last executing test programs: 1m25.035269478s ago: executing program 0 (id=6315): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x5}, 'syz0\x00', 0x42}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r0, 0x5501) 1m24.736332316s ago: executing program 0 (id=6320): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000000000)="3b31c789f472224a", 0x8}, {&(0x7f0000001180)="a64412255226842e7b4229d689e5d11affbefa4c2f9e2255404cf4bd078b83a2cc5c1eb4943450c6adfaa25a0489d967d06002988cc44399816dc0fb67345f2697fc4fe54c23d747fdd5f8e450edea15cd731f2991b01013b72f0a13af63fe9269f13a67577e7cdcd8e9566b3b87356f23554cbe89ca9f7d8145a3f0d1451efc89f25e12", 0x84}, {&(0x7f0000001240)="174b6ebd8b7054b7e7a8a012dba10300aaab02b5cd001d71d3d7b2fa1265293f8fe500016143aea54c8f697147d6590add294e4a17e12f2bdb03c767b29591f8c985e130e20976742703315a7d41f954f34e45cbfeb748ed9daf4259e83be4b78823c3ac591007a2537858088fb4436265198af8793bd7d25e16281daeb5c5be6fe0", 0x82}, {&(0x7f0000001300)="e0c4eb4d3bd521a1b530480d358b9f39bc74fc49d561003a98e637211fdd45ec7c291c8d0dbf3ce1928b95662bc34d93b046980b682fbee7c1814beb08415848ed2750ca69ce3e5049dd7121c43a009de1992457a9958f29bdb841435005275ac462f00f802b7aa5cfedb8876b9748114b4dd2793fa91a8c19af64b408a749110984c7c7ef815c7c4cc6839f8f7666c61b5398b0f6392b3b2631f228a2bd88f12dc9c3d391fa15d2e32d6e8714cec8ffb2bd7abbb0a6d0e97351f8eaec32ae297e585d6ffef52e8e5facf5f0e9b1193424c88f96614de635eee8e5e625", 0xdd}, {&(0x7f0000001400)="2e18be068ce5f15ce19c8c750a7b5731f7caa31475b8b3eb4a5793266916727db7673824ecc8a506c6f878eb39fc50356ab44d841e59d77345134ed3b6ed44c4eab91d7d28ab9d69e750a591b813ed1e726b149cd1530885a8a310b5fe5b314b712ff30b01f2bbc622f249d5e07b64a328fbacf60e7bf39177cd0bec64ee118a82b2b42416a4e2bec7df0e818f45c32ee64805bd6b9fe00fda1fb365820df24d9b25b4a2da4241a6515c49e621c9a3b04668aa5ec33f66a89f240d8074875bb6b4056866231662bdec3744a958add037552b5c2dc4cc626c50600a47706a390386e82d9d10fc6459b413ce7a2f8f23806e9c54e7615d0865fae2c4415ea63d", 0xff}, {&(0x7f0000001500)="b0383773288838ee9291e9da3b831d9feb95b987f75786202c72750cdd9ae09d17327ee7ff89455434bc74b32d53ace2423beb537b3a98bec1fecd6adf5aacdfdc51b578d6196c9a079d1881ebfc0dd757ccbf8193d94e9ed8c955646dfe2614be8df5dae2bcc90a082940f7d46c23438d09341fa1718ce0622935fe5844671448e7cb301ca9c2bfdb40770427cdfe7efb8a8516de7aa5ff012e5fd4313f5803d5127ca780729a6f86de29cfa0a29333301dd2982903289c4852287a1290d89733132d0290b0851145d2bb75243c50d85d12fbb33f1f762e7a95af7f", 0xdc}, {&(0x7f0000001600)="463bdd583f72315908e775deb87b855059626d462b897e0918c7d72278a12c0436644468bed9542b7d8153b7c56d58dc218ca67162af4eba2b17354f71cc694de0727d8fce59db84f4a740403d0b90585a59c7d94fd173da3d3f20ef23dcacab0a5241311ae2dae68daeabb0e79e03223c753d9e9cadc40152802d0a9b811a14cbdee3b1b1de7476da14e345ad9664c9c9293345a8c62d135d30", 0x9a}], 0x8, &(0x7f0000001740)=[{0xb0, 0x8fea368beb0a4dab, 0x19980, "268534c3f9b5986641a3a361bd1092922ebbc811871cfc24352380c6cb4a91b9424df3a4aa6da0a766842d2816ab2585395b1b12d2873f32108e5f4cf5717129cd8c1d3a8c858d428f2093087e91fda9c0ccffa7ef04fc73b6dd7207ff84b009da72adeedd9f03a67c394f4c510d6e6983d10616aa05fb3cb088d2dada53fee9a1c529e895ae942784ce66797939fef6da127c215d4588b0bdd4209b"}, {0xc0, 0x109, 0x1, "0d3749f13ba93b8e3c18ab7a41917886f869c43da88586a9b86eb012a34b49fff1b49e3980ddbcaace0d52ed7128dfd274acb0c625e6b393e36a07461f9eb90061976aa9086495a24c89ef22487602e0fba81b45320b814819a5266d05216e169753cd4c13be262a049a0605e0e1a2d5074edf18bc0ffbc5adab141ab8d6e9dee8bca5c9fcce64a314e61eaf4b19b969fa95824941f6331fd5657c0ec83e5660907452b1ffeb2d589b"}, {0x88, 0x10c, 0x4, "abc956c85ad274ade79afe26eb8e818a9558170601b20fde0cb206f1b3b27f4efdaceabbd7ec983923739a4adb22ced5d98bfa7723a52664b356017fc8c2c22a147fec8abe0cb96bff4fccf9bb588463fcf396c9009485eeeab54368d0876677bb2395b222041bd026ff92eadaf33e954dbb"}, {0x88, 0x114, 0x10, "788eab5a3efd86d3bf454e4a6b79e60f6015df12cbc832dcd4b06c7f2c7df166c4848d593ce38dc7fbb2a0d05ba8d5f7ecb80c49c06809c90319b12cc158c96eb027fa4cd5d6b481a508021d1712a5ea8ddcbd617cf2b8479634cca2c7c2996d843e72a878875993b41415e2e29d3f3e4876"}, {0x88, 0x118, 0xd, "1868f1faf4c12c5ce9ca3be73caefd160d87665bec003076f9211a220fc4a40a5b236298baf55dd1b15d73915b18047b26c296e05c26f3543646218a0e325c3426816ce94c72b382eee3860d0b51e2bd1dfd7d8768cc866ba63ed0f62e0e62d604f31b790a6ff79cd993e36b7603a0c70874a2218c87ecd6"}, {0xa8, 0x103, 0x0, "059c3821a0113ad45716d4c828d9f207e55934d8994fe0a393d21b36ba2ffb9bdee73aab5285f645158d63c7e3a16ebf1c95548e07088d2a27c9c56c13a0713fb5012f191c6d4e63b11d75f602ee8ee4a51be228a1f3cde8d592c4c36c1074905145e6faff6634edcd035f2c4376e8d314f502777bdb2b16f5de8bb8857053f79d6d09b8831d1209b23212a8af61373f93f594fbc60c"}, {0x28, 0x3a, 0xffffffff, "07001ae84de20002deb58da1d9c0c7767ed9a4a8"}], 0x3d8}}, {{&(0x7f0000001b40)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000002bc0)="fa5e981441a6c04624f8209bd9e5e1fc17723aa6b34b56de8b42df94884731dc013983e0a21729747699006914ad69df19f9b3783e70dcfc227f876eebbf0881235615f47cef35d011f1f804ce94dabef89e1a76d96de093018e09c0a9240a425e91b7bce3df8eac68442aed750f544fe4075ef8d6", 0x75}, {&(0x7f00000000c0)="b708189ff2ff4bf092fde51c9c91d24fe5109e62c5", 0x15}, {&(0x7f0000002c40)="31e06a9d17f593b2408ff9f50be8dcae0fefb258d850dd6514cec20f6a80adfa0584fef684ee73e6f6dd060b80bd84502b638affa49b40de7a1361588c94cc1dc8e85a1c4edb10484126efd8eccd9078a3ee4c39783f81345b5f6a25408c7a5482bc93e8370a857ddae4dfe3a002931fa538e579e25c8de43ffaf715aaf5c3e9d09b5bed1fd04b63eebd10c7d3bdbe9a6bb9f9529709f501085b3c6df3812dd0c356c35993e3c1bbb50ec8ffb104d366b7fad8eb8330ff67804b2fbfb66cc56719a012e5f2ed567c042e8f41e9bf50d7814a3871065214867872656dea094994294e83740912", 0xe6}, {&(0x7f0000002d40)="b03904282adba3c7ec89ac0cd17b29086b714274327b4bc4e26e685ca234af6503cbbdf391bd5c68b1d69b69552bc2db66a5ad4d6117ffb470c4e349cacc0b96211803fad31aef96c34dde5568edc37ec55fc1de57f08e3a9489d8caa7b35242f9180d3c97345c0877e03e600df8b95003c77b67627085bcedaacac4700007a37d42f4d873980d49176abbbeb1efab081ca2ff65534c340ed929fab45e3ca00225", 0xa1}, {&(0x7f0000002e00)="fc68bd65ba95bca8530a71706a6ae50e317c188420ef7dcf5c2da562ce74641ef973cf5f508f08bbfde7eec5d2aee14723332c37e2d0bd927902131a10876df3c2e2bfc6b1b5538cb3347a7424ca6827cbbc684abb", 0x55}], 0x6, &(0x7f0000002f00)=[{0xf8, 0x10e, 0x9, "4bcdad2f268b3286c097a11a4eb2920af49d7a65c71de8cd9ea990da5c027db49fa2d9d7eb58927346a15e089952cd4fb5fa8327b0084ae82c51e5274fd157a475906c2ca7c2d7773550c00e8d134e22fff7f4bb23096e7ea4cc976452c02948838b20b125699df79963e15cdd15b97e653d7214f834f3c039494af8d263431180756e46821aa2d615d6658cad75856e9e92470eeea93198e6880e2722bdeaa3789898d9cd96f53cb6b4637e1414211a30a6c0d7e398b89c4b975f4357b39fa92007d15968bc50908904cdf4b5f1994df58bf239c712407ac1d2a5b54fe3db43d9641c5bb21a"}, {0x1010, 0x1, 0x0, "219ed424d716223885ec9d26e6652721440d87f5b15f39fb04c6fa6fe2ecaaa19106c20a4ded3bce60a0cc5285f9c2ee7566e9f81c504eead84f90c8c7e4cd3fb4bfcad9ae0e7775309ff158a2a5d1ff32f42e021cd1619fb65211591aeccec414e035b90cd618e58ac437b8eef2eaeb80a0c8f5859886103ddad9843b750c66fa880ec79e4c5d9c2e9e506ed316e617130d7e4d5fb69b9feef745347a42c6f039528f4de7ad6c37ee69868090750462e026635796f516ace8cf067aae78de0d2171a47549487fb0cc71baab497e22a787fe37f19172ec4f5fdbaaba2325650eb19c1dd9bd58330647c1cd298aa7970df6aef87902ec82de75a41ba2300f51b38e16101056c05f6795927b2fcb74126ef0de46282e49878da36bfbcea2fee94811c1dde42257c1086f69e4f3e3b14bfb3199c2c0f23cb30d7c41e8f086b230a5bf33f862fa306b5e72464253aa87ab7ef5084b7e0d29839c3f98c6bc150af08cf01eb18b33bc99b9a6a4072d4066b97cf43a6b683fcc6db900d877cac2e38f645048bdb0c3234116ea99dc5639da17e63de5e0a13be5edbba4c8f01ebe88106a3fc316c9368c0781c63ec89dd8f0d3321ce11567c41cfe2c467b7cd5a38f6cf91e042fd2d53bc1ad113a902fc33103febf46db416de3ab600ca9877329afbb94bc7f322ab1cabb3647313eeecba49ad45433b7c0afd32e9993f53753972839df1be4572911e875910598620545a8a8ea8c5cac064d0d74c3e5aaa79c49fc1ad245d376ffc479e1e7d0fa1e9b78c206bba17a7d2e74ac5b8efd255a7d41d83d3e35f8ac023ab30e58c3cb25c33360174d01714d18c03c3e7d84a4a9f8005ee2cd1dca2c239430620888dcbeac213d2c349a781363ea6db79e80a113ea19ea084b83b745b8567b9ace5acc2bfdc385d205cb3941da01110e19657b62a43b061acca608bf8fafb25a1d5b962193c38f88435f6dc6339a972cbed4d797e389a7b5e712529b213ddd0288f17d336bc78d7bed9ae6f9b46a5b4cfe88eabfcba5cf98fe86cd0e7a8eca7fdaff5c185a8910c6cfa23acc92e14d69aa2d8d65b9309194d427e4819e6d1b0a1c031975c7c89c8b1a057f3bee1e27945d610c13107e23b6ca5c30d1f64ecdbe41359f56f11b6ba3a2d17cc40771b0c840c27ab542c0ded0b757bf533b86a8b3a350ca4ee424d8e634ec2d71afefbd9184fdde6d55d38513a5631182a4d920a3d410ffd3756d12ccd2ab63f25a6c1cbd057484ab61ab0b853df5785c36baac7527076494f69b65e639e5457737f50989171043bdb2aff42a9138c39c3b0b6c708060a8cf0c2be68510d4f186ccb9324e99b62252369eb31c786110f8f9ef3451d262db04d74a4323a9227dbadbeeab9703606947f64e57f2cb355797bcd8ab7236986440f8a6bcb6d6e4676e495f7c8624a2f07ad7e39a7b0593b904021ee9ce2fe8f62b3ea904c4b0b63d4b46bb6b4850987fef18573495a91e3451102ae0d5a598f13bd6428222751137723fd9fa2ecaebbc137fa0d6ff602104a776d22de71071006981e65ab325eb0e7f030eb5424698871de60d5eb8021844568298644f971d5fe4b3fe7c6f9f011018d0b24ee3887eb89c1c7187e511a52262b6d34d038d00931f2424b1c626b772a6d1e2163a724c61e2d6cfd9a31b329248b1eb04624ce23506f012c6412b0386dc5c7749eaf52409a0cf6b0db3a2da00151bfc1b3bd77675ce7473cbe7b7f17473e367a7d2d17476c51ec2528ea660683611578879f2d08b660b7b205cbd05763298cee6c5d8b2fa097cffc1885cdea3f71efcba9ae1bbc3843e676cddda7359ec9e9a4ba7a30780d9b5e65eebd603515f8823bef439cdcbebb6a5d221308f17e9bc6c76df5d9058bde0a6da80a84220b1010959d42d2704179d9067a6a29aee9689c33bd8149ed7ba99127a2eda096caded1e18d245600d4fe5839878bd82543375aa2dc2b1a3306f62d7b546cbd0d307669d708f1928d5a9b787152ab78e6a2ad4679c8dc508b5d5df02f5691de60bae2c7996b98b3c9b4606afb60d9049a441376f7d885f2b508bda75256ca53d852ab57c1b1efbf5f87e0de237e05f06cc5b8137ba20b05b22d67a7ff808dc2f4dab2d8fdccfd935096c6183a98c73ecd89f2b1be0a08a358d3e15ffa5b19481a2b23d043f6625808107356285d15d4e656fb0514a5450030df922f184e53fea6c53dcd2eb1e097e0c5824f909080e54be2d4d33bbc154a215c2390d979e578726d4c168dead77c2d051649d5db06410b16a117d907e761ea2dbfb370b6d395b9ef1b572926bc10bca16639ed72be41854b2695967686ac54f26a61a194296f2d3655d5680d25ba3df07b1e4f92a57034312e160cc3b7ad53c554a8e87754bbb35e0fc024eadffc67136bc39b61a542c660ebce1bcdd52135a81546567b826d4a027d99cbe14a6be0f048a56e5c56db55556dd0360a49cb39115f095c748868269832fcf3b4821437b46fb2c451fc04fd51e8e43ca4f1b3b17df3c3b27c5bf05348a8a2f7d2c82c03c7d50dc40d0b51b5dfe2a87ee348a2f215172431628ac5d64806ccb8d22cac5d2816deed93bd6b45d4fba84a5bc9280442a1b7687b069768acf84d6acad92e009213d5a6a55a3cebabea3a72db75f71cc4d502526ba8e0707cf66cb1871393aa2e0436715e6e092473d8b0119357241e57ffdc28aad2f3677ddd6274da13636b006cc783b49d1aedb90d1d435dd63b360c0ad8b65a26d77b5451c3b35f9637fedd9e5b1342a103a52bfa438da634bd7800b4937689124c0da532dd4b4013d5f624005eddd253a7a0816d2065f70b8d62e72db3f9cb19641bdbbf44d9379cc725d499d06bf7fd6f0ac3eebcb5d0050d6195b49f0966306cbfd029824fd558bb7821e8ff248b70e64476cf907b8dc58d34b16f37648e50d3a45137b45a5e92983ae2f33a923752e78b9e6b826ec3d7dec9c4d0166f7b66b235f8bdf97537ef29beca6aec403fb9d4116b6ea647636e31f1e1f20e30cffd64680f8c2e20d5337e17801afd6f78308f477b721b12068744734c5d2c74c54d04ce52410771f23b47e9a097807cb9801ed63c41092e9a2444cf8e914631692d1f7829cf8b081aca03404c55d0b3cc9b21ee1c7c2acb9ab18055ae811f11e6e85af2b083136a39c6e15eee4a920634da9797343ac943d1ec68d86095a1e2f74170ee0666c52d9ba1398dee057d46af4b5da539e1cc0890e4f08c7a7d8247b0b3a0cd1a9403a785dc7c20dd595ff0bea8f6cdabae454014f69e639d683f6ab6f8cae8b2109b81c5e9b68d7d66dd83bb69b63912216dce9429dbb989ec5fbf1a9f798fce8b5f36e0e80f933977a4686b7064142edceaae66fba0a7b29e1d58ac201d1cba0e66891f9f6209d6ffb61b4c11a3445aa7fb11698825832ea44c6fea3e06d74e383aed3ea2e47c9a1b3ac0323082e9ca0a8b534b1a3f8a9b67f00b7340f8cbde89bbd3f7c824d6d36447eb9ba608bb625432668e11e6c8155eb83c5cbd1b9ee4893da1ef3e6bae69e5026d7fe00cdedb7094a6b16de5395eba734ce92832056496bf93574557693528195670022f29fb23aa12f3d6e74588c6cbd77d76c6a1f70d951baec8d3de2ac590d4e8c458dcb75e11b9dc43448ce570cfd902fab69bf078e98563fafcb263ec3611be6ea95c45e286828d535cadbb2160a8ad2f7581f8670aa56b6b4fa0435a4857ac89aa4d6e7b413f4bfe599547c8810a98c830443db11cc0071263c280a1b2a8d9827493ec4a89e44eacc423690e54446c2fc6047c0f0249a401b30886593673c2d1c9a532c0a70eb51d7cb94ca07aa626f4667b97c37fb34274d909e577a83fc54752543a84d11f4239ba16c8e19507d8f00e184790751799fc2966d302be206cebf49710ff9b343933b1a7fb9659d7ba74be6f1fd2f296e1f94785d0df272cccf80e7e567db559b7ac04e60a7b6982839f8a58f9763bc4ed0717239b697a88629f64d32e21c93fdd2f1e826f39e777bd43b7196fdac85b70cd9232c7877704a39a91ead6c9cccb71ccc35d4805cf3d633f4cafb31b002233b6d13aa328780fe3fac4af63b46f9b8a6be7ba2dc592090b5d56b4d16212d70bb82f26fe97b93fa39f85dbe2830131b69585f13ac00c6991a47b36a487dc4fde052a319a46921fae2258e835e9dd96738fbb3cf4d61851134c519820920797e6b4a0a630e118d6269b0895488261d6bee31c8b9802d0545fe2640c62910df0aeb43381068efce1298c4458c032a1ee9fcf8f480b1f72a86e73b332df4bdcc9e72da05bb336569c083d6e7879ab264db11183e2edd0eaaa6dc5c3dcf80241bd11ec72e84a4266f5288c4aecbd3bdcb9d6c3cf2c8243a5c7358e2e495c5bd3b86e38dd786761a75767ba12829a048189b95606e0fd4ac4502ce5aff681866d1400c935f885615c4f3f925937c36d3e03f91b0c69f17effe586aaaccbad08d01e645e3a128fbe9a8acd642a1e12f32bff1a50351497ce70bc3a6a2b8654dc08652ca347e9dd60e1cac84af0c1193b0a59932ab2d5630aef4f3f13a4414f308f38f1b3200e874d2db4eabd89b01371c143963059f87eb1eba1ae66df4656654268f912a5ad2d5aaba9d6d4765056ec855c9d62e7ac9f6ac36900ef80b067c28c55e052c805a14193357a3818f603765a81d753e6fd0c3dec8d807eb8f64be95e78b28a1b795a9600aff1c029fe51d91183f6cc034bc9ef5a4ff536a4928d324376a6003aa23f407412b32a154f48e7801cec2fd0d91eb14951dc262932659c9b638300ebd7c0147791582b53f67446e024c015af3073eee3efdec9eb52be0f222b0b004ea7d37bf76284eb8dcaed7638ad3d72d0994c673657de848d89e8eb4e9cccbc830cac1ec32456cc45025011978a31e0009fefacae450a14eab3dc195d4e107465660deb1ad33a03c317f5bedc0994e96d5dc42946390231726b223648cd0bb567488027f19f313442b1d95796f8fe7f13d07d39b44d5e420b2ad8232c5351b7a471e3317a718b59d7b6aa4558ffd5ab8fccebb9a2a671cbc049881b1e4146880a17de1514031889140178adc01d5bcf15b37c3aea609255cc8c8f5fc9c0483a5d09dab6c083cc499f64c52f20e336355845b1a1f8e296666ce49b25b1673a9c7b940f654d518f3aae92dd9bda4c8506e3d9b8aaced5671c085c08b603f21132fdf982eae41c6c29b6a88e9ab908eeca2cd0eb79333cf0b334ea16c13ea6e61afb380ae3beae11e117278e6a6507f2c3ad7057607ee009f6c2d698cd35984367e885f14bebdde7635cbe110a1d46591cee66d50dd0917de6cf7010d5cd3067defbed0c6eb4139d3c5f856e4e25632d30da0f0700e42bf96cca978de1ccb3ac4668f1415f048c884f131455e28ccf8e149d177cd270a9852f9b16e7298e5aa2f5aa070a097e8d540b8bd3bb595ea471a07088c9c9c6b269e7df6a66cb06b920017c330e17d4c13518a6236914ac57332fd6fc64ae1fc1734d0a0727517501360e4b098754d7631aaf5c706ae5b798cb118977c1ebe2ddc03820ea8c3c048cd690704e7fb95ab0a5810a5a252a4a0ace148eb7d8ed3ae95310bc33dac2116f19296c5c116f8bf66705f28dc1a6de1ac6b6e409f954359ac43b237cb429dde808eeab7d94cf01d71b6ded372d78e1f5adf2a86c64e52bbaa7c2b61abd33252856a7b4b1d2dc60558d0ba1bcf649730ab33868484442b682981ab63870acdaf22fb04d761dda253af84e7f1aa9256bfea3acd6589defa40ea172f"}, {0x70, 0x115, 0xffffffd2, "abd583790c5c333234410537e30503270ced666ae0a04165a59d8f900a0cb5907e6aca9a8b20dc4053843e1f97cc265331330338e5685780e1ee7a1ca2def1fab2b4b03a44c80414abcb5db26b33a0b593edaf8e49b7926fe10d53"}], 0x1178}}, {{&(0x7f0000004080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x4, 0x1, 0x3, 0x1}}, 0x80, &(0x7f0000005780)=[{&(0x7f0000004100)="a42225cd3fa8da3831e18a7425ae37f46a5c4c562ddf1088e7652feecb8542853a468e313c9f5fd316af338abec3b5758f197e46e7b34b5764c13e27378a03b16095108b1e5c87e24e05915be70732c02e0c873af4244a2d5b4ddc5cd30a4d69cba2f31cb2507d7eebdaf669c22d7a489cd9b720e2103f94af989ba224a5f98d32923918cc8586693039af2400d6fece463dfbd1e6bc4ec3f67439b23d7f00194f74274b144278a7ec1604ba1353358715eed7226449960d354f612abff2e9cae98a4cab661facddadaf44056ccd53021b76f54baaeb43dea1da8ae915e03115", 0xe0}, {&(0x7f0000004200)="3364ea0749f057961d82f52045e1b5ef5bc9566ae56461db20c1792f79e7ae4542cf9acd2d80ceb55ef6af682e57d5cd1b95455735b1bd92a20ca2cdf6214760cf65d6a3d1d1b4cf37f2b281d730449e9fd6dff10473c3907b763c528824244b890924606c6d5553d5edf9a1fc70c70670b3fb77f4c3fb71ff9c879c7619db503972bf66e80cdbdbc614ac563e863d", 0x8f}, {&(0x7f00000042c0)="24270c9d46b921ef897ccc044756e2818ee472e7340217ee42d2c0938a63f4339be91e99dc6c36a8841a2a3670bfa7356dc71c72196f3e8a9f5da26dfef80e3cbfd4ce67d650d21f9c322fc8ff0507515724c816098e99d46f1b6426945fd025727bdf0fe2f1493c50d3562a28635cb68b8b85444778197920ece6a5b8f059ceef0ae38944dbd43c19c1469813e8f393aebfc1664550553d635720739963f57c1362d2422b9a121062e208e3ebc27ca9defceaa593cae63885702de6d8b4a36afd5a6867d7739476ba48237601abbe78717edfac971442610e27ea98975372e11f541bc0e69b69c8ced9451e95944519", 0xf0}, {&(0x7f00000043c0)="d64e6f97aed47b06d265327e1982484e4d3ccaa74c56329084156e95714ff83ebbd0d178e5a5ff0ce6828d3d96cce54834265c39a1f1f33356a4168151bb7d38242b38543dda454836bdaab3cb7f9a22694e764248d7092844601baa5eba3dc0a95d4013ff99e4cf087f20e81890ecd461b1acb33ecdfd4df75fac2b55abdcac18be06f11f3b1e1a9425f94918044e82f97dfab6997a393b5bcc03059c4697f6fa8dfeee2871a1d6", 0xa8}, {&(0x7f0000004480)="4d3c2abbf411c7700f47272e40aac045c91429f11082863107df6365fe7ed9376d67ecbc9dc42f7ce0c66a9baab3750b188e71464b", 0x35}, {&(0x7f00000044c0)="f68997ff2ad8665d7415e357e24188b7d6bb90870e98ddd9220caf4dd4ea7545921830fc311bebb1298a70c3e56668f17b397cca9d4e32359754bc541a021c73bd59ce2e63d523b4457462536b014c4c47b4372d2331310b9761f638529e87fb4a3242ed63fa5d14c97dc8b04133962bd4dbda505e2487f61c733267a7fd45158aef9e168f669d320bcf86c6db07637e2f9c7c66e8165e62a177fd03d40863c99bf5108e90d75a54e0c63fca758985f4ae753a65548a53cd2eb6df20c09b68bb8455f61ca63a54db40c47115fecd4a5f1e8b5aa16ad63b7787a561f2d2fe9f60447f628c54d409906b3c900900f273d06e57b3ba", 0xf4}, {&(0x7f00000045c0)="35edf9f37101e43c48f600b2504162a4cfda089955cf909ad2300f4ade973dc159f023d4a4bd2891ddf53913b1fba8fcd356366f818f00848755f4fb39e01cde675a07875a6878314f2a01aaa9b07502d69f94ae24bbf176b0e977a1f1a46480e22cb7f2420003168fad55db21c6ba84a4edb7b512f9393af1c4180c880bf98ea22d57b0718690a32ddaa956e123c45605109fbc80b5e3c7ec62e0212f9ba4d432a35bc7c482acd8db63d59b884d6ba49cf86e5c4537fa659c6a8ce843e534eedca59b4477eea1c1d93289bb839c12350798ae51028a0f12ab045b5e1f610755fe39", 0xe2}, {&(0x7f00000046c0)="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", 0x1000}, {&(0x7f00000056c0)="f20cfcf0b57393169f141fd8d7abb91419601b0d6397646b9472d8bb85b035e4b83755e69cb6458a14351993ed3b7c3e255e5a8c997855660ec8dac21e095408104d6fce9fb383910082755131e6b81e518cf1548afffa31cfa7130cee1984e0f2f6a3b8c083e7dd3f301cd682e74ee8a1111ce59950485a0ce449a0a681341835e77a02919f5e3b81e4f222652212a84f47d12d2c0415470e0faec263272efe78b65187f4bbd777af38", 0xaa}], 0x9, &(0x7f0000005840)=[{0xb8, 0x101, 0x0, "e5640d592710178284eca926605671f03b212726771451125ac1fd0a088ca3528c8775d7bda261b65db59ed06b0adb2b4f35868a734898cd980a46c7ccf329a2965f67d621e16ec914d59a7f32289af0b7843860759ad51607ecfd1a0b6fd63ac3d0eedacab9c55ce156d9cc641a997a29892662e3eb3ba331148847b33c6352ac4e8a1322840d3a2f68977d49f12b9196b77e6519b5a3567e4778f3ca411c41e32bef7a2d379b"}, {0x58, 0x113, 0x1, "d613e86d4adb9491c4feee67df391658ccc82c5c53617a78bcc942e0254dc684d2a7c3ccfc8f71bc9a677699cfd48341c9be90d0281fed62630ade3fde2b305f04ff"}], 0x110}}, {{0x0, 0x0, &(0x7f0000005cc0)=[{&(0x7f0000005980)="5428cb5fa69691637bdef7bd8e65e6d7c3e2d4111e814850af97a4ca9a3dad", 0x1f}, {&(0x7f00000059c0)="35a9e4bcb5d1aa27f6498e670ef6695f1e0d8f065292c1060b5f75a1b0468937c068b5c8cb170d41434ecd4453715c708d64e51774a07f70add27a1704d6ea075a7deb03d483c6aba1ac9362e918b223eb5242dea12dfca7b150caf966bae14a508d1c8fb5f826f9ec0e5010995292b09c0080b945b0f59daa1f4c9d27f045a22b1503c30446d1ff7e335c1e4d488b4468a83dd433e0f74bc852d9f0b057f065bbbfc4bd9c80b5af", 0xa8}, {&(0x7f0000005a80)="80bf4cc91ae58b1d24c42b8de55c1a98cfa0a0d61656dc597ab4d44cad", 0x1d}, {&(0x7f0000005ac0)="5197820a0a36164c536584c43e10c1b7e13e3eee555f693fd85cff06180c99aa27699416f7e08be38d74d19497b57aa5dc4e88e8e0c86d6266db5434f8384b4cce55e25fdfaac74943f837b59c495b6ba10f5d3e3a8d4b12a44e61a26fc86e86a4a029fddabeb5248c407a4f1fa2d3098c8cfe9587c22fa88cfcd9add998bde9fd9cf17f1068b0efdb3ef5aaed23b6fda6bdaa16bd2b78f5956b29a3d46454b180571b59b2b65b6947deea7eb06d34a71ea8a398597d8f2a234fa418cbbe8b8d15b2fd8ac4d454aff47b897e3275180973263946a550", 0xd6}, {&(0x7f0000005bc0)="9704ced216811736d10631bdcad6593ee626a71792b9a9c1b1d4d510cd21ee6fd112b5a108e027d2ff0838545f4707ea106b53b1c71e842dcfdffafdd478328d3691733f6c475df57187ec4a82b7992c1b3312ef8557753fb92d92055ec0c5fae5409ac0f308db1f550a512bc0edbb28eaaefcf7c535dbbe", 0x78}, {&(0x7f0000005c40)="d5797a9bcc84c1f6466d727b580373681c7a6b76420453614d016bf828c4f451c93a654cb5f0bb5847dc3038f06350e06999e0b0f1dcac7152a432fb97740199b5ba4c6da4ace91ca136", 0x4a}], 0x6, &(0x7f0000005d40)=[{0x40, 0x6, 0x5, "2fae34daf562c7e0531a1a6c24345eeb2bc2fe3a79fa8f041326be62a69ec3cf14c59e39a392ec9c04e541bf"}], 0x40}}], 0x4, 0x20008040) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="05030200157e0000240012800b00010067726574617000001400028008000100", @ANYRES32, @ANYBLOB="050009000400000008000500", @ANYRES32, @ANYBLOB="0800040044"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) 1m24.573247245s ago: executing program 0 (id=6323): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x24020400) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x8000}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="08000800070002000000140000004520042800680000d421030690780a010100e00000014e204e22b71f726492f0aa60476778b14a1845c3911ae9ccbd3fd2ca8282569e8a202f38a4c0ff9a7e241e5c2163abcf4c3daf476a00", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5d466faf01978563c1e9d193902386be485b89e143cb36963b2e6368e95adeda5102274ca15b275a99904c3b800e10e1028e7abf94bc6711327ec60bc5800000003b72c6a8399d61414ce55303c90a29612948160c2517910000ba9b65249ffbac2115f92b61fc08bb025344256ddb1dd93099aff40000000000e95ab99509ca665dd24d0000000000000000"], 0xfdef) pread64(r0, 0x0, 0x0, 0x9) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) getgid() r3 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmat(r3, &(0x7f000072e000/0x1000)=nil, 0xe000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800008080b63428e90000000000000000", @ANYRES32, @ANYBLOB="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"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000080), 0xa, 0x410802) close_range(r5, r4, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40015}, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) epoll_create1(0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x640, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000003480)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000400)="f4", 0x1}], 0x1}}], 0x1, 0x24040800) flock(0xffffffffffffffff, 0x7ffffffe) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 1m23.994467022s ago: executing program 0 (id=6325): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x48d, 0xce50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x3, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x22, 0x7, {0x7, 0x22, "3d910bb0d9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x250, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6b, 0x10, 0x6, [{{0x9, 0x4, 0x0, 0xfc, 0x2, 0x3, 0x1, 0x2, 0x80, {0x9, 0x21, 0x1020, 0x4, 0x1, {0x22, 0xb7f}}, {{{0x9, 0x5, 0x81, 0x3, 0x7af, 0x5, 0x2, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x6, 0x9, 0x2}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x7, 0x0, 0x7, 0x10, 0x3}, 0x50, &(0x7f0000000940)={0x5, 0xf, 0x50, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x8e, 0xd, 0x3, 0x8, 0x5}, @ssp_cap={0x18, 0x10, 0xa, 0x86, 0x3, 0x2, 0xff00, 0x8, [0xc0, 0xff000f, 0xc03f]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x8, 0x2, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0xb, 0x140}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "f8e265beebdbacd55f5e1932e47f741a"}, @ptm_cap={0x3}]}, 0x5, [{0x35, &(0x7f0000000100)=@string={0x35, 0x3, "6d4cd4d49e42e9e126e684df6fb6d2496ce99ad95b4d63e6df645299b01ce05ab2207feb01c88d28e5a5f5f5678d421e132d13"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x41, &(0x7f0000000200)=@string={0x41, 0x3, "60a50f718ec500f09628aaa8b67604db8d4090b2ef02d9621c69eaf4570840a27b30aa805aa8a3ae1287cd29885e5b78ba3514ad0f8f359e8ba26b9502776f"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x42c}}, {0xfe, &(0x7f0000000340)=@string={0xfe, 0x3, "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"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000600)={0x24, &(0x7f0000000440)={0x20, 0x4, 0xac, {0xac, 0x23, "6f6a3c410aa7aeb7f872d07b2117cc588a54d63671f413150e8bd18144c1402a0fe1f61c8e88abc2a3a014dc5cb072f1b6c36a681bce750f5c832f03a892547024d6529f77aef64ae51060516c77e1cb305578b8cffa4627aa569b9f2384a685fa184a4aa62633ed7461588d4cfb63d9cd9f4f15f037ff0f707a9006c28f4fa4442bbd450ae837d817f9829061ef7a32e0a209f034ca163a6d975ec25403aaaa054ed0b80f724b6a079e"}}, &(0x7f0000000500)={0x0, 0x3, 0x47, @string={0x47, 0x3, "5bdef75b9c97972fa053405a9c24c31877843f180e6b44b645d7f52af1ba5c1e88b92c1fdc2a2eb383a0e6ae7a593841dc7512c035e6ff9791fa8d84c2552e80d3dac16ca6"}}, &(0x7f0000000580)={0x0, 0x22, 