4\xb5\xb2\xed\xc6;\xc7,4\\xev/bus/us\xae\xd1\x93\xc1\bm\xe9\xf3#\x00:\xbem\x02H;\x90\xa5\x1f\x8d\xc6\xae\xcc\x95a7\xc3\x168%\xc3\xc6\n\x8d\xbc\x81\x1a\x80\x16jY\x9f~\x12\x94]\x1e\x8c\x1d\xe7\xfe\"y\xa6O\xf5\xa2\xb6\xe7\xe3]%)l\x90\xe9\x026\xe4\xabX\xa0+\x86\nB&\xab\xef\xea\xa3\tUc\xc3\xad\x84\xa3vK{\xb2\xa3\xfc\x1f', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0xaf) syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000440)={r6, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) pread64(r7, &(0x7f0000000000)=""/14, 0xe, 0xfffffffc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@private2, @dev={0xac, 0x14, 0x14, 0x35}, 0x0, 0x11}}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.pending_reads\x00', 0x141, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000540)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r9}) 4.2447886s ago: executing program 4 (id=5812): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="020100000f0000002cbd700000000000030006000000090002000020ac1e01010000000000000000020013000100000026bd700000000000030005000000000002004e22ac1414aa00000000000000000100140002000000040002"], 0x78}}, 0x0) 4.219967583s ago: executing program 0 (id=5813): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = io_uring_setup(0x26a9, &(0x7f00000004c0)={0x0, 0x1cb5, 0x2, 0x3, 0x7e}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000000)={r1}, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) syz_usb_connect(0x0, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000018a2bae000824020100020000092402020000000000090585dadb"], 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) openat$cgroup_type(r5, &(0x7f0000000300), 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x5, 0x9, 0xe55, 0x6, 0x2, 0x1040, 0x4, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x5, 0x6a], 0x1, 0x1000d6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f00000011c0)={0x7, 0x0, 0xfd}) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x4, &(0x7f0000000140)=0x80000001, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r0, 0xffffffffffffffff, 0x26, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x8002}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x300) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0x7, &(0x7f0000000480)={0xfa, 0x8, 0x81, 0x5}, 0x10) 3.987311014s ago: executing program 5 (id=5814): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000002000040"]) r5 = getpid() r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x11f}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x20050800) r7 = syz_pidfd_open(r5, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000040200f2c8dc1b00000018000180140002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) preadv(r8, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r8, &(0x7f0000005b80)={0x2020}, 0x2020) r11 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r11, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) ioctl$BTRFS_IOC_ADD_DEV(r7, 0xff08, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) getitimer(0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000000)) 3.930777276s ago: executing program 4 (id=5815): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="183de158e82aa5000000240001030000000000000000010000010000ae80"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYBLOB="020029bd7000fcdbdf251f000000050092000300000008009a00020000000500920004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x44040880}, 0x40000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xc12, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 3.578792565s ago: executing program 4 (id=5816): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0x6, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) writev(r1, &(0x7f0000000400), 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x68, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x68}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3.155393608s ago: executing program 3 (id=5817): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2c0, 0x30, 0x300, 0x71bd22, 0x25dfdbff, {}, [{0x4}, {0x2a8, 0x1, [@m_bpf={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x4c, 0x10, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x4, 0x6}, 0x32}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x1f0, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x1c1, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x3c, 0x1b, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x2b}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040850) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x365, &(0x7f0000003700)={0x77359400}) 3.155001112s ago: executing program 4 (id=5818): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000740)={0x2, 0x9, 0x3, 0x7, 0x3, 0x18, 0x2, 0x6}, 0x20) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x4) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000008c0)="fbf5bd1959d81aeeac3454fdc990f648f16f48c6bd4232bcba18dbc0f755e79fa071a979e36fceaad82b436111801308f7770a63e4af8720f362a3559335c80b0f28c7e01ead726228ef5a48b82c35dfe1e57921007e14cdcfc69e8cd9c03b8dff27b2f3d51fe535b9e051e2a0f0ecef9e06b0a57cbc87f684a08aa33abb5f9733caa9dabc3c55dd5be864ac0ecb7fcd0a7bed095a5dff80f811095086ab552e18e25379a87dea4e871ac2227eb855f2b4c5b49099c40cce3d29b6f67056712c5516e28720863f9665c33e23bcaff1b058e8dd3be2231d645c926d23945e1ff887828e49434210bd92a856f9183bda01232558bb9afcf711301734915f8bc5f007a72bf7543a389d89f3fa8ffb4397820adccc1841c410168fbb12d1a9f2c8032c268074345392e1b46fbbbeab52a0c1ab4448ebb9b19f8bd682224bdecf8d7741c96d2e189b18f8e922689c5633e29bca2bb0a13c15a92445f4685a30edd8bfca8d40fc3151933594a47547eefd2929020cffa9142cae147ad6559a1b394782b3b6e28a4e8af47c0a625a31899736ab4df87534f7f1d1d0375b07ad7b6ddd765f76bee526044e1a0c69eb5e7b46d5a44874a5e88211b322dafabd91948e6fa35826cafa6d0495905f7e249288b7b2823a251d35ec3e6259e2abfafd6e7e98eb8b65fb7638dacf0fab435427a0563971066c60f7d91019439650d68d8f01bb040fe143e4b940f14cba2ebf841c71c9e7a9aac194d34f75598aa366283635ec6b673adf703ef425685e9a8f5e30306847368e0f4438b6d7c95f80886240a2602af66e5e3c5e45107e1fc68f6a3db2411d6d2500980c92c261903fb3cdbb981d9655e78630b4d16a3930de90874409795603565999f232ea2736c92e1353fe3f640d4e4d6f656d9dd59dc99aab86e318e3d68740be38671b2f413efabe1ac739d5aae7deadb8ed6651a34684ce8e996491798f9c4fd37ebe1a1a50d88866192edf3183faed4e657f7bc5e971183b43755bd2eeafda22708469ad55d911061bdd0df48180fd84d43804733a78bfc6a8d927fac2f01675a4d82bbaedc8e73a602247a54fdcb5bf4130fbb438f2ff7d69475fbb6e72ae322a06377ea65397fc050737f9473e6ef37315b636d5b6e6d3788a44a5e686e0b948af57bc2b01ccfd1e93fba41719b7826d99125485ac93217d67cc15f7c1e60217ab84e570e78917b4357781ea8042ebe826d7ae382f9d3c35296b1d885198e6dfc510d25534dfdb81c0b01501bb3abb5ca086cd8a6d93126b6b9b25b22a63f0af878851d145c2be092d10bf3d97490de2973f94b86fac0a62091737a8a68307", 0x34000}], 0x1, 0x0, 0x3f1}}], 0x1, 0x11) 2.788980774s ago: executing program 3 (id=5819): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x360, 0x11, 0x148, 0xffff0000, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x668) 1.299312699s ago: executing program 3 (id=5820): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x9, {"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", 0x1000}}, 0x1006) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a000100"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x36}, 0x4, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x7, 0x9, 0x3, 0x9, 0xfc000000, 0x3, 0xbbf, 0x40, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x3, 0x2, 0x4, 0x7, 0x81, 0x8a, 0xfffffff8, 0x558e0d31, 0x8, 0xfffeffff, 0x91, 0x5, 0x6, 0x7, 0x4838, 0x5, 0x400, 0x7fff, 0x5, 0x4a7, 0x81, 0x6, 0x8f9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x60, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0xf, 0xfffffff3, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x8, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x80, 0x49, 0xf1, 0x4, 0xab00000, 0x5, 0xb, 0x2, 0x1, 0x3ff, 0x1ff, 0x8001, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0xa, 0x5, 0x8000, 0x4, 0xfffffff9, 0x200004, 0xffd, 0x3, 0x5], [0x2, 0x1, 0x4000ffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x1, 0x491, 0x8d3, 0x6, 0x108, 0x3ff, 0x3, 0x8, 0x40, 0x6, 0x7, 0x1000007, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0x6, 0x100006, 0x8000, 0x6, 0x3e55, 0x4, 0xd3, 0x7, 0x3435, 0x5, 0x9, 0xfd, 0x401, 0x101, 0x7ff, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf44, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x9, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xaf38, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x6c5, 0x101, 0x80000001, 0x0, 0xfff, 0xffffffff, 0x100, 0xd8ce, 0x6fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x806, 0xfffffff9, 0x4, 0xffffffff, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x14000, 0x1, 0x1b18]}, 0x45c) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000280)={{0xc}, 0x0, [0x40000000, 0x0, 0x4, 0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x2, 0x3, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x4829d, 0x0, 0x0, 0x0, 0x0, 0x1000008000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x10000, 0x4, 0xfdfffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20040000000, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x100003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1075, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x7, 0x0, 0x20, 0x6, 0xffffffff80000001, 0x2, 0x0, 0xfffffffffffffffc, 0x4]}) r6 = socket(0x28, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x55}, 0x4000) landlock_create_ruleset(&(0x7f0000000000)={0x20, 0x2, 0x1}, 0x18, 0x0) 1.063616551s ago: executing program 3 (id=5821): mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000f) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0x1e5, &(0x7f0000000940)="f50000000000000077fb7e8f4335c44c3a442b9dbf36793763f98c5ccdf98ae6ac57fe75506a93cfe74a99f31ad4338e934996fa828e6c7b1cf140620ac6af2a2d9d5b9c1b766976c1b524452323125ec0abd0d58c88de5d95f7763baebfbaec918004a8a0ad75bf018b706ae0df5c159b6d592ac812b25528fb2f692ec0b121b92335bae17fc978013dda8eaf5475a1141338437612fed0bbee3dbf01fe25e930ef635411e84b97bbb9959cd1b2bb802a71fc52ab8fb06c944c8495746c614b64c7afaedbcfaaf26134e96fab1837617df84618b58f18aae8a40a66f4b6829d36f18a5ae6164a83bbe1db4d21551fd5d0c31d6a333a0531d02cc89ad704d207c40df2bf068257096f9845433d46686f3fb6176b39aaaafc849ea866f97654bfebfc78a0b727f1cd2afbd65ad5c331c704bdadcd827cb4a08c2ae1764c2d59e1e6cf87293fa32faec95da8186dafa9944886fe5f2d5be14095db53e3ef3ac915789578491ebd52c4d4830958aeb7c8d657658b559e55ed6fb3f8934626e558370d76bc5aaa4bbc5950bc524cb6942be5903a0309d184ca49ef1273f191b8cef37ffebc196b5f6ebcb350a78d8e7f366f869d51b476f9700349548aaec466e48dd5408236d04f22ff8bb733d6a35de6dabd6e7091bc207b2758f12065105f90e04f6df2fcfa"}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x18, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x300, 0xec, 0x2, 0x0, 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x8, 0x0, &(0x7f0000000040)=0xfffffffffffffee7) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)={[&(0x7f00000006c0)='$!*)(\x00\xc7\xc4\xce\x059c\x1f%qZ\xbf\xd9\xa5\xb5\xda\xb5\xe2\x04\xb1\t\xb7\x8f\x9c\xfc\xe3\xc4\x89\x1e\xd5\x10\x93n\x98\xb6\xffF\xee|\xc7\x18\x8d\x1aV\xf7\x9a\xfb\'\x907\x10Od\x1f\x9c\xe1Jv\x93\"\xaa\xf3\xef\xca\b\x84,P\x90\xcc\xd2\xbc}\xdb\x1ei\x19\x1b\xf5\xd7\xe5\x81UA\x972\xaf\xc7k\xb8\xad\x1b-\xa4\x93\xca\xf4\xfc{\x9e\x95\xf7\xc5\xbeA\xb8\x9c\xcf%\xcb\xf4Z\x9c\x84\xdc\x15\xf1Kq\x97\xb9\xd9\xebd\xb1A\v\xa5\xbc\xf4\xfce\x1f<\xddF\xfc\xde\x03$~\x9d\x9b\xc6B\x95\xa8\xfb\xfd\x98\x05\r\x8e\b;\x86?\x86oB#Te\xab\xd5\xb3\xb9%\n\x8d?i\xd1\xbaX\xfe\f|\x9aek\x8f\xb7\xb4\xc6\xa8\x01\x84)\x897\xf6j4\x1c\xb9\xd1:\xc2\x81(\xe8', &(0x7f0000000080)='()-\x00', &(0x7f00000000c0)='.\'$@]\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='-]^,]\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000400)='!%(\x00']}, &(0x7f0000000500)={[&(0x7f0000000280)='.\'$@]\x00', &(0x7f00000002c0)='],\'\x00', &(0x7f0000000340)='-\x00', &(0x7f0000000380)='/dev/input/event#\x00', &(0x7f00000003c0)='/dev/input/event#\x00', &(0x7f0000000580)='\xaf\x0e%){K%\x00\x8d\x01\x8c\"v?\xf39\xfdoZg\xaf.\xdd5`\xc5\xee\xedK0\xff\x00\x00\x00\xbf\x04[s\xea\x9a;\x9f\xb5\x00\xd9\xf2\xf8\xa9\x8f\xba\xed\x82\x0e\x17\xe3\xa2K\x11]\x91', &(0x7f0000000440)='\x00', &(0x7f0000000480)='-]^,]\x00', &(0x7f00000005c0)='$!*)(\x00\xc7\xc4\xce\x059c\x1f%qZ\xbf\xd9\xa5\xb5\xda\xb5\xe2\x04\xb1\t\xb7\x8f\x9c\xfc\xe3\xc4\x89\x1e\xd5\x10\x93n\x98\xb6\xffF\xee|\xc7\x18\x8d\x1aV\xf7\x9a\xfb\'\x907\x10Od\x1f\x9c\xe1Jv\x93\"\xaa\xf3\xef\xca\b\x84,P\x90\xcc\xd2\xbc}\xdb\x1ei\x19\x1b\xf5\xd7\xe5\x81UA\x972\xaf\xc7k\xb8\xad\x1b-\xa4\x93\xca\xf4\xfc{\x9e\x95\xf7\xc5\xbeA\xb8\x9c\xcf%\xcb\xf4Z\x9c\x84\xdc\x15\xf1Kq\x97\xb9\xd9\xebd\xb1A\v\xa5\xbc\xf4\xfce\x1f<\xddF\xfc\xde\x03$~\x9d\x9b\xc6B\x95\xa8\xfb\xfd\x98\x05\r\x8e\b;\x86?\x86oB#Te\xab\xd5\xb3\xb9%\n\x8d?i\xd1\xbaX\xfe\f|\x9aek\x8f\xb7\xb4\xc6\xa8\x01\x84)\x897\xf6j4\x1c\xb9\xd1:\xc2\x81(\xe8']}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) getsockopt$inet_tcp_int(r5, 0x11e, 0x1, 0xffffffffffffffff, &(0x7f0000000540)) ioctl$EVIOCSCLOCKID(r2, 0x40084503, &(0x7f0000ffcffc)) syz_emit_ethernet(0x95, &(0x7f0000000880)=ANY=[@ANYBLOB="0180c2000002ffffffffffff8100410000114ef82f3bdc09d8ff1205d4185cea01fc6e1b5d4f2463eb006caf106b09537585594252dacad6bd5c8c3d4d1b13d69499ad2b576c76052e3f03e89345ebe5e1f0fdea29cedfb60a38f127869e6e3c89d4b5575056e1e58d67bc7092067813a235a37b0ff281d9d2e97bfc1aabca041008c4e9999dd3e2d08a0dfc1e58b9a41e1a77e24ec4d96271c9d9767d6b5529ec98ea55c608adc557344a53787c4c0fab76b8d6471d4f479bdaf4"], 0x0) 871.298919ms ago: executing program 3 (id=5822): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) getpid() syz_io_uring_setup(0x0, 0xfffffffffffffffe, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x3ff, @empty, 0xfffffff7}, 0x1c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x200400d0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9e"], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000), 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000d9e5f720fd0b1c00e88c0102030109021b0001"], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="8b332000000000020000150000000c01c4c5b900c715c9"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) 831.778773ms ago: executing program 1 (id=5823): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0xd01, 0x0, 0x0, {0x7, 0x0, 0xffff, 0x0, 0xa001, 0x45001}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 703.66896ms ago: executing program 0 (id=5824): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x800800) 295.500186ms ago: executing program 1 (id=5825): r0 = socket(0x2b, 0x80801, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20004000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4, [{}, {}, {0x10000000000000}]}, 0x68) 295.161517ms ago: executing program 0 (id=5826): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="183de158e82aa5000000240001030000000000000000010000010000ae80"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYBLOB="020029bd7000fcdbdf251f000000050092000300000008009a00020000000500920004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x44040880}, 0x40000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xc12, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 0s ago: executing program 4 (id=5827): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x8, 0x6, 0x678, 0x0, 0x370, 0x270, 0xd0, 0x488, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private2, [], [], 'pimreg0\x00', 'nicvf0\x00'}, 0x0, 0x178, 0x1a0, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {}, 'netpci0\x00', {}, 0x0, 0x15}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'gretap0\x00', {}, 0x0, 0x10}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'dvmrp1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x2000000, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) kernel console output (not intermixed with test programs): 79950][T20737] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1620.584374][T26217] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5337'. [ 1620.769692][T21087] peak_usb 6-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1620.860279][T12907] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1620.929161][T20737] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1620.975324][T12907] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1621.126421][T20737] usb 4-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 1621.137681][T20737] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1621.241928][T20737] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1621.269428][ T5851] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1621.281038][T20737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.312670][T20737] usb 4-1: config 0 descriptor?? [ 1621.540538][T20736] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1621.594353][T26218] sit0: entered promiscuous mode [ 1621.609011][T26218] netlink: 'syz.3.5336': attribute type 1 has an invalid length. [ 1621.624596][T26218] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5336'. [ 1621.739167][T20736] usb 2-1: Using ep0 maxpacket: 16 [ 1621.746823][T20736] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1621.758179][T20736] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1621.823639][T20736] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1621.880550][T20736] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1621.905444][T20736] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1621.915005][T20736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.945429][T20736] usb 2-1: Product: syz [ 1621.963653][T20736] usb 2-1: Manufacturer: syz [ 1621.977411][T20736] usb 2-1: SerialNumber: syz [ 1622.095479][ T43] usb 5-1: Could not find all expected endpoints [ 1622.142950][ T43] usb 5-1: USB disconnect, device number 118 [ 1622.165159][T26046] usb 4-1: USB disconnect, device number 81 [ 1622.329206][T20736] usb 2-1: USB disconnect, device number 