last executing test programs: 17.812668431s ago: executing program 1 (id=249): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xba06}]}}]}, 0x48}}, 0x4048000) 17.541999835s ago: executing program 1 (id=253): bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc) r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000340)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) io_setup(0x2007, 0x0) io_destroy(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x98cbdd08856ddb1}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x80) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 13.089340205s ago: executing program 1 (id=270): unshare(0x6a040000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@rand_addr=0x64010102, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x1}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x44004, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={'veth0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000040)='&.{\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 9.321299581s ago: executing program 4 (id=289): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) 8.508682773s ago: executing program 3 (id=291): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) (fail_nth: 1) 8.34847796s ago: executing program 2 (id=292): bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc) r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000340)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) io_setup(0x2007, 0x0) io_destroy(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x80) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 7.756297673s ago: executing program 4 (id=293): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) (async) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}, 0xfffffffa}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x7294, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x3, 0xde}, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000500)={[{0x8, 0x4e00, "9978a0d9a773b3fe"}]}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x2000000) 7.661171775s ago: executing program 3 (id=294): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x5, 0x80}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000200000000000000000000100400000000000000000000090100000000000000010000040400000000000000020000000f00000000009dcbd9ee320bbeb9a9e6513d4fe79e420f10034b6f529bddb852eb0147d7a98cc080380e4c567d2a3b3589617ad67b4916c3cd5602a9b4882736534ffbae66c715f6848042ff0545d8116f418e4d1fae818b0c87659301d432fc882a9626"], 0x0, 0x4a}, 0x20) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/pid\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x2c, r5, 0x1, 0x1, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r6}]}, 0x2c}}, 0x0) r7 = syz_socket_connect_nvme_tcp() ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f00000000c0)) r8 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmmsg(r8, &(0x7f000000db40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001340)="27cbb1504134af7a94b21155b9d18c7fe6", 0x11}], 0x1}}], 0x1, 0x40088c0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r8, &(0x7f0000002300)=""/4128, 0x1020) sendmmsg$alg(r8, &(0x7f0000007e40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) 6.525247414s ago: executing program 3 (id=297): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x150, 0x0, 0x0, [{{0x3, 0x0, 0x0, 0x0, 0x10000, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, r3, 0x0, 0xfffffffc}}, {0x2, 0x0, 0x8, 0x2, 'group_id'}}, {{0x3, 0x0, 0x0, 0x73, 0x746, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2000, 0x0, 0x0, 0x0, 0x7, 0xf4}}, {0x0, 0x0, 0x8, 0x29, 'group_id'}}]}, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.262992728s ago: executing program 3 (id=299): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x14305, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000240)=0xfffffffe, 0x5) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) r3 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000380)='netpci0\x00') setsockopt$inet_int(r3, 0x0, 0x15, &(0x7f00000000c0)=0x80000000, 0x4) socket$nl_audit(0x10, 0x3, 0x9) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r5, 0x4, 0x0, 0x0, 0x0, 0x0, @dev, @dev, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r6, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x1, 0xfffffffe}}) socket$packet(0x11, 0x3, 0x300) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) 5.262206679s ago: executing program 1 (id=303): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x1, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x69, &(0x7f0000000180)=""/105, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x10, 0x361f, 0x2}, 0x10, 0xffffffffffffffff, r0, 0x7, &(0x7f00000003c0)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000400)=[{0x5, 0x3, 0xc, 0x7}, {0x2, 0x1, 0x8, 0x9}, {0x3, 0x3, 0x1, 0x5}, {0x2, 0x4, 0x4, 0x9}, {0x0, 0x2, 0x7, 0xb}, {0x5, 0x3, 0xf, 0x7}, {0x1, 0x5, 0xf, 0x8}], 0x10, 0x2}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x4, r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chdir(0x0) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) 4.902229302s ago: executing program 2 (id=305): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) syz_open_dev$usbmon(&(0x7f0000001980), 0x1, 0x10280) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) splice(r1, &(0x7f0000000240)=0x1, 0xffffffffffffffff, &(0x7f0000000280)=0x10001, 0x8, 0x8) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x82480, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0xffffffffffffff72, r0, {0x8000000}}, './file0\x00'}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0), 0x280449c, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x2026012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x2) 3.476928119s ago: executing program 1 (id=306): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000040)) unshare(0xc000300) syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c4c00003e00ab382bbd700000c045e1ffff007cbc000400fc800c0001800800", @ANYRES32=0x0, @ANYBLOB="080002807235ab62"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 3.32916913s ago: executing program 4 (id=307): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x5, 0x80}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/pid\x00') sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x2c, r6, 0x1, 0x1, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r7}]}, 0x2c}}, 0x0) r8 = syz_socket_connect_nvme_tcp() ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f00000000c0)) r9 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmmsg(r9, &(0x7f000000db40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001340)="27cbb1504134af7a94b21155b9d18c7fe6", 0x11}], 0x1}}], 0x1, 0x40088c0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r9, &(0x7f0000002300)=""/4128, 0x1020) sendmmsg$alg(r9, &(0x7f0000007e40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) 3.328516675s ago: executing program 2 (id=308): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee000000000000000002", 0x56}], 0x1) 3.147257486s ago: executing program 3 (id=309): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)=ANY=[@ANYBLOB="4000000043000701fefffffffcdbdf25037c0000040045802800018008001c800498b60a9ccfe512edd02b490500098008002600", @ANYRES32], 0x40}}, 0xc000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[], 0x20) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c090003042402020424"], 0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 2.169963665s ago: executing program 4 (id=310): socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x150, 0x0, 0x0, [{{0x3, 0x0, 0x0, 0x0, 0x10000, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, r2, 0x0, 0xfffffffc}}, {0x2, 0x0, 0x8, 0x2, 'group_id'}}, {{0x3, 0x0, 0x0, 0x73, 0x746, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2000, 0x0, 0x0, 0x0, 0x7, 0xf4}}, {0x0, 0x0, 0x8, 0x29, 'group_id'}}]}, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.109766494s ago: executing program 2 (id=311): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7a7d2840778c09f681c0c2bc99cb9080000000000007b8af8ff00000000b7080000fbffffff7b8af0ff01000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x41}, 0x94) 1.972650802s ago: executing program 2 (id=312): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x23, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x4, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x5c, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0x27, 0xc, "1d1227950e6661b5656516f7be86af4c33422b66ff7a081498cdc06303ae3ed4f54547"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x80, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x3}]}}}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xb7}, {&(0x7f0000001400)="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", 