0x8, {[@local=@item_012={0x1, 0x2, 0x2, '|'}, @main=@item_012={0x0, 0x0, 0xb}, @global=@item_4={0x3, 0x1, 0x7, "c01eb293"}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfff, 0x8, 0x1, {0x22, 0xb9a}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x40, 0x10, 0xca, "5dd5298a6b40a88f4166d6fd1e45e4b6e4093ba1e95ccd53176ceb07a2cc4b2ec04726c623d77f32ff35c7099f5d1b42d80ec132759e522247d70ae775d3fef35942485d07357d44674018fb265eec583528f90f097ab72ab9410038770c5e7cf71d0b4e4b157c008ca603aed93e61b0556ea5e408e397a74f4f8caee4aeeb8e11e554300eb79c3f3e894996fc078c405c71425a1b714e007bad137969c8ec0b8eb1241ba599e356ed2cfe442b5f9c8af3aed7ca9cab0814309527777cd880553923c8918ddc8e1e110c"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000007c0)={0x20, 0x1, 0xd7, "475f1293eeb1055277497654b9b5c54f9bb4e88195aa3b957fb870acd1188ca7ddf46829d9bc9a8637db558d2a87f2fc730efd1e10a2f734b583f32f57b7f753aac02b1558c81e35eaa179cbcc3790597692b65ac4befe3c683e937b62d30835a6bb1cb46ca7145a5383739fae34196465939338779e08359ef8d0f9eb40afcf5ce67035ba708839d08c63799f8d7d58b8ae2ec1f16fdc4989822f1746d2784575fdf500e9b84cf591298b8ddeaff299f6b3e1d1224ce79e324f93e7853b8e547a80950b7807d06233d1a9c0b67abec1b8fbb142e0e58d"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x6}}) 1m11.984906528s ago: executing program 0 (id=6330): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001f40)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) pwritev(r3, &(0x7f0000000440)=[{&(0x7f0000000240)="d4382ed01904a1a847c50ae100f70e5e71ae3ded3cb6bdc02a5de9d439c491616d754846c701ebfd3456793571c6128a68d93214ff7856ca680b74e1141f711584", 0x41}], 0x1, 0x100, 0x0) 1m11.710448268s ago: executing program 0 (id=6366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x0, 0x85, "00000000000000000000ffff00"}) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000100)={0xa, 0x80, 0x1, 0x1, 0x8, "c098e7b0bd21430de428cf78b7adfdec60be6a", 0x1, 0x5}) syz_open_pts(r3, 0x100) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000280)={0x0, 0xec25, 0x400, 0x3, 0x40000330}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r4, 0x47ba, 0x0, 0x28, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r7, 0x6, 0x1c, 0x0, &(0x7f0000002b40)) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x20}}, 0x0, @random=0x4, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xf3}}}, 0x38) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x30, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x4}}}]}, 0x30}}, 0x0) r11 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007200911fdabcf8b30771a54a07"], 0xfe33) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000080211000001080211000000080211000000100000004200fdffe9ff2ad685556f4a3a3b2790f148e918bd56c7f8a7181da069fbd7d7eb124149505726f9e30827e09e1c479d298818c8cbdaa06a2e57ae8bec2a9f0dbcb27d017cf2589b3466c844ec5c8422b2ee080b2fee386ca8bc05ada9205813b685311fa9f716ab4356d36de1dda9d4"], 0x1e) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000008c0)=ANY=[@ANYBLOB="80000000080211000001"], 0x64) 56.405811917s ago: executing program 32 (id=6366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x0, 0x85, "00000000000000000000ffff00"}) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000100)={0xa, 0x80, 0x1, 0x1, 0x8, "c098e7b0bd21430de428cf78b7adfdec60be6a", 0x1, 0x5}) syz_open_pts(r3, 0x100) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000280)={0x0, 0xec25, 0x400, 0x3, 0x40000330}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r4, 0x47ba, 0x0, 0x28, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r7, 0x6, 0x1c, 0x0, &(0x7f0000002b40)) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x20}}, 0x0, @random=0x4, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xf3}}}, 0x38) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x30, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x4}}}]}, 0x30}}, 0x0) r11 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007200911fdabcf8b30771a54a07"], 0xfe33) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000080211000001080211000000080211000000100000004200fdffe9ff2ad685556f4a3a3b2790f148e918bd56c7f8a7181da069fbd7d7eb124149505726f9e30827e09e1c479d298818c8cbdaa06a2e57ae8bec2a9f0dbcb27d017cf2589b3466c844ec5c8422b2ee080b2fee386ca8bc05ada9205813b685311fa9f716ab4356d36de1dda9d4"], 0x1e) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000008c0)=ANY=[@ANYBLOB="80000000080211000001"], 0x64) 10.138329087s ago: executing program 5 (id=6620): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000080000000", @ANYRES32=0x0, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0908000000000055090100c60000009500000000000000b7020000001200007b2af0ff00000000d609080008200000db9af0ff41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001502010076000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127) write$binfmt_script(r4, &(0x7f00000006c0)={'#! ', './file0', [], 0xa, "ecfb2da4955bfd5861d978042a6ad22f6baf924d7bb1f5c47274d2a120e923d6033f5d05901d3dc2bb8087032f8259d85360490a4aa339abd0356bd229401537468c79ba0b2b5d465f3260ed5552d927b0a0c0907dcdbdf460f3b3268b828016289f11222b0135e68943de197f2e6c57289f0fbe7bc357b520795b5a42277a9ac3cab4d25bc9c74284f3de70249515065c8652008fc6bf105d12ec7c17a172d2b5852c05043c187b425a8014f48c8ab9c6"}, 0xbc) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r8, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x1, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x14, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x7, 0x0, 0xa, 0x2, 0x0, 0x100, 0xfffffffffffffffc}, @generic={0x1, 0xb, 0x9, 0x8, 0x9}, @generic={0x9, 0xc, 0x4, 0x5, 0xa}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='GPL\x00', 0x4, 0x13, &(0x7f0000000580)=""/19, 0x41000, 0x20, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000780)=[r4], &(0x7f00000008c0)=[{0x1, 0x1, 0x6, 0x5}, {0x4, 0x1, 0x0, 0x9}, {0x1, 0x5, 0xa}, {0x2, 0x3, 0xb, 0xc}, {0x0, 0x5, 0x3, 0x2}, {0x5, 0x3, 0x4, 0x2}], 0x10, 0x7}, 0x94) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x800800000025}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x1, 0x17}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) epoll_pwait(r7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x5, 0x9, &(0x7f0000000240), 0x8) 9.728264382s ago: executing program 1 (id=6628): r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) io_uring_setup(0x7c00, 0x0) eventfd2(0x0, 0x0) shmctl$SHM_STAT(r0, 0xd, 0x0) r1 = socket$inet6(0xa, 0x3, 0xffffff80) recvfrom$inet6(r1, 0x0, 0x0, 0x40010001, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f00000002c0)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x93e, 0x80, 0x1, 0x40283}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x88, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x63, 0x0, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) syz_emit_ethernet(0x26, &(0x7f0000003480)=ANY=[@ANYBLOB="f0feceb5f9b9db9766bd48766db9e0c5aaaaaaaaaaaa88a8110081001b00000c030000400703b1957979151f83c59ba6c751a7e307f80e0de8421921c854350857242074df5b1a0cd91409680ca6656da6fb0ad97cabb248635491f70191b6d3abf4d2a116c618c3ed910b2ec899099819a1d13c493203ec1a8f"], &(0x7f0000000280)={0x0, 0x2, [0x8b6, 0x46d, 0xb5b, 0x4cf]}) connect$qrtr(r7, &(0x7f0000000100)={0x2a, 0x2, 0x8000}, 0xc) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0x40015b19, &(0x7f0000000000)) syz_clone(0x40008e00, &(0x7f0000000000)="407d477d957653646627692446122ccebe9aa121b21d7099dfe5552db7541ef60ace498da1268eb0b08404a807a6f24dbfb64855eb9c3a46755168a4e97840dcd46b69e35652ad963cba8ebf34df065155ad644b14a999d3889629cb1d711af2df253fae01351c9fafb540e9", 0x6c, 0x0, 0x0, &(0x7f0000002480)="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") 9.134263202s ago: executing program 5 (id=6629): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x5, 0x6c0140) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000002100), 0x800000, &(0x7f0000002140)=ANY=[]) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000240)='./cgroup\x00', r4, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x80000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r6, r6, &(0x7f0000000200)=0x100000160, 0x2000007ff) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007cc254082a11050068be01020301090276b29d1200010000000009041f000097debe00"], 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x6100, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x15, 0x3, 'rr\x00', 0x0, 0x5, 0x72}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000009946060ee7d66067f56e19186bdd61babbc8bc6b06d5e016cfa0881471926f8ac47c2398d75e4786f5c74d96658d26a1e9b573bfd596bce997f1d1038207f02b7c378fc2c5a70017c6f1a52e89c0e682a606869f072f801f89ada35980daca8b3a01c9bb0ac99475c9b1b9c44ad71106346364bc3674c1e90d3d7a6d320d5a45bf75a50b8d1393884fc1422d09877b2bfc1231cd83fa3aea6d7fce3a9ba09aefe08ae0779f118f97952b483fffbb554abf5f", @ANYRES32=0x0, @ANYBLOB="080b29bd7000fcdb9e9f6d7d01f267df2537", @ANYRES32=r9, @ANYRES64], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x2000050) r10 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r10, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r10, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @private2={0xfc, 0x2, '\x00', 0xff}, 0x8080}, 0x1c) 8.367550995s ago: executing program 2 (id=6631): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000600)) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) (async, rerun: 32) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) socket$packet(0x11, 0x2, 0x300) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000f811a1a38ba9cd7b97da7f186723f58ebefa9fbda9e50545270d1bbe9ddebdeef9e2ac6b836a97d10861a7525a16cfc68d64c05a21f6de58305c541c4693d9abea6235ccb95ef83d39b8c9b85b70a60cc106a0c8651de7438ed690253badf42d08655bec8171308e180ede98294c7e5bb3a6f0c999ab191a59386c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001540)={0x84, &(0x7f0000000fc0)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.138384371s ago: executing program 2 (id=6634): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x0, 0xfa00, {0x3, &(0x7f0000001180)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e24, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x8, @local}}}, 0x118) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fanotify_init(0x200, 0x0) r7 = dup(r4) fanotify_mark(r6, 0x1, 0x48001059, r7, 0x0) write$vhost_msg_v2(r7, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000180)=""/118, 0x76, &(0x7f0000000000)=""/6, 0x3, 0x3}}, 0x48) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0xc}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048805}, 0x0) r8 = syz_usb_connect(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES16=r0], 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000100)) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r9 = dup(r0) r10 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r11, 0x0) r12 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r11, @ANYRES32=r9, @ANYBLOB="2e00000011000000", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r9, @ANYRESOCT=r12, @ANYRES64=0x0], 0x20) r13 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r13, 0xc0389423, &(0x7f00000000c0)={0xaa, 0x30, [0x10000, 0x3, 0x8, 0x7], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 6.531039532s ago: executing program 1 (id=6639): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x4d, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 5.787191374s ago: executing program 5 (id=6643): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="000c2bc000"/15], 0x14}}, 0x0) close(r0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000080)) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRESHEX=r6], 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r5, 0x1, &(0x7f00000002c0)=[0xffffffffffffffff], &(0x7f0000000340)=[{0x1, 0x8000001, 0x7, 0x2}], 0x10, 0xab}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x448, 0x118, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x378, 0xffffffff, 0xffffffff, 0x378, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [0xffffff00], 'pim6reg\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x80, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x46, 0x0, 0x9}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x1fa6, 0x9, 0x5, 'netbios-ns\x00', {0x100000001}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x4}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x9, 0x10, 0x1, 'syz0\x00', 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x5a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4a8) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r8, 0x5) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001400010125bd7000fddbdf25010f08074e244e22030000003100000001ffffffc300008a1900060000000000000000000040070000005120202c94916fe6d69bb244462cbf01d5bc74b035d5c7c407e1b8d46a", @ANYRES32=0x0, @ANYBLOB="de000000ffffff7f02000000030000"], 0x4c}, 0x1, 0x0, 0x0, 0x24048084}, 0x40000) 3.831492286s ago: executing program 2 (id=6646): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="28005080110001"], 0x44}}, 0x0) 3.578138675s ago: executing program 2 (id=6647): r0 = socket(0x10, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) syz_usb_connect(0x2, 0x1b, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xb2, 0x36, 0x82, 0x40, 0x6cd, 0x118, 0xb4dd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x5, 0x2, 0xf4242dd5fdc48b85, 0x7}}]}}, 0x0) read$FUSE(r1, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) syz_fuse_handle_req(r1, &(0x7f0000009040)="c9b6cf40d6a9928c6a8c0fdaba1e7bbd4ee597917b02ec4e8ff3bec8d7d8c08f8813039f40175e54e3d66ec19388ed788cf69c0c5b560f0401f1adb4b1f5198fe0bd7627cb9dc384db5b44495ba6094046fb2c8c7d0af7d67dbc3f5ef4aef8ec6bb01c52b6a10d4f9473987d0809b6a84f2ff8aae19a082abcb68b41c291add3ca2204a38c59e28c7c910aaa5a075676e541b6bb91de3854d2f97d3f80dc56c0705e74624a947f2c21ff936c6ba827742a24fd6d9e10b470ceb73a23fc57f5fa27cf073f2d0235e6fa4d1c29f9d0b6509c890ce0e7c3a2a4dd8b6336f02b9d7cc4c8e37f5f5a57f63aeec3228bd15b6d041eab97bccb14ee1ca6fbf7f7ed2e4dd0a32d41cc41c1031424b94621edcea1bddd40f3ad905202dfba3b912efd3468d2ad42b8a01bcb13b288afdc00b7e5857425d7919651160ec15447a26758f20653e69559f0892efc8f0715d8d79f52a44c79aba8ac58dc726ed721eeab3480eaacc2655d4b8831c9aff049c32709ab7adfb24ae767d45468dc0e42bc34b3568ce95e850eaabbf3a1be4d0f9b3e8781a2a9dc06374fe496a755b48abce67fd56de43816d64e883d9db51489ab8a81d1af3a180b6772d2bdac6313d3c183239d4c0bbbe76173f011f144ba71ac8043107f6533b3ef2f44924039b8587485749647315eb7bfe1e412e94f8cdaa937480fdd23769a69e14ea82d741484c99dd1ddd1edfb4faa51431f15531b61e59d68f9d189b27d0bf925970ac66fc35dbe1e430893cc60b28ca6d8e34931bf02154aee6f1fc58d0c0d8e48eaf8079ded67fdd9f19ebfa85d1ab6ec7f54e1963be353b34a6cb7fa35ddb60a9fc6bd1c6f11bf981b5a1bba81513fe447ff7eb2db0d27f1cfd04353e05f37d6c1bd6eb8219ce799338de3518bfec529373e4acfd644212be283856be064bac0f4926c02c0915816615f1f04d1d5136872029afee663f0bf1b6811c594e1465fba59f5727e5a826e3c60576bc2087f21521ffc90dcca39cbec7c0466c8fb7b1bcea7cffb333d2d16daa269d63f4911d10ed24462b37cdceb7c88e819489e1939e5e3cdcc5a858d09803c98d9e5fd617bc92c0880f072c54608f6ea69edba05b4edcd8d3f5e3c926220a191f2aa0d2f0c9158e298bc2e756ee091a0ac48752e4bb56fac67b02eb2c7b3380244ed66648482d8bc2a29bfc26ade0f4a5665282ea408254fd88e2812a184ee9af9c7769fba1ec380043d5cdf6056f89b4d7f12a441c3013b0fe0d8418fc47c13fbf4fc2b4a89496d4ab9d9826d0e586574e8dd15d4eb8b86ed372e37287fc818df5b6993b650fba844d960e3fd62db0bc7b12ab286d6492388a91ae4da6bdece6e101c13100eaba3b9998706fd4defaa3ed2965ce7fe6062b8c58f20c6b44b01121184ee1dda1cb66b3ababecfc0b7a9a12624e0b826c35d0149335149cfb49fbe68d1dbb7eef96d7956dc573d449847ff4bb7ba0ededd00c904130f1252c3dd4bdcdeccf6f8a83e3abfa14d12c753558022efa0704549b0571e31c4bc9f3e485f8d2d88189b4149569ef83e8feb2ad26c263b0f91f8975c86c8fa9c9457da5ef4a8a94844f824873576f722e32b376ba5f3ed0ea9818d86ddc35ba0e7f322594d9a0fea878af5c03d242bc7b0af89091f088245154391e75ab1b6b2730ccd01c28e9ec99428cc22c2d08ae2829537c34ebd1273327d0d18175698f9fe587e968d19f00ff98555fcfe95d00cb3abae32afcd48f3d4cd7c63c45581203a8a3040363d98bf9426493039fce7bb03493ab6e176cb45e2af461e77fc93d1202fe0bc7b77398c52bbc1c1436439f26cb2e17933a0ae309611e46bebd4d84a939d9b040a08cad90c2eda6ddc933edffc8e562aa64658f99a9ec8a47278edb828b5312a95ca34c0af428aac64d3fa1c4045885891fda7666dfb680da4dc2c02becb8303b76987b6d9be01174df88e41a48a42444caeae5e36118564e57209594285bc2915b222f99f016326430c38c9807994cfa1c3c85aa0f6375c716cd7f27be9b2cef6866d07c8ed00bc101a74219182562467ebbd43d2ba78a4b0eae22c67702f318bc55ccd92f5fd11557335f94ff6f38cfe9fbe31d3fac064dcd7d660d02fbeaa26acf8927c1e3bc71d9ed8ef2e93f0a42813526daa1fad36676734103bcc621a114b098295de578bf8d7df9034fb3ba86ea529bf639cde496b5e48145e4a814f894fb3bf3f41b49d0572dad5988348dad7a064b2d76d9092336cb404934790683b2b3576d3b75534df2c36bc78e05ed250b9aaede772a08bf5972444ecf4e447c062d95e556768e264813369465713834f6e239695b6bfca1b6108a09368688e212b7ba556df50c02486bf1b2196da3d4c0553923fe9b1bb4474d0f569bec1f35dce4be0f5e2408efa69aa66dda6bb1ef43295fe005f4a86840bb608796ce14bcc1134013bf741ad1aa70cc6579edbd42478d3054e1f7bdbd5b1131ded725041270e8a46bcc8bbfe89089f87105939deb2a9f10dd60d059679d4514bfbfc94b333c7dde79576426f07f24ab6a57290b0d723bf3bffa2f66fe191d0dee8b292c8c15eb42245b899ddde3c6afbbf0d7c301dd142878dbca579f387931460c8c37e186f60f8d9209dc98f1a27b84ecefd71de077017261ad6cc3072fe57ec589cd9498946fda8a834e3f02e8a91f7ce6e18e76f936f6f39d354b63dccc706e25b1d8b1a4830c46f249b5e5a40042fea920ed57a2415431f83c238113ee7d152c16f0780c502d5c995168e3f91113af11752f10434b8dc5ef0e46a276c683261aa73877ce96ebd0176977e124c5b93bbb02ef97a6f6a13c15c261f23014f4b13c8f18746727206b245bee70d7b94968141f104f0682a3df4242c6a60fa1b70c227306520b1b9fbd6c916b0edf5e2ce5220fc9ef10ab0a10e1bf259e91eb127d5a31b7633f15130fdb44ce2178a20d5dc3f91688090881c061d75b4b59c3b2b7eb7a3dd1564bfa6c883c217cb76c2a7516dec926add0a1886570531c32b6284b1e80fbde88905f67ea5cea41003325327000a7f7249a99986f19f423843e8dc791df8679a2ed2b024d7d8c79112644a4fbd32bef0cd1f9d55025708135ed34cbf52ce3a0af0f8cd985362ef6fceb6c72f241128b16dad7575558badb3847e051f38d7b5ca638a1f454054659d90b2c046e4f9e2ab127f257ccc92f887b3e0c4fb49d159741fc649638180addf3f23e5265015f6dad9b25cb86d8a33b802e55258749ec050d15d0d7d821f9615c7d8c12ce11c63fb1eb118455c4e2167f66e4eaf9dec0dd2f345a7e2bb369a66b0755003a9c89449393f71acd98afdf6347792251d669ff3c64c50d705a67e543cad95655d6a4cce233acdac5ffc96681772be3c04a1b36f5273815af65ef87c7ad0d51462bf337c2389a8eded875f75eeebe5e5efc26933948e623364d0dbad3402f659a93acaaa21bc8f559dca605aa6732d0eced5a21ee8a6403b1f91722fcbada24a3031d6aa221612a36584d5edc6ba0f64096e9b6eae1555a95945b937457c4c74371f474939d3c3f299f691316497951c646f142adbd6ee49182aec388ce2ca560a1f4b7d8a63e5cd25ba91ebc61175a6955895bcddae7bf1cefccac5c93dd669ab65a2f508adbcfd62ec46027efa396b9f69984d6adcb38fdddb616ec38929fedd97677c3d06060309db5a9cb5fc8919f4310f06bb40f1b76bc197798acbf8d3162257071e034174047006796fac6fbc95c28afd881e1197c20fea8b4be5c5de39a292bd1ff3819d4d4f48162ea1a57930d8f324ce54875d3ad09eea95c4c825765842f9bbb1957fa8188578e86081adfc87502e69c8841218b596d71c4ec49afa60408028012d974051559d924f5f8a59ee195fb01994b8710994d8201ae10f6e88e0e418489c47499b7efd2021f56a6c9fba761beaf79acb6087a496afe7524f2260e14a792cf1a1203d4b0cd8a11d2544293b7657fc393014295fa28e409ab8be0a02695223d17d7caf4f44cf5d0f416130067f28f3fc51c88ad7b53e401e658214abcc8f597f22d662144f878573d0370c874287698784b6ba9abf9b22da2eeb0ce8b817f85e429e799a5edd246d72d77228652b80c4949a85cd5131d851d9f9bda9afa0646de5e477e0fa999562cb46758502c7d63dd3e8b6f88c7ea44f41c4212d633f0160e738c6d36128e9e58c154b08460c899a26276dc1257dc5de18495573693674e40faf1dad49db8ac83baecf92f3aa5c23f639cdcf6e6864c14a8d6a3de95906813fd17f83c406ffd1d2d7bc75737b7b00172448b2ff167b9fa43649db32ab4094652cbb2e18c3bdb527f24049878bb44b82135009f9af22d24ffbee4b5289fa61bd0502f019b2f24a08542db818bffb7c1637b4f4cb9043952f88aa69d9431b8df2e3f9ef6e4a5ba58e79acf082bbd871aa0f0feef71ade8f921bb597ea28548f4116a281ab3542b732c4a8e9973409c75a0c6443d83547d0d314cc7bd62128e3b0db9c03c78b9d78ba714627866230414947523a6a239873f932c2b28c09cbdf182e856bf41598998150cbdd6d54f76c227fb1519f5afb0008e31d6a0b87818d0a2ca0dd6e953a5ba1a347dd927acd36f3fa3a68920eb9c36bce6cef857447aa733e4ffb7014e194993eb1399270b64151ddbb15478c2b762a14d1782608fb24199d9d311281c47726f565b3a3b7be584afb03d87cdc5eb8156772694ab422f59cd7b1e359583a7cc0695b9f64e6416c6b52de230afbc160d2e9384501b40645189434d416c0fbb034e9ffc654d0dee7ee7a878f9e559daac7ee5af769aeac7a92e85b1bc7983803d3bb572befe76184a46b76450feccffa753cc6123cba0686440a5ba81236458831031a4ba4c91d7aab3bb2514208a902face1c12b7dfe25318ab5ca2c1ef9769aa06ba0539f6904f95d3c8440617efc7858d3984f566b3390b9b1a0f2ec3c86dd77a0b82958c4b15278ffaf10e47e613545f4cf67ef7e8b31a6bda35022871840ae1536fb65bb11b932936db7a15642359bb6b157893d19e7918b11d3d3072b78c761c1784afa2214c865fc2aed860dcc17b69cfe9189bcd0767a84cb306a59966e5f96514a7d7182e6aa7204bbd1a84092ba645f86b68813debd5a2290acc93388e5eacc17db51d69604733ea9160a0e77ec5317194654313a9a8a0535c0bc49d0837e2821df92e8ee2f154cbea6b87ffc207aab4ea491e8aa75b90f70136d84ea2f5dfd138371dbdf8fe273956cb7411db6df48ebf56105da42b219b9dad387ca7be9ecd90508c62279a53bc9f7e2a845f9da42d8e85d2653854737948ce228b2d76d1b9fe2e0e456fdff24575939b82a3f6e1a4be6ffcf1c493c17dabbfa0859a87d259ae3931fb6da544589b9b6bb7cc93e078813ac94918942bf113aee5742498d86a70fff31d2a69507739317a9aa9e0289f053dad4eec63cd58e833027f0859fb4ab74e8fc742d03b5b6dca1168d3d47fd95b514a567e6518342d52b3c3bb6438b5aeacb95ff9001d2f5480f6a80a0685b5bda2ceba06925ab5ae0986954c3169e92fedaf3f1681247cb114202c0f728296a51396063fc64aad05662bf05a626b90f656b47069ca668bb96208c287e8f793d77d4fb1f1cc14e73406005e11a2c1c46ca7448be534c97738487527d79e284d7a0ae275bd4361ecf4a352e6dc8b8c8c8e132a3edb7d645f4943445f523fb28bbf857218a117f1288afec49f9def9aabc2381b38a315d5c927aeb96fa1ad3eb13b0151dd570f6734f004467171d2cdd609d1d09d115c9b42e1da3472ada98d3e1da90a8f373a98133fa708f5a62c75b5eb1b643c48de72143ffc8761ccffd7f3336b69faa277d364cdf2d4f2bc428bda8b76e4748d5ae02d9850ac6f2ed0ddcb874c25d210163d4da10c0d6cc5218a3558deee5519c94032158bca02fe1c1b8184fdf417e863352b224b7b06267486296ebd4100ad5f1108c78a7056979f5ad6f97794a0460bf371584d9b962034aa7449f4e6b0f925b7a648d4ed7f2442135629b0baee3385882682fde57e5eb9204647a898c566120e4b577ba215ed863f76d5ad9ed19a6b7465952292e7543110eac3dc436a16c85047f3ff10a00c917d5902d296c063c4b173775f2b612e407bce02c8647877abcc07b21b89a60e16ff5c5cdc3708f285d6e411036661e97f628c6c2bef7a6e297f0ea7db2aaceb87d13425e80c28cf095b1dd4e08122e89f58862c6466d79fe7d06e0038a9a1869cba0d1554bffc08b94bf3dc7ec4d108073a4dcb7a6a503b608e777f1ca6b64deec19072052cdab8e7222966170bd35cfa66d3d013c537e723bfa2f634b34edba64ee27ab814bf66c5943e5b7b4d2cbad0550982b2d68ea0633a48f24ef5a59da6e9671717afed4253db66afce693ab08e2b4343d9efd1705802393ba22af5f0e04fc559ddafd78bb1c013b2826cfd77591736cd8a1e079c00f72dc89ee419cf4cc5e867138e35372bb0854df45d2142ce56ea01465d7cf42d3beabbed8602ff568df5d8e53d22bbd897c0aa050165319ba28d6f861a128556e420275562b8a19c0a2112df4490925f52090c6c7ac79b8533936d4020af3ea5d383cc8e4f23cf275194887d42bde7061bc17246a91b735472c4dee6f2d159a4fb2cce10f0727a964658f6d60aa18bd474ce1e88114ce3c2a3acabd74175b82afc6126ed79d8d333ed993e3a0d67afba888c94cb266f906681d9595f2ca21946f32d8f07eb7cfc979cdd56a885e6a5deb1dc54ffbbbac728db4145056cc9b78386f1f17ad16856cc10b04038f0d835a5842584b6a9516a770abd839ade5d379db9889d22d9049dd13010ad612a64128f724f7a643505b8ca50bddc4ec4875beed2f8593b7382645625809bbc3591027d53bde8a16be5bb209cd49e71aaa435c923ef3c4d1aefec7111773b0d58b47efabc7a43b93cb7eab287cefe554a5b59e2a746081d0d875919df356504008374ef184be2f7ef7e644bf5535dedf5b969b30dcedcfbecb83173b0cea015efe45630880c303472daf1dc22b384e65078cb0ae21baa4834fcd4b4f7c995b700117e1448d041a7106277302fabf3a512ad4e802988c43e6cad0b4b74962e195b355b653acfab53d9f38337e46758c0f8c147333d30f8fbb508a889b84d4672e025b0d9adec09fd4e2d62bda0e0c40570d8fcf5487a59380584f7b85a8576985a4423cbdb1503ea4f93d4f3dbb2c384efcac84dd8649e6f09d2ac37e1d8268c3c07db365581c7c3752410909968598b8ea5ea05b68e6013965cc60be6f6b24e493655f5ddd572a84a924803a7df025914f4b57527841928d30c03b09aeee28c8b81860968f53a663f4f56b004e07cc380f5b0b0dad43869faeed5f240ce389a0fb0920073b8d3de611e54d4011f55ba28743a3b51af6293ed1376fcfe3592c877e2d81d14ee882410cf8207476409b5673eb65297155e91cbe089c8c043964063f9b469419bce6e59e0017e0f527d20eab5d9579208df9cc65389ca8fdb3d62618395bb0274b8094799cb4c36632488e79950ac3bd3d982d521614f56df1bd16c1f928481dd4580a796eb7892b3e4a33b748b16f96b1def674c2b70d0315b486a94a979292d635a2ad1fa877927de9355f38a612747fb982bccf12040d9a14a63c34b6f2b3b450a6401d4d0c96a9090ab80d30f7e7af84bade864791455402cbd278427c5a1e84e2e2286c4bf773da614e6705802c130ade8a3a67b309f9db1558372046ec276a34fb50f72c7df40e33f447ab5f0af05eece4e8f654b3c2dad6ea76ef6b694699f4ad8c6fdcbfd8bdc23d0c580631d0c95ac6ae9613dad680939db2ecf9e7a0d4d0f2f2b7f1c1d308cfaccacc2381e97bb278a53b14daf686c0541e56264c33d5176b830ac7d13c28edb2d8e77d7acbced061c4ec315cb1a259966ad997c7c7beae44d4d1b6955842d7fbba0bb0c461bb22db3e15f0fc1cd3fd997dac5e6a4bff6e2eb8310d828f15309b2c8feaa21281963d35ab2d5c099beb806cd384d304449c58d89910105df11225fb893e