112 [ 1622.591824][ T5925] udevd[5925]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1622.608938][T26236] FAULT_INJECTION: forcing a failure. [ 1622.608938][T26236] name failslab, interval 1, probability 0, space 0, times 0 [ 1622.671765][T26236] CPU: 1 UID: 0 PID: 26236 Comm: syz.3.5343 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1622.671792][T26236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1622.671806][T26236] Call Trace: [ 1622.671814][T26236] [ 1622.671823][T26236] dump_stack_lvl+0x189/0x250 [ 1622.671871][T26236] ? __pfx____ratelimit+0x10/0x10 [ 1622.671911][T26236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1622.671929][T26236] ? __pfx__printk+0x10/0x10 [ 1622.671969][T26236] should_fail_ex+0x414/0x560 [ 1622.672008][T26236] should_failslab+0xa8/0x100 [ 1622.672037][T26236] __kmalloc_cache_noprof+0x70/0x3d0 [ 1622.672062][T26236] ? sctp_add_bind_addr+0x8c/0x370 [ 1622.672082][T26236] sctp_add_bind_addr+0x8c/0x370 [ 1622.672102][T26236] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1622.672129][T26236] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1622.672154][T26236] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1622.672181][T26236] ? sctp_v4_is_any+0x35/0x60 [ 1622.672203][T26236] ? sctp_copy_one_addr+0x93/0x360 [ 1622.672227][T26236] sctp_bind_addr_copy+0xb3/0x3c0 [ 1622.672245][T26236] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1622.672276][T26236] sctp_connect_new_asoc+0x2e0/0x690 [ 1622.672311][T26236] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1622.672340][T26236] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1622.672370][T26236] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1622.672396][T26236] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1622.672418][T26236] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1622.672439][T26236] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1622.672472][T26236] sctp_sendmsg+0x155c/0x2810 [ 1622.672512][T26236] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1622.672541][T26236] ? aa_sk_perm+0x81e/0x950 [ 1622.672565][T26236] ? __pfx_aa_sk_perm+0x10/0x10 [ 1622.672591][T26236] ? sock_rps_record_flow+0x19/0x410 [ 1622.672619][T26236] ? inet_sendmsg+0x2f4/0x370 [ 1622.672640][T26236] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1622.672662][T26236] __sock_sendmsg+0x19c/0x270 [ 1622.672688][T26236] __sys_sendto+0x3bd/0x520 [ 1622.672709][T26236] ? __pfx___sys_sendto+0x10/0x10 [ 1622.672725][T26236] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1622.672757][T26236] ? __fget_files+0x3a0/0x420 [ 1622.672799][T26236] ? ksys_write+0x22a/0x250 [ 1622.672826][T26236] ? __pfx_ksys_write+0x10/0x10 [ 1622.672855][T26236] __x64_sys_sendto+0xde/0x100 [ 1622.672876][T26236] do_syscall_64+0xfa/0x3b0 [ 1622.672891][T26236] ? lockdep_hardirqs_on+0x9c/0x150 [ 1622.672907][T26236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.672931][T26236] ? clear_bhb_loop+0x60/0xb0 [ 1622.672957][T26236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.672977][T26236] RIP: 0033:0x7f250a18e929 [ 1622.672995][T26236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1622.673014][T26236] RSP: 002b:00007f250afc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1622.673030][T26236] RAX: ffffffffffffffda RBX: 00007f250a3b6080 RCX: 00007f250a18e929 [ 1622.673042][T26236] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 1622.673052][T26236] RBP: 00007f250afc0090 R08: 00002000000000c0 R09: 0000000000000010 [ 1622.673063][T26236] R10: 00000000040048c4 R11: 0000000000000246 R12: 0000000000000002 [ 1622.673091][T26236] R13: 0000000000000001 R14: 00007f250a3b6080 R15: 00007f250a4dfa28 [ 1622.673123][T26236] [ 1623.561153][T26244] netlink: 'syz.1.5345': attribute type 23 has an invalid length. [ 1623.680644][T26243] netlink: 'syz.1.5345': attribute type 23 has an invalid length. [ 1623.791295][T21087] peak_usb 6-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 1623.854625][T21087] peak_usb 6-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 1624.069702][T21087] peak_usb 6-1:0.29: probe with driver peak_usb failed with error -71 [ 1624.143388][T26252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5348'. [ 1624.165874][T21087] usb 6-1: USB disconnect, device number 54 [ 1624.448551][T26257] syzkaller0: entered promiscuous mode [ 1624.454244][T26257] syzkaller0: entered allmulticast mode [ 1624.628634][T26260] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5351'. [ 1625.337135][T26276] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5350'. [ 1625.419334][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1625.989957][T21087] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1626.150700][T21087] usb 6-1: Using ep0 maxpacket: 32 [ 1626.151967][T21087] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1626.163552][T21087] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1626.163588][T21087] usb 6-1: can't read configurations, error -61 [ 1626.291274][T21087] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1626.482340][T21087] usb 6-1: Using ep0 maxpacket: 32 [ 1626.490448][T21087] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1626.496546][T21087] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1626.496592][T21087] usb 6-1: can't read configurations, error -61 [ 1626.496964][T21087] usb usb6-port1: attempt power cycle [ 1626.829297][T21087] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1626.870165][T21087] usb 6-1: Using ep0 maxpacket: 32 [ 1626.903233][T21087] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1626.959317][T21087] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1626.967003][T21087] usb 6-1: can't read configurations, error -61 [ 1627.120077][T21087] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1627.155574][T21087] usb 6-1: Using ep0 maxpacket: 32 [ 1627.162868][T21087] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1627.176534][T21087] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1627.185676][T21087] usb 6-1: can't read configurations, error -61 [ 1627.207813][T21087] usb usb6-port1: unable to enumerate USB device [ 1628.751898][T26329] netlink: 'syz.1.5365': attribute type 13 has an invalid length. [ 1628.775069][T26319] xt_CT: No such helper "snmp" [ 1629.399133][ T43] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1629.569902][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 1632.142659][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1632.202242][ T43] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1632.241969][ T43] usb 4-1: can't read configurations, error -71 [ 1632.373146][T26369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5370'. [ 1633.012250][T26046] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1633.787338][T26369] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5370'. [ 1633.804226][T26374] tc_dump_action: action bad kind [ 1634.012901][T26379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5372'. [ 1634.118798][T26382] batadv0: entered promiscuous mode [ 1634.128547][T26382] vlan3: entered promiscuous mode [ 1634.299228][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1634.553230][T20736] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 1634.779368][T20736] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 1634.787689][T20736] usb 5-1: config 0 has no interface number 0 [ 1634.794083][T20736] usb 5-1: config 0 interface 29 has no altsetting 0 [ 1634.875975][T20736] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1634.891369][T20736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.907098][T20736] usb 5-1: Product: syz [ 1634.916721][T20736] usb 5-1: Manufacturer: syz [ 1634.927247][T20736] usb 5-1: SerialNumber: syz [ 1634.950104][T20736] usb 5-1: config 0 descriptor?? [ 1635.357976][T20736] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1635.919251][T20737] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 1635.978960][T26420] openvswitch: netlink: Key 23 has unexpected len 4 expected 2 [ 1636.083705][T26421] netlink: 'syz.0.5385': attribute type 10 has an invalid length. [ 1636.183789][T26419] FAULT_INJECTION: forcing a failure. [ 1636.183789][T26419] name failslab, interval 1, probability 0, space 0, times 0 [ 1636.266353][T26419] CPU: 1 UID: 0 PID: 26419 Comm: syz.5.5386 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1636.266376][T26419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1636.266386][T26419] Call Trace: [ 1636.266392][T26419] [ 1636.266399][T26419] dump_stack_lvl+0x189/0x250 [ 1636.266424][T26419] ? __pfx____ratelimit+0x10/0x10 [ 1636.266449][T26419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1636.266467][T26419] ? __pfx__printk+0x10/0x10 [ 1636.266496][T26419] should_fail_ex+0x414/0x560 [ 1636.266523][T26419] should_failslab+0xa8/0x100 [ 1636.266545][T26419] __kmalloc_cache_noprof+0x70/0x3d0 [ 1636.266564][T26419] ? sctp_add_bind_addr+0x8c/0x370 [ 1636.266583][T26419] sctp_add_bind_addr+0x8c/0x370 [ 1636.266603][T26419] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1636.266621][T26419] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1636.266637][T26419] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1636.266655][T26419] ? sctp_v6_is_any+0x64/0x80 [ 1636.266673][T26419] ? sctp_copy_one_addr+0x93/0x360 [ 1636.266692][T26419] sctp_bind_addr_copy+0xb3/0x3c0 [ 1636.266709][T26419] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1636.266734][T26419] sctp_connect_new_asoc+0x2e0/0x690 [ 1636.266757][T26419] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1636.266776][T26419] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1636.266798][T26419] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1636.266814][T26419] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1636.266836][T26419] sctp_sendmsg+0x155c/0x2810 [ 1636.266864][T26419] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1636.266886][T26419] ? aa_sk_perm+0x81e/0x950 [ 1636.266911][T26419] ? __pfx_aa_sk_perm+0x10/0x10 [ 1636.266934][T26419] ? sock_rps_record_flow+0x19/0x410 [ 1636.266951][T26419] ? inet_sendmsg+0x2f4/0x370 [ 1636.266969][T26419] __sock_sendmsg+0x19c/0x270 [ 1636.266987][T26419] ____sys_sendmsg+0x52d/0x830 [ 1636.267011][T26419] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1636.267037][T26419] ? import_iovec+0x74/0xa0 [ 1636.267058][T26419] ___sys_sendmsg+0x21f/0x2a0 [ 1636.267080][T26419] ? __pfx____sys_sendmsg+0x10/0x10 [ 1636.267126][T26419] ? __fget_files+0x2a/0x420 [ 1636.267145][T26419] ? __fget_files+0x3a0/0x420 [ 1636.267173][T26419] __sys_sendmmsg+0x227/0x430 [ 1636.267197][T26419] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1636.267215][T26419] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1636.267249][T26419] ? ksys_write+0x22a/0x250 [ 1636.267268][T26419] ? __pfx_ksys_write+0x10/0x10 [ 1636.267291][T26419] __x64_sys_sendmmsg+0xa0/0xc0 [ 1636.267312][T26419] do_syscall_64+0xfa/0x3b0 [ 1636.267328][T26419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.267350][T26419] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1636.267365][T26419] ? clear_bhb_loop+0x60/0xb0 [ 1636.267382][T26419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.267396][T26419] RIP: 0033:0x7f9e4618e929 [ 1636.267410][T26419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1636.267423][T26419] RSP: 002b:00007f9e4700c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1636.267438][T26419] RAX: ffffffffffffffda RBX: 00007f9e463b5fa0 RCX: 00007f9e4618e929 [ 1636.267449][T26419] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000005 [ 1636.267458][T26419] RBP: 00007f9e4700c090 R08: 0000000000000000 R09: 0000000000000000 [ 1636.267467][T26419] R10: 00000000140008d4 R11: 0000000000000246 R12: 0000000000000002 [ 1636.267476][T26419] R13: 0000000000000000 R14: 00007f9e463b5fa0 R15: 00007f9e464dfa28 [ 1636.267498][T26419] [ 1637.071115][T20737] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1637.251361][T20737] usb 4-1: config 0 has no interfaces? [ 1637.299212][T20736] peak_usb 5-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 1637.326452][T20736] peak_usb 5-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 1637.345175][T20737] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1637.361195][T20737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.378403][T20737] usb 4-1: Product: syz [ 1637.397950][T20737] usb 4-1: Manufacturer: syz [ 1637.402965][T20737] usb 4-1: SerialNumber: syz [ 1637.424228][T20737] usb 4-1: config 0 descriptor?? [ 1637.525350][T20736] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71 [ 1637.546911][T20736] usb 5-1: USB disconnect, device number 119 [ 1638.393063][T26445] tipc: Started in network mode [ 1638.399220][T26445] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1638.446541][T26445] tipc: Enabling of bearer rejected, failed to enable media [ 1638.586903][T26449] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5395'. [ 1638.630397][T26449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5395'. [ 1639.109190][T26046] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1639.552496][T21087] usb 4-1: USB disconnect, device number 84 [ 1639.580521][T26467] netlink: 'syz.3.5402': attribute type 1 has an invalid length. [ 1639.889001][T26477] netlink: 'syz.5.5405': attribute type 32 has an invalid length. [ 1639.998646][T26480] Set syz0 is full, maxelem 0 reached [ 1640.048621][T26482] netem: change failed [ 1640.279992][T26487] bond3: (slave gretap1): Releasing backup interface [ 1640.369156][T20736] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1640.790383][T20736] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1640.799849][T20737] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1640.823712][T20736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.838633][T20736] usb 5-1: Product: syz [ 1641.074890][T20736] usb 5-1: Manufacturer: syz [ 1641.081372][T20736] usb 5-1: SerialNumber: syz [ 1641.099080][ T30] audit: type=1326 audit(1751823794.141:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26499 comm="syz.0.5411" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f751c78e929 code=0x0 [ 1641.130006][T20736] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1641.148457][T20737] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 1641.164881][T20737] usb 4-1: config 0 has no interface number 0 [ 1641.197243][ T5851] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1641.206364][ T43] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1641.227169][T20737] usb 4-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=e7.29 [ 1641.240300][T20737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.256716][T20737] usb 4-1: Product: syz [ 1641.264867][T20737] usb 4-1: Manufacturer: syz [ 1641.272820][T20737] usb 4-1: SerialNumber: syz [ 1641.299846][T20737] usb 4-1: config 0 descriptor?? [ 1641.311118][T20737] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 1641.384997][ T43] usb 2-1: config 0 has no interfaces? [ 1641.406463][ T43] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1641.437638][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.438289][T26482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1641.461010][ T43] usb 2-1: Product: syz [ 1641.465365][ T43] usb 2-1: Manufacturer: syz [ 1641.493550][T26482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1641.513447][ T43] usb 2-1: SerialNumber: syz [ 1641.590129][ T43] usb 2-1: config 0 descriptor?? [ 1641.727989][T20712] usb 5-1: USB disconnect, device number 120 [ 1641.748721][T26520] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5414'. [ 1641.769872][T26520] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5414'. [ 1641.829414][T20737] gspca_sonixj: reg_w1 err -110 [ 1641.849241][T20737] sonixj 4-1:0.49: probe with driver sonixj failed with error -110 [ 1642.026071][T20737] usb 4-1: USB disconnect, device number 85 [ 1642.275179][ T30] audit: type=1326 audit(1751823795.321:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26532 comm="syz.3.5416" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f250a18e929 code=0x0 [ 1642.309357][ T5851] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1642.324010][ T5851] ath9k_htc: Failed to initialize the device [ 1642.340065][T20712] usb 5-1: ath9k_htc: USB layer deinitialized [ 1643.552764][ T43] usb 2-1: USB disconnect, device number 114 [ 1643.802051][ T5851] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1643.926675][T26553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5421'. [ 1644.016883][ T5851] usb 6-1: Using ep0 maxpacket: 16 [ 1644.049365][ T5851] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1644.056048][ T5851] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1644.077661][T26555] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5421'. [ 1644.097038][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.141196][ T5851] usb 6-1: config 0 descriptor?? [ 1644.182900][T26553] IPv6: Can't replace route, no match found [ 1644.348555][T26550] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5420'. [ 1644.566557][T26550] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5420'. [ 1644.762340][T26550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1644.802090][T26550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1644.864760][ T5851] usbhid 6-1:0.0: can't add hid device: -71 [ 1644.873272][ T5851] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1644.919660][ T5851] usb 6-1: USB disconnect, device number 60 [ 1645.129174][ T43] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1645.322299][T26568] vti0: entered promiscuous mode [ 1645.327438][T26568] vti0: entered allmulticast mode [ 1645.375359][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1645.430561][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1645.476362][ T43] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1645.507407][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.537833][ T43] usb 4-1: Product: syz [ 1645.551454][ T43] usb 4-1: Manufacturer: syz [ 1645.563281][ T43] usb 4-1: SerialNumber: syz [ 1645.589375][ T43] usb 4-1: config 0 descriptor?? [ 1645.621469][ T43] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 1648.074383][ T43] usb 4-1: USB disconnect, device number 86 [ 1648.246923][T26601] FAULT_INJECTION: forcing a failure. [ 1648.246923][T26601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1648.304557][ T6084] udevd[6084]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1648.354249][T26601] CPU: 0 UID: 0 PID: 26601 Comm: syz.3.5433 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1648.354279][T26601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1648.354293][T26601] Call Trace: [ 1648.354301][T26601] [ 1648.354311][T26601] dump_stack_lvl+0x189/0x250 [ 1648.354341][T26601] ? __pfx____ratelimit+0x10/0x10 [ 1648.354375][T26601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1648.354399][T26601] ? __pfx__printk+0x10/0x10 [ 1648.354427][T26601] ? __might_fault+0xb0/0x130 [ 1648.354463][T26601] should_fail_ex+0x414/0x560 [ 1648.354500][T26601] _copy_from_user+0x2d/0xb0 [ 1648.354525][T26601] snd_seq_oss_write+0x515/0x930 [ 1648.354562][T26601] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1648.354585][T26601] ? common_file_perm+0x199/0x200 [ 1648.354620][T26601] ? security_file_permission+0x75/0x290 [ 1648.354652][T26601] odev_write+0x5a/0x80 [ 1648.354678][T26601] ? __pfx_odev_write+0x10/0x10 [ 1648.354706][T26601] vfs_write+0x27e/0xa90 [ 1648.354740][T26601] ? __pfx_vfs_write+0x10/0x10 [ 1648.354773][T26601] ? __fget_files+0x2a/0x420 [ 1648.354803][T26601] ? __fget_files+0x2a/0x420 [ 1648.354830][T26601] ? __fget_files+0x3a0/0x420 [ 1648.354856][T26601] ? __fget_files+0x2a/0x420 [ 1648.354893][T26601] ksys_write+0x145/0x250 [ 1648.354920][T26601] ? __pfx_ksys_write+0x10/0x10 [ 1648.354941][T26601] ? rcu_is_watching+0x15/0xb0 [ 1648.354971][T26601] ? do_syscall_64+0xbe/0x3b0 [ 1648.354995][T26601] do_syscall_64+0xfa/0x3b0 [ 1648.355014][T26601] ? lockdep_hardirqs_on+0x9c/0x150 [ 1648.355033][T26601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.355053][T26601] ? clear_bhb_loop+0x60/0xb0 [ 1648.355077][T26601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.355097][T26601] RIP: 0033:0x7f250a18e929 [ 1648.355115][T26601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1648.355132][T26601] RSP: 002b:00007f250afe1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1648.355154][T26601] RAX: ffffffffffffffda RBX: 00007f250a3b5fa0 RCX: 00007f250a18e929 [ 1648.355170][T26601] RDX: 000000000000fd85 RSI: 0000200000000080 RDI: 0000000000000003 [ 1648.355183][T26601] RBP: 00007f250afe1090 R08: 0000000000000000 R09: 0000000000000000 [ 1648.355196][T26601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1648.355208][T26601] R13: 0000000000000000 R14: 00007f250a3b5fa0 R15: 00007f250a4dfa28 [ 1648.355239][T26601] [ 1648.598816][ C0] vkms_vblank_simulate: vblank timer overrun [ 1648.609181][T20737] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1648.880159][T20737] usb 6-1: Using ep0 maxpacket: 16 [ 1648.887015][T20737] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1648.991962][T20737] usb 6-1: config 0 has no interfaces? [ 1648.996352][T26606] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5435'. [ 1648.999496][T20737] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1649.060663][T20737] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.073307][T20737] usb 6-1: config 0 descriptor?? [ 1649.293295][T20712] usb 6-1: USB disconnect, device number 61 [ 1650.383539][T26626] netlink: 'syz.5.5441': attribute type 10 has an invalid length. [ 1650.408798][T26628] vlan4: entered promiscuous mode [ 1650.550737][T26626] 8021q: adding VLAN 0 to HW filter on device team0 [ 1650.650517][T26626] bond0: (slave team0): Enslaving as an active interface with an up link [ 1650.789334][T20737] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1650.990937][T20737] usb 6-1: Using ep0 maxpacket: 8 [ 1651.023369][T20737] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1651.058066][T26638] netlink: 'syz.0.5444': attribute type 1 has an invalid length. [ 1651.059243][T20737] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.094728][T20737] usb 6-1: Product: syz [ 1651.098971][T20737] usb 6-1: Manufacturer: syz [ 1651.127390][T20737] usb 6-1: SerialNumber: syz [ 1651.136702][T20737] usb 6-1: config 0 descriptor?? [ 1651.151128][T20737] gspca_main: se401-2.14.0 probing 047d:5003 [ 1651.308858][T20712] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 1651.396493][T20712] hid-generic 0000:0000:0000.0051: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1651.566591][T20737] gspca_se401: ExtraFeatures: 255 [ 1651.579229][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1651.587392][T20737] gspca_se401: Too many frame sizes [ 1651.920359][T26629] sctp: [Deprecated]: syz.5.5441 (pid 26629) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1651.920359][T26629] Use struct sctp_sack_info instead [ 1651.961186][T26629] netlink: 100 bytes leftover after parsing attributes in process `syz.5.5441'. [ 1652.016368][T26654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1652.176294][T26654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1652.574739][T26046] usb 6-1: USB disconnect, device number 62 [ 1653.739557][T26677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5455'. [ 1653.776771][T26677] vlan2: entered promiscuous mode [ 1653.799232][T20712] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1653.814522][T26669] FAULT_INJECTION: forcing a failure. [ 1653.814522][T26669] name failslab, interval 1, probability 0, space 0, times 0 [ 1653.829008][T26669] CPU: 0 UID: 0 PID: 26669 Comm: syz.1.5452 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1653.829040][T26669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1653.829053][T26669] Call Trace: [ 1653.829062][T26669] [ 1653.829071][T26669] dump_stack_lvl+0x189/0x250 [ 1653.829109][T26669] ? __pfx____ratelimit+0x10/0x10 [ 1653.829141][T26669] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1653.829165][T26669] ? __pfx__printk+0x10/0x10 [ 1653.829207][T26669] should_fail_ex+0x414/0x560 [ 1653.829243][T26669] should_failslab+0xa8/0x100 [ 1653.829272][T26669] __kmalloc_cache_noprof+0x70/0x3d0 [ 1653.829299][T26669] ? sctp_add_bind_addr+0x8c/0x370 [ 1653.829326][T26669] sctp_add_bind_addr+0x8c/0x370 [ 1653.829354][T26669] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1653.829381][T26669] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1653.829404][T26669] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1653.829429][T26669] ? sctp_v6_is_any+0x64/0x80 [ 1653.829455][T26669] ? sctp_copy_one_addr+0x93/0x360 [ 1653.829481][T26669] sctp_bind_addr_copy+0xb3/0x3c0 [ 1653.829505][T26669] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1653.829541][T26669] sctp_connect_new_asoc+0x2e0/0x690 [ 1653.829572][T26669] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1653.829598][T26669] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1653.829630][T26669] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1653.829650][T26669] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1653.829681][T26669] sctp_sendmsg+0x155c/0x2810 [ 1653.829721][T26669] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1653.829752][T26669] ? aa_sk_perm+0x81e/0x950 [ 1653.829786][T26669] ? __pfx_aa_sk_perm+0x10/0x10 [ 1653.829818][T26669] ? sock_rps_record_flow+0x19/0x410 [ 1653.829842][T26669] ? inet_sendmsg+0x2f4/0x370 [ 1653.829868][T26669] __sock_sendmsg+0x19c/0x270 [ 1653.829892][T26669] ____sys_sendmsg+0x52d/0x830 [ 1653.829924][T26669] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1653.829959][T26669] ? import_iovec+0x74/0xa0 [ 1653.829987][T26669] ___sys_sendmsg+0x21f/0x2a0 [ 1653.830017][T26669] ? __pfx____sys_sendmsg+0x10/0x10 [ 1653.830082][T26669] ? __fget_files+0x2a/0x420 [ 1653.830117][T26669] ? __fget_files+0x3a0/0x420 [ 1653.830156][T26669] __sys_sendmmsg+0x227/0x430 [ 1653.830190][T26669] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1653.830215][T26669] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1653.830265][T26669] ? ksys_write+0x22a/0x250 [ 1653.830291][T26669] ? __pfx_ksys_write+0x10/0x10 [ 1653.830313][T26669] ? rcu_is_watching+0x15/0xb0 [ 1653.830344][T26669] __x64_sys_sendmmsg+0xa0/0xc0 [ 1653.830373][T26669] do_syscall_64+0xfa/0x3b0 [ 1653.830392][T26669] ? lockdep_hardirqs_on+0x9c/0x150 [ 1653.830411][T26669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1653.830430][T26669] ? clear_bhb_loop+0x60/0xb0 [ 1653.830454][T26669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1653.830473][T26669] RIP: 0033:0x7f338818e929 [ 1653.830491][T26669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1653.830509][T26669] RSP: 002b:00007f33890b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1653.830531][T26669] RAX: ffffffffffffffda RBX: 00007f33883b5fa0 RCX: 00007f338818e929 [ 1653.830545][T26669] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000005 [ 1653.830558][T26669] RBP: 00007f33890b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1653.830569][T26669] R10: 00000000140008d4 R11: 0000000000000246 R12: 0000000000000002 [ 1653.830581][T26669] R13: 0000000000000000 R14: 00007f33883b5fa0 R15: 00007f33884dfa28 [ 1653.830612][T26669] [ 1654.319134][T20712] usb 1-1: Using ep0 maxpacket: 16 [ 1654.365473][T20712] usb 1-1: config 0 has no interfaces? [ 1654.371072][T20712] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1654.380204][T20712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.390505][T20712] usb 1-1: config 0 descriptor?? [ 1654.640957][T26664] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5447'. [ 1654.681436][T20712] usb 1-1: USB disconnect, device number 17 [ 1654.967871][T26697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5461'. [ 1655.122145][T26703] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5462'. [ 1655.697311][T26717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5468'. [ 1656.099542][T21087] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1656.239835][T21087] usb 4-1: device descriptor read/64, error -71 [ 1656.397580][T26731] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5472'. [ 1656.509278][T21087] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1656.586105][T26733] netlink: 'syz.4.5473': attribute type 10 has an invalid length. [ 1656.602491][T26733] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1656.639294][T21087] usb 4-1: device descriptor read/64, error -71 [ 1656.681661][T26733] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1656.782170][T21087] usb usb4-port1: attempt power cycle [ 1657.136837][T26739] vlan2: entered allmulticast mode [ 1657.142363][T21087] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1657.154929][T26739] dummy0: entered allmulticast mode [ 1657.211447][T21087] usb 4-1: device descriptor read/8, error -71 [ 1657.479270][T21087] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1657.620475][T21087] usb 4-1: device descriptor read/8, error -71 [ 1657.749625][T21087] usb usb4-port1: unable to enumerate USB device [ 1658.876846][ T43] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1659.121894][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1659.166839][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1659.209204][ T43] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1659.243175][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1659.261130][ T43] usb 4-1: SerialNumber: syz [ 1660.774019][T26763] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1660.781510][T26763] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1660.794276][T26763] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1660.819473][T26763] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1660.949234][T21089] Bluetooth: hci1: command 0x0406 tx timeout [ 1661.025750][T26763] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1661.043872][T26763] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1661.069965][T26763] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1661.096989][T26763] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1661.399213][T26046] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1661.641153][T26046] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 1661.662665][T26046] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1661.697086][T26046] usb 1-1: config 0 has no interface number 0 [ 1661.718492][T26046] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 15403, setting to 1024 [ 1661.746539][T26046] usb 1-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1661.780850][T26046] usb 1-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1661.828435][T26046] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1661.853073][T26046] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.887577][T26046] usb 1-1: config 0 descriptor?? [ 1661.908365][T26783] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1661.974976][T26046] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1662.300158][T26783] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5487'. [ 1662.331433][T26782] netlink: 308 bytes leftover after parsing attributes in process `syz.0.5487'. [ 1662.430311][T26782] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1662.499691][T26782] SET target dimension over the limit! [ 1662.601533][T26046] usb 1-1: USB disconnect, device number 18 [ 1662.602748][T23232] usb 1-1: Failed to submit usb control message: -71 [ 1662.706534][T23232] usb 1-1: unable to send the bmi data to the device: -71 [ 1662.729093][T23232] usb 1-1: unable to get target info from device [ 1662.761728][T26810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1662.770881][T23232] usb 1-1: could not get target info (-71) [ 1662.776781][T23232] usb 1-1: could not probe fw (-71) [ 1662.880232][T21089] Bluetooth: hci2: command 0x0406 tx timeout [ 1663.030206][T21089] Bluetooth: hci1: command 0x0406 tx timeout [ 1663.099503][T21089] Bluetooth: hci5: command 0x0405 tx timeout [ 1663.105623][T21089] Bluetooth: hci4: command 0x0405 tx timeout [ 1663.809177][T21087] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1663.969131][T21087] usb 1-1: Using ep0 maxpacket: 32 [ 1663.976644][T21087] usb 1-1: config 0 has an invalid interface number: 64 but max is 1 [ 1663.995258][T21087] usb 1-1: config 0 has no interface number 1 [ 1664.073800][T21087] usb 1-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=1c.a5 [ 1664.086543][T21087] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.207522][T21087] usb 1-1: Product: syz [ 1664.237804][T21087] usb 1-1: Manufacturer: syz [ 1664.256687][T21087] usb 1-1: SerialNumber: syz [ 1664.329758][T21087] usb 1-1: config 0 descriptor?? [ 1664.354517][T21087] usb 1-1: bad CDC descriptors [ 1664.560308][ T43] usb 4-1: 0:2 : does not exist [ 1664.572588][T21087] usb 1-1: USB disconnect, device number 19 [ 1664.941424][T21089] Bluetooth: hci2: command 0x0406 tx timeout [ 1665.181722][T21089] Bluetooth: hci4: command 0x0405 tx timeout [ 1665.181796][ T5857] Bluetooth: hci5: command 0x0405 tx timeout [ 1665.380535][T26862] FAULT_INJECTION: forcing a failure. [ 1665.380535][T26862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1665.459620][T26862] CPU: 1 UID: 0 PID: 26862 Comm: syz.5.5502 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1665.459661][T26862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1665.459681][T26862] Call Trace: [ 1665.459693][T26862] [ 1665.459703][T26862] dump_stack_lvl+0x189/0x250 [ 1665.459742][T26862] ? __pfx____ratelimit+0x10/0x10 [ 1665.459777][T26862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1665.459808][T26862] ? __pfx__printk+0x10/0x10 [ 1665.459836][T26862] ? __might_fault+0xb0/0x130 [ 1665.459880][T26862] should_fail_ex+0x414/0x560 [ 1665.459915][T26862] _copy_from_user+0x2d/0xb0 [ 1665.459942][T26862] snd_seq_oss_write+0x515/0x930 [ 1665.459979][T26862] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1665.460001][T26862] ? common_file_perm+0x199/0x200 [ 1665.460038][T26862] ? security_file_permission+0x75/0x290 [ 1665.460072][T26862] odev_write+0x5a/0x80 [ 1665.460100][T26862] ? __pfx_odev_write+0x10/0x10 [ 1665.460129][T26862] vfs_write+0x27e/0xa90 [ 1665.460164][T26862] ? __pfx_vfs_write+0x10/0x10 [ 1665.460191][T26862] ? __fget_files+0x2a/0x420 [ 1665.460223][T26862] ? __fget_files+0x2a/0x420 [ 1665.460251][T26862] ? __fget_files+0x3a0/0x420 [ 1665.460278][T26862] ? __fget_files+0x2a/0x420 [ 1665.460315][T26862] ksys_write+0x145/0x250 [ 1665.460344][T26862] ? __pfx_ksys_write+0x10/0x10 [ 1665.460365][T26862] ? rcu_is_watching+0x15/0xb0 [ 1665.460395][T26862] ? do_syscall_64+0xbe/0x3b0 [ 1665.460419][T26862] do_syscall_64+0xfa/0x3b0 [ 1665.460450][T26862] ? lockdep_hardirqs_on+0x9c/0x150 [ 1665.460471][T26862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1665.460492][T26862] ? clear_bhb_loop+0x60/0xb0 [ 1665.460518][T26862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1665.460538][T26862] RIP: 0033:0x7f9e4618e929 [ 1665.460557][T26862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1665.460576][T26862] RSP: 002b:00007f9e4700c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1665.460612][T26862] RAX: ffffffffffffffda RBX: 00007f9e463b5fa0 RCX: 00007f9e4618e929 [ 1665.460626][T26862] RDX: 000000000000fd85 RSI: 0000200000000080 RDI: 0000000000000003 [ 1665.460639][T26862] RBP: 00007f9e4700c090 R08: 0000000000000000 R09: 0000000000000000 [ 1665.460651][T26862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1665.460663][T26862] R13: 0000000000000000 R14: 00007f9e463b5fa0 R15: 00007f9e464dfa28 [ 1665.460692][T26862] [ 1666.128063][T26871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5505'. [ 1666.301760][T26841] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1666.301806][ T5857] Bluetooth: hci1: command 0x0406 tx timeout [ 1667.612593][T26875] netlink: 'syz.5.5503': attribute type 4 has an invalid length. [ 