last executing test programs: 6m50.403370569s ago: executing program 2 (id=1461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001fffffffffffffff5000500000a80000000060a010400000000000000000a0000010900010073797a3100000000540004802c0001800e000100696d6d656469617465000000180002800c00028005000100fd0000000800014000000014240001800a000100726564697200000014000280080001400000000408000240000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 6m50.286934585s ago: executing program 2 (id=1462): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001080), 0x40, 0x0) unshare(0x20000400) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x5f, 0x7ffc0002}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) preadv(r0, &(0x7f0000000080), 0x0, 0x29e, 0x8001fa) 6m50.038239227s ago: executing program 2 (id=1466): r0 = socket$pptp(0x18, 0x1, 0x2) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0xe, 0x10000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@deltaction={0x14, 0x31, 0x300, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000033c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}, 0x1c, 0x0}}], 0x1, 0x800) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c01"], 0x12c}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x4000, 0xa, 0x20002f7}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "6ad9ba", 0x44, 0x2f, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x0, 0x6}, 0x1, {0x10}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x4, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}, 0x7a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507"], 0x28}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m49.392642051s ago: executing program 2 (id=1470): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x0, 0x3fff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000800)) ftruncate(r2, 0x9) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x8, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xfffffc01, 0x8, 0x7743, 0xfcf}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd37, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0xa}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC_MASK={0x31, 0xb, 0xffffffff}]}}]}, 0x3c}}, 0x4000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) r4 = socket(0x10, 0x3, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r10}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xc, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x3ff, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x7, 0xa, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x7, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x103, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0xffffffff, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x8000007f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) 6m48.203866298s ago: executing program 2 (id=1475): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000060a010400000000000000000a0000050900010073797a3100000000300004802c000180090001007866726d000000001c0002800800014000000014080002400000000505000300010000000900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) (async) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000001480)={0x8, {"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", 0x1000}}, 0x1006) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xd0c2db6cdb88cc3d}, 0x48000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6m47.754380672s ago: executing program 2 (id=1476): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000001700050928bd7000ffdbdf25210d0b004e224e26fcffffff230900000100008006000000010400000600000003000000", @ANYRESHEX=0x0], 0x60}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000) 6m47.126414263s ago: executing program 32 (id=1476): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000001700050928bd7000ffdbdf25210d0b004e224e26fcffffff230900000100008006000000010400000600000003000000", @ANYRESHEX=0x0], 0x60}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000) 2m42.116021151s ago: executing program 3 (id=2521): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = socket$caif_stream(0x25, 0x1, 0x3) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r0, &(0x7f0000000600)="9a7aa240771f13336c546d017111f56cd0515e6fdeaa71e65e576af586480d5579e355d365e7751a09b294a79c4eaaf553ec52e810a430b309dfdf102853c3924ce65c0b110e7493c4110346f20092887154f046bd1ce15ac9d5d16168ace3a3587b5e4444d65dd9757087f53a9b9761d83c058fc804687b736a1f0a96cffd20a21e51721310e41f19801a62f432c56ae1e2772477253a4a297483f5dcf31f69c5c0c505e7cb845e64c69f0f4b4017c25cdf779dfc89fa1778afbcd44e38498ea2cce6fbe9ea8efb9d2203e5edc30d8316", 0xd1, 0xc0, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10) recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x1, 0x60010000, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0xa, 0x0, 0x5, 0x0, 0x4, 0x3], 0x5, 0x1}, {0xffffffffffffffff, [0x2, 0x4, 0x0, 0x4, 0x1, 0x4], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x3, 0x194c, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x118, 0x29, 0x4, {0x4, 0x1f, '\x00', [@generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x12, "09e12e5f0b6bdcf72f2ec7008a15fa88b025"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x10, "e80ee304ecb784ec4655260cecea14e4"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x178, 0x29, 0x36, {0x5e, 0x2c, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x4, 0x0, '\x00', [@ra={0x5, 0x2, 0x31d8}]}}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x368}}], 0x1, 0x810) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x1a, &(0x7f0000000040)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x1, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60a1260000190600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200139078000003030000601801fba84be0b26f0e1c9bf1c9f3ef46966e233c6d805eb9b092d2164d3b604a9c5b9dbe75fc99cdacb11bc8a672a708cf315151e2d9c868b7efb4f9bc14b25d13f7dd22d97f5b6339073c0797ab3dcd1bcfb533bae26c4f87b63d9b34cab1a5032efd6d"], 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r7 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000500)=[@op={0x18}], 0x18, 0x24000060}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2m41.048089009s ago: executing program 3 (id=2529): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, 0x0, &(0x7f0000000200)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f00000002c0)={0xe400000000000000, 0x5000, 0xfffffffffffffffd}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x4000, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0xfffffffe, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x40000, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x200, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000140)={0xd200000000000000, 0x8000000, 0x3fe, 0xc}) 2m40.185570247s ago: executing program 3 (id=2531): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594", @ANYRES16], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x1ff, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x200004, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0x80000000, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x2d8668bf, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x9, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x1, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x2, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x3, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0x3dd1, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000010000305000000000000ffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006d616373656300001c000280050007000000000005000a0000000000050009000000000008000500", @ANYRES32=r2], 0x5c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000040)={0x0, 0x0}, 0x80000) bind$netlink(r3, &(0x7f0000002140)={0x10, 0x0, 0x25dfdbfd, 0x80000000}, 0xc) syz_open_dev$vcsa(&(0x7f00000020c0), 0x9, 0x0) r5 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x8, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(&(0x7f0000000040)=[{r6, 0x8744}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10000}, [@tail_call]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x22, &(0x7f0000000280)=""/34, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) poll(&(0x7f0000002100)=[{r6, 0x688}], 0x1, 0x6) keyctl$clear(0x5, 0xffffffffffffffff) finit_module(r6, &(0x7f0000002080)='$\x00', 0x0) 2m38.18374511s ago: executing program 3 (id=2546): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/timers\x00', 0x41, 0x0) write$uinput_user_dev(r4, 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000001340)) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000569000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000900)="65f30fa7e066b94209000066b81286694866ba000000000f30baa100ec65a00000660f3881433f640f07b801088ed8baf80c66b834ff178166efbafe0cb000eeb8000002c0640f01cf", 0x49}], 0x1, 0x30, 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x80) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = creat(&(0x7f0000000100)='./file0\x00', 0x0) openat(r8, &(0x7f0000000040)='./file0\x00', 0x40042, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2m37.729231729s ago: executing program 3 (id=2550): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0x1d8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0xa0, 0x1ba, {0x460101d8, 0x2c000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x287, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x1]}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x11e}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 2m37.682593411s ago: executing program 3 (id=2551): ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x3516, &(0x7f0000000040)={0x0, 0xd8a1, 0x4000, 0x8, 0xc1}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f00000004c0), 0xffffffffffffffff, 0x2}}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x74}}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0xa0}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0xa0}}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x1000000000000000) syz_emit_ethernet(0x8c, &(0x7f0000000000)={@local, @empty, @void, {@mpls_mc={0x8848, {[{0x0, 0x0, 0x1}, {0xc, 0x0, 0x1}, {0x5}], @ipv4=@generic={{0x6, 0x4, 0x2, 0x3e, 0x72, 0x64, 0x0, 0x4, 0x73, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast2, {[@ra={0x94, 0x4, 0x1}]}}, "11a5c8e028c931f6fd41bc5f3d83f1a6d257629601efd546a962c3dcea849d20eb275e2304be2b3254f931ddc10ce87408fb1a0dbac72e20510f07c1dc551ce3271b3b0c1d34aa8a8166ded9972d481350e1e840b9c68d3f113b"}}}}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000180), r0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/206, 0xce}], 0x1, 0x8, 0xffffffff) (async) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/206, 0xce}], 0x1, 0x8, 0xffffffff) 2m21.755801152s ago: executing program 33 (id=2551): ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x3516, &(0x7f0000000040)={0x0, 0xd8a1, 0x4000, 0x8, 0xc1}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f00000004c0), 0xffffffffffffffff, 0x2}}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x74}}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0xa0}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0xa0}}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x1000000000000000) syz_emit_ethernet(0x8c, &(0x7f0000000000)={@local, @empty, @void, {@mpls_mc={0x8848, {[{0x0, 0x0, 0x1}, {0xc, 0x0, 0x1}, {0x5}], @ipv4=@generic={{0x6, 0x4, 0x2, 0x3e, 0x72, 0x64, 0x0, 0x4, 0x73, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast2, {[@ra={0x94, 0x4, 0x1}]}}, "11a5c8e028c931f6fd41bc5f3d83f1a6d257629601efd546a962c3dcea849d20eb275e2304be2b3254f931ddc10ce87408fb1a0dbac72e20510f07c1dc551ce3271b3b0c1d34aa8a8166ded9972d481350e1e840b9c68d3f113b"}}}}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000180), r0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/206, 0xce}], 0x1, 0x8, 0xffffffff) (async) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/206, 0xce}], 0x1, 0x8, 0xffffffff) 9.682464654s ago: executing program 6 (id=3067): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0xfffffffffffffff3) 9.356418491s ago: executing program 6 (id=3068): socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x24004080) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "3f69f5593d99b5b9", "ad19b9f81b7051508702a27013f65558c8a01f2ae65a25a4c4580daf90219442", "d78279e4", "ba02af61de6197b6"}, 0x38) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) r2 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7.454148755s ago: executing program 4 (id=3075): socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x24004080) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "3f69f5593d99b5b9", "ad19b9f81b7051508702a27013f65558c8a01f2ae65a25a4c4580daf90219442", "d78279e4", "ba02af61de6197b6"}, 0x38) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) r2 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7.405326074s ago: executing program 6 (id=3076): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000700000004000000fcffffff00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000020006fa78df300"/25], 0x50) r0 = userfaultfd(0x80001) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x40) accept4(r2, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000140)={0xffffffff, "030000000000000023000000debd12ffff00000000000000000020000400"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x5}, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000005c00), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f0000005c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0affffbd7000fedbdf060000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000084}, 0x10) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 6.541801385s ago: executing program 1 (id=3079): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r4, 0x800, 0x70bd2e, 0x0, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x4}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x24000000) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x1400, 0x1500, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x38, r4, 0x1, 0x70bd2c, 0x1, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}]]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x3, 0x28, 0xfc01, 0x65, 0x2, 0x15, 0x1, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, "764c0c4712904e37"}}}}}, 0x0) 6.379088321s ago: executing program 1 (id=3080): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000102030000000000000000000a0000014400028006000340000000002c000180140003000000000000000000000000000000000114000400fe8000000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x24008040) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r6, r7, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r8, r3) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) memfd_create(0x0, 0xa) syz_usb_connect(0x3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r9 = syz_open_dev$radio(&(0x7f0000000180), 0x2, 0x2) ioctl$VIDIOC_REQBUFS(r9, 0xc0145608, 0xfffffffffffffffc) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x70bd27, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) socket$netlink(0x10, 0x3, 0x0) 6.370974482s ago: executing program 6 (id=3081): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x61, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x3554000) (async, rerun: 32) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x0, 0x31, 0x7d, 0x55}}]}}]}}, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) (async) fadvise64(r2, 0x18, 0x0, 0x4) (async) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) (async, rerun: 32) close(0x3) (rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000240), &(0x7f0000000300)=0x8) (async) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) 6.207420265s ago: executing program 6 (id=3082): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990014000000000000000800a100ffff0000080026008d03000008009f"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x10) 6.16136151s ago: executing program 4 (id=3083): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000001500008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000a1a80022f5c39c68f0"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x10, 0x24, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 6.054318345s ago: executing program 4 (id=3084): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r1, 0x6a98047402e98331, 0x70bd25, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x100000000000000, 0x2000}, 0x0) 5.96226309s ago: executing program 6 (id=3085): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) unshare(0x62040200) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff}, 0x80800) fcntl$setpipe(r3, 0x407, 0x176) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001000010028bd7000f9dbdf2500000000e0af9f0a7adc679b7c2ac540682dbe970686a445008be8b0dd9f0f0a59a3daaecd700f30016f9bd946b0445afb1a451a6a483253d2ebf7eb0244063d908ef5432e2ce8a8917e9b4f67cadbea861614dbbecec8bcf938403843c071", @ANYRES16=0x0, @ANYBLOB="158804000300000008000d000100000008001b00000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="5ea09ef3fedbdf", @ANYRES32=0x0, @ANYBLOB="158804000300040008001b00010000000800230004000000"], 0x30}, 0x1, 0x0, 0x0, 0x400e801}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f00000004c0)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r9, 0x0, 0x0, 0x0, 0x5, 0x2de07c, 0x334e8b}) 5.791084867s ago: executing program 4 (id=3086): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x5, 0x53, 0xfffff034}, {0x6, 0x4a, 0x6, 0x6}]}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x5, @local, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000001c0)="a8", 0x1}], 0x1}}], 0x1, 0x40) (fail_nth: 23) 5.034330948s ago: executing program 4 (id=3088): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d0b, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f00000001c0)={0x0, 0xffffffffffffff8c, 0x0}, 0x4004) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x10000034, 0xffffffff, 0x9, 0xb4c, 0x9, 0x3, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) 4.811361222s ago: executing