984734a8e5cba2e553f03ebd5ce4cae24826547df81db3f2bd7d930f785755c8b6311f221da59679ce50479adef1cc5dac984a5d2f9343fe4892b2b5640892892cfd50d0015c1f568792d8919943a578b62585081175237444d9542a2241c967bcfbc3dab4e8961ecad89165eaada2d759e844be5021aed42b971e9ffea8c08a3d6e4073ce4226b4e54b83f3d8ccd207a0cfcf9da7b5e55d1a26a90e03f7c3611c6562b65edb42fe110dc3970b44aa36660d1cdbc882495271f80816350b945aedb0d46ca6d160d5f0096e8263325e257dbb574932e32f1b28ce2b7f5b3ee6ccec64085496bb513ec168b53d79e6ecb72622a70b22e1f9116fa48815709b2080b27b31a6b26dde0701cd74c31b4e33a702f051ae07ad54ce23ae33e6060e5451a4171cc930af2ab70862044c5a0ff9e8aeebd3cc41c62d38e7b79596d3851430dd661b071c319751985d48eeea2afb463d7d9390ed4e68a60f90ad80aeca4b8d283ae0538e590668c857a526a264be238641eeb5f321248d829539efccf03dcefa54c6def8b7d4a8cdf6bc76d71eefaca1a7a33bd4b56e94b8e38f784b742bdd080faca4769e1aa91ff50d9374f3632cb7b66a0042beb802c6cedff0a3634aec072f57d38a6ea61439029ba5d921f57bfbc281d75f5ec322b8f8c90b4d3f65d00ef97dcffe7e07fa01af8e7f8da15532f0c18b73d7a183327aea46680651645782f4f318c00f2355c301fe2e805a22f8586119768b8424735f5495607d170f0818be232cec1d9e40daf79bcd63a26cbead93753b7171bcad462da2af68e9ea9c0b207200f1fcf3793283931603a719e745120273efb541a7af896f6eea7359939d7226896c8023cc963e4e0a7579bc83a37cb8d871324bb3e66b671d8df83d645495740c5b99aaf2edda3018e1895dda6744b1e6623cb62d4b80ac208f69a81caa0277a497e41bf637817518cbe0fcd2028d07be199a126f82641f2fd54e6b20287b912ee8d8dd72db5824ca9e464a94d45beda7f52932d1bb57a28a4e99ac32ea4c3650197613a87e4cec91d82f37069fde871575d3cb2220aaad9277511271a86377da5f2a9f94303e7151acb087ca549fd0cb9b1961954ddb28333a24b510b92cddc057ec5a147ccdd708a2db3c8cb3600756100b38b71f0676f6fc5a7f5912b5e81bf6d2b07e15fb5b1c96459110ceb22ba4f2fb0e531dcaa913a13437cc6276c8b4e1bdbc5365144c7abd2e2a6c93ef102e26b14e576ada244408d9db50aab045f9879bf95425eaa7b11d77e0dc503851c5c278c282aa736103adf5ca2b30724bde27f98e4e7a947f964b7abfe58a3da354e3008a2b86d50223d3077e151ce2e086172002eab7279ac1948361e172073184401d5650181547f1bacc1534f9ab2ad66fd9d200d867de79a92e465dda8d781b15881acc9bfdc53815f3fc3f064c830db3908cdb173e3e1295ea7dca280273ca99073d5663003f14c4f7ac9ef9bc735b2a413daaa7d97101553f90a0d33b043d1f2b0f131d35c9244808bb4b76213ff5c418053a569d760498518d701aae39cfbd7a052b586c53617dfaad1415c1cafbb41640d1650be9297dd42c803d8bfd443916310bb80a74c991cc26331ab70c0c4bc4f2295f069787f6759878e42ffbc76b34493f71d88a109b0813ebfcd24953b2b5f1f5164d9974bab7ed1f4d42f62b8379912dd7e9f35a19951e4d57b0c70fe516cd2059c4ef879d9f9b1191d5bb51b852d3e9462e4528b9c1f7c676e6039d1deb00442a482e297b08a67c79bb818d0316072d8174885de3413ae0505232100f217e424e0106811902d60ecc0e0aaca7c5f00f4f365e1360f10aa645b9215c93668a08be97cacd6b0f9c80ead76478846d12e8f24a53bfab01628afd199b2db332d38d5009d7a1437f0f5b2a0d36b5c98f3a35e5043ffd55bac325d3927888fa5d0e3569d9be002205b501b3e68d661515bb9eac9d4f234e22e4e5bd0b4c4530933aadd99f132794ce48e9a3220d2c17748c012fc5fd93d265cebb3edc3be29a1ba26f2adcf510663c28d29e28774c4ec1190fbfbf614aa8e2745f8605f7d7e94fdd06322454a08833f1a22c77deedb1337e380a8e18f85168e045d1e7cf32fda1a709d3eddf62909a9e580ed8abd605e07dbab79b5bcc2f4533e6fec589b976816471b1f11ac3c89336c52e03b72520995d05275024e9988727f2e1ac9421ccaaa0b736e9f7f296c2d27cbd774d7179f9c6921df68985998034862c15adc452666deb40c0c40cedf16f4d187524a0a5cdff6f7b2531eda54fbe15a7ad1aea46466a51642326c5d7d374fb38475d119027a3714598fe7307de94bece2741b7a742b053682dae9452eed3b820b1386b604fa647e392b35b205019cf1ad317d1441cbee2aea5ca95e56fd5e959689bf96c9f470acb8e4e630b13403e9459242b629fa28e1ba8eacf1ed572b1db735a20ee1a5b8500b6edf66cbe671c5938741ab2b36ccd4e92160f6df9e1d465cdaf3a7746e128e26e0e7a7aa4869b2a482c6e9bf7e58408411016740c547129e4f11d2317af3c5bb55b2468e6d08e75e5039c3bfdc9b6da06e7c27933a8c9d8ad0e4c74a093e6d57c02b1b49e995962c1046b5c8a3df0ea4c20049e300cbe41bd92a0ea5993ef6fd92ea74e28e1cfaf4a8533c224104d6081b64ae08b4e7a23a259b2b03655b987c23687c6e279bab469a3e0881a30620910566982945f8f86229fd614ca2bb2adcbdd49a5c579c0d1bbdefb9e33cd0641bb43f6ca3fab33dc4188e1508e4293e6de932040b895a97bc1f196467ad4a0d4899e6078c014f42521cf39411e2e4f1b5adc26f1f3bb2fcd27b89ac418c8251423de82c4b5980a4e66649b9f3ec48c833c35f8653ca510a0a1b049561e64a6938714c3a1946b3fa5079533698bb8f8f85bea8711ccda5cf01de150b055d3586a890d0654d2b4cfba25c434e2ff492b69798aa197dffbfe2bba77d4b4eea35c42e698221e971a4bca34e59c46084f48f2170b83db6719324ecb55e07a9cf74a84ee0fc3567fa5cd2f3937ad956b4ed2187e2026b7d4166d50fd9c937fb4dd5aa96f2731f1db1dda4eac4e589295ffe9b72a7b9533f6e23c82b57c8361c8cb3b15128235f65c84b99d93383b7398e936884542d0e73bdf37cadfb6c70da47af3c5a3cde0d8e381cdf9ec1a39d2fc963f0d8ee31b76d9668c0171967cb9ef2f15d5bbdbd1058328da7a60bbc7d77efed2de74a2ed5637a8a84e1163325dd22b584b15fe894c9b1ce89d24619a344a8987f6d21b7de7ccf6fad223134e1c389a8e6baa375dd142baf4a8852e984eb6c281cf86e2457a7f85782c7764564af26d331d3ddf4850d24742ef449cd5e32f5957d2ee10e05e7d3312215e4d36ac5c8c4bae3340f074f88a20e18b270b3baf05de1b0363f4c6f2ab9386d6034e8567e4828ad256cd250448c70147c318a621697be402c1e8365d2798084f968a8897242ff6756c2937e4d1300", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x90, 0xfffffffffffffff5, 0x0, {0x6, 0x2, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xc000, 0x7, 0x0, 0x0, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r5, 0x0, 0x0) unlinkat(r2, &(0x7f0000002200)='./file0\x00', 0x200) open_by_handle_at(r2, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7d, 0x9, 0x1, 0xb, @mcast2, @loopback={0x0, 0x460c6}, 0x80, 0x0, 0x4, 0x40}}) 3.510268444s ago: executing program 1 (id=6648): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000002c008188040f80ec59acbc0413a1f8480e0000005e14", 0x1a}], 0x1}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x11, 0xa, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x8}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x9d}, @exit], &(0x7f00000003c0)='syzkaller\x00'}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 3.39921593s ago: executing program 5 (id=6649): r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) io_uring_setup(0x7c00, 0x0) eventfd2(0x0, 0x0) shmctl$SHM_STAT(r0, 0xd, 0x0) r1 = socket$inet6(0xa, 0x3, 0xffffff80) recvfrom$inet6(r1, 0x0, 0x0, 0x40010001, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f00000002c0)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x93e, 0x80, 0x1, 0x40283}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x88, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x63, 0x0, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) syz_emit_ethernet(0x26, &(0x7f0000003480)=ANY=[@ANYBLOB="f0feceb5f9b9db9766bd48766db9e0c5aaaaaaaaaaaa88a8110081001b00000c030000400703b1957979151f83c59ba6c751a7e307f80e0de8421921c854350857242074df5b1a0cd91409680ca6656da6fb0ad97cabb248635491f70191b6d3abf4d2a116c618c3ed910b2ec899099819a1d13c493203ec1a8f"], &(0x7f0000000280)={0x0, 0x2, [0x8b6, 0x46d, 0xb5b, 0x4cf]}) connect$qrtr(r7, &(0x7f0000000100)={0x2a, 0x2, 0x8000}, 0xc) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0x40015b19, &(0x7f0000000000)) syz_clone(0x40008e00, &(0x7f0000000000)="407d477d957653646627692446122ccebe9aa121b21d7099dfe5552db7541ef60ace498da1268eb0b08404a807a6f24dbfb64855eb9c3a46755168a4e97840dcd46b69e35652ad963cba8ebf34df065155ad644b14a999d3889629cb1d711af2df253fae01351c9fafb540e9", 0x6c, 0x0, 0x0, &(0x7f0000002480)="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") 3.347483047s ago: executing program 4 (id=6650): pipe(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfea8, 0xa) 3.201504048s ago: executing program 4 (id=6651): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, r1, 0x2, {0x2}}, 0x18, &(0x7f0000000040)={0x0}}, 0x4000000) (fail_nth: 3) 3.200316399s ago: executing program 1 (id=6652): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r2}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)=""/4096, 0xeb, 0x1000, 0x0, 0xfffffffb}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000006e00000000000000", @ANYRES32=r3, @ANYBLOB="0500"/20, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="020000002d530000010000000000000000c622000000000080000000"], 0x50) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg(r0, &(0x7f0000006400)=[{{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000002fc0)='F', 0x1}], 0x1, &(0x7f00000030c0)=ANY=[@ANYBLOB="780000001b"], 0x110}}], 0x1, 0x4000000) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0xc, 0x1, 0x200}}, {0x4}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44004}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', r2, 0x2f, 0x8, 0x9, 0x75, 0x1, @remote, @rand_addr=' \x01\x00', 0x40, 0x700, 0x4, 0x9}}) 2.84226608s ago: executing program 4 (id=6653): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000800000c0"]) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) 2.841858039s ago: executing program 1 (id=6654): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) 2.59910683s ago: executing program 1 (id=6655): r0 = socket$xdp(0x2c, 0x3, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd603cf72f4496880020010000000000000000000000000002fe8000000000000000000000000000aa000000", @ANYRES32=0x41424344], 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) syz_usb_connect(0x3, 0x8c6, &(0x7f0000000140)=ANY=[@ANYRES64=r0], &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffde8, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x151, 0x20}, 0x18) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000100)={0x2, 0x3}) 2.170791521s ago: executing program 3 (id=6658): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x6, @multicast2, 0x4e22, 0x1, 'wrr\x00', 0x20, 0x1b53, 0xd}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(&(0x7f0000000240), 0x7fffffffffffffff, 0x10800) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000"], 0x113c}}, 0x8004) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xdaf}}, './file0\x00'}) r6 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @mcast1, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00007df000/0x2000)=nil, 0x2000, 0x3000008, 0x30, 0xffffffffffffffff, 0xfdbd9000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x20000, 0x0, 0x2}, 0x18) sendfile(r7, r7, 0x0, 0x200000) 1.992799018s ago: executing program 4 (id=6659): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0xf5, 0x6, "0080ca6f"}, 0x6, 0x2, {0x0}}) (fail_nth: 3) 1.094212619s ago: executing program 4 (id=6660): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x7f, 0x5, 0x17, 0x8000, 0xc, "03f37fe99f4da288"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x20000850) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r2, &(0x7f0000000740), 0xff67) lseek(r2, 0x0, 0x4) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x42080, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3c8, 0x2a8, 0x2a8, 0x3c8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x330, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1, 0x2}, {0x0, 0x1, 0x3}, {0xffffffffffffffff, 0x6, 0x3}, 0x5, 0x401}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x44}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x20000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4c0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) setsockopt$sock_attach_bpf(r3, 0x6, 0x9, 0x0, 0x0) 887.100104ms ago: executing program 3 (id=6661): pipe(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfea8, 0xa) 850.183486ms ago: executing program 4 (id=6662): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$IMDELTIMER(r4, 0x80044941, &(0x7f00000000c0)=0x1) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x1, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x7cdd141a, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) r6 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x6f, &(0x7f0000000880)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x39, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0x200, 0x2c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@routing={0x2f}], "13"}}}}}}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r6, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4096}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/227}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27}], 0x0, &(0x7f0000000780)=""/112}}], 0x40000000000024a, 0x40002002, 0x0) fcntl$getown(r5, 0x9) 758.391269ms ago: executing program 3 (id=6663): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r0 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0xcc08, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='~', 0x1, 0x40000, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x1, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) 701.247735ms ago: executing program 3 (id=6664): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="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") r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0xf5, 0x6, "0080ca6f"}, 0x6, 0x2, {0x0}}) 625.111671ms ago: executing program 3 (id=6665): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x7cdd141a, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) 540.705446ms ago: executing program 3 (id=6666): unshare(0x24000400) r0 = gettid() timer_create(0x1, &(0x7f0000000900)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000008c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) preadv2(r1, &(0x7f0000000100)=[{&(0x7f0000000180)=""/149, 0x95}], 0x1, 0x100005, 0x1, 0x0) (fail_nth: 3) 358.819586ms ago: executing program 2 (id=6667): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12094}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_ID={0x8}]}}}]}, 0x40}}, 0x20000050) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x3, 0x0, &(0x7f0000001580)="e08564", 0x0, 0x20000700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000580)={'veth1_macvtap\x00', 0x7}) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='memory.swap.events\x00', 0x0, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 232.722ms ago: executing program 5 (id=6668): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="28005080110001"], 0x44}}, 0x0) 62.33209ms ago: executing program 2 (id=6669): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f00000003c0)={0x50, 0x0, r8, {0x7, 0x29, 0x0, 0x38000, 0x209, 0x1, 0x354, 0x3, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000006400)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x7, {0x1, 0x3, 0x80000e, 0x2, 0x8005, 0x2, {0x2, 0x1fc, 0xfffffffffffffff7, 0x5, 0x10001, 0x20009, 0x800, 0x1, 0x9, 0x4000, 0x44, 0x0, r9, 0x10000, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x501802, 0x0) r11 = syz_open_dev$admmidi(&(0x7f0000000500), 0x1, 0x90000) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000540)=[r0, r3, r6, r2, r2, r6, r0, r6, r7, r10, r11], 0xb) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 0s ago: executing program 5 (id=6670): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_dev$video(0x0, 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r3, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) io_uring_setup(0x50ec, &(0x7f0000000380)={0x0, 0x77ae, 0x8, 0x0, 0x3d7}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @pix_mp={0x9, 0x8, 0x49433553, 0x4, 0x0, [{0x9, 0x5}, {0xe, 0x5}, {0x7, 0x9}, {0x0, 0x3}, {0x9}, {0x80000000, 0xe2c}, {0xfff, 0x5}, {0x4, 0x2}], 0x3, 0x0, 0x7, 0x0, 0x1}}, 0x4}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x8, &(0x7f0000000180)) syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="31042abd700000dc9f25160000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="050004000100000005000200000000000500030000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) recvmmsg(r7, 0x0, 0x0, 0x2040, 0x0) kernel console output (not intermixed with test programs): ys_ioctl+0x47/0x170 [ 1199.394165][T28324] do_syscall_64+0xfa/0xfa0 [ 1199.394206][T28324] ? lockdep_hardirqs_on+0x9c/0x150 [ 1199.394240][T28324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.394264][T28324] ? clear_bhb_loop+0x60/0xb0 [ 1199.394292][T28324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.394314][T28324] RIP: 0033:0x7f6db5b8f749 [ 1199.394335][T28324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1199.394354][T28324] RSP: 002b:00007f6db3df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1199.394379][T28324] RAX: ffffffffffffffda RBX: 00007f6db5de5fa0 RCX: 00007f6db5b8f749 [ 1199.394396][T28324] RDX: 0000200000000140 RSI: 00000000c0105500 RDI: 0000000000000003 [ 1199.394411][T28324] RBP: 00007f6db3df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1199.394425][T28324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1199.394439][T28324] R13: 00007f6db5de6038 R14: 00007f6db5de5fa0 R15: 00007f6db5f0fa28 [ 1199.394476][T28324] [ 1199.623329][ C1] vkms_vblank_simulate: vblank timer overrun [ 1199.627574][T28324] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1199.715988][T28315] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1199.779664][T28315] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1199.798804][T28315] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1199.955140][T28315] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1200.117813][T28242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1200.201484][T28242] 8021q: adding VLAN 0 to HW filter on device team0 [ 1200.236189][ T5921] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1200.245397][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.252769][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1200.277398][T28341] usb usb8: usbfs: process 28341 (syz.4.6360) did not claim interface 12 before use [ 1200.340723][T28341] lo: Caught tx_queue_len zero misconfig [ 1200.389077][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.396332][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1200.417602][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 1200.435359][ T5921] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1200.455633][ T5921] usb 3-1: config 0 has no interface number 0 [ 1200.466189][ T5921] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1200.533126][ T5921] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1200.559208][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.577524][ T5921] usb 3-1: Product: syz [ 1200.581789][ T5921] usb 3-1: Manufacturer: syz [ 1200.608490][ T5921] usb 3-1: SerialNumber: syz [ 1200.627336][ T5921] usb 3-1: config 0 descriptor?? [ 1200.641188][T28333] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1200.807437][ T5937] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 1200.847840][ T49] IPVS: starting estimator thread 0... [ 1200.877137][T28333] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1200.951111][T28242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1200.986411][T19822] Bluetooth: hci1: command 0x0406 tx timeout [ 1201.029292][T28242] veth0_vlan: entered promiscuous mode [ 1201.039840][T28349] IPVS: using max 25 ests per chain, 60000 per kthread [ 1201.048099][T28242] veth1_vlan: entered promiscuous mode [ 1201.166917][T19822] Bluetooth: hci2: command 0x0c1a tx timeout [ 1201.327865][T19822] Bluetooth: hci4: command 0x0c1a tx timeout [ 1201.334603][ T5937] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1201.344068][T28242] veth0_macvtap: entered promiscuous mode [ 1201.368704][ T5937] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1201.408292][T28242] veth1_macvtap: entered promiscuous mode [ 1201.431081][T19822] Bluetooth: hci5: command 0x0c1a tx timeout [ 1201.563067][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.605600][ T5937] usb 2-1: Product: syz [ 1201.654208][ T5937] usb 2-1: Manufacturer: syz [ 1201.781577][T28242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1201.790580][ T5937] usb 2-1: SerialNumber: syz [ 1201.843373][T28242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1201.869641][T19099] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.875662][T19822] Bluetooth: hci0: command 0x0419 tx timeout [ 1201.902466][T19099] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.967963][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.012031][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.268274][ T5937] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 87 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1202.352016][T21017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.396557][T21017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.566375][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.575934][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.783098][T28357] netlink: 'syz.1.6361': attribute type 2 has an invalid length. [ 1202.837866][T28357] : entered promiscuous mode [ 1203.026363][T28364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1203.067841][T19822] Bluetooth: hci1: command 0x0406 tx timeout [ 1203.069838][T28364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1203.226191][T19822] Bluetooth: hci2: command 0x0c1a tx timeout [ 1203.296927][T28372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1203.324625][T26173] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 1203.334823][T26173] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1203.386571][T19822] Bluetooth: hci4: command 0x0c1a tx timeout [ 1203.406144][ T61] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 66 (expected 2) [ 1203.406814][T28369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1203.435617][T28369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1203.445962][T28357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1203.458730][ T61] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1203.460070][T28357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1203.476931][T19822] Bluetooth: hci5: command 0x0c1a tx timeout [ 1203.576243][ T61] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 1203.686230][ T1156] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1203.706175][ T5937] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 1203.879891][ T5937] usb 4-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 1203.891498][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.913064][ T5937] usb 4-1: config 0 descriptor?? [ 1203.916596][T28377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6369'. [ 1203.947191][T19822] Bluetooth: hci0: command 0x0419 tx timeout [ 1204.203271][ C1] usblp0: nonzero write bulk status received: -71 [ 1204.210614][ T43] usb 2-1: USB disconnect, device number 87 [ 1204.248784][T28342] usblp0: removed [ 1204.347244][ T5937] chicony 0003:04F2:1236.0024: unknown main item tag 0x0 [ 1204.354889][ T5937] chicony 0003:04F2:1236.0024: unknown main item tag 0x0 [ 1204.363691][ T5937] chicony 0003:04F2:1236.0024: unknown main item tag 0x0 [ 1204.372536][ T5937] chicony 0003:04F2:1236.0024: unknown main item tag 0x0 [ 1204.380279][ T5937] chicony 0003:04F2:1236.0024: unknown main item tag 0x0 [ 1204.401773][ T5937] chicony 0003:04F2:1236.0024: hidraw0: USB HID v1.01 Device [HID 04f2:1236] on usb-dummy_hcd.3-1/input0 [ 1204.572376][ T5937] usb 4-1: USB disconnect, device number 86 [ 1204.758181][ T5921] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1204.822132][ T5921] asix 3-1:0.188: probe with driver asix failed with error -71 [ 1204.836529][ T5921] usb 3-1: USB disconnect, device number 104 [ 1204.998197][T28387] FAULT_INJECTION: forcing a failure. [ 1204.998197][T28387] name failslab, interval 1, probability 0, space 0, times 0 [ 1205.013105][T28387] CPU: 1 UID: 0 PID: 28387 Comm: syz.2.6371 Not tainted syzkaller #0 PREEMPT(full) [ 1205.013137][T28387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1205.013153][T28387] Call Trace: [ 1205.013163][T28387] [ 1205.013173][T28387] dump_stack_lvl+0x189/0x250 [ 1205.013211][T28387] ? __pfx____ratelimit+0x10/0x10 [ 1205.013243][T28387] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1205.013274][T28387] ? __pfx__printk+0x10/0x10 [ 1205.013304][T28387] ? __pfx___might_resched+0x10/0x10 [ 1205.013328][T28387] ? fs_reclaim_acquire+0x7d/0x100 [ 1205.013377][T28387] should_fail_ex+0x414/0x560 [ 1205.013417][T28387] should_failslab+0xa8/0x100 [ 1205.013443][T28387] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1205.013476][T28387] ? __alloc_skb+0x112/0x2d0 [ 1205.013498][T28387] ? netlink_autobind+0xdb/0x300 [ 1205.013529][T28387] __alloc_skb+0x112/0x2d0 [ 1205.013556][T28387] netlink_sendmsg+0x5c6/0xb30 [ 1205.013589][T28387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1205.013617][T28387] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1205.013654][T28387] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1205.013677][T28387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1205.013702][T28387] __sock_sendmsg+0x21c/0x270 [ 1205.013738][T28387] ____sys_sendmsg+0x505/0x830 [ 1205.013768][T28387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1205.013803][T28387] ? import_iovec+0x74/0xa0 [ 1205.013837][T28387] ___sys_sendmsg+0x21f/0x2a0 [ 1205.013866][T28387] ? __pfx____sys_sendmsg+0x10/0x10 [ 