0xfb6}], 0x3}}], 0x1, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.438193605s ago: executing program 0 (id=317): r0 = inotify_init1(0x800) r1 = fcntl$dupfd(r0, 0x406, r0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x40000008}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r2, &(0x7f0000000a00)={0x2020}, 0x2020) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r4 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000240)="ed9815e1"}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12014000f273a440cd060a01c3d90102030109021b0400000000200904000c01950d18000905", @ANYBLOB="83e2"], 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 1.341277215s ago: executing program 0 (id=318): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf251700000008000300", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x4851}, 0x0) 1.326630706s ago: executing program 1 (id=319): syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x200, 0x0, 0x7f, 0x6, 0x1, 0xfffffff2, 0x5f, 0x0, 0x8, 0xffff2d37, 0x1dd2, 0x5, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x2, 0x4, 0xe661, 0x4, 0x9, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x5, 0xa, 0x0, 0x71, 0x7, 0x7, 0x101, 0x0, 0x5, 0x3d, 0x8f, 0x8b, 0x1, 0x4, 0x9, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0x400000d, 0x7fff, 0x3, 0x1ff, 0xfffffffe, 0x3, 0x6, 0x7, 0x10000008, 0x2f, 0xe, 0x1, 0x78, 0xea4, 0xa, 0x4, 0x5, 0x80, 0x2, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x1, 0x5f31, 0x4, 0x9, 0x6, 0x9, 0x9, 0x2, 0x9, 0x8, 0x4, 0x7, 0xfffffff9, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x800007, 0x6, 0x8, 0x48c93690, 0x2, 0x5], [0x7, 0x10, 0xfffffffd, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x2, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xd7, 0x5, 0x2, 0x4, 0xf, 0x40008, 0x83, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x60e, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x6], [0x7, 0xbb31, 0xfffffffc, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x0, 0x9, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x10000104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8400014e, 0x60a3, 0x1249, 0x5, 0x20002, 0x80000003, 0x9, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x9ff, 0x8, 0x100, 0x1, 0x6, 0x2, 0x4, 0x80, 0x1, 0x10000, 0x20000005, 0xfff, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x10000, 0xb1c, 0x1, 0x1ff, 0x8fff, 0x8]}, 0x45c) 1.312217972s ago: executing program 0 (id=320): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x11, &(0x7f0000000040)="0200", 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[], 0x10}}, 0x40408c0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={0x0}, 0x18) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x18, 0x0, 0x0) 1.263316124s ago: executing program 4 (id=321): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x5, 0x80}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/pid\x00') sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x2c, r6, 0x1, 0x1, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r7}]}, 0x2c}}, 0x0) r8 = syz_socket_connect_nvme_tcp() ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f00000000c0)) r9 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmmsg(r9, &(0x7f000000db40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001340)="27cbb1504134af7a94b21155b9d18c7fe6", 0x11}], 0x1}}], 0x1, 0x40088c0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r9, &(0x7f0000002300)=""/4128, 0x1020) sendmmsg$alg(r9, &(0x7f0000007e40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) 1.165131388s ago: executing program 0 (id=322): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00', 0x0, 0x2) getdents(r1, 0xfffffffffffffffd, 0x58) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40, 0x10}, 0x7}, 0x20, 0x0, 0x0) socket(0x28, 0x5, 0x0) close(0x3) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r3 = syz_open_pts(0xffffffffffffffff, 0x101) dup3(r3, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[], 0x30}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010308000000fcdbdf251c0000000c00060001"], 0x20}, 0x1, 0x0, 0x0, 0x20000094}, 0x4040) 1.163804376s ago: executing program 3 (id=323): removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='system.advise\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, &(0x7f00000005c0)}, 0x20) socket$kcm(0x11, 0x200000000000002, 0x300) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0xd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x1000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000480)=0x74d, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0xe0000000}, 0x10) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c40)={0x84, &(0x7f00000004c0)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) 1.110556202s ago: executing program 0 (id=324): syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r2, 0x4b4a, 0x10000000000004) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xc, 0x0, 0x6, 0xfa0d, 0xfffffeff}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000003000058"]) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)={r4}) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000340)={r6}) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)={0x0, 0xfb, 0x63, 0x1, 0xd, "f771854c2033c8a223454a735775f9b1", "2ed88aa0a492b351d6e28415902117e3e3bc64af900c966a1724785a8e9585f8f26a008c0c834b277815dcfe068110f481d96486eb81e9d1d4f4c635b5a85bcb4b9f86a0cb1c4a9f084170b44164"}, 0x63, 0x2) bind$xdp(r7, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0x3e}, 0x10) bind$xdp(r5, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r8, 0x1, 0x8000}, 0x14}, 0x1, 0xa00, 0x0, 0x8000000}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x3, &(0x7f00000011c0)) fdatasync(0xffffffffffffffff) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000140), 0x0) 1.053722556s ago: executing program 2 (id=325): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80, 0x4cb01) pwritev(r1, &(0x7f0000000480)=[{&(0x7f0000000100)="dcebecf496bec0416db23875b5096ccf9e82dabdef8a1fe5cb3b36a9e58e9973ff64beb27e0b33343074f7d1324a09e89984acf417bbd9dbc47272b5bb8d7933c3a4e631d5b1b04fefbb5f5739eeccd168074c6dc186279533b16858ca2963be9df69b968a423c7c2842b1b6357f2dbee55166b5f9f8f8efa6b3576c042a28c81110a6f95cd9bd7fef117f87a02929557666e0ec4f7c99e249996701a1d917b578b9df42e4eb008237dccd7ef2f5d75bc7ecb05689", 0xb5}, {&(0x7f00000001c0)="61383d1490023bf17ccb89006c0334b4180850f17d0af0c63e4707dc68a30a71f8c6d13a0a950cfdb01557bd7b7a93ce97fbba1c30ca3b4cfb8df8dd2b27ed8a796b98977ef17046434252b33be3f9514576edcdf37e23e44120a798e3b8332ecd2ce205e9124b8f42b62d69352f607108e53a16c29796e9dcd8221073dff96f0e7f803ffea6afb65487276cc4dffb29f0a6a60c26e8157328f55acd575efd184b86fb1ad8656d629b8005d3d718efe18209d07f1d6e2f158911c08e1152dcdbd5fc617d4d3d2d552d646d42e963957668a287d421175b7ed4f1845fe8532f7bf6045d9a27a3b1359dbf", 0xea}, {&(0x7f00000002c0)="5fa5b1ac9210f7aabf6a7e6413ffd8e94e4593a48f5ecef9fcd25c0dc24303261cbeb15cd52cd177cccea94ef8ed92250e81d0d353c19fd3e9de1634fd4dd1ba59e91d77664f029e6a5979e85f6da1dda9a89c771012a97f99c7994d5fc5f54fb270ad9d3d3d8db5f1361f6e5b8f90ac55763be52455a878170f346977d93f3528464f009caf0c", 0x87}, {&(0x7f0000000040)="96951a", 0x3}, {&(0x7f0000000380)="91ddfaf472be268a62e33adcdc94c852226d1f11b5feea4d622f9b5cb5f6183163e6974b883815682f9ef15e14eaf08b189f6bca83fcb12445350be5763df55ef6febb1db9b2b60db7e22f7a48c33e9945860c50cccd94c75726c6dad95885fdc33e5ae8db5842629a4a1f23ba22591198a31e37565b9788f4751a3de92d229faff4d86215eada200d7d087500aa891b25ca6dd65546934e27bab8ad74783d", 0x9f}, {&(0x7f0000000440)="6564b34130fba094dfbaf4", 0xb}], 0x6, 0x200, 0x9) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x60b, 0x0) write$char_usb(r2, 0x0, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = syz_usb_connect$uac1(0x6, 0xb2, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x3, 0x1, 0x6f, 0x80, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x3}, [@processing_unit={0xb, 0x24, 0x7, 0x3, 0x1, 0xea, "02461d64"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xf, 0xfff, 0xfb, "3a8f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x81, 0x2, 0x5, {0x7, 0x25, 0x1, 0x2, 0x6, 0xfff1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xc3f, 0xffff, 0xdb, "12b04734"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x4, 0x3, 0x1, 0x0, "12acca", "31ac"}, @as_header={0x7, 0x24, 0x1, 0xe, 0xab, 0x5}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x101, 0xd, 0x40, 'X'}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0xde, 0x7, {0x7, 0x25, 0x1, 0x2, 0x29, 0x8}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x4, 0x5, 0x6, 0x40, 0x7f}, 0x12, &(0x7f0000000600)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0x9}]}, 