1667.781147][T26841] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1667.795967][T26841] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1667.843107][T26841] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1668.014488][T26046] usb 4-1: USB disconnect, device number 91 [ 1668.109170][T20712] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1668.224599][T26884] FAULT_INJECTION: forcing a failure. [ 1668.224599][T26884] name failslab, interval 1, probability 0, space 0, times 0 [ 1668.258002][T26884] CPU: 1 UID: 0 PID: 26884 Comm: syz.3.5507 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1668.258034][T26884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1668.258047][T26884] Call Trace: [ 1668.258056][T26884] [ 1668.258066][T26884] dump_stack_lvl+0x189/0x250 [ 1668.258097][T26884] ? __pfx____ratelimit+0x10/0x10 [ 1668.258132][T26884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1668.258157][T26884] ? __pfx__printk+0x10/0x10 [ 1668.258201][T26884] should_fail_ex+0x414/0x560 [ 1668.258262][T26884] should_failslab+0xa8/0x100 [ 1668.258292][T26884] __kmalloc_cache_noprof+0x70/0x3d0 [ 1668.258317][T26884] ? sctp_add_bind_addr+0x8c/0x370 [ 1668.258350][T26884] sctp_add_bind_addr+0x8c/0x370 [ 1668.258377][T26884] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1668.258403][T26884] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1668.258426][T26884] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1668.258450][T26884] ? sctp_v6_is_any+0x64/0x80 [ 1668.258476][T26884] ? sctp_copy_one_addr+0x93/0x360 [ 1668.258502][T26884] sctp_bind_addr_copy+0xb3/0x3c0 [ 1668.258526][T26884] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1668.258562][T26884] sctp_connect_new_asoc+0x2e0/0x690 [ 1668.258593][T26884] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1668.258628][T26884] ? sctp_inet6_send_verify+0x23a/0x300 [ 1668.258649][T26884] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 1668.258680][T26884] __sctp_connect+0x5ba/0xd50 [ 1668.258721][T26884] ? __pfx___sctp_connect+0x10/0x10 [ 1668.258752][T26884] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1668.258773][T26884] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1668.258804][T26884] sctp_getsockopt_connectx3+0x2c4/0x440 [ 1668.258831][T26884] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 1668.258855][T26884] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1668.258879][T26884] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1668.258914][T26884] sctp_getsockopt+0x98a/0xb60 [ 1668.258944][T26884] do_sock_getsockopt+0x360/0x650 [ 1668.258975][T26884] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1668.259006][T26884] ? do_syscall_64+0x40/0x3b0 [ 1668.259037][T26884] ? __fget_files+0x3a0/0x420 [ 1668.259061][T26884] ? __fget_files+0x2a/0x420 [ 1668.259094][T26884] __x64_sys_getsockopt+0x1a5/0x250 [ 1668.259135][T26884] ? do_syscall_64+0x40/0x3b0 [ 1668.259156][T26884] ? do_syscall_64+0x40/0x3b0 [ 1668.259180][T26884] do_syscall_64+0xfa/0x3b0 [ 1668.259198][T26884] ? lockdep_hardirqs_on+0x9c/0x150 [ 1668.259216][T26884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1668.259235][T26884] ? clear_bhb_loop+0x60/0xb0 [ 1668.259259][T26884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1668.259278][T26884] RIP: 0033:0x7f250a18e929 [ 1668.259297][T26884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1668.259315][T26884] RSP: 002b:00007f250afe1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1668.259336][T26884] RAX: ffffffffffffffda RBX: 00007f250a3b5fa0 RCX: 00007f250a18e929 [ 1668.259357][T26884] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 1668.259369][T26884] RBP: 00007f250afe1090 R08: 0000200000000040 R09: 0000000000000000 [ 1668.259383][T26884] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000002 [ 1668.259396][T26884] R13: 0000000000000000 R14: 00007f250a3b5fa0 R15: 00007f250a4dfa28 [ 1668.259423][T26884] [ 1668.299243][T20712] usb 5-1: Using ep0 maxpacket: 16 [ 1668.302809][ C1] vkms_vblank_simulate: vblank timer overrun [ 1668.594168][ C1] vkms_vblank_simulate: vblank timer overrun [ 1668.700245][ C1] vkms_vblank_simulate: vblank timer overrun [ 1668.729582][ T5857] Bluetooth: hci2: command 0x0406 tx timeout [ 1668.865222][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.871840][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.459400][T20737] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1669.467365][ T43] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1669.624616][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1669.641773][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1669.665626][ T43] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1669.681763][T20737] usb 2-1: config 0 has no interfaces? [ 1669.687604][T20737] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1669.704539][T20737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.721836][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.766691][T20737] usb 2-1: config 0 descriptor?? [ 1669.785669][ T43] usb 4-1: config 0 descriptor?? [ 1669.819288][ T5857] Bluetooth: hci4: command 0x0405 tx timeout [ 1669.899885][ T5857] Bluetooth: hci5: command 0x0405 tx timeout [ 1670.043398][T26901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1670.080383][T26901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1670.629593][T26900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1670.638274][ T43] hid-led 0003:27B8:01ED.0052: probe with driver hid-led failed with error -32 [ 1670.658135][T26900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1670.702613][ T43] usb 4-1: USB disconnect, device number 92 [ 1670.806592][T20712] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1670.833757][T20712] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1670.905876][T20712] usb 5-1: can't read configurations, error -71 [ 1672.564419][T26923] binder: 26921:26923 ioctl c0306201 2000000003c0 returned -14 [ 1672.922876][T20712] usb 2-1: USB disconnect, device number 115 [ 1674.024898][T20712] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1674.196025][T20712] usb 2-1: Using ep0 maxpacket: 32 [ 1674.208047][T20712] usb 2-1: config 0 has an invalid interface number: 225 but max is 0 [ 1674.223999][T20712] usb 2-1: config 0 has no interface number 0 [ 1674.235638][T20712] usb 2-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 1674.247745][T20712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.266839][T20712] usb 2-1: Product: syz [ 1674.283634][T20712] usb 2-1: Manufacturer: syz [ 1674.318203][T20712] usb 2-1: SerialNumber: syz [ 1674.371327][T21087] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 1674.396110][T26949] openvswitch: netlink: Key 25 has unexpected len 4 expected 16 [ 1674.423687][T20712] usb 2-1: config 0 descriptor?? [ 1674.436924][T26949] netlink: 'syz.0.5526': attribute type 10 has an invalid length. [ 1674.621249][T21087] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1674.649726][T21087] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1674.684990][T26940] FAULT_INJECTION: forcing a failure. [ 1674.684990][T26940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1674.699576][T26940] CPU: 0 UID: 0 PID: 26940 Comm: syz.1.5523 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1674.699602][T26940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1674.699612][T26940] Call Trace: [ 1674.699619][T26940] [ 1674.699625][T26940] dump_stack_lvl+0x189/0x250 [ 1674.699649][T26940] ? __pfx____ratelimit+0x10/0x10 [ 1674.699677][T26940] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1674.699695][T26940] ? __pfx__printk+0x10/0x10 [ 1674.699724][T26940] should_fail_ex+0x414/0x560 [ 1674.699750][T26940] _copy_to_user+0x31/0xb0 [ 1674.699770][T26940] simple_read_from_buffer+0xe1/0x170 [ 1674.699793][T26940] proc_fail_nth_read+0x1df/0x250 [ 1674.699822][T26940] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1674.699846][T26940] ? rw_verify_area+0x258/0x650 [ 1674.699863][T26940] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1674.699886][T26940] vfs_read+0x200/0x980 [ 1674.699907][T26940] ? __pfx___mutex_lock+0x10/0x10 [ 1674.699923][T26940] ? __pfx_vfs_read+0x10/0x10 [ 1674.699943][T26940] ? __fget_files+0x2a/0x420 [ 1674.699976][T26940] ? __fget_files+0x3a0/0x420 [ 1674.700002][T26940] ? __fget_files+0x2a/0x420 [ 1674.700037][T26940] ksys_read+0x145/0x250 [ 1674.700056][T26940] ? __pfx_ksys_read+0x10/0x10 [ 1674.700071][T26940] ? rcu_is_watching+0x15/0xb0 [ 1674.700093][T26940] ? do_syscall_64+0xbe/0x3b0 [ 1674.700111][T26940] do_syscall_64+0xfa/0x3b0 [ 1674.700125][T26940] ? lockdep_hardirqs_on+0x9c/0x150 [ 1674.700138][T26940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.700152][T26940] ? clear_bhb_loop+0x60/0xb0 [ 1674.700170][T26940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.700184][T26940] RIP: 0033:0x7f338818d33c [ 1674.700196][T26940] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1674.700209][T26940] RSP: 002b:00007f3389093030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1674.700224][T26940] RAX: ffffffffffffffda RBX: 00007f33883b6080 RCX: 00007f338818d33c [ 1674.700235][T26940] RDX: 000000000000000f RSI: 00007f33890930a0 RDI: 0000000000000009 [ 1674.700244][T26940] RBP: 00007f3389093090 R08: 0000000000000000 R09: 0000000000000000 [ 1674.700252][T26940] R10: 000000000000fdff R11: 0000000000000246 R12: 0000000000000001 [ 1674.700261][T26940] R13: 0000000000000000 R14: 00007f33883b6080 R15: 00007f33884dfa28 [ 1674.700283][T26940] [ 1675.236862][T21087] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1675.250577][T21087] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1675.304922][T20712] mos7840 2-1:0.225: required endpoints missing [ 1675.351187][T20712] usb 2-1: USB disconnect, device number 116 [ 1675.381204][T21087] usb 5-1: New USB device found, idVendor=0125, idProduct=a4a1, bcdDevice= 0.40 [ 1675.390436][T21087] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.398427][T21087] usb 5-1: Product: syz [ 1675.443504][T21087] usb 5-1: Manufacturer: syz [ 1675.448179][T21087] usb 5-1: SerialNumber: syz [ 1675.499159][T21087] cdc_ncm 5-1:1.0: skipping garbage [ 1675.736397][T26954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5528'. [ 1675.769234][T26954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5528'. [ 1676.496455][T26969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5534'. [ 1676.512987][T21087] cdc_ncm 5-1:1.0: bind() failure [ 1676.526336][T21087] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1676.540930][T21087] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1676.560739][T21087] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 1676.622930][T21087] usb 5-1: USB disconnect, device number 123 [ 1676.810419][T26979] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5536'. [ 1676.859921][T26977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5537'. [ 1677.172958][T26987] FAULT_INJECTION: forcing a failure. [ 1677.172958][T26987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1677.196095][T26987] CPU: 1 UID: 0 PID: 26987 Comm: syz.4.5539 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1677.196122][T26987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1677.196134][T26987] Call Trace: [ 1677.196141][T26987] [ 1677.196150][T26987] dump_stack_lvl+0x189/0x250 [ 1677.196177][T26987] ? __pfx____ratelimit+0x10/0x10 [ 1677.196206][T26987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1677.196227][T26987] ? __pfx__printk+0x10/0x10 [ 1677.196251][T26987] ? __might_fault+0xb0/0x130 [ 1677.196283][T26987] should_fail_ex+0x414/0x560 [ 1677.196314][T26987] _copy_from_user+0x2d/0xb0 [ 1677.196369][T26987] ___sys_recvmsg+0x12e/0x510 [ 1677.196421][T26987] ? __pfx____sys_recvmsg+0x10/0x10 [ 1677.196482][T26987] ? __might_fault+0xb0/0x130 [ 1677.196511][T26987] do_recvmmsg+0x307/0x770 [ 1677.196547][T26987] ? __pfx_do_recvmmsg+0x10/0x10 [ 1677.196583][T26987] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1677.196632][T26987] __x64_sys_recvmmsg+0x190/0x240 [ 1677.196664][T26987] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1677.196693][T26987] do_syscall_64+0xfa/0x3b0 [ 1677.196707][T26987] ? lockdep_hardirqs_on+0x9c/0x150 [ 1677.196721][T26987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1677.196735][T26987] ? clear_bhb_loop+0x60/0xb0 [ 1677.196752][T26987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1677.196767][T26987] RIP: 0033:0x7fecfc78e929 [ 1677.196780][T26987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1677.196793][T26987] RSP: 002b:00007fecfd52c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1677.196809][T26987] RAX: ffffffffffffffda RBX: 00007fecfc9b5fa0 RCX: 00007fecfc78e929 [ 1677.196820][T26987] RDX: 00000000000005df RSI: 0000200000000b40 RDI: 0000000000000003 [ 1677.196830][T26987] RBP: 00007fecfd52c090 R08: 0000000000000000 R09: 0000000000000000 [ 1677.196839][T26987] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1677.196847][T26987] R13: 0000000000000000 R14: 00007fecfc9b5fa0 R15: 00007fecfcadfa28 [ 1677.196869][T26987] [ 1677.197088][T26986] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5538'. [ 1677.463851][T26989] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5538'. [ 1677.709736][T26999] tc_dump_action: action bad kind [ 1677.939096][T20737] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1677.949327][ T43] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1677.959124][T21087] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1678.059856][T20725] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1678.109173][T20737] usb 4-1: Using ep0 maxpacket: 32 [ 1678.114471][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 1678.120010][T20736] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 1678.129409][T20737] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1678.141450][T20737] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1678.141467][T21087] usb 2-1: config 0 has no interfaces? [ 1678.146634][T21087] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1678.151661][T20737] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 20 [ 1678.163070][T21087] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.166421][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1678.197875][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1678.203287][T21087] usb 2-1: Product: syz [ 1678.213285][T20737] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1678.216487][T21087] usb 2-1: Manufacturer: syz [ 1678.223176][T20737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1678.227183][T21087] usb 2-1: SerialNumber: syz [ 1678.236633][T20737] usb 4-1: SerialNumber: syz [ 1678.246064][ T43] usb 5-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 1678.250666][T20725] usb 6-1: config 0 has an invalid interface number: 49 but max is 0 [ 1678.257646][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.271094][T21087] usb 2-1: config 0 descriptor?? [ 1678.275776][T26995] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1678.283224][T20725] usb 6-1: config 0 has no interface number 0 [ 1678.289363][ T43] usb 5-1: Product: syz [ 1678.289386][ T43] usb 5-1: Manufacturer: syz [ 1678.289401][ T43] usb 5-1: SerialNumber: syz [ 1678.291639][T20736] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1678.318025][T20725] usb 6-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=e7.29 [ 1678.322564][T20737] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 1678.339587][ T43] usb 5-1: config 0 descriptor?? [ 1678.347185][T20725] usb 6-1: New USB device strings: Mfr=1, Product=5, SerialNumber=0 [ 1678.359574][ T43] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 1678.364740][T20725] usb 6-1: Product: syz [ 1678.369254][T20736] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1678.373097][T20725] usb 6-1: Manufacturer: syz [ 1678.387725][T20736] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 30768, setting to 64 [ 1678.401657][T20736] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1678.414263][T20725] usb 6-1: config 0 descriptor?? [ 1678.418831][T20736] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1678.429535][T20736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.433844][T20725] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 1678.438207][T20736] usb 1-1: Product: syz [ 1678.448343][T20736] usb 1-1: Manufacturer: syz [ 1678.454602][T20736] usb 1-1: SerialNumber: syz [ 1678.468129][T20736] usb 1-1: config 0 descriptor?? [ 1678.484975][T20736] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input148 [ 1678.497377][ C1] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 1678.586635][T20736] usb 5-1: USB disconnect, device number 124 [ 1678.670286][T20737] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 1678.698237][T20737] usb 4-1: USB disconnect, device number 93 [ 1678.743736][ T43] usb 1-1: USB disconnect, device number 20 [ 1678.970064][T20725] gspca_sonixj: reg_w1 err -110 [ 1678.977701][T20725] sonixj 6-1:0.49: probe with driver sonixj failed with error -110 [ 1679.138946][ T43] usb 6-1: USB disconnect, device number 63 [ 1679.579201][T20737] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1679.721499][T27029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5553'. [ 1679.735193][T27029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5553'. [ 1679.799881][T20737] usb 4-1: Using ep0 maxpacket: 8 [ 1679.810113][T20737] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1679.825843][T20737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.856172][T27033] Invalid logical block size (-1048577) [ 1679.878328][T20737] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1679.891938][T20737] pvrusb2: ********** [ 1679.899599][T20737] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1679.919103][T20737] pvrusb2: Important functionality might not be entirely working. [ 1679.936780][T20737] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1679.969508][T20737] pvrusb2: ********** [ 1680.019449][ T43] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 1680.122425][T20737] usb 4-1: USB