program 0 (id=3089): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(0xfffffffffffffffd, 0x8, 0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) semget(0x2, 0x4, 0x200) 4.386379572s ago: executing program 0 (id=3090): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x440, 0x80) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) syz_emit_ethernet(0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffaaaabb0800000000000097830adb6696aa4867b8c04c35d89e9a66ca75b1b3cb0d99c7f1a9ba93f8bcaf2fe9bf7dc7faa92e8c66807363b1880be91f3e3891e0915fd38e8e7c5ffe2f30ff4374b86227dec9b5dba3b0db2fa85479b966b32b5f598a445b8d383a06d4e564d0b69f4dbb91e276f518dfabaaa9b7fa35cbb0"], 0x0) 4.163392879s ago: executing program 5 (id=3091): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x40, 0x0, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}]}, 0x34}, 0x1, 0x0, 0x1575, 0x2004c041}, 0x400c0c0) 3.930337827s ago: executing program 5 (id=3092): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050020"], 0x60}, 0x1, 0x0, 0x0, 0x400c005}, 0x0) 3.854417947s ago: executing program 0 (id=3093): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d0b, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc86", 0xc1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c52d00", "e9be1eae", "0610000000000001"}, 0x28) 3.761587676s ago: executing program 5 (id=3094): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000001500008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000a1a80022f5c39c68f0"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x10, 0x24, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.434856171s ago: executing program 5 (id=3095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r1, @ANYBLOB="05072bbd7000ffdbdf2501000000800002807c0001800800010000000000080001000300000008000100030000003c00018008000100050000000800010080000000b8ff33000400000008000100070000000800010005000000080001000600000000000000000000002400018008000100030000ee0700010001000000080001000100000008000100020000000400030018000180140002006c6f"], 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.206435378s ago: executing program 5 (id=3096): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(0xfffffffffffffffd, 0x8, 0x2, 0x0, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) semget(0x2, 0x4, 0x200) 3.105027161s ago: executing program 5 (id=3097): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) connect$inet6(r6, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x20000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xa}}}, 0x24}}, 0x0) 2.647948775s ago: executing program 0 (id=3098): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x41, 0x200000000}) 2.104792532s ago: executing program 1 (id=3099): openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc86", 0xc1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c52d00", "e9be1eae", "0610000000000001"}, 0x28) 1.970569397s ago: executing program 0 (id=3100): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_clone(0x48000, &(0x7f0000000040)="5834fae303edcaaa92abe0043b6a981f2466594a616d1ecfa8378bde7a770daaee4364e6f84132f6cbe7ab6b7058267a03c35389e4088351c6d3bc", 0x3b, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200)="f7bf4e2d596045f41a9ac21a858ccc6741aefb74cf416945e29d8a662207fe308d0fecaa25efb1272ac2285c854cfe6666cbe3809494fe38e4e409739f4c") syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x34, 0x0, 0x4000, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x10, 0x0, 0x0, 0x2d9, {[@timestamp={0x8, 0xa, 0x0, 0x4ffffffe}]}}}}}}}, 0x0) 1.637143989s ago: executing program 0 (id=3101): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000003f40)=[{&(0x7f0000000080)=@in={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) 1.322336976s ago: executing program 4 (id=3102): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x177) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x441, 0x800000a, r2, 0x0) fchdir(0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lblcr\x00', 0x1, 0x4, 0x8}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffff8}}], 0x18}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2b) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000000580)={{0x0, 0x0, 0x80, {0x3000, 0x3000, 0x1}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e0000005800028014000600200100000000000000000000000000020500160001000000140007"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r1) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000002600)={0x1fd, 0x3, 0x76ac041c491bb77a, 0x2000, &(0x7f0000008000/0x2000)=nil}) keyctl$link(0x8, r1, r10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="402205"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000000009046b00016a93f00009058803", @ANYRESOCT], 0x0) 419.134629ms ago: executing program 1 (id=3103): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0}}], 0x1, 0x4000000) r1 = socket$inet6(0xa, 0x3, 0x100) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) sendmmsg$inet(r2, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x0, @private=0xa010103}, 0x10, &(0x7f0000000780)=[{&(0x7f00000006c0)='o', 0x1}], 0x1}}], 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000280)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xa, {0xb, 0x0, 0x0, {0x9, 0x9, 0x3, 0x90000005, 0x40000000000003, 0x2, 0x9ec, 0x357410e1, 0x0, 0xa593e9c1ca988eda, 0xfffffff9, 0x0, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x9, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) sendto(r1, 0x0, 0x0, 0x810, &(0x7f00000008c0)=@nl=@kern={0x10, 0x0, 0x0, 0x400000}, 0x80) 238.558378ms ago: executing program 1 (id=3104): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000001780)=[{0x0}, {0x0, 0x44}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, &(0x7f0000000380), 0x51}, 0x80) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00042dbd7000fd"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x1, 0xbdb], 0xdddd0000, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_TSC_KHZ_vm(0xffffffffffffffff, 0xaea3) 0s ago: executing program 1 (id=3105): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}}}}}}}, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x1) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r11, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r8, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): ¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 805.243319][ C1] vkms_vblank_simulate: vblank timer overrun [ 805.406298][ T5921] usb 2-1: config 5 interface 250 has no altsetting 0 [ 805.410660][T16512] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 805.578569][T16512] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 805.599048][ T5921] usb 2-1: New USB device found, idVendor=1668, idProduct=1200, bcdDevice=bb.6e [ 805.649763][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.681262][T16512] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 805.700762][ T5921] usb 2-1: Product: syz [ 805.701488][T16512] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/< 1 [ 810.532694][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 810.546903][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 810.561922][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 810.602354][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 810.675198][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 810.721306][T15325] bridge_slave_1: left allmulticast mode [ 810.744249][T15325] bridge_slave_1: left promiscuous mode [ 810.774933][T15325] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.823921][T15325] bridge_slave_0: left allmulticast mode [ 810.829738][T15325] bridge_slave_0: left promiscuous mode [ 810.856694][T15325] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.813809][T16610] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2667'. [ 812.119393][ T5830] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 812.290547][ T5830] usb 1-1: Using ep0 maxpacket: 8 [ 812.303948][ T5830] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 812.314265][ T5830] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 812.331491][T15325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 812.331523][ T5830] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 812.373440][T15325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 812.385693][T15325] bond0 (unregistering): Released all slaves [ 812.391772][ T5830] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 812.391804][ T5830] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 812.391851][ T5830] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 812.391873][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.643281][ T5830] usb 1-1: GET_CAPABILITIES returned 0 [ 812.680621][ T5830] usbtmc 1-1:16.0: can't read capabilities [ 812.696910][ T5842] Bluetooth: hci5: command tx timeout [ 812.818709][T16619] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2670'. [ 812.870571][T16610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.903581][T16610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.016528][ T5919] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 813.188453][ T5919] usb 5-1: config index 0 descriptor too short (expected 215, got 45) [ 813.199382][ T5919] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 813.209304][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.220268][ T5919] usb 5-1: Product: syz [ 813.228924][ T5919] usb 5-1: Manufacturer: syz [ 813.238666][T15325] hsr_slave_0: left promiscuous mode [ 813.239130][ T5919] usb 5-1: SerialNumber: syz [ 813.278836][T15325] hsr_slave_1: left promiscuous mode [ 813.295150][T15325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 813.311654][T15325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.322803][T15325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 813.342000][T15325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.403179][T15325] veth1_macvtap: left promiscuous mode [ 813.414614][T15325] veth0_macvtap: left promiscuous mode [ 813.435725][ T5912] usb 1-1: USB disconnect, device number 86 [ 813.458136][T15325] veth1_vlan: left promiscuous mode [ 813.463870][T15325] veth0_vlan: left promiscuous mode [ 813.467158][T16621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.521490][T16621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.749365][ T5919] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 813.782972][ T5919] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 813.956711][ T5830] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 814.122297][ T5830] usb 1-1: Using ep0 maxpacket: 32 [ 814.129474][ T5830] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 814.138919][ T5830] usb 1-1: config 0 has no interface number 0 [ 814.154411][ T5830] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 814.171642][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.180064][ T5830] usb 1-1: Product: syz [ 814.184387][ T5830] usb 1-1: Manufacturer: syz [ 814.189403][ T5830] usb 1-1: SerialNumber: syz [ 814.197802][ T5830] usb 1-1: config 0 descriptor?? [ 814.210064][ T5830] smsc95xx v2.0.0 [ 814.547031][T15325] team0 (unregistering): Port device team_slave_1 removed [ 814.602764][T15325] team0 (unregistering): Port device team_slave_0 removed [ 814.606650][ T5830] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 814.633933][ T5830] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 814.779919][ T5842] Bluetooth: hci5: command tx timeout [ 815.041391][ T5919] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 815.472417][ T5830] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 815.508814][ T5830] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 815.590289][ T5830] usb 1-1: USB disconnect, device number 87 [ 815.676890][ T5919] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 815.694899][ T5919] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 815.739198][T16587] chnl_net:caif_netlink_parms(): no params data found [ 815.756016][ T5919] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 815.842080][ T5919] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 815.873540][ T5919] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 815.908585][ T5919] usb 5-1: USB disconnect, device number 92 [ 816.898769][ T5842] Bluetooth: hci5: command tx timeout [ 816.949585][T16679] Invalid logical block size (65025) [ 816.978546][T16587] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.985767][T16587] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.016111][T16587] bridge_slave_0: entered allmulticast mode [ 817.049482][T16587] bridge_slave_0: entered promiscuous mode [ 817.181770][T16587] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.196518][T16587] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.232738][T16681] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 817.251516][T16587] bridge_slave_1: entered allmulticast mode [ 817.297124][T16587] bridge_slave_1: entered promiscuous mode [ 817.397242][T16587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.459867][T16692] binder: 16689:16692 ioctl 400c620e 200000000380 returned -22 [ 817.702928][T16587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.848028][T16587] team0: Port device team_slave_0 added [ 817.869117][T16587] team0: Port device team_slave_1 added [ 817.986458][ T5832] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 818.018977][T16587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.074024][T16587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.148701][T16705] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2683'. [ 818.196542][ T5832] usb 5-1: Using ep0 maxpacket: 8 [ 818.218948][ T5832] usb 5-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 818.232422][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 818.250792][T16587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.271176][ T5832] usb 5-1: Product: syz [ 818.275438][ T5832] usb 5-1: Manufacturer: syz [ 818.303376][ T5832] usb 5-1: SerialNumber: syz [ 818.316127][T16587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.333347][ T5832] usb 5-1: config 0 descriptor?? [ 818.363914][T16587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.398565][ T5832] usbtest 5-1:0.0: FX2 device [ 818.403518][ T5832] usbtest 5-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 818.476614][ T5921] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 818.576383][T16587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.965670][ T5842] Bluetooth: hci5: command tx timeout [ 819.046733][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 819.054636][ T5921] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 819.076393][ T5921] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 819.106563][ T5921] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 819.180635][ T5921] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 819.238047][ T5921] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 819.260678][ T5921] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 819.349858][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.460047][T16716] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2686'. [ 819.634269][ T5921] usb 2-1: GET_CAPABILITIES returned 0 [ 819.661272][ T5921] usbtmc 2-1:16.0: can't read capabilities [ 819.697244][T16587] hsr_slave_0: entered promiscuous mode [ 819.749915][T16587] hsr_slave_1: entered promiscuous mode [ 819.783230][T16587] debugfs: 'hsr0' already exists in 'hsr' [ 819.824632][T16587] Cannot create hsr debugfs directory [ 819.843328][T16703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.916744][T16703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.090947][T16723] fuse: Unknown parameter 'nd' [ 820.423585][ T5912] usb 5-1: USB disconnect, device number 93 [ 820.473852][ T5832] usb 2-1: USB disconnect, device number 119 [ 822.835333][T16587] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 822.907639][T16587] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 822.927779][T16773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2697'. [ 822.998134][T16587] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 823.097231][T16587] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 823.390282][T16791] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2699'. [ 823.508818][T16587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.562827][T16587] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.594273][ T6623] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.601535][ T6623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.642222][ T8688] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.649446][ T8688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.707617][ T5830] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 823.938664][ T5830] usb 1-1: Using ep0 maxpacket: 8 [ 823.966266][ T5830] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 824.024936][ T5830] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 824.078007][ T5830] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 824.098391][T16587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 824.135246][T16803] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 824.148110][ T5830] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 824.193408][ T5830] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 824.252385][ T5830] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 824.346112][T16587] veth0_vlan: entered promiscuous mode [ 824.356652][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.356761][T16807] xt_SECMARK: invalid mode: 2 [ 824.429809][T16587] veth1_vlan: entered promiscuous mode [ 824.742380][ T5830] usb 1-1: GET_CAPABILITIES returned 0 [ 824.761113][ T5830] usbtmc 1-1:16.0: can't read capabilities [ 824.991230][T16791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.006855][T16587] veth0_macvtap: entered promiscuous mode [ 825.023215][T16791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.074577][T16587] veth1_macvtap: entered promiscuous mode [ 