0x3, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x810}}]}) syz_usb_control_io$uac1(r3, &(0x7f0000000940)={0x14, &(0x7f0000000740)={0x20, 0xf, 0xc3, {0xc3, 0x7, "3095e9a2bf2b809d4fdc7428016204516c38cb9aebf74257c174a0b425dfeb7e4f602eeafd92764223f398667340ba94dbd0d776f77b9571c64000cc20f0cb67feb0a1f7202e4fa98590bbbbb06a3f4825b56a61afbc296176c906fdfa77f95aabe842a86b2e3c55269e22f56398869530be679fe7fce5fd2635679061d8ff14f10e56b12a45cdf296b66b1b94a788471c130df7657e47e4f9f4dd9f4e0e33d3247795c6f351c6c90f2a6ad3f79101aad06735953720f23deeab2e28229130251a"}}, &(0x7f0000000840)={0x0, 0x3, 0xd7, @string={0xd7, 0x3, "7bb4576ae89ab16676ad0b074f70208510a753555c56ea06733d6f98069718d8dcf019997615a234779e710d6339dcc2aa7c7334cc18d2d9c51228fb88a8064eabc24f664c5dd9623feb06000a364660ea883aa81293bbb5f8902278040611f9729059089205ad110feb0d37df5a630b058bc0ab6d5076242f60c74c04d46c4e8c30b483443b5bb168ad9a93b8eb48433668df134b97b3b10aa97ff8493bdc2ca5457c2d2ba68e90eb0046344b8aff8a980d947b7ac091c11dfcd51ec16d1a1bd9f9db53a7638366c1c5dbc82107f85ecab3233642"}}}, &(0x7f0000000bc0)={0x44, &(0x7f0000000980)={0x40, 0x8, 0x44, "adfbd048334407dae6d1412f238e8372a298ab74e8aa6fe4afa651f226b7333d0730b9caf580a3d68bef562556c8818fcde52064437f3dfbb56316d92980814f361d60cf"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000a80)={0x20, 0x81, 0x3, "8808cf"}, &(0x7f0000000ac0)={0x20, 0x82, 0x2, "a6dd"}, &(0x7f0000000b00)={0x20, 0x83, 0x2, "b817"}, &(0x7f0000000b40)={0x20, 0x84, 0x2, "cf59"}, &(0x7f0000000b80)={0x20, 0x85, 0x3, "0eb83e"}}) 1.264472ms ago: executing program 0 (id=326): syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r2, 0x4b4a, 0x10000000000004) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xc, 0x0, 0x6, 0xfa0d, 0xfffffeff}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000003000058"]) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)={r4}) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000340)={r6}) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)={0x0, 0xfb, 0x63, 0x1, 0xd, "f771854c2033c8a223454a735775f9b1", "2ed88aa0a492b351d6e28415902117e3e3bc64af900c966a1724785a8e9585f8f26a008c0c834b277815dcfe068110f481d96486eb81e9d1d4f4c635b5a85bcb4b9f86a0cb1c4a9f084170b44164"}, 0x63, 0x2) bind$xdp(r7, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0x3e}, 0x10) bind$xdp(r5, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) (fail_nth: 1) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r8, 0x1, 0x8000}, 0x14}, 0x1, 0xa00, 0x0, 0x8000000}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x3, &(0x7f00000011c0)) fdatasync(0xffffffffffffffff) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000140), 0x0) 0s ago: executing program 4 (id=327): syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r2, 0x4b4a, 0x10000000000004) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xc, 0x0, 0x6, 0xfa0d, 0xfffffeff}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000003000058"]) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)={r4}) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000340)={r6}) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)={0x0, 0xfb, 0x63, 0x1, 0xd, "f771854c2033c8a223454a735775f9b1", "2ed88aa0a492b351d6e28415902117e3e3bc64af900c966a1724785a8e9585f8f26a008c0c834b277815dcfe068110f481d96486eb81e9d1d4f4c635b5a85bcb4b9f86a0cb1c4a9f084170b44164"}, 0x63, 0x2) bind$xdp(r7, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0x3e}, 0x10) bind$xdp(r5, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r8, 0x1, 0x8000}, 0x14}, 0x1, 0xa00, 0x0, 0x8000000}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x3, &(0x7f00000011c0)) fdatasync(0xffffffffffffffff) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000140), 0x0) kernel console output (not intermixed with test programs): 08] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.045291][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.046554][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.046840][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.049415][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.050150][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.050682][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.051099][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.098586][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.112500][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.140354][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.144787][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.185002][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.193141][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.045283][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 79.093450][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 79.160118][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 79.374246][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 79.387098][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 79.975985][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.977075][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.977456][ T5799] bridge_slave_0: entered allmulticast mode [ 79.979104][ T5799] bridge_slave_0: entered promiscuous mode [ 80.135164][ T5801] Bluetooth: hci4: command tx timeout [ 80.135187][ T5813] Bluetooth: hci0: command tx timeout [ 80.135371][ T5816] Bluetooth: hci1: command tx timeout [ 80.167211][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.167301][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.167435][ T5799] bridge_slave_1: entered allmulticast mode [ 80.168936][ T5799] bridge_slave_1: entered promiscuous mode [ 80.183601][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.183725][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.183902][ T5798] bridge_slave_0: entered allmulticast mode [ 80.186440][ T5798] bridge_slave_0: entered promiscuous mode [ 80.212324][ T5816] Bluetooth: hci3: command tx timeout [ 80.372346][ T5816] Bluetooth: hci2: command tx timeout [ 80.391363][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.391450][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.391567][ T5798] bridge_slave_1: entered allmulticast mode [ 80.403374][ T5798] bridge_slave_1: entered promiscuous mode [ 80.421323][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.421466][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.421595][ T5797] bridge_slave_0: entered allmulticast mode [ 80.425081][ T5797] bridge_slave_0: entered promiscuous mode [ 80.703133][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.703223][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.703338][ T5797] bridge_slave_1: entered allmulticast mode [ 80.704829][ T5797] bridge_slave_1: entered promiscuous mode [ 80.767196][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.013431][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.013542][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.015762][ T5795] bridge_slave_0: entered allmulticast mode [ 81.017282][ T5795] bridge_slave_0: entered promiscuous mode [ 81.023355][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.024261][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.024363][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.024480][ T5796] bridge_slave_0: entered allmulticast mode [ 81.026003][ T5796] bridge_slave_0: entered promiscuous mode [ 81.089436][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.253620][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.253773][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.253950][ T5795] bridge_slave_1: entered allmulticast mode [ 81.255659][ T5795] bridge_slave_1: entered promiscuous mode [ 81.333966][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.334099][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.334269][ T5796] bridge_slave_1: entered allmulticast mode [ 81.337188][ T5796] bridge_slave_1: entered promiscuous mode [ 81.343251][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.347565][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.685118][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.735730][ T10] cfg80211: failed to load regulatory.db [ 81.754641][ T5799] team0: Port device team_slave_0 added [ 81.968486][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.970357][ T5799] team0: Port device team_slave_1 added [ 81.975764][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.979280][ T5798] team0: Port device team_slave_0 added [ 82.039319][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.115753][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.117474][ T5798] team0: Port device team_slave_1 added [ 82.120087][ T5797] team0: Port device team_slave_0 added [ 82.212401][ T5813] Bluetooth: hci0: command tx timeout [ 82.212410][ T5801] Bluetooth: hci4: command tx timeout [ 82.212507][ T5816] Bluetooth: hci1: command tx