last executing test programs: 7m30.80664719s ago: executing program 0 (id=842): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) (async, rerun: 32) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 32) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000008, 0x810, 0xffffffffffffffff, 0x0) (async) openat$vnet(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) socket(0x840000000002, 0x3, 0xff) (async, rerun: 32) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async, rerun: 32) r1 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) (async, rerun: 32) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) (rerun: 32) syz_usb_connect(0x6, 0x4e, &(0x7f00000003c0)=ANY=[], 0x0) socket$unix(0x1, 0x2, 0x0) 7m30.106832942s ago: executing program 0 (id=845): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x8000000, 0x3}}) socket$nl_generic(0x10, 0x3, 0x10) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, 0x0, 0x0) getsockname$unix(r3, 0x0, &(0x7f0000000180)) landlock_restrict_self(0xffffffffffffffff, 0x5) r4 = socket$netlink(0x10, 0x3, 0x8000000004) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) writev(r4, &(0x7f0000000280), 0x0) tkill(r2, 0x18) 7m29.12387827s ago: executing program 0 (id=847): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, 0x0, 0x4) syz_open_dev$vbi(0x0, 0x1, 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) r9 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000080000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_LOG_FD(r8, 0x4004af07, &(0x7f0000000240)=r9) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f0000000040)={0x1, r9}) ioctl$VHOST_SET_LOG_BASE(r8, 0x4008af04, &(0x7f00000002c0)=&(0x7f0000000180)) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000000)=0x1) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x30, r4, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x4000) 7m27.822590022s ago: executing program 0 (id=855): process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$vicodec1(0xffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000100)={0x1000, 0x1, 0x4, {0xd, @sliced={0xb0f6, [0x100, 0xf, 0x8, 0x0, 0x101, 0x7, 0x1, 0x0, 0x7, 0x3, 0x2, 0x7, 0x40, 0x4, 0xb730, 0x400, 0x1bad, 0x80, 0x1, 0x5, 0x1, 0x7f, 0x2, 0x7ff, 0x84, 0x8, 0x3, 0xa, 0x4, 0x6, 0x1, 0x7, 0xd56, 0x3, 0x6, 0xd, 0x3a5, 0x37, 0x3, 0x2d89, 0x6, 0x6, 0xd, 0x6, 0x1, 0x3, 0x6, 0x10], 0x8}}, 0xffff0001}) r1 = openat$vicodec1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc0f8565c, &(0x7f0000000100)={0x3, 0x2, 0x4, {0xd, @vbi={0x8, 0x3, 0x10000008, 0x43564548, [0x1, 0x1], [0x8, 0xc7e], 0x13a}}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES32=r1], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000000000009cb07df4000000060a01040000000000000000020000001c000480180001800e000100696d6d6564696174650000000400028009000900020073797a32000000000a000740fa2189bfb3040000140000001100010000000000000000000000000a"], 0x7c}}, 0x20008890) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x28200, 0x0) lseek(r6, 0x1, 0x0) getdents64(r6, &(0x7f00000001c0)=""/110, 0x32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000405000/0x1000)=nil, &(0x7f000073c000/0x1000)=nil, &(0x7f0000c60000/0x2000)=nil, &(0x7f0000997000/0x4000)=nil, &(0x7f0000553000/0x1000)=nil, &(0x7f0000a39000/0x3000)=nil, &(0x7f00009cd000/0x2000)=nil, &(0x7f0000e07000/0x4000)=nil, &(0x7f0000b8a000/0x2000)=nil, &(0x7f0000585000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0)="b3bbb52750508a769e0f2b5750a2e758176d2eaa84cdf935886f6a34568a70e5d07fd97365652b0caafc3d17db21ebf9ad75daca4ecf1ab3b0ca1d554fbcc8b377174a5f1a9fdbf876b681fd8506452467654bc04dc3996590b4e25b6be800b55d425db24888fabd8a209ff512df4bf8a447d0fe737f19743c7a8b2d69f051c3a0a60b0b25be83422ee14cac49be8f3d70d17e6359b37a6fb42b175cde345265174d08ad9824da00016498efe2c201f93e9986aa9f820783d68e4822545a37fd65", 0xc1, r5}, 0x64) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') writev(r5, &(0x7f0000000100)=[{0x0}], 0x1) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) 7m26.818517291s ago: executing program 0 (id=860): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r2, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '[\\\\%-,#]*[.'}]}, 0x17) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r4, 0x8995, &(0x7f0000000100)={'gretap0\x00', @ifru_names='team_slave_0\x00'}) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, 0x0) syz_clone3(&(0x7f0000000340)={0x8000000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$netlink(0x10, 0x3, 0x0) r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) fstat(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000500, r7, &(0x7f0000000200)) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc010000190001000000000001000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000070200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000004010500fe8000000000000000000000000000bb000000003300000000000000ffffffff0000000000000000000000000000000002000000ffffffff000000004000000000000000000000000000ffffac1414aa000000003c00000000000000fe8000000000000000000000002000000000000000000000fcff12ff000000000000000020010000000000000000000000000002000000006c00000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000000000003200000002000000ffffffff00000000000000000000000000000000050100"/368], 0x1bc}, 0x1, 0x0, 0x0, 0x8011}, 0x0) 7m25.292732181s ago: executing program 0 (id=865): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x10003, @empty, 0xc0023}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0x2654, &(0x7f0000002180)={0x0, 0x5e77, 0x100, 0x5, 0x1af}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000), 0x0, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xe, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x3600, 0x5d82986baa5ad939}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000006a00), 0x400000000000091, 0x4040005) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) umount2(&(0x7f0000000100)='./file0\x00', 0x8) syz_emit_ethernet(0x18, 0x0, 0x0) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socket$rds(0x15, 0x5, 0x0) 7m10.060529485s ago: executing program 32 (id=865): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x10003, @empty, 0xc0023}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0x2654, &(0x7f0000002180)={0x0, 0x5e77, 0x100, 0x5, 0x1af}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000), 0x0, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xe, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x3600, 0x5d82986baa5ad939}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000006a00), 0x400000000000091, 0x4040005) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) umount2(&(0x7f0000000100)='./file0\x00', 0x8) syz_emit_ethernet(0x18, 0x0, 0x0) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socket$rds(0x15, 0x5, 0x0) 36.652565505s ago: executing program 4 (id=2967): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070040001c0007800c00018008000140e00000020c00028008000140e0004001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) dup(r6) ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000002340)=ANY=[@ANYBLOB="12010000d4267a100410aa61754f01020301090253000100"], 0x0) syz_usb_connect$uac1(0x0, 0xc5, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0x8, 0x30, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x307, 0x5, 0x3, 0x8}, @extension_unit={0xc, 0x24, 0x8, 0x60, 0x0, 0xfd, "7742946023"}, @mixer_unit={0x6, 0x24, 0x4, 0x3, 0x9, '\f'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x2, 0x6c, 0x5}, @as_header={0x7, 0x24, 0x1, 0x29, 0x2, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xfb, 0x5, 0xef, {0x7, 0x25, 0x1, 0x81, 0x2, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9, 0x2, 0x3, 0xb, "9c3722c40930"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x74f4, 0x5, 0x4, "36b97ec7d2587d5c"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x4, 0x6, 0x79, "9187ad"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x3, 0xf3, {0x7, 0x25, 0x1, 0x1, 0x4e, 0x3ff}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0xc, 0x2, 0x3, 0x40, 0xe}, 0x10, &(0x7f0000000040)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x44, 0x40, 0x1, 0x2}]}}) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x203a2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000200)=0x12) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r9, 0x5fc}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000080)={r9, @in6={{0xa, 0x4e21, 0xf, @remote, 0x2e}}}, &(0x7f0000000000)=0x84) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 33.299170441s ago: executing program 4 (id=2976): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007"], 0x38}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r1 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x417c, 0x40, 0x8001002, 0x3a8}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) close_range(r1, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a8af0081001800867d892a530000442f00fe8000000000000000000000000000bbfe800000000000008acb27e70021000086dd080088be000000001057c0aa010000dbba35c0228de9dcffe5150000000000080022eb00000000200500000202000000000000000000000800655800000000"], 0x0) 32.526930197s ago: executing program 4 (id=2981): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0)=0xffff, 0x4) r1 = syz_io_uring_setup(0x10c, &(0x7f0000000800)={0x0, 0xbeac, 0x20, 0x2, 0x105}, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='statm\x00') pread64(r2, &(0x7f0000001240)=""/102390, 0x18ff6, 0x200000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x1000003, 0x0, 0x4, 0x722}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a300)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000001a380)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="c5c2a46afc01f1abecb8d5496832254ec70229d87801a9ccb0de8bb90c2d5b906bb0ab20f975676491ac93fee47f22afd14f4dd383de6b60133889f062c61db3656c453f102500e1103eb17824571e6d5cb92c18348c4ad3a64dc73e11cb3c2f66fdbb3810c9d374c81260dc54a2a5071ad859fc53251ad14d004c91dcf8bfede0ab5b4c07dbcf", @ANYBLOB="0800000006000000000000000400000000000000070000000000000002000000000000002e25000000000000060000000000000003000000000000000500000000000000ffffffffffffff7f030000000000000000000000000000000070000000000000060000000000000006000000000000000600000000000000030000000800000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000008000000000000000600000000000000070000000000000007000000244e0000757365725f696400"], 0x0, 0x0, 0x0}) r3 = syz_clone3(&(0x7f0000000700)={0xc004000, &(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480), {0x33}, &(0x7f0000000540)=""/185, 0xb9, &(0x7f0000000e80)=""/148, &(0x7f00000006c0)=[0x0, 0x0], 0x2}, 0x58) sendmsg$nl_generic(r2, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000e00)=ANY=[@ANYBLOB="24030000380000022abd7000ffdbdf250f00000008007b00", @ANYRES32=r2, @ANYRES64=r4, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT, @ANYRES16=r3], 0x324}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) write(0xffffffffffffffff, &(0x7f0000000240)="240000001a005f0214f9f407000904000a000000fe000016fbdb5c000000000008000f00", 0x24) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYRES8=r6], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000002c0)={0x1000, 0x110000}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="860500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000200"], 0x50) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000001080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000001000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250b0000000c009900ef04000100040002000400020004000210582450a4782cb800040002000400012a"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20040840) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000200)=0x4) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r5, 0xf505, 0x0) r9 = mq_open(&(0x7f00000004c0)='letx\n\xdd\xbf)#\xd9\xbf{\xaa\xf4E\xf6\xad\x9c\x04h\xb3{\xe8J#\xb4\xdb\x9c\x01\xcd\xf0\x1b\xd8\xf4x7\xc1\xd7\x9e \xf1\rj|BR,\x8c\x05\xc3\xf5\x93\\k\xbb\xff\xbe\b4\x06\r=x\xeb\xbe:\x03\xbd\b.i\x12\x11\x00Qr\xe8\x0f\xf9\xb1n\x87\x8fC\x02\xe8\xe3g\x94\x99k\x1b\x0fZ\xda\xd7\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x59, 0x0) mq_notify(r9, &(0x7f00000000c0)={0x0, 0xc, 0x1}) readv(r9, &(0x7f0000000600)=[{&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000f40)=""/160, 0xa0}, {&(0x7f000001a240)=""/258, 0x102}, {&(0x7f0000001100)=""/160, 0xa0}], 0x4) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r1, @ANYBLOB="477a8599be1c09"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x40) 32.262242944s ago: executing program 4 (id=2982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000300)=""/140, 0x8c}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000280)=0x0) recvmsg$unix(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2000) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) shutdown(r4, 0x1) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000002c0)=0x9) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="1b1b", @ANYRESDEC]) r8 = openat$nvram(0xffffff9c, &(0x7f00000001c0), 0x4a00, 0x0) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000200), 0x4) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TCSETS(r9, 0x5402, &(0x7f0000000080)={0x1, 0x2, 0x0, 0xfbff, 0x8, "008ef14ba278887cb0baba08431799317e6324"}) r10 = openat$rtc(0xffffff9c, &(0x7f0000000100), 0x200000, 0x0) r11 = mq_open(&(0x7f0000000140)='*+@[^#^\x00', 0x40, 0x65, 0x0) read(r11, 0x0, 0x0) ftruncate(r10, 0xd) r12 = dup(r9) write$UHID_INPUT(r12, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000180)={0x10002, 0x2, 0xf000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 31.995399806s ago: executing program 5 (id=2984): r0 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000020feffff620af0fff8ffffff71a4f0ff0000000015040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffdb03000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x86}], 0x1}}], 0x1, 0x4000040) 31.87623735s ago: executing program 5 (id=2985): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x19b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb4, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfff8, 0x76, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002a69bbc104f959941760f010203010902240001040000000904330202020c07"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x5, {0x5, 0x1, "00f400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 29.983160323s ago: executing program 5 (id=2995): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_pidfd_open(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x1258c1, 0x60) preadv(r3, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12014101481344209e1ace4c2c6f3c20030109021200010000100009043b070096d1"], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x408000) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x10000000000000, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x4000}) io_submit(0x0, 0x2, &(0x7f00000027c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x5, r6, &(0x7f0000000040)="dcf72cb09ec99689005ed57666f3ff59625199a433682767e5961e273c51ffd54f55ccc954f8", 0x26, 0x3}, 0x0]) ioctl$KVM_RUN(r6, 0xae80, 0x0) read$FUSE(r3, &(0x7f0000005b80)={0x2020}, 0x2020) gettid() r7 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x2, 0x35f}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x91a2, 0x0, 0x0, 0x1}) r10 = syz_io_uring_setup(0x10e, &(0x7f0000000500)={0x0, 0x334e, 0x400, 0x2, 0x801}, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) io_uring_enter(r10, 0x7277, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x3512, 0x0, 0x0, 0x0, 0x0) 29.31993692s ago: executing program 3 (id=3001): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4040080) 29.215160561s ago: executing program 3 (id=3002): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0xfe, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x84) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f00000006c0)=0x1, 0x4) timer_settime(0x0, 0x1, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file1\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 29.147201669s ago: executing program 3 (id=3003): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef00090599"], 0x0) syz_usb_connect$uac1(0x5, 0xc6, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x3, 0x1, 0x40, 0x40, 0x2c, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x4}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x202, 0x6, 0x5, 0xd, 0x5, 0x7}, @processing_unit={0x8, 0x24, 0x7, 0x2, 0x0, 0xa3, "8e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x4, 0x4, 0x57, 0x3, "024287d8a79c4b"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x5, 0x7, {0x7, 0x25, 0x1, 0x2, 0x9, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x4, 0x0, 0x6, "", "aea2"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x6, 0xb3, "07dcb07d0314c8"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x2, 0x2, 0x5, 0x4, "7a6993", "918f"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x9, 0x9, 0x4, "e445"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x88, 0x6, 0x7, {0x7, 0x25, 0x1, 0x0, 0x4, 0x8}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x1, 0xe9, 0x4, 0x8, 0x1}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x6, [{0x5, &(0x7f00000001c0)=@string={0x5, 0x3, "dfc1a2"}}, {0xa2, &(0x7f0000000200)=@string={0xa2, 0x3, "c78d15f90741af3fa3097d3a5c45cce6edb36b2349f053047ed6757b8f885c7c52134ac1ff7b6dcbfd2605b86315f592a290aeb856a1c5c73c0423335104f0cf7a1ab1c64bd31df1798612ace0f5d2ca07051d154e711b47d01d3d8b9d6861e277efb5424bf0cb0ed305917926b02057850db173a5ce593195b113001614572b45a4f63254f8b34777ec0773b274e1734bf61f6866e139d950ed90c400481b74"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x5, &(0x7f0000000300)=@string={0x5, 0x3, "ce993a"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4}}, {0xfd, &(0x7f0000000440)=@string={0xfd, 0x3, "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"}}]}) 28.328863084s ago: executing program 4 (id=3004): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x44a001, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, r0, 0x2) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000040)) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000080)={0x7, 0x0, &(0x7f0000000000), &(0x7f0000000040)=[0xfffffffffffffffd, 0x3, 0x3, 0x80, 0xfffffffffffffffe, 0x401]}, 0x20) fchmodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xfffffe99) creat(&(0x7f0000000180)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x9, 0x1, 0x80001001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_io_uring_setup(0x1881, &(0x7f0000000880)={0x0, 0x17ec, 0x400, 0x2, 0x3c2}, &(0x7f0000000580), &(0x7f0000000900)) r10 = io_uring_setup(0x5683, &(0x7f00000001c0)={0x0, 0x202c, 0x40, 0x0, 0x2ed}) io_uring_register$IORING_UNREGISTER_NAPI(r10, 0x1c, &(0x7f0000000100), 0x1) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 26.414657075s ago: executing program 3 (id=3008): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec000085000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r1, r1, 0x0, 0x4800000009) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000006, 0x8031, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x65a, @empty, 0xff}, 0x1c) flock(0xffffffffffffffff, 0x5) r3 = fcntl$dupfd(r2, 0x0, r2) write$cgroup_pid(r3, &(0x7f0000000240), 0xfdef) read$FUSE(r3, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xffffff76) socket$packet(0x11, 0x3, 0x300) write$FUSE_DIRENTPLUS(r3, &(0x7f00000005c0)={0x1e8, 0xfffffffffffffff5, r4, [{{0x5, 0x2, 0x0, 0x5, 0x43, 0xf, {0x5, 0x80, 0x9, 0x200000000, 0xff, 0x3, 0xfff, 0x89b8, 0x1, 0xc000, 0x101, r5, r6, 0x1, 0x5}}, {0x6, 0x1, 0x1, 0xe7f, '\x00'}}, {{0x3, 0x0, 0x7, 0x7fffffffffffffff, 0x0, 0x5, {0x5, 0xfffffffffffffff7, 0x7fffffffffffffff, 0x7, 0x7, 0x3, 0x3, 0xffff, 0x1, 0xa000, 0x400, r5, r6, 0x7, 0x8}}, {0x0, 0x9, 0x0, 0xaa}}, {{0x6, 0x0, 0x89, 0x68, 0x1, 0x6, {0x3, 0x40, 0xfffffffffffffff9, 0xc, 0x20, 0x1, 0x8, 0x400, 0xfffffff9, 0x8000, 0x4e, r5, r6, 0x2, 0x589}}, {0x6, 0x101, 0x2, 0xfff, '\xff\xff'}}]}, 0x1e8) 26.397566438s ago: executing program 5 (id=3009): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x6, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x90, 0x0, 0x8848}, 0x80) 26.104027034s ago: executing program 2 (id=3010): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x3a33, 0x4) sendto(r0, &(0x7f0000000540)='P', 0x1, 0x8052, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f801006e004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x11) 26.036620486s ago: executing program 3 (id=3011): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) open(0x0, 0x2a4c0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$loop(0x0, 0x75f, 0x2a382) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000140), &(0x7f00000001c0)=0x4) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 25.965913918s ago: executing program 5 (id=3013): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) r1 = io_uring_setup(0x7c00, &(0x7f00000002c0)={0x0, 0xb214, 0x1, 0x2, 0xf4}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000240)={0x6, 0xffffffffffffffff, 0x19, {0x30d, 0x8}, 0xff}, 0x1) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000180)=""/158) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x1007, @empty, 0x6}, 0x1c) recvfrom$inet6(r2, 0x0, 0x0, 0x40010001, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x40015b19, &(0x7f0000000000)) 25.873721399s ago: executing program 2 (id=3014): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x80010, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents64(r1, &(0x7f0000000300)=""/55, 0x37) write$tun(r1, &(0x7f00000000c0)={@void, @val={0x2, 0x0, 0x80, 0xd, 0x0, 0x3}, @ipv6=@dccp_packet={0x8, 0x6, '!6N', 0x18e, 0x21, 0x0, @mcast1, @local, {[@fragment={0x2c, 0x0, 0x1, 0x0, 0x0, 0x9, 0x66}, @srh={0x87, 0x6, 0x4, 0x3, 0xa8, 0x0, 0x401, [@loopback, @mcast1, @mcast2]}, @hopopts={0x78}, @srh={0x2c, 0x4, 0x4, 0x2, 0x3, 0x0, 0x5, [@private0, @dev={0xfe, 0x80, '\x00', 0x28}]}, @hopopts={0x3c, 0x9, '\x00', [@calipso={0x7, 0x38, {0x1, 0xc, 0x12, 0x8000, [0x3, 0x7, 0xfffffffffffffffd, 0x7, 0xfffffffffffffff2, 0x7]}}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @hopopts={0x21, 0x9, '\x00', [@enc_lim={0x4, 0x1, 0x93}, @enc_lim={0x4, 0x1, 0x6}, @pad1, @jumbo={0xc2, 0x4, 0xd22}, @calipso={0x7, 0x20, {0x2, 0x6, 0xd6, 0x2, [0x3400000000000, 0x0, 0x1]}}, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @local}]}, @fragment={0xe, 0x0, 0x3, 0x1, 0x0, 0x2, 0x268}, @fragment={0x5e, 0x0, 0x5, 0x1, 0x0, 0x8, 0x4000068}], {{0x4e23, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x9, 0x5, "0e099e", 0x0, "5d96e5"}, "72cd4bc17445b4b38143c37b04cccb921d069d1f8159b4c61f5000417db7552a502f3fcb60df7260dbc6a69a39df7075a1c391db33024844b2fa70fbf34a30c4d512581b9a325765c78c972edf37"}}}}, 0x1c0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f041, 0x4}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1f) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000481000/0x1000)=nil) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@generic={0x800, "2cc9771ff37fe8ea479567efda2ba8bc998759e8710842ccebfe7550084701a10298b953a649e255305cb6493947ef5634bca0fb0fd785d66248f1092a47dc9441bcb10ddf50bedcad0b0da4f7ac39705bbdb9ea1e1d9453866d1ffd2d75589307165bf5006947596562392e750a671efdaaab9e677a85d1d24e6195"}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 25.680111601s ago: executing program 4 (id=3015): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x4, 0x0, 0x0, 0x0, 0x1, 0x2}}) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) dup(r4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001780)={&(0x7f0000000140), &(0x7f0000001580)=[{}, {}], &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00014000000000000001010c0001400000000000000101b81700000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000008c1703800c0000800800034000000002"], 0x1874}, 0x1, 0x0, 0x0, 0x8010}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x9c, 0x4) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 25.477866586s ago: executing program 2 (id=3017): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd70000000400001000000050007000000000008000900000000101400200000000000000000000000ffffe000000108000a000300000014001f00000000000000000000d6b9d449000000060002"], 0x5c}, 0x1, 0x620b}, 0x0) 25.103040847s ago: executing program 2 (id=3018): r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(0x0, r0) accept4(r1, 0x0, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000000), 0x20, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$kcm(0x2, 