825.412013][T16587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.451468][T16587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.526007][T15325] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.560531][T15325] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.586490][T15325] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.646289][T15325] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.679420][ T5912] usb 1-1: USB disconnect, device number 88 [ 825.937443][T16831] vivid-007: disconnect [ 825.950769][T16831] vivid-007: reconnect [ 825.961327][T15325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.009266][T15325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.136293][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.199274][T16839] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 826.300262][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.417455][T16845] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2709'. [ 826.906571][T16856] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2712'. [ 827.416930][ T5919] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 827.898091][ T5919] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 827.943668][ T5919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 827.982900][ T5919] usb 2-1: config 0 has no interfaces? [ 827.994620][ T5919] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 828.064568][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.111986][ T5919] usb 2-1: config 0 descriptor?? [ 828.524580][T16883] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2717'. [ 828.846515][ T5832] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 829.051203][ T5832] usb 7-1: Using ep0 maxpacket: 8 [ 829.103145][ T5832] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 829.144553][ T5832] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 829.216525][T15995] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 829.250178][ T5832] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 829.325989][ T5832] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 829.359223][ T5832] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 829.476426][T15995] usb 5-1: Using ep0 maxpacket: 16 [ 829.578036][T15995] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 829.602570][ T5832] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 829.618909][T15995] usb 5-1: config 0 has no interface number 0 [ 829.665929][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.687196][T15995] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 829.716082][T15995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.818449][T15995] usb 5-1: Product: syz [ 829.834287][T15995] usb 5-1: Manufacturer: syz [ 829.861970][T15995] usb 5-1: SerialNumber: syz [ 829.932757][T15995] usb 5-1: config 0 descriptor?? [ 830.003466][T15995] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 830.034236][ T5832] usb 7-1: GET_CAPABILITIES returned 0 [ 830.063440][ T5832] usbtmc 7-1:16.0: can't read capabilities [ 830.240418][T16883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.256940][T16883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.288829][ T5921] usb 2-1: USB disconnect, device number 120 [ 830.814489][ T5921] usb 7-1: USB disconnect, device number 2 [ 831.291914][T16918] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2723'. [ 831.747678][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 831.761973][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 831.770891][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 831.778958][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 831.801603][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 831.969156][T15995] gspca_spca1528: reg_r err -110 [ 831.981935][T15995] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 832.107659][T15995] usb 5-1: USB disconnect, device number 94 [ 832.340030][ T8678] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 832.385637][ T8678] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.784703][ T8678] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 832.863518][ T8678] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.964733][T16939] FAULT_INJECTION: forcing a failure. [ 832.964733][T16939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 833.059310][T16939] CPU: 1 UID: 0 PID: 16939 Comm: syz.6.2727 Not tainted syzkaller #0 PREEMPT(full) [ 833.059336][T16939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 833.059347][T16939] Call Trace: [ 833.059355][T16939] [ 833.059364][T16939] dump_stack_lvl+0x189/0x250 [ 833.059391][T16939] ? __pfx____ratelimit+0x10/0x10 [ 833.059415][T16939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 833.059437][T16939] ? __pfx__printk+0x10/0x10 [ 833.059468][T16939] should_fail_ex+0x414/0x560 [ 833.059499][T16939] _copy_to_user+0x31/0xb0 [ 833.059523][T16939] simple_read_from_buffer+0xe1/0x170 [ 833.059553][T16939] proc_fail_nth_read+0x1b3/0x220 [ 833.059578][T16939] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 833.059602][T16939] ? rw_verify_area+0x2a6/0x4d0 [ 833.059627][T16939] ? __lock_acquire+0xab9/0xd20 [ 833.059643][T16939] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 833.059666][T16939] vfs_read+0x200/0xa30 [ 833.059688][T16939] ? fdget_pos+0x247/0x320 [ 833.059709][T16939] ? __pfx___mutex_lock+0x10/0x10 [ 833.059735][T16939] ? __pfx_vfs_read+0x10/0x10 [ 833.059759][T16939] ? __fget_files+0x2a/0x420 [ 833.059788][T16939] ? __fget_files+0x3a0/0x420 [ 833.059804][T16939] ? __fget_files+0x2a/0x420 [ 833.059830][T16939] ksys_read+0x145/0x250 [ 833.059851][T16939] ? __fget_files+0x2a/0x420 [ 833.059869][T16939] ? __pfx_ksys_read+0x10/0x10 [ 833.059895][T16939] ? do_syscall_64+0xbe/0xfa0 [ 833.059923][T16939] do_syscall_64+0xfa/0xfa0 [ 833.059945][T16939] ? lockdep_hardirqs_on+0x9c/0x150 [ 833.059967][T16939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.059985][T16939] ? clear_bhb_loop+0x60/0xb0 [ 833.060007][T16939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.060023][T16939] RIP: 0033:0x7f7b6538e15c [ 833.060037][T16939] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 833.060049][T16939] RSP: 002b:00007f7b66201030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 833.060065][T16939] RAX: ffffffffffffffda RBX: 00007f7b655e5fa0 RCX: 00007f7b6538e15c [ 833.060075][T16939] RDX: 000000000000000f RSI: 00007f7b662010a0 RDI: 0000000000000005 [ 833.060085][T16939] RBP: 00007f7b66201090 R08: 0000000000000000 R09: 0000000000000000 [ 833.060093][T16939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.060104][T16939] R13: 00007f7b655e6038 R14: 00007f7b655e5fa0 R15: 00007f7b6570fa28 [ 833.060132][T16939] [ 833.763827][ T8678] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.905641][ T5842] Bluetooth: hci0: command tx timeout [ 833.953456][ T8678] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.556986][T16927] chnl_net:caif_netlink_parms(): no params data found [ 835.977957][ T5842] Bluetooth: hci0: command tx timeout [ 836.289335][T17003] netlink: 324 bytes leftover after parsing attributes in process `syz.5.2740'. [ 836.858942][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 837.977671][ T8678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 838.012622][ T8678] bond_slave_0: left promiscuous mode [ 838.024794][ T8678] bond_slave_0: left allmulticast mode [ 838.058087][ T5842] Bluetooth: hci0: command tx timeout [ 838.058236][ T8678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 838.089924][ T8678] bond_slave_1: left promiscuous mode [ 838.095566][ T8678] bond_slave_1: left allmulticast mode [ 838.117780][ T8678] bond0 (unregistering): Released all slaves [ 838.750262][T17030] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2747'. [ 838.795656][T17030] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2747'. [ 838.910878][T17030] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2747'. [ 838.922532][T17030] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2747'. [ 838.941291][T17030] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2747'. [ 838.951041][T17030] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2747'. [ 838.960459][T17030] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2747'. [ 838.971157][T17030] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2747'. [ 838.981587][T17030] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2747'. [ 839.685582][T16927] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.012011][T16927] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.036615][T16927] bridge_slave_0: entered allmulticast mode [ 840.054314][T16927] bridge_slave_0: entered promiscuous mode [ 840.074131][T16927] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.141614][ T5842] Bluetooth: hci0: command tx timeout [ 840.149746][T16927] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.167651][T15995] usb 5-1: new low-speed USB device number 95 using dummy_hcd [ 840.178321][T16927] bridge_slave_1: entered allmulticast mode [ 840.194647][T16927] bridge_slave_1: entered promiscuous mode [ 840.509952][T15995] usb 5-1: config 7 has an invalid interface number: 252 but max is 0 [ 840.576413][T15995] usb 5-1: config 7 has no interface number 0 [ 840.600046][ T8678] dummy0: left promiscuous mode [ 840.618767][T15995] usb 5-1: config 7 interface 252 has no altsetting 0 [ 840.694032][T15995] usb 5-1: string descriptor 0 read error: -22 [ 840.718771][T15995] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 840.758346][T15995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.774956][ T8678] hsr_slave_0: left promiscuous mode [ 840.796439][ T8678] hsr_slave_1: left promiscuous mode [ 840.883801][ T8678] veth1_macvtap: left promiscuous mode [ 840.920388][ T8678] veth0_macvtap: left promiscuous mode [ 841.002582][T17037] syz.0.2748: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 841.046667][T17037] CPU: 1 UID: 0 PID: 17037 Comm: syz.0.2748 Not tainted syzkaller #0 PREEMPT(full) [ 841.046695][T17037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 841.046706][T17037] Call Trace: [ 841.046715][T17037] [ 841.046723][T17037] dump_stack_lvl+0x189/0x250 [ 841.046753][T17037] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 841.046781][T17037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 841.046804][T17037] ? __pfx__printk+0x10/0x10 [ 841.046823][T17037] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 841.046848][T17037] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 841.046880][T17037] warn_alloc+0x214/0x310 [ 841.046912][T17037] ? __pfx_warn_alloc+0x10/0x10 [ 841.046947][T17037] ? __get_vm_area_node+0x28f/0x300 [ 841.046971][T17037] ? translate_table+0x198/0x2000 [ 841.046996][T17037] __vmalloc_node_range_noprof+0x690/0x12d0 [ 841.047062][T17037] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 841.047086][T17037] ? translate_table+0x198/0x2000 [ 841.047111][T17037] ? rcu_is_watching+0x15/0xb0 [ 841.047132][T17037] ? translate_table+0x198/0x2000 [ 841.047153][T17037] __kvmalloc_node_noprof+0x674/0x910 [ 841.047180][T17037] ? translate_table+0x198/0x2000 [ 841.047200][T17037] ? do_ipt_set_ctl+0x881/0xcd0 [ 841.047219][T17037] ? nf_setsockopt+0x26f/0x290 [ 841.047240][T17037] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 841.047260][T17037] ? do_syscall_64+0xfa/0xfa0 [ 841.047291][T17037] translate_table+0x198/0x2000 [ 841.047325][T17037] ? __lock_acquire+0xab9/0xd20 [ 841.047349][T17037] ? __pfx_translate_table+0x10/0x10 [ 841.047372][T17037] ? __might_fault+0xb0/0x130 [ 841.047416][T17037] ? _copy_from_user+0x94/0xb0 [ 841.047443][T17037] do_ipt_set_ctl+0x967/0xcd0 [ 841.047468][T17037] ? rcu_is_watching+0x15/0xb0 [ 841.047488][T17037] ? trace_contention_end+0x39/0x120 [ 841.047511][T17037] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 841.047555][T17037] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 841.047592][T17037] ? __pfx_aa_sk_perm+0x10/0x10 [ 841.047621][T17037] nf_setsockopt+0x26f/0x290 [ 841.047646][T17037] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 841.047674][T17037] do_sock_setsockopt+0x17c/0x1b0 [ 841.047698][T17037] __x64_sys_setsockopt+0x13f/0x1b0 [ 841.047723][T17037] do_syscall_64+0xfa/0xfa0 [ 841.047746][T17037] ? lockdep_hardirqs_on+0x9c/0x150 [ 841.047771][T17037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.047790][T17037] ? clear_bhb_loop+0x60/0xb0 [ 841.047813][T17037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.047831][T17037] RIP: 0033:0x7fe43ad8f749 [ 841.047848][T17037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 841.047866][T17037] RSP: 002b:00007fe43bba2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 841.047886][T17037] RAX: ffffffffffffffda RBX: 00007fe43afe5fa0 RCX: 00007fe43ad8f749 [ 841.047901][T17037] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000004 [ 841.047914][T17037] RBP: 00007fe43ae13f91 R08: 0000000000000540 R09: 0000000000000000 [ 841.047926][T17037] R10: 0000200000000a80 R11: 0000000000000246 R12: 0000000000000000 [ 841.047939][T17037] R13: 00007fe43afe6038 R14: 00007fe43afe5fa0 R15: 00007fe43b10fa28 [ 841.047972][T17037] [ 841.047991][T17037] Mem-Info: [ 841.446986][T17037] active_anon:7468 inactive_anon:0 isolated_anon:0 [ 841.446986][T17037] active_file:18601 inactive_file:40287 isolated_file:0 [ 841.446986][T17037] unevictable:768 dirty:198 writeback:0 [ 841.446986][T17037] slab_reclaimable:6646 slab_unreclaimable:103519 [ 841.446986][T17037] mapped:38297 shmem:1369 pagetables:1630 [ 841.446986][T17037] sec_pagetables:0 bounce:0 [ 841.446986][T17037] kernel_misc_reclaimable:0 [ 841.446986][T17037] free:1268686 free_pcp:17119 free_cma:0 [ 841.985607][T17037] Node 0 active_anon:34020kB inactive_anon:0kB active_file:74392kB inactive_file:160948kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:157220kB dirty:776kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13100kB pagetables:6264kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 842.046526][T17037] Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 842.136678][T17037] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 842.199112][T17037] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 842.226483][T17037] Node 0 DMA32 free:1172276kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34120kB inactive_anon:0kB active_file:74392kB inactive_file:160948kB unevictable:1536kB writepending:776kB zspages:0kB present:3129332kB managed:2565144kB mlocked:0kB bounce:0kB free_pcp:36576kB local_pcp:19992kB free_cma:0kB [ 842.289933][T17037] lowmem_reserve[]: 0 0 0 0 0 [ 842.294824][T17037] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 842.402056][ T5912] usb 5-1: USB disconnect, device number 95 [ 842.418425][T17037] lowmem_reserve[]: 0 0 0 0 0 [ 842.423203][T17037] Node 1 Normal free:3887056kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:28028kB local_pcp:16512kB free_cma:0kB [ 842.494429][T17037] lowmem_reserve[]: 0 0 0 0 0 [ 842.506373][T17037] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 842.549671][T17037] Node 0 DMA32: 945*4kB (ME) 704*8kB (UME) 145*16kB (UME) 319*32kB (ME) 214*64kB (ME) 62*128kB (ME) 53*256kB (UME) 14*512kB (UME) 6*1024kB (ME) 6*2048kB (UME) 266*4096kB (M) = 1172276kB [ 842.597668][T17037] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 842.635318][T17037] Node 1 Normal: 188*4kB (UME) 54*8kB (UME) 43*16kB (UME) 114*32kB (UME) 31*64kB (UME) 7*128kB (UME) 3*256kB (UE) 4*512kB (UM) 5*1024kB (UME) 6*2048kB (UME) 942*4096kB (M) = 3887056kB [ 842.654177][T17072] sctp: [Deprecated]: syz.5.2753 (pid 17072) Use of struct sctp_assoc_value in delayed_ack socket option. [ 842.654177][T17072] Use struct sctp_sack_info instead [ 842.681069][T17037] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 842.694679][T17037] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 842.753248][T17037] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 842.796379][T17037] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 842.805708][T17037] 60253 total pagecache pages [ 842.856769][T17037] 0 pages in swap cache [ 842.866242][T17037] Free swap = 124996kB [ 842.886857][T17037] Total swap = 124996kB [ 842.891059][T17037] 2097051 pages RAM [ 842.894868][T17037] 0 pages HighMem/MovableOnly [ 842.900425][T17037] 424123 pages reserved [ 842.904657][T17037] 0 pages cma reserved [ 843.488588][ T8678] team0 (unregistering): Port device team_slave_1 removed [ 843.573311][T17089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 843.591542][ T5832] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 843.671539][ T8678] team0 (unregistering): Port device team_slave_0 removed [ 843.746445][ T5832] usb 7-1: Using ep0 maxpacket: 8 [ 843.755988][ T5832] usb 7-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 843.765905][ T5832] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 843.778176][ T5832] usb 7-1: Product: syz [ 843.792416][ T5832] usb 7-1: Manufacturer: syz [ 843.807068][ T5832] usb 7-1: SerialNumber: syz [ 843.835715][ T5832] usb 7-1: config 0 descriptor?? [ 844.444985][ T5832] usb 7-1: USB disconnect, device number 3 [ 845.475127][T16927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.574300][T16927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.765915][T16927] team0: Port device team_slave_0 added [ 845.810942][T16927] team0: Port device team_slave_1 added [ 845.991670][T16927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.033027][T16927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.068272][T16927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.076787][T17113] __nla_validate_parse: 25 callbacks suppressed [ 846.076807][T17113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2767'. [ 846.109880][T16927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.124617][T16927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.160147][T16927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.166517][T17113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2767'. [ 846.537213][T16927] hsr_slave_0: entered promiscuous mode [ 846.555236][T16927] hsr_slave_1: entered promiscuous mode [ 846.567863][T16927] debugfs: 'hsr0' already exists in 'hsr' [ 846.573630][T16927] Cannot create hsr debugfs