disconnect, device number 94 [ 1680.128528][ T2342] pvrusb2: Invalid write control endpoint [ 1680.201341][ T43] usb 1-1: config index 0 descriptor too short (expected 539, got 27) [ 1680.210891][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 48, changing to 4 [ 1680.228068][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 30768, setting to 1023 [ 1680.280860][ T43] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1680.291940][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.304358][ T43] usb 1-1: Product: syz [ 1680.308668][ T43] usb 1-1: Manufacturer: syz [ 1680.314870][ T43] usb 1-1: SerialNumber: syz [ 1680.333791][ T43] usb 1-1: config 0 descriptor?? [ 1680.357245][ T43] hub 1-1:0.0: bad descriptor, ignoring hub [ 1680.370133][ T2342] pvrusb2: Invalid write control endpoint [ 1680.378703][ T43] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1680.392501][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1680.401650][ T43] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input149 [ 1680.422819][ T43] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 1680.443558][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1680.457903][ T43] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 1680.493383][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1680.509202][T20712] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1680.557997][ T2342] pvrusb2: Device being rendered inoperable [ 1680.576927][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1680.584282][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1680.663467][T26046] usb 2-1: USB disconnect, device number 117 [ 1680.697665][ T2342] pvrusb2: Attached sub-driver cx25840 [ 1680.703354][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1680.739114][T20712] usb 5-1: device descriptor read/64, error -71 [ 1680.759916][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1681.009142][T20712] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1681.159148][T26046] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1681.206898][T27055] FAULT_INJECTION: forcing a failure. [ 1681.206898][T27055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1681.223174][T27055] CPU: 1 UID: 0 PID: 27055 Comm: syz.3.5565 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1681.223198][T27055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1681.223210][T27055] Call Trace: [ 1681.223217][T27055] [ 1681.223225][T27055] dump_stack_lvl+0x189/0x250 [ 1681.223251][T27055] ? __pfx____ratelimit+0x10/0x10 [ 1681.223297][T27055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1681.223318][T27055] ? __pfx__printk+0x10/0x10 [ 1681.223342][T27055] ? __might_fault+0xb0/0x130 [ 1681.223392][T27055] should_fail_ex+0x414/0x560 [ 1681.223422][T27055] _copy_from_user+0x2d/0xb0 [ 1681.223462][T27055] snd_seq_oss_write+0x515/0x930 [ 1681.223497][T27055] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1681.223517][T27055] ? common_file_perm+0x199/0x200 [ 1681.223551][T27055] ? security_file_permission+0x75/0x290 [ 1681.223580][T27055] odev_write+0x5a/0x80 [ 1681.223604][T27055] ? __pfx_odev_write+0x10/0x10 [ 1681.223631][T27055] vfs_write+0x27e/0xa90 [ 1681.223662][T27055] ? __pfx_vfs_write+0x10/0x10 [ 1681.223688][T27055] ? __rcu_read_unlock+0x84/0xe0 [ 1681.223727][T27055] ? __fget_files+0x2a/0x420 [ 1681.223769][T27055] ? __fget_files+0x3a0/0x420 [ 1681.223796][T27055] ? __fget_files+0x2a/0x420 [ 1681.223830][T27055] ksys_write+0x145/0x250 [ 1681.223855][T27055] ? __pfx_ksys_write+0x10/0x10 [ 1681.223875][T27055] ? rcu_is_watching+0x15/0xb0 [ 1681.223902][T27055] ? do_syscall_64+0xbe/0x3b0 [ 1681.223925][T27055] do_syscall_64+0xfa/0x3b0 [ 1681.223942][T27055] ? lockdep_hardirqs_on+0x9c/0x150 [ 1681.223960][T27055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.223979][T27055] ? clear_bhb_loop+0x60/0xb0 [ 1681.224001][T27055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.224019][T27055] RIP: 0033:0x7f250a18e929 [ 1681.224036][T27055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1681.224052][T27055] RSP: 002b:00007f250afe1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1681.224073][T27055] RAX: ffffffffffffffda RBX: 00007f250a3b5fa0 RCX: 00007f250a18e929 [ 1681.224087][T27055] RDX: 000000000000fd85 RSI: 0000200000000080 RDI: 0000000000000003 [ 1681.224099][T27055] RBP: 00007f250afe1090 R08: 0000000000000000 R09: 0000000000000000 [ 1681.224110][T27055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1681.224121][T27055] R13: 0000000000000000 R14: 00007f250a3b5fa0 R15: 00007f250a4dfa28 [ 1681.224150][T27055] [ 1681.470414][T20712] usb 5-1: device descriptor read/64, error -71 [ 1681.613016][T27047] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5562'. [ 1681.745061][T20712] usb usb5-port1: attempt power cycle [ 1681.776336][T26046] usb 2-1: config 0 has no interfaces? [ 1681.825224][T26046] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1681.840245][T26046] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.982905][T26046] usb 2-1: Product: syz [ 1681.987376][T26046] usb 2-1: Manufacturer: syz [ 1681.995111][T26046] usb 2-1: SerialNumber: syz [ 1682.011556][T26046] usb 2-1: config 0 descriptor?? [ 1682.179273][T20712] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1682.199910][T20712] usb 5-1: device descriptor read/8, error -71 [ 1682.449295][T20712] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1682.490411][T20712] usb 5-1: device descriptor read/8, error -71 [ 1682.603006][T20712] usb usb5-port1: unable to enumerate USB device [ 1682.729619][T20737] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1682.829727][T20712] usb 1-1: USB disconnect, device number 21 [ 1682.889096][T20737] usb 4-1: Using ep0 maxpacket: 16 [ 1682.898303][T20737] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1682.908166][T20737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.916589][T20737] usb 4-1: Product: syz [ 1682.922532][T20737] usb 4-1: Manufacturer: syz [ 1683.003258][T20737] usb 4-1: SerialNumber: syz [ 1683.070736][T20737] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1683.084815][T20737] r8152-cfgselector 4-1: config 0 descriptor?? [ 1683.304076][T20737] r8152-cfgselector 4-1: Needed 1 retries to read version [ 1683.327207][T20737] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1683.353602][T20737] r8152-cfgselector 4-1: bad CDC descriptors [ 1683.404502][T27069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5571'. [ 1683.508443][T20712] r8152-cfgselector 4-1: USB disconnect, device number 95 [ 1683.531989][T27071] xt_cgroup: invalid path, errno=-2 [ 1683.575358][T27073] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 1683.586660][T27073] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 1683.598020][T27073] tipc: Started in network mode [ 1683.605396][T27073] tipc: Node identity 080211000001, cluster identity 4711 [ 1683.613331][T27073] tipc: Enabled bearer , priority 0 [ 1683.693119][T27080] Invalid logical block size (1310720) [ 1683.793047][T20737] usb 2-1: USB disconnect, device number 118 [ 1684.119319][T20712] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1684.149189][T20737] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1684.327616][T20712] usb 5-1: Using ep0 maxpacket: 8 [ 1684.343663][T20712] usb 5-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 1684.356696][T20737] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1684.367639][T20737] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.397914][T20737] usb 2-1: Product: syz [ 1684.419341][T27101] vti0: entered promiscuous mode [ 1684.424447][T27101] vti0: entered allmulticast mode [ 1684.551282][T20712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.561377][T20737] usb 2-1: Manufacturer: syz [ 1684.568989][T20712] usb 5-1: Product: syz [ 1684.602798][T20712] usb 5-1: Manufacturer: syz [ 1684.617564][T20712] usb 5-1: SerialNumber: syz [ 1684.647647][T20737] usb 2-1: SerialNumber: syz [ 1684.733440][T20736] tipc: Node number set to 134418688 [ 1684.746651][T20712] go7007 5-1:2.0: probe with driver go7007 failed with error -12 [ 1684.756271][T20737] usb 2-1: config 0 descriptor?? [ 1684.859332][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1684.906393][T26046] usb 5-1: USB disconnect, device number 3 [ 1685.496443][T20737] usb 2-1: Firmware version (0.0) predates our first public release. [ 1685.525102][T20737] usb 2-1: Please update to version 0.2 or newer [ 1685.791405][T20737] usb 2-1: USB disconnect, device number 119 [ 1686.046956][T27123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1686.508487][T27141] FAULT_INJECTION: forcing a failure. [ 1686.508487][T27141] name failslab, interval 1, probability 0, space 0, times 0 [ 1686.536423][T27141] CPU: 1 UID: 0 PID: 27141 Comm: syz.3.5592 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1686.536452][T27141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1686.536465][T27141] Call Trace: [ 1686.536474][T27141] [ 1686.536484][T27141] dump_stack_lvl+0x189/0x250 [ 1686.536512][T27141] ? __pfx____ratelimit+0x10/0x10 [ 1686.536543][T27141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1686.536567][T27141] ? __pfx__printk+0x10/0x10 [ 1686.536611][T27141] should_fail_ex+0x414/0x560 [ 1686.536647][T27141] should_failslab+0xa8/0x100 [ 1686.536676][T27141] __kmalloc_cache_noprof+0x70/0x3d0 [ 1686.536701][T27141] ? sctp_add_bind_addr+0x8c/0x370 [ 1686.536729][T27141] sctp_add_bind_addr+0x8c/0x370 [ 1686.536749][T27141] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1686.536768][T27141] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1686.536785][T27141] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1686.536803][T27141] ? sctp_v6_is_any+0x64/0x80 [ 1686.536823][T27141] ? sctp_copy_one_addr+0x93/0x360 [ 1686.536841][T27141] sctp_bind_addr_copy+0xb3/0x3c0 [ 1686.536859][T27141] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1686.536897][T27141] sctp_connect_new_asoc+0x2e0/0x690 [ 1686.536920][T27141] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1686.536939][T27141] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1686.536961][T27141] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1686.536977][T27141] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1686.536999][T27141] sctp_sendmsg+0x155c/0x2810 [ 1686.537026][T27141] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1686.537048][T27141] ? aa_sk_perm+0x81e/0x950 [ 1686.537072][T27141] ? __pfx_aa_sk_perm+0x10/0x10 [ 1686.537094][T27141] ? sock_rps_record_flow+0x19/0x410 [ 1686.537112][T27141] ? inet_sendmsg+0x2f4/0x370 [ 1686.537129][T27141] __sock_sendmsg+0x19c/0x270 [ 1686.537147][T27141] __sys_sendto+0x3bd/0x520 [ 1686.537166][T27141] ? __pfx___sys_sendto+0x10/0x10 [ 1686.537181][T27141] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1686.537209][T27141] ? __fget_files+0x3a0/0x420 [ 1686.537242][T27141] ? rcu_is_watching+0x15/0xb0 [ 1686.537263][T27141] __x64_sys_sendto+0xde/0x100 [ 1686.537284][T27141] do_syscall_64+0xfa/0x3b0 [ 1686.537298][T27141] ? lockdep_hardirqs_on+0x9c/0x150 [ 1686.537311][T27141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.537325][T27141] ? clear_bhb_loop+0x60/0xb0 [ 1686.537342][T27141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.537356][T27141] RIP: 0033:0x7f250a18e929 [ 1686.537369][T27141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1686.537382][T27141] RSP: 002b:00007f250afe1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1686.537397][T27141] RAX: ffffffffffffffda RBX: 00007f250a3b5fa0 RCX: 00007f250a18e929 [ 1686.537407][T27141] RDX: 0000000000014f8d RSI: 0000200000847fff RDI: 000000000000000b [ 1686.537417][T27141] RBP: 00007f250afe1090 R08: 000020000005ffe4 R09: 000000000000001c [ 1686.537426][T27141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1686.537434][T27141] R13: 0000000000000000 R14: 00007f250a3b5fa0 R15: 00007f250a4dfa28 [ 1686.537456][T27141] [ 1687.323708][T27149] netlink: 'syz.3.5596': attribute type 7 has an invalid length. [ 1687.359352][T27149] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5596'. [ 1687.537060][T27147] FAULT_INJECTION: forcing a failure. [ 1687.537060][T27147] name failslab, interval 1, probability 0, space 0, times 0 [ 1687.599345][T27147] CPU: 1 UID: 0 PID: 27147 Comm: syz.4.5594 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1687.599365][T27147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1687.599373][T27147] Call Trace: [ 1687.599379][T27147] [ 1687.599385][T27147] dump_stack_lvl+0x189/0x250 [ 1687.599404][T27147] ? __pfx____ratelimit+0x10/0x10 [ 1687.599425][T27147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1687.599441][T27147] ? __pfx__printk+0x10/0x10 [ 1687.599468][T27147] should_fail_ex+0x414/0x560 [ 1687.599494][T27147] should_failslab+0xa8/0x100 [ 1687.599531][T27147] __kmalloc_cache_noprof+0x70/0x3d0 [ 1687.599548][T27147] ? sctp_add_bind_addr+0x8c/0x370 [ 1687.599567][T27147] sctp_add_bind_addr+0x8c/0x370 [ 1687.599585][T27147] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1687.599603][T27147] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1687.599617][T27147] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1687.599633][T27147] ? sctp_v6_is_any+0x64/0x80 [ 1687.599651][T27147] ? sctp_copy_one_addr+0x93/0x360 [ 1687.599667][T27147] sctp_bind_addr_copy+0xb3/0x3c0 [ 1687.599683][T27147] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1687.599706][T27147] sctp_connect_new_asoc+0x2e0/0x690 [ 1687.599728][T27147] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1687.599744][T27147] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1687.599765][T27147] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1687.599779][T27147] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1687.599799][T27147] sctp_sendmsg+0x155c/0x2810 [ 1687.599825][T27147] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1687.599860][T27147] ? aa_sk_perm+0x81e/0x950 [ 1687.599883][T27147] ? __pfx_aa_sk_perm+0x10/0x10 [ 1687.599904][T27147] ? sock_rps_record_flow+0x19/0x410 [ 1687.599921][T27147] ? inet_sendmsg+0x2f4/0x370 [ 1687.599937][T27147] __sock_sendmsg+0x19c/0x270 [ 1687.599954][T27147] ____sys_sendmsg+0x52d/0x830 [ 1687.599976][T27147] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1687.600001][T27147] ? import_iovec+0x74/0xa0 [ 1687.600020][T27147] ___sys_sendmsg+0x21f/0x2a0 [ 1687.600039][T27147] ? __pfx____sys_sendmsg+0x10/0x10 [ 1687.600082][T27147] ? __fget_files+0x2a/0x420 [ 1687.600100][T27147] ? __fget_files+0x3a0/0x420 [ 1687.600126][T27147] __sys_sendmmsg+0x227/0x430 [ 1687.600148][T27147] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1687.600164][T27147] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1687.600197][T27147] ? ksys_write+0x22a/0x250 [ 1687.600214][T27147] ? __pfx_ksys_write+0x10/0x10 [ 1687.600229][T27147] ? rcu_is_watching+0x15/0xb0 [ 1687.600249][T27147] __x64_sys_sendmmsg+0xa0/0xc0 [ 1687.600269][T27147] do_syscall_64+0xfa/0x3b0 [ 1687.600282][T27147] ? lockdep_hardirqs_on+0x9c/0x150 [ 1687.600294][T27147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.600308][T27147] ? clear_bhb_loop+0x60/0xb0 [ 1687.600324][T27147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.600337][T27147] RIP: 0033:0x7fecfc78e929 [ 1687.600349][T27147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1687.600361][T27147] RSP: 002b:00007fecfd52c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1687.600376][T27147] RAX: ffffffffffffffda RBX: 00007fecfc9b5fa0 RCX: 00007fecfc78e929 [ 1687.600386][T27147] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000005 [ 1687.600395][T27147] RBP: 00007fecfd52c090 R08: 0000000000000000 R09: 0000000000000000 [ 1687.600403][T27147] R10: 00000000140008d4 R11: 0000000000000246 R12: 0000000000000002 [ 1687.600411][T27147] R13: 0000000000000000 R14: 00007fecfc9b5fa0 R15: 00007fecfcadfa28 [ 1687.600431][T27147] [ 1688.397921][T27164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5601'. [ 1688.409273][T27164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5601'. [ 1688.479502][T27167] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5602'. [ 1688.488636][T27167] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1688.509341][T27162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5595'. [ 1688.528171][T26046] IPVS: starting estimator thread 0... [ 1689.002623][T27170] IPVS: using max 28 ests per chain, 67200 per kthread [ 1689.759976][ T43] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1689.966322][T20712] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1689.979378][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 1690.153432][T20712] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1690.168621][T20712] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1690.193725][T20712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.244500][T20712] usb 6-1: config 0 descriptor?? [ 1690.282526][T20712] pwc: Askey VC010 type 2 USB webcam detected. [ 1690.539643][T21089] Bluetooth: hci5: command 0x0405 tx timeout [ 1690.791917][T20712] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1690.872010][T20712] pwc: recv_control_msg error -32 req 02 val 2700 [ 1690.969770][T20712] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1690.990498][T20712] pwc: recv_control_msg error -32 req 04 val 1000 [ 1691.239298][T20736] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 1691.399377][T20736] usb 2-1: device descriptor read/64, error -71 [ 1691.659667][T20736] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 1691.820864][T20736] usb 2-1: device descriptor read/64, error -71 [ 1691.889378][T20737] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 1691.939582][T20736] usb usb2-port1: attempt power cycle [ 1692.051171][T20737] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1692.059798][T20737] usb 4-1: config 0 has no interface number 0 [ 1692.066233][T20737] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1692.091598][T20737] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1692.101309][T20737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.110365][T20737] usb 