0x200000000000001, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x86783, 0x0) (fail_nth: 27) 24.317693538s ago: executing program 3 (id=3019): r0 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) fanotify_init(0xa00, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x22, 0xffffffffffffffff, &(0x7f00000002c0)=0x49) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xffffffffffffff39, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) (fail_nth: 5) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xa3}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x42241, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000040)) write$sysctl(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r7 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r7, r7, 0x0, 0x4800000009) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000900)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x4000010) socket$l2tp6(0xa, 0x2, 0x73) 23.636421686s ago: executing program 2 (id=3020): openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x800, 0x6, 0x0, 0x1}, {0x3, 0x0, 0xd, 0xaf22}, {0x7, 0x5, 0x9, 0x7}, {0x8, 0x15, 0x3, 0x1}, {0xfffc, 0x7f, 0x6, 0x80000000}, {0x8, 0x9, 0x8, 0x8}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x900) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c000000010902120001"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x2100, 0x0}, {0x8, 0x2a19, 0x0, 0x0}], 0x2}) openat$dsp(0xffffff9c, &(0x7f0000000280), 0x10000, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)={0x0, 0xfb, 0x5e, 0x0, 0x4, "564729d253c76c63e3cb62da574c13da", "f944deda620f2593d9f9e07f97f36d6f8bee10e3522ff3250ac59787114bba4574c64390e7ac3e0ddc0f27fa5683651be648d8982cce860af5df00fcd728983a9d40699f39221faa32"}, 0x5e, 0x0) 23.361555599s ago: executing program 1 (id=3021): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = fsopen(&(0x7f0000000080)='binder\x00', 0x1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000280)={0xc0, 0xc}, 0x0, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x20000000, 0x0) 22.8577138s ago: executing program 5 (id=3022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt(r0, 0x1, 0x10, &(0x7f0000001180)=""/83, &(0x7f00000010c0)=0x53) (async) r1 = socket$inet(0x2, 0x801, 0x100) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[], 0x0}, 0x0) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = socket(0x1, 0x803, 0x0) (async) splice(r1, 0x0, r2, 0x0, 0x7ffff000, 0x0) (async) syz_io_uring_setup(0x70ca, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) write$nbd(r9, &(0x7f0000001200)={0x67446698, 0x1, 0x0, 0x1, 0x4, "298ecac66591afd86e3abaac1f0e9a9ae184d233921c97ca29b0a42e501b7063e544d1bb0a55f254ed9a995abe4479d3abaddfe56a8c9dd6348dc8b4787f1edd2053f7cd69e382620882e08d655b688027a89501fdf2ae951c8c64e09eb06b44a91d8c0405453dee06ed69cb576661c87990f71849e0a258702a0f86632299ad83ef9f8b1c1e1f2ac6d2a16158b4158ffed5a9fae2e60c261ee2c2e7808e57b9c7074fd2c52e5f9273ecf30165ae417daf7adbff32fe5b29a171084f4ca42b004a1a9b9df54002d9ef330de38c3328c37c6430b6dc993d5d03b237315bf5dd591d516226f6dbde6b58a84db3cd45ec61023a6c2ef9841e87177a38c7b637c0ae2fde00c80a2f9e007dd31cbac2cdf48d554bba0b9551f2054ac7e754e1407c4b609e3bfac5685839c271fa204c2adfbfec25c9ad8c983ad5b24f1b9938cbcd2b851bc6d58e05069a5803b1e2d22172703cf1558e282fdba2a37e51cd7f51597d6fbd57546a16b8b31d02a08369879c33b76d230078a83415c604243ccc0c70830ad97ec3c9147375c367e55f8dfdb73c745b28e39f54cb91acc6275284d76d52dcc8bfa6fa2e40ca55ca733afd3a2b54c97d89f1ec230704e2ebab6c3802a2f29c9ec27f23a8a6f16c2edf0edd469d4ed48a1de8d232abc7443a8ea2147fe765268bb1542434c1405cc1dd40ec1e48ae5891910170a44119e80966a6e354b4edd8cce774ab23b56960e7e62129948f917a3aa5446216f8d337a9857093dac2c1652183fe4ca20134c1a009466a0428bb9d89524d694d8cc49007751cb4021418522608f64afa259eabf56b8939562aaf0bab88f53eabd541aaec6a8e11c0939cff07b7bb1fd70749dd5d2a71db19ec3a0142f0e97102e1e263c231f19edaeb827889282d556afc22af5f5fe28046df1c30e9bfe85066eaa8038b1c5ddfabdbd7906c2891c622b7d3148c548cadec5795fb72c9bd98a9c45c57baaa12ea687ed47155818f3729110df24bb603d29aca1b8294b70b60c500171b7bb5423076f3213d74163906f25d719ae69be6572a0fe63ad086943a315ae0231fa95dce43d70fb5a864562fcf36b405db0bcc5425d16468b3cb1972064c57db683632c65494d9ab16d89a8564efe807448c12a3bc9e3f2696d75f988aff04e6f9d2643b475d460cffb0482847b9e46dddba4261a1641653bf55017a68823d18e4bc22c1fa045a8d0b739324dcab5315c7a62d5b064ee9e7b9124d0c12dc5211c5b10cb158644cd83c3db651c93ba4545ee27e1b7e99d7a84136b5c69040af71caf997ae4d726537f7be4eee560142abb56eee7f521c18c9e5fb51c1a2c45a52665ad3de0669c75252c734d4515ce15ff73d1499879c36429555f9386c3ed7121687830f431dd4f501588020d33ac47e01da4240e7b2677d6657b68dd1840938c1381fbec47decaefa7780c27bfbafaa9659a697f997a08c3f9a507936d4199fb14844cef7186d032b33eec219f7b886ba77137863a36964c8feaacd302c342295e7a1918b21c4cad7ebfb935acb5cc6c339be8283f6b6d89e0120ed6a60a1eed3839e96168f3de23a33002430d2e224ff06e5b6508b7f953250d6a91db0e3fc9b3839071ec8b40a6bb85eef0e469ef31a0b1c10da1401d62a8aa603de8eccabc97a97813097ecfeb03780b0eb2eeba4dd5432edd8fd7d11c0ecfcf9c398ac2f164380af13ef1b1f81a11a28c9eca1b77cd735edca406a09433c3837b633c0a390e8dbee840a14bf6bc3ab64348eee3771f808caef5f4ebeb4e9a8e70a7c3d509a5fbaee1cbf42d4a5f71ed845a599968c4ee50b155a785e78b80f2987d8526a55a8440f16ce09f60ecfd17a8b44c66556b51adf99139a02ba3693b4c33013343bfca78a6c85e1dd7a02049d2aa1c61abd7c3ecba1725c95506c262dee3aee7b702108015993ac5f3cf431ef241e667dfaa0d8c3677bf7f0ae54a5067087ad4b5a32cc3a4a2a37966dcdd53a9905b72889aedbf5a55def4be2cb50e9ef132d98c57f46646e2021018673b3eebcc2fca9660bdc38e547eaab53b1b2e9322847cf61ff152cf2328a88855411d9a417ae73d5439e87fefcd7d432cfae2d051bfe666989898e511619a747fa8e02725a871e860e045a885cb355f520893ba4e400b83009a6553c5497457c02d7ffe84d27f3bf89de0d0a348928cff7b9c09c9ff7fff0602cec75dcadca25ad8c608668374aa76942ccab4c109e4c08073db96357dcecd9c45dfd6e089b5a3b5767ef87ae140f7e3d8f3dd40247343190d62134da8852dc3a03488d21570cd12ea1289ee485d517b90299fa20ecf98c6e67c33dbe18c53e6ecfdbd57e22249d16befe290d67c26eab30ddb48f0094189a0566cd274c0f2a3f67176a28c637dd5eaab44cdaf1d18301ca5a24f8bf02a7611d4e5eb1d02d05a2f2c7222925de53d6e2bb144c46d546b566b871c7bdd95bfd2e89871349ab0f4bbd4fb206428d91bebc74a40e1971869a64a253ed4431edfe6c903e0650991d8f35f2755a638d76d0746a8f88dd0d63f67f52b966583279fb9b97947c3e363f39f1fc26540ac9ea1f82ad3d5774d7264df72cdfe6f1065de44294460cc8338358c7d6c00c7b61f76c3ccca79bc9d4f5a3b3bd4b2cbd85022261e32dd84974c96d594f7fa8a83f5309d57bbacb66d637e84f5ec0eb9a0f1bfbb5797b083a2d1926cfd0a2f02ebbca07faac8aa214cde01d07e376d73959b851daee115d49646af917b5be910a0299b5c5a72de7e4c94ef6e0da730079335d0b4ce5a3c74a13da855b5d078335b33397853cb5dcab7005c9096dbf13d87a845a476a6860a778a2810091ef07358aae96973340af9df88705f11a3efee80ddd7aaed0a13cd398b8ea0985c35474b7e4dbbb2e8ce86d5c7556757cdd20ae15405f029cb15feadd2390e9b1dd42ebac4352a0b346075282d5c637eed3fa86d97717259daba3c1fd61b49f0d46862deb945f579d1b6593d738dde1238916019cea321020cc60cbd27b4adf085490a8c05d010aaf0b2097d353d6788ed8a8779ff813a57572babcc703235d2c0b8b10489b7c821eb1c5afa470e6d21ce1413c36c307c05d04668fee923e1b76eb123174b02041619d266cc8a2fa36ebb806c63b9270d7f981b539c103523e6efbca0c4a61ff33ebca289d61ccdc1f557df37dc1229b5bc2facda2e9ded5a4dfece137759142597078d0231623d25fb420ef9c4d25b4fc645b8dbfc737ef1c5c420535c66c882ffaaa930e579982452e7e82561b19012a19df5c1572fe671e97a602ff01eb221a17e9f835319389485b799a1b47aa71db27c690b362ce9215eaf516871898348cc9acc4154798c557f3fb8ab81be900f095a36cfeb0676dcf567eeda4776c5e9ca0a9aa6d2ec9fa9d996eadc321bbf9999f2c4a56d70c45d39ee3e27162bf7bc0e3cde691e215fa503d12fc916e2cde10c82b79f832fc37bc93285da234a2ffd468f8cd3b849245fb66a2a898349612046e39e79b3635fb49b6936046194468eb91c5e88b70aa53b0ff5996da28461779aff30456b7889cadc246acaf47c81c47e5640f9b8207e6b81bb6253bf0c76b316acec2358d0f3b871e462bf23603ea5b294b3f560ebd18c9905cbb3893d2b96ed2c2f4a6e8ddf4e04cb2b33589b29e3ee0f58bcc1b3b08d5ddaa7e7d835c328d83789071d7b2931b3863ae25c9dd41a51cd764883a67c0ac54e8de24659247042e06805ccd32a14a1a476f429cf7a42f7c7d10c87307dceaad772c02e4d66ffb4e00938891bfb2ac7adb5a5906745cacdfa77ecc2b9d4333a6996abce97ae4186c868ee4f297b40896c440e826cd847b2c2ebe503010de5b46a92af98d66b320a0c8c49fb6ce724e50f74b69f536a1c10f8ed1baee0cae8a215e0bff3f2ceade5e4c81af8f94077fbc8a6ade76a4c8352a74a2a8c69d5bb98f0383e2724f897a4b4bf4fd2dc0225ca42ee899eb1008cdcf913a8ad787452640240c6685a6dbe4ddde84015a60fc86c55b6906999205a438fa605673c5fc4a5d402f7558250e6038ae9775abf0e0e7c1bfe2f40fc6b5a305539ba695a911483c27fffc4a7edaa500aa962bc02a841cef591ea590eec242aec114d8f64f77cfc89c9e8b5b9e22be0fd99382c7db257490b0762eee07f187e44635c51b1b070d2615f7a10377508373705ae09bbdb32d28bd2182551d06aec5309bd67db8eea803207c5bd227bd1a1f982c6fb79ee035da344da266ec0353ca4b36f368b16c0bbcfdba6d25efcf40ed5ae4a8c633df4c6d04cf6ebebaedcdab45dd63c489e44492b91cd80b54b59161a36dd5a5fe5aeee2eca6b7857223f1721886789073bb89ff4dc61d30fe147607b62c70c0d3d1fbbaa06b25abed916ca9c56af5abad11fbe05b35914db10bb5973c5017df1073be9009f0773d746cf3c548491a7d91a9fc9ee7fbd2bc7af82071c78828b5d0312f8e6719350035da03f04000a4e9d9f31579ab91b1774a5c9404a368fdb5ea2fc4827cd2283ef9dc02b49ba6aebecfb0031e0e2dfa8a219474ff75b80d77ae363f71d53bc17e451d6c5ad7f895485b6a071607e186159c2134b4468d69081f0209f07263195376573a982f619f7693888dad06373279d5e752535ed3c7b21a5de6e71757c0e1819bafe86c271046096786e5d7c1b9e8a3d35954392ad0fb79917b08d3a143a58fd0e1bf1ff49ee6835aa1980ce6331e3893c4ba37b83d4702c20c804ab6bc53d2bf2405d8701b7d6e5df359c6a0aa5295cbf0b82a75fa8ab32ccd864a39ac3616e736293ae417b43bc902c114ec63c7c7eeb83fb94577daa0ee4d2a8781e7e2c448c7b2ac525fb0fbf772549ace9edbdb19b7e275415b05e660b871e2b12b437cee948e65fadbc3b1358d05b1f12a4d4c5915b04b10519f9eb772c301033cc140c59ac79b1b4db789f7726770d1863f58ea1d16f103b8bfcd775a6134ac7275d7ded0f5c91e83b980efcba68efebeb8753567132bb1297b9c07183d233525396a5dcc988923efe3ba2883fcdeb85a3831050f1f424dc2cef9379044065a16d6ee51988af010a788ea21959b852e736b63a9ef7aec8eac3cc6b934d5e6af4c20218b5e10f12a20eeb30e7e0a3bb7dbab2213ad7ee981364f5dbacbf729345f6440627635968e3a836ef7bf86a2224400eca748da971089150f2aabef67cb71d5ebb961d1c531d6eb9629ed9bf1a4b1e5f73b4f7ddf1c133281f7b112bfc0798c6d48c27d4d6bed0816e24013a774ffdd4f3286d0df7cdaeb376fc697f5282f9fba3f1f5dfa658de3489b5659bed4bfb7b961366250c4d11de9b885da80a6d2bb195cdb5e1795ed91b3e2f105f3e623bcd16be3735ec7d36de945714779b73cb79577e902b9d970f92ca026276b1ec047cedf5c4150979b9e19f99958389f379f569e5fe618d8961d38014d97258d6fb2f82205de175918c68bf41108fe9e82eac29e411edc8b0540c554663a0c1828220773dfbde4b9dc3b4b9af59661fc995c47d2fb1aa5fac740b6e4a0a3b8e31c02379ab6b05f6689b315ea009228e6c8d4d1ce6767ce35f60d6fb0c2b8d69be9a969af7398890278d8ada2aa3751adf884a51b4128edfa9a8190745078b269120f585d01ecf247f5a035e3688a4d53aa15c4855bc1b5f63115b53931da8358eff68d737ed8a371402dd196c5dedaa5b684ff8013e2b4af74cc155b0d20a81f82aed5d13f509f729ad3f16b54d3b71f2aa0ab66fa486e398a84a3764a2238a4058811aa2734120b780fb19f63282ba8"}, 0x1010) (async) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7040010000000f00000005002a000000000008000300", @ANYRES32=r8, @ANYBLOB='\b\x00+'], 0x5c}}, 0x18) (async) syz_usb_control_io$rtl8150(r3, &(0x7f00000004c0)={0xc, &(0x7f00000003c0)={0x20, 0x24, 0x1c, {0x1c, 0x11, "7fd40c69e1d39c9664cf97d44ebc34ca6156f23d6767c8c17747"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}}, &(0x7f0000000740)={0x18, &(0x7f0000000580)={0x20, 0x11, 0xa6, "9c512c7dc14853f67a71bdc7a485a86822bb0b35c8c064c2aaf02ce72cade5ef2d591b97529a2aa92449f73c5c6c7aac11cd5272cf93987a2ccb6498f4690bad925496bc0c5ff2d13f0c403f612999a5f42edaafef454409795dd656bf31b6828c8aaec04ffef2ffc7e2f6c3c76dcce022acf0f7974e8cbb8d7bb1b5327ffb47b6fc79d23236dac54825c1f4690e404b6843bfc73008219a9feec1aa07f822fcea5f996143cb"}, &(0x7f0000000640)={0x0, 0xa, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000006c0)={0xc0, 0x5, 0x2, "65d2"}, &(0x7f0000000700)={0x40, 0x5, 0x5, "4a46859856"}}) (async) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_FLOW={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000400) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x30000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) acct(0x0) 22.241542253s ago: executing program 2 (id=3023): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x802) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0) 20.275153629s ago: executing program 1 (id=3024): r0 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x1) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000180)={0x4000004, 0x8, [0x8001, 0x8]}) syz_usb_connect$uac1(0x0, 0x91, &(0x7f0000003a00)=ANY=[@ANYBLOB="12010003000000406b1d010140000102030109027f0003011010060904000000010100000a24010180f8010201020a24070100f9ffd785700904010000010200000904010101010200000905010900021404cc07250101800400090402000001020000090402010101020000072401010500100f240200000000000221d53c71e3fa0905820908"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) 18.940693712s ago: executing program 1 (id=3025): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10134, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xb05, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) fallocate(0xffffffffffffffff, 0x3, 0x2, 0x8000c62) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000380)={{0x1, 0x0, 0x80, {0xd000, 0xf000, 0x2}}, "b98fd71434204d04d4773e196ab1d29235303082488d2d13f229a6a427f14da4fa5ca9b4aa8b8199b112e89bedc3647e4804cc75cb0419389ef957f959a2a5849a38dd21fa74db2293f1c2de0ed83fc57e39223c13c3ded84d21ca7f94674a03178d5eaade2352aa83c6fbcd6d1a9e7297451291127266a0fdae63f23a152c29bd76c49c7efcd11a52839cc27e46c745bb2d249fff2bee996f099ff917460bb5a0cfeebbc37bcedf7dff42a2072fbcb7ad8488a59f56b7e07f8bb798c2424b9f1abc88d5804d5a4c8c53b1d4515f4f4fe7b805d5824ada094f18e8269becf7be9625c4f7ede99c311b421c0911bead512e8a7895d8f7244a0c30eaf8a5c8bccd5fb6e8f1d86bce75317fe8281299d8089a05c17b474aa04006b97ad93986932ca7f53ca2810a19ef54f41cdcddb857790b16f677d5f93471d73ed01cb7decee49b10a30c4c3736b7e1362d01c4ab75d0f9e5a89a51f1c2ed3935cfcd0101447de0231625ba86d85c32f213f1438c81b834269622f42038634d1a2b19b5ed5c11222f3febd526790c08b8ef44ee9090d489b4466ded526d656c258ea5534048edc798d0c9bf86ea81948338ca534eec27be8b5aaa2103bb55496fea448bc8c0a7928bea07d1bd35206b6616a96d01d75767390b9a979bf1b41311e4f2efc426b3c940ac245f2bbc54a3ad8102822f5a219b3bbbe3ac0f9a9f9fa84085a6316a0c614cb50689590a950173041cc42478ebf74810ebe07f7eb3c09e67f224a957dfe3cf054e923a51a673154e5bacdd8d12d275185d15b1a6647484dfc72e7c36098a445c20d7d55bb930655f548ee010da000d8844e95bb6743ba96efcc677fc2e60d0fadcba9ff59665774e3a7fd49479ad11a65fb3e799cb85d9963be391307c14dddb40ad76b9ea7635b518dc196ba515eea40bf0ee5f170660b248e793152a0d66d541e2c87401572e049c7e9206c727e9d4e48c9d5e37a35e03cc329d5203b41d3639ce73ad3e1c453c585f2a3b58eda41cfc7a375d32cece5951be9a2b94ce2bd5899669b64338afd46338b609e2e0eee0ab4f4dc52c5e42a698498de5faf189f67f5e7bee179fe24b47b562e81891e9f2555d40398a21b90cc75e10c493a7801e90393bcb0b067272b95273f83f98e9a588986c43a1be5c3ce948a49b2337966c0546b2e3c1a6908df086dbcd649303da3417fc1f68e91a5e041d4bae6f90e9fe61afb7d1e8f324d281959f809634214c42275bdffb4fdf5188c012013b6feab4286acdd7eec0a1b673f33a0a3b920b54b039e2e7912947526df7abfe07b6b9fbf04227a5404e346177f45c630f10b5012732a4b5ae3626fb069ec210e7eb3e0f8f6a65fa912ab7504658b455862a4b402b5906d7fb59475ef146bb3b5d872d90f223f34465eabd1347e24f6eb4491599c2db04ce2369c75527a481a4d17ab1b79f3139cf59b0960df9e736b5a4864c34178219d138878a26d710750a7aa37bf1c4129261a4f1386279c836682bccb21ab62c2af0de1deb64617d7827c280440d05b355c1e74e3f5ebf18a2c6375ff37a1915e151836ae7163422f0e82fb14909648d229121dbee3723299636a5b8a1d5dee12e6b91865b17f62aed7f6466396fdf7c780153119e3bfd654e24d3b08747c9d910314b729f69e5ef29449480ef2b2c85959b17f7889be14e0785ff143ffde44cf99be1eabd3028eef18ac3df0a92bcc6273a1a2585617ada323bbef8919dc27603317f6bc0f233d789306a63058beea113f14d310f5f3b0bb161514c2b3880e0820b4ac69c06fadaf7797c1b1f577b8a500525516d63d3baaa49ccba4f95443c907173b8b3623f97393a6ac1bd85028b3058ed7dc4e286014bcef71fc0776bfc6fc42f734a8a2113f4ca3657a13bb11fe36e288ef14e9d17875b08b060ef5d5279821f29f5d8a74dfe9db7c15672d99403f9f065b52fcb970b097919a49e67a5c7acb3dae8b59533ed29dd26d7310f1aac3a7204f814696a222d174d0cc2084cc019bfaf4d8783a201715b6a1d8d8e7cbcd2d8dc0090efc0bd8ed7985b234229a5fd8432568db92cfc7716e812a0ad9b1de18e06bc3ec6c86f87bee52c4cb917a6238afa760e228ddb6eaba8acb9078f4df2f1212134e66ee2c5c375b8b5c5d089a51a94837c57e709b8170a471c7ba886c2597e2713fa573d0689321c478a2040fe3c4c4d730295cb92340ac9dfffaa37229c2a08f9bbf3edbf64b501e8df09632bb134dbb628413ca85524b0b29a5e40d5afed86916c7082a9144cf16317b5ee06d8efe319f21ebc58d6b967ff219722d232b536efc0dd02a22303f56ef5f2653c807a8c8c4041a186acf40a68b1f9066b9deb3d617ecb9b19f590408e5e390a8b575d695a92e291e4ad5b5b11755e0da768ff0e0ca0256838d14fe536a26fce403dc0f235b2e0a9ed4021a2bfb164bbc6d9736979b75063a230b8bef181dc07ae68ea1db268b447d4eef8540cc93218f9342835747470b1af1f32f0769318c19965918a062410b27746b2a0e43b5a6ba09ca23065cb5e6d08cc56072b68744368ac17af5002ece101e694c4d90db25b5b24c1aec74e34d1898ac5a88c5503dbb68d5d1c3bd1442457226941ef89f2fab05cc19417c1daa38df4815c31931d6a8b9b4cf3816b64eaffc533a36dee68ba14574653b6d39d678813264fac3cb109958ae5177686f9176c63e089f7f9264b53b9445d128d8b0f98a56c6c766521be35dee8755f757296d27197cbf2ad41a8321a49ac06721a3d99940e4bb864efe02dd05dd8b6599ec21ffa27c1becba668bfa5f2f0bdccbde92206e5c0096479116ea0c128ffaca47a41c808e9cd0b2e1679b361ff871d8be25e22fbba5d59894bd8a982b0b81675e20d1a3cbf7ef24feb9a7566217ac7e29f8a0fa1d6e30ee057f0d3f230ea91c7d684f1dff7b5c78556d16f695576187274a0e613e17ef0b4d5e6559bcfd0552aa37c32377eaf1ba3f6cdd7af9103aab30ae7cddb1f06c013981445e03debfecb92bb983c9dd8d91adfc30ac360eed8a96b7431e27a2d8d2f67f760a4ba554b9f2f9c92dd054e5673d3a5bf93dfd36a74b97c2265c868005c52fc8795fa8654ca3464bc561f06d5a5f76d236579e2cff81bab1e63fae3a79c478022fd629e252e731353fc0d6c5086c112e2074c98945c40e623ef95b7b131e2e93a317f30ff6d439616114e71026ae4af59de23a6cb48be70d10996470716ba6ed71cbb9269ae7090b97d0c30bc6730b4d8b78f50de7eaeb35cff7362eec090285a689bd35b70cfdfabb1618847c9a631633d6ce73af56a073cb0d17991ce34bfbc8d1bbe2b5f4762993b20aab109ae0a0e8b0f434006d9c2ae22ad12c8dd3c5b5e62b5b6135c2b50996ec05a602bb434b77645094a6bd45f129f67064d1c828cdab91463dabaab5209f6bb88dfe98b8bb80e6c088a1c28ba613a695a52322a6102dccfb0178eccdce66355525bfb0dafbe1cacbc61f75829e61987b2243f3093ba16e6e546baf7e0dfc2d0e94b62b09ec675b4363c8db68639a2a84a1e591b4cf8fa7ed392acc8a4c7ace78fddfc849c2e98440dbc0e06e9038288b392c1a0c397cf3d9919621a30079dfc4489af49d4b783222eaca648049e0536711f9d940111b16ee9efa19ea9db1ebe3f08577f351b4b2667914592d6c56bbbc501583747f28c3d198cb437330f257edda8a848e720bb14384a0dbd695e53997934fde2578cbf4326b92314f3ff6ea1a062b477b2c17fdd7d98b2e73af27051ce3bb71c8727e761d7d121f0c53f09552e8ba4eef2f530302cd64e5b9165ea74ab3db5cfe12788dfc1322d995af2e0ea85fd4800021094df7964217599b705691566f30f538ffc08ab87f4b3f06584f260cc04033a561a05be8eb12f28c35af05e18b359114380cb00d56c2949643ef0ffbef1ffdbe0d7cde8474b28eb099015e8ec2ff90c31291e98d7f073c23f22895d59892ec32810b10d91350d38930281a3e0d02f6bd21a22485c20ba9b01ac7186f7e1b076095d4a02452f88c19871d56f70eb40ba679a7b25d5d5dba9e713ddbe30e6079125163209614b25083da66d85f363162004dc4d7de7ba9d77e66b8455e165b1ba0f1b1022a568d770f373d18f61f2ddd21b5c5338ee689292ec53f89897e1e880c594ce9ccd3b282c761083e6fdc063aa7f11ee5b8b1db1f4cd869526b5ebbfde6c37cc20c80bf0477da0f2b3623aa45e64c54bf2d68f720f077760c9401a28c6c9d50552175b53c590cc8a3f7d4f90def46a7edf793904381e7ee2cf47a43e1220b088551dfd268b83cd994332e85201b8af88e47713270e4e5ee370e3f9deb728dee580902f1a59dcc7d5ad9c891de9da0ff5f8c78916ecfb63ebcc06916ff6e187505ed513a6f33da9f68fe0132ea8718731dcae0ed34f6e7f00b26bf4876f52aba83734dbbedf2b6fc7707fd1a99e6162af4c6b7b7b2ca639ebf6353c38cea3260bfa242fbe3b7c1ddca4f37566c26c7d04ffc34311b28fb1b2d9e6e127f81d41c4e47d803e57fea719faf1cf28db0c02ad5a50046f3751f5ed2c8e46a78466934a386849860f486600ca2397434b9daf5d8643dcffefb61e405467daed65de4143e4a5bdca648059469b815da150ad2aacd673072193cfe5fb15e36b41860e2497542ed4cb6a23932a1f851685669bff72bb83b658196b6e52978c32ea62969828ed06edadde14b7734963f24c6eb3318a6d7443207fddce28a2b1a0c47303dfce84aaf6b1d946ebc2047f60a2b376ad8825cafe5c0b322ea9b481dfef0e7f3e707827d7f9dddf8368ece16501b89870437f28a79efe01b5cd20faad95d2af1270418279b40f2e27ddccc765a80ae8c56e671adfcbbfe8eea4d385a3ec6f20b6804a2f4b05aa23642123c4279b8e9398679aba582a266bdc6549e0f9604ef23f0b0ea6760cacddbf7ae08fa566ac61b41132f306c16d7accbce12fd4525367add202ef1a4df36287aea24645ac08c2327a314c3750b6b878f2dd7d6add66e47cc679129b3398a352cbf9d54716c098fd7f2371dfc898f0b8b9df0b44f5f19d671f3ac773fed6b95e22b5d130914f28e18aff7d79fdb5567481b4638cb91643b883a1c9c809b04c670da5f1427eb9de81bf47bdae2fd05729ba09a9be72c263ff02a523f189e0d8cb71db9dd4e1a7bd0823e88c4fe5473bc2f34be6c01c2a977df0d4af42007ac6d7626aaa17976fe2a40b38ca9866af731af4e35d375b89923824447bc1d30869de7e84e7b44b5df751922f58029a732a24168d174b96ed3a3bd09b7578385695324ce41b8a98c1b1a28b768a21a2b3e6c9b6b01dc77309d36cae3662b1423d8a5671af569596bed16bac954601cddca5156195836e3dc94a8717f7b28a8f4f5dd172e3ada646e96991d7177d81d3858d907f5a3f7dcc7c54e336e86cf7ee11fef082dc774e9092a1faee6317c663b5f4fab38a8fbe9670916bc530bc47de7d0e9c0f031105dc6741f08ff7a9ea5bd895487df11133c98cdd76d5ed1c89185264814940202e250dc1d5ba865c7c0af54f2b63fe0e8737783fe6f52ad6392df9ffaf0b573e332ed05b21eb6517d0c2de48ee79140a6e8b9a4fb028b52f7c72ad9a351f7443ffead1371a5eee43d8cc053713930064d7c2cb9b68c9ba0651e07af69211f8f219042e5e7ebbf94313773a0b63534692b05d47d421e30df03f31d1dac3957e15c5d25bcf41d4c9152d712a2c2e2af7524305b77451b6dbe14babf141c63825bc1efdd062b121d150dcb0fa2b", "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"}) r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) close_range(r6, r7, 0x0) r8 = userfaultfd(0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000106000/0x4000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x4000, 0x2, 0x2}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) brk(0x55555ede6001) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x1, r2, 0x0}) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 17.980839025s ago: executing program 1 (id=3026): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000200)=@v3={0x3000000, [{0x10, 0x10000}, {0x7fff, 0x3}]}, 0x18, 0x2) r2 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x410180) dup3(0xffffffffffffffff, r2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) writev(r3, &(0x7f00000028c0)=[{&(0x7f0000002600)='u', 0x4000}, {0x0, 0x2}], 0x2) write$tun(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x41000000) 17.080907239s ago: executing program 1 (id=3027): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x7, 0x4) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) (async, rerun: 64) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) (async, rerun: 64) r6 = eventfd(0x400a) (rerun: 64) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) (async) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) (async, rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) (rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/244, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000840)) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10, &(0x7f0000000580)=ANY=[@ANYRES64=r0]) (async, rerun: 32) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000002c0)={0x1, r6}) (rerun: 32) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000001c0)=0x1) (async) sched_setattr(0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x4004010) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) (async, rerun: 64) r7 = openat$cgroup_ro(r4, &(0x7f0000000300)='blkio.bfq.dequeue\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, r7, 0x316ca000) (async) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x204000, 0x44) 15.858912506s ago: executing program 1 (id=3028): openat$kvm(0xffffff9c, &(0x7f0000000000), 0xb4000, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'dummy0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x10, r2, 0x80000001}, 0xc) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0xfffffffa, 0x18080) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121081, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bffd08307d80c79b1cb7b5f0c5b4d719c69c8513f748fbe425a7bc388c9019bef114779f7a10dc03a883d6e16a0a704f74297f381ff1db75098a9b38bb67206a7ff22e6ca46dc760bdad8a79d5951988c55a368dd1132ba7f129c2e65441eaa27492c069488df0881f123ca01ae873f5b36eb0fddb8f07420f5484d81cabde167c87ffbab6a94b24b5537bb1a08d56469f516fd4b7c66e2ac50d5ff4e52c628d0a89e53d0e78582a5ab2a2c714f66", 0xfe7c}], 0x1) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000000180)={{{0x1, 0x1}}, 0xfffffffffffffe32, 0x6, 0x0}) 10.514544973s ago: executing program 33 (id=3015): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x4, 0x0, 0x0, 0x0, 0x1, 