directory [ 848.312322][T17148] syzkaller1: entered promiscuous mode [ 848.334584][T17148] syzkaller1: entered allmulticast mode [ 848.908540][ T5832] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 849.089206][ T5832] usb 1-1: Using ep0 maxpacket: 16 [ 849.139111][T17166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.188235][T17166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.218120][ T5832] usb 1-1: unable to get BOS descriptor or descriptor too short [ 849.240720][T16927] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 849.254671][ T5832] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 849.274162][ T5832] usb 1-1: can't read configurations, error -71 [ 849.311369][T16927] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 849.394780][T16927] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 849.491078][T17171] FAULT_INJECTION: forcing a failure. [ 849.491078][T17171] name failslab, interval 1, probability 0, space 0, times 0 [ 849.491439][T16927] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 849.573177][T17171] CPU: 0 UID: 0 PID: 17171 Comm: syz.5.2779 Not tainted syzkaller #0 PREEMPT(full) [ 849.573203][T17171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 849.573213][T17171] Call Trace: [ 849.573221][T17171] [ 849.573229][T17171] dump_stack_lvl+0x189/0x250 [ 849.573256][T17171] ? __pfx____ratelimit+0x10/0x10 [ 849.573279][T17171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 849.573300][T17171] ? __pfx__printk+0x10/0x10 [ 849.573330][T17171] ? __pfx___might_resched+0x10/0x10 [ 849.573353][T17171] should_fail_ex+0x414/0x560 [ 849.573381][T17171] should_failslab+0xa8/0x100 [ 849.573401][T17171] kmem_cache_alloc_node_noprof+0x77/0x710 [ 849.573425][T17171] ? __alloc_skb+0x112/0x2d0 [ 849.573447][T17171] __alloc_skb+0x112/0x2d0 [ 849.573467][T17171] netlink_ack+0x146/0xa50 [ 849.573481][T17171] ? __pfx_genl_rcv_msg+0x10/0x10 [ 849.573500][T17171] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 849.573520][T17171] ? __pfx_nl80211_post_doit+0x10/0x10 [ 849.573539][T17171] ? __asan_memcpy+0x40/0x70 [ 849.573560][T17171] ? __pfx_ref_tracker_free+0x10/0x10 [ 849.573586][T17171] netlink_rcv_skb+0x28c/0x470 [ 849.573602][T17171] ? __lock_acquire+0xab9/0xd20 [ 849.573620][T17171] ? __pfx_genl_rcv_msg+0x10/0x10 [ 849.573641][T17171] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 849.573678][T17171] ? down_read+0x1ad/0x2e0 [ 849.573698][T17171] genl_rcv+0x28/0x40 [ 849.573717][T17171] netlink_unicast+0x82f/0x9e0 [ 849.573748][T17171] ? __pfx_netlink_unicast+0x10/0x10 [ 849.573773][T17171] ? netlink_sendmsg+0x642/0xb30 [ 849.573788][T17171] ? skb_put+0x11b/0x210 [ 849.573807][T17171] netlink_sendmsg+0x805/0xb30 [ 849.573833][T17171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 849.573854][T17171] ? aa_sock_msg_perm+0xf1/0x1d0 [ 849.573880][T17171] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 849.573897][T17171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 849.573915][T17171] __sock_sendmsg+0x21c/0x270 [ 849.573941][T17171] ____sys_sendmsg+0x505/0x830 [ 849.573967][T17171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 849.573995][T17171] ? import_iovec+0x74/0xa0 [ 849.574021][T17171] ___sys_sendmsg+0x21f/0x2a0 [ 849.574043][T17171] ? __pfx____sys_sendmsg+0x10/0x10 [ 849.574097][T17171] ? __fget_files+0x2a/0x420 [ 849.574114][T17171] ? __fget_files+0x3a0/0x420 [ 849.574142][T17171] __x64_sys_sendmsg+0x19b/0x260 [ 849.574164][T17171] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 849.574194][T17171] ? __pfx_ksys_write+0x10/0x10 [ 849.574221][T17171] ? do_syscall_64+0xbe/0xfa0 [ 849.574247][T17171] do_syscall_64+0xfa/0xfa0 [ 849.574269][T17171] ? lockdep_hardirqs_on+0x9c/0x150 [ 849.574292][T17171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.574316][T17171] ? clear_bhb_loop+0x60/0xb0 [ 849.574338][T17171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.574355][T17171] RIP: 0033:0x7f852058f749 [ 849.574373][T17171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 849.574389][T17171] RSP: 002b:00007f8521411038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 849.574410][T17171] RAX: ffffffffffffffda RBX: 00007f85207e5fa0 RCX: 00007f852058f749 [ 849.574424][T17171] RDX: 0000000000000050 RSI: 0000200000001700 RDI: 0000000000000004 [ 849.574436][T17171] RBP: 00007f8521411090 R08: 0000000000000000 R09: 0000000000000000 [ 849.574448][T17171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.574459][T17171] R13: 00007f85207e6038 R14: 00007f85207e5fa0 R15: 00007f852090fa28 [ 849.574491][T17171] [ 849.913353][ C0] vkms_vblank_simulate: vblank timer overrun [ 850.476495][ T5912] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 850.496986][T16927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.632657][T16927] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.709220][ T8679] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.716444][ T8679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.718317][ T5912] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 850.749479][ T5912] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 850.836415][T15995] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 850.899642][ T8678] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.906896][ T8678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.945215][ T5912] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 850.985324][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.047358][T15995] usb 6-1: Using ep0 maxpacket: 16 [ 851.088394][T15995] usb 6-1: config 0 has no interfaces? [ 851.098689][ T5912] usb 5-1: Product: syz [ 851.102884][ T5912] usb 5-1: Manufacturer: syz [ 851.138713][T15995] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 851.148079][ T5912] usb 5-1: SerialNumber: syz [ 851.193322][T15995] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 851.248105][T15995] usb 6-1: Manufacturer: syz [ 851.306249][T17197] input: syz1 as /devices/virtual/input/input49 [ 851.325959][T15995] usb 6-1: config 0 descriptor?? [ 851.361227][T16927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.438835][T17180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.578183][T17180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.677280][T17191] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2782'. [ 851.753782][ T5912] usb 5-1: 0:2 : does not exist [ 851.849257][ T5912] usb 5-1: USB disconnect, device number 96 [ 851.934551][T16927] veth0_vlan: entered promiscuous mode [ 851.964613][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 852.022475][T16927] veth1_vlan: entered promiscuous mode [ 852.175418][T16927] veth0_macvtap: entered promiscuous mode [ 852.217473][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 852.223295][T16927] veth1_macvtap: entered promiscuous mode [ 852.515176][T16927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 852.566048][T16927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 852.613814][ T6623] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.664242][ T6623] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.697378][ T6623] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.785595][ T6623] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.208814][ T6623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.255557][ T6623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.304956][ T6623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.322329][ T6623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.604546][ T5912] usb 6-1: USB disconnect, device number 48 [ 854.727558][ T30] audit: type=1326 audit(1763970036.312:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17256 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852058f749 code=0x7ffc0000 [ 854.811231][ T30] audit: type=1326 audit(1763970036.312:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17256 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f852058f749 code=0x7ffc0000 [ 854.894024][ T30] audit: type=1326 audit(1763970036.312:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17256 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852058f749 code=0x7ffc0000 [ 855.421823][T17268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2795'. [ 855.442793][ T30] audit: type=1326 audit(1763970036.322:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17256 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f852058f749 code=0x7ffc0000 [ 855.465253][ T5905] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 855.497625][ T30] audit: type=1326 audit(1763970036.322:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17256 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852058f749 code=0x7ffc0000 [ 855.569214][ T30] audit: type=1326 audit(1763970036.322:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17256 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f852058f749 code=0x7ffc0000 [ 855.657337][ T5905] usb 7-1: Using ep0 maxpacket: 32 [ 855.674058][ T5905] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 855.689194][ T5905] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 855.704135][ T30] audit: type=1326 audit(1763970036.322:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17256 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852058f749 code=0x7ffc0000 [ 855.729793][ T5905] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 855.775037][ T5905] usb 7-1: Product: syz [ 855.792080][ T5905] usb 7-1: Manufacturer: syz [ 855.806658][ T5905] usb 7-1: SerialNumber: syz [ 855.821841][ T30] audit: type=1326 audit(1763970036.322:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17256 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f852058f749 code=0x7ffc0000 [ 855.879127][T17278] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 855.889056][ T5905] usb 7-1: config 0 descriptor?? [ 855.889751][T17277] tipc: Enabled bearer , priority 15 [ 855.896956][T17262] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 857.285211][T17293] syzkaller0: entered promiscuous mode [ 857.315022][T17293] syzkaller0: entered allmulticast mode [ 857.763755][ T5832] usb 7-1: USB disconnect, device number 4 [ 857.944318][T17302] loop9: detected capacity change from 0 to 7 [ 857.996499][T17302] Dev loop9: unable to read RDB block 7 [ 858.004700][T17302] loop9: AHDI p3 [ 858.024436][T17302] loop9: partition table partially beyond EOD, truncated [ 858.311749][T17310] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2808'. [ 858.313588][T17315] netlink: 'syz.0.2809': attribute type 64 has an invalid length. [ 858.356503][T17315] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2809'. [ 858.365847][T17315] gretap0: entered allmulticast mode [ 858.372967][T17315] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 858.946471][T15995] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 859.126453][T15995] usb 1-1: device descriptor read/64, error -71 [ 859.368596][T15995] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 859.507482][T15995] usb 1-1: device descriptor read/64, error -71 [ 859.657086][T15995] usb usb1-port1: attempt power cycle [ 860.030937][T15995] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 860.139861][T15995] usb 1-1: device descriptor read/8, error -71 [ 860.396635][T15995] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 860.457789][T15995] usb 1-1: device descriptor read/8, error -71 [ 860.539618][T17346] usb usb8: usbfs: process 17346 (syz.6.2819) did not claim interface 0 before use [ 860.574471][T15995] usb usb1-port1: unable to enumerate USB device [ 860.580392][T17346] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2819'. [ 860.797494][ T5905] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 860.978119][ T5905] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 860.998132][ T5905] usb 5-1: config 0 has no interface number 0 [ 861.008627][ T5905] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 861.027615][T17357] netdevsim netdevsim1: Direct firmware load for . [ 861.027615][T17357] failed with error -2 [ 861.039955][T17357] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 861.039955][T17357] [ 861.055455][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.056441][T15995] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 861.064105][ T5905] usb 5-1: Product: syz [ 861.124459][ T5905] usb 5-1: Manufacturer: syz [ 861.131737][ T5905] usb 5-1: SerialNumber: syz [ 861.153922][ T5905] usb 5-1: config 0 descriptor?? [ 861.287146][T15995] usb 7-1: Using ep0 maxpacket: 16 [ 861.294201][T15995] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.305514][T15995] usb 7-1: config 0 interface 0 has no altsetting 0 [ 861.318016][T15995] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 861.339417][T15995] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.368589][T15995] usb 7-1: config 0 descriptor?? [ 861.372371][ T5905] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 861.394638][ T5905] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 861.432862][ T5905] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 861.452606][ T5905] usb 5-1: media controller created [ 861.505493][ T5905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 861.590771][T17345] netlink: 'syz.4.2820': attribute type 29 has an invalid length. [ 861.614593][T17345] netlink: 'syz.4.2820': attribute type 29 has an invalid length. [ 861.641081][T17345] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2820'. [ 861.897106][T17361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.919575][T17361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.945742][T15995] nzxt-smart2 0003:1E71:2009.001A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 862.118757][T15995] usb 7-1: USB disconnect, device number 5 [ 862.604370][T17374] binder: 17369:17374 ioctl c0306201 0 returned -14 [ 862.617688][ T5905] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 862.932740][T17366] fido_id[17366]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 863.034536][ T5905] usb 5-1: USB disconnect, device number 97 [ 863.437661][T17384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2831'. [ 863.643816][T17389] xt_SECMARK: invalid mode: 2 [ 863.901870][ T30] audit: type=1326 audit(1763970045.512:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17390 comm="syz.4.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb3f8f749 code=0x7ffc0000 [ 863.949587][ T30] audit: type=1326 audit(1763970045.512:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17390 comm="syz.4.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f6cb3f8f749 code=0x7ffc0000 [ 863.999334][ T30] audit: type=1326 audit(1763970045.512:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17390 comm="syz.4.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb3f8f749 code=0x7ffc0000 [ 864.021662][ C1] vkms_vblank_simulate: vblank timer overrun [ 864.087061][T17397] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2836'. [ 864.157425][ T30] audit: type=1326 audit(1763970045.512:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17390 comm="syz.4.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb3f8f749 code=0x7ffc0000 [ 864.180207][T17402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2836'. [ 864.424617][T17402] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 864.436795][T17402] bond1 (unregistering): Released all slaves [ 864.456702][ T30] audit: type=1326 audit(1763970045.512:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17390 comm="syz.4.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6cb3f8f749 code=0x7ffc0000 [ 864.480018][ T30] audit: type=1326 audit(1763970045.512:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17390 comm="syz.4.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb3f8f749 code=0x7ffc0000 [ 864.502623][ T30] audit: type=1326 audit(1763970045.512:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17390 comm="syz.4.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f6cb3f8f749 code=0x7ffc0000 [ 864.526273][ T30] audit: type=1326 audit(1763970045.512:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17390 comm="syz.4.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb3f8f749 code=0x7ffc0000 [ 864.748161][ T30] audit: type=1326 audit(1763970045.512:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17390 comm="syz.4.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb3f8f749 code=0x7ffc0000 [ 864.864881][ T30] audit: type=1326 audit(1763970045.512:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17390 comm="syz.4.