1205.013936][T28387] ? __fget_files+0x2a/0x420 [ 1205.013957][T28387] ? __fget_files+0x3a0/0x420 [ 1205.013991][T28387] __x64_sys_sendmsg+0x19b/0x260 [ 1205.014020][T28387] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1205.014056][T28387] ? __pfx_ksys_write+0x10/0x10 [ 1205.014093][T28387] ? do_syscall_64+0xbe/0xfa0 [ 1205.014131][T28387] do_syscall_64+0xfa/0xfa0 [ 1205.014162][T28387] ? lockdep_hardirqs_on+0x9c/0x150 [ 1205.014195][T28387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.014218][T28387] ? clear_bhb_loop+0x60/0xb0 [ 1205.014246][T28387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.014268][T28387] RIP: 0033:0x7f68cab8f749 [ 1205.014289][T28387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1205.014310][T28387] RSP: 002b:00007f68c8df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1205.014334][T28387] RAX: ffffffffffffffda RBX: 00007f68cade5fa0 RCX: 00007f68cab8f749 [ 1205.014359][T28387] RDX: 0000000004000040 RSI: 0000200000000000 RDI: 0000000000000003 [ 1205.014374][T28387] RBP: 00007f68c8df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1205.014389][T28387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1205.014403][T28387] R13: 00007f68cade6038 R14: 00007f68cade5fa0 R15: 00007f68caf0fa28 [ 1205.014440][T28387] [ 1205.286517][ C1] vkms_vblank_simulate: vblank timer overrun [ 1205.308383][T19822] Bluetooth: hci2: command 0x0c1a tx timeout [ 1205.484209][T19822] Bluetooth: hci4: command 0x0c1a tx timeout [ 1205.547639][T19822] Bluetooth: hci5: command 0x0c1a tx timeout [ 1205.831604][T28416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6373'. [ 1205.867392][T28416] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1206.026809][T19822] Bluetooth: hci0: command 0x0419 tx timeout [ 1206.067988][T28419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.099709][T28419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.302108][T28425] FAULT_INJECTION: forcing a failure. [ 1206.302108][T28425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1206.329389][T28425] CPU: 0 UID: 0 PID: 28425 Comm: syz.1.6379 Not tainted syzkaller #0 PREEMPT(full) [ 1206.329421][T28425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1206.329436][T28425] Call Trace: [ 1206.329445][T28425] [ 1206.329456][T28425] dump_stack_lvl+0x189/0x250 [ 1206.329494][T28425] ? __pfx____ratelimit+0x10/0x10 [ 1206.329526][T28425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1206.329558][T28425] ? __pfx__printk+0x10/0x10 [ 1206.329640][T28425] should_fail_ex+0x414/0x560 [ 1206.329682][T28425] _copy_to_user+0x31/0xb0 [ 1206.329713][T28425] simple_read_from_buffer+0xe1/0x170 [ 1206.329754][T28425] proc_fail_nth_read+0x1b3/0x220 [ 1206.329788][T28425] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1206.329821][T28425] ? rw_verify_area+0x2a6/0x4d0 [ 1206.329851][T28425] ? __lock_acquire+0xab9/0xd20 [ 1206.329872][T28425] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1206.329904][T28425] vfs_read+0x200/0xa30 [ 1206.329934][T28425] ? fdget_pos+0x247/0x320 [ 1206.329961][T28425] ? __pfx___mutex_lock+0x10/0x10 [ 1206.329998][T28425] ? __pfx_vfs_read+0x10/0x10 [ 1206.330031][T28425] ? __fget_files+0x2a/0x420 [ 1206.330058][T28425] ? __fget_files+0x3a0/0x420 [ 1206.330078][T28425] ? __fget_files+0x2a/0x420 [ 1206.330109][T28425] ksys_read+0x145/0x250 [ 1206.330144][T28425] ? __pfx_ksys_read+0x10/0x10 [ 1206.330193][T28425] ? do_syscall_64+0xbe/0xfa0 [ 1206.330231][T28425] do_syscall_64+0xfa/0xfa0 [ 1206.330263][T28425] ? lockdep_hardirqs_on+0x9c/0x150 [ 1206.330295][T28425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.330319][T28425] ? clear_bhb_loop+0x60/0xb0 [ 1206.330346][T28425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.330369][T28425] RIP: 0033:0x7fa4eb78e15c [ 1206.330390][T28425] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1206.330410][T28425] RSP: 002b:00007fa4ec64f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1206.330434][T28425] RAX: ffffffffffffffda RBX: 00007fa4eb9e5fa0 RCX: 00007fa4eb78e15c [ 1206.330451][T28425] RDX: 000000000000000f RSI: 00007fa4ec64f0a0 RDI: 0000000000000004 [ 1206.330465][T28425] RBP: 00007fa4ec64f090 R08: 0000000000000000 R09: 0000000000000000 [ 1206.330479][T28425] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1206.330494][T28425] R13: 00007fa4eb9e6038 R14: 00007fa4eb9e5fa0 R15: 00007fa4ebb0fa28 [ 1206.330532][T28425] [ 1206.726703][ T5921] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1206.876261][ T5921] usb 4-1: device descriptor read/64, error -71 [ 1207.146867][ T5921] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1207.296770][ T5921] usb 4-1: device descriptor read/64, error -71 [ 1207.359201][T28440] xt_hashlimit: max too large, truncated to 1048576 [ 1207.416613][ T5921] usb usb4-port1: attempt power cycle [ 1207.766273][ T5921] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1207.787275][ T5921] usb 4-1: device descriptor read/8, error -71 [ 1208.026226][ T5921] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1208.066532][ T5921] usb 4-1: device descriptor read/8, error -71 [ 1208.115437][T19822] Bluetooth: hci0: command 0x0419 tx timeout [ 1208.176730][ T5921] usb usb4-port1: unable to enumerate USB device [ 1208.334460][T28445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1208.396732][T28445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.196168][T26173] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 1209.358222][T26173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1209.376318][T26173] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1209.416133][T26173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.439361][T26173] usb 2-1: config 0 descriptor?? [ 1209.455597][T28465] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1209.569512][T28476] tipc: Enabled bearer , priority 0 [ 1209.592955][T28476] syzkaller0: entered promiscuous mode [ 1209.600824][T28476] syzkaller0: entered allmulticast mode [ 1209.652011][T28475] tipc: Resetting bearer [ 1209.696556][T28475] tipc: Disabling bearer [ 1209.755792][T28480] netlink: 'syz.2.6399': attribute type 3 has an invalid length. [ 1209.763901][T28480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6399'. [ 1209.892032][T26173] elan 0003:04F3:0755.0025: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 1210.091733][T28491] FAULT_INJECTION: forcing a failure. [ 1210.091733][T28491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1210.099483][T26173] usb 2-1: USB disconnect, device number 88 [ 1210.136166][T28487] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1210.148721][T28491] CPU: 1 UID: 0 PID: 28491 Comm: syz.4.6403 Not tainted syzkaller #0 PREEMPT(full) [ 1210.148754][T28491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1210.148769][T28491] Call Trace: [ 1210.148778][T28491] [ 1210.148789][T28491] dump_stack_lvl+0x189/0x250 [ 1210.148840][T28491] ? __pfx____ratelimit+0x10/0x10 [ 1210.148872][T28491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1210.148902][T28491] ? __pfx__printk+0x10/0x10 [ 1210.148925][T28491] ? __might_fault+0xb0/0x130 [ 1210.148968][T28491] should_fail_ex+0x414/0x560 [ 1210.149007][T28491] _copy_from_iter+0x1de/0x1790 [ 1210.149036][T28491] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1210.149069][T28491] ? policy_nodemask+0x27c/0x720 [ 1210.149089][T28491] ? __pfx__copy_from_iter+0x10/0x10 [ 1210.149121][T28491] ? set_page_refcounted+0xa0/0x1e0 [ 1210.149143][T28491] ? page_copy_sane+0x4e/0x280 [ 1210.149168][T28491] copy_page_from_iter+0xdd/0x170 [ 1210.149199][T28491] tun_get_user+0x1d7b/0x3e90 [ 1210.149343][T28491] ? tun_get_user+0x6f6/0x3e90 [ 1210.149380][T28491] ? aa_file_perm+0x44d/0x1550 [ 1210.149402][T28491] ? __pfx_tun_get_user+0x10/0x10 [ 1210.149429][T28491] ? _parse_integer_limit+0x1ae/0x1f0 [ 1210.149462][T28491] ? __lock_acquire+0xab9/0xd20 [ 1210.149491][T28491] ? ref_tracker_alloc+0x318/0x460 [ 1210.149540][T28491] ? __lock_acquire+0xab9/0xd20 [ 1210.149565][T28491] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1210.149595][T28491] ? tun_get+0x1c/0x2f0 [ 1210.149628][T28491] ? tun_get+0x1c/0x2f0 [ 1210.149654][T28491] ? tun_get+0x1c/0x2f0 [ 1210.149686][T28491] tun_chr_write_iter+0x113/0x200 [ 1210.149718][T28491] vfs_write+0x5c9/0xb30 [ 1210.149756][T28491] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1210.149784][T28491] ? __pfx_vfs_write+0x10/0x10 [ 1210.149836][T28491] ? __fget_files+0x2a/0x420 [ 1210.149869][T28491] ksys_write+0x145/0x250 [ 1210.149905][T28491] ? __pfx_ksys_write+0x10/0x10 [ 1210.149941][T28491] ? do_syscall_64+0xbe/0xfa0 [ 1210.149979][T28491] do_syscall_64+0xfa/0xfa0 [ 1210.150010][T28491] ? lockdep_hardirqs_on+0x9c/0x150 [ 1210.150044][T28491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.150066][T28491] ? clear_bhb_loop+0x60/0xb0 [ 1210.150091][T28491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.150114][T28491] RIP: 0033:0x7fe34638e1ff [ 1210.150135][T28491] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1210.150155][T28491] RSP: 002b:00007fe3472c9000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1210.150180][T28491] RAX: ffffffffffffffda RBX: 00007fe3465e5fa0 RCX: 00007fe34638e1ff [ 1210.150198][T28491] RDX: 000000000000004a RSI: 0000200000000200 RDI: 00000000000000c8 [ 1210.150213][T28491] RBP: 00007fe3472c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1210.150227][T28491] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 1210.150242][T28491] R13: 00007fe3465e6038 R14: 00007fe3465e5fa0 R15: 00007fe34670fa28 [ 1210.150279][T28491] [ 1210.633259][T28494] netlink: zone id is out of range [ 1210.665116][T28494] netlink: zone id is out of range [ 1210.670660][T28494] netlink: zone id is out of range [ 1210.675825][T28494] netlink: zone id is out of range [ 1210.681025][T28494] netlink: zone id is out of range [ 1210.686320][T28494] netlink: zone id is out of range [ 1210.691461][T28494] netlink: zone id is out of range [ 1210.696647][T28494] netlink: zone id is out of range [ 1210.701893][T28494] netlink: zone id is out of range [ 1210.961973][T28503] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1211.288292][T28507] netem: incorrect ge model size [ 1211.510036][T28510] tipc: Started in network mode [ 1211.526345][T28510] tipc: Node identity 1650da48241b, cluster identity 4711 [ 1211.576523][T28510] tipc: Enabled bearer , priority 0 [ 1211.620154][T28510] syzkaller0: entered promiscuous mode [ 1211.643261][T28510] syzkaller0: entered allmulticast mode [ 1211.846575][T28509] tipc: Resetting bearer [ 1211.914769][T28509] tipc: Disabling bearer [ 1212.145713][T28516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1212.576163][ T5937] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1212.749292][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1212.923408][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1212.961684][ T5937] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1212.981455][ T5937] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1213.039050][ T5937] usb 2-1: Manufacturer: syz [ 1213.050550][ T5937] usb 2-1: config 0 descriptor?? [ 1213.067704][T28529] FAULT_INJECTION: forcing a failure. [ 1213.067704][T28529] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.143330][T28529] CPU: 1 UID: 0 PID: 28529 Comm: syz.3.6416 Not tainted syzkaller #0 PREEMPT(full) [ 1213.143366][T28529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1213.143381][T28529] Call Trace: [ 1213.143391][T28529] [ 1213.143401][T28529] dump_stack_lvl+0x189/0x250 [ 1213.143438][T28529] ? __pfx____ratelimit+0x10/0x10 [ 1213.143470][T28529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1213.143502][T28529] ? __pfx__printk+0x10/0x10 [ 1213.143532][T28529] ? __pfx___might_resched+0x10/0x10 [ 1213.143556][T28529] ? fs_reclaim_acquire+0x7d/0x100 [ 1213.143598][T28529] should_fail_ex+0x414/0x560 [ 1213.143639][T28529] should_failslab+0xa8/0x100 [ 1213.143664][T28529] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1213.143697][T28529] ? __alloc_skb+0x112/0x2d0 [ 1213.143719][T28529] ? netlink_autobind+0xdb/0x300 [ 1213.143759][T28529] __alloc_skb+0x112/0x2d0 [ 1213.143786][T28529] netlink_sendmsg+0x5c6/0xb30 [ 1213.143820][T28529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1213.143848][T28529] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1213.143884][T28529] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1213.143907][T28529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1213.143932][T28529] __sock_sendmsg+0x21c/0x270 [ 1213.143967][T28529] ____sys_sendmsg+0x505/0x830 [ 1213.143999][T28529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1213.144034][T28529] ? import_iovec+0x74/0xa0 [ 1213.144068][T28529] ___sys_sendmsg+0x21f/0x2a0 [ 1213.144097][T28529] ? __pfx____sys_sendmsg+0x10/0x10 [ 1213.144162][T28529] ? __fget_files+0x2a/0x420 [ 1213.144183][T28529] ? __fget_files+0x3a0/0x420 [ 1213.144216][T28529] __x64_sys_sendmsg+0x19b/0x260 [ 1213.144246][T28529] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1213.144282][T28529] ? __pfx_ksys_write+0x10/0x10 [ 1213.144319][T28529] ? do_syscall_64+0xbe/0xfa0 [ 1213.144373][T28529] do_syscall_64+0xfa/0xfa0 [ 1213.144405][T28529] ? lockdep_hardirqs_on+0x9c/0x150 [ 1213.144438][T28529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.144461][T28529] ? clear_bhb_loop+0x60/0xb0 [ 1213.144488][T28529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.144511][T28529] RIP: 0033:0x7f6db5b8f749 [ 1213.144531][T28529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1213.144551][T28529] RSP: 002b:00007f6db3df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1213.144575][T28529] RAX: ffffffffffffffda RBX: 00007f6db5de5fa0 RCX: 00007f6db5b8f749 [ 1213.144592][T28529] RDX: 0000000020008000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1213.144607][T28529] RBP: 00007f6db3df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1213.144622][T28529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1213.144635][T28529] R13: 00007f6db5de6038 R14: 00007f6db5de5fa0 R15: 00007f6db5f0fa28 [ 1213.144672][T28529] [ 1213.714022][ T5937] pyra 0003:1E7D:2CF6.0026: unknown main item tag 0x0 [ 1213.732756][ T5937] pyra 0003:1E7D:2CF6.0026: unknown main item tag 0x0 [ 1213.741468][ T5937] pyra 0003:1E7D:2CF6.0026: unknown main item tag 0x0 [ 1213.776349][ T5937] pyra 0003:1E7D:2CF6.0026: unknown main item tag 0x0 [ 1213.811999][ T5937] pyra 0003:1E7D:2CF6.0026: unknown main item tag 0x0 [ 1213.830408][ T5937] pyra 0003:1E7D:2CF6.0026: unknown main item tag 0x0 [ 1214.143839][ T5937] pyra 0003:1E7D:2CF6.0026: unknown main item tag 0x0 [ 1214.157253][ T5937] pyra 0003:1E7D:2CF6.0026: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1214.266354][ T5921] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1214.438223][ T5921] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1214.456775][ T5921] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1214.478986][ T5921] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1214.554813][ T5921] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1214.586668][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1214.625316][ T5921] usb 4-1: Product: syz [ 1214.632081][ T5921] usb 4-1: Manufacturer: syz [ 1214.650088][ T5921] usb 4-1: SerialNumber: syz [ 1214.884668][ T5921] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 91 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1214.981408][ T5937] pyra 0003:1E7D:2CF6.0026: couldn't init struct pyra_device [ 1215.016290][ T5937] pyra 0003:1E7D:2CF6.0026: couldn't install mouse [ 1215.063880][ T5937] pyra 0003:1E7D:2CF6.0026: probe with driver pyra failed with error -32 [ 1215.093115][T19822] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1215.146510][T28545] "syz.3.6417" (28545) uses obsolete ecb(arc4) skcipher [ 1215.300875][T28548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1215.314575][T28548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1215.366381][ T5937] usb 4-1: USB disconnect, device number 91 [ 1215.371475][T28535] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6413'. [ 1216.471940][ T5937] usb 2-1: USB disconnect, device number 89 [ 1216.688004][T28552] FAULT_INJECTION: forcing a failure. [ 1216.688004][T28552] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.776166][T28552] CPU: 1 UID: 0 PID: 28552 Comm: syz.1.6421 Not tainted syzkaller #0 PREEMPT(full) [ 1216.776197][T28552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1216.776209][T28552] Call Trace: [ 1216.776218][T28552] [ 1216.776227][T28552] dump_stack_lvl+0x189/0x250 [ 1216.776263][T28552] ? __pfx____ratelimit+0x10/0x10 [ 1216.776302][T28552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1216.776334][T28552] ? __pfx__printk+0x10/0x10 [ 1216.776365][T28552] ? __pfx___might_resched+0x10/0x10 [ 1216.776389][T28552] ? fs_reclaim_acquire+0x7d/0x100 [ 1216.776437][T28552] should_fail_ex+0x414/0x560 [ 1216.776478][T28552] should_failslab+0xa8/0x100 [ 1216.776503][T28552] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1216.776536][T28552] ? __alloc_skb+0x112/0x2d0 [ 1216.776557][T28552] ? netlink_autobind+0xdb/0x300 [ 1216.776588][T28552] __alloc_skb+0x112/0x2d0 [ 1216.776614][T28552] netlink_sendmsg+0x5c6/0xb30 [ 1216.776649][T28552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1216.776677][T28552] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1216.776713][T28552] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1216.776736][T28552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1216.776762][T28552] __sock_sendmsg+0x21c/0x270 [ 1216.776797][T28552] ____sys_sendmsg+0x505/0x830 [ 1216.776828][T28552] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1216.776864][T28552] ? import_iovec+0x74/0xa0 [ 1216.776898][T28552] ___sys_sendmsg+0x21f/0x2a0 [ 1216.776925][T28552] ? __pfx____sys_sendmsg+0x10/0x10 [ 1216.776996][T28552] ? __fget_files+0x2a/0x420 [ 1216.777017][T28552] ? __fget_files+0x3a0/0x420 [ 1216.777051][T28552] __x64_sys_sendmsg+0x19b/0x260 [ 1216.777080][T28552] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1216.777117][T28552] ? __pfx_ksys_write+0x10/0x10 [ 1216.777153][T28552] ? do_syscall_64+0xbe/0xfa0 [ 1216.777191][T28552] do_syscall_64+0xfa/0xfa0 [ 1216.777221][T28552] ? lockdep_hardirqs_on+0x9c/0x150 [ 1216.777254][T28552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.777277][T28552] ? clear_bhb_loop+0x60/0xb0 [ 1216.777306][T28552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.777329][T28552] RIP: 0033:0x7fa4eb78f749 [ 1216.777349][T28552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1216.777369][T28552] RSP: 002b:00007fa4ec64f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1216.777393][T28552] RAX: ffffffffffffffda RBX: 00007fa4eb9e5fa0 RCX: 00007fa4eb78f749 [ 1216.777411][T28552] RDX: 0000000000000018 RSI: 0000200000000540 RDI: 0000000000000003 [ 1216.777426][T28552] RBP: 00007fa4ec64f090 R08: 0000000000000000 R09: 0000000000000000 [ 1216.777453][T28552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1216.777468][T28552] R13: 00007fa4eb9e6038 R14: 00007fa4eb9e5fa0 R15: 00007fa4ebb0fa28 [ 1216.777505][T28552] [ 1217.127635][T18531] usb 3-1: new low-speed USB device number 105 using dummy_hcd [ 1217.491952][T18531] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1217.504367][T18531] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1217.513830][T18531] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.524535][T18531] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1217.534118][T18531] usb 3-1: config 1 has no interface number 1 [ 1217.540746][T18531] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1217.554919][T18531] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1217.578710][T18531] usb 3-1: string descriptor 0 read error: -22 [ 1217.594675][T18531] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1217.605751][T18531] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.641128][T28556] FAULT_INJECTION: forcing a failure. [ 1217.641128][T28556] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.670086][T18531] usb 3-1: low speed audio streaming not supported [ 1217.706276][T28556] CPU: 0 UID: 0 PID: 28556 Comm: syz.4.6423 Not tainted syzkaller #0 PREEMPT(full) [ 1217.706306][T28556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1217.706320][T28556] Call Trace: [ 1217.706330][T28556] [ 1217.706340][T28556] dump_stack_lvl+0x189/0x250 [ 1217.706377][T28556] ? __pfx____ratelimit+0x10/0x10 [ 1217.706409][T28556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1217.706440][T28556] ? __pfx__printk+0x10/0x10 [ 1217.706470][T28556] ? __pfx___might_resched+0x10/0x10 [ 1217.706495][T28556] ? fs_reclaim_acquire+0x7d/0x100 [ 1217.706535][T28556] should_fail_ex+0x414/0x560 [ 1217.706589][T28556] should_failslab+0xa8/0x100 [ 1217.706614][T28556] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1217.706647][T28556] ? __alloc_skb+0x112/0x2d0 [ 1217.706675][T28556] __alloc_skb+0x112/0x2d0 [ 1217.706701][T28556] netlink_sendmsg+0x5c6/0xb30 [ 1217.706736][T28556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1217.706763][T28556] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1217.706799][T28556] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1217.706822][T28556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1217.706847][T28556] __sock_sendmsg+0x21c/0x270 [ 1217.706882][T28556] ____sys_sendmsg+0x505/0x830 [ 1217.706912][T28556] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1217.706948][T28556] ? import_iovec+0x74/0xa0 [ 1217.706980][T28556] ___sys_sendmsg+0x21f/0x2a0 [ 1217.707015][T28556] ? __pfx____sys_sendmsg+0x10/0x10 [ 1217.707081][T28556] ? __fget_files+0x2a/0x420 [ 1217.707101][T28556] ? __fget_files+0x3a0/0x420 [ 1217.707135][T28556] __x64_sys_sendmsg+0x19b/0x260 [ 1217.707162][T28556] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1217.707199][T28556] ? __pfx_ksys_write+0x10/0x10 [ 1217.707232][T28556] ? do_syscall_64+0xbe/0xfa0 [ 1217.707268][T28556] do_syscall_64+0xfa/0xfa0 [ 1217.707302][T28556] ? lockdep_hardirqs_on+0x9c/0x150 [ 1217.707335][T28556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.707354][T28556] ? clear_bhb_loop+0x60/0xb0 [ 1217.707375][T28556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.707393][T28556] RIP: 0033:0x7fe34638f749 [ 1217.707409][T28556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1217.707425][T28556] RSP: 002b:00007fe3472c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1217.707444][T28556] RAX: ffffffffffffffda RBX: 00007fe3465e5fa0 RCX: 00007fe34638f749 [ 1217.707458][T28556] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1217.707469][T28556] RBP: 00007fe3472c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1217.707481][T28556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1217.707492][T28556] R13: 00007fe3465e6038 R14: 00007fe3465e5fa0 R15: 00007fe34670fa28 [ 1217.707520][T28556] [ 1218.022134][T28550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.031068][T28550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.250932][T28545] usblp0: removed [ 1218.386903][T18531] usb 3-1: USB disconnect, device number 105 [ 1219.177516][T28579] FAULT_INJECTION: forcing a failure. [ 1219.177516][T28579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1219.268433][T28579] CPU: 0 UID: 0 PID: 28579 Comm: syz.2.6432 Not tainted syzkaller #0 PREEMPT(full) [ 1219.268468][T28579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1219.268483][T28579] Call Trace: [ 1219.268493][T28579] [ 1219.268503][T28579] dump_stack_lvl+0x189/0x250 [ 1219.268541][T28579] ? __pfx____ratelimit+0x10/0x10 [ 1219.268573][T28579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1219.268605][T28579] ? __pfx__printk+0x10/0x10 [ 1219.268629][T28579] ? __might_fault+0xb0/0x130 [ 1219.268673][T28579] should_fail_ex+0x414/0x560 [ 1219.268714][T28579] _copy_from_iter+0x1de/0x1790 [ 1219.268743][T28579] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1219.268777][T28579] ? policy_nodemask+0x27c/0x720 [ 1219.268799][T28579] ? __pfx__copy_from_iter+0x10/0x10 [ 1219.268832][T28579] ? set_page_refcounted+0xa0/0x1e0 [ 1219.268855][T28579] ? page_copy_sane+0x4e/0x280 [ 1219.268883][T28579] copy_page_from_iter+0xdd/0x170 [ 1219.268915][T28579] tun_get_user+0x1d7b/0x3e90 [ 1219.268952][T28579] ? tun_get_user+0x6f6/0x3e90 [ 1219.268990][T28579] ? aa_file_perm+0x44d/0x1550 [ 1219.269011][T28579] ? __pfx_tun_get_user+0x10/0x10 [ 1219.269038][T28579] ? _parse_integer_limit+0x1ae/0x1f0 [ 1219.269071][T28579] ? __lock_acquire+0xab9/0xd20 [ 1219.269101][T28579] ? ref_tracker_alloc+0x318/0x460 [ 1219.269130][T28579] ? __lock_acquire+0xab9/0xd20 [ 1219.269154][T28579] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1219.269184][T28579] ? tun_get+0x1c/0x2f0 [ 1219.269217][T28579] ? tun_get+0x1c/0x2f0 [ 1219.269244][T28579] ? tun_get+0x1c/0x2f0 [ 1219.269290][T28579] tun_chr_write_iter+0x113/0x200 [ 1219.269322][T28579] vfs_write+0x5c9/0xb30 [ 1219.269359][T28579] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1219.269388][T28579] ? __pfx_vfs_write+0x10/0x10 [ 1219.269432][T28579] ? __fget_files+0x2a/0x420 [ 1219.269469][T28579] ksys_write+0x145/0x250 [ 1219.269504][T28579] ? __pfx_ksys_write+0x10/0x10 [ 1219.269540][T28579] ? do_syscall_64+0xbe/0xfa0 [ 1219.269578][T28579] do_syscall_64+0xfa/0xfa0 [ 1219.269609][T28579] ? lockdep_hardirqs_on+0x9c/0x150 [ 1219.269641][T28579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.269664][T28579] ? clear_bhb_loop+0x60/0xb0 [ 1219.269691][T28579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.269713][T28579] RIP: 0033:0x7f68cab8e1ff [ 1219.269733][T28579] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1219.269753][T28579] RSP: 002b:00007f68c8dd5000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1219.269777][T28579] RAX: ffffffffffffffda RBX: 00007f68cade6090 RCX: 00007f68cab8e1ff [ 1219.269794][T28579] RDX: 000000000000002a RSI: 0000200000000340 RDI: 00000000000000c8 [ 1219.269809][T28579] RBP: 00007f68c8dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1219.269823][T28579] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001 [ 1219.269837][T28579] R13: 00007f68cade6128 R14: 00007f68cade6090 R15: 00007f68caf0fa28 [ 1219.269874][T28579] [ 1220.080040][T22028] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1220.098894][T22028] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1220.121348][T22028] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1220.155718][T28578] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6431'. [ 1220.196664][T22028] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1220.273050][T22028] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1220.281336][T22028] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1221.264204][T28606] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1221.913532][T28589] chnl_net:caif_netlink_parms(): no params data found [ 1222.361072][T19822] Bluetooth: hci3: command tx timeout [ 1222.559491][T28589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.655338][T28589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.701948][T28589] bridge_slave_0: entered allmulticast mode [ 1222.737357][T28589] bridge_slave_0: entered promiscuous mode [ 1222.790346][T28589] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.832276][T28589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.848936][T28589] bridge_slave_1: entered allmulticast mode [ 1222.884032][T28589] bridge_slave_1: entered promiscuous mode [ 1223.914285][T28589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1224.061227][T28589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1224.251801][T28407] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.299229][T28644] syzkaller0: entered promiscuous mode [ 1224.327407][T28644] syzkaller0: entered allmulticast mode [ 1224.421105][T28589] team0: Port device team_slave_0 added [ 1224.431299][T19822] Bluetooth: hci3: command tx timeout [ 1224.441423][T28589] team0: Port device team_slave_1 added [ 1224.731931][T28407] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.816674][T28589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1224.823912][T28589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.859483][T28589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1224.978823][T28407] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.017461][T28589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1225.024705][T28589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.053621][T28589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1225.158985][T28407] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.241231][T28659] FAULT_INJECTION: forcing a failure. [ 1225.241231][T28659] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.268914][T28659] CPU: 0 UID: 0 PID: 28659 Comm: syz.3.6450 Not tainted syzkaller #0 PREEMPT(full) [ 1225.268938][T28659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1225.268948][T28659] Call Trace: [ 1225.268955][T28659] [ 1225.268963][T28659] dump_stack_lvl+0x189/0x250 [ 1225.268990][T28659] ? __pfx____ratelimit+0x10/0x10 [ 1225.269015][T28659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1225.269037][T28659] ? __pfx__printk+0x10/0x10 [ 1225.269058][T28659] ? __pfx___might_resched+0x10/0x10 [ 1225.269076][T28659] ? fs_reclaim_acquire+0x7d/0x100 [ 1225.269106][T28659] should_fail_ex+0x414/0x560 [ 1225.269137][T28659] should_failslab+0xa8/0x100 [ 1225.269155][T28659] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1225.269178][T28659] ? __alloc_skb+0x112/0x2d0 [ 1225.269195][T28659] ? netlink_autobind+0xdb/0x300 [ 1225.269217][T28659] __alloc_skb+0x112/0x2d0 [ 1225.269235][T28659] netlink_sendmsg+0x5c6/0xb30 [ 1225.269259][T28659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1225.269278][T28659] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1225.269311][T28659] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1225.269328][T28659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1225.269345][T28659] __sock_sendmsg+0x21c/0x270 [ 1225.269371][T28659] ____sys_sendmsg+0x505/0x830 [ 1225.269393][T28659] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1225.269418][T28659] ? import_iovec+0x74/0xa0 [ 1225.269442][T28659] ___sys_sendmsg+0x21f/0x2a0 [ 1225.269462][T28659] ? __pfx____sys_sendmsg+0x10/0x10 [ 1225.269507][T28659] ? __fget_files+0x2a/0x420 [ 1225.269522][T28659] ? __fget_files+0x3a0/0x420 [ 1225.269545][T28659] __x64_sys_sendmsg+0x19b/0x260 [ 1225.269565][T28659] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1225.269591][T28659] ? __pfx_ksys_write+0x10/0x10 [ 1225.269617][T28659] ? do_syscall_64+0xbe/0xfa0 [ 1225.269643][T28659] do_syscall_64+0xfa/0xfa0 [ 1225.269666][T28659] ? lockdep_hardirqs_on+0x9c/0x150 [ 1225.269691][T28659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.269707][T28659] ? clear_bhb_loop+0x60/0xb0 [ 1225.269726][T28659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.269742][T28659] RIP: 0033:0x7f6db5b8f749 [ 1225.269757][T28659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1225.269772][T28659] RSP: 002b:00007f6db3df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1225.269790][T28659] RAX: ffffffffffffffda RBX: 00007f6db5de5fa0 RCX: 00007f6db5b8f749 [ 1225.269802][T28659] RDX: 0000000000004010 RSI: 0000200000000280 RDI: 0000000000000005 [ 1225.269813][T28659] RBP: 00007f6db3df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1225.269823][T28659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1225.269832][T28659] R13: 00007f6db5de6038 R14: 00007f6db5de5fa0 R15: 00007f6db5f0fa28 [ 1225.269858][T28659] [ 1225.336492][ T5937] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1225.701857][T28589] hsr_slave_0: entered promiscuous mode [ 1225.717572][T28589] hsr_slave_1: entered promiscuous mode [ 1225.734467][T28589] debugfs: 'hsr0' already exists in 'hsr' [ 1225.756699][T28589] Cannot create hsr debugfs directory [ 1225.766289][T19822] Bluetooth: hci5: unexpected event for opcode 0x2003 [ 1226.006234][ T5937] usb 2-1: Using ep0 maxpacket: 8 [ 1226.023220][ T5937] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1226.042135][ T5937] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1226.088697][ T5937] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1226.149952][ T5937] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1226.216235][ T5937] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1226.279679][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.382620][T28668] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1226.389301][T28668] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1226.403331][T28668] vhci_hcd vhci_hcd.0: Device attached [ 1226.526648][T19822] Bluetooth: hci3: command tx timeout [ 1226.624004][ T5937] usb 2-1: GET_CAPABILITIES returned 0 [ 1226.643922][ T5937] usbtmc 2-1:16.0: can't read capabilities [ 1226.646693][T28407] bridge_slave_1: left allmulticast mode [ 1226.727523][T27266] usb 40-1: SetAddress Request (2) to port 0 [ 1226.733934][T27266] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1226.746555][T28669] vhci_hcd: connection closed [ 1226.746886][ T13] vhci_hcd: stop threads [ 1226.767233][T28407] bridge_slave_1: left promiscuous mode [ 1226.773093][T28407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.779078][ T13] vhci_hcd: release socket [ 1226.851708][ T13] vhci_hcd: disconnect device [ 1226.897169][T28407] bridge_slave_0: left allmulticast mode [ 1226.936602][T28407] bridge_slave_0: left promiscuous mode [ 1226.965845][T28407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.096860][T26173] usb 2-1: USB disconnect, device number 90 [ 1228.563214][T28407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1228.578744][T28407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1228.587602][T19822] Bluetooth: hci3: command tx timeout [ 1228.598012][T28407] bond0 (unregistering): Released all slaves [ 1228.666261][T26173] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1228.856187][T26173] usb 2-1: Using ep0 maxpacket: 32 [ 1228.875529][T26173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1228.887226][T26173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1228.915531][T26173] usb 2-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=58.6f [ 1228.929867][T26173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.943942][T26173] usb 2-1: Product: syz [ 1228.953276][T26173] usb 2-1: Manufacturer: syz [ 1228.958875][T26173] usb 2-1: SerialNumber: syz [ 1228.975775][T26173] usb 2-1: config 0 descriptor?? [ 1229.000827][T26173] keyspan 2-1:0.0: Keyspan - (without firmware) converter detected [ 1229.056780][ T5937] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1229.214220][ T5921] usb 2-1: USB disconnect, device number 91 [ 1229.225410][ T5921] keyspan 2-1:0.0: device disconnected [ 1229.231587][ T5937] usb 3-1: device descriptor read/64, error -71 [ 1229.298886][T28407] hsr_slave_0: left promiscuous mode [ 1229.305277][T28407] hsr_slave_1: left promiscuous mode [ 1229.337522][T28407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1229.344980][T28407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1229.372494][T28407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1229.394153][T28407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1229.460201][T28407] veth1_macvtap: left promiscuous mode [ 1229.476378][T28407] veth0_macvtap: left promiscuous mode [ 1229.483542][T28407] veth1_vlan: left promiscuous mode [ 1229.486205][ T5937] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1229.506209][T28407] veth0_vlan: left promiscuous mode [ 1229.636245][ T5937] usb 3-1: device descriptor read/64, error -71 [ 1229.746623][ T5937] usb usb3-port1: attempt power cycle [ 1230.124324][ T5937] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1230.177355][ T5937] usb 3-1: device descriptor read/8, error -71 [ 1230.431214][T19822] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 1230.439484][ T5937] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1230.487315][ T5937] usb 3-1: device descriptor read/8, error -71 [ 1230.596580][ T5937] usb usb3-port1: unable to enumerate USB device [ 1230.755169][T28738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1230.765719][T28738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1231.166271][T28407] team0 (unregistering): Port device team_slave_1 removed [ 1231.240773][T28407] team0 (unregistering): Port device team_slave_0 removed [ 1231.546824][T28744] FAULT_INJECTION: forcing a failure. [ 1231.546824][T28744] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.559733][T28744] CPU: 0 UID: 0 PID: 28744 Comm: syz.3.6465 Not tainted syzkaller #0 PREEMPT(full) [ 1231.559762][T28744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1231.559776][T28744] Call Trace: [ 1231.559787][T28744] [ 1231.559797][T28744] dump_stack_lvl+0x189/0x250 [ 1231.559833][T28744] ? __pfx____ratelimit+0x10/0x10 [ 1231.559864][T28744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1231.559892][T28744] ? __pfx__printk+0x10/0x10 [ 1231.559920][T28744] ? __pfx___might_resched+0x10/0x10 [ 1231.559942][T28744] ? fs_reclaim_acquire+0x7d/0x100 [ 1231.559980][T28744] should_fail_ex+0x414/0x560 [ 1231.560019][T28744] should_failslab+0xa8/0x100 [ 1231.560043][T28744] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1231.560075][T28744] ? __alloc_skb+0x112/0x2d0 [ 1231.560095][T28744] ? netlink_autobind+0xdb/0x300 [ 1231.560122][T28744] __alloc_skb+0x112/0x2d0 [ 1231.560146][T28744] netlink_sendmsg+0x5c6/0xb30 [ 1231.560178][T28744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1231.560205][T28744] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1231.560239][T28744] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1231.560261][T28744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1231.560284][T28744] __sock_sendmsg+0x21c/0x270 [ 1231.560318][T28744] ____sys_sendmsg+0x505/0x830 [ 1231.560348][T28744] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1231.560382][T28744] ? import_iovec+0x74/0xa0 [ 1231.560414][T28744] ___sys_sendmsg+0x21f/0x2a0 [ 1231.560440][T28744] ? __pfx____sys_sendmsg+0x10/0x10 [ 1231.560501][T28744] ? __fget_files+0x2a/0x420 [ 1231.560521][T28744] ? __fget_files+0x3a0/0x420 [ 1231.560549][T28744] __x64_sys_sendmsg+0x19b/0x260 [ 1231.560575][T28744] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1231.560610][T28744] ? __pfx_ksys_write+0x10/0x10 [ 1231.560646][T28744] ? do_syscall_64+0xbe/0xfa0 [ 1231.560753][T28744] do_syscall_64+0xfa/0xfa0 [ 1231.560785][T28744] ? lockdep_hardirqs_on+0x9c/0x150 [ 1231.560816][T28744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.560836][T28744] ? clear_bhb_loop+0x60/0xb0 [ 1231.560856][T28744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.560873][T28744] RIP: 0033:0x7f6db5b8f749 [ 1231.560888][T28744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1231.560903][T28744] RSP: 002b:00007f6db3df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1231.560919][T28744] RAX: ffffffffffffffda RBX: 00007f6db5de5fa0 RCX: 00007f6db5b8f749 [ 1231.560932][T28744] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1231.560945][T28744] RBP: 00007f6db3df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1231.560955][T28744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1231.560965][T28744] R13: 00007f6db5de6038 R14: 00007f6db5de5fa0 R15: 00007f6db5f0fa28 [ 1231.560990][T28744] [ 1231.838721][T27266] usb 40-1: device descriptor read/8, error -110 [ 1232.227540][T27266] usb usb40-port1: attempt power cycle [ 1232.301853][T28727] tipc: Enabling of bearer rejected, failed to enable media [ 1232.469785][T28589] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1232.515976][T28589] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1232.526023][T28759] net_ratelimit: 7 callbacks suppressed [ 1232.554183][T28759] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 1232.567765][T28589] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1232.621525][T28589] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1232.787886][T27266] usb usb40-port1: unable to enumerate USB device [ 1232.863050][T19822] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 1232.996430][ T49] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1233.100771][T28589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1233.160113][ T49] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.187620][ T49] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1233.221254][T28589] 8021q: adding VLAN 0 to HW filter on device team0 [ 1233.239048][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.282928][ T49] usb 4-1: config 0 descriptor?? [ 1233.287610][T19099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.295143][T19099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1233.307602][ T49] pwc: Askey VC010 type 2 USB webcam detected. [ 1233.346839][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.354098][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1233.494464][T28788] sctp: [Deprecated]: syz.2.6474 (pid 28788) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1233.494464][T28788] Use struct sctp_sack_info instead [ 1233.717048][ T49] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1233.766982][T28589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1233.925604][ T49] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1233.949175][ T49] pwc: recv_control_msg error -32 req 04 val 1000 [ 1233.957260][ T49] pwc: recv_control_msg error -32 req 04 val 1300 [ 1233.979694][ T49] pwc: recv_control_msg error -32 req 04 val 1400 [ 1233.989719][T28792] kvm: user requested TSC rate below hardware speed [ 1233.992075][T28589] veth0_vlan: entered promiscuous mode [ 1234.027419][ T49] pwc: recv_control_msg error -32 req 02 val 2000 [ 1234.044397][T28792] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1234.082272][ T49] pwc: recv_control_msg error -32 req 02 val 2100 [ 1234.109498][T28792] fuse: Bad value for 'fd' [ 1234.152294][T28589] veth1_vlan: entered promiscuous mode [ 1234.392366][T28589] veth0_macvtap: entered promiscuous mode [ 1234.428331][T28589] veth1_macvtap: entered promiscuous mode [ 1234.448532][ T49] pwc: recv_control_msg error -71 req 04 val 1500 [ 1234.605158][ T49] pwc: recv_control_msg error -71 req 02 val 2500 [ 1234.651839][ T49] pwc: recv_control_msg error -71 req 02 val 2400 [ 1234.667837][ T49] pwc: recv_control_msg error -71 req 02 val 2600 [ 1234.668644][T28589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1234.697457][ T49] pwc: recv_control_msg error -71 req 02 val 2900 [ 1234.743429][ T49] pwc: recv_control_msg error -71 req 02 val 2800 [ 1234.760405][ T49] pwc: recv_control_msg error -71 req 04 val 1100 [ 1234.789333][ T49] pwc: recv_control_msg error -71 req 04 val 1200 [ 1234.794435][T28589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1234.818979][T28809] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6479'. [ 1234.890816][ T49] pwc: Registered as video103. [ 1234.919244][ T49] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input34 [ 1234.996463][ T49] usb 4-1: USB disconnect, device number 92 [ 1235.111481][T28391] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.130323][T28391] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.288395][T28393] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.299280][T28393] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.425421][T28816] tipc: Enabled bearer , priority 0 [ 1235.486695][T28818] syzkaller0: entered promiscuous mode [ 1235.492245][T28818] syzkaller0: entered allmulticast mode [ 1235.563267][T28816] tipc: Resetting bearer [ 1235.584986][T28815] tipc: Resetting bearer [ 1235.655325][T28815] tipc: Disabling bearer [ 1235.810302][T28393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.884245][T28393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.919338][T28835] syzkaller0: entered promiscuous mode [ 1235.924995][T28835] syzkaller0: entered allmulticast mode [ 1236.053465][T21017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1236.082071][T21017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1236.136339][T26173] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1236.189664][T28842] tipc: Started in network mode [ 1236.194617][T28842] tipc: Node identity def00d9a2172, cluster identity 4711 [ 1236.219320][T28842] tipc: Enabled bearer , priority 0 [ 1236.228661][T28837] syzkaller0: entered promiscuous mode [ 1236.234199][T28837] syzkaller0: entered allmulticast mode [ 1236.316367][T26173] usb 2-1: Using ep0 maxpacket: 8 [ 1236.332961][T26173] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1236.351673][T26173] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1236.366282][T26173] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1236.377880][T28848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6487'. [ 1236.386253][T26173] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1236.416122][T26173] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1236.425587][T26173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.463875][T28851] Cannot find map_set index 135 as target [ 1236.558093][T28853] FAULT_INJECTION: forcing a failure. [ 1236.558093][T28853] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.591583][T28853] CPU: 1 UID: 0 PID: 28853 Comm: syz.3.6488 Not tainted syzkaller #0 PREEMPT(full) [ 1236.591615][T28853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1236.591629][T28853] Call Trace: [ 1236.591639][T28853] [ 1236.591649][T28853] dump_stack_lvl+0x189/0x250 [ 1236.591690][T28853] ? __pfx____ratelimit+0x10/0x10 [ 1236.591722][T28853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1236.591753][T28853] ? __pfx__printk+0x10/0x10 [ 1236.591782][T28853] ? __pfx___might_resched+0x10/0x10 [ 1236.591815][T28853] should_fail_ex+0x414/0x560 [ 1236.591856][T28853] should_failslab+0xa8/0x100 [ 1236.591882][T28853] __kmalloc_noprof+0xcb/0x7f0 [ 1236.591913][T28853] ? rcu_read_lock_any_held+0xb3/0x120 [ 1236.591940][T28853] ? kernfs_fop_write_iter+0x158/0x540 [ 1236.592045][T28853] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1236.592075][T28853] kernfs_fop_write_iter+0x158/0x540 [ 1236.592102][T28853] vfs_write+0x5c9/0xb30 [ 1236.592134][T28853] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1236.592155][T28853] ? __pfx_vfs_write+0x10/0x10 [ 1236.592194][T28853] ? __fget_files+0x2a/0x420 [ 1236.592221][T28853] ksys_write+0x145/0x250 [ 1236.592250][T28853] ? __pfx_ksys_write+0x10/0x10 [ 1236.592281][T28853] ? do_syscall_64+0xbe/0xfa0 [ 1236.592313][T28853] do_syscall_64+0xfa/0xfa0 [ 1236.592338][T28853] ? lockdep_hardirqs_on+0x9c/0x150 [ 1236.592365][T28853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.592386][T28853] ? clear_bhb_loop+0x60/0xb0 [ 1236.592421][T28853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.592438][T28853] RIP: 0033:0x7f6db5b8f749 [ 1236.592455][T28853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1236.592471][T28853] RSP: 002b:00007f6db3df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1236.592493][T28853] RAX: ffffffffffffffda RBX: 00007f6db5de5fa0 RCX: 00007f6db5b8f749 [ 1236.592509][T28853] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1236.592524][T28853] RBP: 00007f6db3df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1236.592537][T28853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1236.592551][T28853] R13: 00007f6db5de6038 R14: 00007f6db5de5fa0 R15: 00007f6db5f0fa28 [ 1236.592588][T28853] [ 1236.594748][T28849] tipc: Resetting bearer [ 1236.837958][T26173] usb 2-1: GET_CAPABILITIES returned 0 [ 1236.843741][T26173] usbtmc 2-1:16.0: can't read capabilities [ 1236.862457][T28848] bridge_slave_1: left allmulticast mode [ 1236.874289][T28848] bridge_slave_1: left promiscuous mode [ 1236.882622][T28848] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.930218][T28848] bridge_slave_0: left allmulticast mode [ 1236.938689][T28848] bridge_slave_0: left promiscuous mode [ 1236.955540][T28848] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.387294][T28864] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1237.478433][T28855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.487677][T28855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.599840][T28836] tipc: Resetting bearer [ 1237.622739][T28836] tipc: Disabling bearer [ 1237.641998][ T9] tipc: Node number set to 4286713242 [ 1237.998634][T28870] FAULT_INJECTION: forcing a failure. [ 1237.998634][T28870] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.022500][T28870] CPU: 0 UID: 0 PID: 28870 Comm: syz.4.6492 Not tainted syzkaller #0 PREEMPT(full) [ 1238.022522][T28870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1238.022533][T28870] Call Trace: [ 1238.022540][T28870] [ 1238.022547][T28870] dump_stack_lvl+0x189/0x250 [ 1238.022574][T28870] ? __pfx____ratelimit+0x10/0x10 [ 1238.022598][T28870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1238.022620][T28870] ? __pfx__printk+0x10/0x10 [ 1238.022640][T28870] ? __pfx___might_resched+0x10/0x10 [ 1238.022659][T28870] ? fs_reclaim_acquire+0x7d/0x100 [ 1238.022688][T28870] should_fail_ex+0x414/0x560 [ 1238.022718][T28870] should_failslab+0xa8/0x100 [ 1238.022736][T28870] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1238.022759][T28870] ? __alloc_skb+0x112/0x2d0 [ 1238.022774][T28870] ? netlink_autobind+0xdb/0x300 [ 1238.022795][T28870] __alloc_skb+0x112/0x2d0 [ 1238.022813][T28870] netlink_sendmsg+0x5c6/0xb30 [ 1238.022837][T28870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1238.022856][T28870] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1238.022882][T28870] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1238.022898][T28870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1238.022915][T28870] __sock_sendmsg+0x21c/0x270 [ 1238.022940][T28870] ____sys_sendmsg+0x505/0x830 [ 1238.022962][T28870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1238.022987][T28870] ? import_iovec+0x74/0xa0 [ 1238.023024][T28870] ___sys_sendmsg+0x21f/0x2a0 [ 1238.023044][T28870] ? __pfx____sys_sendmsg+0x10/0x10 [ 1238.023089][T28870] ? __fget_files+0x2a/0x420 [ 1238.023104][T28870] ? __fget_files+0x3a0/0x420 [ 1238.023127][T28870] __x64_sys_sendmsg+0x19b/0x260 [ 1238.023148][T28870] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1238.023173][T28870] ? __pfx_ksys_write+0x10/0x10 [ 1238.023199][T28870] ? do_syscall_64+0xbe/0xfa0 [ 1238.023227][T28870] do_syscall_64+0xfa/0xfa0 [ 1238.023261][T28870] ? lockdep_hardirqs_on+0x9c/0x150 [ 1238.023286][T28870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.023302][T28870] ? clear_bhb_loop+0x60/0xb0 [ 1238.023322][T28870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.023337][T28870] RIP: 0033:0x7fe34638f749 [ 1238.023352][T28870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1238.023366][T28870] RSP: 002b:00007fe3472c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1238.023384][T28870] RAX: ffffffffffffffda RBX: 00007fe3465e5fa0 RCX: 00007fe34638f749 [ 1238.023396][T28870] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000012 [ 1238.023407][T28870] RBP: 00007fe3472c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1238.023417][T28870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1238.023427][T28870] R13: 00007fe3465e6038 R14: 00007fe3465e5fa0 R15: 00007fe34670fa28 [ 1238.023452][T28870] [ 1238.662572][T28874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1238.672343][T28874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.699885][T28874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1238.732594][T28874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.932290][T28877] tipc: Started in network mode [ 1238.937550][T28877] tipc: Node identity 82cbe7280b67, cluster identity 4711 [ 1238.944987][T28877] tipc: Enabled bearer , priority 0 [ 1238.956338][T27266] usb 2-1: USB disconnect, device number 92 [ 1239.071019][T28879] syzkaller0: entered promiscuous mode [ 1239.076860][T28879] syzkaller0: entered allmulticast mode [ 1239.106886][T28877] tipc: Resetting bearer [ 1239.165010][T28876] tipc: Resetting bearer [ 1239.286643][T28876] tipc: Disabling bearer [ 1239.394252][T28891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6498'. [ 1239.405632][T28891] Cannot find del_set index 0 as target [ 1239.636214][T28903] FAULT_INJECTION: forcing a failure. [ 1239.636214][T28903] name failslab, interval 1, probability 0, space 0, times 0 [ 1239.649592][T28903] CPU: 0 UID: 0 PID: 28903 Comm: syz.3.6503 Not tainted syzkaller #0 PREEMPT(full) [ 1239.649624][T28903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1239.649638][T28903] Call Trace: [ 1239.649648][T28903] [ 1239.649657][T28903] dump_stack_lvl+0x189/0x250 [ 1239.649695][T28903] ? __pfx____ratelimit+0x10/0x10 [ 1239.649728][T28903] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1239.649761][T28903] ? __pfx__printk+0x10/0x10 [ 1239.649799][T28903] ? __pfx___might_resched+0x10/0x10 [ 1239.649823][T28903] ? fs_reclaim_acquire+0x7d/0x100 [ 1239.649865][T28903] should_fail_ex+0x414/0x560 [ 1239.649907][T28903] should_failslab+0xa8/0x100 [ 1239.649933][T28903] __kmalloc_noprof+0xcb/0x7f0 [ 1239.649964][T28903] ? tomoyo_encode+0x28b/0x550 [ 1239.650007][T28903] tomoyo_encode+0x28b/0x550 [ 1239.650048][T28903] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1239.650092][T28903] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1239.650121][T28903] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1239.650155][T28903] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1239.650228][T28903] ? __fget_files+0x2a/0x420 [ 1239.650256][T28903] ? __fget_files+0x3a0/0x420 [ 1239.650277][T28903] ? __fget_files+0x2a/0x420 [ 1239.650303][T28903] security_file_ioctl+0xcb/0x2d0 [ 1239.650335][T28903] __se_sys_ioctl+0x47/0x170 [ 1239.650368][T28903] do_syscall_64+0xfa/0xfa0 [ 1239.650400][T28903] ? lockdep_hardirqs_on+0x9c/0x150 [ 1239.650434][T28903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.650457][T28903] ? clear_bhb_loop+0x60/0xb0 [ 1239.650485][T28903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.650513][T28903] RIP: 0033:0x7f6db5b8f749 [ 1239.650534][T28903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1239.650554][T28903] RSP: 002b:00007f6db3d14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1239.650579][T28903] RAX: ffffffffffffffda RBX: 00007f6db5de6090 RCX: 00007f6db5b8f749 [ 1239.650597][T28903] RDX: 0000200000000380 RSI: 00000000404c534a RDI: 000000000000000b [ 1239.650613][T28903] RBP: 00007f6db3d14090 R08: 0000000000000000 R09: 0000000000000000 [ 1239.650627][T28903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1239.650641][T28903] R13: 00007f6db5de6128 R14: 00007f6db5de6090 R15: 00007f6db5f0fa28 [ 1239.650678][T28903] [ 1239.650829][T28903] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1239.956232][ T9] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1239.971233][T28909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1239.983933][T28909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1240.111221][ T9] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 1240.120470][ T9] usb 6-1: config 0 has no interface number 0 [ 1240.132504][ T9] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=77.f4 [ 1240.146470][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.161550][ T9] usb 6-1: Product: syz [ 1240.166320][ T9] usb 6-1: Manufacturer: syz [ 1240.171142][ T9] usb 6-1: SerialNumber: syz [ 1240.184732][ T9] usb 6-1: config 0 descriptor?? [ 1240.191677][T28895] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1240.412082][ T9] asix 6-1:0.251: probe with driver asix failed with error -71 [ 1240.433790][ T9] usb 6-1: USB disconnect, device number 2 [ 1240.550453][T28920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1240.560332][T28920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1240.726194][T18531] usb 4-1: new low-speed USB device number 93 using dummy_hcd [ 1240.878411][T18531] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1240.887824][T18531] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1240.896799][T18531] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.907544][T18531] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1240.919121][T18531] usb 4-1: config 1 has no interface number 1 [ 1240.925419][T18531] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1240.938568][T18531] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1240.958597][T18531] usb 4-1: string descriptor 0 read error: -22 [ 1240.977588][T18531] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1241.001678][T18531] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.043004][T18531] usb 4-1: low speed audio streaming not supported [ 1241.278218][T28918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1241.324426][T28918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1241.377916][T18531] usb 4-1: USB disconnect, device number 93 [ 1241.435010][T28934] FAULT_INJECTION: forcing a failure. [ 1241.435010][T28934] name failslab, interval 1, probability 0, space 0, times 0 [ 1241.451640][T28934] CPU: 0 UID: 0 PID: 28934 Comm: syz.4.6517 Not tainted syzkaller #0 PREEMPT(full) [ 1241.451673][T28934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1241.451692][T28934] Call Trace: [ 1241.451702][T28934] [ 1241.451712][T28934] dump_stack_lvl+0x189/0x250 [ 1241.451749][T28934] ? __pfx____ratelimit+0x10/0x10 [ 1241.451783][T28934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1241.451816][T28934] ? __pfx__printk+0x10/0x10 [ 1241.451846][T28934] ? __pfx___might_resched+0x10/0x10 [ 1241.451869][T28934] ? fs_reclaim_acquire+0x7d/0x100 [ 1241.451910][T28934] should_fail_ex+0x414/0x560 [ 1241.451952][T28934] should_failslab+0xa8/0x100 [ 1241.451981][T28934] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1241.452015][T28934] ? __alloc_skb+0x112/0x2d0 [ 1241.452044][T28934] __alloc_skb+0x112/0x2d0 [ 1241.452069][T28934] tcp_stream_alloc_skb+0x3d/0x340 [ 1241.452111][T28934] tcp_sendmsg_locked+0x1c7f/0x5540 [ 1241.452204][T28934] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1241.452237][T28934] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1241.452267][T28934] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1241.452306][T28934] tcp_sendmsg+0x2f/0x50 [ 1241.452327][T28934] __sock_sendmsg+0x19c/0x270 [ 1241.452360][T28934] __sys_sendto+0x3bd/0x520 [ 1241.452386][T28934] ? __pfx___sys_sendto+0x10/0x10 [ 1241.452405][T28934] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1241.452454][T28934] ? __fget_files+0x3a0/0x420 [ 1241.452488][T28934] ? ksys_write+0x22a/0x250 [ 1241.452523][T28934] ? __pfx_ksys_write+0x10/0x10 [ 1241.452559][T28934] __x64_sys_sendto+0xde/0x100 [ 1241.452586][T28934] do_syscall_64+0xfa/0xfa0 [ 1241.452627][T28934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.452649][T28934] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1241.452671][T28934] ? clear_bhb_loop+0x60/0xb0 [ 1241.452697][T28934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.452719][T28934] RIP: 0033:0x7fe34638f749 [ 1241.452738][T28934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1241.452757][T28934] RSP: 002b:00007fe3472c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1241.452781][T28934] RAX: ffffffffffffffda RBX: 00007fe3465e5fa0 RCX: 00007fe34638f749 [ 1241.452799][T28934] RDX: fffffffffffffe4f RSI: 0000200000000100 RDI: 0000000000000003 [ 1241.452814][T28934] RBP: 00007fe3472c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1241.452829][T28934] R10: 000000000404c801 R11: 0000000000000246 R12: 0000000000000001 [ 1241.452843][T28934] R13: 00007fe3465e6038 R14: 00007fe3465e5fa0 R15: 00007fe34670fa28 [ 1241.452877][T28934] [ 1241.795535][T28937] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1241.941742][T28939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6519'. [ 1242.104661][T28942] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6520'. [ 1242.402416][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 1242.402432][ T30] audit: type=1326 audit(1763741593.303:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28949 comm="syz.1.6524" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4eb78f749 code=0x0 [ 1242.476179][T27266] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1242.639859][T27266] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1242.664381][T27266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.672253][T28959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1242.708303][T28959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1242.731694][T27266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.775108][T27266] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1242.794762][T27266] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1242.806201][T27266] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1242.814365][T27266] usb 4-1: Manufacturer: syz [ 1242.827454][T27266] usb 4-1: config 0 descriptor?? [ 1242.890009][T28964] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 1242.896597][T28964] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1242.911288][T28964] vhci_hcd vhci_hcd.0: Device attached [ 1243.215189][T28965] vhci_hcd: connection closed [ 1243.235375][T19099] vhci_hcd: stop threads [ 1243.260074][T27266] appleir 0003:05AC:8243.0027: item fetching failed at offset 0/1 [ 1243.268657][T19099] vhci_hcd: release socket [ 1243.274612][T19099] vhci_hcd: disconnect device [ 1243.280502][ T5893] usb 44-1: SetAddress Request (2) to port 0 [ 1243.287105][ T5893] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1243.299191][T27266] appleir 0003:05AC:8243.0027: parse failed [ 1243.311686][T27266] appleir 0003:05AC:8243.0027: probe with driver appleir failed with error -22 [ 1243.326554][ T5893] usb 44-1: enqueue for inactive port 0 [ 1243.548178][T28945] netlink: 'syz.3.6522': attribute type 1 has an invalid length. [ 1243.636288][T28981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6531'. [ 1243.664757][T28980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6522'. [ 1243.679820][T28945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1243.767300][ T5893] usb usb44-port1: attempt power cycle [ 1243.795872][T28945] vlan2: entered allmulticast mode [ 1243.801809][T28945] bond0: entered allmulticast mode [ 1244.057584][T28985] tipc: Enabled bearer , priority 0 [ 1244.066226][ T9] usb 4-1: USB disconnect, device number 94 [ 1244.121098][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.129505][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.364957][T28985] syzkaller0: entered promiscuous mode [ 1244.375787][T28985] syzkaller0: entered allmulticast mode [ 1244.550684][T28985] tipc: Resetting bearer [ 1244.560145][ T5893] usb usb44-port1: unable to enumerate USB device [ 1244.591805][T28984] tipc: Resetting bearer [ 1244.650126][T28984] tipc: Disabling bearer [ 1244.998181][T28994] FAULT_INJECTION: forcing a failure. [ 1244.998181][T28994] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1245.030052][T28994] CPU: 1 UID: 0 PID: 28994 Comm: syz.5.6535 Not tainted syzkaller #0 PREEMPT(full) [ 1245.030084][T28994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1245.030099][T28994] Call Trace: [ 1245.030108][T28994] [ 1245.030118][T28994] dump_stack_lvl+0x189/0x250 [ 1245.030155][T28994] ? __pfx____ratelimit+0x10/0x10 [ 1245.030187][T28994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1245.030218][T28994] ? __pfx__printk+0x10/0x10 [ 1245.030243][T28994] ? fs_reclaim_acquire+0x7d/0x100 [ 1245.030290][T28994] should_fail_ex+0x414/0x560 [ 1245.030341][T28994] prepare_alloc_pages+0x213/0x610 [ 1245.030372][T28994] __alloc_frozen_pages_noprof+0x123/0x370 [ 1245.030401][T28994] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1245.030423][T28994] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1245.030465][T28994] ? policy_nodemask+0x27c/0x720 [ 1245.030484][T28994] ? __lock_acquire+0xab9/0xd20 [ 1245.030513][T28994] alloc_pages_mpol+0x232/0x4a0 [ 1245.030542][T28994] vma_alloc_folio_noprof+0xe4/0x200 [ 1245.030569][T28994] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1245.030608][T28994] folio_prealloc+0x30/0x180 [ 1245.030644][T28994] __handle_mm_fault+0x2a8b/0x5400 [ 1245.030694][T28994] ? __pfx___handle_mm_fault+0x10/0x10 [ 1245.030749][T28994] ? find_vma+0xe7/0x160 [ 1245.030778][T28994] ? __pfx_find_vma+0x10/0x10 [ 1245.030811][T28994] handle_mm_fault+0x40a/0x8e0 [ 1245.030854][T28994] do_user_addr_fault+0x764/0x1380 [ 1245.030897][T28994] exc_page_fault+0x82/0x100 [ 1245.030934][T28994] asm_exc_page_fault+0x26/0x30 [ 1245.030955][T28994] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 1245.030982][T28994] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 1245.031002][T28994] RSP: 0018:ffffc9000afa72d8 EFLAGS: 00050216 [ 1245.031023][T28994] RAX: 0005001000000020 RBX: ffff88807f50888c RCX: 0000000000000020 [ 1245.031040][T28994] RDX: 0000000000000000 RSI: ffff88807f50888c RDI: 00002000000036c0 [ 1245.031056][T28994] RBP: ffffc9000afa7450 R08: ffff88807f5088ab R09: 1ffff1100fea1115 [ 1245.031074][T28994] R10: dffffc0000000000 R11: ffffed100fea1116 R12: 1ffff920015f4f77 [ 1245.031091][T28994] R13: 00002000000036c0 R14: ffffc9000afa7bc8 R15: 0000000000000020 [ 1245.031128][T28994] _copy_to_iter+0x24f/0x1790 [ 1245.031158][T28994] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1245.031190][T28994] ? lockdep_hardirqs_on+0x9c/0x150 [ 1245.031226][T28994] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1245.031259][T28994] ? __pfx__copy_to_iter+0x10/0x10 [ 1245.031285][T28994] ? remove_wait_queue+0x33/0x120 [ 1245.031328][T28994] ? sk_wait_data+0x404/0x4a0 [ 1245.031364][T28994] __skb_datagram_iter+0x41a/0x990 [ 1245.031482][T28994] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1245.031520][T28994] skb_copy_datagram_iter+0xc5/0x230 [ 1245.031553][T28994] tcp_recvmsg_locked+0xeb4/0x3650 [ 1245.031628][T28994] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 1245.031651][T28994] ? __lock_acquire+0xab9/0xd20 [ 1245.031683][T28994] ? __lock_acquire+0xab9/0xd20 [ 1245.031720][T28994] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1245.031745][T28994] ? lockdep_hardirqs_on+0x9c/0x150 [ 1245.031779][T28994] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1245.031816][T28994] tcp_recvmsg+0x210/0x810 [ 1245.031838][T28994] ? __pfx___might_resched+0x10/0x10 [ 1245.031867][T28994] ? __pfx_tcp_recvmsg+0x10/0x10 [ 1245.031893][T28994] ? aa_file_perm+0x13a/0x1550 [ 1245.031921][T28994] ? aa_sk_perm+0x81e/0x950 [ 1245.031955][T28994] ? __pfx_tcp_recvmsg+0x10/0x10 [ 1245.031976][T28994] inet6_recvmsg+0x138/0x6b0 [ 1245.032060][T28994] ? __pfx_aa_sk_perm+0x10/0x10 [ 1245.032096][T28994] ? __pfx_inet6_recvmsg+0x10/0x10 [ 1245.032127][T28994] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1245.032148][T28994] ? security_socket_recvmsg+0x7e/0x2e0 [ 1245.032202][T28994] sock_recvmsg+0x105/0x270 [ 1245.032239][T28994] sock_read_iter+0x231/0x2f0 [ 1245.032272][T28994] ? __pfx_sock_read_iter+0x10/0x10 [ 1245.032321][T28994] ? bpf_lsm_file_permission+0x9/0x20 [ 1245.032346][T28994] ? security_file_permission+0x75/0x290 [ 1245.032381][T28994] vfs_read+0x55a/0xa30 [ 1245.032423][T28994] ? __pfx_vfs_read+0x10/0x10 [ 1245.032466][T28994] ? __fget_files+0x2a/0x420 [ 1245.032500][T28994] ksys_read+0x145/0x250 [ 1245.032535][T28994] ? __pfx_ksys_read+0x10/0x10 [ 1245.032571][T28994] ? do_syscall_64+0xbe/0xfa0 [ 1245.032609][T28994] do_syscall_64+0xfa/0xfa0 [ 1245.032640][T28994] ? lockdep_hardirqs_on+0x9c/0x150 [ 1245.032673][T28994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.032696][T28994] ? clear_bhb_loop+0x60/0xb0 [ 1245.032724][T28994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.032746][T28994] RIP: 0033:0x7f7441b8f749 [ 1245.032767][T28994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1245.032786][T28994] RSP: 002b:00007f7442979038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1245.032810][T28994] RAX: ffffffffffffffda RBX: 00007f7441de5fa0 RCX: 00007f7441b8f749 [ 1245.032827][T28994] RDX: 0000000000002020 RSI: 00002000000036c0 RDI: 0000000000000004 [ 1245.032846][T28994] RBP: 00007f7442979090 R08: 0000000000000000 R09: 0000000000000000 [ 1245.032860][T28994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1245.032874][T28994] R13: 00007f7441de6038 R14: 00007f7441de5fa0 R15: 00007f7441f0fa28 [ 1245.032911][T28994] [ 1245.552710][ C1] vkms_vblank_simulate: vblank timer overrun [ 1245.987561][T29020] FAULT_INJECTION: forcing a failure. [ 1245.987561][T29020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1246.014407][T29020] CPU: 1 UID: 0 PID: 29020 Comm: syz.1.6546 Not tainted syzkaller #0 PREEMPT(full) [ 1246.014440][T29020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1246.014455][T29020] Call Trace: [ 1246.014465][T29020] [ 1246.014474][T29020] dump_stack_lvl+0x189/0x250 [ 1246.014520][T29020] ? __pfx____ratelimit+0x10/0x10 [ 1246.014553][T29020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1246.014584][T29020] ? __pfx__printk+0x10/0x10 [ 1246.014621][T29020] should_fail_ex+0x414/0x560 [ 1246.014663][T29020] _copy_to_user+0x31/0xb0 [ 1246.014696][T29020] simple_read_from_buffer+0xe1/0x170 [ 1246.014738][T29020] proc_fail_nth_read+0x1b3/0x220 [ 1246.014772][T29020] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1246.014806][T29020] ? rw_verify_area+0x2a6/0x4d0 [ 1246.014837][T29020] ? __lock_acquire+0xab9/0xd20 [ 1246.014858][T29020] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1246.014889][T29020] vfs_read+0x200/0xa30 [ 1246.014920][T29020] ? fdget_pos+0x247/0x320 [ 1246.014947][T29020] ? __pfx___mutex_lock+0x10/0x10 [ 1246.014983][T29020] ? __pfx_vfs_read+0x10/0x10 [ 1246.015017][T29020] ? __fget_files+0x2a/0x420 [ 1246.015044][T29020] ? __fget_files+0x3a0/0x420 [ 1246.015065][T29020] ? __fget_files+0x2a/0x420 [ 1246.015097][T29020] ksys_read+0x145/0x250 [ 1246.015132][T29020] ? __pfx_ksys_read+0x10/0x10 [ 1246.015168][T29020] ? do_syscall_64+0xbe/0xfa0 [ 1246.015206][T29020] do_syscall_64+0xfa/0xfa0 [ 1246.015243][T29020] ? lockdep_hardirqs_on+0x9c/0x150 [ 1246.015276][T29020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.015299][T29020] ? clear_bhb_loop+0x60/0xb0 [ 1246.015328][T29020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.015350][T29020] RIP: 0033:0x7fa4eb78e15c [ 1246.015371][T29020] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1246.015391][T29020] RSP: 002b:00007fa4ec64f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1246.015415][T29020] RAX: ffffffffffffffda RBX: 00007fa4eb9e5fa0 RCX: 00007fa4eb78e15c [ 1246.015433][T29020] RDX: 000000000000000f RSI: 00007fa4ec64f0a0 RDI: 0000000000000005 [ 1246.015448][T29020] RBP: 00007fa4ec64f090 R08: 0000000000000000 R09: 0000000000000000 [ 1246.015462][T29020] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 1246.015477][T29020] R13: 00007fa4eb9e6038 R14: 00007fa4eb9e5fa0 R15: 00007fa4ebb0fa28 [ 1246.015521][T29020] [ 1246.249774][ C1] vkms_vblank_simulate: vblank timer overrun [ 1246.351757][T29027] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6549'. [ 1246.667439][T27266] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 1246.826211][ T9] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 1246.958356][T27266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1246.978598][ T9] usb 2-1: config 0 has an invalid interface number: 207 but max is 0 [ 1247.043575][T29037] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1247.294968][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.298273][T27266] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1247.321406][ T9] usb 2-1: config 0 has no interface number 0 [ 1247.361842][T27266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.375085][ T9] usb 2-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 1247.411536][T27266] usb 3-1: config 0 descriptor?? [ 1247.418294][T29039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1247.427528][T29025] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1247.441566][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.445909][T29039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1247.468345][ T9] usb 2-1: Product: syz [ 1247.477756][ T9] usb 2-1: Manufacturer: syz [ 1247.489493][ T9] usb 2-1: SerialNumber: syz [ 1247.519131][ T9] usb 2-1: config 0 descriptor?? [ 1247.739411][ T9] qmi_wwan 2-1:0.207: probe with driver qmi_wwan failed with error -22 [ 1247.762035][ T9] usb 2-1: USB disconnect, device number 93 [ 1247.806191][ T49] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1247.853276][T27266] elan 0003:04F3:0755.0028: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 1247.967344][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 1247.987892][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 1248.018358][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 1248.068408][ T49] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1248.082018][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.093850][T27266] usb 3-1: USB disconnect, device number 110 [ 1248.103459][ T49] usb 4-1: Product: syz [ 1248.109935][ T49] usb 4-1: Manufacturer: syz [ 1248.119652][ T49] usb 4-1: SerialNumber: syz [ 1248.153494][ T49] usb 4-1: config 0 descriptor?? [ 1248.184245][ T49] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1248.380374][T29041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.396628][T29041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1248.413620][T28407] usb 4-1: Failed to submit usb control message: -71 [ 1248.414894][T27266] usb 4-1: USB disconnect, device number 95 [ 1248.431575][T28407] usb 4-1: unable to send the bmi data to the device: -71 [ 1248.439579][T28407] usb 4-1: unable to get target info from device [ 1248.448881][T28407] usb 4-1: could not get target info (-71) [ 1248.455867][T28407] usb 4-1: could not probe fw (-71) [ 1249.137190][T29064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1249.394759][T29069] netlink: 'syz.3.6559': attribute type 10 has an invalid length. [ 1249.583183][T29071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6560'. [ 1249.789938][T29074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6560'. [ 1250.071344][T29086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6561'. [ 1250.082442][T29086] Cannot find del_set index 0 as target [ 1250.414236][ T30] audit: type=1326 audit(1763741601.313:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29038 comm="syz.4.