0x2}}) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) dup(r4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001780)={&(0x7f0000000140), &(0x7f0000001580)=[{}, {}], &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00014000000000000001010c0001400000000000000101b81700000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000008c1703800c0000800800034000000002"], 0x1874}, 0x1, 0x0, 0x0, 0x8010}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x9c, 0x4) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 9.014039887s ago: executing program 34 (id=3019): r0 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) fanotify_init(0xa00, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x22, 0xffffffffffffffff, &(0x7f00000002c0)=0x49) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xffffffffffffff39, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) (fail_nth: 5) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xa3}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x42241, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000040)) write$sysctl(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r7 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r7, r7, 0x0, 0x4800000009) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000900)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x4000010) socket$l2tp6(0xa, 0x2, 0x73) 7.511212786s ago: executing program 35 (id=3022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt(r0, 0x1, 0x10, &(0x7f0000001180)=""/83, &(0x7f00000010c0)=0x53) (async) r1 = socket$inet(0x2, 0x801, 0x100) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[], 0x0}, 0x0) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = socket(0x1, 0x803, 0x0) (async) splice(r1, 0x0, r2, 0x0, 0x7ffff000, 0x0) (async) syz_io_uring_setup(0x70ca, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) write$nbd(r9, &(0x7f0000001200)={0x67446698, 0x1, 0x0, 0x1, 0x4, "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"}, 0x1010) (async) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7040010000000f00000005002a000000000008000300", @ANYRES32=r8, @ANYBLOB='\b\x00+'], 0x5c}}, 0x18) (async) syz_usb_control_io$rtl8150(r3, &(0x7f00000004c0)={0xc, &(0x7f00000003c0)={0x20, 0x24, 0x1c, {0x1c, 0x11, "7fd40c69e1d39c9664cf97d44ebc34ca6156f23d6767c8c17747"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}}, &(0x7f0000000740)={0x18, &(0x7f0000000580)={0x20, 0x11, 0xa6, "9c512c7dc14853f67a71bdc7a485a86822bb0b35c8c064c2aaf02ce72cade5ef2d591b97529a2aa92449f73c5c6c7aac11cd5272cf93987a2ccb6498f4690bad925496bc0c5ff2d13f0c403f612999a5f42edaafef454409795dd656bf31b6828c8aaec04ffef2ffc7e2f6c3c76dcce022acf0f7974e8cbb8d7bb1b5327ffb47b6fc79d23236dac54825c1f4690e404b6843bfc73008219a9feec1aa07f822fcea5f996143cb"}, &(0x7f0000000640)={0x0, 0xa, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000006c0)={0xc0, 0x5, 0x2, "65d2"}, &(0x7f0000000700)={0x40, 0x5, 0x5, "4a46859856"}}) (async) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_FLOW={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000400) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x30000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) acct(0x0) 6.493383703s ago: executing program 36 (id=3023): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x802) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0) 0s ago: executing program 37 (id=3028): openat$kvm(0xffffff9c, &(0x7f0000000000), 0xb4000, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'dummy0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x10, r2, 0x80000001}, 0xc) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0xfffffffa, 0x18080) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121081, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bffd08307d80c79b1cb7b5f0c5b4d719c69c8513f748fbe425a7bc388c9019bef114779f7a10dc03a883d6e16a0a704f74297f381ff1db75098a9b38bb67206a7ff22e6ca46dc760bdad8a79d5951988c55a368dd1132ba7f129c2e65441eaa27492c069488df0881f123ca01ae873f5b36eb0fddb8f07420f5484d81cabde167c87ffbab6a94b24b5537bb1a08d56469f516fd4b7c66e2ac50d5ff4e52c628d0a89e53d0e78582a5ab2a2c714f66", 0xfe7c}], 0x1) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000000180)={{{0x1, 0x1}}, 0xfffffffffffffe32, 0x6, 0x0}) kernel console output (not intermixed with test programs): 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 612.733720][T15503] RSP: 002b:00000000f549d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 612.733738][T15503] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f549d620 [ 612.733751][T15503] RDX: 000000000000000f RSI: 00000000f7446ff4 RDI: 0000000000000000 [ 612.733762][T15503] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 612.733772][T15503] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 612.733783][T15503] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 612.733810][T15503] [ 612.737581][T15503] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 612.803162][T15507] syzkaller0: entered promiscuous mode [ 613.011431][T15507] syzkaller0: entered allmulticast mode [ 613.044724][T15508] sch_tbf: burst 25 is lower than device ip6gre0 mtu (1280) ! [ 613.148804][ T1210] usb 6-1: USB disconnect, device number 48 [ 613.410070][T15533] FAULT_INJECTION: forcing a failure. [ 613.410070][T15533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 613.428440][T15533] CPU: 1 UID: 0 PID: 15533 Comm: syz.2.2694 Not tainted syzkaller #0 PREEMPT(full) [ 613.428463][T15533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 613.428473][T15533] Call Trace: [ 613.428481][T15533] [ 613.428488][T15533] dump_stack_lvl+0x189/0x250 [ 613.428512][T15533] ? __pfx____ratelimit+0x10/0x10 [ 613.428532][T15533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 613.428553][T15533] ? __pfx__printk+0x10/0x10 [ 613.428570][T15533] ? __might_fault+0xb0/0x130 [ 613.428609][T15533] should_fail_ex+0x414/0x560 [ 613.428637][T15533] _copy_from_user+0x2d/0xb0 [ 613.428659][T15533] get_compat_msghdr+0xad/0x4a0 [ 613.428683][T15533] ? __pfx_get_compat_msghdr+0x10/0x10 [ 613.428713][T15533] ___sys_sendmsg+0x193/0x2a0 [ 613.428733][T15533] ? __pfx____sys_sendmsg+0x10/0x10 [ 613.428784][T15533] ? __fget_files+0x2a/0x420 [ 613.428799][T15533] ? __fget_files+0x3a0/0x420 [ 613.428824][T15533] __sys_sendmsg+0x164/0x220 [ 613.428845][T15533] ? __pfx___sys_sendmsg+0x10/0x10 [ 613.428871][T15533] ? __pfx_ksys_write+0x10/0x10 [ 613.428896][T15533] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 613.428921][T15533] ? lockdep_hardirqs_on+0x9c/0x150 [ 613.428943][T15533] __do_fast_syscall_32+0xb6/0x2b0 [ 613.428966][T15533] ? lockdep_hardirqs_on+0x9c/0x150 [ 613.428990][T15533] do_fast_syscall_32+0x34/0x80 [ 613.429013][T15533] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 613.429032][T15533] RIP: 0023:0xf70ad539 [ 613.429048][T15533] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 613.429062][T15533] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 613.429081][T15533] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 613.429092][T15533] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 613.429102][T15533] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 613.429113][T15533] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 613.429124][T15533] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 613.429150][T15533] [ 613.717187][T15535] syzkaller0: entered allmulticast mode [ 613.726549][ T5829] hid (null): unknown global tag 0x21 [ 613.735661][ T5829] hid_parser_main: 6 callbacks suppressed [ 613.735677][ T5829] hid-generic 0000:008F:0006.001D: unknown main item tag 0x7 [ 613.748977][ T5829] hid-generic 0000:008F:0006.001D: unknown main item tag 0x7 [ 613.756442][ T5829] hid-generic 0000:008F:0006.001D: unknown main item tag 0x3 [ 613.763962][ T5829] hid-generic 0000:008F:0006.001D: unexpected long global item [ 613.772309][ T5829] hid-generic 0000:008F:0006.001D: probe with driver hid-generic failed with error -22 [ 613.791629][ T5904] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 613.958363][T15540] netlink: 'syz.2.2697': attribute type 10 has an invalid length. [ 613.977848][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.000580][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.022836][ T5904] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 614.043091][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.104009][ T5904] usb 2-1: config 0 descriptor?? [ 617.169104][ T5904] usbhid 2-1:0.0: can't add hid device: -71 [ 617.175461][ T5904] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 617.192842][ T5904] usb 2-1: USB disconnect, device number 87 [ 617.647710][T15562] netlink: set zone limit has 8 unknown bytes [ 617.851764][T15569] binder: 15568:15569 unknown command 1078485782 [ 617.881483][T15569] binder: 15568:15569 ioctl c0306201 80000d40 returned -22 [ 617.952088][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 617.952105][ T30] audit: type=1326 audit(1763102436.171:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15573 comm="syz.2.2707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 618.039629][ T30] audit: type=1326 audit(1763102436.171:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15573 comm="syz.2.2707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 618.064771][ T30] audit: type=1326 audit(1763102436.181:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15573 comm="syz.2.2707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 618.087200][ T30] audit: type=1326 audit(1763102436.181:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15573 comm="syz.2.2707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 618.110256][ T30] audit: type=1326 audit(1763102436.181:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15573 comm="syz.2.2707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 618.110307][ T30] audit: type=1326 audit(1763102436.181:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15573 comm="syz.2.2707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 618.110347][ T30] audit: type=1326 audit(1763102436.191:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15573 comm="syz.2.2707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 618.110385][ T30] audit: type=1326 audit(1763102436.191:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15573 comm="syz.2.2707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 618.110422][ T30] audit: type=1326 audit(1763102436.191:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15573 comm="syz.2.2707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 618.110458][ T30] audit: type=1326 audit(1763102436.191:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15573 comm="syz.2.2707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 618.955796][T15593] ptrace attach of "./syz-executor exec"[8809] was attempted by "./syz-executor exec"[15593] [ 619.609146][T15596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2713'. [ 619.618149][T15596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2713'. [ 619.793032][T15600] FAULT_INJECTION: forcing a failure. [ 619.793032][T15600] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 619.806461][T15600] CPU: 0 UID: 0 PID: 15600 Comm: syz.3.2716 Not tainted syzkaller #0 PREEMPT(full) [ 619.806487][T15600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 619.806498][T15600] Call Trace: [ 619.806507][T15600] [ 619.806515][T15600] dump_stack_lvl+0x189/0x250 [ 619.806543][T15600] ? __pfx____ratelimit+0x10/0x10 [ 619.806566][T15600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 619.806588][T15600] ? __pfx__printk+0x10/0x10 [ 619.806606][T15600] ? fs_reclaim_acquire+0x7d/0x100 [ 619.806630][T15600] should_fail_ex+0x414/0x560 [ 619.806658][T15600] prepare_alloc_pages+0x213/0x610 [ 619.806684][T15600] __alloc_frozen_pages_noprof+0x123/0x370 [ 619.806707][T15600] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 619.806734][T15600] ? policy_nodemask+0x27c/0x720 [ 619.806749][T15600] ? __lock_acquire+0xab9/0xd20 [ 619.806772][T15600] alloc_pages_mpol+0x232/0x4a0 [ 619.806795][T15600] vma_alloc_folio_noprof+0xe4/0x200 [ 619.806813][T15600] ? page_table_check_set+0x18d/0x730 [ 619.806836][T15600] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 619.806866][T15600] folio_prealloc+0x30/0x180 [ 619.806892][T15600] __handle_mm_fault+0x2a8b/0x5400 [ 619.806930][T15600] ? __pfx___handle_mm_fault+0x10/0x10 [ 619.806967][T15600] ? follow_page_pte+0x7ef/0x13e0 [ 619.806998][T15600] handle_mm_fault+0x40a/0x8e0 [ 619.807032][T15600] __get_user_pages+0x165c/0x2a00 [ 619.807101][T15600] __gup_longterm_locked+0x3dc/0x1660 [ 619.807142][T15600] ? gup_fast_fallback+0x1b86/0x22d0 [ 619.807166][T15600] gup_fast_fallback+0x1d65/0x22d0 [ 619.807222][T15600] ? __pfx_gup_fast_fallback+0x10/0x10 [ 619.807253][T15600] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 619.807276][T15600] ? is_valid_gup_args+0x11f/0x200 [ 619.807300][T15600] ? pin_user_pages_fast+0x4d/0xb0 [ 619.807322][T15600] io_pin_pages+0xba/0x1b0 [ 619.807342][T15600] io_sqe_buffer_register+0x16f/0x20a0 [ 619.807386][T15600] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 619.807410][T15600] ? copy_compat_iovec_from_user+0xf8/0x140 [ 619.807436][T15600] ? iovec_from_user+0x1ba/0x250 [ 619.807460][T15600] io_sqe_buffers_register+0x3b9/0x8e0 [ 619.807494][T15600] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 619.807518][T15600] ? __fget_files+0x3a0/0x420 [ 619.807534][T15600] ? __fget_files+0x2a/0x420 [ 619.807554][T15600] ? io_is_uring_fops+0xd/0x50 [ 619.807578][T15600] __se_sys_io_uring_register+0x9d3/0x11f0 [ 619.807603][T15600] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 619.807620][T15600] ? ksys_write+0x22a/0x250 [ 619.807642][T15600] ? exc_page_fault+0x82/0x100 [ 619.807665][T15600] ? __pfx_ksys_write+0x10/0x10 [ 619.807691][T15600] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 619.807720][T15600] ? lockdep_hardirqs_on+0x9c/0x150 [ 619.807746][T15600] __do_fast_syscall_32+0xb6/0x2b0 [ 619.807772][T15600] ? lockdep_hardirqs_on+0x9c/0x150 [ 619.807799][T15600] do_fast_syscall_32+0x34/0x80 [ 619.807823][T15600] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 619.807844][T15600] RIP: 0023:0xf7f77539 [ 619.807860][T15600] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 619.807874][T15600] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 00000000000001ab [ 619.807894][T15600] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 619.807906][T15600] RDX: 00000000800002c0 RSI: 000000000000011a RDI: 0000000000000000 [ 619.807917][T15600] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 619.807931][T15600] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 619.807942][T15600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 619.807972][T15600] [ 620.166601][ C0] vkms_vblank_simulate: vblank timer overrun [ 620.241138][T15598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2714'. [ 620.261762][T15604] SET target dimension over the limit! [ 620.270696][T15604] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2718'. [ 620.515695][T15620] FAULT_INJECTION: forcing a failure. [ 620.515695][T15620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.529829][T15620] CPU: 0 UID: 0 PID: 15620 Comm: syz.5.2721 Not tainted syzkaller #0 PREEMPT(full) [ 620.529852][T15620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 620.529864][T15620] Call Trace: [ 620.529872][T15620] [ 620.529880][T15620] dump_stack_lvl+0x189/0x250 [ 620.529908][T15620] ? __pfx____ratelimit+0x10/0x10 [ 620.529932][T15620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 620.529955][T15620] ? __pfx__printk+0x10/0x10 [ 620.529987][T15620] should_fail_ex+0x414/0x560 [ 620.530025][T15620] _copy_to_user+0x31/0xb0 [ 620.530049][T15620] simple_read_from_buffer+0xe1/0x170 [ 620.530079][T15620] proc_fail_nth_read+0x1b3/0x220 [ 620.530104][T15620] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 620.530130][T15620] ? rw_verify_area+0x2a6/0x4d0 [ 620.530151][T15620] ? __lock_acquire+0xab9/0xd20 [ 620.530167][T15620] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 620.530190][T15620] vfs_read+0x200/0xa30 [ 620.530219][T15620] ? fdget_pos+0x247/0x320 [ 620.530240][T15620] ? __pfx___mutex_lock+0x10/0x10 [ 620.530265][T15620] ? __pfx_vfs_read+0x10/0x10 [ 620.530289][T15620] ? __fget_files+0x2a/0x420 [ 620.530310][T15620] ? __fget_files+0x3a0/0x420 [ 620.530325][T15620] ? __fget_files+0x2a/0x420 [ 620.530348][T15620] ksys_read+0x145/0x250 [ 620.530372][T15620] ? __pfx_ksys_read+0x10/0x10 [ 620.530392][T15620] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 620.530412][T15620] ? lockdep_hardirqs_on+0x9c/0x150 [ 620.530431][T15620] __do_fast_syscall_32+0xb6/0x2b0 [ 620.530450][T15620] ? lockdep_hardirqs_on+0x9c/0x150 [ 620.530470][T15620] do_fast_syscall_32+0x34/0x80 [ 620.530489][T15620] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 620.530505][T15620] RIP: 0023:0xf7fb6539 [ 620.530516][T15620] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 620.530528][T15620] RSP: 002b:00000000f5464590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 620.530543][T15620] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f5464620 [ 620.530552][T15620] RDX: 000000000000000f RSI: 00000000f7446ff4 RDI: 0000000000000000 [ 620.530560][T15620] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 620.530574][T15620] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 620.530582][T15620] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 620.530603][T15620] [ 620.765204][ C0] vkms_vblank_simulate: vblank timer overrun [ 620.782051][ T5932] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 620.799597][T15622] pim6reg: entered allmulticast mode [ 620.809757][T15622] netlink: 'syz.1.2722': attribute type 10 has an invalid length. [ 620.824141][T15622] dummy0: entered promiscuous mode [ 620.830506][T15622] team0: Port device dummy0 added [ 621.163915][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 621.261369][ T5829] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 621.269899][ T5932] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 621.278193][ T5932] usb 3-1: config 0 has no interface number 0 [ 621.327588][ T5932] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 621.336794][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.449850][ T5932] usb 3-1: Product: syz [ 621.454898][ T5932] usb 3-1: Manufacturer: syz [ 621.459546][ T5932] usb 3-1: SerialNumber: syz [ 621.482662][ T5932] usb 3-1: config 0 descriptor?? [ 621.490135][ T5932] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 621.601465][ T5829] usb 2-1: Using ep0 maxpacket: 32 [ 621.620061][ T5829] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 621.635526][ T5829] usb 2-1: config 0 has no interface number 0 [ 621.655144][ T5829] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 621.666523][ T5829] usb 2-1: config 0 interface 85 has no altsetting 0 [ 621.676779][T15637] ptrace attach of "./syz-executor exec"[9359] was attempted by "./syz-executor exec"[15637] [ 621.714354][ T5932] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 621.728802][ T5829] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 621.733132][ T5932] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 621.774987][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.797915][ T5829] usb 2-1: Product: syz [ 621.810572][ T5829] usb 2-1: Manufacturer: syz [ 621.823223][ T5829] usb 2-1: SerialNumber: syz [ 621.838600][ T5829] usb 2-1: config 0 descriptor?? [ 621.906568][T15643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2728'. [ 622.095727][ T5829] appletouch 2-1:0.85: Failed to read mode from device. [ 622.104030][ T5829] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 622.231445][ T938] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 622.391469][ T938] usb 4-1: Using ep0 maxpacket: 32 [ 622.408519][ T938] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 622.417830][ T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.427308][ T938] usb 4-1: Product: syz [ 622.431702][ T938] usb 4-1: Manufacturer: syz [ 622.437516][ T938] usb 4-1: SerialNumber: syz [ 622.445772][ T938] usb 4-1: config 0 descriptor?? [ 622.517763][T15648] rtc_cmos 00:00: Alarms can be up to one day in the future [ 622.640583][ T5889] rtc_cmos 00:00: Alarms can be up to one day in the future [ 622.649688][ T5889] rtc_cmos 00:00: Alarms can be up to one day in the future [ 622.657430][ T5889] rtc_cmos 00:00: Alarms can be up to one day in the future [ 622.665237][ T5889] rtc_cmos 00:00: Alarms can be up to one day in the future [ 622.672877][ T5889] rtc rtc0: __rtc_set_alarm: err=-22 [ 623.090893][ T938] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 623.101209][ T938] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 623.108935][ T938] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 623.173277][ T938] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 623.269753][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 623.270373][ T938] usb 3-1: USB disconnect, device number 60 [ 623.298174][T15645] netlink: 1164 bytes leftover after parsing attributes in process `syz.3.2729'. [ 623.323646][ T938] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 623.356614][T15645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.380987][ T938] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 623.410555][T15645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.430528][ T938] quatech2 3-1:0.51: device disconnected [ 623.430941][ T5932] usb 4-1: USB disconnect, device number 87 [ 623.575528][ T5829] usb 2-1: USB disconnect, device number 88 [ 623.662108][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 623.662124][ T30] audit: type=1326 audit(1763102441.921:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15665 comm="syz.1.2738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 623.698849][ T30] audit: type=1326 audit(1763102441.951:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15665 comm="syz.1.2738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 623.723153][ T30] audit: type=1326 audit(1763102441.981:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15665 comm="syz.1.2738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 623.746090][ T30] audit: type=1326 audit(1763102441.981:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15665 comm="syz.1.2738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 623.768841][ T30] audit: type=1326 audit(1763102441.981:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15665 comm="syz.1.2738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 623.794550][ T30] audit: type=1326 audit(1763102441.981:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15665 comm="syz.1.2738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 623.825110][ T30] audit: type=1326 audit(1763102441.981:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15665 comm="syz.1.2738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 623.848531][ T30] audit: type=1326 audit(1763102441.981:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15665 comm="syz.1.2738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 623.871963][ T30] audit: type=1326 audit(1763102441.981:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15665 comm="syz.1.2738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 623.894777][ T30] audit: type=1326 audit(1763102441.981:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15665 comm="syz.1.2738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 624.552159][T15688] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[15688] [ 624.594656][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.605145][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.430231][T15703] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2748'. [ 626.001489][ T938] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 626.065768][T15715] netlink: 'syz.1.2752': attribute type 8 has an invalid length. [ 626.101532][T15715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2752'. [ 626.140382][T15715] bond0: entered promiscuous mode [ 626.146657][T15715] team0: entered promiscuous mode [ 626.159530][T15715] gretap0: entered promiscuous mode [ 626.164928][ T938] usb 4-1: Using ep0 maxpacket: 8 [ 626.173774][ T938] usb 4-1: config 0 has no interfaces? [ 626.180180][ T938] usb 4-1: config 0 has no interfaces? [ 626.187153][ T938] usb 4-1: config 0 has no interfaces? [ 626.198545][ T938] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 626.208078][T15715] bond0: left promiscuous mode [ 626.213001][ T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.221817][T15715] team0: left promiscuous mode [ 626.227125][ T938] usb 4-1: Product: syz [ 626.241538][T15715] gretap0: left promiscuous mode [ 626.251361][ T938] usb 4-1: Manufacturer: syz [ 626.255986][ T938] usb 4-1: SerialNumber: syz [ 626.322945][ T938] usb 4-1: config 0 descriptor?? [ 626.473222][T15727] netlink: set zone limit has 8 unknown bytes [ 626.514483][T15729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2757'. [ 627.161158][ T5904] usb 4-1: USB disconnect, device number 88 [ 628.521440][ T938] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 628.628731][T15770] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 628.702131][ T938] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.732566][ T938] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 628.821240][ T938] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 628.859878][ T938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.930956][ T938] usb 3-1: config 0 descriptor?? [ 628.966289][ T938] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 628.998984][ T938] dvb-usb: bulk message failed: -22 (3/0) [ 629.006571][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 629.017360][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 629.026584][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 629.040522][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 629.048746][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 629.070742][ T938] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 629.091758][ T938] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 629.098877][ T938] usb 3-1: media controller created [ 629.117153][ T938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 629.174853][ T938] dvb-usb: bulk message failed: -22 (6/0) [ 629.180871][ T938] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 629.198836][ T938] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input40 [ 629.217623][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 629.217637][ T30] audit: type=1800 audit(1763102447.461:2239): pid=15773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2770" name="/" dev="fuse" ino=4 res=0 errno=0 [ 629.384819][ T938] dvb-usb: schedule remote query interval to 150 msecs. [ 629.431369][ T938] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 629.593981][ T938] dvb-usb: bulk message failed: -22 (1/0) [ 629.601227][ T938] dvb-usb: error while querying for an remote control event. [ 629.674945][T15808] FAULT_INJECTION: forcing a failure. [ 629.674945][T15808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.698346][T15808] CPU: 1 UID: 0 PID: 15808 Comm: syz.5.2775 Not tainted syzkaller #0 PREEMPT(full) [ 629.698370][T15808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 629.698381][T15808] Call Trace: [ 629.698389][T15808] [ 629.698398][T15808] dump_stack_lvl+0x189/0x250 [ 629.698424][T15808] ? __pfx____ratelimit+0x10/0x10 [ 629.698447][T15808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 629.698469][T15808] ? __pfx__printk+0x10/0x10 [ 629.698486][T15808] ? __might_fault+0xb0/0x130 [ 629.698517][T15808] should_fail_ex+0x414/0x560 [ 629.698553][T15808] _copy_from_user+0x2d/0xb0 [ 629.698576][T15808] copy_uabi_to_xstate+0x397/0x970 [ 629.698611][T15808] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 629.698626][T15808] ? __local_bh_enable_ip+0x12d/0x1c0 [ 629.698650][T15808] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 629.698672][T15808] ? x86_task_fpu+0x4c/0x90 [ 629.698695][T15808] fpu__restore_sig+0xf75/0x1100 [ 629.698717][T15808] ? fpu__restore_sig+0xa42/0x1100 [ 629.698746][T15808] ? __pfx_fpu__restore_sig+0x10/0x10 [ 629.698796][T15808] ia32_restore_sigcontext+0x449/0x5b0 [ 629.698818][T15808] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 629.698842][T15808] ? _raw_spin_lock_irq+0xae/0xf0 [ 629.698868][T15808] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 629.698899][T15808] ? _raw_spin_unlock_irq+0x23/0x50 [ 629.698920][T15808] ? lockdep_hardirqs_on+0x9c/0x150 [ 629.698945][T15808] __ia32_compat_sys_rt_sigreturn+0x1a9/0x260 [ 629.698968][T15808] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 629.698994][T15808] ? do_int80_emulation+0xec/0x390 [ 629.699019][T15808] ? asm_int80_emulation+0x1a/0x20 [ 629.699036][T15808] do_int80_emulation+0x126/0x390 [ 629.699061][T15808] ? clear_bhb_loop+0x60/0xb0 [ 629.699076][T15808] ? clear_bhb_loop+0x60/0xb0 [ 629.699097][T15808] asm_int80_emulation+0x1a/0x20 [ 629.699113][T15808] RIP: 0023:0xf7fb6537 [ 629.699129][T15808] Code: 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 629.699144][T15808] RSP: 002b:00000000f54a655c EFLAGS: 00000206 [ 629.699161][T15808] RAX: 000000000000013c RBX: 0000000000000003 RCX: 00000000800014c0 [ 629.699172][T15808] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 629.699183][T15808] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 629.699194][T15808] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 629.699205][T15808] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 629.699232][T15808] [ 629.949506][ C1] vkms_vblank_simulate: vblank timer overrun [ 629.960948][ T938] dvb-usb: bulk message failed: -22 (1/0) [ 629.966766][ T938] dvb-usb: error while querying for an remote control event. [ 630.015523][T15815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2777'. [ 630.024740][T15815] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2777'. [ 630.120551][T15803] chnl_net:caif_netlink_parms(): no params data found [ 630.131444][ T5913] dvb-usb: bulk message failed: -22 (1/0) [ 630.137220][ T5913] dvb-usb: error while querying for an remote control event. [ 630.301365][ T5913] dvb-usb: bulk message failed: -22 (1/0) [ 630.307167][ T5913] dvb-usb: error while querying for an remote control event. [ 630.378320][T15803] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.386302][T15803] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.394480][T15803] bridge_slave_0: entered allmulticast mode [ 630.403622][T15803] bridge_slave_0: entered promiscuous mode [ 630.416893][T15803] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.424601][T15803] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.432751][T15803] bridge_slave_1: entered allmulticast mode [ 630.442958][T15803] bridge_slave_1: entered promiscuous mode [ 630.471490][ T5913] dvb-usb: bulk message failed: -22 (1/0) [ 630.506945][ T5913] dvb-usb: error while querying for an remote control event. [ 630.566086][T15803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.580312][T15803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.636630][T15827] netlink: set zone limit has 8 unknown bytes [ 630.671530][ T5913] dvb-usb: bulk message failed: -22 (1/0) [ 630.686052][T15803] team0: Port device team_slave_0 added [ 630.686492][ T5913] dvb-usb: error while querying for an remote control event. [ 630.809486][ T5913] usb 3-1: USB disconnect, device number 61 [ 630.916676][ T5913] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 630.988952][T15803] team0: Port device team_slave_1 added [ 631.103257][T15803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.110244][T15803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.153313][ T5832] Bluetooth: hci4: command tx timeout [ 631.180893][T15803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.214831][ T30] audit: type=1326 audit(1763102449.471:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.1.2785" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x0 [ 631.273448][T15803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.286573][T15803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.316998][T15803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.433538][T15803] hsr_slave_0: entered promiscuous mode [ 631.440092][T15803] hsr_slave_1: entered promiscuous mode [ 631.446471][T15803] debugfs: 'hsr0' already exists in 'hsr' [ 631.453155][T15803] Cannot create hsr debugfs directory [ 631.760630][T15803] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.869492][T15803] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.947704][T15803] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.036361][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 632.053074][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 632.072940][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 632.084979][ T5829] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 632.096171][T15803] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.105967][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 632.114470][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 632.264271][ T5829] usb 6-1: unable to get BOS descriptor or descriptor too short [ 632.288429][ T5829] usb 6-1: not running at top speed; connect to a high speed hub [ 632.310438][ T5829] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.338967][ T5829] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 632.365801][ T5829] usb 6-1: string descriptor 0 read error: -22 [ 632.382940][ T5829] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 632.395080][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.432750][ T5829] usb 6-1: 0:2 : does not exist [ 632.460442][T15803] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 632.492572][T15803] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 632.511954][T15803] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 632.534537][T15803] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 632.635580][T15847] chnl_net:caif_netlink_parms(): no params data found [ 632.804724][T15847] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.814825][T15847] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.823381][T15847] bridge_slave_0: entered allmulticast mode [ 632.831850][T15847] bridge_slave_0: entered promiscuous mode [ 632.852646][T15847] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.860917][T15847] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.868892][T15847] bridge_slave_1: entered allmulticast mode [ 632.877450][T15847] bridge_slave_1: entered promiscuous mode [ 633.021868][T15847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.054277][T15847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.065140][ T5829] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 633.123066][ T5829] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 633.138402][ T5829] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 633.222303][ T5832] Bluetooth: hci4: command tx timeout [ 633.233559][T15847] team0: Port device team_slave_0 added [ 633.250017][ T5829] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 633.259618][T15803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.278086][T15847] team0: Port device team_slave_1 added [ 633.285524][ T5829] usb 6-1: USB disconnect, device number 49 [ 633.294556][T15864] openvswitch: netlink: Key type 31 is not supported [ 633.409508][T15847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.416681][T15847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.449615][T15847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.475922][T15847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.483402][T15847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.519858][T15847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.572364][ T5904] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 633.667936][T15803] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.712449][T15847] hsr_slave_0: entered promiscuous mode [ 633.722835][T15847] hsr_slave_1: entered promiscuous mode [ 633.731620][T15847] debugfs: 'hsr0' already exists in 'hsr' [ 633.738249][T15847] Cannot create hsr debugfs directory [ 633.751370][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 633.759132][ T5904] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 633.770915][ T5904] usb 2-1: can't read configurations, error -61 [ 633.840086][T15792] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.847387][T15792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.909590][T15795] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.911516][ T5904] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 633.916845][T15795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.010144][T15872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2792'. [ 634.082612][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 634.114929][ T5904] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 634.129700][ T5904] usb 2-1: can't read configurations, error -61 [ 634.152841][ T5904] usb usb2-port1: attempt power cycle [ 634.182584][ T5832] Bluetooth: hci0: command tx timeout [ 634.199908][ T30] audit: type=1326 audit(1763102452.451:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15873 comm="syz.4.2793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 634.223718][ T30] audit: type=1326 audit(1763102452.451:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15873 comm="syz.4.2793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 634.248868][ T30] audit: type=1326 audit(1763102452.451:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15873 comm="syz.4.2793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 634.272794][ T30] audit: type=1326 audit(1763102452.451:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15873 comm="syz.4.2793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 634.295210][ T30] audit: type=1326 audit(1763102452.451:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15873 comm="syz.4.2793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 634.317706][ T30] audit: type=1326 audit(1763102452.451:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15873 comm="syz.4.2793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 634.342895][ T30] audit: type=1326 audit(1763102452.451:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15873 comm="syz.4.2793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 634.365508][ T30] audit: type=1326 audit(1763102452.451:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15873 comm="syz.4.2793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 634.368304][T15847] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.389169][ T30] audit: type=1326 audit(1763102452.451:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15873 comm="syz.4.2793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 634.421937][ T30] audit: type=1326 audit(1763102452.451:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15873 comm="syz.4.2793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 634.444778][ T30] audit: type=1326 audit(1763102452.451:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15873 comm="syz.4.2793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 634.524602][T15847] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.531491][ T5904] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 634.583058][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 634.597256][ T5904] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 634.606871][ T5904] usb 2-1: can't read configurations, error -61 [ 634.626944][T15877] netlink: 216 bytes leftover after parsing attributes in process `syz.5.2794'. [ 634.673686][T15847] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.715505][T15803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.740921][T15847] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.741784][ T5904] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 634.817860][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 634.900249][ T5904] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 634.925940][ T5904] usb 2-1: can't read configurations, error -61 [ 634.934448][ T5904] usb usb2-port1: unable to enumerate USB device [ 635.232721][T15803] veth0_vlan: entered promiscuous mode [ 635.290429][T15803] veth1_vlan: entered promiscuous mode [ 635.338062][ T5832] Bluetooth: hci4: command tx timeout [ 635.539302][T15847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 635.558211][T15803] veth0_macvtap: entered promiscuous mode [ 635.568460][T15847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 635.589171][T15803] veth1_macvtap: entered promiscuous mode [ 635.597863][T15847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 635.618797][T15847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 635.649372][T15803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.674039][T15803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.718545][T15795] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.728892][T15795] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.740345][T15795] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.749515][T15795] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.855565][T15847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.867795][T15794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.878525][T15794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.911859][T15847] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.919885][T15793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.928342][T15793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.935365][T15795] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.942873][T15795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.974105][T15798] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.981304][T15798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.150708][T15847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.271975][ T5832] Bluetooth: hci0: command tx timeout [ 636.296441][T15847] veth0_vlan: entered promiscuous mode [ 636.374819][T15847] veth1_vlan: entered promiscuous mode [ 636.499552][T15847] veth0_macvtap: entered promiscuous mode [ 636.517124][T15847] veth1_macvtap: entered promiscuous mode [ 636.548971][T15847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 636.560796][T15898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2798'. [ 636.575665][T15847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.602150][T15898] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2798'. [ 636.603213][T15792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.663091][T15792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.673739][T15792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.698059][T15792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.877551][T15794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.905138][T15794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.006339][T15793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.073098][ T7209] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 637.074646][T15793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.191127][T15911] veth0_to_team: entered promiscuous mode [ 637.241907][ T7209] usb 2-1: Using ep0 maxpacket: 32 [ 637.265442][T15906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.292024][T15906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.391938][ T5832] Bluetooth: hci4: command tx timeout [ 637.515565][ T7209] usb 2-1: unable to get BOS descriptor or descriptor too short [ 637.540250][T15892] syz.3.2772 (15892): drop_caches: 1 [ 637.553677][ T7209] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 637.564001][ T7209] usb 2-1: can't read configurations, error -71 [ 637.681426][ T1210] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 637.855808][ T1210] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.882842][ T1210] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 637.894988][ T1210] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 637.905891][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.953513][ T1210] usb 3-1: config 0 descriptor?? [ 638.323364][T15931] loop6: detected capacity change from 0 to 524287999 [ 638.342601][ T5832] Bluetooth: hci0: command tx timeout [ 638.375399][T15930] netlink: 'syz.3.2805': attribute type 10 has an invalid length. [ 638.404546][T15930] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 639.351435][ T1210] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 639.550005][ T1210] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 639.622458][ T1210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 639.706052][ T1210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 639.731467][ T5913] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 639.758264][ T1210] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 639.789051][ T1210] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 639.809725][ T1210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.839800][ T1210] usb 4-1: config 0 descriptor?? [ 639.913742][ T5913] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 639.986479][ T5913] usb 2-1: config 0 has no interface number 0 [ 640.038118][T15951] netlink: 'syz.5.2812': attribute type 2 has an invalid length. [ 640.064283][ T5913] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=77.f4 [ 640.078780][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.097527][ T5913] usb 2-1: Product: syz [ 640.109791][ T5913] usb 2-1: Manufacturer: syz [ 640.122172][ T5913] usb 2-1: SerialNumber: syz [ 640.172333][ T5913] usb 2-1: config 0 descriptor?? [ 640.185845][T15946] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 640.396427][ T938] usb 3-1: USB disconnect, device number 62 [ 640.413611][ T1210] plantronics 0003:047F:FFFF.001E: ignoring exceeding usage max [ 640.421643][ T5832] Bluetooth: hci0: command tx timeout [ 640.437899][ T5913] asix 2-1:0.251: probe with driver asix failed with error -71 [ 640.458810][ T5913] usb 2-1: USB disconnect, device number 95 [ 640.463023][ T1210] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 640.798164][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 640.798181][ T30] audit: type=1326 audit(1763102459.051:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15962 comm="syz.5.2816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 640.838253][ T30] audit: type=1326 audit(1763102459.091:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15962 comm="syz.5.2816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 641.000048][ T30] audit: type=1326 audit(1763102459.091:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15962 comm="syz.5.2816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 641.039851][ T30] audit: type=1326 audit(1763102459.091:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15962 comm="syz.5.2816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 641.075053][ T30] audit: type=1326 audit(1763102459.091:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15962 comm="syz.5.2816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 641.143578][ T30] audit: type=1326 audit(1763102459.111:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15962 comm="syz.5.2816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 641.196002][ T30] audit: type=1326 audit(1763102459.111:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15962 comm="syz.5.2816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 641.306894][ T30] audit: type=1326 audit(1763102459.111:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15962 comm="syz.5.2816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 641.332012][ T30] audit: type=1326 audit(1763102459.121:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15962 comm="syz.5.2816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 641.355986][T15969] fuse: Bad value for 'fd' [ 641.361980][ T30] audit: type=1326 audit(1763102459.121:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15962 comm="syz.5.2816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 641.378968][T15969] dlm: Unknown command passed to DLM device : 0 [ 641.378968][T15969] [ 642.445261][ T1210] usb 4-1: USB disconnect, device number 89 [ 642.446908][T15980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2821'. [ 643.049855][T15991] netlink: 'syz.2.2826': attribute type 10 has an invalid length. [ 643.076282][T15991] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 643.354529][T16002] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 643.471451][T16003] bridge0: entered promiscuous mode [ 643.842468][T16014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2832'. [ 644.015971][T16019] fuse: Bad value for 'fd' [ 644.355809][T16022] FAULT_INJECTION: forcing a failure. [ 644.355809][T16022] name failslab, interval 1, probability 0, space 0, times 0 [ 644.370908][T16022] CPU: 1 UID: 0 PID: 16022 Comm: syz.5.2834 Not tainted syzkaller #0 PREEMPT(full) [ 644.370924][T16022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 644.370930][T16022] Call Trace: [ 644.370935][T16022] [ 644.370941][T16022] dump_stack_lvl+0x189/0x250 [ 644.370958][T16022] ? __pfx____ratelimit+0x10/0x10 [ 