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f6cb3f8f749 code=0x7ffc0000 [ 865.550424][T17426] FAULT_INJECTION: forcing a failure. [ 865.550424][T17426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 865.620468][T17426] CPU: 1 UID: 0 PID: 17426 Comm: syz.0.2844 Not tainted syzkaller #0 PREEMPT(full) [ 865.620517][T17426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 865.620541][T17426] Call Trace: [ 865.620549][T17426] [ 865.620558][T17426] dump_stack_lvl+0x189/0x250 [ 865.620587][T17426] ? __pfx____ratelimit+0x10/0x10 [ 865.620610][T17426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 865.620632][T17426] ? __pfx__printk+0x10/0x10 [ 865.620652][T17426] ? __might_fault+0xb0/0x130 [ 865.620687][T17426] should_fail_ex+0x414/0x560 [ 865.620722][T17426] _copy_from_user+0x2d/0xb0 [ 865.620744][T17426] ___sys_sendmsg+0x158/0x2a0 [ 865.620766][T17426] ? __pfx____sys_sendmsg+0x10/0x10 [ 865.620808][T17426] ? __fget_files+0x2a/0x420 [ 865.620821][T17426] ? __fget_files+0x3a0/0x420 [ 865.620842][T17426] __sys_sendmmsg+0x227/0x430 [ 865.620862][T17426] ? __pfx___sys_sendmmsg+0x10/0x10 [ 865.620884][T17426] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 865.620918][T17426] ? ksys_write+0x22a/0x250 [ 865.620940][T17426] ? __pfx_ksys_write+0x10/0x10 [ 865.620962][T17426] __x64_sys_sendmmsg+0xa0/0xc0 [ 865.620979][T17426] do_syscall_64+0xfa/0xfa0 [ 865.620997][T17426] ? lockdep_hardirqs_on+0x9c/0x150 [ 865.621016][T17426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.621030][T17426] ? clear_bhb_loop+0x60/0xb0 [ 865.621047][T17426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.621061][T17426] RIP: 0033:0x7fe43ad8f749 [ 865.621074][T17426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 865.621086][T17426] RSP: 002b:00007fe43bb60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 865.621103][T17426] RAX: ffffffffffffffda RBX: 00007fe43afe6180 RCX: 00007fe43ad8f749 [ 865.621113][T17426] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000006 [ 865.621123][T17426] RBP: 00007fe43bb60090 R08: 0000000000000000 R09: 0000000000000000 [ 865.621132][T17426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 865.621141][T17426] R13: 00007fe43afe6218 R14: 00007fe43afe6180 R15: 00007fe43b10fa28 [ 865.621165][T17426] [ 865.835458][ C1] vkms_vblank_simulate: vblank timer overrun [ 866.039162][T17428] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2843'. [ 866.123479][T17428] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2843'. [ 866.189624][T17431] FAULT_INJECTION: forcing a failure. [ 866.189624][T17431] name failslab, interval 1, probability 0, space 0, times 0 [ 866.255636][T17431] CPU: 1 UID: 0 PID: 17431 Comm: syz.4.2845 Not tainted syzkaller #0 PREEMPT(full) [ 866.255662][T17431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 866.255673][T17431] Call Trace: [ 866.255682][T17431] [ 866.255691][T17431] dump_stack_lvl+0x189/0x250 [ 866.255718][T17431] ? __pfx____ratelimit+0x10/0x10 [ 866.255743][T17431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 866.255766][T17431] ? __pfx__printk+0x10/0x10 [ 866.255800][T17431] should_fail_ex+0x414/0x560 [ 866.255832][T17431] should_failslab+0xa8/0x100 [ 866.255852][T17431] __kmalloc_cache_noprof+0x6f/0x6f0 [ 866.255876][T17431] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 866.255898][T17431] ? sctp_add_bind_addr+0x8c/0x370 [ 866.255928][T17431] sctp_add_bind_addr+0x8c/0x370 [ 866.255956][T17431] sctp_copy_local_addr_list+0x30b/0x4e0 [ 866.255982][T17431] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 866.256009][T17431] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 866.256035][T17431] ? sctp_v4_is_any+0x35/0x60 [ 866.256056][T17431] ? sctp_copy_one_addr+0x93/0x360 [ 866.256083][T17431] sctp_bind_addr_copy+0xb3/0x3c0 [ 866.256107][T17431] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 866.256132][T17431] sctp_connect_new_asoc+0x2e0/0x690 [ 866.256155][T17431] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 866.256172][T17431] ? __local_bh_enable_ip+0x12d/0x1c0 [ 866.256200][T17431] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 866.256218][T17431] ? security_sctp_bind_connect+0x7e/0x2e0 [ 866.256242][T17431] sctp_sendmsg+0x155c/0x2810 [ 866.256273][T17431] ? __pfx_sctp_sendmsg+0x10/0x10 [ 866.256294][T17431] ? aa_sk_perm+0x81e/0x950 [ 866.256320][T17431] ? __pfx_aa_sk_perm+0x10/0x10 [ 866.256352][T17431] ? sock_rps_record_flow+0x19/0x410 [ 866.256373][T17431] ? inet_sendmsg+0x2f4/0x370 [ 866.256394][T17431] __sock_sendmsg+0x19c/0x270 [ 866.256422][T17431] __sys_sendto+0x3bd/0x520 [ 866.256443][T17431] ? __pfx___sys_sendto+0x10/0x10 [ 866.256458][T17431] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 866.256497][T17431] ? __fget_files+0x3a0/0x420 [ 866.256527][T17431] ? ksys_write+0x22a/0x250 [ 866.256552][T17431] ? __pfx_ksys_write+0x10/0x10 [ 866.256579][T17431] __x64_sys_sendto+0xde/0x100 [ 866.256601][T17431] do_syscall_64+0xfa/0xfa0 [ 866.256624][T17431] ? lockdep_hardirqs_on+0x9c/0x150 [ 866.256647][T17431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.256665][T17431] ? clear_bhb_loop+0x60/0xb0 [ 866.256687][T17431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.256704][T17431] RIP: 0033:0x7f6cb3f8f749 [ 866.256720][T17431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 866.256737][T17431] RSP: 002b:00007f6cb4dec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 866.256757][T17431] RAX: ffffffffffffffda RBX: 00007f6cb41e5fa0 RCX: 00007f6cb3f8f749 [ 866.256771][T17431] RDX: 000000000000ffe0 RSI: 00002000000000c0 RDI: 0000000000000004 [ 866.256783][T17431] RBP: 00007f6cb4dec090 R08: 0000200000000280 R09: 0000000000000010 [ 866.256795][T17431] R10: 00000000000000c1 R11: 0000000000000246 R12: 0000000000000002 [ 866.256807][T17431] R13: 00007f6cb41e6038 R14: 00007f6cb41e5fa0 R15: 00007f6cb430fa28 [ 866.256839][T17431] [ 866.566659][ C1] vkms_vblank_simulate: vblank timer overrun [ 866.719074][T17433] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2846'. [ 866.979234][T17433] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2846'. [ 867.237099][T17437] 8021q: adding VLAN 0 to HW filter on device bond1 [ 867.245028][T17437] bond0: (slave bond1): Enslaving as an active interface with an up link [ 867.696489][T15995] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 867.876946][ T5832] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 867.910452][T15995] usb 7-1: Using ep0 maxpacket: 8 [ 867.940848][T15995] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 868.201217][ T5832] usb 5-1: device descriptor read/64, error -71 [ 868.207666][T15995] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.215672][T15995] usb 7-1: Product: syz [ 868.367741][T15995] usb 7-1: Manufacturer: syz [ 868.373055][T15995] usb 7-1: SerialNumber: syz [ 868.546181][T15995] usb 7-1: config 0 descriptor?? [ 868.570952][ T5832] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 868.606201][T15995] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 868.649484][T15995] dvb-usb: bulk message failed: -22 (2/0) [ 868.677207][T15995] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 868.746783][T15995] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 868.767101][T15995] usb 7-1: media controller created [ 868.796877][ T5832] usb 5-1: device descriptor read/64, error -71 [ 868.809990][T17448] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2851'. [ 868.820107][T17448] netlink: 'syz.6.2851': attribute type 30 has an invalid length. [ 868.884960][ T8678] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.911138][T15995] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 868.934447][ T8678] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.944802][ T5832] usb usb5-port1: attempt power cycle [ 869.084772][ T5919] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 869.127671][ T8678] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 869.155609][ T8678] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 869.260145][ T5919] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 869.279598][T15995] cxusb: set interface failed [ 869.293330][T15995] dvb-usb: bulk message failed: -22 (1/0) [ 869.315094][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 869.387048][ T5832] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 869.409081][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 869.425797][T15995] DVB: Unable to find symbol mt352_attach() [ 869.432391][ T5832] usb 5-1: device descriptor read/8, error -71 [ 869.456033][T15995] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 869.485732][ T5919] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 869.575833][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.686756][ T5832] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 869.711040][ T5919] usb 1-1: Product: syz [ 869.738624][ T5832] usb 5-1: device descriptor read/8, error -71 [ 869.774621][ T5919] usb 1-1: Manufacturer: syz [ 869.923484][ T5832] usb usb5-port1: unable to enumerate USB device [ 869.928526][ T5919] usb 1-1: SerialNumber: syz [ 870.025761][ T5919] usb 1-1: config 0 descriptor?? [ 870.064356][T17469] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 870.083445][T15995] rc_core: IR keymap rc-dvico-portable not found [ 870.090116][T15995] Registered IR keymap rc-empty [ 870.096632][T15995] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 870.113521][ T5919] uvcvideo 1-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 870.119644][T15995] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input50 [ 870.140264][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.146768][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.162255][T15995] dvb-usb: schedule remote query interval to 100 msecs. [ 870.199820][T15995] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 870.210807][ T5919] uvcvideo 1-1:0.0: No valid video chain found. [ 870.232168][T15995] usb 7-1: USB disconnect, device number 6 [ 870.298643][ T5921] usb 1-1: USB disconnect, device number 95 [ 870.459092][T15995] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 870.541405][T17483] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2858'. [ 870.829290][ T5832] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 870.837067][T15995] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 871.016996][ T5832] usb 5-1: Using ep0 maxpacket: 8 [ 871.022202][T15995] usb 7-1: Using ep0 maxpacket: 16 [ 871.040769][ T5832] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 871.058219][T15995] usb 7-1: config 0 has no interfaces? [ 871.118757][T15995] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 871.195812][ T5832] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 871.214521][T15995] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 871.223738][ T5832] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 871.235899][T15995] usb 7-1: Manufacturer: syz [ 871.255908][ T5832] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 871.278330][T15995] usb 7-1: config 0 descriptor?? [ 871.292824][ T5832] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 871.306440][ T5832] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 871.315948][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.340174][ T5830] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 871.514509][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 871.530254][ T5830] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1088, setting to 1024 [ 871.559535][ T5830] usb 2-1: config 1 interface 0 has no altsetting 0 [ 871.572637][ T5830] usb 2-1: New USB device found, idVendor=056a, idProduct=033d, bcdDevice= 0.40 [ 871.582662][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.592037][ T5830] usb 2-1: Product: syz [ 871.596736][ T5830] usb 2-1: Manufacturer: 疧멾ẙ鮷ã™ç…€äš¥ê‚—èŠâ¥¥ìŠŒæ‡Šä­®åžŒìŒŸç¶˜ã¬µîŠã ±ê¦ëªî½¸î²­ê™¿æ½˜è¼£ç‹’շ檜â„ꟊ눛虢ê•ê±©ç»›ëº§è¶¢î¾šî¬´è”‰ç©­ïœ±ç­€æ’ªì£‚ᡈ屙鷾紻餦쀕鲳꬈î‹ï§°ì§ê“—藘立樬茶뷱ꞗ쪥ꊦ㪉玎î¨â¡Žã‡†ä¾½å’„à ±é–魰뺥Қ⧕熎⛚㚙ெí¡é¹¡ì¬¿ä½ŽêµŽå†éº´ç µëˆ¾î¾”彩é½Ó­åˆè°´ä‡ ë¢£ê²•ä›³ì‚蒟Ǫè£ì¶¹ëŠšë–©á¨ [ 871.656492][ T5832] usb 5-1: GET_CAPABILITIES returned 0 [ 871.657049][ T5919] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 871.669624][ T5832] usbtmc 5-1:16.0: can't read capabilities [ 871.670867][ T5830] usb 2-1: SerialNumber: syz [ 871.686830][T17476] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2856'. [ 871.723131][T17485] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 871.851240][T17483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.876742][T17483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.002410][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.035602][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.071984][ T5919] usb 6-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 872.119374][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.142163][T17485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.172481][ T5919] usb 6-1: config 0 descriptor?? [ 872.191754][T17485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.234902][T17485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.275479][T17485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.443074][T17506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.443408][T17506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.571861][ T5830] usbhid 2-1:1.0: can't add hid device: -71 [ 872.571985][ T5830] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 872.585441][ T5830] usb 2-1: USB disconnect, device number 121 [ 872.599170][ T5921] usb 5-1: USB disconnect, device number 102 [ 872.735489][ T5919] usbhid 6-1:0.0: can't add hid device: -71 [ 872.735600][ T5919] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 872.742281][ T5919] usb 6-1: USB disconnect, device number 49 [ 872.992402][T15995] usb 7-1: USB disconnect, device number 7 [ 873.537470][T15995] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 873.625770][T17531] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 873.708154][T15995] usb 1-1: Using ep0 maxpacket: 8 [ 873.716201][T15995] usb 1-1: config 0 has an invalid interface number: 40 but max is 0 [ 873.959522][T15995] usb 1-1: config 0 has no interface number 0 [ 874.013988][T15995] usb 1-1: config 0 interface 40 altsetting 0 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 874.103842][T15995] usb 1-1: config 0 interface 40 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 874.151587][T15995] usb 1-1: New USB device found, idVendor=413c, idProduct=8114, bcdDevice=3c.1a [ 874.166441][T15995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.322829][T15995] usb 1-1: Product: syz [ 874.345042][T15995] usb 1-1: Manufacturer: syz [ 874.381382][T15995] usb 1-1: SerialNumber: syz [ 874.413748][T15995] usb 1-1: config 0 descriptor?? [ 874.434384][T15995] option 1-1:0.40: GSM modem (1-port) converter detected [ 874.635762][T15995] usb 1-1: USB disconnect, device number 96 [ 874.655934][T15995] option 1-1:0.40: device disconnected [ 875.129022][T17547] FAULT_INJECTION: forcing a failure. [ 875.129022][T17547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 875.162136][T17547] CPU: 1 UID: 0 PID: 17547 Comm: syz.1.2879 Not tainted syzkaller #0 PREEMPT(full) [ 875.162162][T17547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 875.162174][T17547] Call Trace: [ 875.162182][T17547] [ 875.162191][T17547] dump_stack_lvl+0x189/0x250 [ 875.162219][T17547] ? __pfx____ratelimit+0x10/0x10 [ 875.162242][T17547] ? __pfx_dump_stack_lvl+0x10/0x10 [ 875.162264][T17547] ? __pfx__printk+0x10/0x10 [ 875.162295][T17547] should_fail_ex+0x414/0x560 [ 875.162324][T17547] _copy_to_user+0x31/0xb0 [ 875.162349][T17547] simple_read_from_buffer+0xe1/0x170 [ 875.162379][T17547] proc_fail_nth_read+0x1b3/0x220 [ 875.162404][T17547] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 875.162429][T17547] ? rw_verify_area+0x2a6/0x4d0 [ 875.162454][T17547] ? __lock_acquire+0xab9/0xd20 [ 875.162470][T17547] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 875.162492][T17547] vfs_read+0x200/0xa30 [ 875.162514][T17547] ? fdget_pos+0x247/0x320 [ 875.162535][T17547] ? __pfx___mutex_lock+0x10/0x10 [ 875.162561][T17547] ? __pfx_vfs_read+0x10/0x10 [ 875.162585][T17547] ? __fget_files+0x2a/0x420 [ 875.162607][T17547] ? __fget_files+0x3a0/0x420 [ 875.162623][T17547] ? __fget_files+0x2a/0x420 [ 875.162649][T17547] ksys_read+0x145/0x250 [ 875.162671][T17547] ? __fget_files+0x2a/0x420 [ 875.162688][T17547] ? __pfx_ksys_read+0x10/0x10 [ 875.162714][T17547] ? do_syscall_64+0xbe/0xfa0 [ 875.162748][T17547] do_syscall_64+0xfa/0xfa0 [ 875.162771][T17547] ? lockdep_hardirqs_on+0x9c/0x150 [ 875.162793][T17547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.162811][T17547] ? clear_bhb_loop+0x60/0xb0 [ 875.162834][T17547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.162851][T17547] RIP: 0033:0x7f7d4cd8e15c [ 875.162868][T17547] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 875.162883][T17547] RSP: 002b:00007f7d4afee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 875.162903][T17547] RAX: ffffffffffffffda RBX: 00007f7d4cfe5fa0 RCX: 00007f7d4cd8e15c [ 875.162917][T17547] RDX: 000000000000000f RSI: 00007f7d4afee0a0 RDI: 0000000000000004 [ 875.162929][T17547] RBP: 00007f7d4afee090 R08: 0000000000000000 R09: 0000000000000000 [ 875.162940][T17547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.162951][T17547] R13: 00007f7d4cfe6038 R14: 00007f7d4cfe5fa0 R15: 00007f7d4d10fa28 [ 875.162983][T17547] [ 875.402949][ C1] vkms_vblank_simulate: vblank timer overrun [ 875.460323][T17546] loop9: detected capacity change from 0 to 7 [ 875.467236][T17546] Dev loop9: unable to read RDB block 7 [ 875.472801][T17546] loop9: AHDI p4 [ 875.476474][T17546] loop9: partition table partially beyond EOD, truncated [ 876.028211][T17559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 876.035106][T15995] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 876.209071][T15995] usb 1-1: Using ep0 maxpacket: 8 [ 876.226228][T15995] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 876.240453][T15995] usb 1-1: config 179 has no interface number 0 [ 876.248990][T15995] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 876.294732][T15995] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 876.329139][T15995] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 876.363664][T15995] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 876.390622][T15995] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 876.516415][T15995] usb 1-1: config 179 interface 65 has no altsetting 0 [ 876.516416][ T5919] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 876.516462][T15995] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 876.543316][T15995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.609008][T15995] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input51 [ 876.656548][ T5919] usb 2-1: device descriptor read/64, error -71 [ 876.738301][ T5186] input input51: unable to receive magic message: -110 [ 876.884146][ T5186] input input51: unable to receive magic message: -32 [ 877.020312][ T5919] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 877.064470][ T5186] input input51: unable to receive magic message: -32 [ 877.081197][T17552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.092877][ T5186] input input51: unable to receive magic message: -32 [ 877.116904][T17552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.129357][ T5186] input input51: unable to receive magic message: -32 [ 877.156989][ T5919] usb 2-1: device descriptor read/64, error -71 [ 877.170995][ T5921] usb 1-1: USB disconnect, device number 97 [ 877.171150][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 877.267724][ T5919] usb