4-1: Product: syz [ 1692.115827][T20737] usb 4-1: Manufacturer: syz [ 1692.131835][T20737] usb 4-1: SerialNumber: syz [ 1692.163542][T20737] usb 4-1: config 0 descriptor?? [ 1692.299560][T20736] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 1692.330686][T20736] usb 2-1: device descriptor read/8, error -71 [ 1692.501477][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1692.511664][ T43] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1692.526886][ T43] usb 1-1: can't read configurations, error -71 [ 1692.547390][T27216] gtp1: entered promiscuous mode [ 1692.557544][T27216] gtp1: entered allmulticast mode [ 1692.565668][T20712] pwc: recv_control_msg error -71 req 04 val 1300 [ 1692.575105][T20712] pwc: recv_control_msg error -71 req 04 val 1400 [ 1692.589651][T20736] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 1692.601083][T20712] pwc: recv_control_msg error -71 req 02 val 2000 [ 1692.616733][T27212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1692.628108][T20736] usb 2-1: device descriptor read/8, error -71 [ 1692.633327][T20712] pwc: recv_control_msg error -71 req 02 val 2100 [ 1692.656834][T20712] pwc: recv_control_msg error -71 req 04 val 1500 [ 1692.660177][T27212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1692.682147][T20712] pwc: recv_control_msg error -71 req 02 val 2500 [ 1692.716616][T20712] pwc: recv_control_msg error -71 req 02 val 2400 [ 1692.733667][T20712] pwc: recv_control_msg error -71 req 02 val 2600 [ 1692.750047][T20736] usb usb2-port1: unable to enumerate USB device [ 1692.753106][T20712] pwc: recv_control_msg error -71 req 02 val 2900 [ 1692.781160][T27226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1692.786018][T27221] netlink: 348 bytes leftover after parsing attributes in process `syz.5.5620'. [ 1692.808418][T27226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1692.829767][T20712] pwc: recv_control_msg error -71 req 02 val 2800 [ 1692.863717][T20712] pwc: recv_control_msg error -71 req 04 val 1100 [ 1692.871934][T20712] pwc: recv_control_msg error -71 req 04 val 1200 [ 1692.891971][T20712] pwc: Registered as video103. [ 1692.919704][T20712] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input150 [ 1692.979563][T20712] usb 6-1: USB disconnect, device number 64 [ 1693.460486][ T5851] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 1693.682588][ T5851] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 1693.696452][ T5851] usb 5-1: config 0 has no interface number 0 [ 1693.717580][ T5851] usb 5-1: config 0 interface 29 has no altsetting 0 [ 1693.767495][ T5851] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1693.776937][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.785628][ T5851] usb 5-1: Product: syz [ 1693.797095][ T5851] usb 5-1: Manufacturer: syz [ 1693.803286][ T5851] usb 5-1: SerialNumber: syz [ 1693.814741][ T5851] usb 5-1: config 0 descriptor?? [ 1693.820445][ T43] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1693.989295][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 1693.997392][ T43] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1694.006177][ T43] usb 1-1: config 0 has no interface number 0 [ 1694.017223][ T43] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1694.027278][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.035630][ T43] usb 1-1: Product: syz [ 1694.057249][ T43] usb 1-1: Manufacturer: syz [ 1694.064736][ T43] usb 1-1: SerialNumber: syz [ 1694.076675][T27245] Invalid logical block size (-4097) [ 1694.090301][ T43] usb 1-1: config 0 descriptor?? [ 1694.103177][ T43] smsc95xx v2.0.0 [ 1694.130452][ T5851] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v213 fw v0.0.0 (2 channels) [ 1694.537442][ T43] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1694.556168][ T43] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1694.659660][T20737] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1694.670978][T20737] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 1694.731457][T20737] usb 4-1: USB disconnect, device number 96 [ 1694.793630][ T43] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1694.812466][ T43] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 1695.072923][T27256] netlink: 'syz.3.5632': attribute type 21 has an invalid length. [ 1695.082303][T27256] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5632'. [ 1695.505717][T27263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1695.515164][T27263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1695.643081][ T43] usb 1-1: USB disconnect, device number 24 [ 1695.864881][T27268] syz_tun: entered allmulticast mode [ 1695.977441][T21087] IPVS: starting estimator thread 0... [ 1696.009468][T27268] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1696.018541][T27267] syz_tun: left allmulticast mode [ 1696.069209][T27271] IPVS: using max 33 ests per chain, 79200 per kthread [ 1696.484532][ T5851] peak_usb 5-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 1696.495517][ T5851] peak_usb 5-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 1696.630561][ T5851] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71 [ 1696.649154][ T43] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1696.763662][T27287] FAULT_INJECTION: forcing a failure. [ 1696.763662][T27287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1696.789397][ T5851] usb 5-1: USB disconnect, device number 4 [ 1696.799140][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 1696.811341][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1696.846396][T27287] CPU: 0 UID: 0 PID: 27287 Comm: syz.1.5642 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1696.846424][T27287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1696.846436][T27287] Call Trace: [ 1696.846445][T27287] [ 1696.846453][T27287] dump_stack_lvl+0x189/0x250 [ 1696.846481][T27287] ? __pfx____ratelimit+0x10/0x10 [ 1696.846512][T27287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1696.846535][T27287] ? __pfx__printk+0x10/0x10 [ 1696.846561][T27287] ? __might_fault+0xb0/0x130 [ 1696.846595][T27287] should_fail_ex+0x414/0x560 [ 1696.846629][T27287] _copy_from_user+0x2d/0xb0 [ 1696.846654][T27287] do_ipv6_setsockopt+0x32d/0x2fb0 [ 1696.846686][T27287] ? aa_label_sk_perm+0x413/0x560 [ 1696.846715][T27287] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1696.846744][T27287] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1696.846787][T27287] ? __pfx___might_resched+0x10/0x10 [ 1696.846812][T27287] ? rcu_read_lock_any_held+0xb3/0x120 [ 1696.846836][T27287] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1696.846863][T27287] ? vfs_write+0x8d8/0xa90 [ 1696.846890][T27287] ? aa_sk_perm+0x81e/0x950 [ 1696.846921][T27287] ? __pfx_aa_sk_perm+0x10/0x10 [ 1696.846945][T27287] ? __lock_acquire+0xab9/0xd20 [ 1696.846974][T27287] ipv6_setsockopt+0x59/0x170 [ 1696.847001][T27287] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1696.847026][T27287] do_sock_setsockopt+0x257/0x3e0 [ 1696.847053][T27287] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1696.847082][T27287] ? __fget_files+0x2a/0x420 [ 1696.847116][T27287] __x64_sys_setsockopt+0x18b/0x220 [ 1696.847146][T27287] do_syscall_64+0xfa/0x3b0 [ 1696.847173][T27287] ? lockdep_hardirqs_on+0x9c/0x150 [ 1696.847191][T27287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1696.847210][T27287] ? clear_bhb_loop+0x60/0xb0 [ 1696.847233][T27287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1696.847252][T27287] RIP: 0033:0x7f338818e929 [ 1696.847269][T27287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1696.847286][T27287] RSP: 002b:00007f33890b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1696.847307][T27287] RAX: ffffffffffffffda RBX: 00007f33883b5fa0 RCX: 00007f338818e929 [ 1696.847322][T27287] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1696.847334][T27287] RBP: 00007f33890b4090 R08: 0000000000000580 R09: 0000000000000000 [ 1696.847345][T27287] R10: 0000200000000c40 R11: 0000000000000246 R12: 0000000000000001 [ 1696.847357][T27287] R13: 0000000000000000 R14: 00007f33883b5fa0 R15: 00007f33884dfa28 [ 1696.847384][T27287] [ 1696.851487][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1697.529071][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1697.687181][T27303] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5646'. [ 1697.707879][ T43] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1697.743313][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.098866][ T43] usb 6-1: config 0 descriptor?? [ 1698.169471][ T5849] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1698.329270][ T5849] usb 2-1: Using ep0 maxpacket: 16 [ 1698.360100][T27307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1698.370744][T27307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1698.451683][T27310] xt_cgroup: invalid path, errno=-2 [ 1698.543743][ T43] hid-multitouch 0003:0457:07DA.0053: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0 [ 1698.743608][T27281] cgroup: fork rejected by pids controller in /syz5 [ 1698.992432][T27318] tipc: Enabling of bearer rejected, already enabled [ 1699.177825][ T43] usb 6-1: USB disconnect, device number 65 [ 1699.502393][T27326] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5651'. [ 1699.544440][T27328] netlink: 'syz.4.5652': attribute type 1 has an invalid length. [ 1700.984854][T18796] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.043797][ T5849] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1701.104672][ T5849] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1701.129998][ T5849] usb 2-1: can't read configurations, error -71 [ 1701.154017][T18796] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.284289][T18796] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.404752][T27352] vlan4: entered promiscuous mode [ 1701.456985][T18796] bond0: (slave netdevsim0): Releasing backup interface [ 1701.597250][T18796] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.144285][T27362] FAULT_INJECTION: forcing a failure. [ 1702.144285][T27362] name failslab, interval 1, probability 0, space 0, times 0 [ 1702.199770][T27362] CPU: 1 UID: 0 PID: 27362 Comm: syz.4.5664 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1702.199800][T27362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1702.199821][T27362] Call Trace: [ 1702.199830][T27362] [ 1702.199840][T27362] dump_stack_lvl+0x189/0x250 [ 1702.199870][T27362] ? __pfx____ratelimit+0x10/0x10 [ 1702.199899][T27362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1702.199920][T27362] ? __pfx__printk+0x10/0x10 [ 1702.199962][T27362] should_fail_ex+0x414/0x560 [ 1702.199998][T27362] should_failslab+0xa8/0x100 [ 1702.200028][T27362] __kmalloc_cache_noprof+0x70/0x3d0 [ 1702.200053][T27362] ? sctp_add_bind_addr+0x8c/0x370 [ 1702.200080][T27362] sctp_add_bind_addr+0x8c/0x370 [ 1702.200107][T27362] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1702.200132][T27362] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1702.200154][T27362] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1702.200176][T27362] ? sctp_v6_is_any+0x64/0x80 [ 1702.200201][T27362] ? sctp_copy_one_addr+0x93/0x360 [ 1702.200224][T27362] sctp_bind_addr_copy+0xb3/0x3c0 [ 1702.200242][T27362] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1702.200272][T27362] sctp_connect_new_asoc+0x2e0/0x690 [ 1702.200298][T27362] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1702.200318][T27362] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1702.200343][T27362] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1702.200361][T27362] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1702.200386][T27362] sctp_sendmsg+0x155c/0x2810 [ 1702.200417][T27362] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1702.200443][T27362] ? aa_sk_perm+0x81e/0x950 [ 1702.200472][T27362] ? __pfx_aa_sk_perm+0x10/0x10 [ 1702.200500][T27362] ? sock_rps_record_flow+0x19/0x410 [ 1702.200524][T27362] ? inet_sendmsg+0x2f4/0x370 [ 1702.200548][T27362] __sock_sendmsg+0x19c/0x270 [ 1702.200573][T27362] __sys_sendto+0x3bd/0x520 [ 1702.200600][T27362] ? __pfx___sys_sendto+0x10/0x10 [ 1702.200621][T27362] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1702.200654][T27362] ? __fget_files+0x3a0/0x420 [ 1702.200687][T27362] ? ksys_write+0x22a/0x250 [ 1702.200710][T27362] ? __pfx_ksys_write+0x10/0x10 [ 1702.200730][T27362] ? rcu_is_watching+0x15/0xb0 [ 1702.200758][T27362] __x64_sys_sendto+0xde/0x100 [ 1702.200787][T27362] do_syscall_64+0xfa/0x3b0 [ 1702.200813][T27362] ? lockdep_hardirqs_on+0x9c/0x150 [ 1702.200832][T27362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.200851][T27362] ? clear_bhb_loop+0x60/0xb0 [ 1702.200875][T27362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.200891][T27362] RIP: 0033:0x7fecfc78e929 [ 1702.200907][T27362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1702.200920][T27362] RSP: 002b:00007fecfd52c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1702.200938][T27362] RAX: ffffffffffffffda RBX: 00007fecfc9b5fa0 RCX: 00007fecfc78e929 [ 1702.200950][T27362] RDX: 0000000000014f8d RSI: 0000200000847fff RDI: 000000000000000b [ 1702.200961][T27362] RBP: 00007fecfd52c090 R08: 000020000005ffe4 R09: 000000000000001c [ 1702.200971][T27362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1702.200981][T27362] R13: 0000000000000000 R14: 00007fecfc9b5fa0 R15: 00007fecfcadfa28 [ 1702.201005][T27362] [ 1702.495650][T27366] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5666'. [ 1702.647530][T18796] bridge_slave_1: left allmulticast mode [ 1702.697747][T18796] bridge_slave_1: left promiscuous mode [ 1702.714917][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1702.762216][T18796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.777335][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1702.789678][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1702.797727][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1702.807328][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1702.873945][T27372] loop2: detected capacity change from 0 to 7 [ 1702.881655][T27372] loop2: [ 1702.884657][T27372] loop2: partition table partially beyond EOD, truncated [ 1702.955937][T18796] bridge_slave_0: left allmulticast mode [ 1702.994828][T18796] bridge_slave_0: left promiscuous mode [ 1703.040321][T18796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1703.815642][T27387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5670'. [ 1704.466308][T18796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1704.478369][T18796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1704.491100][T18796] bond0 (unregistering): (slave team0): Releasing backup interface [ 1704.502417][T18796] bond0 (unregistering): Released all slaves [ 1704.664756][T18796] tipc: Disabling bearer [ 1704.670273][T18796] tipc: Left network mode [ 1704.788273][T18796] IPVS: stopping master sync thread 22825 ... [ 1704.862905][T25635] Bluetooth: hci3: command tx timeout [ 1705.476553][T18796] hsr_slave_0: left promiscuous mode [ 1705.495993][T18796] hsr_slave_1: left promiscuous mode [ 1705.510019][T18796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1705.526395][T18796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1705.557023][T18796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1705.579641][T18796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1705.732330][T18796] veth1_macvtap: left promiscuous mode [ 1705.738100][T18796] veth1_vlan: left promiscuous mode [ 1705.761960][T18796] veth0_vlan: left promiscuous mode [ 1705.876283][T27447] netlink: 'syz.0.5685': attribute type 10 has an invalid length. [ 1706.939398][T25635] Bluetooth: hci3: command tx timeout [ 1708.028524][T18796] team0 (unregistering): Port device team_slave_1 removed [ 1708.180875][T18796] team0 (unregistering): Port device team_slave_0 removed [ 1708.787872][T25635] Bluetooth: hci1: ACL packet for unknown connection handle 173 [ 1709.024830][T25635] Bluetooth: hci3: command tx timeout [ 1709.405268][T27447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1709.425533][T27447] team0: Port device bond0 added [ 1709.546112][T27371] chnl_net:caif_netlink_parms(): no params data found [ 1710.502718][T27371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1710.528929][T27371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1710.547828][T27371] bridge_slave_0: entered allmulticast mode [ 1710.585892][T27371] bridge_slave_0: entered promiscuous mode [ 1710.643724][T27371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1710.682463][T27371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1710.702776][T27371] bridge_slave_1: entered allmulticast mode [ 1710.714455][T27371] bridge_slave_1: entered promiscuous mode [ 1710.832683][T27371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1710.899850][T27371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1711.076502][T27371] team0: Port device team_slave_0 added [ 1711.100148][T25635] Bluetooth: hci3: command tx timeout [ 1711.128283][T27371] team0: Port device team_slave_1 added [ 1711.294264][T27371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1711.313197][T27371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1711.377479][T27371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1711.408237][T27371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1711.423766][T27371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1711.483473][T27371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1711.790253][T27371] hsr_slave_0: entered promiscuous mode [ 1711.797071][T27371] hsr_slave_1: entered promiscuous mode [ 1711.809908][T27371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1711.826843][T27371] Cannot create hsr debugfs directory [ 1713.952654][T26046] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 