644.370972][T16022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 644.370985][T16022] ? __pfx__printk+0x10/0x10 [ 644.370998][T16022] ? __pfx___might_resched+0x10/0x10 [ 644.371009][T16022] ? fs_reclaim_acquire+0x7d/0x100 [ 644.371022][T16022] should_fail_ex+0x414/0x560 [ 644.371039][T16022] should_failslab+0xa8/0x100 [ 644.371050][T16022] __kmalloc_noprof+0xcb/0x7f0 [ 644.371063][T16022] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 644.371077][T16022] ? __local_bh_enable_ip+0x12d/0x1c0 [ 644.371090][T16022] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 644.371106][T16022] genl_family_rcv_msg_doit+0xb8/0x300 [ 644.371122][T16022] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 644.371138][T16022] ? apparmor_capable+0x137/0x1b0 [ 644.371150][T16022] ? bpf_lsm_capable+0x9/0x20 [ 644.371162][T16022] ? security_capable+0x7e/0x2e0 [ 644.371178][T16022] genl_rcv_msg+0x60e/0x790 [ 644.371192][T16022] ? __pfx_genl_rcv_msg+0x10/0x10 [ 644.371203][T16022] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 644.371213][T16022] ? __pfx_nl80211_set_key+0x10/0x10 [ 644.371223][T16022] ? __pfx_nl80211_post_doit+0x10/0x10 [ 644.371235][T16022] ? __asan_memcpy+0x40/0x70 [ 644.371247][T16022] ? __pfx_ref_tracker_free+0x10/0x10 [ 644.371265][T16022] netlink_rcv_skb+0x208/0x470 [ 644.371273][T16022] ? __lock_acquire+0xab9/0xd20 [ 644.371283][T16022] ? __pfx_genl_rcv_msg+0x10/0x10 [ 644.371296][T16022] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 644.371320][T16022] ? down_read+0x1ad/0x2e0 [ 644.371331][T16022] genl_rcv+0x28/0x40 [ 644.371341][T16022] netlink_unicast+0x82f/0x9e0 [ 644.371359][T16022] ? __pfx_netlink_unicast+0x10/0x10 [ 644.371373][T16022] ? netlink_sendmsg+0x642/0xb30 [ 644.371382][T16022] ? skb_put+0x11b/0x210 [ 644.371394][T16022] netlink_sendmsg+0x805/0xb30 [ 644.371408][T16022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.371419][T16022] ? __import_iovec+0x5d4/0x7f0 [ 644.371435][T16022] ? aa_sock_msg_perm+0xf1/0x1d0 [ 644.371455][T16022] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 644.371465][T16022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.371475][T16022] __sock_sendmsg+0x21c/0x270 [ 644.371490][T16022] ____sys_sendmsg+0x505/0x830 [ 644.371503][T16022] ? __pfx_____sys_sendmsg+0x10/0x10 [ 644.371523][T16022] ___sys_sendmsg+0x21f/0x2a0 [ 644.371534][T16022] ? __pfx____sys_sendmsg+0x10/0x10 [ 644.371563][T16022] ? __fget_files+0x2a/0x420 [ 644.371573][T16022] ? __fget_files+0x3a0/0x420 [ 644.371587][T16022] __sys_sendmsg+0x164/0x220 [ 644.371599][T16022] ? __pfx___sys_sendmsg+0x10/0x10 [ 644.371614][T16022] ? __pfx_ksys_write+0x10/0x10 [ 644.371629][T16022] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 644.371643][T16022] ? lockdep_hardirqs_on+0x9c/0x150 [ 644.371658][T16022] __do_fast_syscall_32+0xb6/0x2b0 [ 644.371672][T16022] ? lockdep_hardirqs_on+0x9c/0x150 [ 644.371687][T16022] do_fast_syscall_32+0x34/0x80 [ 644.371700][T16022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 644.371712][T16022] RIP: 0023:0xf7fb6539 [ 644.371723][T16022] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 644.371732][T16022] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 644.371744][T16022] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 644.371751][T16022] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 644.371757][T16022] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 644.371762][T16022] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 644.371768][T16022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 644.371783][T16022] [ 644.754906][ C1] vkms_vblank_simulate: vblank timer overrun [ 645.780357][T16033] fuse: Invalid rootmode [ 645.806795][T16033] dlm: Unknown command passed to DLM device : 0 [ 645.806795][T16033] [ 645.875498][T16038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2840'. [ 646.140755][T16044] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2843'. [ 646.601102][T15798] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.619196][T15798] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.628768][T15798] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.923891][T15798] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.281459][ T5913] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 647.361061][T16071] fuse: Invalid rootmode [ 647.370147][T16071] dlm: Unknown command passed to DLM device : 0 [ 647.370147][T16071] [ 647.443948][ T5913] usb 6-1: config 0 has no interfaces? [ 647.449481][ T5913] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 647.462082][ T5829] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 647.473872][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.537838][ T5913] usb 6-1: config 0 descriptor?? [ 647.635184][ T5829] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 647.645595][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.661497][ T5829] usb 3-1: Product: syz [ 647.666095][ T5829] usb 3-1: Manufacturer: syz [ 647.670879][ T5829] usb 3-1: SerialNumber: syz [ 647.682327][ T5829] usb 3-1: config 0 descriptor?? [ 647.684379][T16083] FAULT_INJECTION: forcing a failure. [ 647.684379][T16083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.701463][T16083] CPU: 1 UID: 0 PID: 16083 Comm: syz.4.2856 Not tainted syzkaller #0 PREEMPT(full) [ 647.701488][T16083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 647.701499][T16083] Call Trace: [ 647.701506][T16083] [ 647.701514][T16083] dump_stack_lvl+0x189/0x250 [ 647.701545][T16083] ? __pfx____ratelimit+0x10/0x10 [ 647.701568][T16083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 647.701588][T16083] ? __pfx__printk+0x10/0x10 [ 647.701606][T16083] ? __might_fault+0xb0/0x130 [ 647.701639][T16083] should_fail_ex+0x414/0x560 [ 647.701669][T16083] _copy_from_user+0x2d/0xb0 [ 647.701691][T16083] compat_restore_altstack+0xdc/0x220 [ 647.701714][T16083] ? __pfx_compat_restore_altstack+0x10/0x10 [ 647.701735][T16083] ? _raw_spin_lock_irq+0xae/0xf0 [ 647.701770][T16083] ? _raw_spin_unlock_irq+0x23/0x50 [ 647.701791][T16083] ? lockdep_hardirqs_on+0x9c/0x150 [ 647.701814][T16083] __ia32_compat_sys_rt_sigreturn+0x1c3/0x260 [ 647.701836][T16083] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 647.701860][T16083] ? do_int80_emulation+0xec/0x390 [ 647.701884][T16083] ? asm_int80_emulation+0x1a/0x20 [ 647.701902][T16083] do_int80_emulation+0x126/0x390 [ 647.701926][T16083] ? clear_bhb_loop+0x60/0xb0 [ 647.701941][T16083] ? clear_bhb_loop+0x60/0xb0 [ 647.701961][T16083] asm_int80_emulation+0x1a/0x20 [ 647.701977][T16083] RIP: 0023:0xf70ad537 [ 647.701993][T16083] Code: 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 647.702009][T16083] RSP: 002b:00000000f549d55c EFLAGS: 00000206 [ 647.702025][T16083] RAX: 000000000000013c RBX: 0000000000000003 RCX: 0000000080001280 [ 647.702038][T16083] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 647.702049][T16083] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 647.702059][T16083] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 647.702070][T16083] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 647.702096][T16083] [ 647.861451][ T1210] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 647.862366][ C1] vkms_vblank_simulate: vblank timer overrun [ 647.925188][ C1] vkms_vblank_simulate: vblank timer overrun [ 647.940249][ T24] usb 6-1: USB disconnect, device number 50 [ 648.031335][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.133738][ T1210] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.198391][ T1210] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 648.219157][ T1210] usb 2-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 648.240960][ T5829] usb 3-1: Firmware: major: 130, minor: 102, hardware type: HULUSB (4) [ 648.250502][ T1210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.294749][ T1210] usb 2-1: config 0 descriptor?? [ 648.450600][T16066] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 648.479217][ T5829] usb 3-1: failed to fetch extended address, random address set [ 648.626311][ T5829] usb 3-1: USB disconnect, device number 63 [ 648.892039][ T5889] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 649.067555][ T5889] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 649.091865][ T938] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 649.121420][ T5889] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 649.134408][ T5889] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 649.144979][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.205747][T16107] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 649.284709][ T938] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 649.299001][ T938] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 649.310925][ T938] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 649.321909][ T938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.337215][T16096] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 649.350994][ T938] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 649.404936][ T1210] usb 4-1: USB disconnect, device number 90 [ 649.512509][ T5932] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 649.564905][ T938] usb 6-1: USB disconnect, device number 51 [ 649.691773][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 649.707014][ T5932] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 649.723111][ T5932] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.747005][ T5932] usb 3-1: config 0 has no interface number 0 [ 649.760675][ T5932] usb 3-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 649.786699][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.809119][ T5932] usb 3-1: config 0 descriptor?? [ 649.826450][ T5932] uvcvideo 3-1:0.64: Found UVC 0.00 device (0bd3:05f4) [ 649.836108][ T5932] uvcvideo 3-1:0.64: No valid video chain found. [ 649.925894][T16117] syzkaller1: entered promiscuous mode [ 649.943942][T16117] syzkaller1: entered allmulticast mode [ 650.047861][ T1210] usb 3-1: USB disconnect, device number 64 [ 650.265157][T16128] FAULT_INJECTION: forcing a failure. [ 650.265157][T16128] name failslab, interval 1, probability 0, space 0, times 0 [ 650.278278][T16128] CPU: 0 UID: 0 PID: 16128 Comm: syz.3.2872 Not tainted syzkaller #0 PREEMPT(full) [ 650.278302][T16128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 650.278311][T16128] Call Trace: [ 650.278319][T16128] [ 650.278326][T16128] dump_stack_lvl+0x189/0x250 [ 650.278352][T16128] ? __pfx____ratelimit+0x10/0x10 [ 650.278373][T16128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 650.278395][T16128] ? __pfx__printk+0x10/0x10 [ 650.278417][T16128] ? __pfx___might_resched+0x10/0x10 [ 650.278441][T16128] should_fail_ex+0x414/0x560 [ 650.278470][T16128] should_failslab+0xa8/0x100 [ 650.278490][T16128] kmem_cache_alloc_noprof+0x74/0x6e0 [ 650.278512][T16128] ? security_file_alloc+0x34/0x330 [ 650.278535][T16128] security_file_alloc+0x34/0x330 [ 650.278555][T16128] init_file+0x93/0x2f0 [ 650.278576][T16128] alloc_empty_file+0x6e/0x1d0 [ 650.278594][T16128] path_openat+0x107/0x3830 [ 650.278624][T16128] ? stack_trace_save+0x9c/0xe0 [ 650.278649][T16128] ? stack_depot_save_flags+0x40/0x860 [ 650.278680][T16128] ? kasan_save_track+0x4f/0x80 [ 650.278704][T16128] ? getname_flags+0xb8/0x540 [ 650.278720][T16128] ? do_sys_openat2+0xbc/0x1c0 [ 650.278738][T16128] ? __ia32_compat_sys_openat+0x131/0x160 [ 650.278791][T16128] ? do_fast_syscall_32+0x34/0x80 [ 650.278815][T16128] ? __pfx_path_openat+0x10/0x10 [ 650.278854][T16128] do_filp_open+0x1fa/0x410 [ 650.278872][T16128] ? __lock_acquire+0xab9/0xd20 [ 650.278891][T16128] ? __pfx_do_filp_open+0x10/0x10 [ 650.278932][T16128] ? _raw_spin_unlock+0x28/0x50 [ 650.278951][T16128] ? alloc_fd+0x64c/0x6c0 [ 650.278986][T16128] do_sys_openat2+0x121/0x1c0 [ 650.279008][T16128] ? __pfx_do_sys_openat2+0x10/0x10 [ 650.279027][T16128] ? ksys_write+0x22a/0x250 [ 650.279048][T16128] ? exc_page_fault+0x82/0x100 [ 650.279071][T16128] ? __pfx_ksys_write+0x10/0x10 [ 650.279097][T16128] __ia32_compat_sys_openat+0x131/0x160 [ 650.279123][T16128] __do_fast_syscall_32+0xb6/0x2b0 [ 650.279148][T16128] ? lockdep_hardirqs_on+0x9c/0x150 [ 650.279174][T16128] do_fast_syscall_32+0x34/0x80 [ 650.279198][T16128] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 650.279219][T16128] RIP: 0023:0xf70dd539 [ 650.279234][T16128] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 650.279250][T16128] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 650.279269][T16128] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 650.279283][T16128] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 650.279293][T16128] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 650.279304][T16128] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 650.279314][T16128] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 650.279341][T16128] [ 650.643884][ T10] usb 2-1: USB disconnect, device number 96 [ 650.837864][T16134] loop6: detected capacity change from 0 to 7 [ 650.869166][ T5838] Dev loop6: unable to read RDB block 7 [ 650.876064][ T5838] loop6: unable to read partition table [ 650.883598][ T5838] loop6: partition table beyond EOD, truncated [ 650.891004][T16134] Dev loop6: unable to read RDB block 7 [ 650.897199][T16134] loop6: unable to read partition table [ 650.908239][T16134] loop6: partition table beyond EOD, truncated [ 650.918179][T16134] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 651.161759][ T10] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 651.311371][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 651.323303][ T10] usb 4-1: config 0 has no interfaces? [ 651.339051][ T10] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 651.348728][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.367702][ T10] usb 4-1: config 0 descriptor?? [ 651.550145][T16152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2883'. [ 651.998611][T16167] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2884'. [ 652.591405][ T938] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 652.743280][ T938] usb 2-1: config index 0 descriptor too short (expected 27, got 9) [ 652.751758][ T938] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 652.760749][ T938] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 652.770467][ T938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.788325][ T938] usb 2-1: config 0 descriptor?? [ 653.023866][T16173] binder: 16170:16173 ioctl 40086602 80000080 returned -22 [ 653.035708][T16173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2888'. [ 653.050464][T16173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2888'. [ 653.247333][ T10] usb 2-1: USB disconnect, device number 97 [ 654.135549][ T5932] usb 4-1: USB disconnect, device number 91 [ 654.216177][T16200] FAULT_INJECTION: forcing a failure. [ 654.216177][T16200] name failslab, interval 1, probability 0, space 0, times 0 [ 654.229138][T16200] CPU: 1 UID: 0 PID: 16200 Comm: syz.4.2895 Not tainted syzkaller #0 PREEMPT(full) [ 654.229163][T16200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 654.229174][T16200] Call Trace: [ 654.229182][T16200] [ 654.229190][T16200] dump_stack_lvl+0x189/0x250 [ 654.229218][T16200] ? __pfx____ratelimit+0x10/0x10 [ 654.229253][T16200] ? __pfx_dump_stack_lvl+0x10/0x10 [ 654.229279][T16200] ? __pfx__printk+0x10/0x10 [ 654.229300][T16200] ? __pfx___might_resched+0x10/0x10 [ 654.229320][T16200] ? fs_reclaim_acquire+0x7d/0x100 [ 654.229341][T16200] should_fail_ex+0x414/0x560 [ 654.229372][T16200] should_failslab+0xa8/0x100 [ 654.229391][T16200] __kvmalloc_node_noprof+0x158/0x910 [ 654.229418][T16200] ? __kmalloc_cache_node_noprof+0x471/0x6f0 [ 654.229441][T16200] ? page_pool_create_percpu+0x314/0xbc0 [ 654.229462][T16200] ? page_pool_create_percpu+0xb2/0xbc0 [ 654.229488][T16200] page_pool_create_percpu+0x314/0xbc0 [ 654.229515][T16200] __veth_napi_enable_range+0x16c/0x700 [ 654.229543][T16200] ? __pfx___veth_napi_enable_range+0x10/0x10 [ 654.229575][T16200] ? netif_napi_set_irq_locked+0x20b/0x720 [ 654.229604][T16200] veth_napi_enable_range+0xff/0x200 [ 654.229631][T16200] veth_set_features+0x1c8/0x2a0 [ 654.229652][T16200] __netdev_update_features+0xa43/0x1be0 [ 654.229683][T16200] ? __lock_acquire+0xab9/0xd20 [ 654.229715][T16200] ? __pfx___netdev_update_features+0x10/0x10 [ 654.229736][T16200] ? __lock_acquire+0xab9/0xd20 [ 654.229764][T16200] ? __might_fault+0xb0/0x130 [ 654.229820][T16200] ethtool_set_one_feature+0x2b4/0x300 [ 654.229844][T16200] ? __pfx_ethtool_set_one_feature+0x10/0x10 [ 654.229867][T16200] ? bpf_lsm_capable+0x9/0x20 [ 654.229887][T16200] ? security_capable+0x7e/0x2e0 [ 654.229917][T16200] dev_ethtool+0x1098/0x19c0 [ 654.229950][T16200] ? __pfx_dev_ethtool+0x10/0x10 [ 654.229986][T16200] ? dev_load+0x21/0x1f0 [ 654.230011][T16200] dev_ioctl+0x392/0x1150 [ 654.230039][T16200] compat_sock_ioctl+0xc3b/0xc80 [ 654.230067][T16200] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 654.230091][T16200] ? __fget_files+0x3a0/0x420 [ 654.230107][T16200] ? __fget_files+0x2a/0x420 [ 654.230128][T16200] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 654.230151][T16200] __ia32_compat_sys_ioctl+0x543/0x840 [ 654.230177][T16200] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 654.230200][T16200] ? __fget_files+0x3a0/0x420 [ 654.230227][T16200] ? fput+0xa0/0xd0 [ 654.230251][T16200] ? ksys_write+0x22a/0x250 [ 654.230277][T16200] ? exc_page_fault+0x82/0x100 [ 654.230301][T16200] ? __pfx_ksys_write+0x10/0x10 [ 654.230326][T16200] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 654.230350][T16200] ? lockdep_hardirqs_on+0x9c/0x150 [ 654.230380][T16200] __do_fast_syscall_32+0xb6/0x2b0 [ 654.230404][T16200] ? lockdep_hardirqs_on+0x9c/0x150 [ 654.230429][T16200] do_fast_syscall_32+0x34/0x80 [ 654.230453][T16200] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 654.230473][T16200] RIP: 0023:0xf70ad539 [ 654.230489][T16200] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 654.230504][T16200] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 654.230523][T16200] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 654.230535][T16200] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 654.230546][T16200] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 654.230557][T16200] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 654.230567][T16200] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 654.230596][T16200] [ 654.230715][T16200] page_pool_create_percpu() gave up with errno -12 [ 654.600298][T16207] netlink: 'syz.2.2896': attribute type 10 has an invalid length. [ 654.631783][T16200] veth0_to_team: set_features() failed (-12); wanted 0x0000612e4fdd49e9, left 0x0000612e4fdd09e9 [ 654.770285][T16207] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 654.781244][T16207] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 654.793952][T16207] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 655.003506][T16215] loop2: detected capacity change from 0 to 7 [ 655.014953][ T5838] Dev loop2: unable to read RDB block 7 [ 655.020575][ T5838] loop2: AHDI p2 p3 [ 655.028793][ T5838] loop2: partition table partially beyond EOD, truncated [ 655.042230][ T5838] loop2: p2 start 1702059890 is beyond EOD, truncated [ 655.096770][T16215] Dev loop2: unable to read RDB block 7 [ 655.120741][T16215] loop2: AHDI p2 p3 [ 655.196348][T16215] loop2: partition table partially beyond EOD, truncated [ 655.251477][T16215] loop2: p2 start 1702059890 is beyond EOD, truncated [ 655.302015][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 655.340878][T16219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2901'. [ 656.500648][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 656.500664][ T30] audit: type=1326 audit(1763102474.751:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16245 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 656.541448][ T5889] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 656.615153][ T30] audit: type=1326 audit(1763102474.791:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16245 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 656.691416][ T30] audit: type=1326 audit(1763102474.811:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16245 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 656.732758][ T30] audit: type=1326 audit(1763102474.811:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16245 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 656.761885][ T5889] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 656.780494][ T5889] usb 2-1: config 6 has no interface number 0 [ 656.800842][ T5889] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 656.812117][ T5889] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 656.831206][ T30] audit: type=1326 audit(1763102474.811:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16245 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 656.853748][ T5889] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 656.864260][ T30] audit: type=1326 audit(1763102474.811:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16245 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 656.893828][ T5889] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 656.903532][ T5889] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 656.928885][ T30] audit: type=1326 audit(1763102474.821:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16245 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 656.952328][ T5889] usb 2-1: Product: syz [ 656.962011][ T5829] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 657.028039][ T5889] usb 2-1: Manufacturer: syz [ 657.040548][ T5889] usb 2-1: SerialNumber: syz [ 657.088416][ T30] audit: type=1326 audit(1763102474.821:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16245 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 657.113370][ T5889] hso 2-1:6.2: Failed to find INT IN ep [ 657.121210][ T30] audit: type=1326 audit(1763102474.821:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16245 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 657.146202][ T30] audit: type=1326 audit(1763102474.821:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16245 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 657.239342][ T10] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 657.320008][T16252] input: syz0 as /devices/virtual/input/input41 [ 657.366078][ T5829] usb 4-1: config 7 has an invalid interface number: 227 but max is 0 [ 657.384591][ T5829] usb 4-1: config 7 has no interface number 0 [ 657.406385][ T5829] usb 4-1: config 7 interface 227 has no altsetting 0 [ 657.437587][ T5829] usb 4-1: New USB device found, idVendor=79ee, idProduct=ea27, bcdDevice=e1.44 [ 657.456465][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.465418][ T5829] usb 4-1: Product: syz [ 657.473113][ T5829] usb 4-1: Manufacturer: syz [ 657.482879][ T5829] usb 4-1: SerialNumber: syz [ 657.517244][ T10] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 657.525842][ T10] usb 6-1: config 1 has no interface number 0 [ 657.540633][ T10] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 657.560045][T16264] tipc: Enabled bearer , priority 0 [ 657.568336][T16264] syzkaller0: entered promiscuous mode [ 657.867970][T16264] syzkaller0: entered allmulticast mode [ 657.871501][ T10] usb 6-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 657.893011][T16264] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 657.989512][ T10] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 657.999983][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.010251][ T5829] cdc_wdm 4-1:7.227: More than one union descriptor, skipping ... [ 658.010297][ T10] usb 6-1: Product: syz [ 658.022026][ T5829] cdc_wdm 4-1:7.227: probe with driver cdc_wdm failed with error -22 [ 658.038382][ T10] usb 6-1: Manufacturer: syz [ 658.052992][ T10] usb 6-1: SerialNumber: syz [ 658.057986][ T5829] usb 4-1: USB disconnect, device number 92 [ 658.065700][T16256] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 658.079144][T16256] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 658.134586][ T10] usb 6-1: Expected 3 endpoints, found: 2 [ 658.627552][T16270] pim6reg: entered allmulticast mode [ 659.037746][ T10] tipc: Node number set to 3569214451 [ 659.273761][ T10] usb 2-1: USB disconnect, device number 98 [ 659.291578][ T5889] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 659.851653][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 659.892738][ T5889] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 659.901019][ T5889] usb 3-1: config 179 has no interface number 0 [ 659.931892][ T5889] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 