usb2-port1: attempt power cycle [ 877.626901][ T5919] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 877.681542][ T5919] usb 2-1: device descriptor read/8, error -71 [ 877.718141][T17570] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2889'. [ 877.742763][T17570] openvswitch: netlink: Flow actions attr not present in new flow. [ 877.956438][ T5919] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 878.034803][T17581] netlink: 'syz.0.2891': attribute type 10 has an invalid length. [ 878.053178][T17581] team0: Port device dummy0 added [ 878.377866][ T5919] usb 2-1: device descriptor read/8, error -71 [ 878.497055][ T5919] usb usb2-port1: unable to enumerate USB device [ 878.907104][T17590] xt_connbytes: Forcing CT accounting to be enabled [ 878.914087][T17590] xt_NFQUEUE: number of total queues is 0 [ 879.863553][ T5830] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 880.206590][ T5919] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 880.236949][ T5830] usb 7-1: Using ep0 maxpacket: 16 [ 880.356473][ T5830] usb 7-1: config 0 has no interfaces? [ 880.373286][ T5830] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 880.407031][ T5830] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 880.526374][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 880.546759][ T5830] usb 7-1: Manufacturer: syz [ 880.558579][ T5919] usb 5-1: config 0 has no interfaces? [ 880.572632][ T5919] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 880.577520][ T5830] usb 7-1: config 0 descriptor?? [ 880.656575][ T5919] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 880.766459][ T5919] usb 5-1: Manufacturer: syz [ 880.788554][ T5919] usb 5-1: config 0 descriptor?? [ 880.864760][T17617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2901'. [ 881.037037][T17605] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2898'. [ 882.299633][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 882.551432][ T5919] usb 7-1: USB disconnect, device number 8 [ 882.848046][T17636] FAULT_INJECTION: forcing a failure. [ 882.848046][T17636] name failslab, interval 1, probability 0, space 0, times 0 [ 882.884868][T17636] CPU: 0 UID: 0 PID: 17636 Comm: syz.6.2907 Not tainted syzkaller #0 PREEMPT(full) [ 882.884892][T17636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 882.884904][T17636] Call Trace: [ 882.884911][T17636] [ 882.884919][T17636] dump_stack_lvl+0x189/0x250 [ 882.884945][T17636] ? __pfx____ratelimit+0x10/0x10 [ 882.884967][T17636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 882.884988][T17636] ? __pfx__printk+0x10/0x10 [ 882.885013][T17636] ? __pfx___might_resched+0x10/0x10 [ 882.885030][T17636] ? fs_reclaim_acquire+0x7d/0x100 [ 882.885059][T17636] should_fail_ex+0x414/0x560 [ 882.885089][T17636] should_failslab+0xa8/0x100 [ 882.885109][T17636] __kmalloc_cache_noprof+0x6f/0x6f0 [ 882.885133][T17636] ? sctp_association_new+0x89/0x25f0 [ 882.885159][T17636] sctp_association_new+0x89/0x25f0 [ 882.885177][T17636] ? sctp_do_bind+0x65a/0x940 [ 882.885205][T17636] sctp_connect_new_asoc+0x2c5/0x690 [ 882.885226][T17636] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 882.885243][T17636] ? __local_bh_enable_ip+0x12d/0x1c0 [ 882.885270][T17636] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 882.885289][T17636] ? security_sctp_bind_connect+0x7e/0x2e0 [ 882.885313][T17636] sctp_sendmsg+0x155c/0x2810 [ 882.885344][T17636] ? __pfx_sctp_sendmsg+0x10/0x10 [ 882.885365][T17636] ? aa_sk_perm+0x81e/0x950 [ 882.885392][T17636] ? __pfx_aa_sk_perm+0x10/0x10 [ 882.885418][T17636] ? sock_rps_record_flow+0x19/0x410 [ 882.885439][T17636] ? inet_sendmsg+0x2f4/0x370 [ 882.885460][T17636] __sock_sendmsg+0x19c/0x270 [ 882.885487][T17636] ____sys_sendmsg+0x52d/0x830 [ 882.885511][T17636] ? __pfx_____sys_sendmsg+0x10/0x10 [ 882.885537][T17636] ? import_iovec+0x74/0xa0 [ 882.885561][T17636] ___sys_sendmsg+0x21f/0x2a0 [ 882.885580][T17636] ? __pfx____sys_sendmsg+0x10/0x10 [ 882.885633][T17636] ? __fget_files+0x2a/0x420 [ 882.885646][T17636] ? __fget_files+0x3a0/0x420 [ 882.885668][T17636] __sys_sendmmsg+0x227/0x430 [ 882.885688][T17636] ? __pfx___sys_sendmmsg+0x10/0x10 [ 882.885710][T17636] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 882.885745][T17636] ? ksys_write+0x22a/0x250 [ 882.885766][T17636] ? __pfx_ksys_write+0x10/0x10 [ 882.885789][T17636] __x64_sys_sendmmsg+0xa0/0xc0 [ 882.885806][T17636] do_syscall_64+0xfa/0xfa0 [ 882.885825][T17636] ? lockdep_hardirqs_on+0x9c/0x150 [ 882.885843][T17636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.885859][T17636] ? clear_bhb_loop+0x60/0xb0 [ 882.885876][T17636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.885889][T17636] RIP: 0033:0x7f7b6538f749 [ 882.885903][T17636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 882.885916][T17636] RSP: 002b:00007f7b661bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 882.885933][T17636] RAX: ffffffffffffffda RBX: 00007f7b655e6180 RCX: 00007f7b6538f749 [ 882.885944][T17636] RDX: 0000000000000001 RSI: 0000200000003f40 RDI: 0000000000000005 [ 882.885954][T17636] RBP: 00007f7b661bf090 R08: 0000000000000000 R09: 0000000000000000 [ 882.885963][T17636] R10: 00000000200000d0 R11: 0000000000000246 R12: 0000000000000001 [ 882.885973][T17636] R13: 00007f7b655e6218 R14: 00007f7b655e6180 R15: 00007f7b6570fa28 [ 882.885997][T17636] [ 883.558497][ T5919] usb 5-1: USB disconnect, device number 103 [ 884.875122][T17665] Invalid logical block size (65474) [ 884.966459][ T43] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 885.161274][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 885.205437][ T43] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 885.425177][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 885.442867][ T43] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 885.476640][ T5921] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 885.790403][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.987641][ T43] usb 5-1: config 0 descriptor?? [ 886.018665][ T43] em28xx 5-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 886.064943][ T43] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 886.236783][ T5921] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 886.254372][ T5921] usb 2-1: config 0 has no interface number 0 [ 886.266794][ T43] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 886.274170][ T43] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 886.539520][ T5921] usb 2-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 886.560804][ T43] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 886.581053][ T43] em28xx 5-1:0.0: No AC97 audio processor [ 886.598505][ T5921] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 886.611508][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.652026][ T5921] usb 2-1: Product: syz [ 886.663198][ T43] usb 5-1: USB disconnect, device number 104 [ 886.679575][ T5921] usb 2-1: Manufacturer: syz [ 886.718498][ T43] em28xx 5-1:0.0: Disconnecting em28xx [ 886.724028][ T5921] usb 2-1: SerialNumber: syz [ 886.749772][ T5921] usb 2-1: config 0 descriptor?? [ 886.770224][ T43] em28xx 5-1:0.0: Freeing device [ 886.782308][T17670] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 886.828957][ T5921] plusb 2-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 3e:8f:a0:69:67:cf [ 887.079191][ T5905] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 887.269828][ T5905] usb 6-1: config 0 interface 0 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 887.295184][T17692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.325718][ T5905] usb 6-1: config 0 interface 0 has no altsetting 0 [ 887.343891][T17692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.352507][ T5905] usb 6-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad [ 887.385083][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.395406][T17692] vivid-004: disconnect [ 887.434471][ T5905] usb 6-1: config 0 descriptor?? [ 887.508959][T17690] vivid-004: reconnect [ 887.526801][ T5921] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 887.646085][ T30] audit: type=1326 audit(1763970069.252:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17701 comm="syz.0.2927" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe43ad8f749 code=0x0 [ 887.674772][ T5905] usb 6-1: string descriptor 0 read error: -71 [ 887.690400][ T5905] usb 6-1: ucan: probing device on interface #0 [ 887.715690][ T5905] usb 6-1: ucan: invalid endpoint configuration [ 887.739925][ T5905] usb 6-1: ucan: probe failed; try to update the device firmware [ 887.768665][ T5905] usb 6-1: USB disconnect, device number 50 [ 887.797178][T17710] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2927'. [ 887.943882][T17714] FAULT_INJECTION: forcing a failure. [ 887.943882][T17714] name failslab, interval 1, probability 0, space 0, times 0 [ 887.962658][T17714] CPU: 1 UID: 0 PID: 17714 Comm: syz.4.2930 Not tainted syzkaller #0 PREEMPT(full) [ 887.962685][T17714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 887.962696][T17714] Call Trace: [ 887.962704][T17714] [ 887.962712][T17714] dump_stack_lvl+0x189/0x250 [ 887.962742][T17714] ? __pfx____ratelimit+0x10/0x10 [ 887.962766][T17714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 887.962789][T17714] ? __pfx__printk+0x10/0x10 [ 887.962823][T17714] should_fail_ex+0x414/0x560 [ 887.962853][T17714] should_failslab+0xa8/0x100 [ 887.962873][T17714] __kmalloc_cache_noprof+0x6f/0x6f0 [ 887.962897][T17714] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 887.962918][T17714] ? sctp_add_bind_addr+0x8c/0x370 [ 887.962940][T17714] ? sctp_add_bind_addr+0xb0/0x370 [ 887.962968][T17714] sctp_add_bind_addr+0x8c/0x370 [ 887.962996][T17714] sctp_copy_local_addr_list+0x30b/0x4e0 [ 887.963028][T17714] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 887.963051][T17714] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 887.963077][T17714] ? sctp_v4_is_any+0x35/0x60 [ 887.963099][T17714] ? sctp_copy_one_addr+0x93/0x360 [ 887.963124][T17714] sctp_bind_addr_copy+0xb3/0x3c0 [ 887.963150][T17714] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 887.963175][T17714] sctp_connect_new_asoc+0x2e0/0x690 [ 887.963197][T17714] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 887.963214][T17714] ? __local_bh_enable_ip+0x12d/0x1c0 [ 887.963242][T17714] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 887.963260][T17714] ? security_sctp_bind_connect+0x7e/0x2e0 [ 887.963285][T17714] sctp_sendmsg+0x155c/0x2810 [ 887.963316][T17714] ? __pfx_sctp_sendmsg+0x10/0x10 [ 887.963339][T17714] ? aa_sk_perm+0x81e/0x950 [ 887.963375][T17714] ? __pfx_aa_sk_perm+0x10/0x10 [ 887.963402][T17714] ? sock_rps_record_flow+0x19/0x410 [ 887.963424][T17714] ? inet_sendmsg+0x2f4/0x370 [ 887.963446][T17714] __sock_sendmsg+0x19c/0x270 [ 887.963472][T17714] __sys_sendto+0x3bd/0x520 [ 887.963493][T17714] ? __pfx___sys_sendto+0x10/0x10 [ 887.963507][T17714] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 887.963544][T17714] ? __fget_files+0x3a0/0x420 [ 887.963572][T17714] ? ksys_write+0x22a/0x250 [ 887.963597][T17714] ? __pfx_ksys_write+0x10/0x10 [ 887.963625][T17714] __x64_sys_sendto+0xde/0x100 [ 887.963647][T17714] do_syscall_64+0xfa/0xfa0 [ 887.963670][T17714] ? lockdep_hardirqs_on+0x9c/0x150 [ 887.963693][T17714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.963711][T17714] ? clear_bhb_loop+0x60/0xb0 [ 887.963732][T17714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.963748][T17714] RIP: 0033:0x7f6cb3f8f749 [ 887.963765][T17714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 887.963781][T17714] RSP: 002b:00007f6cb4dec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 887.963801][T17714] RAX: ffffffffffffffda RBX: 00007f6cb41e5fa0 RCX: 00007f6cb3f8f749 [ 887.963814][T17714] RDX: 000000000000ffe0 RSI: 00002000000000c0 RDI: 0000000000000008 [ 887.963826][T17714] RBP: 00007f6cb4dec090 R08: 0000200000000280 R09: 0000000000000010 [ 887.963837][T17714] R10: 00000000000000c1 R11: 0000000000000246 R12: 0000000000000002 [ 887.963848][T17714] R13: 00007f6cb41e6038 R14: 00007f6cb41e5fa0 R15: 00007f6cb430fa28 [ 887.963880][T17714] [ 888.560653][ T5830] usb 2-1: USB disconnect, device number 126 [ 888.569632][ T5830] plusb 2-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 889.040756][T17743] binder: 17733:17743 ioctl c018620c 2000000002c0 returned -1 [ 889.056239][T17743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2936'. [ 889.706485][T15995] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 890.038921][T15995] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 890.048091][T15995] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.139279][T15995] usb 1-1: config 0 has no interfaces? [ 890.150168][T15995] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 890.173347][T15995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.468402][T15995] usb 1-1: config 0 descriptor?? [ 890.746435][T15995] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 890.896429][T15995] usb 7-1: device descriptor read/64, error -71 [ 891.137397][T17764] netlink: 508 bytes leftover after parsing attributes in process `syz.5.2940'. [ 891.171696][T17764] netlink: 764 bytes leftover after parsing attributes in process `syz.5.2940'. [ 891.209294][T17764] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2940'. [ 891.356391][T15995] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 891.686419][T15995] usb 7-1: device descriptor read/64, error -71 [ 891.797949][T15995] usb usb7-port1: attempt power cycle [ 892.016400][ T5920] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 892.136436][T15995] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 892.169375][T15995] usb 7-1: device descriptor read/8, error -71 [ 892.176445][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 892.203487][ T5920] usb 5-1: config 0 has an invalid interface number: 124 but max is 0 [ 892.225148][ T5920] usb 5-1: config 0 has no interface number 0 [ 892.248114][ T5920] usb 5-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=72.01 [ 892.262873][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.283668][ T5920] usb 5-1: Product: syz [ 892.295853][ T5920] usb 5-1: Manufacturer: syz [ 892.305981][ T5920] usb 5-1: SerialNumber: syz [ 892.329070][ T5920] usb 5-1: config 0 descriptor?? [ 892.476661][T15995] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 892.507329][T15995] usb 7-1: device descriptor read/8, error -71 [ 892.557226][T17776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.580405][T17776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.632075][ T5919] usb 5-1: USB disconnect, device number 106 [ 892.636819][T15995] usb usb7-port1: unable to enumerate USB device [ 892.717652][T17789] xt_SECMARK: invalid mode: 2 [ 892.990449][ T5920] usb 1-1: USB disconnect, device number 98 [ 893.672959][ T30] audit: type=1326 audit(1763970075.282:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17802 comm="syz.6.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6538f749 code=0x7ffc0000 [ 893.770424][ T30] audit: type=1326 audit(1763970075.282:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17802 comm="syz.6.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6538f749 code=0x7ffc0000 [ 893.827601][ T30] audit: type=1326 audit(1763970075.282:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17802 comm="syz.6.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f7b6538f749 code=0x7ffc0000 [ 894.160940][ T30] audit: type=1326 audit(1763970075.282:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17802 comm="syz.6.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6538f749 code=0x7ffc0000 [ 894.498638][T17815] 8021q: adding VLAN 0 to HW filter on device bond3 [ 894.505727][ T30] audit: type=1326 audit(1763970075.282:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17802 comm="syz.6.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6538f749 code=0x7ffc0000 [ 894.528070][ C0] vkms_vblank_simulate: vblank timer overrun [ 894.636882][T17815] bond3: entered promiscuous mode [ 894.643127][T17815] bond0: (slave bond3): Enslaving as an active interface with an up link [ 894.656763][ T30] audit: type=1326 audit(1763970075.282:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17802 comm="syz.6.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7b6538f749 code=0x7ffc0000 [ 894.678988][ C0] vkms_vblank_simulate: vblank timer overrun [ 894.783483][ T30] audit: type=1326 audit(1763970075.282:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17802 comm="syz.6.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6538f749 code=0x7ffc0000 [ 894.901017][ T30] audit: type=1326 audit(1763970075.282:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17802 comm="syz.6.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f7b6538f749 code=0x7ffc0000 [ 894.975080][ T30] audit: type=1326 audit(1763970075.282:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17802 comm="syz.6.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6538f749 code=0x7ffc0000 [ 895.056427][ T30] audit: type=1326 audit(1763970075.282:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17802 comm="syz.6.