timeout [ 82.302464][ T5816] Bluetooth: hci3: command tx timeout [ 82.424456][ T5797] team0: Port device team_slave_1 added [ 82.452351][ T5816] Bluetooth: hci2: command tx timeout [ 82.774433][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.774444][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.774457][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.065045][ T5795] team0: Port device team_slave_0 added [ 83.066196][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.066209][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.066232][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.067994][ T5796] team0: Port device team_slave_0 added [ 83.069033][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.069045][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.069067][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.235311][ T5795] team0: Port device team_slave_1 added [ 83.245514][ T5796] team0: Port device team_slave_1 added [ 83.246808][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.246820][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.246843][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.248508][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.248518][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.248547][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.443606][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.443618][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.443632][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.783936][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.783947][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.783959][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.785845][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.785856][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.785868][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.923672][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.923687][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.923709][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.013834][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.013845][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.013858][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.020008][ T5799] hsr_slave_0: entered promiscuous mode [ 84.020996][ T5799] hsr_slave_1: entered promiscuous mode [ 84.241144][ T5798] hsr_slave_0: entered promiscuous mode [ 84.241905][ T5798] hsr_slave_1: entered promiscuous mode [ 84.244512][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 84.244617][ T5798] Cannot create hsr debugfs directory [ 84.292515][ T5813] Bluetooth: hci0: command tx timeout [ 84.292552][ T5813] Bluetooth: hci4: command tx timeout [ 84.292685][ T5816] Bluetooth: hci1: command tx timeout [ 84.372223][ T5816] Bluetooth: hci3: command tx timeout [ 84.428214][ T5797] hsr_slave_0: entered promiscuous mode [ 84.429008][ T5797] hsr_slave_1: entered promiscuous mode [ 84.429567][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 84.429586][ T5797] Cannot create hsr debugfs directory [ 84.532422][ T5816] Bluetooth: hci2: command tx timeout [ 84.899576][ T5795] hsr_slave_0: entered promiscuous mode [ 84.900399][ T5795] hsr_slave_1: entered promiscuous mode [ 84.901498][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 84.901519][ T5795] Cannot create hsr debugfs directory [ 85.164161][ T5796] hsr_slave_0: entered promiscuous mode [ 85.164965][ T5796] hsr_slave_1: entered promiscuous mode [ 85.165513][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 85.165533][ T5796] Cannot create hsr debugfs directory [ 86.372512][ T5813] Bluetooth: hci4: command tx timeout [ 86.372551][ T5813] Bluetooth: hci0: command tx timeout [ 86.372587][ T5816] Bluetooth: hci1: command tx timeout [ 86.449008][ T5799] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.453649][ T5801] Bluetooth: hci3: command tx timeout [ 86.483339][ T5799] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.516366][ T5799] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.550676][ T5799] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.612901][ T5801] Bluetooth: hci2: command tx timeout [ 86.651604][ T5798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.677807][ T5798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.721004][ T5798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.768598][ T5798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.867680][ T5797] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.916376][ T5797] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.957668][ T5797] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.994592][ T5797] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.127249][ T5795] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.165670][ T5795] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.199382][ T5795] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.232011][ T5795] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.358909][ T5796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.390671][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.392018][ T5796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.440374][ T5796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.465328][ T5796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.557971][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.571152][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.600100][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.600631][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.631670][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.631792][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.691216][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.722530][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.722826][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.726183][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.764682][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.764787][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.840396][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.850423][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.891323][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.891413][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.948831][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.949706][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.979907][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.024135][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.028709][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.029663][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.076249][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.076390][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.174943][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.245541][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.245686][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.290668][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.290806][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.410902][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.537795][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.744014][ T5799] veth0_vlan: entered promiscuous mode [ 88.819570][ T5799] veth1_vlan: entered promiscuous mode [ 88.867125][ T5798] veth0_vlan: entered promiscuous mode [ 88.890169][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.931973][ T5798] veth1_vlan: entered promiscuous mode [ 88.941730][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.027930][ T5799] veth0_macvtap: entered promiscuous mode [ 89.047089][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.071501][ T5799] veth1_macvtap: entered promiscuous mode [ 89.148052][ T5798] veth0_macvtap: entered promiscuous mode [ 89.169790][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.201233][ T5798] veth1_macvtap: entered promiscuous mode [ 89.237186][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.243551][ T5795] veth0_vlan: entered promiscuous mode [ 89.277081][ T150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.298664][ T150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.308076][ T150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.318286][ T5795] veth1_vlan: entered promiscuous mode [ 89.319693][ T150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.347713][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.397332][ T5796] veth0_vlan: entered promiscuous mode [ 89.401535][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.526198][ T150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.560710][ T150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.568240][ T5796] veth1_vlan: entered promiscuous