659.936132][T16280] bond2: option lp_interval: invalid value (0) [ 659.949600][ T24] usb 6-1: USB disconnect, device number 52 [ 659.949927][T16280] bond2: option lp_interval: allowed values 1 - 2147483647 [ 659.967088][T16280] bond2 (unregistering): Released all slaves [ 659.993501][ T5889] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 660.020422][ T5889] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 660.045408][ T5889] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 660.090806][ T5889] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 660.152843][ T5889] usb 3-1: config 179 interface 65 has no altsetting 0 [ 660.172248][ T5889] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 660.213784][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.321106][ T5889] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input42 [ 660.431690][ T5183] input input42: unable to receive magic message: -110 [ 660.530788][ T5183] input input42: unable to receive magic message: -32 [ 660.616688][ T5183] input input42: unable to receive magic message: -32 [ 660.827065][T16262] tipc: Resetting bearer [ 660.851507][ T5183] input input42: unable to receive magic message: -32 [ 660.910156][ T5183] input input42: unable to receive magic message: -32 [ 660.968370][ T5183] input input42: unable to receive magic message: -32 [ 661.000135][T16262] tipc: Disabling bearer [ 661.524706][T16299] netlink: 'syz.5.2923': attribute type 10 has an invalid length. [ 661.611963][ T5932] usb 3-1: USB disconnect, device number 65 [ 661.612018][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 661.663857][T16299] bond0: (slave netdevsim0): Releasing backup interface [ 661.744109][T16299] team0: Port device netdevsim0 added [ 661.855241][T16312] netlink: 'syz.4.2926': attribute type 5 has an invalid length. [ 661.965923][T16310] netlink: 'syz.3.2922': attribute type 10 has an invalid length. [ 662.043066][T16310] team0: Port device netdevsim0 added [ 662.122500][T16315] netlink: 'syz.3.2922': attribute type 10 has an invalid length. [ 662.131377][ T5932] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 662.145000][T16315] team0: Port device netdevsim0 removed [ 662.171086][T16315] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 662.206162][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2927'. [ 662.333933][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 662.340946][ T5932] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 662.365203][ T5932] usb 3-1: config 0 has no interface number 0 [ 662.375763][ T5932] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 662.425385][ T5932] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 662.575880][ T5932] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 662.591558][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.599576][ T5932] usb 3-1: Product: syz [ 662.631823][ T5932] usb 3-1: Manufacturer: syz [ 662.636548][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 662.636559][ T30] audit: type=1326 audit(1763102480.891:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16328 comm="syz.5.2933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 662.673777][ T5932] usb 3-1: SerialNumber: syz [ 662.690962][ T5932] usb 3-1: config 0 descriptor?? [ 662.696556][ T30] audit: type=1326 audit(1763102480.891:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16328 comm="syz.5.2933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 662.718915][ T30] audit: type=1326 audit(1763102480.941:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16328 comm="syz.5.2933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 662.719162][T16307] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 662.741304][ T30] audit: type=1326 audit(1763102480.941:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16328 comm="syz.5.2933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 662.748131][ C1] vkms_vblank_simulate: vblank timer overrun [ 662.776162][ C1] vkms_vblank_simulate: vblank timer overrun [ 662.835028][T16307] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 662.861698][ T30] audit: type=1326 audit(1763102480.941:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16328 comm="syz.5.2933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 662.958482][ T30] audit: type=1326 audit(1763102480.941:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16328 comm="syz.5.2933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 662.988065][T16336] syzkaller0: entered promiscuous mode [ 663.005606][T16336] syzkaller0: entered allmulticast mode [ 663.063401][T16336] tipc: Enabled bearer , priority 0 [ 663.074476][ T30] audit: type=1326 audit(1763102480.951:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16328 comm="syz.5.2933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 663.098725][T16340] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 663.106605][T16335] tipc: Resetting bearer [ 663.149659][T16335] tipc: Disabling bearer [ 663.173509][ T30] audit: type=1326 audit(1763102480.951:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16328 comm="syz.5.2933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 663.231184][ T30] audit: type=1326 audit(1763102480.951:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16328 comm="syz.5.2933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 663.290325][ T30] audit: type=1326 audit(1763102480.951:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16328 comm="syz.5.2933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 663.313409][ T5932] asix 3-1:0.251: probe with driver asix failed with error -71 [ 663.331901][ T5932] usb 3-1: USB disconnect, device number 66 [ 663.876150][T16357] FAULT_INJECTION: forcing a failure. [ 663.876150][T16357] name failslab, interval 1, probability 0, space 0, times 0 [ 663.890881][T16357] CPU: 1 UID: 0 PID: 16357 Comm: syz.5.2942 Not tainted syzkaller #0 PREEMPT(full) [ 663.890925][T16357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 663.890937][T16357] Call Trace: [ 663.890945][T16357] [ 663.890954][T16357] dump_stack_lvl+0x189/0x250 [ 663.890981][T16357] ? __pfx____ratelimit+0x10/0x10 [ 663.891004][T16357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 663.891027][T16357] ? __pfx__printk+0x10/0x10 [ 663.891052][T16357] ? __pfx___might_resched+0x10/0x10 [ 663.891077][T16357] should_fail_ex+0x414/0x560 [ 663.891108][T16357] should_failslab+0xa8/0x100 [ 663.891127][T16357] __kvmalloc_node_noprof+0x158/0x910 [ 663.891153][T16357] ? nf_hook_entries_grow+0x281/0x720 [ 663.891171][T16357] ? __pfx___mutex_lock+0x10/0x10 [ 663.891196][T16357] nf_hook_entries_grow+0x281/0x720 [ 663.891226][T16357] __nf_register_net_hook+0x2c9/0x930 [ 663.891259][T16357] nf_register_net_hook+0xb2/0x190 [ 663.891278][T16357] nf_register_net_hooks+0x44/0x1b0 [ 663.891298][T16357] nf_defrag_ipv4_enable+0x87/0x120 [ 663.891325][T16357] nf_ct_netns_do_get+0x18c/0x5a0 [ 663.891346][T16357] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 663.891366][T16357] ? nft_validate_register_store+0x188/0x1d0 [ 663.891386][T16357] ? nft_parse_register_store+0x239/0x2c0 [ 663.891406][T16357] nft_ct_get_init+0x5bf/0x9c0 [ 663.891430][T16357] nf_tables_newrule+0x1794/0x28a0 [ 663.891467][T16357] ? __pfx_nf_tables_newrule+0x10/0x10 [ 663.891490][T16357] ? nfnl_pernet+0x23/0x240 [ 663.891531][T16357] ? __nla_parse+0x40/0x60 [ 663.891555][T16357] nfnetlink_rcv+0x11d9/0x2590 [ 663.891620][T16357] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 663.891696][T16357] ? netlink_deliver_tap+0x2e/0x1b0 [ 663.891733][T16357] netlink_unicast+0x82f/0x9e0 [ 663.891766][T16357] ? __pfx_netlink_unicast+0x10/0x10 [ 663.891791][T16357] ? netlink_sendmsg+0x642/0xb30 [ 663.891806][T16357] ? skb_put+0x11b/0x210 [ 663.891827][T16357] netlink_sendmsg+0x805/0xb30 [ 663.891855][T16357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.891875][T16357] ? __import_iovec+0x5d4/0x7f0 [ 663.891894][T16357] ? aa_sock_msg_perm+0xf1/0x1d0 [ 663.891925][T16357] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 663.891943][T16357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.891962][T16357] __sock_sendmsg+0x21c/0x270 [ 663.891987][T16357] ____sys_sendmsg+0x505/0x830 [ 663.892014][T16357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 663.892050][T16357] ___sys_sendmsg+0x21f/0x2a0 [ 663.892072][T16357] ? __pfx____sys_sendmsg+0x10/0x10 [ 663.892130][T16357] ? __fget_files+0x2a/0x420 [ 663.892146][T16357] ? __fget_files+0x3a0/0x420 [ 663.892174][T16357] __sys_sendmsg+0x164/0x220 [ 663.892194][T16357] ? __pfx___sys_sendmsg+0x10/0x10 [ 663.892216][T16357] ? __pfx_ksys_write+0x10/0x10 [ 663.892239][T16357] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 663.892264][T16357] ? lockdep_hardirqs_on+0x9c/0x150 [ 663.892288][T16357] __do_fast_syscall_32+0xb6/0x2b0 [ 663.892311][T16357] ? lockdep_hardirqs_on+0x9c/0x150 [ 663.892335][T16357] do_fast_syscall_32+0x34/0x80 [ 663.892358][T16357] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 663.892378][T16357] RIP: 0023:0xf7fb6539 [ 663.892394][T16357] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 663.892407][T16357] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 663.892424][T16357] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 663.892434][T16357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 663.892443][T16357] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 663.892451][T16357] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 663.892459][T16357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 663.892479][T16357] [ 664.260509][ C1] vkms_vblank_simulate: vblank timer overrun [ 664.443070][T16364] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2944'. [ 664.861535][ T7209] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 665.032215][ T7209] usb 6-1: no configurations [ 665.037047][ T7209] usb 6-1: can't read configurations, error -22 [ 665.181366][ T7209] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 665.342225][ T7209] usb 6-1: no configurations [ 665.347067][ T7209] usb 6-1: can't read configurations, error -22 [ 665.355299][ T7209] usb usb6-port1: attempt power cycle [ 665.541482][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 665.721487][ T7209] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 665.762848][ T7209] usb 6-1: no configurations [ 665.767653][ T7209] usb 6-1: can't read configurations, error -22 [ 665.939383][ T7209] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 665.994538][ T5889] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 666.042848][ T7209] usb 6-1: no configurations [ 666.047529][ T7209] usb 6-1: can't read configurations, error -22 [ 666.127113][ T7209] usb usb6-port1: unable to enumerate USB device [ 666.161857][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 666.178024][ T5889] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 666.190957][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.202783][ T5889] usb 3-1: Product: syz [ 666.212123][ T5889] usb 3-1: Manufacturer: syz [ 666.225149][ T5889] usb 3-1: SerialNumber: syz [ 666.246989][ T5889] usb 3-1: config 0 descriptor?? [ 666.495561][ T5889] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 667.044736][ T10] usb 2-1: new low-speed USB device number 99 using dummy_hcd [ 667.232510][ T10] usb 2-1: Invalid ep0 maxpacket: 64 [ 667.371432][ T10] usb 2-1: new low-speed USB device number 100 using dummy_hcd [ 667.521658][ T10] usb 2-1: Invalid ep0 maxpacket: 64 [ 667.527579][ T10] usb usb2-port1: attempt power cycle [ 667.891721][ T10] usb 2-1: new low-speed USB device number 101 using dummy_hcd [ 667.984510][ T10] usb 2-1: Invalid ep0 maxpacket: 64 [ 668.102336][ T938] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 668.131386][ T10] usb 2-1: new low-speed USB device number 102 using dummy_hcd [ 668.182115][ T10] usb 2-1: Invalid ep0 maxpacket: 64 [ 668.188841][ T10] usb usb2-port1: unable to enumerate USB device [ 668.304049][ T938] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.318997][ T938] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 668.391700][ T938] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 668.411749][ T938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.439415][ T938] usb 6-1: config 0 descriptor?? [ 668.463607][ T938] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 668.511776][ T7209] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 668.651565][ T7209] usb 4-1: device descriptor read/64, error -71 [ 668.823861][ T5889] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 668.902370][ T7209] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 669.041545][ T7209] usb 4-1: device descriptor read/64, error -71 [ 669.151962][ T7209] usb usb4-port1: attempt power cycle [ 669.506372][ T5904] usb 3-1: USB disconnect, device number 67 [ 669.514276][ T7209] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 669.554872][ T7209] usb 4-1: device descriptor read/8, error -71 [ 669.769390][T16447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2971'. [ 669.811131][T16447] bridge_slave_1: left allmulticast mode [ 669.817270][T16447] bridge_slave_1: left promiscuous mode [ 669.839457][T16447] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.925309][ T7209] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 669.965463][T16447] bridge_slave_0: left allmulticast mode [ 669.980758][T16447] bridge_slave_0: left promiscuous mode [ 670.007169][ T7209] usb 4-1: device descriptor read/8, error -71 [ 670.015329][T16447] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.039552][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 670.039568][ T30] audit: type=1326 audit(1763102488.291:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16448 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 670.128886][ T7209] usb usb4-port1: unable to enumerate USB device [ 670.149406][ T30] audit: type=1326 audit(1763102488.301:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16448 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 670.209328][ T30] audit: type=1326 audit(1763102488.301:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16448 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 670.234214][ T30] audit: type=1326 audit(1763102488.301:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16448 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 670.256957][ T30] audit: type=1326 audit(1763102488.301:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16448 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 670.279354][ T30] audit: type=1326 audit(1763102488.301:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16448 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 670.301668][ T30] audit: type=1326 audit(1763102488.301:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16448 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 670.331796][ T30] audit: type=1326 audit(1763102488.301:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16448 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 670.367230][ T30] audit: type=1326 audit(1763102488.301:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16448 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 670.390075][ T30] audit: type=1326 audit(1763102488.301:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16448 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 670.899720][ T7209] usb 6-1: USB disconnect, device number 57 [ 671.241763][T16463] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2976'. [ 671.390767][T16463] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 671.877238][T16476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2981'. [ 671.886645][T16476] 8021q: VLANs not supported on vcan0 [ 672.642014][ T24] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 672.703547][T16490] fuse: Bad value for 'fd' [ 672.729252][T16490] dlm: Unknown command passed to DLM device : 0 [ 672.729252][T16490] [ 672.793281][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 672.800081][ T24] usb 6-1: New USB device found, idVendor=056e, idProduct=019b, bcdDevice= 0.00 [ 672.826049][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.846167][ T24] usb 6-1: config 0 descriptor?? [ 673.260043][T16486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.282809][T16486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.310435][ T24] elecom 0003:056E:019B.001F: unknown main item tag 0x0 [ 673.339494][ T24] elecom 0003:056E:019B.001F: item fetching failed at offset 3/5 [ 673.351895][ T24] elecom 0003:056E:019B.001F: probe with driver elecom failed with error -22 [ 673.516977][ T5904] usb 6-1: USB disconnect, device number 58 [ 673.916845][T16507] FAULT_INJECTION: forcing a failure. [ 673.916845][T16507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 673.930430][T16507] CPU: 0 UID: 0 PID: 16507 Comm: syz.1.2993 Not tainted syzkaller #0 PREEMPT(full) [ 673.930454][T16507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 673.930466][T16507] Call Trace: [ 673.930474][T16507] [ 673.930482][T16507] dump_stack_lvl+0x189/0x250 [ 673.930509][T16507] ? __pfx____ratelimit+0x10/0x10 [ 673.930531][T16507] ? __pfx_dump_stack_lvl+0x10/0x10 [ 673.930553][T16507] ? __pfx__printk+0x10/0x10 [ 673.930571][T16507] ? __might_fault+0xb0/0x130 [ 673.930605][T16507] should_fail_ex+0x414/0x560 [ 673.930634][T16507] _copy_from_user+0x2d/0xb0 [ 673.930656][T16507] io_submit_one+0xc2/0x1310 [ 673.930691][T16507] ? __pfx_io_submit_one+0x10/0x10 [ 673.930711][T16507] ? __might_fault+0xb0/0x130 [ 673.930745][T16507] ? __might_fault+0xb0/0x130 [ 673.930771][T16507] __ia32_compat_sys_io_submit+0x1c7/0x330 [ 673.930794][T16507] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 673.930810][T16507] ? ksys_write+0x22a/0x250 [ 673.930851][T16507] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 673.930876][T16507] ? lockdep_hardirqs_on+0x9c/0x150 [ 673.930901][T16507] __do_fast_syscall_32+0xb6/0x2b0 [ 673.930927][T16507] ? lockdep_hardirqs_on+0x9c/0x150 [ 673.930952][T16507] do_fast_syscall_32+0x34/0x80 [ 673.930976][T16507] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 673.930996][T16507] RIP: 0023:0xf7f75539 [ 673.931012][T16507] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 673.931027][T16507] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 00000000000000f8 [ 673.931045][T16507] RAX: ffffffffffffffda RBX: 00000000f5441000 RCX: 000000000000027f [ 673.931057][T16507] RDX: 0000000080001440 RSI: 0000000000000000 RDI: 0000000000000000 [ 673.931069][T16507] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 673.931078][T16507] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 673.931088][T16507] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 673.931115][T16507] [ 674.133813][ C0] vkms_vblank_simulate: vblank timer overrun [ 674.731472][ T938] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 674.881545][ T938] usb 6-1: Using ep0 maxpacket: 32 [ 674.934567][ T938] usb 6-1: config 0 has an invalid interface number: 59 but max is 0 [ 675.003403][ T938] usb 6-1: config 0 has no interface number 0 [ 675.252351][ T938] usb 6-1: config 0 interface 59 has no altsetting 0 [ 675.725289][ T938] usb 6-1: New USB device found, idVendor=1a9e, idProduct=4cce, bcdDevice=6f.2c [ 675.741945][ T938] usb 6-1: New USB device strings: Mfr=60, Product=32, SerialNumber=3 [ 675.791753][ T5904] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 675.835537][ T938] usb 6-1: Product: syz [ 675.840828][ T938] usb 6-1: Manufacturer: syz [ 675.850953][ T938] usb 6-1: SerialNumber: syz [ 675.901782][ T938] usb 6-1: config 0 descriptor?? [ 675.952266][ T5904] usb 4-1: Using ep0 maxpacket: 8 [ 675.958993][ T5904] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 675.980836][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 676.036675][ T5904] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 676.051469][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.074098][ T5904] usb 4-1: Product: syz [ 676.078412][ T5904] usb 4-1: Manufacturer: syz [ 676.128325][ T5904] usb 4-1: SerialNumber: syz [ 676.136582][ T5904] usb 4-1: config 0 descriptor?? [ 676.144985][ T5904] streamzap 4-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 676.448277][T16536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.472172][T16536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.504385][ T24] usb 4-1: USB disconnect, device number 97 [ 677.781565][ T7209] usb 6-1: USB disconnect, device number 59 [ 678.711432][ T5904] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 678.923735][ T5904] usb 6-1: Using ep0 maxpacket: 8 [ 678.946899][ T5904] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 678.958835][ T5904] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 679.007103][ T5904] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 679.035552][ T5904] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 679.113533][ T5904] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 679.153634][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.217158][ T5904] usbtmc 6-1:16.0: bulk endpoints not found [ 679.249342][T16582] netlink: 'syz.4.3015': attribute type 10 has an invalid length. [ 679.327855][T16585] netlink: 'syz.4.3015': attribute type 10 has an invalid length. [ 679.450137][T16587] FAULT_INJECTION: forcing a failure. [ 679.450137][T16587] name failslab, interval 1, probability 0, space 0, times 0 [ 679.467160][T16587] CPU: 0 UID: 0 PID: 16587 Comm: syz.2.3018 Not tainted syzkaller #0 PREEMPT(full) [ 679.467185][T16587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 679.467196][T16587] Call Trace: [ 679.467205][T16587] [ 679.467214][T16587] dump_stack_lvl+0x189/0x250 [ 679.467245][T16587] ? __pfx____ratelimit+0x10/0x10 [ 679.467267][T16587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 679.467285][T16587] ? __pfx__printk+0x10/0x10 [ 679.467305][T16587] ? __pfx___might_resched+0x10/0x10 [ 679.467322][T16587] ? fs_reclaim_acquire+0x7d/0x100 [ 679.467343][T16587] should_fail_ex+0x414/0x560 [ 679.467373][T16587] should_failslab+0xa8/0x100 [ 679.467392][T16587] __kmalloc_cache_noprof+0x6f/0x6f0 [ 679.467416][T16587] ? snd_seq_port_connect+0x6b/0x460 [ 679.467440][T16587] snd_seq_port_connect+0x6b/0x460 [ 679.467457][T16587] ? do_raw_read_unlock+0x3d/0x80 [ 679.467477][T16587] ? _raw_read_unlock+0x28/0x50 [ 679.467503][T16587] snd_seq_ioctl_subscribe_port+0x360/0x790 [ 679.467532][T16587] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 679.467568][T16587] snd_seq_oss_midi_open+0x583/0x810 [ 679.467599][T16587] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 679.467640][T16587] ? snd_seq_oss_midi_get_addr+0x1d0/0x290 [ 679.467669][T16587] snd_seq_oss_synth_setup_midi+0x12d/0x530 [ 679.467723][T16587] snd_seq_oss_open+0x8cd/0xea0 [ 679.467756][T16587] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 679.467786][T16587] ? __lock_acquire+0xab9/0xd20 [ 679.467829][T16587] ? trace_contention_end+0x39/0x120 [ 679.467851][T16587] ? __mutex_lock+0x335/0x1350 [ 679.467894][T16587] ? __pfx___mutex_lock+0x10/0x10 [ 679.467922][T16587] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 679.467942][T16587] ? __pfx_free_devinfo+0x10/0x10 [ 679.467961][T16587] ? do_raw_spin_unlock+0x122/0x240 [ 679.467988][T16587] ? soundcore_open+0x2da/0x490 [ 679.468012][T16587] odev_open+0x67/0xd0 [ 679.468032][T16587] chrdev_open+0x4cc/0x5e0 [ 679.468053][T16587] ? __pfx_chrdev_open+0x10/0x10 [ 679.468073][T16587] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 679.468097][T16587] ? __pfx_chrdev_open+0x10/0x10 [ 679.468113][T16587] do_dentry_open+0x953/0x13f0 [ 679.468148][T16587] vfs_open+0x3b/0x340 [ 679.468165][T16587] ? path_openat+0x2ecd/0x3830 [ 679.468189][T16587] path_openat+0x2ee5/0x3830 [ 679.468247][T16587] ? __pfx_path_openat+0x10/0x10 [ 679.468289][T16587] do_filp_open+0x1fa/0x410 [ 679.468309][T16587] ? __lock_acquire+0xab9/0xd20 [ 679.468328][T16587] ? __pfx_do_filp_open+0x10/0x10 [ 679.468373][T16587] ? _raw_spin_unlock+0x28/0x50 [ 679.468392][T16587] ? alloc_fd+0x64c/0x6c0 [ 679.468427][T16587] do_sys_openat2+0x121/0x1c0 [ 679.468450][T16587] ? __pfx_do_sys_openat2+0x10/0x10 [ 679.468470][T16587] ? ksys_write+0x22a/0x250 [ 679.468491][T16587] ? exc_page_fault+0x82/0x100 [ 679.468514][T16587] ? __pfx_ksys_write+0x10/0x10 [ 679.468540][T16587] __ia32_compat_sys_openat+0x131/0x160 [ 679.468567][T16587] __do_fast_syscall_32+0xb6/0x2b0 [ 679.468592][T16587] ? lockdep_hardirqs_on+0x9c/0x150 [ 679.468619][T16587] do_fast_syscall_32+0x34/0x80 [ 679.468643][T16587] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 679.468664][T16587] RIP: 