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f7b6538f749 code=0x7ffc0000 [ 895.078695][ C0] vkms_vblank_simulate: vblank timer overrun [ 895.146467][ T5920] usb 6-1: new low-speed USB device number 51 using dummy_hcd [ 895.296411][ T5920] usb 6-1: Invalid ep0 maxpacket: 64 [ 895.373299][T17831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2955'. [ 895.428390][T17832] syzkaller1: entered promiscuous mode [ 895.434045][T17832] syzkaller1: entered allmulticast mode [ 895.448914][ T5920] usb 6-1: new low-speed USB device number 52 using dummy_hcd [ 895.616444][ T5920] usb 6-1: Invalid ep0 maxpacket: 64 [ 895.626498][T15995] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 895.647290][ T5920] usb usb6-port1: attempt power cycle [ 895.789204][T15995] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 895.820664][T15995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.848529][T15995] usb 2-1: config 0 descriptor?? [ 895.868009][T15995] cp210x 2-1:0.0: cp210x converter detected [ 895.996540][ T5920] usb 6-1: new low-speed USB device number 53 using dummy_hcd [ 896.027643][ T5920] usb 6-1: Invalid ep0 maxpacket: 64 [ 896.166404][ T5920] usb 6-1: new low-speed USB device number 54 using dummy_hcd [ 896.237792][ T5920] usb 6-1: Invalid ep0 maxpacket: 64 [ 896.261673][ T5920] usb usb6-port1: unable to enumerate USB device [ 896.283182][T15995] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 896.383657][T15995] usb 2-1: cp210x converter now attached to ttyUSB0 [ 896.436186][T17847] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 898.233854][T17866] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 898.240434][T17866] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 898.245443][ T5832] usb 2-1: USB disconnect, device number 127 [ 898.256976][T17866] vhci_hcd vhci_hcd.0: Device attached [ 898.529683][ T5832] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 898.584695][ T5832] cp210x 2-1:0.0: device disconnected [ 898.597071][ T5920] vhci_hcd: vhci_device speed not set [ 898.676425][ T5920] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 898.746712][ T5919] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 898.852600][T17875] vivid-003: disconnect [ 898.897696][ T5919] usb 6-1: device descriptor read/64, error -71 [ 898.904595][T17875] vivid-003: reconnect [ 899.146982][ T5919] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 899.316397][ T5919] usb 6-1: device descriptor read/64, error -71 [ 899.426802][ T5919] usb usb6-port1: attempt power cycle [ 899.638267][T15995] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 899.786446][ T5919] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 899.827538][ T5919] usb 6-1: device descriptor read/8, error -71 [ 899.851225][T15995] usb 1-1: Using ep0 maxpacket: 16 [ 900.094768][T17897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.106485][ T5919] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 900.225158][T17897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.246818][ T5919] usb 6-1: device descriptor read/8, error -71 [ 900.279699][T17897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.293666][T17897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.396837][ T5919] usb usb6-port1: unable to enumerate USB device [ 900.866584][T17912] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2977'. [ 900.900094][T17912] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2977'. [ 901.182395][T17919] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 901.360254][T17867] vhci_hcd: connection reset by peer [ 901.435915][ T8679] vhci_hcd: stop threads [ 901.449002][ T8679] vhci_hcd: release socket [ 901.487728][ T8679] vhci_hcd: disconnect device [ 901.746401][ T5919] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 901.774652][T17925] 8021q: VLANs not supported on gre0 [ 901.896646][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 901.955344][ T5919] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 902.021774][ T5919] usb 5-1: config 0 has no interface number 0 [ 902.078731][ T5919] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 902.154493][ T5919] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 902.211232][ T5919] usb 5-1: New USB device found, idVendor=07c0, idProduct=1500, bcdDevice=b8.c5 [ 902.211263][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.211284][ T5919] usb 5-1: Product: syz [ 902.211299][ T5919] usb 5-1: Manufacturer: syz [ 902.211314][ T5919] usb 5-1: SerialNumber: syz [ 902.213636][ T5919] usb 5-1: config 0 descriptor?? [ 902.383383][T15995] usb 1-1: unable to get BOS descriptor or descriptor too short [ 902.406588][T15995] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 902.406631][T15995] usb 1-1: can't read configurations, error -71 [ 902.422873][ T5919] iowarrior 5-1:0.186: IOWarrior product=0x1500, serial= interface=186 now attached to iowarrior0 [ 902.620016][T17921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.620384][T17921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.982616][T17935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.009858][T17935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.049785][T17939] netlink: 'syz.1.2984': attribute type 32 has an invalid length. [ 903.142134][ C0] iowarrior 5-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1 [ 903.155849][ T43] usb 5-1: USB disconnect, device number 107 [ 903.816515][ T5920] vhci_hcd: vhci_device speed not set [ 904.908183][T17972] syz.1.2992 (17972): drop_caches: 2 [ 906.801722][T17983] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 907.259410][T17988] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2996'. [ 907.294187][T17988] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2996'. [ 908.346412][ T5919] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 908.539378][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 908.559643][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 908.589767][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 908.613705][ T5919] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 908.636342][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.654803][ T5919] usb 5-1: Product: syz [ 908.659348][ T5919] usb 5-1: Manufacturer: syz [ 908.663953][ T5919] usb 5-1: SerialNumber: syz [ 908.687431][ T5919] usb 5-1: config 0 descriptor?? [ 908.715509][ T5919] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 908.735273][ T5919] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 908.856878][ T43] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 909.016358][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 909.098557][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.171357][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 909.185915][ T43] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 909.196057][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.209454][ T43] usb 6-1: config 0 descriptor?? [ 909.219351][ T43] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 909.374304][ T5919] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 909.386933][ T5919] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 909.451335][T18019] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3007'. [ 909.595207][ T5919] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 909.609986][ T5919] em28xx 5-1:0.0: No AC97 audio processor [ 910.998445][T15995] usb 6-1: USB disconnect, device number 59 [ 911.077647][ T5919] usb 5-1: USB disconnect, device number 108 [ 911.084702][ T5919] em28xx 5-1:0.0: Disconnecting em28xx [ 911.128731][ T5919] em28xx 5-1:0.0: Freeing device [ 911.749940][T18055] fuse: Bad value for 'fd' [ 912.543422][T18073] Invalid logical block size (65519) [ 912.704613][T18083] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3024'. [ 912.757869][T18083] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3024'. [ 912.797401][ T5905] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 912.988597][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 913.026737][ T5905] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 913.043378][ T5905] usb 2-1: config 254 has no interface number 0 [ 913.078882][ T5905] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 913.131578][ T5905] usb 2-1: config 254 interface 235 has no altsetting 0 [ 913.249646][ T5905] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 913.321856][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.548103][ T5905] usb 2-1: Product: syz [ 913.552308][ T5905] usb 2-1: Manufacturer: syz [ 913.688413][ T5905] usb 2-1: SerialNumber: syz [ 913.758344][T18071] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 913.862227][T18109] trusted_key: encrypted_key: master key parameter 'd%fault' is invalid [ 914.000628][T18071] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 914.062246][ T5905] usbtest 2-1:254.235: Linux gadget zero [ 914.107635][ T5905] usbtest 2-1:254.235: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 914.264089][T18071] loop6: detected capacity change from 0 to 2560 [ 914.274194][T18071] buffer_io_error: 23 callbacks suppressed [ 914.274212][T18071] Buffer I/O error on dev loop6, logical block 0, async page read [ 914.344659][T18071] Buffer I/O error on dev loop6, logical block 0, async page read [ 914.414832][T18071] Buffer I/O error on dev loop6, logical block 0, async page read [ 914.423087][T18071] Buffer I/O error on dev loop6, logical block 0, async page read [ 914.432765][T18071] Buffer I/O error on dev loop6, logical block 0, async page read [ 914.441727][T18071] Buffer I/O error on dev loop6, logical block 0, async page read [ 914.449841][T18071] Buffer I/O error on dev loop6, logical block 0, async page read [ 914.496593][T18071] Buffer I/O error on dev loop6, logical block 0, async page read [ 914.525053][T18071] ldm_validate_partition_table(): Disk read failed. [ 914.657200][T18071] Buffer I/O error on dev loop6, logical block 0, async page read [ 914.696519][T18071] Buffer I/O error on dev loop6, logical block 0, async page read [ 914.710962][T18071] Dev loop6: unable to read RDB block 0 [ 914.734889][T18071] loop6: unable to read partition table [ 914.779768][T18071] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 914.797888][T15995] usb 2-1: USB disconnect, device number 2 [ 915.903340][T18130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.967797][T18130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.376464][ T5920] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 916.620195][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 916.651859][ T5920] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 916.680679][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.723823][ T5920] usb 1-1: config 0 descriptor?? [ 916.744682][ T5920] gspca_main: sunplus-2.14.0 probing 041e:400b [ 917.537856][ T30] audit: type=1326 audit(1763970099.152:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18145 comm="syz.4.3045" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cb3f8f749 code=0x0 [ 917.966004][T18131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.975549][T18130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.033565][T18130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.100563][T18131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.111742][ T5920] gspca_sunplus: reg_w_riv err -71 [ 918.117272][ T5920] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 918.266198][ T5920] usb 1-1: USB disconnect, device number 101 [ 919.206417][ T5921] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 919.329377][ T5832] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 919.426478][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 919.443848][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 919.469419][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 919.469587][T15995] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 919.487456][ T5921] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 919.504612][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.521391][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.526365][ T5921] usb 5-1: Product: syz [ 919.532739][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.556373][ T5921] usb 5-1: Manufacturer: syz [ 919.566673][ T5921] usb 5-1: SerialNumber: syz [ 919.578963][ T5832] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 919.601377][ T5921] usb 5-1: config 0 descriptor?? [ 919.606357][ T5832] usb 1-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 919.606386][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.646414][T15995] usb 7-1: Using ep0 maxpacket: 32 [ 919.656012][T15995] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 919.674970][ T5832] usb 1-1: config 0 descriptor?? [ 919.684572][ T5921] streamzap 5-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 919.701015][T15995] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 919.756554][T15995] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 919.779732][T15995] usb 7-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 919.796346][T15995] usb 7-1: Product: syz [ 919.806396][T15995] usb 7-1: Manufacturer: syz [ 919.816356][T15995] usb 7-1: SerialNumber: syz [ 919.836649][T15995] usb 7-1: config 0 descriptor?? [ 919.865617][ T5921] usb 5-1: USB disconnect, device number 109 [ 919.873979][T15995] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 920.061699][ T5920] usb 7-1: USB disconnect, device number 14 [ 920.069010][ T8678] usb 7-1: Failed to submit usb control message: -71 [ 920.105251][ T5832] elecom 0003:056E:010C.001B: unknown main item tag 0x0 [ 920.115522][ T8678] usb 7-1: unable to send the bmi data to the device: -71 [ 920.134046][ T5832] elecom 0003:056E:010C.001B: unknown main item tag 0x0 [ 920.151649][ T8678] usb 7-1: unable to get target info from device [ 920.166339][ T8678] usb 7-1: could not get target info (-71) [ 920.172394][ T5832] elecom 0003:056E:010C.001B: unknown main item tag 0x0 [ 920.182532][ T8678] usb 7-1: could not probe fw (-71) [ 920.192678][ T5832] elecom 0003:056E:010C.001B: unknown main item tag 0x0 [ 920.207740][ T5832] elecom 0003:056E:010C.001B: unknown main item tag 0x0 [ 920.247274][ T5832] elecom 0003:056E:010C.001B: unknown main item tag 0x0 [ 920.264640][ T5832] elecom 0003:056E:010C.001B: unknown main item tag 0x0 [ 920.274789][ T5832] elecom 0003:056E:010C.001B: unknown main item tag 0x0 [ 920.313064][ T5832] elecom 0003:056E:010C.001B: unknown main item tag 0x0 [ 920.335746][T18173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.354923][ T5832] elecom 0003:056E:010C.001B: unknown main item tag 0x0 [ 920.387920][ T5832] elecom 0003:056E:010C.001B: hidraw0: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.0-1/input0 [ 920.411186][T18173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.523659][ T5921] usb 1-1: USB disconnect, device number 102 [ 920.730719][T18190] fido_id[18190]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 920.752659][T18196] IPv6: NLM_F_CREATE should be specified when creating new route [ 922.576430][ T5832] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 922.798754][ T5832] usb 5-1: Using ep0 maxpacket: 16 [ 922.806362][ T5832] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 922.816700][ T5832] usb 5-1: config 0 has no interfaces? [ 922.823811][ T5832] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 922.833272][ T5832] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 922.841425][ T5832] usb 5-1: Manufacturer: syz [ 922.847922][ T5832] usb 5-1: config 0 descriptor?? [ 923.129204][T18218] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3065'. [ 923.746640][ T30] audit: type=1326 audit(1763970105.342:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18228 comm="syz.5.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852058f749 code=0x7ffc0000 [ 923.809001][ T30] audit: type=1326 audit(1763970105.342:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18228 comm="syz.5.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f852058f749 code=0x7ffc0000 [ 923.865145][ T30] audit: type=1326 audit(1763970105.342:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18228 comm="syz.5.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852058f749 code=0x7ffc0000 [ 923.961971][ T30] audit: type=1326 audit(1763970105.342:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18228 comm="syz.5.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f852058f749 code=0x7ffc0000 [ 924.080903][ T30] audit: type=1326 audit(1763970105.342:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18228 comm="syz.5.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852058f749 code=0x7ffc0000 [ 924.170693][ T30] audit: type=1326 audit(1763970105.342:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18228 comm="syz.5.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f852058f749 code=0x7ffc0000 [ 924.215112][T18236] syzkaller0: entered promiscuous mode [ 924.286488][T18236] syzkaller0: entered allmulticast mode [ 924.312907][T18236] tipc: Started in network mode [ 924.319850][T18236] tipc: Node identity daff04d4133e, cluster identity 4711 [ 924.335721][T18236] tipc: Enabled bearer , priority 0 [ 924.347303][ T30] audit: type=1326 audit(1763970105.342:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18228 comm="syz.5.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852058f749 code=0x7ffc0000 [ 924.400978][T18235] tipc: Resetting bearer [ 924.466733][T18235] tipc: Disabling bearer [ 924.474000][ T30] audit: type=1326 audit(1763970105.342:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18228 comm="syz.5.