1714.152007][T26046] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1714.172956][T27371] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1714.199179][T26046] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1714.225135][T27371] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1714.239117][T26046] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 30768, setting to 64 [ 1714.269186][T26046] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1714.286299][T27371] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1714.311282][T26046] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1714.321014][T26046] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.336225][T27371] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1714.339157][T26046] usb 4-1: Product: syz [ 1714.357705][T26046] usb 4-1: Manufacturer: syz [ 1714.379301][T26046] usb 4-1: SerialNumber: syz [ 1714.390303][T26046] usb 4-1: config 0 descriptor?? [ 1714.415953][T26046] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input151 [ 1714.698235][T26046] usb 4-1: USB disconnect, device number 97 [ 1714.698270][ C1] kbtab 4-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 1714.782044][T27371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1714.882021][T27371] 8021q: adding VLAN 0 to HW filter on device team0 [ 1714.932418][T23232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1714.939677][T23232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1715.001631][T18796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1715.008904][T18796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1715.315667][T27371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1715.647566][T27371] veth0_vlan: entered promiscuous mode [ 1715.801866][T27371] veth1_vlan: entered promiscuous mode [ 1715.809134][ T5851] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1716.225439][T27650] Set syz0 is full, maxelem 0 reached [ 1716.265097][T27371] veth0_macvtap: entered promiscuous mode [ 1716.286951][T27371] veth1_macvtap: entered promiscuous mode [ 1716.330918][ T5851] usb 5-1: config 0 has no interfaces? [ 1716.355579][T27371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1716.455012][ T5851] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1716.533629][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.544850][T27371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1716.578452][ T5851] usb 5-1: Product: syz [ 1716.583301][ T43] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1716.625845][ T5851] usb 5-1: Manufacturer: syz [ 1716.634299][T27371] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.644256][ T5851] usb 5-1: SerialNumber: syz [ 1716.649925][T27371] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.663344][ T5851] usb 5-1: config 0 descriptor?? [ 1716.697211][T27371] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.735484][T27371] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.759293][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 1716.780188][T27652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5731'. [ 1717.148566][T27637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1717.157792][T27637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1717.202574][T12905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1717.271811][T12905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1717.378031][ T7204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1717.629203][ T7204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1718.852703][T27678] gretap0: entered promiscuous mode [ 1718.936293][T27678] gretap0: left promiscuous mode [ 1719.548145][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1719.570701][ T43] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1719.588909][ T43] usb 2-1: can't read configurations, error -71 [ 1719.621604][ T5849] usb 5-1: USB disconnect, device number 5 [ 1719.796895][T27691] x_tables: unsorted entry at hook 1 [ 1720.161562][T27696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5742'. [ 1720.209099][ T5849] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1720.290353][T27698] sch_tbf: burst 0 is lower than device bridge3 mtu (1514) ! [ 1720.387128][ T5849] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1720.456019][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.517412][ T5849] usb 5-1: config 0 descriptor?? [ 1720.568832][ T5849] cp210x 5-1:0.0: cp210x converter detected [ 1720.768065][T27370] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1720.794769][T27370] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1720.804658][T27370] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1720.819112][T27370] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1720.842935][T27370] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1720.997082][ T5849] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 1721.054035][ T5849] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1721.089484][ T5849] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 1721.149465][ T5849] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1721.219608][ T5849] usb 5-1: USB disconnect, device number 6 [ 1721.284965][ T5849] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1721.326714][ T5849] cp210x 5-1:0.0: device disconnected [ 1721.595458][T27710] chnl_net:caif_netlink_parms(): no params data found [ 1721.708070][T27724] gtp0: entered promiscuous mode [ 1721.734382][T27724] gtp0: entered allmulticast mode [ 1722.531977][T27710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1722.549147][T27710] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.566865][T27710] bridge_slave_0: entered allmulticast mode [ 1722.582698][T27710] bridge_slave_0: entered promiscuous mode [ 1722.603666][T27710] bridge0: port 2(bridge_slave_1) entered blocking state [ 1722.639532][T27710] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.657597][T27710] bridge_slave_1: entered allmulticast mode [ 1722.665607][T27751] xt_CT: No such helper "snmp" [ 1722.683979][T27710] bridge_slave_1: entered promiscuous mode [ 1722.810717][T27710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1722.859774][T27710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1722.939344][T27370] Bluetooth: hci1: command tx timeout [ 1722.992648][T27710] team0: Port device team_slave_0 added [ 1723.033019][T27710] team0: Port device team_slave_1 added [ 1723.043793][T27765] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1723.144106][T27710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1723.151719][T27710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1723.227636][T27710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1723.306191][T27710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1723.405182][T27771] trusted_key: encrypted_key: insufficient parameters specified [ 1723.419652][T27710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1723.468624][T27710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1723.817072][T27710] hsr_slave_0: entered promiscuous mode [ 1723.851933][T27710] hsr_slave_1: entered promiscuous mode [ 1723.899895][T27710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1723.946402][T27710] Cannot create hsr debugfs directory [ 1724.361046][T27784] loop2: detected capacity change from 0 to 7 [ 1724.413015][T27784] Dev loop2: unable to read RDB block 7 [ 1724.418959][T27784] loop2: unable to read partition table [ 1724.425088][T27784] loop2: partition table beyond EOD, truncated [ 1724.469974][T27784] loop_reread_partitions: partition scan of loop2 (þ被xü—Ÿ®à– ) failed (rc=-5) [ 1724.572608][T27790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5764'. [ 1724.724363][T27710] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.922312][T27710] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.949147][T20725] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1725.022621][T27370] Bluetooth: hci1: command tx timeout [ 1725.105358][T27710] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1725.129396][T20725] usb 5-1: Using ep0 maxpacket: 16 [ 1725.140653][T20725] usb 5-1: config 0 has no interfaces? [ 1725.150278][T20725] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1725.160739][T20725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.168811][T20725] usb 5-1: Product: syz [ 1725.173583][T20725] usb 5-1: Manufacturer: syz [ 1725.189087][T20725] usb 5-1: SerialNumber: syz [ 1725.217494][T20725] usb 5-1: config 0 descriptor?? [ 1725.413286][T27813] Invalid logical block size (33423360) [ 1725.450633][T27793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1725.500195][T27793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1725.521315][T20725] usb 5-1: USB disconnect, device number 7 [ 1725.759382][T27710] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1725.791486][T27820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5769'. [ 1725.804833][T27710] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1725.875028][T27710] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1725.908469][T27710] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1725.989438][T20725] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1726.129372][T20725] usb 5-1: device descriptor read/64, error -71 [ 1726.176902][T27710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1726.223324][T27710] 8021q: adding VLAN 0 to HW filter on device team0 [ 1726.261109][T12912] bridge0: port 1(bridge_slave_0) entered blocking state [ 1726.268351][T12912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1726.298097][T12912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1726.305339][T12912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1726.389974][T20725] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1726.519135][T20725] usb 5-1: device descriptor read/64, error -71 [ 1726.531573][T27710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1726.629614][T20725] usb usb5-port1: attempt power cycle [ 1726.673931][T27710] veth0_vlan: entered promiscuous mode [ 1726.703757][T27710] veth1_vlan: entered promiscuous mode [ 1726.802604][T27710] veth0_macvtap: entered promiscuous mode [ 1726.827798][T27710] veth1_macvtap: entered promiscuous mode [ 1726.892953][T27710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1726.927081][T27710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1726.956669][T27710] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.968742][T27710] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.996097][T27710] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.009260][T20725] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1727.014967][T27710] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.031120][T20725] usb 5-1: device descriptor read/8, error -71 [ 1727.117672][T27370] Bluetooth: hci1: command tx timeout [ 1727.279516][T20725] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1727.298586][T23232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1727.317059][T23232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1727.334638][T20725] usb 5-1: device descriptor read/8, error -71 [ 1727.405376][ T7220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1727.440144][ T7220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1727.470364][T20725] usb usb5-port1: unable to enumerate USB device [ 1727.966051][ T30] audit: type=1326 audit(1751823881.001:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27856 comm="syz.5.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537458e929 code=0x7ffc0000 [ 1728.113983][ T30] audit: type=1326 audit(1751823881.001:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27856 comm="syz.5.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537458e929 code=0x7ffc0000 [ 1728.420055][ T30] audit: type=1326 audit(1751823881.141:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27856 comm="syz.5.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f537458e929 code=0x7ffc0000 [ 1728.477880][ T30] audit: type=1326 audit(1751823881.141:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27856 comm="syz.5.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537458e929 code=0x7ffc0000 [ 1728.510031][ T30] audit: type=1326 audit(1751823881.141:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27856 comm="syz.5.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f537458e929 code=0x7ffc0000 [ 1728.689068][ T30] audit: type=1326 audit(1751823881.141:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27856 comm="syz.5.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537458e929 code=0x7ffc0000 [ 1728.711525][ C0] vkms_vblank_simulate: vblank timer overrun [ 1728.802960][ T30] audit: type=1326 audit(1751823881.141:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27856 comm="syz.5.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f537458e929 code=0x7ffc0000 [ 1728.825338][ C0] vkms_vblank_simulate: vblank timer overrun [ 1728.928419][ T30] audit: type=1326 audit(1751823881.141:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27856 comm="syz.5.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537458e929 code=0x7ffc0000 [ 1728.959064][T27883] loop6: detected capacity change from 0 to 1 [ 1728.997128][T27883] Dev loop6: unable to read RDB block 1 [ 1729.022939][T27883] loop6: unable to read partition table [ 1729.046276][T27883] loop6: partition table beyond EOD, truncated [ 1729.057223][ T30] audit: type=1326 audit(1751823881.141:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27856 comm="syz.5.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f537458e929 code=0x7ffc0000 [ 1729.105175][T27883] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1729.162003][ T30] audit: type=1326 audit(1751823881.141:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27856 comm="syz.5.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537458e929 code=0x7ffc0000 [ 1729.192471][T27370] Bluetooth: hci1: command tx timeout [ 1729.237192][T27887] team0: Port device bond0 removed [ 1729.291364][T27887] bridge_slave_0: left allmulticast mode [ 1729.318421][T27887] bridge_slave_0: left promiscuous mode [ 1729.346005][T27887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1729.455209][T27887] bridge_slave_1: left allmulticast mode [ 1729.475187][T27887] bridge_slave_1: left promiscuous mode [ 1729.484817][T27887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1729.506340][T27887] bond0: (slave bond_slave_0): Releasing backup interface [ 1729.542144][T27887] bond0: (slave bond_slave_1): Releasing backup interface [ 1729.562001][T27887] team0: Port device team_slave_0 removed [ 1729.585114][T27887] team0: Port device team_slave_1 removed [ 1729.619753][T27887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1729.843676][T27887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1729.914827][T27887] bond0: (slave netdevsim0): Releasing backup interface [ 1730.339299][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.345808][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.718792][T27914] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.769496][T27914] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.853664][T27914] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.929153][T27914] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.012859][T27914] geneve2: entered promiscuous mode [ 1731.542369][T27935] vti0: entered promiscuous mode [ 1731.551110][T27935] vti0: entered allmulticast mode [ 1731.620016][ T43] IPVS: starting estimator thread 0... [ 1731.729377][T27939] IPVS: using max 45 ests per chain, 108000 per kthread [ 1731.819172][T27934] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1732.035357][T27942] FAULT_INJECTION: forcing a failure. [ 1732.035357][T27942] name failslab, interval 1, probability 0, space 0, times 0 [ 1732.098180][T27942] CPU: 0 UID: 0 PID: 27942 Comm: syz.4.5790 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1732.098208][T27942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1732.098220][T27942] Call Trace: [ 1732.098228][T27942] [ 1732.098238][T27942] dump_stack_lvl+0x189/0x250 [ 1732.098266][T27942] ? __pfx____ratelimit+0x10/0x10 [ 1732.098297][T27942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1732.098320][T27942] ? __pfx__printk+0x10/0x10 [ 1732.098351][T27942] ? __pfx___might_resched+0x10/0x10 [ 1732.098373][T27942] ? fs_reclaim_acquire+0x7d/0x100 [ 1732.098405][T27942] should_fail_ex+0x414/0x560 [ 1732.098439][T27942] should_failslab+0xa8/0x100 [ 1732.098466][T27942] __kmalloc_cache_noprof+0x70/0x3d0 [ 1732.098490][T27942] ? nfnetlink_rcv+0xeff/0x2520 [ 1732.098512][T27942] nfnetlink_rcv+0xeff/0x2520 [ 1732.098561][T27942] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1732.098592][T27942] ? __lock_acquire+0xab9/0xd20 [ 1732.098674][T27942] ? netlink_deliver_tap+0x2e/0x1b0 [ 1732.098696][T27942] ? netlink_deliver_tap+0x2e/0x1b0 [ 1732.098723][T27942] netlink_unicast+0x75b/0x8d0 [ 1732.098753][T27942] netlink_sendmsg+0x805/0xb30 [ 1732.098784][T27942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1732.098810][T27942] ? aa_sock_msg_perm+0x94/0x160 [ 1732.098839][T27942] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1732.098856][T27942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1732.098879][T27942] __sock_sendmsg+0x21c/0x270 [ 1732.098900][T27942] ____sys_sendmsg+0x505/0x830 [ 1732.098929][T27942] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1732.098962][T27942] ? import_iovec+0x74/0xa0 [ 1732.098991][T27942] ___sys_sendmsg+0x21f/0x2a0 [ 1732.099017][T27942] ? __pfx____sys_sendmsg+0x10/0x10 [ 1732.099074][T27942] ? __fget_files+0x2a/0x420 [ 1732.099099][T27942] ? __fget_files+0x3a0/0x420 [ 1732.099132][T27942] __x64_sys_sendmsg+0x19b/0x260 [ 1732.099160][T27942] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1732.099193][T27942] ? __pfx_ksys_write+0x10/0x10 [ 1732.099213][T27942] ? rcu_is_watching+0x15/0xb0 [ 1732.099239][T27942] ? do_syscall_64+0xbe/0x3b0 [ 1732.099262][T27942] do_syscall_64+0xfa/0x3b0 [ 1732.099279][T27942] ? lockdep_hardirqs_on+0x9c/0x150 [ 1732.099296][T27942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1732.099314][T27942] ? clear_bhb_loop+0x60/0xb0 [ 