0023:0xf7f87539 [ 679.468687][T16587] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 679.468703][T16587] RSP: 002b:00000000f545555c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 679.468722][T16587] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800001c0 [ 679.468736][T16587] RDX: 0000000000086783 RSI: 0000000000000000 RDI: 0000000000000000 [ 679.468747][T16587] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 679.468756][T16587] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 679.468767][T16587] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 679.468797][T16587] [ 680.346446][T16592] FAULT_INJECTION: forcing a failure. [ 680.346446][T16592] name failslab, interval 1, probability 0, space 0, times 0 [ 680.368419][T16592] CPU: 0 UID: 0 PID: 16592 Comm: syz.3.3019 Not tainted syzkaller #0 PREEMPT(full) [ 680.368444][T16592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 680.368456][T16592] Call Trace: [ 680.368463][T16592] [ 680.368472][T16592] dump_stack_lvl+0x189/0x250 [ 680.368498][T16592] ? __pfx____ratelimit+0x10/0x10 [ 680.368517][T16592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 680.368541][T16592] ? __pfx__printk+0x10/0x10 [ 680.368565][T16592] ? __lock_acquire+0xab9/0xd20 [ 680.368599][T16592] should_fail_ex+0x414/0x560 [ 680.368630][T16592] should_failslab+0xa8/0x100 [ 680.368651][T16592] kmem_cache_alloc_noprof+0x74/0x6e0 [ 680.368675][T16592] ? skb_clone+0x212/0x3a0 [ 680.368701][T16592] skb_clone+0x212/0x3a0 [ 680.368724][T16592] __netlink_deliver_tap+0x404/0x850 [ 680.368755][T16592] ? netlink_deliver_tap+0x2e/0x1b0 [ 680.368774][T16592] netlink_deliver_tap+0x19c/0x1b0 [ 680.368793][T16592] netlink_unicast+0x7fa/0x9e0 [ 680.368826][T16592] ? __pfx_netlink_unicast+0x10/0x10 [ 680.368852][T16592] ? netlink_sendmsg+0x642/0xb30 [ 680.368867][T16592] ? skb_put+0x11b/0x210 [ 680.368889][T16592] netlink_sendmsg+0x805/0xb30 [ 680.368916][T16592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 680.368936][T16592] ? __import_iovec+0x5d4/0x7f0 [ 680.368955][T16592] ? aa_sock_msg_perm+0xf1/0x1d0 [ 680.368980][T16592] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 680.368997][T16592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 680.369013][T16592] __sock_sendmsg+0x21c/0x270 [ 680.369037][T16592] ____sys_sendmsg+0x505/0x830 [ 680.369057][T16592] ? __pfx_____sys_sendmsg+0x10/0x10 [ 680.369083][T16592] ___sys_sendmsg+0x21f/0x2a0 [ 680.369099][T16592] ? __pfx____sys_sendmsg+0x10/0x10 [ 680.369140][T16592] ? __fget_files+0x2a/0x420 [ 680.369152][T16592] ? __fget_files+0x3a0/0x420 [ 680.369172][T16592] __sys_sendmsg+0x164/0x220 [ 680.369188][T16592] ? __pfx___sys_sendmsg+0x10/0x10 [ 680.369210][T16592] ? __pfx_ksys_write+0x10/0x10 [ 680.369233][T16592] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 680.369254][T16592] ? lockdep_hardirqs_on+0x9c/0x150 [ 680.369273][T16592] __do_fast_syscall_32+0xb6/0x2b0 [ 680.369292][T16592] ? lockdep_hardirqs_on+0x9c/0x150 [ 680.369313][T16592] do_fast_syscall_32+0x34/0x80 [ 680.369331][T16592] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 680.369348][T16592] RIP: 0023:0xf70dd539 [ 680.369361][T16592] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 680.369372][T16592] RSP: 002b:00000000f548b55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 680.369391][T16592] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800000c0 [ 680.369400][T16592] RDX: 0000000004048000 RSI: 0000000000000000 RDI: 0000000000000000 [ 680.369409][T16592] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 680.369417][T16592] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 680.369425][T16592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 680.369446][T16592] [ 680.961448][ T5889] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 681.144388][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.154802][ T5889] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 681.174602][ T5889] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 681.184709][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.215486][ T5889] usb 3-1: config 0 descriptor?? [ 681.358473][ T5889] usb 6-1: USB disconnect, device number 60 [ 681.372120][ T5904] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 681.431230][ T5829] usb 3-1: USB disconnect, device number 68 [ 681.534430][ T5904] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 681.553657][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.574073][ T5904] usb 2-1: config 0 descriptor?? [ 681.591752][ T5904] cp210x 2-1:0.0: cp210x converter detected [ 681.711420][ T5889] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 681.871462][ T5889] usb 6-1: Using ep0 maxpacket: 8 [ 681.880738][ T5889] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 681.890126][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.898383][ T5889] usb 6-1: Product: syz [ 681.903641][ T5889] usb 6-1: Manufacturer: syz [ 681.908258][ T5889] usb 6-1: SerialNumber: syz [ 681.916847][ T5889] usb 6-1: config 0 descriptor?? [ 681.926160][ T5889] gspca_main: se401-2.14.0 probing 047d:5003 [ 682.015667][ T5904] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 682.029290][ T5904] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 682.039470][ T5904] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 682.054266][ T5904] usb 2-1: cp210x converter now attached to ttyUSB0 [ 682.124821][ T5889] gspca_se401: Wrong descriptor type [ 683.908898][ T5904] usb 2-1: USB disconnect, device number 103 [ 683.937715][ T5904] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 683.952813][ T5904] cp210x 2-1:0.0: device disconnected [ 684.291422][ T5904] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 684.444201][ T5904] usb 2-1: unable to get BOS descriptor or descriptor too short [ 684.453362][ T5904] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 684.463981][ T5904] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 20, changing to 7 [ 684.474994][ T5904] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 684.488133][ T5904] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 684.497301][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.505358][ T5904] usb 2-1: Product: syz [ 684.509511][ T5904] usb 2-1: Manufacturer: syz [ 684.514199][ T5904] usb 2-1: SerialNumber: syz [ 684.733083][ T5904] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 684.743118][ T5904] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 684.751774][ T5904] usb 2-1: 2:1 : format type 0 is not supported yet [ 684.773850][ T5904] usb 2-1: USB disconnect, device number 104 [ 684.800809][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 686.025080][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.031600][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.084872][T16616] ALSA: mixer_oss: invalid OSS volume 'u' [ 687.381377][ T938] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 687.536067][ T938] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 687.545754][ T938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.554778][ T938] usb 2-1: Product: syz [ 687.559289][ T938] usb 2-1: Manufacturer: syz [ 687.564094][ T938] usb 2-1: SerialNumber: syz [ 687.977266][ T938] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 687.989155][ T938] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 688.280733][ T938] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 688.296601][ T938] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 688.307116][ T938] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 688.318306][ T938] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 688.338154][ T938] usb 2-1: USB disconnect, device number 105 [ 693.996196][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 694.006894][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 694.017453][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 694.027057][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 694.035354][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 695.425712][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 695.434818][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 695.444486][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 695.456025][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 695.468371][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 696.111579][ T5841] Bluetooth: hci3: command tx timeout [ 697.040808][ T5832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 697.050127][ T5832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 697.058287][ T5832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 697.066517][ T5832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 697.076380][ T5832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 697.542220][ T5832] Bluetooth: hci6: command tx timeout [ 697.936204][ T5841] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 697.950771][ T5841] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 697.959929][ T5841] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 697.969189][ T5841] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 697.977229][ T5841] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 698.191631][ T5832] Bluetooth: hci3: command tx timeout [ 699.142909][ T5832] Bluetooth: hci7: command tx timeout [ 699.621518][ T5832] Bluetooth: hci6: command tx timeout [ 700.023218][ T5832] Bluetooth: hci8: command tx timeout [ 700.261491][ T5832] Bluetooth: hci3: command tx timeout [ 701.221412][ T5832] Bluetooth: hci7: command tx timeout [ 701.701721][ T5832] Bluetooth: hci6: command tx timeout [ 702.111411][ T5832] Bluetooth: hci8: command tx timeout [ 702.341446][ T5832] Bluetooth: hci3: command tx timeout [ 703.301667][ T5832] Bluetooth: hci7: command tx timeout [ 703.781513][ T5832] Bluetooth: hci6: command tx timeout [ 704.181964][ T5832] Bluetooth: hci8: command tx timeout [ 704.479206][ T5841] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 704.492546][ T5841] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 704.502174][ T5841] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 704.512293][ T5841] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 704.520279][ T5841] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 705.381461][ T5832] Bluetooth: hci7: command tx timeout [ 706.261936][ T5832] Bluetooth: hci8: command tx timeout [ 706.592576][ T5832] Bluetooth: hci9: command tx timeout [ 708.661428][ T5832] Bluetooth: hci9: command tx timeout [ 710.741439][ T5832] Bluetooth: hci9: command tx timeout [ 712.821513][ T5832] Bluetooth: hci9: command tx timeout [ 747.468133][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.475592][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.491605][ T5832] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 754.505875][ T5832] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 754.515526][ T5832] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 754.524428][ T5832] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 754.534010][ T5832] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 754.672215][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 754.678273][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 755.483401][ T53] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 755.492585][ T53] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 755.502168][ T53] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 755.512931][ T53] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 755.522944][ T53] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 756.581505][ T53] Bluetooth: hci10: command tx timeout [ 756.992738][ T5841] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 757.001835][ T5841] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 757.010570][ T5841] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 757.022237][ T5841] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 757.032290][ T5841] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 757.541389][ T5841] Bluetooth: hci11: command tx timeout [ 758.489448][ T53] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 758.498143][ T53] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 758.509085][ T53] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 758.518580][ T53] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 758.528824][ T53] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 758.661407][ T5841] Bluetooth: hci10: command tx timeout [ 759.061483][ T5841] Bluetooth: hci12: command tx timeout [ 759.621389][ T5841] Bluetooth: hci11: command tx timeout [ 760.581481][ T5841] Bluetooth: hci13: command tx timeout [ 760.751498][ T5841] Bluetooth: hci10: command tx timeout [ 761.141330][ T5841] Bluetooth: hci12: command tx timeout [ 761.701331][ T5841] Bluetooth: hci11: command tx timeout [ 762.661507][ T5841] Bluetooth: hci13: command tx timeout [ 762.833842][ T5841] Bluetooth: hci10: command tx timeout [ 763.221456][ T5841] Bluetooth: hci12: command tx timeout [ 763.781411][ T5841] Bluetooth: hci11: command tx timeout [ 764.502909][ T53] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 764.513301][ T53] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 764.521508][ T53] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 764.529502][ T53] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 764.538511][ T53] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 764.751331][ T5841] Bluetooth: hci13: command tx timeout [ 765.301349][ T5841] Bluetooth: hci12: command tx timeout [ 766.581710][ T5841] Bluetooth: hci14: command tx timeout [ 766.831691][ T5841] Bluetooth: hci13: command tx timeout [ 768.661470][ T5841] Bluetooth: hci14: command tx timeout [ 770.751465][ T5841] Bluetooth: hci14: command tx timeout [ 772.821680][ T5841] Bluetooth: hci14: command tx timeout [ 808.903521][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.909854][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.568964][ T53] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 814.580223][ T53] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 814.592449][ T53] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 814.601893][ T53] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 814.611071][ T53] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 815.588325][ T53] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 815.597878][ T53] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 815.606568][ T53] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 815.616842][ T53] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 815.627289][ T53] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 816.661373][ T53] Bluetooth: hci15: command tx timeout [ 817.554387][ T5841] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 817.565367][ T5841] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 817.574027][ T5841] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 817.586350][ T5841] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 817.596225][ T5841] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 817.701327][ T5841] Bluetooth: hci16: command tx timeout [ 818.741456][ T5841] Bluetooth: hci15: command tx timeout [ 819.059364][ T53] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 819.069815][ T53] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 819.078411][ T53] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 819.088491][ T53] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 819.096645][ T53] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 819.622137][T16689] Bluetooth: hci17: command tx timeout [ 819.781369][T16689] Bluetooth: hci16: command tx timeout [ 820.821342][T16689] Bluetooth: hci15: command tx timeout [ 821.141450][T16689] Bluetooth: hci18: command tx timeout [ 821.226348][T16689] Bluetooth: hci3: command 0x0406 tx timeout [ 821.233210][T16689] Bluetooth: hci7: command 0x0406 tx timeout [ 821.239221][T16689] Bluetooth: hci6: command 0x0406 tx timeout [ 821.243561][T16690] Bluetooth: hci8: command 0x0406 tx timeout [ 821.701862][ T5832] Bluetooth: hci17: command tx timeout [ 821.861357][ T5832] Bluetooth: hci16: command tx timeout [ 822.901314][ T5832] Bluetooth: hci15: command tx timeout [ 823.221392][ T5832] Bluetooth: hci18: command tx timeout [ 823.781768][ T5832] Bluetooth: hci17: command tx timeout [ 823.941366][ T5832] Bluetooth: hci16: command tx timeout [ 825.065038][ T53] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 825.074387][ T53] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 825.083153][ T53] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 825.096116][ T53] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 825.105692][ T53] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 825.301359][ T5832] Bluetooth: hci18: command tx timeout [ 825.861891][ T5832] Bluetooth: hci17: command tx timeout [ 827.141407][ T5832] Bluetooth: hci19: command tx timeout [ 827.381455][ T5832] Bluetooth: hci18: command tx timeout [ 829.221358][ T5832] Bluetooth: hci19: command tx timeout [ 830.021970][ T31] INFO: task kworker/u8:29:15792 blocked for more than 143 seconds. [ 830.030667][ T31] Not tainted syzkaller #0 [ 830.036671][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 830.045472][ T31] task:kworker/u8:29 state:D stack:24584 pid:15792 tgid:15792 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 830.057658][ T31] Workqueue: events_unbound linkwatch_event [ 830.063666][ T31] Call Trace: [ 830.066957][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 830.069908][ T31] __schedule+0x1798/0x4cc0 [ 830.074865][ T31] ? __pfx___schedule+0x10/0x10 [ 830.085279][ T31] ? schedule+0x91/0x360 [ 830.094216][ T31] schedule+0x165/0x360 [ 830.107109][ T31] schedule_preempt_disabled+0x13/0x30 [ 830.121386][ T31] __mutex_lock+0x7e6/0x1350 [ 830.126014][ T31] ? look_up_lock_class+0x74/0x170 [ 830.131164][ T31] ? __mutex_lock+0x5bb/0x1350 [ 830.177741][ T31] ? linkwatch_event+0xe/0x60 [ 830.184212][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 830.189287][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 830.194819][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 830.200571][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 830.206609][ T31] linkwatch_event+0xe/0x60 [ 830.211331][ T31] process_scheduled_works+0xae1/0x17b0 [ 830.216916][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 830.223004][ T31] worker_thread+0x8a0/0xda0 [ 830.227637][ T31] kthread+0x711/0x8a0 [ 830.231928][ T31] ? __pfx_worker_thread+0x10/0x10 [ 830.237105][ T31] ? __pfx_kthread+0x10/0x10 [ 830.241852][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 830.247068][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 830.252617][ T31] ? __pfx_kthread+0x10/0x10 [ 830.257243][ T31] ret_from_fork+0x4bc/0x870 [ 830.262061][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 830.267211][ T31] ? __switch_to_asm+0x39/0x70 [ 830.272136][ T31] ? __switch_to_asm+0x33/0x70 [ 830.276916][ T31] ? __pfx_kthread+0x10/0x10 [ 830.281652][ T31] ret_from_fork_asm+0x1a/0x30 [ 830.286450][ T31] [ 830.289514][ T31] INFO: task kworker/u8:32:15795 blocked for more than 143 seconds. [ 830.298683][ T31] Not tainted syzkaller #0 [ 830.303750][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 830.312700][ T31] task:kworker/u8:32 state:D stack:25032 pid:15795 tgid:15795 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 830.324802][ T31] Workqueue: ipv6_addrconf addrconf_verify_work [ 830.331071][ T31] Call Trace: [ 830.334575][ T31] [ 830.337531][ T31] __schedule+0x1798/0x4cc0 [ 830.342219][ T31] ? __pfx___schedule+0x10/0x10 [ 830.347116][ T31] ? schedule+0x91/0x360 [ 830.351594][ T31] schedule+0x165/0x360 [ 830.355787][ T31] schedule_preempt_disabled+0x13/0x30 [ 830.361348][ T31] __mutex_lock+0x7e6/0x1350 [ 830.366090][ T31] ? __mutex_lock+0x5bb/0x1350 [ 830.370958][ T31] ? addrconf_verify_work+0x19/0x30 [ 830.376317][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 830.381540][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 830.387376][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 830.392741][ T31] addrconf_verify_work+0x19/0x30 [ 830.397792][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 830.403777][ T31] process_scheduled_works+0xae1/0x17b0 [ 830.409399][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 830.415654][ T31] worker_thread+0x8a0/0xda0 [ 830.420351][ T31] kthread+0x711/0x8a0 [ 830.424598][ T31] ? __pfx_worker_thread+0x10/0x10 [ 830.430010][ T31] ? __pfx_kthread+0x10/0x10 [ 830.434797][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 830.440040][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 830.445338][ T31] ? __pfx_kthread+0x10/0x10 [ 830.449954][ T31] ret_from_fork+0x4bc/0x870 [ 830.454712][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 830.459847][ T31] ? __switch_to_asm+0x39/0x70 [ 830.464827][ T31] ? __switch_to_asm+0x33/0x70 [ 830.469615][ T31] ? __pfx_kthread+0x10/0x10 [ 830.474387][ T31] ret_from_fork_asm+0x1a/0x30 [ 830.479172][ T31] [ 830.482270][ T31] INFO: task syz.4.3015:16582 blocked for more than 143 seconds. [ 830.489987][ T31] Not tainted syzkaller #0 [ 830.496485][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 830.505353][ T31] task:syz.4.3015 state:D stack:25192 pid:16582 tgid:16574 ppid:11199 task_flags:0x400140 flags:0x10080003 [ 830.517622][ T31] Call Trace: [ 830.520897][ T31] [ 830.523886][ T31] __schedule+0x1798/0x4cc0 [ 830.528527][ T31] ? __pfx___schedule+0x10/0x10 [ 830.533611][ T31] ? preempt_count_add+0x11c/0x1a0 [ 830.538763][ T31] schedule+0x165/0x360 [ 830.543038][ T31] schedule_preempt_disabled+0x13/0x30 [ 830.548533][ T31] __mutex_lock+0x7e6/0x1350 [ 830.553281][ T31] ? __mutex_lock+0x5bb/0x1350 [ 830.558073][ T31] ? rtnl_newlink+0x8e9/0x1c80 [ 830.562919][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 830.568078][ T31] ? ns_capable+0x8a/0xf0 [ 830.572573][ T31] ? rtnl_link_get_net_capable+0x16a/0x350 [ 830.578417][ T31] rtnl_newlink+0x8e9/0x1c80 [ 830.583101][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 830.588148][ T31] ? __pfx___schedule+0x10/0x10 [ 830.593209][ T31] ? preempt_schedule+0xae/0xc0 [ 830.598079][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 830.603287][ T31] ? preempt_schedule_common+0x83/0xd0 [ 830.608771][ T31] ? preempt_schedule+0xae/0xc0 [ 830.613781][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 830.619180][ T31] ? nlmon_xmit+0xb0/0x100 [ 830.624113][ T31] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 830.630241][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 830.635806][ T31] ? __local_bh_enable_ip+0x13e/0x1c0 [ 830.641288][ T31] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 830.647025][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 830.652363][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 830.657611][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 830.663102][ T31] ? __dev_queue_xmit+0x1d79/0x3b50 [ 830.668329][ T31] ? __lock_acquire+0xab9/0xd20 [ 830.673454][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 830.678547][ T31] rtnetlink_rcv_msg+0x7cf/0xb70 [ 830.683641][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 830.688780][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 830.694447][ T31] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 830.701524][ T31] netlink_rcv_skb+0x208/0x470 [ 830.706295][ T31] ? rcu_is_watching+0x15/0xb0 [ 830.711068][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 830.716759][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 830.722207][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 830.727444][ T31] netlink_unicast+0x82f/0x9e0 [ 830.732646][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 830.737965][ T31] ? netlink_sendmsg+0x642/0xb30 [ 830.742987][ T31] ? skb_put+0x11b/0x210 [ 830.747284][ T31] netlink_sendmsg+0x805/0xb30 [ 830.752226][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 830.757561][ T31] ? __import_iovec+0x40e/0x7f0 [ 830.762798][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 830.767885][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 830.773424][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 830.778719][ T31] __sock_sendmsg+0x21c/0x270 [ 830.783416][ T31] ____sys_sendmsg+0x505/0x830 [ 830.788177][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 830.793610][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 830.798914][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 830.803674][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 830.808915][ T31] ? __fget_files+0x2a/0x420 [ 830.813645][ T31] ? __fget_files+0x3a0/0x420 [ 830.818349][ T31] __sys_sendmsg+0x164/0x220 [ 830.823089][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 830.828224][ T31] ? rcu_is_watching+0x15/0xb0 [ 830.833193][ T31] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 830.839924][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 830.845407][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 830.850552][ T31] do_fast_syscall_32+0x34/0x80 [ 830.855552][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 830.861972][ T31] RIP: 0023:0xf70ad539 [ 830.866056][ T31] RSP: 002b:00000000f4c1555c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 830.874707][ T31] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000100 [ 830.882739][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 830.890723][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 830.898840][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 830.906897][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 830.915027][ T31] [ 830.918145][ T31] INFO: task syz.4.3015:16585 blocked for more than 144 seconds. [ 830.929371][ T31] Not tainted syzkaller #0 [ 830.934410][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 830.943175][ T31] task:syz.4.3015 state:D stack:25192 pid:16585 tgid:16574 ppid:11199 task_flags:0x400140 flags:0x10080002 [ 830.955437][ T31] Call Trace: [ 830.958733][ T31] [ 830.961789][ T31] __schedule+0x1798/0x4cc0 [ 830.966331][ T31] ? __pfx___schedule+0x10/0x10 [ 830.971338][ T31] ? schedule+0x91/0x360 [ 830.975651][ T31] schedule+0x165/0x360 [ 830.979914][ T31] schedule_preempt_disabled+0x13/0x30 [ 830.985507][ T31] __mutex_lock+0x7e6/0x1350 [ 830.990160][ T31] ? __mutex_lock+0x5bb/0x1350 [ 830.995088][ T31] ? rtnl_newlink+0x8e9/0x1c80 [ 830.999961][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 831.005114][ T31] ? ns_capable+0x8a/0xf0 [ 831.009491][ T31] ? rtnl_link_get_net_capable+0x16a/0x350 [ 831.015451][ T31] rtnl_newlink+0x8e9/0x1c80 [ 831.020073][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 831.025230][ T31] ? finish_task_switch+0x266/0x950 [ 831.030455][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 831.035815][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 831.041811][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 831.047037][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 831.053097][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 831.059453][ T31] ? rcu_preempt_deferred_qs_irqrestore+0x89c/0xce0 [ 831.067802][ T31] ? __pfx___schedule+0x10/0x10 [ 831.072873][ T31] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 831.080061][ T31] ? rcu_is_watching+0x15/0xb0 [ 831.085221][ T31] ? rcu_is_watching+0x15/0xb0 [ 831.090012][ T31] ? rcu_read_unlock_special+0x3a2/0x4b0 [ 831.095929][ T31] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 831.102009][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 831.107378][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 831.112723][ T31] rtnetlink_rcv_msg+0x7cf/0xb70 [ 831.117885][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 831.123153][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 831.128860][ T31] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 831.136079][ T31] netlink_rcv_skb+0x208/0x470 [ 831.140950][ T31] ? rcu_is_watching+0x15/0xb0 [ 831.145832][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 831.151658][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 831.157413][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 831.162861][ T31] netlink_unicast+0x82f/0x9e0 [ 831.167830][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 831.173611][ T31] ? netlink_sendmsg+0x642/0xb30 [ 831.178577][ T31] ? skb_put+0x11b/0x210 [ 831.183030][ T31] netlink_sendmsg+0x805/0xb30 [ 831.188610][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.194295][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.199636][ T31] __sock_sendmsg+0x21c/0x270 [ 831.204687][ T31] ____sys_sendmsg+0x505/0x830 [ 831.209479][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 831.214943][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 831.219930][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 831.225244][ T31] ? __fget_files+0x2a/0x420 [ 831.229838][ T31] ? __fget_files+0x3a0/0x420 [ 831.234666][ T31] __sys_sendmsg+0x164/0x220 [ 831.239270][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 831.244550][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 831.249681][ T31] ? __ia32_compat_sys_rt_sigprocmask+0x2a7/0x310 [ 831.256277][ T31] ? rcu_is_watching+0x15/0xb0 [ 831.261069][ T31] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 831.267872][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 831.273248][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 831.278370][ T31] do_fast_syscall_32+0x34/0x80 [ 831.283629][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 831.289975][ T31] RIP: 0023:0xf70ad539 [ 831.294280][ T31] RSP: 002b:00000000f47f255c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 831.302915][ T53] Bluetooth: hci19: command tx timeout [ 831.308384][ T31] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000600 [ 831.316530][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 831.324631][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 831.332806][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 831.340802][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 831.348892][ T31] [ 831.352089][ T31] INFO: task syz.3.3019:16592 blocked for more than 144 seconds. [ 831.359833][ T31] Not tainted syzkaller #0 [ 831.364889][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 831.373804][ T31] task:syz.3.3019 state:D stack:25736 pid:16592 tgid:16588 ppid:15803 task_flags:0x400140 flags:0x10080003 [ 831.385895][ T31] Call Trace: [ 831.389194][ T31] [ 831.392586][ T31] __schedule+0x1798/0x4cc0 [ 831.397155][ T31] ? __pfx___schedule+0x10/0x10 [ 831.402337][ T31] ? schedule+0x91/0x360 [ 831.407313][ T31] schedule+0x165/0x360 [ 831.411677][ T31] schedule_preempt_disabled+0x13/0x30 [ 831.417241][ T31] __mutex_lock+0x7e6/0x1350 [ 831.421909][ T31] ? __mutex_lock+0x5bb/0x1350 [ 831.426697][ T31] ? rtnetlink_rcv_msg+0x71c/0xb70 [ 831.431986][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 831.437042][ T31] rtnetlink_rcv_msg+0x71c/0xb70 [ 831.442320][ T31] ? __lock_acquire+0xab9/0xd20 [ 831.447188][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 831.452683][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 831.458164][ T31] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 831.468084][ T31] ? rcu_is_watching+0x15/0xb0 [ 831.471574][ T53] Bluetooth: hci9: command 0x0406 tx timeout [ 831.473031][ T31] netlink_rcv_skb+0x208/0x470 [ 831.483866][ T31] ? rcu_is_watching+0x15/0xb0 [ 831.488729][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 831.494356][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 831.499667][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 831.505152][ T31] netlink_unicast+0x82f/0x9e0 [ 831.509953][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 831.515378][ T31] ? netlink_sendmsg+0x642/0xb30 [ 831.520328][ T31] ? skb_put+0x11b/0x210 [ 831.524657][ T31] netlink_sendmsg+0x805/0xb30 [ 831.529458][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.534895][ T31] ? __import_iovec+0x5d4/0x7f0 [ 831.539761][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 831.544780][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 831.550082][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.555553][ T31] __sock_sendmsg+0x21c/0x270 [ 831.560268][ T31] ____sys_sendmsg+0x505/0x830 [ 831.565257][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 831.571031][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 831.575957][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 831.581270][ T31] ? __fget_files+0x2a/0x420 [ 831.586079][ T31] ? __fget_files+0x3a0/0x420 [ 831.590932][ T31] __sys_sendmsg+0x164/0x220 [ 831.595731][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 831.600868][ T31] ? __pfx_ksys_write+0x10/0x10 [ 831.605793][ T31] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 831.612780][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 831.618034][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 831.623297][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 831.628523][ T31] do_fast_syscall_32+0x34/0x80 [ 831.633530][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 831.639885][ T31] RIP: 0023:0xf70dd539 [ 831.644028][ T31] RSP: 002b:00000000f548b55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 831.652591][ T31] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800000c0 [ 831.660598][ T31] RDX: 0000000004048000 RSI: 0000000000000000 RDI: 0000000000000000 [ 831.668632][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 831.676714][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 831.684804][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 831.693088][ T31] [ 831.696192][ T31] INFO: task syz.5.3022:16604 blocked for more than 145 seconds. [ 831.707661][ T31] Not tainted syzkaller #0 [ 831.712925][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 831.721989][ T31] task:syz.5.3022 state:D stack:27376 pid:16604 tgid:16601 ppid:9359 task_flags:0x400040 flags:0x10080002 [ 831.734105][ T31] Call Trace: [ 831.737406][ T31] [ 831.740346][ T31] __schedule+0x1798/0x4cc0 [ 831.744958][ T31] ? __pfx___schedule+0x10/0x10 [ 831.749830][ T31] ? schedule+0x91/0x360 [ 831.754199][ T31] schedule+0x165/0x360 [ 831.758404][ T31] schedule_preempt_disabled+0x13/0x30 [ 831.763964][ T31] __mutex_lock+0x7e6/0x1350 [ 831.768589][ T31] ? __mutex_lock+0x5bb/0x1350 [ 831.773522][ T31] ? rtnl_dumpit+0x92/0x200 [ 831.778097][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 831.783203][ T31] ? rcu_is_watching+0x15/0xb0 [ 831.787994][ T31] ? trace_kmalloc+0x1f/0xd0 [ 831.792830][ T31] ? __build_skb_around+0x262/0x3f0 [ 831.798163][ T31] ? __pfx_rtnl_dump_all+0x10/0x10 [ 831.803365][ T31] rtnl_dumpit+0x92/0x200 [ 831.807708][ T31] netlink_dump+0x6e4/0xe90 [ 831.812367][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 831.817410][ T31] ? __netlink_lookup+0x7db/0x8a0 [ 831.822542][ T31] ? netlink_lookup+0x30/0x200 [ 831.827421][ T31] ? netlink_lookup+0x30/0x200 [ 831.832494][ T31] ? netlink_lookup+0x30/0x200 [ 831.837290][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 831.842628][ T31] rtnetlink_rcv_msg+0x9eb/0xb70 [ 831.847578][ T31] ? __pfx_rtnl_dump_all+0x10/0x10 [ 831.852832][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 831.857961][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 831.863505][ T31] ? __pfx_rtnl_dumpit+0x10/0x10 [ 831.868485][ T31] ? __pfx_rtnl_dump_all+0x10/0x10 [ 831.873845][ T31] netlink_rcv_skb+0x208/0x470 [ 831.878903][ T31] ? __lock_acquire+0xab9/0xd20 [ 831.883847][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 831.889363][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 831.894823][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 831.900149][ T31] netlink_unicast+0x82f/0x9e0 [ 831.905011][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 831.910313][ T31] ? netlink_sendmsg+0x642/0xb30 [ 831.915410][ T31] ? skb_put+0x11b/0x210 [ 831.919680][ T31] netlink_sendmsg+0x805/0xb30 [ 831.924544][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.929857][ T31] ? __import_iovec+0x5d4/0x7f0 [ 831.934893][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 831.939952][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 831.945819][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.951129][ T31] __sock_sendmsg+0x21c/0x270 [ 831.955980][ T31] ____sys_sendmsg+0x505/0x830 [ 831.960779][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 831.966168][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 831.971650][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 831.976351][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 831.981670][ T31] ? __fget_files+0x2a/0x420 [ 831.986274][ T31] ? __fget_files+0x3a0/0x420 [ 831.990964][ T31] __sys_sendmsg+0x164/0x220 [ 831.995718][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 832.000932][ T31] ? rcu_is_watching+0x15/0xb0 [ 832.005777][ T31] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 832.012591][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 832.017804][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 832.023003][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 832.028224][ T31] do_fast_syscall_32+0x34/0x80 [ 832.033236][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 832.039586][ T31] RIP: 0023:0xf7fb6539 [ 832.043760][ T31] RSP: 002b:00000000f546455c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 832.052484][ T31] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000240 [ 832.060473][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 832.068610][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 832.076712][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 832.084754][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 832.093271][ T31] [ 832.096314][ T31] INFO: task syz.2.3023:16605 blocked for more than 145 seconds. [ 832.109230][ T31] Not tainted syzkaller #0 [ 832.114337][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 832.123059][ T31] task:syz.2.3023 state:D stack:25576 pid:16605 tgid:16605 ppid:15847 task_flags:0x400040 flags:0x10080002 [ 832.135126][ T31] Call Trace: [ 832.138426][ T31] [ 832.141447][ T31] __schedule+0x1798/0x4cc0 [ 832.145995][ T31] ? __pfx___schedule+0x10/0x10 [ 832.150883][ T31] ? schedule+0x91/0x360 [ 832.155266][ T31] schedule+0x165/0x360 [ 832.159477][ T31] schedule_preempt_disabled+0x13/0x30 [ 832.165664][ T31] __mutex_lock+0x7e6/0x1350 [ 832.170312][ T31] ? __mutex_lock+0x5bb/0x1350 [ 832.175218][ T31] ? raw_release+0x1bc/0xa10 [ 832.179820][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 832.185015][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 832.190232][ T31] raw_release+0x1bc/0xa10 [ 832.194812][ T31] sock_close+0xc3/0x240 [ 832.199116][ T31] ? __pfx_sock_close+0x10/0x10 [ 832.204031][ T31] __fput+0x44c/0xa70 [ 832.208116][ T31] task_work_run+0x1d4/0x260 [ 832.212851][ T31] ? __pfx_task_work_run+0x10/0x10 [ 832.217990][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 832.223520][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 832.228859][ T31] __do_fast_syscall_32+0x1f4/0x2b0 [ 832.234273][ T31] do_fast_syscall_32+0x34/0x80 [ 832.239152][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 832.245583][ T31] RIP: 0023:0xf7f87539 [ 832.249657][ T31] RSP: 002b:00000000f756faec EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 832.258203][ T31] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 832.266231][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 832.274545][ T31] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 832.282603][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 832.290585][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 832.298725][ T31] [ 832.301807][ T31] [ 832.301807][ T31] Showing all locks held in the system: [ 832.309610][ T31] 1 lock held by khungtaskd/31: [ 832.314650][ T31] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 832.324618][ T31] 3 locks held by kworker/1:2/938: [ 832.329731][ T31] #0: ffff88801a056948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 832.342430][ T31] #1: ffffc90003897ba0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 832.353668][ T31] #2: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xa1/0xf40 [ 832.363478][ T31] 2 locks held by getty/5585: [ 832.368168][ T31] #0: ffff8880330c20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 832.378107][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 832.388558][ T31] 3 locks held by kworker/1:4/5889: [ 832.393828][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 832.404934][ T31] #1: ffffc900044cfba0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 832.416149][ T31] #2: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 832.426691][ T31] 3 locks held by kworker/u8:29/15792: [ 832.432385][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 832.444449][ T31] #1: ffffc90004e57ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 832.455535][ T31] #2: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 832.464661][ T31] 3 locks held by kworker/u8:32/15795: [ 832.470206][ T31] #0: ffff88802f481148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 832.481983][ T31] #1: ffffc90004abfba0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 832.495927][ T31] #2: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 832.505709][ T31] 2 locks held by syz.4.3015/16581: [ 832.511559][ T31] #0: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19c0 [ 832.520695][ T31] #1: ffff88802ee92d38 (&dev_instance_lock_key#14){+.+.}-{4:4}, at: napi_disable+0x4e/0x80 [ 832.530934][ T31] 1 lock held by syz.4.3015/16582: [ 832.536121][ T31] #0: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 832.545392][ T31] 1 lock held by syz.4.3015/16585: [ 832.550515][ T31] #0: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 832.559711][ T31] 1 lock held by syz.3.3019/16592: [ 832.565006][ T31] #0: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 832.574537][ T31] 2 locks held by syz.5.3022/16604: [ 832.579744][ T31] #0: ffff88802c1a06e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 832.590275][ T31] #1: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 832.599243][ T31] 2 locks held by syz.2.3023/16605: [ 832.604942][ T31] #0: ffff88805c2c5848 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 832.615335][ T31] #1: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: raw_release+0x1bc/0xa10 [ 832.624378][ T31] 1 lock held by syz.1.3028/16626: [ 832.629494][ T31] #0: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: ip6_mroute_setsockopt+0xb3c/0xf00 [ 832.639369][ T31] 2 locks held by syz-executor/16633: [ 832.644879][ T31] #0: ffffffff8f2be970 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 832.654392][ T31] #1: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 832.664977][ T31] 2 locks held by syz-executor/16637: [ 832.670352][ T31] #0: ffffffff8f2be970 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 832.679910][ T31] #1: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 832.690641][ T31] 2 locks held by syz-executor/16642: [ 832.696114][ T31] #0: ffffffff8f2be970 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 832.705682][ T31] #1: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 832.716407][ T31] 2 locks held by syz-executor/16645: [ 832.722150][ T31] #0: ffffffff8f2be970 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 832.731654][ T31] #1: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 832.742376][ T31] 2 locks held by syz-executor/16649: [ 832.747762][ T31] #0: ffffffff8f2be970 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 832.757275][ T31] #1: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 832.767992][ T31] 2 locks held by syz-executor/16653: [ 832.773420][ T31] #0: ffffffff8f2be970 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 832.783006][ T31] #1: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 832.793531][ T31] 2 locks held by syz-executor/16657: [ 832.799261][ T31] #0: ffffffff8f2be970 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 832.809006][ T31] #1: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 832.819655][ T31] 2 locks held by syz-executor/16661: [ 832.825431][ T31] #0: ffffffff8f2be970 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 832.834949][ T31] #1: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 832.845562][ T31] 2 locks held by syz-executor/16665: [ 832.850933][ T31] #0: ffffffff8f2be970 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 832.860434][ T31] #1: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 832.871157][ T31] 2 locks held by syz-executor/16672: [ 832.876614][ T31] #0: ffffffff8f2be970 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 832.886176][ T31] #1: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 832.896766][ T31] 2 locks held by syz-executor/16678: [ 832.902306][ T31] #0: ffffffff8f2be970 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 832.911844][ T31] #1: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 832.922684][ T31] 2 locks held by syz-executor/16682: [ 832.928067][ T31] #0: ffffffff8f2be970 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 832.937829][ T31] #1: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 832.948453][ T31] 2 locks held by syz-executor/16685: [ 832.953886][ T31] #0: ffffffff8f2be970 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 832.963425][ T31] #1: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 832.973949][ T31] 2 locks held by syz-executor/16688: [ 832.979403][ T31] #0: ffffffff8f2be970 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 832.988948][ T31] #1: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 832.999504][ T31] 2 locks held by syz-executor/16700: [ 833.005033][ T31] #0: ffffffff8f2be970 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 833.014606][ T31] #1: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 833.025317][ T31] [ 833.027657][ T31] ============================================= [ 833.027657][ T31] [ 833.036299][ T31] NMI backtrace for cpu 1 [ 833.036315][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 833.036331][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 833.036340][ T31] Call Trace: [ 833.036347][ T31] [ 833.036354][ T31] dump_stack_lvl+0x189/0x250 [ 833.036382][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 833.036404][ T31] ? __pfx__printk+0x10/0x10 [ 833.036443][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 833.036468][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 833.036491][ T31] ? __pfx__printk+0x10/0x10 [ 833.036513][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 833.036540][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 833.036562][ T31] watchdog+0xf60/0xfa0 [ 833.036588][ T31] ? watchdog+0x1e2/0xfa0 [ 833.036611][ T31] kthread+0x711/0x8a0 [ 833.036637][ T31] ? __pfx_watchdog+0x10/0x10 [ 833.036654][ T31] ? __pfx_kthread+0x10/0x10 [ 833.036678][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 833.036699][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 833.036719][ T31] ? __pfx_kthread+0x10/0x10 [ 833.036749][ T31] ret_from_fork+0x4bc/0x870 [ 833.036770][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 833.036795][ T31] ? __switch_to_asm+0x39/0x70 [ 833.036809][ T31] ? __switch_to_asm+0x33/0x70 [ 833.036823][ T31] ? __pfx_kthread+0x10/0x10 [ 833.036845][ T31] ret_from_fork_asm+0x1a/0x30 [ 833.036876][ T31] [ 833.036883][ T31] Sending NMI from CPU 1 to CPUs 0: [ 833.182465][ C0] NMI backtrace for cpu 0 [ 833.182490][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 833.182507][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 833.182517][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 833.182543][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 d0 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 833.182556][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 833.182569][ C0] RAX: 87c6d0ab3c353800 RBX: ffffffff81967b47 RCX: 87c6d0ab3c353800 [ 833.182581][ C0] RDX: 0000000000000001 RSI: ffffffff8d70decb RDI: ffffffff8bbf0760 [ 833.182592][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 833.182603][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ce770 [ 833.182615][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 833.182625][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 833.182637][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 833.182648][ C0] CR2: 0000556ea5e3b468 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 833.182661][ C0] DR0: 0000000000000200 DR1: 0000200800000004 DR2: 0000000000000083 [ 833.182672][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 833.182682][ C0] Call Trace: [ 833.182691][ C0] [ 833.182697][ C0] default_idle+0x13/0x20 [ 833.182710][ C0] default_idle_call+0x73/0xb0 [ 833.182743][ C0] do_idle+0x1e7/0x510 [ 833.182763][ C0] ? __pfx_do_idle+0x10/0x10 [ 833.182785][ C0] cpu_startup_entry+0x44/0x60 [ 833.182800][ C0] rest_init+0x2de/0x300 [ 833.182816][ C0] start_kernel+0x3ae/0x410 [ 833.182833][ C0] x86_64_start_reservations+0x24/0x30 [ 833.182852][ C0] x86_64_start_kernel+0x143/0x1c0 [ 833.182870][ C0] common_startup_64+0x13e/0x147 [ 833.182895][ C0] [ 833.381684][ T5832] Bluetooth: hci19: command tx timeout [ 839.621648][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!