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f852058f749 code=0x7ffc0000 [ 924.671149][ T5832] usb 5-1: USB disconnect, device number 110 [ 925.132745][T18251] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3077'. [ 925.396666][ T5832] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 925.566525][ T5832] usb 1-1: Using ep0 maxpacket: 8 [ 925.605675][ T5832] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 925.620739][ T5832] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 925.639739][ T5832] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 925.651432][ T5832] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 925.662865][ T5832] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 925.685028][ T5832] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 925.688270][T18254] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 925.694951][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.707006][T18255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3079'. [ 925.722884][T18254] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3078'. [ 925.826945][T18259] netlink: 'syz.6.3081': attribute type 10 has an invalid length. [ 925.850240][T18259] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 925.925698][ T5832] usb 1-1: GET_CAPABILITIES returned 0 [ 925.931671][T18266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3080'. [ 925.951626][ T5832] usbtmc 1-1:16.0: can't read capabilities [ 926.152681][T18251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.195325][T18251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.464340][T18281] FAULT_INJECTION: forcing a failure. [ 926.464340][T18281] name failslab, interval 1, probability 0, space 0, times 0 [ 926.546780][T18281] CPU: 1 UID: 0 PID: 18281 Comm: syz.4.3086 Not tainted syzkaller #0 PREEMPT(full) [ 926.546805][T18281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 926.546814][T18281] Call Trace: [ 926.546819][T18281] [ 926.546824][T18281] dump_stack_lvl+0x189/0x250 [ 926.546842][T18281] ? __pfx____ratelimit+0x10/0x10 [ 926.546857][T18281] ? __pfx_dump_stack_lvl+0x10/0x10 [ 926.546870][T18281] ? __pfx__printk+0x10/0x10 [ 926.546888][T18281] should_fail_ex+0x414/0x560 [ 926.546907][T18281] should_failslab+0xa8/0x100 [ 926.546918][T18281] __kmalloc_cache_noprof+0x6f/0x6f0 [ 926.546933][T18281] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 926.546948][T18281] ? sctp_add_bind_addr+0x8c/0x370 [ 926.546965][T18281] sctp_add_bind_addr+0x8c/0x370 [ 926.546980][T18281] sctp_copy_local_addr_list+0x30b/0x4e0 [ 926.546996][T18281] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 926.547009][T18281] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 926.547024][T18281] ? sctp_v6_is_any+0x64/0x80 [ 926.547038][T18281] ? sctp_copy_one_addr+0x93/0x360 [ 926.547053][T18281] sctp_bind_addr_copy+0xb3/0x3c0 [ 926.547069][T18281] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 926.547084][T18281] sctp_connect_new_asoc+0x2e0/0x690 [ 926.547096][T18281] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 926.547105][T18281] ? __local_bh_enable_ip+0x12d/0x1c0 [ 926.547121][T18281] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 926.547132][T18281] ? security_sctp_bind_connect+0x7e/0x2e0 [ 926.547146][T18281] sctp_sendmsg+0x155c/0x2810 [ 926.547162][T18281] ? __pfx_sctp_sendmsg+0x10/0x10 [ 926.547174][T18281] ? aa_sk_perm+0x81e/0x950 [ 926.547188][T18281] ? __lock_acquire+0xab9/0xd20 [ 926.547200][T18281] ? __pfx_aa_sk_perm+0x10/0x10 [ 926.547215][T18281] ? sock_rps_record_flow+0x19/0x410 [ 926.547227][T18281] ? inet_sendmsg+0x2f4/0x370 [ 926.547238][T18281] __sock_sendmsg+0x19c/0x270 [ 926.547255][T18281] ____sys_sendmsg+0x52d/0x830 [ 926.547268][T18281] ? __pfx_____sys_sendmsg+0x10/0x10 [ 926.547285][T18281] ? import_iovec+0x74/0xa0 [ 926.547300][T18281] ___sys_sendmsg+0x21f/0x2a0 [ 926.547312][T18281] ? __pfx____sys_sendmsg+0x10/0x10 [ 926.547349][T18281] ? __fget_files+0x2a/0x420 [ 926.547358][T18281] ? __fget_files+0x3a0/0x420 [ 926.547373][T18281] __sys_sendmmsg+0x227/0x430 [ 926.547387][T18281] ? __pfx___sys_sendmmsg+0x10/0x10 [ 926.547403][T18281] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 926.547428][T18281] ? ksys_write+0x22a/0x250 [ 926.547443][T18281] ? __pfx_ksys_write+0x10/0x10 [ 926.547459][T18281] __x64_sys_sendmmsg+0xa0/0xc0 [ 926.547471][T18281] do_syscall_64+0xfa/0xfa0 [ 926.547484][T18281] ? lockdep_hardirqs_on+0x9c/0x150 [ 926.547497][T18281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.547507][T18281] ? clear_bhb_loop+0x60/0xb0 [ 926.547519][T18281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.547528][T18281] RIP: 0033:0x7f6cb3f8f749 [ 926.547538][T18281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 926.547547][T18281] RSP: 002b:00007f6cb4dec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 926.547559][T18281] RAX: ffffffffffffffda RBX: 00007f6cb41e5fa0 RCX: 00007f6cb3f8f749 [ 926.547566][T18281] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 926.547573][T18281] RBP: 00007f6cb4dec090 R08: 0000000000000000 R09: 0000000000000000 [ 926.547579][T18281] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000002 [ 926.547585][T18281] R13: 00007f6cb41e6038 R14: 00007f6cb41e5fa0 R15: 00007f6cb430fa28 [ 926.547602][T18281] [ 927.328206][ T5920] usb 1-1: USB disconnect, device number 103 [ 927.636444][ T5832] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 927.942438][ T5832] usb 7-1: Using ep0 maxpacket: 16 [ 928.034460][ T5832] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.074208][ T5832] usb 7-1: config 0 has no interfaces? [ 928.107365][ T5832] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 928.138701][ T5832] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 928.171501][ T5832] usb 7-1: Manufacturer: syz [ 928.209446][ T5832] usb 7-1: config 0 descriptor?? [ 928.561161][T18280] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3085'. [ 928.841469][T18307] netlink: 'syz.5.3095': attribute type 1 has an invalid length. [ 929.367727][T18313] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3097'. [ 929.728297][T18316] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 931.126395][ T43] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 931.627602][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.646408][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.826433][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 932.117213][ T43] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 932.125259][ T43] usb 5-1: config 0 has no interface number 0 [ 932.134654][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.186224][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.189269][ T5832] usb 7-1: USB disconnect, device number 15 [ 932.196072][ T43] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 932.226696][ T31] INFO: task syz.3.2551:16175 blocked for more than 143 seconds. [ 932.255686][ T31] Not tainted syzkaller #0 [ 932.262856][ T31] Blocked by coredump. [ 932.267585][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 932.276355][ T31] task:syz.3.2551 state:D stack:25320 pid:16175 tgid:16174 ppid:11723 task_flags:0x400548 flags:0x00080000 [ 932.288377][ T31] Call Trace: [ 932.291689][ T31] [ 932.294631][ T31] __schedule+0x1798/0x4cc0 [ 932.301724][ T31] ? __pfx___schedule+0x10/0x10 [ 932.306911][ T31] ? schedule+0x91/0x360 [ 932.311265][ T31] schedule+0x165/0x360 [ 932.315439][ T31] schedule_preempt_disabled+0x13/0x30 [ 932.353317][ T31] __mutex_lock+0x7e6/0x1350 [ 932.376629][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.395214][ T31] ? __mutex_lock+0x5bb/0x1350 [ 932.404454][ T43] usb 5-1: config 0 descriptor?? [ 932.436482][ T31] ? io_uring_del_tctx_node+0xf0/0x2c0 [ 932.468474][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 932.644964][T18327] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3102'. [ 932.752340][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 932.787837][ T31] ? _raw_spin_unlock+0x28/0x50 [ 932.814666][ T31] ? xa_erase+0xd5/0xf0 [ 932.830440][ T31] io_uring_del_tctx_node+0xf0/0x2c0 [ 932.863535][ T31] io_uring_clean_tctx+0xd4/0x1a0 [ 932.881148][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 932.892514][ T31] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 932.906308][ T31] ? __lock_acquire+0xab9/0xd20 [ 932.911203][ T31] ? io_uring_drop_tctx_refs+0x108/0x1c0 [ 932.926771][ T31] io_uring_cancel_generic+0x6ca/0x7d0 [ 932.938315][ T31] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 932.952882][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 932.965900][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 932.975576][ T31] ? io_uring_unreg_ringfd+0x52f/0x540 [ 932.989820][ T31] do_exit+0x345/0x2300 [ 932.996353][ T31] ? cgroup_freezing+0x20/0x350 [ 933.009142][ T31] ? __pfx_do_exit+0x10/0x10 [ 933.020337][ T31] ? cgroup_freezing+0x20/0x350 [ 933.030199][ T31] ? cgroup_freezing+0x20/0x350 [ 933.040471][ T31] do_group_exit+0x21c/0x2d0 [ 933.052225][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 933.070921][ T31] get_signal+0x1285/0x1340 [ 933.082763][T18327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.093329][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 933.094224][T18327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.106720][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 933.119417][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 933.126670][ T43] usbhid 5-1:0.1: can't add hid device: -71 [ 933.143772][ T31] exit_to_user_mode_loop+0x72/0x130 [ 933.183049][ T31] do_syscall_64+0x2bd/0xfa0 [ 933.284849][ T43] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 933.295789][ T43] usb 5-1: USB disconnect, device number 111 [ 933.306502][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 933.338139][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.365322][ T31] ? clear_bhb_loop+0x60/0xb0 [ 933.399392][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.413751][ T31] RIP: 0033:0x7f1c7738f749 [ 933.422704][ T31] RSP: 002b:00007f1c782a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 933.439269][ T31] RAX: fffffffffffffe00 RBX: 00007f1c775e5fa0 RCX: 00007f1c7738f749 [ 933.456796][ T31] RDX: 0000000000000001 RSI: 0000200000001280 RDI: 0000000000000009 [ 933.476347][ T31] RBP: 00007f1c77413f91 R08: 0000000000000000 R09: 0000000000000000 [ 933.491510][ T31] R10: 1000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 933.516336][ T31] R13: 00007f1c775e6038 R14: 00007f1c775e5fa0 R15: 00007f1c7770fa28 [ 933.524446][ T31] [ 933.534730][ T31] INFO: task syz.3.2551:16176 blocked for more than 144 seconds. [ 933.566341][ T31] Not tainted syzkaller #0 [ 933.571406][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 933.600778][ T31] task:syz.3.2551 state:D stack:27688 pid:16176 tgid:16174 ppid:11723 task_flags:0x400140 flags:0x00080002 [ 933.627723][ T31] Call Trace: [ 933.636345][ T31] [ 933.642179][ T31] __schedule+0x1798/0x4cc0 [ 933.651185][ T31] ? __pfx___schedule+0x10/0x10 [ 933.659285][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 933.676811][ T31] ? schedule+0x91/0x360 [ 933.681114][ T31] schedule+0x165/0x360 [ 933.691031][ T31] schedule_preempt_disabled+0x13/0x30 [ 933.706333][ T31] __mutex_lock+0x7e6/0x1350 [ 933.714285][ T31] ? __mutex_lock+0x5bb/0x1350 [ 933.724349][ T31] ? seq_read_iter+0xb7/0xe20 [ 933.729956][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 933.735475][ T31] ? aa_file_perm+0x13a/0x1550 [ 933.751304][ T31] ? aa_file_perm+0x44d/0x1550 [ 933.757189][ T31] seq_read_iter+0xb7/0xe20 [ 933.762966][ T31] ? preempt_schedule_common+0x83/0xd0 [ 933.768511][ T31] ? __asan_memset+0x22/0x50 [ 933.773130][ T31] seq_read+0x369/0x480 [ 933.777383][ T31] ? __pfx_seq_read+0x10/0x10 [ 933.782079][ T31] ? rw_verify_area+0x2a6/0x4d0 [ 933.787497][ T31] vfs_readv+0x5aa/0x850 [ 933.791748][ T31] ? __pfx_seq_read+0x10/0x10 [ 933.796750][ T31] ? __pfx_vfs_readv+0x10/0x10 [ 933.801529][ T31] ? __fget_files+0x2a/0x420 [ 933.806113][ T31] ? __fget_files+0x3a0/0x420 [ 933.811579][ T31] ? __fget_files+0x2a/0x420 [ 933.816221][ T31] __x64_sys_preadv+0x197/0x2a0 [ 933.829187][ T31] ? __pfx___x64_sys_preadv+0x10/0x10 [ 933.834590][ T31] ? do_syscall_64+0xbe/0xfa0 [ 933.839616][ T31] do_syscall_64+0xfa/0xfa0 [ 933.844126][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 933.852098][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.864059][ T31] ? clear_bhb_loop+0x60/0xb0 [ 933.869093][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.875001][ T31] RIP: 0033:0x7f1c7738f749 [ 933.881793][ T31] RSP: 002b:00007f1c78288038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 933.891808][ T31] RAX: ffffffffffffffda RBX: 00007f1c775e6090 RCX: 00007f1c7738f749 [ 933.900106][ T31] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004 [ 933.909837][ T31] RBP: 00007f1c77413f91 R08: 00000000ffffffff R09: 0000000000000000 [ 933.918095][ T31] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 933.926061][ T31] R13: 00007f1c775e6128 R14: 00007f1c775e6090 R15: 00007f1c7770fa28 [ 933.934388][ T31] [ 933.944573][ T31] [ 933.944573][ T31] Showing all locks held in the system: [ 933.984876][ T31] 1 lock held by khungtaskd/31: [ 933.995380][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 934.023446][ T31] 2 locks held by getty/5594: [ 934.036420][ T31] #0: ffff8880320a80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 934.046242][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 934.097528][ T31] 5 locks held by kworker/u8:21/8678: [ 934.103010][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 934.114482][ T31] #1: ffffc900043ffba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 934.125439][ T31] #2: ffffffff8f2bf050 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 934.135161][ T31] #3: ffffffff8f2cbec8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 934.145228][ T31] #4: ffffffff8df43178 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 934.156830][ T31] 1 lock held by syz.3.2551/16175: [ 934.162040][ T31] #0: ffff88806562a0a8 (&ctx->uring_lock){+.+.}-{4:4}, at: io_uring_del_tctx_node+0xf0/0x2c0 [ 934.173567][ T31] 1 lock held by syz.3.2551/16176: [ 934.179053][ T31] #0: ffff88805eb8d2f0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 934.193886][ T31] 2 locks held by syz.3.2551/16177: [ 934.201366][ T31] 1 lock held by syz.0.3100/18319: [ 934.206874][ T31] [ 934.209413][ T31] ============================================= [ 934.209413][ T31] [ 934.218353][ T31] NMI backtrace for cpu 0 [ 934.218368][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 934.218387][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 934.218398][ T31] Call Trace: [ 934.218406][ T31] [ 934.218414][ T31] dump_stack_lvl+0x189/0x250 [ 934.218444][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 934.218466][ T31] ? __pfx__printk+0x10/0x10 [ 934.218497][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 934.218520][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 934.218543][ T31] ? __pfx__printk+0x10/0x10 [ 934.218566][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 934.218591][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 934.218615][ T31] watchdog+0xf60/0xfa0 [ 934.218638][ T31] ? watchdog+0x1e2/0xfa0 [ 934.218661][ T31] kthread+0x711/0x8a0 [ 934.218687][ T31] ? __pfx_watchdog+0x10/0x10 [ 934.218704][ T31] ? __pfx_kthread+0x10/0x10 [ 934.218727][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 934.218754][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 934.218776][ T31] ? __pfx_kthread+0x10/0x10 [ 934.218798][ T31] ret_from_fork+0x4bc/0x870 [ 934.218820][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 934.218845][ T31] ? __switch_to_asm+0x39/0x70 [ 934.218859][ T31] ? __switch_to_asm+0x33/0x70 [ 934.218873][ T31] ? __pfx_kthread+0x10/0x10 [ 934.218896][ T31] ret_from_fork_asm+0x1a/0x30 [ 934.218928][ T31] [ 934.218935][ T31] Sending NMI from CPU 0 to CPUs 1: [ 934.369209][ C1] NMI backtrace for cpu 1 [ 934.369236][ C1] CPU: 1 UID: 0 PID: 8689 Comm: kworker/u8:29 Not tainted syzkaller #0 PREEMPT(full) [ 934.369255][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 934.369268][ C1] Workqueue: events_unbound toggle_allocation_gate [ 934.369291][ C1] RIP: 0010:do_sync_core+0x39/0x60 [ 934.369314][ C1] Code: 9d 16 58 00 0f 01 e8 e9 85 97 e1 09 cc f3 0f 1e fa e8 8b 16 58 00 8c d0 50 54 48 83 04 24 08 9c 8c c8 50 68 39 ed 67 81 48 cf cc cc cc cc cc f3 0f 1e fa e8 68 16 58 00 0f 01 e8 e9 50 97 e1 [ 934.369328][ C1] RSP: 0018:ffffc9000460f638 EFLAGS: 00000082 [ 934.369342][ C1] RAX: 0000000000000010 RBX: 0000000000000200 RCX: ffff88801c7adac0 [ 934.369353][ C1] RDX: 0000000000000000 RSI: ffffffff8bbf08c0 RDI: 0000000000000000 [ 934.369364][ C1] RBP: ffffc9000460f7c0 R08: ffffffff8f7cf077 R09: 1ffffffff1ef9e0e [ 934.369375][ C1] R10: dffffc0000000000 R11: ffffffff8167ed00 R12: ffff8880b893b240 [ 934.369387][ C1] R13: dffffc0000000000 R14: ffffffff8167ed00 R15: 1ffff11017108401 [ 934.369400][ C1] FS: 0000000000000000(0000) GS:ffff888126239000(0000) knlGS:0000000000000000 [ 934.369413][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 934.369423][ C1] CR2: 00007f7d4cfb6ad8 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 934.369438][ C1] Call Trace: [ 934.369445][ C1] [ 934.369451][ C1] smp_call_function_many_cond+0xf47/0x12d0 [ 934.369473][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 934.369495][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 934.369512][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 934.369529][ C1] ? __kvmalloc_node_noprof+0x170/0x910 [ 934.369550][ C1] ? __pfx___text_poke+0x10/0x10 [ 934.369566][ C1] ? rcu_is_watching+0x15/0xb0 [ 934.369589][ C1] ? trace_contention_end+0x39/0x120 [ 934.369609][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 934.369627][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 934.369645][ C1] smp_text_poke_batch_finish+0x5f9/0x1130 [ 934.369664][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 934.369687][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 934.369708][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 934.369729][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 934.369754][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 934.369774][ C1] static_key_disable_cpuslocked+0xc5/0x1b0 [ 934.369794][ C1] static_key_disable+0x1a/0x20 [ 934.369812][ C1] toggle_allocation_gate+0x1a1/0x240 [ 934.369827][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 934.369841][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 934.369864][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 934.369880][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 934.369896][ C1] process_scheduled_works+0xae1/0x17b0 [ 934.369923][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 934.369946][ C1] worker_thread+0x8a0/0xda0 [ 934.369963][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 934.369985][ C1] ? __kthread_parkme+0x7b/0x200 [ 934.370006][ C1] kthread+0x711/0x8a0 [ 934.370024][ C1] ? __pfx_worker_thread+0x10/0x10 [ 934.370039][ C1] ? __pfx_kthread+0x10/0x10 [ 934.370057][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 934.370074][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 934.370092][ C1] ? __pfx_kthread+0x10/0x10 [ 934.370110][ C1] ret_from_fork+0x4bc/0x870 [ 934.370129][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 934.370147][ C1] ? __switch_to_asm+0x39/0x70 [ 934.370160][ C1] ? __switch_to_asm+0x33/0x70 [ 934.370172][ C1] ? __pfx_kthread+0x10/0x10 [ 934.370189][ C1] ret_from_fork_asm+0x1a/0x30 [ 934.370209][ C1]