1732.099336][T27942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1732.099354][T27942] RIP: 0033:0x7fecfc78e929 [ 1732.099370][T27942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1732.099386][T27942] RSP: 002b:00007fecfd52c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1732.099405][T27942] RAX: ffffffffffffffda RBX: 00007fecfc9b5fa0 RCX: 00007fecfc78e929 [ 1732.099418][T27942] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1732.099429][T27942] RBP: 00007fecfd52c090 R08: 0000000000000000 R09: 0000000000000000 [ 1732.099440][T27942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1732.099450][T27942] R13: 0000000000000000 R14: 00007fecfc9b5fa0 R15: 00007fecfcadfa28 [ 1732.099477][T27942] [ 1732.397054][ C0] vkms_vblank_simulate: vblank timer overrun [ 1732.663892][T27948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5791'. [ 1732.849984][T27957] FAULT_INJECTION: forcing a failure. [ 1732.849984][T27957] name failslab, interval 1, probability 0, space 0, times 0 [ 1732.909198][T27957] CPU: 0 UID: 0 PID: 27957 Comm: syz.4.5793 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1732.909229][T27957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1732.909242][T27957] Call Trace: [ 1732.909251][T27957] [ 1732.909260][T27957] dump_stack_lvl+0x189/0x250 [ 1732.909291][T27957] ? __pfx____ratelimit+0x10/0x10 [ 1732.909325][T27957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1732.909358][T27957] ? __pfx__printk+0x10/0x10 [ 1732.909402][T27957] should_fail_ex+0x414/0x560 [ 1732.909437][T27957] should_failslab+0xa8/0x100 [ 1732.909467][T27957] __kmalloc_cache_noprof+0x70/0x3d0 [ 1732.909493][T27957] ? sctp_add_bind_addr+0x8c/0x370 [ 1732.909520][T27957] sctp_add_bind_addr+0x8c/0x370 [ 1732.909548][T27957] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1732.909575][T27957] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1732.909599][T27957] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1732.909627][T27957] ? sctp_v4_is_any+0x35/0x60 [ 1732.909650][T27957] ? sctp_copy_one_addr+0x93/0x360 [ 1732.909676][T27957] sctp_bind_addr_copy+0xb3/0x3c0 [ 1732.909701][T27957] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1732.909737][T27957] sctp_connect_new_asoc+0x2e0/0x690 [ 1732.909774][T27957] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1732.909804][T27957] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1732.909833][T27957] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1732.909859][T27957] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1732.909887][T27957] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1732.909909][T27957] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1732.909941][T27957] sctp_sendmsg+0x155c/0x2810 [ 1732.909983][T27957] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1732.910014][T27957] ? aa_sk_perm+0x81e/0x950 [ 1732.910049][T27957] ? __pfx_aa_sk_perm+0x10/0x10 [ 1732.910082][T27957] ? sock_rps_record_flow+0x19/0x410 [ 1732.910107][T27957] ? inet_sendmsg+0x2f4/0x370 [ 1732.910127][T27957] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1732.910150][T27957] __sock_sendmsg+0x19c/0x270 [ 1732.910175][T27957] __sys_sendto+0x3bd/0x520 [ 1732.910203][T27957] ? __pfx___sys_sendto+0x10/0x10 [ 1732.910226][T27957] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1732.910262][T27957] ? __fget_files+0x3a0/0x420 [ 1732.910303][T27957] ? ksys_write+0x22a/0x250 [ 1732.910337][T27957] ? __pfx_ksys_write+0x10/0x10 [ 1732.910368][T27957] __x64_sys_sendto+0xde/0x100 [ 1732.910398][T27957] do_syscall_64+0xfa/0x3b0 [ 1732.910418][T27957] ? lockdep_hardirqs_on+0x9c/0x150 [ 1732.910436][T27957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1732.910457][T27957] ? clear_bhb_loop+0x60/0xb0 [ 1732.910480][T27957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1732.910498][T27957] RIP: 0033:0x7fecfc78e929 [ 1732.910517][T27957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1732.910535][T27957] RSP: 002b:00007fecfa5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1732.910557][T27957] RAX: ffffffffffffffda RBX: 00007fecfc9b6080 RCX: 00007fecfc78e929 [ 1732.910572][T27957] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 1732.910585][T27957] RBP: 00007fecfa5f6090 R08: 00002000000000c0 R09: 0000000000000010 [ 1732.910599][T27957] R10: 00000000040048c4 R11: 0000000000000246 R12: 0000000000000002 [ 1732.910612][T27957] R13: 0000000000000001 R14: 00007fecfc9b6080 R15: 00007fecfcadfa28 [ 1732.910642][T27957] [ 1733.244029][ C0] vkms_vblank_simulate: vblank timer overrun [ 1733.724004][T27977] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1733.724004][T27977] The task syz.1.5798 (27977) triggered the difference, watch for misbehavior. [ 1734.088601][T27984] fuse: Unknown parameter 'x' [ 1734.784533][T28000] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5807'. [ 1735.825562][T28029] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5811'. [ 1736.134599][T28039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5815'. [ 1736.143582][T28040] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5814'. [ 1736.379239][T27662] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1736.586526][T28045] netlink: 'syz.4.5816': attribute type 1 has an invalid length. [ 1736.639106][T27662] usb 6-1: Using ep0 maxpacket: 32 [ 1736.641957][T28045] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1736.774699][T27662] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1736.783145][T27662] usb 6-1: config 0 has no interface number 0 [ 1736.789304][T27662] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1736.802638][T27662] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1736.827492][T27662] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.842197][T27662] usb 6-1: Product: syz [ 1736.866767][T27662] usb 6-1: Manufacturer: syz [ 1736.875707][T27662] usb 6-1: SerialNumber: syz [ 1736.890915][T27662] usb 6-1: config 0 descriptor?? [ 1736.903563][T27662] smsc75xx v1.0.0 [ 1736.907315][T27662] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1736.929342][T27662] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 1737.180801][ T5849] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1737.626207][ T5849] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1737.636596][ T5849] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1737.658442][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.730504][ T5849] usb 5-1: config 0 descriptor?? [ 1737.775700][ T5849] pwc: Askey VC010 type 2 USB webcam detected. [ 1738.173593][ T5849] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1738.180887][ T5849] pwc: recv_control_msg error -32 req 02 val 2700 [ 1738.188099][ T5849] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1738.196802][ T5849] pwc: recv_control_msg error -32 req 04 val 1000 [ 1739.726779][T28073] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5826'. [ 1739.857870][ T5849] pwc: recv_control_msg error -71 req 04 val 1300 [ 1739.865625][ T5849] pwc: recv_control_msg error -71 req 04 val 1400 [ 1739.878374][ T5849] pwc: recv_control_msg error -71 req 02 val 2000 [ 1739.909761][ T31] INFO: task kworker/0:5:5943 blocked for more than 143 seconds. [ 1739.929215][T27662] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1739.957908][ T5849] pwc: recv_control_msg error -71 req 02 val 2100 [ 1739.961582][ T31] Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 [ 1739.968120][T28076] xt_CT: No such helper "snmp" [ 1739.991152][ T5849] pwc: recv_control_msg error -71 req 04 val 1500 [ 1740.010961][ T5849] pwc: recv_control_msg error -71 req 02 val 2500 [ 1740.040045][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1740.052692][ T5849] pwc: recv_control_msg error -71 req 02 val 2400 [ 1740.060958][T28082] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1740.063415][ T31] task:kworker/0:5 state:D [ 1740.080716][ T5849] pwc: recv_control_msg error -71 req 02 val 2600 [ 1740.112803][ T5849] pwc: recv_control_msg error -71 req 02 val 2900 [ 1740.132153][ T5849] pwc: recv_control_msg error -71 req 02 val 2800 [ 1740.145168][ T31] stack:19480 pid:5943 tgid:5943 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1740.147057][ T5849] pwc: recv_control_msg error -71 req 04 val 1100 [ 1740.161652][T27662] usb 4-1: Using ep0 maxpacket: 32 [ 1740.176371][T27662] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1740.187046][T27662] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1740.196631][ T5849] pwc: recv_control_msg error -71 req 04 val 1200 [ 1740.208702][T27662] usb 4-1: New USB device found, idVendor=0bfd, idProduct=001c, bcdDevice=8c.e8 [ 1740.223197][T27662] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.235157][ T5849] pwc: Registered as video103. [ 1740.246925][T27662] usb 4-1: Product: syz [ 1740.251315][ T31] Workqueue: usb_hub_wq hub_event [ 1740.256398][ T31] Call Trace: [ 1740.260368][T27662] usb 4-1: Manufacturer: syz [ 1740.266493][ T5849] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input152 [ 1740.297183][T27662] usb 4-1: SerialNumber: syz [ 1740.309213][ T31] [ 1740.312208][ T31] __schedule+0x16f5/0x4d00 [ 1740.316811][ T31] ? schedule+0x165/0x360 [ 1740.320092][T27662] usb 4-1: config 0 descriptor?? [ 1740.346018][ T5849] usb 5-1: USB disconnect, device number 12 [ 1740.455613][T21087] usb 6-1: USB disconnect, device number 66 [ 1740.466513][ T31] ? __pfx___schedule+0x10/0x10 [ 1740.479122][ T31] ? schedule+0x91/0x360 [ 1740.483438][ T31] schedule+0x165/0x360 [ 1740.487621][ T31] schedule_preempt_disabled+0x13/0x30 [ 1740.586657][T28068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5822'. [ 1740.639281][ T31] __mutex_lock+0x724/0xe80 [ 1740.646357][ T31] ? __mutex_lock+0x51b/0xe80 [ 1740.653078][ T31] ? hub_event+0x21cb/0x4a00 [ 1740.659313][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1740.664481][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1740.676167][ T31] hub_event+0x21cb/0x4a00 [ 1740.680992][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1740.686380][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1740.695400][ T31] ? __pfx_hub_event+0x10/0x10 [ 1740.700669][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1740.706532][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1740.716079][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1740.722279][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1740.729418][ T31] process_scheduled_works+0xade/0x17b0 [ 1740.735330][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1740.747153][ T31] worker_thread+0x8a0/0xda0 [ 1740.753328][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1740.763788][ T31] ? __kthread_parkme+0x7b/0x200 [ 1740.769215][ T31] kthread+0x70e/0x8a0 [ 1740.773604][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1740.783819][ T31] ? __pfx_kthread+0x10/0x10 [ 1740.788543][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1740.794325][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1740.803229][ T31] ? __pfx_kthread+0x10/0x10 [ 1740.808035][ T31] ret_from_fork+0x3fc/0x770 [ 1740.813254][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1740.818672][ T31] ? __switch_to_asm+0x39/0x70 [ 1740.828015][ T31] ? __switch_to_asm+0x33/0x70 [ 1740.844132][ T31] ? __pfx_kthread+0x10/0x10 [ 1740.857592][ T31] ret_from_fork_asm+0x1a/0x30 [ 1740.868918][ T31] [ 1740.878331][ T31] [ 1740.878331][ T31] Showing all locks held in the system: [ 1740.915576][ T31] 1 lock held by khungtaskd/31: [ 1740.936195][ T31] #0: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1740.967830][ T31] 2 locks held by getty/5612: [ 1740.975225][ T31] #0: ffff88814cd4b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1740.985624][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1740.996267][ T31] 3 locks held by kworker/1:3/5849: [ 1741.005138][ T31] #0: ffff888021ace948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1741.016829][ T31] #1: ffffc900040ffbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1741.029392][ T31] #2: ffff88823be80998 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1741.038524][ T31] 5 locks held by kworker/0:5/5943: [ 1741.043842][ T31] #0: ffff888021ace948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1741.055289][ T31] #1: ffffc90004a4fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1741.067833][ T31] #2: ffff88823beac998 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1741.077012][ T31] #3: ffff88802885c510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 1741.087042][ T31] #4: ffff888028c34068 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 1741.096797][ T31] 5 locks held by kworker/0:1/11655: [ 1741.102510][ T31] #0: ffff888021ace948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1741.114020][ T31] #1: ffffc90004807bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1741.126000][ T31] #2: ffff888145f8f198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1741.135334][ T31] #3: ffff8881463a9510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 1741.145508][ T31] #4: ffff888028c34068 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 1741.155621][ T31] 3 locks held by kworker/u8:1/18796: [ 1741.161378][ T31] [ 1741.164814][ T31] ============================================= [ 1741.164814][ T31] [ 1741.173991][ T31] NMI backtrace for cpu 0 [ 1741.174007][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1741.174029][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1741.174041][ T31] Call Trace: [ 1741.174049][ T31] [ 1741.174056][ T31] dump_stack_lvl+0x189/0x250 [ 1741.174082][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1741.174111][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1741.174127][ T31] ? __pfx__printk+0x10/0x10 [ 1741.174164][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1741.174184][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1741.174200][ T31] ? _printk+0xcf/0x120 [ 1741.174220][ T31] ? __pfx__printk+0x10/0x10 [ 1741.174238][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1741.174253][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1741.174273][ T31] watchdog+0xfee/0x1030 [ 1741.174287][ T31] ? watchdog+0x1de/0x1030 [ 1741.174304][ T31] kthread+0x70e/0x8a0 [ 1741.174324][ T31] ? __pfx_watchdog+0x10/0x10 [ 1741.174336][ T31] ? __pfx_kthread+0x10/0x10 [ 1741.174354][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1741.174383][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1741.174398][ T31] ? __pfx_kthread+0x10/0x10 [ 1741.174423][ T31] ret_from_fork+0x3fc/0x770 [ 1741.174446][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1741.174466][ T31] ? __switch_to_asm+0x39/0x70 [ 1741.174481][ T31] ? __switch_to_asm+0x33/0x70 [ 1741.174498][ T31] ? __pfx_kthread+0x10/0x10 [ 1741.174516][ T31] ret_from_fork_asm+0x1a/0x30 [ 1741.174543][ T31] [ 1741.174549][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1741.334906][ C1] NMI backtrace for cpu 1 [ 1741.334930][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1741.334950][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1741.334961][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1741.334991][ C1] Code: 03 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 e5 18 00 f3 0f 1e fa fb f4 d8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1741.335004][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 1741.335019][ C1] RAX: 7c1df1e035df5800 RBX: ffffffff81975d88 RCX: 7c1df1e035df5800 [ 1741.335031][ C1] RDX: 0000000000000001 RSI: ffffffff8d9979bc RDI: ffffffff8be29780 [ 1741.335043][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 1741.335054][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa1e8f0 [ 1741.335066][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a5db40 [ 1741.335077][ C1] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 1741.335089][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1741.335100][ C1] CR2: 00007f5374784338 CR3: 00000000334e6000 CR4: 00000000003526f0 [ 1741.335114][ C1] DR0: 0000000000000000 DR1: 0000000000000008 DR2: 0000000000000000 [ 1741.335124][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1741.335134][ C1] Call Trace: [ 1741.335142][ C1] [ 1741.335148][ C1] default_idle+0x13/0x20 [ 1741.335167][ C1] default_idle_call+0x74/0xb0 [ 1741.335186][ C1] do_idle+0x1e8/0x510 [ 1741.335209][ C1] ? __pfx_do_idle+0x10/0x10 [ 1741.335235][ C1] cpu_startup_entry+0x44/0x60 [ 1741.335253][ C1] start_secondary+0x101/0x110 [ 1741.335269][ C1] common_startup_64+0x13e/0x147 [ 1741.335298][ C1] [ 1741.336245][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1741.521967][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1741.533868][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1741.544014][ T31] Call Trace: [ 1741.547309][ T31] [ 1741.550244][ T31] dump_stack_lvl+0x99/0x250 [ 1741.554839][ T31] ? __asan_memcpy+0x40/0x70 [ 1741.559431][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1741.564630][ T31] ? __pfx__printk+0x10/0x10 [ 1741.569232][ T31] panic+0x2db/0x790 [ 1741.573134][ T31] ? __pfx_panic+0x10/0x10 [ 1741.577556][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1741.583386][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1741.588776][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1741.594967][ T31] watchdog+0x102d/0x1030 [ 1741.599315][ T31] ? watchdog+0x1de/0x1030 [ 1741.603743][ T31] kthread+0x70e/0x8a0 [ 1741.607824][ T31] ? __pfx_watchdog+0x10/0x10 [ 1741.612510][ T31] ? __pfx_kthread+0x10/0x10 [ 1741.617122][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1741.622339][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1741.627544][ T31] ? __pfx_kthread+0x10/0x10 [ 1741.632167][ T31] ret_from_fork+0x3fc/0x770 [ 1741.636785][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1741.641941][ T31] ? __switch_to_asm+0x39/0x70 [ 1741.646744][ T31] ? __switch_to_asm+0x33/0x70 [ 1741.651522][ T31] ? __pfx_kthread+0x10/0x10 [ 1741.656127][ T31] ret_from_fork_asm+0x1a/0x30 [ 1741.660918][ T31] [ 1741.664323][ T31] Kernel Offset: disabled [ 1741.668657][ T31] Rebooting in 86400 seconds..