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34638f749 code=0x7fc00000 [ 1250.755170][T29097] syzkaller0: entered promiscuous mode [ 1250.772208][T29097] syzkaller0: entered allmulticast mode [ 1251.459305][T29116] FAULT_INJECTION: forcing a failure. [ 1251.459305][T29116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1251.497613][T29116] CPU: 1 UID: 0 PID: 29116 Comm: syz.4.6568 Not tainted syzkaller #0 PREEMPT(full) [ 1251.497635][T29116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1251.497653][T29116] Call Trace: [ 1251.497660][T29116] [ 1251.497668][T29116] dump_stack_lvl+0x189/0x250 [ 1251.497695][T29116] ? __pfx____ratelimit+0x10/0x10 [ 1251.497717][T29116] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1251.497740][T29116] ? __pfx__printk+0x10/0x10 [ 1251.497756][T29116] ? __might_fault+0xb0/0x130 [ 1251.497788][T29116] should_fail_ex+0x414/0x560 [ 1251.497817][T29116] _copy_from_iter+0x1de/0x1790 [ 1251.497841][T29116] ? rcu_is_watching+0x15/0xb0 [ 1251.497864][T29116] ? kmalloc_reserve+0xbd/0x290 [ 1251.497880][T29116] ? __pfx__copy_from_iter+0x10/0x10 [ 1251.497903][T29116] ? __build_skb_around+0x262/0x3f0 [ 1251.497922][T29116] ? skb_put+0x11b/0x210 [ 1251.497940][T29116] pfkey_sendmsg+0x230/0x1090 [ 1251.497968][T29116] ? __pfx___might_resched+0x10/0x10 [ 1251.497992][T29116] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1251.498019][T29116] ? aa_sk_perm+0x81e/0x950 [ 1251.498045][T29116] ? __pfx_aa_sk_perm+0x10/0x10 [ 1251.498066][T29116] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1251.498096][T29116] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1251.498122][T29116] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1251.498138][T29116] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1251.498160][T29116] __sock_sendmsg+0x21c/0x270 [ 1251.498185][T29116] ____sys_sendmsg+0x505/0x830 [ 1251.498207][T29116] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1251.498232][T29116] ? import_iovec+0x74/0xa0 [ 1251.498255][T29116] ___sys_sendmsg+0x21f/0x2a0 [ 1251.498275][T29116] ? __pfx____sys_sendmsg+0x10/0x10 [ 1251.498319][T29116] ? __fget_files+0x2a/0x420 [ 1251.498334][T29116] ? __fget_files+0x3a0/0x420 [ 1251.498357][T29116] __x64_sys_sendmsg+0x19b/0x260 [ 1251.498378][T29116] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1251.498403][T29116] ? __pfx_ksys_write+0x10/0x10 [ 1251.498429][T29116] ? do_syscall_64+0xbe/0xfa0 [ 1251.498457][T29116] do_syscall_64+0xfa/0xfa0 [ 1251.498479][T29116] ? lockdep_hardirqs_on+0x9c/0x150 [ 1251.498503][T29116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.498519][T29116] ? clear_bhb_loop+0x60/0xb0 [ 1251.498539][T29116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.498554][T29116] RIP: 0033:0x7fe34638f749 [ 1251.498570][T29116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1251.498588][T29116] RSP: 002b:00007fe3472c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1251.498612][T29116] RAX: ffffffffffffffda RBX: 00007fe3465e5fa0 RCX: 00007fe34638f749 [ 1251.498630][T29116] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1251.498652][T29116] RBP: 00007fe3472c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1251.498667][T29116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1251.498681][T29116] R13: 00007fe3465e6038 R14: 00007fe3465e5fa0 R15: 00007fe34670fa28 [ 1251.498707][T29116] [ 1252.176157][ T5937] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1252.338495][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1252.366231][ T5937] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1252.389093][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.431045][ T5937] usb 6-1: config 0 descriptor?? [ 1252.446984][T29124] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1252.504086][T29138] FAULT_INJECTION: forcing a failure. [ 1252.504086][T29138] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.540652][T29138] CPU: 1 UID: 0 PID: 29138 Comm: syz.2.6572 Not tainted syzkaller #0 PREEMPT(full) [ 1252.540686][T29138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1252.540701][T29138] Call Trace: [ 1252.540712][T29138] [ 1252.540723][T29138] dump_stack_lvl+0x189/0x250 [ 1252.540764][T29138] ? __pfx____ratelimit+0x10/0x10 [ 1252.540796][T29138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1252.540827][T29138] ? __pfx__printk+0x10/0x10 [ 1252.540854][T29138] ? __pfx___might_resched+0x10/0x10 [ 1252.540880][T29138] ? fs_reclaim_acquire+0x7d/0x100 [ 1252.540921][T29138] should_fail_ex+0x414/0x560 [ 1252.540961][T29138] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1252.540992][T29138] should_failslab+0xa8/0x100 [ 1252.541015][T29138] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1252.541042][T29138] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 1252.541074][T29138] ? proc_alloc_inode+0x2a/0xc0 [ 1252.541103][T29138] ? preempt_schedule_common+0x83/0xd0 [ 1252.541140][T29138] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1252.541169][T29138] proc_alloc_inode+0x2a/0xc0 [ 1252.541200][T29138] alloc_inode+0x6a/0x1b0 [ 1252.541237][T29138] new_inode+0x22/0x170 [ 1252.541265][T29138] proc_pid_make_inode+0x21/0x130 [ 1252.541291][T29138] proc_fd_instantiate+0x54/0x2f0 [ 1252.541315][T29138] ? fput+0xa0/0xd0 [ 1252.541344][T29138] proc_lookupfd_common+0x138/0x240 [ 1252.541372][T29138] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 1252.541397][T29138] ? __pfx_proc_lookupfd_common+0x10/0x10 [ 1252.541429][T29138] ? __init_waitqueue_head+0xa9/0x150 [ 1252.541469][T29138] __lookup_slow+0x297/0x3d0 [ 1252.541500][T29138] ? __pfx___lookup_slow+0x10/0x10 [ 1252.541544][T29138] ? bpf_lsm_inode_permission+0x9/0x20 [ 1252.541567][T29138] ? security_inode_permission+0xb7/0x310 [ 1252.541598][T29138] ? down_read+0x1ad/0x2e0 [ 1252.541623][T29138] lookup_slow+0x53/0x70 [ 1252.541649][T29138] walk_component+0x2d2/0x400 [ 1252.541671][T29138] ? path_lookupat+0x156/0x430 [ 1252.541699][T29138] path_lookupat+0x163/0x430 [ 1252.541733][T29138] filename_lookup+0x212/0x570 [ 1252.541764][T29138] ? __pfx_filename_lookup+0x10/0x10 [ 1252.541805][T29138] ? __pfx_kfree_link+0x10/0x10 [ 1252.541843][T29138] ? kmem_cache_alloc_noprof+0x3b8/0x6e0 [ 1252.541875][T29138] ? getname_kernel+0x146/0x2f0 [ 1252.541905][T29138] ? getname_kernel+0x20e/0x2f0 [ 1252.541932][T29138] kern_path+0x35/0x50 [ 1252.541958][T29138] tomoyo_realpath_nofollow+0x8b/0x100 [ 1252.541995][T29138] ? __pfx_tomoyo_realpath_nofollow+0x10/0x10 [ 1252.542044][T29138] tomoyo_find_next_domain+0x251/0x1aa0 [ 1252.542073][T29138] ? __lock_acquire+0xab9/0xd20 [ 1252.542107][T29138] ? tomoyo_bprm_check_security+0xf0/0x180 [ 1252.542130][T29138] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 1252.542169][T29138] ? tomoyo_bprm_check_security+0xf0/0x180 [ 1252.542193][T29138] tomoyo_bprm_check_security+0x11c/0x180 [ 1252.542221][T29138] security_bprm_check+0x89/0x270 [ 1252.542255][T29138] bprm_execve+0x8ee/0x1450 [ 1252.542306][T29138] ? __pfx_bprm_execve+0x10/0x10 [ 1252.542338][T29138] ? copy_string_kernel+0x25f/0x2a0 [ 1252.542375][T29138] do_execveat_common+0x510/0x6a0 [ 1252.542422][T29138] __x64_sys_execveat+0xc4/0xe0 [ 1252.542459][T29138] do_syscall_64+0xfa/0xfa0 [ 1252.542494][T29138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.542517][T29138] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1252.542550][T29138] ? clear_bhb_loop+0x60/0xb0 [ 1252.542578][T29138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.542601][T29138] RIP: 0033:0x7f68cab8f749 [ 1252.542623][T29138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1252.542644][T29138] RSP: 002b:00007f68c8df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1252.542672][T29138] RAX: ffffffffffffffda RBX: 00007f68cade5fa0 RCX: 00007f68cab8f749 [ 1252.542689][T29138] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1252.542705][T29138] RBP: 00007f68c8df6090 R08: 0000000000001000 R09: 0000000000000000 [ 1252.542719][T29138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1252.542733][T29138] R13: 00007f68cade6038 R14: 00007f68cade5fa0 R15: 00007f68caf0fa28 [ 1252.542772][T29138] [ 1253.040613][T29143] ªªªªªª: renamed from vlan0 (while UP) [ 1253.076270][T29141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1253.103275][T29141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.227001][ T5937] elan 0003:04F3:0755.0029: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1253.336172][ T49] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1253.436349][ T5937] usb 6-1: USB disconnect, device number 3 [ 1253.497034][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 1253.506745][ T49] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.524928][ T49] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1253.546627][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.554798][ T49] usb 4-1: Product: syz [ 1253.559173][ T49] usb 4-1: Manufacturer: syz [ 1253.563941][ T49] usb 4-1: SerialNumber: syz [ 1253.571907][ T49] usb 4-1: config 0 descriptor?? [ 1253.584437][ T49] usb 4-1: bad CDC descriptors [ 1253.592191][ T49] usb 4-1: unsupported MDLM descriptors [ 1253.783547][ T49] usb 4-1: USB disconnect, device number 96 [ 1254.130332][T29178] netlink: 996 bytes leftover after parsing attributes in process `syz.2.6580'. [ 1254.301471][T29184] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1254.416182][ T5893] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1254.570305][T29187] tipc: Enabled bearer , priority 0 [ 1254.596579][T29187] syzkaller0: entered promiscuous mode [ 1254.602127][T29187] syzkaller0: entered allmulticast mode [ 1254.605343][ T5893] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.634342][ T5893] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1254.652292][T29187] tipc: Resetting bearer [ 1254.675321][T29191] netlink: 'syz.4.6584': attribute type 2 has an invalid length. [ 1254.676290][ T5893] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1254.705448][T29186] tipc: Resetting bearer [ 1254.713661][T29191] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1254.716481][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1254.746340][ T5893] usb 3-1: SerialNumber: syz [ 1254.761584][T29186] tipc: Disabling bearer [ 1254.773882][T29193] Cannot find del_set index 0 as target [ 1255.406718][ T49] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1255.570332][ T49] usb 4-1: Using ep0 maxpacket: 16 [ 1255.622333][ T49] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 1255.685959][ T5893] usb 3-1: 0:2 : does not exist [ 1255.696395][ T49] usb 4-1: config 252 has no interface number 0 [ 1255.717963][ T5893] usb 3-1: unit 5: unexpected type 0x0c [ 1255.741066][ T49] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1255.802808][ T49] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1255.812394][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.833775][ T49] usb 4-1: Product: syz [ 1255.847327][ T49] usb 4-1: Manufacturer: syz [ 1255.852236][ T49] usb 4-1: SerialNumber: syz [ 1255.902872][ T5893] usb 3-1: USB disconnect, device number 111 [ 1256.073926][T27867] udevd[27867]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1256.141246][ T49] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1256.756213][ T49] usb 3-1: new low-speed USB device number 112 using dummy_hcd [ 1256.908883][ T49] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1256.924028][ T49] usb 3-1: config 7 has an invalid interface number: 67 but max is 0 [ 1256.933188][ T49] usb 3-1: config 7 has no interface number 0 [ 1256.997923][ T49] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 1257.009225][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.022647][ T49] usb 3-1: Product: 㯑 [ 1257.035169][ T49] usb 3-1: Manufacturer: ë–’ [ 1257.237189][T28393] usb 4-1: Failed to submit usb control message: -110 [ 1257.245696][T28393] usb 4-1: unable to send the bmi data to the device: -110 [ 1257.278552][ T49] usb 3-1: USB disconnect, device number 112 [ 1257.284076][T28393] usb 4-1: unable to get target info from device [ 1257.302897][T28393] usb 4-1: could not get target info (-110) [ 1257.319175][T28393] usb 4-1: could not probe fw (-110) [ 1257.697583][T29221] syzkaller0: entered promiscuous mode [ 1257.731326][T29222] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1257.902086][T29221] syzkaller0: entered allmulticast mode [ 1257.933860][T29223] tipc: Enabled bearer , priority 0 [ 1257.999383][T29220] tipc: Resetting bearer [ 1258.053849][T29220] tipc: Disabling bearer [ 1258.507934][ T5921] usb 4-1: USB disconnect, device number 97 [ 1258.549233][T29233] netlink: zone id is out of range [ 1258.595533][T29233] netlink: zone id is out of range [ 1258.626466][T29233] netlink: zone id is out of range [ 1258.683998][T29233] netlink: zone id is out of range [ 1258.806829][T29233] netlink: zone id is out of range [ 1258.825434][T29233] netlink: zone id is out of range [ 1258.832099][T29233] netlink: zone id is out of range [ 1258.886365][T29233] netlink: zone id is out of range [ 1259.626584][T21017] bridge_slave_1: left allmulticast mode [ 1259.637118][T21017] bridge_slave_1: left promiscuous mode [ 1259.677264][T21017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.780034][T21017] bridge_slave_0: left allmulticast mode [ 1259.785787][T21017] bridge_slave_0: left promiscuous mode [ 1259.826476][T21017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.284536][T29258] Cannot find map_set index 135 as target [ 1261.200315][T29269] netlink: 'syz.5.6608': attribute type 13 has an invalid length. [ 1261.209862][T29269] netlink: 'syz.5.6608': attribute type 17 has an invalid length. [ 1261.224472][T21017] bridge0 (unregistering): left promiscuous mode [ 1261.418547][T29278] fuse: Bad value for 'fd' [ 1261.528194][T18531] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1261.572994][T21017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1261.585129][T21017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1261.597516][T21017] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1261.609246][T21017] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1261.619948][T21017] bond0 (unregistering): Released all slaves [ 1261.686116][T18531] usb 3-1: Using ep0 maxpacket: 8 [ 1261.693441][T18531] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1261.705218][T18531] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1261.716270][T26173] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1261.732883][T18531] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1261.751644][T18531] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1261.774397][T18531] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1261.787594][T18531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.846964][T29269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.854242][T29269] bridge0: port 2(bridge_slave_1) entered listening state [ 1261.861977][T29269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.869183][T29269] bridge0: port 1(bridge_slave_0) entered listening state [ 1261.894317][T29269] net_ratelimit: 8 callbacks suppressed [ 1261.894341][T29269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1261.916896][T26173] usb 2-1: Using ep0 maxpacket: 8 [ 1261.929979][T26173] usb 2-1: config index 0 descriptor too short (expected 45686, got 18) [ 1261.941656][T26173] usb 2-1: config 18 has too many interfaces: 157, using maximum allowed: 32 [ 1261.952462][T26173] usb 2-1: config 18 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.970402][T26173] usb 2-1: config 18 has 0 interfaces, different from the descriptor's value: 157 [ 1261.985223][T21017] tipc: Left network mode [ 1261.989013][T26173] usb 2-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 1261.999856][T26173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.029891][T18531] usb 3-1: GET_CAPABILITIES returned 0 [ 1262.043346][T18531] usbtmc 3-1:16.0: can't read capabilities [ 1262.061047][T26173] usb 2-1: Product: syz [ 1262.072790][T26173] usb 2-1: Manufacturer: syz [ 1262.086976][T26173] usb 2-1: SerialNumber: syz [ 1262.285366][T29281] FAULT_INJECTION: forcing a failure. [ 1262.285366][T29281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1262.304565][T29281] CPU: 0 UID: 0 PID: 29281 Comm: syz.5.6613 Not tainted syzkaller #0 PREEMPT(full) [ 1262.304597][T29281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1262.304612][T29281] Call Trace: [ 1262.304623][T29281] [ 1262.304633][T29281] dump_stack_lvl+0x189/0x250 [ 1262.304670][T29281] ? __pfx____ratelimit+0x10/0x10 [ 1262.304702][T29281] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1262.304733][T29281] ? __pfx__printk+0x10/0x10 [ 1262.304771][T29281] should_fail_ex+0x414/0x560 [ 1262.304813][T29281] _copy_to_user+0x31/0xb0 [ 1262.304845][T29281] simple_read_from_buffer+0xe1/0x170 [ 1262.304887][T29281] proc_fail_nth_read+0x1b3/0x220 [ 1262.304920][T29281] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1262.304954][T29281] ? rw_verify_area+0x2a6/0x4d0 [ 1262.304984][T29281] ? __lock_acquire+0xab9/0xd20 [ 1262.305005][T29281] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1262.305036][T29281] vfs_read+0x200/0xa30 [ 1262.305066][T29281] ? fdget_pos+0x247/0x320 [ 1262.305093][T29281] ? __pfx___mutex_lock+0x10/0x10 [ 1262.305130][T29281] ? __pfx_vfs_read+0x10/0x10 [ 1262.305163][T29281] ? __fget_files+0x2a/0x420 [ 1262.305190][T29281] ? __fget_files+0x3a0/0x420 [ 1262.305211][T29281] ? __fget_files+0x2a/0x420 [ 1262.305243][T29281] ksys_read+0x145/0x250 [ 1262.305273][T29281] ? __fget_files+0x2a/0x420 [ 1262.305295][T29281] ? __pfx_ksys_read+0x10/0x10 [ 1262.305329][T29281] ? do_syscall_64+0xbe/0xfa0 [ 1262.305366][T29281] do_syscall_64+0xfa/0xfa0 [ 1262.305402][T29281] ? lockdep_hardirqs_on+0x9c/0x150 [ 1262.305434][T29281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.305456][T29281] ? clear_bhb_loop+0x60/0xb0 [ 1262.305482][T29281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.305510][T29281] RIP: 0033:0x7f7441b8e15c [ 1262.305530][T29281] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1262.305550][T29281] RSP: 002b:00007f7442979030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1262.305575][T29281] RAX: ffffffffffffffda RBX: 00007f7441de5fa0 RCX: 00007f7441b8e15c [ 1262.305592][T29281] RDX: 000000000000000f RSI: 00007f74429790a0 RDI: 0000000000000005 [ 1262.305606][T29281] RBP: 00007f7442979090 R08: 0000000000000000 R09: 0000000000000000 [ 1262.305620][T29281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1262.305633][T29281] R13: 00007f7441de6038 R14: 00007f7441de5fa0 R15: 00007f7441f0fa28 [ 1262.305670][T29281] [ 1262.580448][T29279] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1262.587927][ C0] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1262.595025][ C0] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1262.711852][T21017] hsr_slave_0: left promiscuous mode [ 1262.727699][T21017] hsr_slave_1: left promiscuous mode [ 1262.737671][T21017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1262.746812][T21017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.755869][T21017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1262.769107][T21017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1262.808449][T21017] veth1_macvtap: left promiscuous mode [ 1262.814835][T21017] veth0_macvtap: left promiscuous mode [ 1262.823097][T21017] veth1_vlan: left promiscuous mode [ 1262.832430][T21017] veth0_vlan: left promiscuous mode [ 1262.893034][T29293] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6615'. [ 1263.572758][T21017] team0 (unregistering): Port device team_slave_1 removed [ 1263.635149][T21017] team0 (unregistering): Port device team_slave_0 removed [ 1264.290899][ T5921] usb 3-1: USB disconnect, device number 113 [ 1264.438179][T29303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6618'. [ 1264.443925][T18531] usb 2-1: USB disconnect, device number 94 [ 1264.468248][T29294] tipc: Enabling of bearer rejected, failed to enable media [ 1264.749345][T29310] tipc: Enabling of bearer rejected, failed to enable media [ 1264.764213][T29314] binder: 29309:29314 ioctl c0306201 200000000080 returned -14 [ 1264.788404][T29314] binder: BINDER_SET_CONTEXT_MGR already set [ 1264.803435][T29314] binder: 29309:29314 ioctl 4018620d 200000000040 returned -16 [ 1264.994945][T21017] IPVS: stop unused estimator thread 0... [ 1265.084000][T29322] netlink: 'syz.2.6627': attribute type 4 has an invalid length. [ 1265.376343][T18531] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1265.609641][T18531] usb 2-1: Using ep0 maxpacket: 8 [ 1265.631364][T18531] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1265.650531][T29331] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1265.657117][T29331] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1265.667771][T29331] vhci_hcd vhci_hcd.0: Device attached [ 1265.675395][T18531] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1265.774849][T18531] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1265.794719][T29335] fuse: Bad value for 'fd' [ 1265.799580][T18531] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1265.814261][T18531] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1265.824462][T18531] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.066153][T29332] vhci_hcd: connection closed [ 1266.165289][T19099] vhci_hcd: stop threads [ 1266.184798][T19099] vhci_hcd: release socket [ 1266.194011][T19099] vhci_hcd: disconnect device [ 1266.208318][T26173] usb 40-1: enqueue for inactive port 0 [ 1266.336240][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1266.486494][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1266.501839][ T9] usb 6-1: config index 0 descriptor too short (expected 45686, got 18) [ 1266.514299][T18531] usb 2-1: GET_CAPABILITIES returned 0 [ 1266.519957][T18531] usbtmc 2-1:16.0: can't read capabilities [ 1266.529170][ T9] usb 6-1: config 18 has too many interfaces: 157, using maximum allowed: 32 [ 1266.575660][ T9] usb 6-1: config 18 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.616707][ T9] usb 6-1: config 18 has 0 interfaces, different from the descriptor's value: 157 [ 1266.674697][ T9] usb 6-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 1266.693031][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.726256][ T5937] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 1266.727427][T26173] usb usb40-port1: attempt power cycle [ 1266.773676][ T9] usb 6-1: Product: syz [ 1266.795791][ T9] usb 6-1: Manufacturer: syz [ 1266.806182][ T9] usb 6-1: SerialNumber: syz [ 1266.900089][ T5937] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1266.909811][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.965678][ T5937] usb 3-1: Product: syz [ 1266.979950][ T5937] usb 3-1: Manufacturer: syz [ 1266.994206][ T5937] usb 3-1: SerialNumber: syz [ 1267.019584][ T5937] usb 3-1: config 0 descriptor?? [ 1267.047933][ T9] IPVS: starting estimator thread 0... [ 1267.096764][T29337] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1267.103935][ C1] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1267.186550][T29345] IPVS: using max 25 ests per chain, 60000 per kthread [ 1267.240161][ T5937] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1267.251305][T29347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6632'. [ 1267.347644][T26173] usb usb40-port1: unable to enumerate USB device [ 1267.488954][T29351] tipc: Enabled bearer , priority 0 [ 1267.499497][T29351] syzkaller0: entered promiscuous mode [ 1267.505271][T29351] syzkaller0: entered allmulticast mode [ 1267.536439][T29351] tipc: Resetting bearer [ 1267.547714][ T5937] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1267.567754][ T5937] usb 3-1: USB disconnect, device number 114 [ 1267.592959][T29350] tipc: Resetting bearer [ 1267.675802][T29350] tipc: Disabling bearer [ 1268.107670][ T5937] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1268.192352][ T5921] usb 2-1: USB disconnect, device number 95 [ 1268.256289][ T5937] usb 3-1: device descriptor read/64, error -71 [ 1268.506215][ T5937] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1268.636233][ T5937] usb 3-1: device descriptor read/64, error -71 [ 1268.728712][ T5893] usb 6-1: USB disconnect, device number 4 [ 1268.748321][ T5937] usb usb3-port1: attempt power cycle [ 1268.802117][ T5921] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1269.276700][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 1269.283772][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.326504][ T5921] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1269.338067][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.354170][ T5921] usb 2-1: config 0 descriptor?? [ 1269.406159][ T5937] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1269.490471][T29383] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1269.552329][ T5937] usb 3-1: device descriptor read/8, error -71 [ 1269.816404][ T5937] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1269.846978][ T5937] usb 3-1: device descriptor read/8, error -71 [ 1269.960649][T29392] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1270.056215][ T5937] usb usb3-port1: unable to enumerate USB device [ 1270.166104][T26173] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1270.319369][T26173] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1270.330972][T26173] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.349112][T26173] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1270.366406][T26173] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1270.383211][T26173] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1270.393273][T26173] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1270.479990][T26173] usb 4-1: Manufacturer: syz [ 1270.532714][T26173] usb 4-1: config 0 descriptor?? [ 1270.559606][ T5921] usbhid 2-1:0.0: can't add hid device: -71 [ 1270.570066][ T5921] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1270.737085][ T5921] usb 2-1: USB disconnect, device number 96 [ 1271.037991][T26173] appleir 0003:05AC:8243.002A: item fetching failed at offset 0/1 [ 1271.064178][T26173] appleir 0003:05AC:8243.002A: parse failed [ 1271.096676][T26173] appleir 0003:05AC:8243.002A: probe with driver appleir failed with error -22 [ 1271.224775][T29390] netlink: 'syz.3.6645': attribute type 1 has an invalid length. [ 1271.276289][T29396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6645'. [ 1271.335299][T29390] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1271.471993][T29396] vlan2: entered allmulticast mode [ 1271.487469][T29396] bond2: entered allmulticast mode [ 1271.573346][T29410] FAULT_INJECTION: forcing a failure. [ 1271.573346][T29410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1271.587979][T29410] CPU: 0 UID: 0 PID: 29410 Comm: syz.4.6651 Not tainted syzkaller #0 PREEMPT(full) [ 1271.588007][T29410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1271.588021][T29410] Call Trace: [ 1271.588030][T29410] [ 1271.588040][T29410] dump_stack_lvl+0x189/0x250 [ 1271.588077][T29410] ? __pfx____ratelimit+0x10/0x10 [ 1271.588108][T29410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1271.588138][T29410] ? __pfx__printk+0x10/0x10 [ 1271.588175][T29410] should_fail_ex+0x414/0x560 [ 1271.588215][T29410] _copy_to_user+0x31/0xb0 [ 1271.588247][T29410] simple_read_from_buffer+0xe1/0x170 [ 1271.588287][T29410] proc_fail_nth_read+0x1b3/0x220 [ 1271.588321][T29410] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1271.588354][T29410] ? rw_verify_area+0x2a6/0x4d0 [ 1271.588383][T29410] ? __lock_acquire+0xab9/0xd20 [ 1271.588404][T29410] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1271.588431][T29410] vfs_read+0x200/0xa30 [ 1271.588460][T29410] ? fdget_pos+0x247/0x320 [ 1271.588484][T29410] ? __pfx___mutex_lock+0x10/0x10 [ 1271.588516][T29410] ? __pfx_vfs_read+0x10/0x10 [ 1271.588546][T29410] ? __fget_files+0x2a/0x420 [ 1271.588570][T29410] ? __fget_files+0x3a0/0x420 [ 1271.588590][T29410] ? __fget_files+0x2a/0x420 [ 1271.588619][T29410] ksys_read+0x145/0x250 [ 1271.588651][T29410] ? __pfx_ksys_read+0x10/0x10 [ 1271.588685][T29410] ? do_syscall_64+0xbe/0xfa0 [ 1271.588721][T29410] do_syscall_64+0xfa/0xfa0 [ 1271.588751][T29410] ? lockdep_hardirqs_on+0x9c/0x150 [ 1271.588783][T29410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.588805][T29410] ? clear_bhb_loop+0x60/0xb0 [ 1271.588841][T29410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.588863][T29410] RIP: 0033:0x7fe34638e15c [ 1271.588883][T29410] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1271.588904][T29410] RSP: 002b:00007fe3472c9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1271.588928][T29410] RAX: ffffffffffffffda RBX: 00007fe3465e5fa0 RCX: 00007fe34638e15c [ 1271.588945][T29410] RDX: 000000000000000f RSI: 00007fe3472c90a0 RDI: 0000000000000004 [ 1271.588960][T29410] RBP: 00007fe3472c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1271.588974][T29410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1271.588987][T29410] R13: 00007fe3465e6038 R14: 00007fe3465e5fa0 R15: 00007fe34670fa28 [ 1271.589022][T29410] [ 1271.902531][ T5921] usb 4-1: USB disconnect, device number 98 [ 1271.910440][T26173] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 1271.966438][T29338] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1271.985834][T29418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1271.995453][T29418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1272.126424][T29338] usb 6-1: Using ep0 maxpacket: 8 [ 1272.134613][T29338] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1272.145400][T29338] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1272.158244][T29338] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1272.169127][T29338] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1272.184984][T29338] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1272.194990][T29338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.416890][T29338] usb 6-1: GET_CAPABILITIES returned 0 [ 1272.422979][T29338] usbtmc 6-1:16.0: can't read capabilities [ 1272.456249][ T5921] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1272.596249][ T5921] usb 2-1: device descriptor read/64, error -71 [ 1273.090150][ T5921] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1273.104735][T29433] FAULT_INJECTION: forcing a failure. [ 1273.104735][T29433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1273.166830][T29433] CPU: 1 UID: 0 PID: 29433 Comm: syz.4.6659 Not tainted syzkaller #0 PREEMPT(full) [ 1273.166863][T29433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1273.166879][T29433] Call Trace: [ 1273.166888][T29433] [ 1273.166898][T29433] dump_stack_lvl+0x189/0x250 [ 1273.166934][T29433] ? __pfx____ratelimit+0x10/0x10 [ 1273.166962][T29433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1273.166993][T29433] ? __pfx__printk+0x10/0x10 [ 1273.167017][T29433] ? __might_fault+0xb0/0x130 [ 1273.167060][T29433] should_fail_ex+0x414/0x560 [ 1273.167094][T29433] _copy_from_user+0x2d/0xb0 [ 1273.167117][T29433] video_usercopy+0x346/0x1450 [ 1273.167280][T29433] ? __pfx___video_do_ioctl+0x10/0x10 [ 1273.167309][T29433] ? __pfx_video_usercopy+0x10/0x10 [ 1273.167352][T29433] ? __fget_files+0x3a0/0x420 [ 1273.167388][T29433] v4l2_ioctl+0x18d/0x1e0 [ 1273.167414][T29433] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1273.167439][T29433] __se_sys_ioctl+0xfc/0x170 [ 1273.167472][T29433] do_syscall_64+0xfa/0xfa0 [ 1273.167504][T29433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.167526][T29433] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1273.167542][T29433] ? clear_bhb_loop+0x60/0xb0 [ 1273.167561][T29433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.167583][T29433] RIP: 0033:0x7fe34638f749 [ 1273.167604][T29433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1273.167625][T29433] RSP: 002b:00007fe3472c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1273.167648][T29433] RAX: ffffffffffffffda RBX: 00007fe3465e5fa0 RCX: 00007fe34638f749 [ 1273.167664][T29433] RDX: 0000200000000500 RSI: 00000000c058565d RDI: 0000000000000004 [ 1273.167679][T29433] RBP: 00007fe3472c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1273.167690][T29433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1273.167699][T29433] R13: 00007fe3465e6038 R14: 00007fe3465e5fa0 R15: 00007fe34670fa28 [ 1273.167726][T29433] [ 1273.371669][ C1] vkms_vblank_simulate: vblank timer overrun [ 1273.676668][ T5921] usb 2-1: device descriptor read/64, error -71 [ 1273.714541][T29435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6660'. [ 1273.727416][T29435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6660'. [ 1273.786710][ T5921] usb usb2-port1: attempt power cycle [ 1274.010011][T29444] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1274.027217][T29444] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6662'. [ 1274.141891][ T5921] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1274.177035][ T5921] usb 2-1: device descriptor read/8, error -71 [ 1274.359071][T26173] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1274.369958][T26173] usb 3-1: can't read configurations, error -71 [ 1274.436106][ T5921] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1274.472377][ T5921] usb 2-1: device descriptor read/8, error -71 [ 1274.556972][ T5893] usb 6-1: USB disconnect, device number 5 [ 1274.670996][ T5921] usb usb2-port1: unable to enumerate USB device [ 1274.820321][T29450] FAULT_INJECTION: forcing a failure. [ 1274.820321][T29450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1274.836796][ T31] INFO: task kworker/1:2:18521 blocked for more than 143 seconds. [ 1274.847672][ T31] Not tainted syzkaller #0 [ 1274.866311][T29450] CPU: 0 UID: 0 PID: 29450 Comm: syz.3.6666 Not tainted syzkaller #0 PREEMPT(full) [ 1274.866350][T29450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1274.866365][T29450] Call Trace: [ 1274.866375][T29450] [ 1274.866385][T29450] dump_stack_lvl+0x189/0x250 [ 1274.866423][T29450] ? __pfx____ratelimit+0x10/0x10 [ 1274.866456][T29450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1274.866488][T29450] ? __pfx__printk+0x10/0x10 [ 1274.866512][T29450] ? __might_fault+0xb0/0x130 [ 1274.866565][T29450] should_fail_ex+0x414/0x560 [ 1274.866607][T29450] _copy_from_user+0x2d/0xb0 [ 1274.866638][T29450] restore_altstack+0x9d/0x4b0 [ 1274.866673][T29450] ? freezing_slow_path+0x115/0x160 [ 1274.866705][T29450] ? __pfx_restore_altstack+0x10/0x10 [ 1274.866743][T29450] ? _raw_spin_unlock_irq+0x23/0x50 [ 1274.866774][T29450] ? lockdep_hardirqs_on+0x9c/0x150 [ 1274.866811][T29450] __ia32_sys_rt_sigreturn+0x281/0x860 [ 1274.866853][T29450] ? _raw_spin_unlock_irq+0x23/0x50 [ 1274.866887][T29450] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 1274.866919][T29450] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1274.866953][T29450] ? __lock_acquire+0xab9/0xd20 [ 1274.866997][T29450] ? __task_pid_nr_ns+0x28/0x490 [ 1274.867034][T29450] ? do_syscall_64+0xbe/0xfa0 [ 1274.867072][T29450] do_syscall_64+0xfa/0xfa0 [ 1274.867104][T29450] ? lockdep_hardirqs_on+0x9c/0x150 [ 1274.867136][T29450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.867159][T29450] ? clear_bhb_loop+0x60/0xb0 [ 1274.867187][T29450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.867210][T29450] RIP: 0033:0x7f6db5b2b829 [ 1274.867230][T29450] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 1274.867251][T29450] RSP: 002b:00007f6db3df5a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 1274.867276][T29450] RAX: ffffffffffffffda RBX: 00007f6db5de5fa0 RCX: 00007f6db5b2b829 [ 1274.867293][T29450] RDX: 00007f6db3df5a80 RSI: 00007f6db3df5bb0 RDI: 0000000000000021 [ 1274.867309][T29450] RBP: 00007f6db3df6090 R08: 0000000000000001 R09: 0000000000000000 [ 1274.867323][T29450] R10: 0000000000100005 R11: 0000000000000202 R12: 0000000000000001 [ 1274.867342][T29450] R13: 00007f6db5de6038 R14: 00007f6db5de5fa0 R15: 00007f6db5f0fa28 [ 1274.867380][T29450] [ 1274.926978][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1275.051066][ C1] vkms_vblank_simulate: vblank timer overrun [ 1275.463122][ T31] task:kworker/1:2 state:D stack:20472 pid:18521 tgid:18521 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1275.510347][ T31] Workqueue: usb_hub_wq hub_event [ 1275.529260][ T31] Call Trace: [ 1275.553608][ T31] [ 1275.573245][ T31] __schedule+0x1798/0x4cc0 [ 1275.611316][ T31] ? __lock_acquire+0xab9/0xd20 [ 1275.719478][ T31] ? __pfx___schedule+0x10/0x10 [ 1275.729174][ T31] ? schedule+0x91/0x360 [ 1275.744873][ T31] schedule+0x165/0x360 [ 1275.754233][ T31] schedule_timeout+0x9a/0x270 [ 1275.767946][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1275.782492][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1275.953739][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1275.973022][ T31] ? wait_for_completion+0x267/0x5d0 [ 1275.994318][ T31] wait_for_completion+0x2bf/0x5d0 [ 1276.015905][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1276.032201][ T31] i2c_del_adapter+0x581/0x6e0 [ 1276.048366][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1276.058644][ T31] ? dvb_usbv2_exit+0x85a/0x9e0 [ 1276.074194][ T31] dvb_usbv2_probe+0x4ae/0x41a0 [ 1276.086560][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 1276.100362][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 1276.116083][ T31] usb_probe_interface+0x668/0xc30 [ 1276.130369][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 1276.142630][ T31] really_probe+0x26d/0x9e0 [ 1276.154432][ T31] __driver_probe_device+0x18c/0x2f0 [ 1276.168485][ T31] driver_probe_device+0x4f/0x430 [ 1276.182569][ T31] __device_attach_driver+0x2ce/0x530 [ 1276.209455][ T31] bus_for_each_drv+0x251/0x2e0 [ 1276.220344][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1276.233313][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1276.238986][ T31] __device_attach+0x2b8/0x400 [ 1276.243898][ T31] ? __pfx___device_attach+0x10/0x10 [ 1276.249328][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1276.254677][ T31] bus_probe_device+0x185/0x260 [ 1276.259712][ T31] device_add+0x7b6/0xb50 [ 1276.264179][ T31] usb_set_configuration+0x1a87/0x20e0 [ 1276.270025][ T31] usb_generic_driver_probe+0x8d/0x150 [ 1276.277140][ T31] usb_probe_device+0x1c4/0x390 [ 1276.282141][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 1276.287655][ T31] really_probe+0x26d/0x9e0 [ 1276.292295][ T31] __driver_probe_device+0x18c/0x2f0 [ 1276.297799][ T31] driver_probe_device+0x4f/0x430 [ 1276.303132][ T31] __device_attach_driver+0x2ce/0x530 [ 1276.308698][ T31] bus_for_each_drv+0x251/0x2e0 [ 1276.313672][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1276.319764][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1276.325272][ T31] __device_attach+0x2b8/0x400 [ 1276.335341][ T31] ? __pfx___device_attach+0x10/0x10 [ 1276.343174][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1276.348684][ T31] bus_probe_device+0x185/0x260 [ 1276.353687][ T31] device_add+0x7b6/0xb50 [ 1276.358190][ T31] usb_new_device+0xa39/0x16f0 [ 1276.363116][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 1276.368497][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1276.373830][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1276.381395][ T31] hub_event+0x2958/0x4a20 [ 1276.385960][ T31] ? __pfx_hub_event+0x10/0x10 [ 1276.390911][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1276.397180][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1276.402462][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1276.410251][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1276.416146][ T31] process_scheduled_works+0xae1/0x17b0 [ 1276.421857][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1276.428687][ T31] worker_thread+0x8a0/0xda0 [ 1276.433428][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1276.440472][ T31] ? __kthread_parkme+0x7b/0x200 [ 1276.445553][ T31] kthread+0x711/0x8a0 [ 1276.450238][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1276.455409][ T31] ? __pfx_kthread+0x10/0x10 [ 1276.460724][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1276.466302][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1276.471649][ T31] ? __pfx_kthread+0x10/0x10 [ 1276.476944][ T31] ret_from_fork+0x4bc/0x870 [ 1276.484270][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1276.489955][ T31] ? __switch_to_asm+0x39/0x70 [ 1276.494843][ T31] ? __switch_to_asm+0x33/0x70 [ 1276.500284][ T31] ? __pfx_kthread+0x10/0x10 [ 1276.505396][ T31] ret_from_fork_asm+0x1a/0x30 [ 1276.513031][ T31] [ 1276.520804][ T31] [ 1276.520804][ T31] Showing all locks held in the system: [ 1276.531280][ T31] 1 lock held by khungtaskd/31: [ 1276.537228][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1276.591616][ T31] 2 locks held by getty/5585: [ 1276.636325][ T31] #0: ffff88814ddc60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1276.647732][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1276.677666][ T31] 5 locks held by kworker/1:2/18521: [ 1276.696402][ T31] #0: ffff888143a89d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1276.766436][ T31] #1: ffffc9000430fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1276.846115][ T31] #2: ffff88814476b198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1276.855272][ T31] #3: ffff88807d73a198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1276.864879][ T31] #4: ffff88807dca5160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1276.874501][ T31] 2 locks held by kworker/u8:9/21017: [ 1276.880222][ T31] #0: ffff888145acf148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1276.894282][ T31] #1: ffffc9000db87ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1276.906934][ T31] 2 locks held by kworker/u8:5/28391: [ 1276.912457][ T31] #0: ffff888145acf148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1276.924102][ T31] #1: ffffc9000afcfba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1276.946265][ T31] 4 locks held by syz.4.6662/29441: [ 1276.951629][ T31] 2 locks held by dhcpcd/29466: [ 1276.956961][ T31] #0: ffff88804e5163c8 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1276.971437][ T31] #1: ffffffff8df43178 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 1276.982748][ T31] [ 1276.985512][ T31] ============================================= [ 1276.985512][ T31] [ 1277.106059][ T31] NMI backtrace for cpu 1 [ 1277.106083][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1277.106109][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1277.106123][ T31] Call Trace: [ 1277.106136][ T31] [ 1277.106147][ T31] dump_stack_lvl+0x189/0x250 [ 1277.106187][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1277.106218][ T31] ? __pfx__printk+0x10/0x10 [ 1277.106255][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1277.106286][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1277.106327][ T31] ? __pfx__printk+0x10/0x10 [ 1277.106356][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1277.106393][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1277.106425][ T31] watchdog+0xf60/0xfa0 [ 1277.106454][ T31] ? watchdog+0x1e2/0xfa0 [ 1277.106484][ T31] kthread+0x711/0x8a0 [ 1277.106518][ T31] ? __pfx_watchdog+0x10/0x10 [ 1277.106540][ T31] ? __pfx_kthread+0x10/0x10 [ 1277.106574][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1277.106605][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1277.106635][ T31] ? __pfx_kthread+0x10/0x10 [ 1277.106667][ T31] ret_from_fork+0x4bc/0x870 [ 1277.106699][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1277.106731][ T31] ? __switch_to_asm+0x39/0x70 [ 1277.106749][ T31] ? __switch_to_asm+0x33/0x70 [ 1277.106767][ T31] ? __pfx_kthread+0x10/0x10 [ 1277.106799][ T31] ret_from_fork_asm+0x1a/0x30 [ 1277.106837][ T31] [ 1277.106869][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1277.257680][ C0] NMI backtrace for cpu 0 [ 1277.257713][ C0] CPU: 0 UID: 0 PID: 28391 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 1277.257736][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1277.257750][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1277.257891][ C0] RIP: 0010:kasan_byte_accessible+0x16/0x30 [ 1277.257914][ C0] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df 0f b6 04 07 <3c> 08 0f 92 c0 e9 c0 b4 23 09 cc 66 66 66 66 66 66 2e 0f 1f 84 00 [ 1277.257930][ C0] RSP: 0018:ffffc90000007c10 EFLAGS: 00000a06 [ 1277.257946][ C0] RAX: 0000000000000000 RBX: ffffffff81a7ea2b RCX: 0000000000000dc0 [ 1277.257959][ C0] RDX: 0000000000000000 RSI: ffff8880302d3780 RDI: 1ffff1100605a6f0 [ 1277.257973][ C0] RBP: ffffc90000007ed0 R08: ffffffff8f7cee77 R09: 1ffffffff1ef9dce [ 1277.257988][ C0] R10: dffffc0000000000 R11: fffffbfff1ef9dcf R12: ffffea0000c0b4c0 [ 1277.258003][ C0] R13: ffffffff81a7e9b7 R14: ffff8880302d3780 R15: ffff88802076f780 [ 1277.258018][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 1277.258033][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1277.258055][ C0] CR2: 00007f700a0bf4c0 CR3: 000000007a214000 CR4: 00000000003526f0 [ 1277.258071][ C0] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 1277.258083][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1277.258096][ C0] Call Trace: [ 1277.258103][ C0] [ 1277.258111][ C0] check_slab_allocation+0xb9/0x130 [ 1277.258143][ C0] slab_free_after_rcu_debug+0x10b/0x2a0 [ 1277.258164][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 1277.258184][ C0] ? rcu_core+0xc37/0x1770 [ 1277.258204][ C0] rcu_core+0xcab/0x1770 [ 1277.258232][ C0] ? __pfx_rcu_core+0x10/0x10 [ 1277.258253][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1277.258282][ C0] ? sched_clock_cpu+0x74/0x430 [ 1277.258302][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1277.258331][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1277.258350][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1277.258373][ C0] ? try_to_wake_up+0x7f5/0x12b0 [ 1277.258404][ C0] handle_softirqs+0x286/0x870 [ 1277.258426][ C0] ? do_softirq+0xec/0x180 [ 1277.258448][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1277.258472][ C0] ? nsim_dev_trap_report_work+0x7c7/0xb80 [ 1277.258496][ C0] do_softirq+0xec/0x180 [ 1277.258514][ C0] [ 1277.258521][ C0] [ 1277.258529][ C0] ? __pfx_do_softirq+0x10/0x10 [ 1277.258547][ C0] ? devlink_trap_report+0x216/0x6a0 [ 1277.258619][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 1277.258638][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 1277.258659][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1277.258681][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1277.258707][ C0] ? nsim_dev_trap_report_work+0x7c7/0xb80 [ 1277.258731][ C0] nsim_dev_trap_report_work+0x7c7/0xb80 [ 1277.258763][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1277.258785][ C0] process_scheduled_works+0xae1/0x17b0 [ 1277.258820][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1277.258850][ C0] worker_thread+0x8a0/0xda0 [ 1277.258884][ C0] kthread+0x711/0x8a0 [ 1277.258910][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1277.258931][ C0] ? __pfx_kthread+0x10/0x10 [ 1277.258956][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1277.258981][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1277.259006][ C0] ? __pfx_kthread+0x10/0x10 [ 1277.259031][ C0] ret_from_fork+0x4bc/0x870 [ 1277.259057][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1277.259079][ C0] ? __switch_to_asm+0x39/0x70 [ 1277.259096][ C0] ? __switch_to_asm+0x33/0x70 [ 1277.259110][ C0] ? __pfx_kthread+0x10/0x10 [ 1277.259135][ C0] ret_from_fork_asm+0x1a/0x30 [ 1277.259160][ C0] [ 1277.632468][ C1] vkms_vblank_simulate: vblank timer overrun [ 1279.960004][ T36] bridge_slave_1: left allmulticast mode [ 1279.966537][ T36] bridge_slave_1: left promiscuous mode [ 1279.973321][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.982688][ T36] bridge_slave_0: left allmulticast mode [ 1279.988648][ T36] bridge_slave_0: left promiscuous mode [ 1279.994404][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.073802][ T36] ip6gretap0 (unregistering): left promiscuous mode [ 1280.451499][ T36] bond0 (unregistering): left promiscuous mode [ 1280.460025][ T36] bond_slave_0: left promiscuous mode [ 1280.465668][ T36] bond_slave_1: left promiscuous mode [ 1280.471599][ T36] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 1280.480390][ T36] batadv0: left promiscuous mode [ 1280.487308][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1280.499004][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1280.510328][ T36] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1280.520101][ T36] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1280.529496][ T36] bond0 (unregistering): Released all slaves [ 1280.593456][ T36] tipc: Left network mode [ 1280.944654][ T36] team0: left promiscuous mode [ 1280.949589][ T36] team_slave_0: left promiscuous mode [ 1280.955165][ T36] team_slave_1: left promiscuous mode [ 1280.969934][ T36] hsr_slave_0: left promiscuous mode [ 1280.976245][ T36] hsr_slave_1: left promiscuous mode [ 1280.982269][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1280.990376][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1281.000922][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1281.008586][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1281.033103][ T36] veth1_macvtap: left promiscuous mode [ 1281.040299][ T36] veth0_macvtap: left promiscuous mode [ 1281.046074][ T36] veth1_vlan: left promiscuous mode [ 1281.051477][ T36] veth0_vlan: left promiscuous mode [ 1281.576653][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1281.625657][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1282.434631][ T36] IPVS: stop unused estimator thread 0...