mode [ 89.577613][ T150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.599848][ T150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.760634][ T5797] veth0_vlan: entered promiscuous mode [ 89.762647][ T5795] veth0_macvtap: entered promiscuous mode [ 89.785884][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.785912][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.845445][ T5795] veth1_macvtap: entered promiscuous mode [ 89.868888][ T5797] veth1_vlan: entered promiscuous mode [ 89.931828][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.931848][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.955047][ T5796] veth0_macvtap: entered promiscuous mode [ 89.994896][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.025363][ T5796] veth1_macvtap: entered promiscuous mode [ 90.034983][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.035006][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.060371][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.129251][ T1181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.131479][ T1181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.147842][ T1181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.161259][ T1181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.164944][ T1181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.164963][ T1181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.176267][ T5797] veth0_macvtap: entered promiscuous mode [ 90.199847][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.254097][ T5797] veth1_macvtap: entered promiscuous mode [ 90.276451][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.426205][ T71] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.428384][ T71] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.428905][ T71] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.429439][ T71] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.583534][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.387532][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.387553][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.420873][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.462744][ T44] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.530802][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.533286][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.533523][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.533751][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.632704][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 91.657196][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.657215][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.659517][ T44] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.659547][ T44] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.659566][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 91.659597][ T44] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 91.659616][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.786904][ T44] usb 2-1: config 0 descriptor?? [ 91.840026][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.840046][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.118992][ T5920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.119618][ T5920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.157223][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.157242][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.351247][ T44] hid (null): unknown global tag 0xc [ 92.351412][ T44] hid (null): unknown global tag 0xc [ 92.351425][ T44] hid (null): bogus close delimiter [ 92.351436][ T44] hid (null): unknown global tag 0xe [ 92.351448][ T44] hid (null): unknown global tag 0xc [ 92.351460][ T44] hid (null): unknown global tag 0xc [ 92.351471][ T44] hid (null): unknown global tag 0xe [ 92.429226][ T44] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 92.429272][ T44] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 92.429294][ T44] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 92.429315][ T44] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 92.429335][ T44] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 92.429357][ T44] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 92.462222][ T44] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 92.462271][ T44] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 92.462295][ T44] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 92.462318][ T44] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 92.463138][ T44] cougar 0003:060B:500A.0001: unexpected long global item [ 92.463988][ T44] cougar 0003:060B:500A.0001: parse failed [ 92.464083][ T44] cougar 0003:060B:500A.0001: probe with driver cougar failed with error -22 [ 92.536079][ T5939] FAULT_INJECTION: forcing a failure. [ 92.536079][ T5939] name failslab, interval 1, probability 0, space 0, times 1 [ 92.536126][ T5939] CPU: 1 UID: 0 PID: 5939 Comm: syz.3.9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 92.536144][ T5939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 92.536160][ T5939] Call Trace: [ 92.536171][ T5939] [ 92.536179][ T5939] dump_stack_lvl+0x189/0x250 [ 92.536210][ T5939] ? __pfx____ratelimit+0x10/0x10 [ 92.536231][ T5939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.536252][ T5939] ? __pfx__printk+0x10/0x10 [ 92.536277][ T5939] ? __pfx___might_resched+0x10/0x10 [ 92.536300][ T5939] should_fail_ex+0x46c/0x600 [ 92.536327][ T5939] should_failslab+0xa8/0x100 [ 92.536350][ T5939] __kmalloc_noprof+0xcc/0x7d0 [ 92.536369][ T5939] ? rcu_read_lock_any_held+0xb3/0x120 [ 92.536386][ T5939] ? kernfs_fop_write_iter+0x159/0x540 [ 92.536413][ T5939] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 92.536434][ T5939] kernfs_fop_write_iter+0x159/0x540 [ 92.536461][ T5939] vfs_write+0x5d5/0xb40 [ 92.536484][ T5939] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 92.536506][ T5939] ? __pfx_vfs_write+0x10/0x10 [ 92.536523][ T5939] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 92.536550][ T5939] ? mutex_lock_nested+0x154/0x1d0 [ 92.536565][ T5939] ? fdget_pos+0x253/0x320 [ 92.536595][ T5939] ksys_write+0x14b/0x260 [ 92.536617][ T5939] ? __pfx_ksys_write+0x10/0x10 [ 92.536640][ T5939] ? do_syscall_64+0xbe/0xfa0 [ 92.536664][ T5939] do_syscall_64+0xfa/0xfa0 [ 92.536682][ T5939] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.536702][ T5939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.536719][ T5939] ? clear_bhb_loop+0x60/0xb0 [ 92.536739][ T5939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.536755][ T5939] RIP: 0033:0x7f39d84defc9 [ 92.536776][ T5939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.536790][ T5939] RSP: 002b:00007f39d6746038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 92.536814][ T5939] RAX: ffffffffffffffda RBX: 00007f39d8735fa0 RCX: 00007f39d84defc9 [ 92.536827][ T5939] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 92.536838][ T5939] RBP: 00007f39d6746090 R08: 0000000000000000 R09: 0000000000000000 [ 92.536849][ T5939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.536859][ T5939] R13: 00007f39d8736038 R14: 00007f39d8735fa0 R15: 00007fff2092f898 [ 92.536890][ T5939] [ 92.631340][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.631363][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.684435][ T5809] usb 2-1: USB disconnect, device number 2 [ 92.897142][ T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.897162][ T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.056410][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.142326][ T31] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 94.021152][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.163531][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.204894][ T31] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 94.204920][ T31] usb 1-1: config 7 has no interface number 0 [ 94.233311][ T31] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 94.233339][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.233355][ T31] usb 1-1: Product: syz [ 94.233367][ T31] usb 1-1: Manufacturer: syz [ 94.233379][ T31] usb 1-1: SerialNumber: syz [ 94.454154][ T5952] Bluetooth: MGMT ver 1.23 [ 95.106754][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.617997][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.813782][ T31] as10x_usb: device has been detected [ 96.832383][ T31] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 96.901258][ T5967] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15'. [ 97.115094][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.241813][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.331547][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.462890][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.531733][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.578396][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.199711][ T31] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 99.352068][ T31] as10x_usb: error during firmware upload part1 [ 99.406667][ T31] Registered device Elgato EyeTV DTT Deluxe [ 99.514726][ T31] usb 1-1: USB disconnect, device number 2 [ 99.547469][ T5982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19'. [ 99.547502][ T5982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19'. [ 100.372891][ T5992] FAULT_INJECTION: forcing a failure. [ 100.372891][ T5992] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 100.372921][ T5992] CPU: 1 UID: 0 PID: 5992 Comm: syz.4.18 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 100.372941][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 100.372951][ T5992] Call Trace: [ 100.372958][ T5992] [ 100.372965][ T5992] dump_stack_lvl+0x189/0x250 [ 100.372994][ T5992] ? __pfx____ratelimit+0x10/0x10 [ 100.373014][ T5992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.373037][ T5992] ? __pfx__printk+0x10/0x10 [ 100.373057][ T5992] ? __might_fault+0xb0/0x130 [ 100.373090][ T5992] should_fail_ex+0x46c/0x600 [ 100.373118][ T5992] _copy_from_user+0x2d/0xb0 [ 100.373136][ T5992] __sys_bind+0x19f/0x3e0 [ 100.373164][ T5992] ? __pfx___sys_bind+0x10/0x10 [ 100.373199][ T5992] ? __pfx_ksys_write+0x10/0x10 [ 100.373225][ T5992] __x64_sys_bind+0x7a/0x90 [ 100.373249][ T5992] do_syscall_64+0xfa/0xfa0 [ 100.373268][ T5992] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.373287][ T5992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.373304][ T5992] ? clear_bhb_loop+0x60/0xb0 [ 100.373325][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.373341][ T5992] RIP: 0033:0x7f41b434efc9 [ 100.373356][ T5992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.373370][ T5992] RSP: 002b:00007f41b2574038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 100.373388][ T5992] RAX: ffffffffffffffda RBX: 00007f41b45a6180 RCX: 00007f41b434efc9 [ 100.373401][ T5992] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000009 [ 100.373412][ T5992] RBP: 00007f41b2574090 R08: 0000000000000000 R09: 0000000000000000 [ 100.373423][ T5992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.373433][ T5992] R13: 00007f41b45a6218 R14: 00007f41b45a6180 R15: 00007ffd70833508 [ 100.373464][ T5992] [ 101.859063][ T31] Unregistered device Elgato EyeTV DTT Deluxe [ 101.924750][ T31] as10x_usb: device has been disconnected [ 103.342960][ T1860] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.494199][ T1860] usb 4-1: Using ep0 maxpacket: 16 [ 103.496538][ T1860] usb 4-1: config index 0 descriptor too short (expected 9919, got 36) [ 103.496562][ T1860] usb 4-1: config 165 has too many interfaces: 73, using maximum allowed: 32 [ 103.496580][ T1860] usb 4-1: config 165 has an invalid descriptor of length 67, skipping remainder of the config [ 103.496597][ T1860] usb 4-1: config 165 has 0 interfaces, different from the descriptor's value: 73 [ 103.496631][ T1860] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 103.496650][ T1860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.998133][ T1860] usb 4-1: string descriptor 0 read error: -71 [ 105.010977][ T1860] usb 4-1: USB disconnect, device number 2 [ 105.113728][ T6023] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.303829][ T6031] FAULT_INJECTION: forcing a failure. [ 105.303829][ T6031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.303860][ T6031] CPU: 0 UID: 0 PID: 6031 Comm: syz.2.30 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 105.303880][ T6031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 105.303915][ T6031] Call Trace: [ 105.303922][ T6031] [ 105.303931][ T6031] dump_stack_lvl+0x189/0x250 [ 105.303960][ T6031] ? __pfx____ratelimit+0x10/0x10 [ 105.303981][ T6031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.304002][ T6031] ? __pfx__printk+0x10/0x10 [ 105.304022][ T6031] ? __might_fault+0xb0/0x130 [ 105.304053][ T6031] should_fail_ex+0x46c/0x600 [ 105.304080][ T6031] _copy_from_user+0x2d/0xb0 [ 105.304098][ T6031] copy_clone_args_from_user+0x1d5/0x6d0 [ 105.304125][ T6031] ? __lock_acquire+0xab9/0xd20 [ 105.304147][ T6031] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 105.304186][ T6031] __se_sys_clone3+0xf1/0x2d0 [ 105.304204][ T6031] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 105.304222][ T6031] ? __pfx___se_sys_clone3+0x10/0x10 [ 105.304267][ T6031] ? __pfx_ksys_write+0x10/0x10 [ 105.304296][ T6031] ? do_syscall_64+0xbe/0xfa0 [ 105.304316][ T6031] do_syscall_64+0xfa/0xfa0 [ 105.304334][ T6031] ? lockdep_hardirqs_on+0x9c/0x150 [ 105.304354][ T6031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.304369][ T6031] ? clear_bhb_loop+0x60/0xb0 [ 105.304388][ T6031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.304401][ T6031] RIP: 0033:0x7f4352dcefc9 [ 105.304413][ T6031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.304424][ T6031] RSP: 002b:00007f4351035f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 105.304439][ T6031] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f4352dcefc9 [ 105.304449][ T6031] RDX: 00007f4351035f20 RSI: 0000000000000058 RDI: 00007f4351035f20 [ 105.304456][ T6031] RBP: 00007f4351036090 R08: 0000000000000000 R09: 0000000000000058 [ 105.304464][ T6031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.304471][ T6031] R13: 00007f4353026038 R14: 00007f4353025fa0 R15: 00007ffd2d8380f8 [ 105.304491][ T6031] [ 105.313279][ T5809] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.474295][ T5809] usb 1-1: Using ep0 maxpacket: 16 [ 105.477144][ T5809] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 105.477185][ T5809] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.480771][ T5809] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.480794][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.480810][ T5809] usb 1-1: Product: syz [ 105.480822][ T5809] usb 1-1: Manufacturer: syz [ 105.480834][ T5809] usb 1-1: SerialNumber: syz [ 105.809494][ T6022] tipc: Started in network mode [ 105.809526][ T6022] tipc: Node identity ac1414aa, cluster identity 4711 [ 105.850894][ T6022] tipc: Enabled bearer , priority 10 [ 105.889039][ T5809] usb 1-1: 0:2 : does not exist [ 106.129572][ T6039] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.242425][ T5809] usb 1-1: USB disconnect, device number 3 [ 106.928454][ T6052] netlink: 60 bytes leftover after parsing attributes in process `syz.4.39'. [ 106.963539][ T1860] tipc: Node number set to 2886997162 [ 107.202299][ T5809] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.362233][ T1860] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.372295][ T5809] usb 1-1: Using ep0 maxpacket: 16 [ 107.375636][ T5809] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 107.375660][ T5809] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.379196][ T5809] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.379274][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.379292][ T5809] usb 1-1: Product: syz [ 107.379304][ T5809] usb 1-1: Manufacturer: syz [ 107.379316][ T5809] usb 1-1: SerialNumber: syz [ 107.513112][ T1860] usb 4-1: Using ep0 maxpacket: 16 [ 107.516228][ T1860] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 107.516252][ T1860] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.548702][ T1860] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.548731][ T1860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.548749][ T1860] usb 4-1: Product: syz [ 107.548761][ T1860] usb 4-1: Manufacturer: syz [ 107.548775][ T1860] usb 4-1: SerialNumber: syz [ 107.583144][ T6017] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.609735][ T6057] tipc: Enabling of bearer rejected, already enabled [ 107.630488][ T5809] usb 1-1: 0:2 : does not exist [ 107.675157][ T5809] usb 1-1: USB disconnect, device number 4 [ 107.712283][ T6017] usb 5-1: device descriptor read/64, error -71 [ 107.830976][ T6059] tipc: Started in network mode [ 107.830994][ T6059] tipc: Node identity ac1414aa, cluster identity 4711 [ 107.855458][ T6059] tipc: Enabled bearer , priority 10 [ 107.869844][ T1860] usb 4-1: 0:2 : does not exist [ 107.917932][ T1860] usb 4-1: USB disconnect, device number 3 [ 107.952580][ T6017] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.082596][ T6017] usb 5-1: device descriptor read/64, error -71 [ 108.203690][ T6017] usb usb5-port1: attempt power cycle [ 108.418864][ T6070] FAULT_INJECTION: forcing a failure. [ 108.418864][ T6070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.418895][ T6070] CPU: 0 UID: 0 PID: 6070 Comm: syz.0.45 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 108.418914][ T6070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.418923][ T6070] Call Trace: [ 108.418929][ T6070] [ 108.418936][ T6070] dump_stack_lvl+0x189/0x250 [ 108.418962][ T6070] ? __pfx____ratelimit+0x10/0x10 [ 108.418983][ T6070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.419004][ T6070] ? __pfx__printk+0x10/0x10 [ 108.419024][ T6070] ? __might_fault+0xb0/0x130 [ 108.419054][ T6070] should_fail_ex+0x46c/0x600 [ 108.419081][ T6070] _copy_from_user+0x2d/0xb0 [ 108.419100][ T6070] ___sys_sendmsg+0x158/0x2a0 [ 108.419140][ T6070] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.419194][ T6070] ? __fget_files+0x2a/0x420 [ 108.419215][ T6070] ? __fget_files+0x3a6/0x420 [ 108.419246][ T6070] __x64_sys_sendmsg+0x1a1/0x260 [ 108.419268][ T6070] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 108.419296][ T6070] ? __pfx_ksys_write+0x10/0x10 [ 108.419320][ T6070] ? do_syscall_64+0xbe/0xfa0 [ 108.419343][ T6070] do_syscall_64+0xfa/0xfa0 [ 108.419361][ T6070] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.419380][ T6070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.419397][ T6070] ? clear_bhb_loop+0x60/0xb0 [ 108.419417][ T6070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.419434][ T6070] RIP: 0033:0x7f06d1faefc9 [ 108.419449][ T6070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.419462][ T6070] RSP: 002b:00007f06d020e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.419480][ T6070] RAX: ffffffffffffffda RBX: 00007f06d2205fa0 RCX: 00007f06d1faefc9 [ 108.419492][ T6070] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 108.419503][ T6070] RBP: 00007f06d020e090 R08: 0000000000000000 R09: 0000000000000000 [ 108.419514][ T6070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.419524][ T6070] R13: 00007f06d2206038 R14: 00007f06d2205fa0 R15: 00007ffc651e2398 [ 108.419555][ T6070] [ 108.502240][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.622324][ T6017] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 108.661835][ T6017] usb 5-1: device descriptor read/8, error -71 [ 108.705399][ T10] usb 2-1: device descriptor read/64, error -71 [ 108.858061][ T6081] qrtr: Invalid version 0 [ 108.892236][ T6017] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 108.912941][ T6017] usb 5-1: device descriptor read/8, error -71 [ 108.942220][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 108.950845][ T6081] dlm: no locking on control device [ 108.962735][ T1859] tipc: Node number set to 2886997162 [ 109.022700][ T6017] usb usb5-port1: unable to enumerate USB device [ 109.072255][ T10] usb 2-1: device descriptor read/64, error -71 [ 109.183914][ T10] usb usb2-port1: attempt power cycle [ 109.523875][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 109.542953][ T10] usb 2-1: device descriptor read/8, error -71 [ 109.782256][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 109.873071][ T10] usb 2-1: device descriptor read/8, error -71 [ 109.982911][ T10] usb usb2-port1: unable to enumerate USB device [ 110.235324][ T6091] netlink: 20 bytes leftover after parsing attributes in process `syz.3.51'. [ 110.239679][ T6090] 9pnet_fd: Insufficient options for proto=fd [ 110.984505][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.032291][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.222463][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.242476][ T6105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.242956][ T6105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.537749][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.576776][ T6111] netlink: 'syz.4.55': attribute type 1 has an invalid length. [ 111.991368][ T6113] netlink: 'syz.0.54': attribute type 16 has an invalid length. [ 111.991397][ T6113] netlink: 'syz.0.54': attribute type 17 has an invalid length. [ 112.203619][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.749644][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.116551][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.508364][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.996708][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.035854][ T5801] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 114.145916][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.189635][ T6137] overlay: ./bus is not a directory [ 114.702331][ T6017] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.753894][ T6113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.145736][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.259637][ T6017] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 115.259667][ T6017] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.259684][ T6017] usb 4-1: Product: syz [ 115.259697][ T6017] usb 4-1: Manufacturer: syz [ 115.259709][ T6017] usb 4-1: SerialNumber: syz [ 115.305672][ T6017] usb 4-1: config 0 descriptor?? [ 115.528265][ T6017] usb 4-1: ignoring: probably an ADSL modem [ 115.922514][ T5809] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.321429][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.322167][ T5809] usb 3-1: Using ep0 maxpacket: 16 [ 116.324434][ T5809] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 116.324454][ T5809] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.327514][ T5809] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.327538][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.327555][ T5809] usb 3-1: Product: syz [ 116.327568][ T5809] usb 3-1: Manufacturer: syz [ 116.327579][ T5809] usb 3-1: SerialNumber: syz [ 116.371360][ T6154] netlink: 104 bytes leftover after parsing attributes in process `syz.4.65'. [ 116.499542][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.620390][ T6149] tipc: Started in network mode [ 116.620488][ T6149] tipc: Node identity ac1414aa, cluster identity 4711 [ 116.643735][ T6149] tipc: Enabled bearer , priority 10 [ 116.710609][ T5809] usb 3-1: 0:2 : does not exist [ 116.791901][ T6017] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 116.828814][ T6017] usb 4-1: USB disconnect, device number 4 [ 116.881683][ T5809] usb 3-1: USB disconnect, device number 2 [ 117.701042][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.782387][ T5802] tipc: Node number set to 2886997162 [ 118.049872][ T6170] FAULT_INJECTION: forcing a failure. [ 118.049872][ T6170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.049904][ T6170] CPU: 0 UID: 0 PID: 6170 Comm: syz.1.68 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 118.049923][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 118.049933][ T6170] Call Trace: [ 118.049940][ T6170] [ 118.049951][ T6170] dump_stack_lvl+0x189/0x250 [ 118.049979][ T6170] ? __pfx____ratelimit+0x10/0x10 [ 118.050001][ T6170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.050023][ T6170] ? __pfx__printk+0x10/0x10 [ 118.050043][ T6170] ? __might_fault+0xb0/0x130 [ 118.050075][ T6170] should_fail_ex+0x46c/0x600 [ 118.050103][ T6170] _copy_from_user+0x2d/0xb0 [ 118.050122][ T6170] __sys_bpf+0x1e3/0x860 [ 118.050147][ T6170] ? __pfx___sys_bpf+0x10/0x10 [ 118.050166][ T6170] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 118.050195][ T6170] ? ksys_write+0x230/0x260 [ 118.050217][ T6170] ? __pfx_ksys_write+0x10/0x10 [ 118.050243][ T6170] __x64_sys_bpf+0x7c/0x90 [ 118.050264][ T6170] do_syscall_64+0xfa/0xfa0 [ 118.050283][ T6170] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.050302][ T6170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.050319][ T6170] ? clear_bhb_loop+0x60/0xb0 [ 118.050339][ T6170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.050355][ T6170] RIP: 0033:0x7f7ef160efc9 [ 118.050370][ T6170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.050384][ T6170] RSP: 002b:00007f7eef876038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 118.050403][ T6170] RAX: ffffffffffffffda RBX: 00007f7ef1865fa0 RCX: 00007f7ef160efc9 [ 118.050416][ T6170] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 0000000000000004 [ 118.050427][ T6170] RBP: 00007f7eef876090 R08: 0000000000000000 R09: 0000000000000000 [ 118.050437][ T6170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.050447][ T6170] R13: 00007f7ef1866038 R14: 00007f7ef1865fa0 R15: 00007fff213b5be8 [ 118.050478][ T6170] [ 118.054670][ T5801] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 118.054809][ T5801] Bluetooth: hci3: Injecting HCI hardware error event [ 118.057217][ T5801] Bluetooth: hci3: hardware error 0x00 [ 118.527612][ T5816] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 118.706540][ T6182] fuse: Unknown parameter '0000000000000000000001200000000000000000000003' [ 118.767431][ T6166] syz.4.67 (6166) used greatest stack depth: 16376 bytes left [ 119.002849][ T992] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.162142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.333757][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.568213][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.778518][ T992] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 119.778541][ T992] usb 3-1: config 0 has no interface number 0 [ 119.778588][ T992] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.778609][ T992] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.778644][ T992] usb 3-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 119.778664][ T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.837425][ T992] usb 3-1: config 0 descriptor?? [ 119.981989][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.263822][ T992] uclogic 0003:28BD:0905.0002: Interface probing failed: -22 [ 120.263894][ T992] uclogic 0003:28BD:0905.0002: interface is invalid, ignoring [ 120.462250][ T1860] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 120.478348][ T6186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.478900][ T6186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.613088][ T5801] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 120.616211][ T1860] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 120.616237][ T1860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.649458][ T6209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.83'. [ 120.649656][ T1860] usb 5-1: config 0 descriptor?? [ 120.670848][ T6209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.83'. [ 120.750681][ T5809] usb 3-1: USB disconnect, device number 3 [ 121.056900][ T1860] hackrf 5-1:0.0: Board ID: 00 [ 121.056920][ T1860] hackrf 5-1:0.0: Firmware version: [ 121.092645][ T5979] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 121.092670][ T1860] hackrf 5-1:0.0: Registered as swradio24 [ 121.092689][ T1860] videodev: could not get a free minor [ 121.092698][ T1860] hackrf 5-1:0.0: Failed to register as video device (-23) [ 121.102749][ T6215] FAULT_INJECTION: forcing a failure. [ 121.102749][ T6215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.102780][ T6215] CPU: 1 UID: 0 PID: 6215 Comm: syz.0.85 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 121.102798][ T6215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 121.102808][ T6215] Call Trace: [ 121.102815][ T6215] [ 121.102823][ T6215] dump_stack_lvl+0x189/0x250 [ 121.102851][ T6215] ? __pfx____ratelimit+0x10/0x10 [ 121.102872][ T6215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.102894][ T6215] ? __pfx__printk+0x10/0x10 [ 121.102913][ T6215] ? __might_fault+0xb0/0x130 [ 121.102946][ T6215] should_fail_ex+0x46c/0x600 [ 121.102973][ T6215] _copy_from_user+0x2d/0xb0 [ 121.102991][ T6215] ___sys_sendmsg+0x158/0x2a0 [ 121.103013][ T6215] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.103065][ T6215] ? __fget_files+0x2a/0x420 [ 121.103086][ T6215] ? __fget_files+0x3a6/0x420 [ 121.103116][ T6215] __x64_sys_sendmsg+0x1a1/0x260 [ 121.103137][ T6215] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 121.103164][ T6215] ? __pfx_ksys_write+0x10/0x10 [ 121.103188][ T6215] ? do_syscall_64+0xbe/0xfa0 [ 121.103211][ T6215] do_syscall_64+0xfa/0xfa0 [ 121.103229][ T6215] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.103248][ T6215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.103265][ T6215] ? clear_bhb_loop+0x60/0xb0 [ 121.103284][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.103300][ T6215] RIP: 0033:0x7f06d1faefc9 [ 121.103315][ T6215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.103329][ T6215] RSP: 002b:00007f06d020e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.103348][ T6215] RAX: ffffffffffffffda RBX: 00007f06d2205fa0 RCX: 00007f06d1faefc9 [ 121.103360][ T6215] RDX: 0000000004000800 RSI: 00002000000012c0 RDI: 0000000000000005 [ 121.103371][ T6215] RBP: 00007f06d020e090 R08: 0000000000000000 R09: 0000000000000000 [ 121.103381][ T6215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.103391][ T6215] R13: 00007f06d2206038 R14: 00007f06d2205fa0 R15: 00007ffc651e2398 [ 121.103419][ T6215] [ 121.106413][ T1860] hackrf 5-1:0.0: probe with driver hackrf failed with error -23 [ 121.246675][ T5979] usb 2-1: Using ep0 maxpacket: 16 [ 121.249187][ T5979] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 121.249211][ T5979] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 121.249229][ T5979] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 121.249245][ T5979] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 121.249261][ T5979] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 121.249278][ T5979] usb 2-1: config 0 has no interface number 0 [ 121.249321][ T5979] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 121.249345][ T5979] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 121.249365][ T5979] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 121.249384][ T5979] usb 2-1: config 0 interface 125 has no altsetting 1 [ 121.304725][ T5979] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 121.304753][ T5979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.304770][ T5979] usb 2-1: Product: syz [ 121.304783][ T5979] usb 2-1: Manufacturer: syz [ 121.304795][ T5979] usb 2-1: SerialNumber: syz [ 121.493947][ T5979] usb 2-1: config 0 descriptor?? [ 121.757997][ T6209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.83'. [ 121.858481][ T1860] usb 5-1: USB disconnect, device number 6 [ 121.955228][ T6209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.956712][ T6209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.994262][ T6209] overlayfs: failed to set uuid (14/file0, err=-1); falling back to uuid=null. [ 121.994327][ T6209] overlayfs: failed to verify upper root origin [ 122.299024][ T5979] usb 2-1: USB disconnect, device number 7 [ 122.375572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.375674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.532197][ T5801] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 122.532754][ T5801] Bluetooth: hci2: Injecting HCI hardware error event [ 122.536222][ T5816] Bluetooth: hci2: hardware error 0x00 [ 122.711325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 122.772229][ T5979] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 122.855072][ T6239] netlink: 104 bytes leftover after parsing attributes in process `syz.2.93'. [ 122.982008][ T5979] usb 4-1: Using ep0 maxpacket: 32 [ 122.997383][ T5979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.997414][ T5979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.997450][ T5979] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 122.997471][ T5979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.064419][ T5979] usb 4-1: config 0 descriptor?? [ 123.272169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.776807][ T6259] FAULT_INJECTION: forcing a failure. [ 123.776807][ T6259] name failslab, interval 1, probability 0, space 0, times 0 [ 123.776840][ T6259] CPU: 1 UID: 0 PID: 6259 Comm: syz.2.99 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 123.776861][ T6259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 123.776871][ T6259] Call Trace: [ 123.776879][ T6259] [ 123.776887][ T6259] dump_stack_lvl+0x189/0x250 [ 123.776915][ T6259] ? __pfx____ratelimit+0x10/0x10 [ 123.776936][ T6259] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.776958][ T6259] ? __pfx__printk+0x10/0x10 [ 123.776983][ T6259] ? __pfx___might_resched+0x10/0x10 [ 123.777001][ T6259] ? fs_reclaim_acquire+0x7d/0x100 [ 123.777027][ T6259] should_fail_ex+0x46c/0x600 [ 123.777053][ T6259] ? dup_task_struct+0x52/0x830 [ 123.777072][ T6259] should_failslab+0xa8/0x100 [ 123.777095][ T6259] ? dup_task_struct+0x52/0x830 [ 123.777113][ T6259] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 123.777133][ T6259] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 123.777157][ T6259] dup_task_struct+0x52/0x830 [ 123.777176][ T6259] ? rt_spin_unlock+0x161/0x200 [ 123.777196][ T6259] copy_process+0x545/0x3ae0 [ 123.777248][ T6259] ? __pfx_copy_process+0x10/0x10 [ 123.777281][ T6259] kernel_clone+0x224/0x7c0 [ 123.777305][ T6259] ? __pfx_kernel_clone+0x10/0x10 [ 123.777323][ T6259] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 123.777363][ T6259] __x64_sys_clone+0x18b/0x1e0 [ 123.777388][ T6259] ? __pfx___x64_sys_clone+0x10/0x10 [ 123.777424][ T6259] ? __pfx_ksys_write+0x10/0x10 [ 123.777448][ T6259] ? do_syscall_64+0xbe/0xfa0 [ 123.777471][ T6259] do_syscall_64+0xfa/0xfa0 [ 123.777490][ T6259] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.777509][ T6259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.777524][ T6259] ? clear_bhb_loop+0x60/0xb0 [ 123.777544][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.777561][ T6259] RIP: 0033:0x7f4352dcefc9 [ 123.777577][ T6259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.777591][ T6259] RSP: 002b:00007f4350ff3fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 123.777610][ T6259] RAX: ffffffffffffffda RBX: 00007f4353026180 RCX: 00007f4352dcefc9 [ 123.777622][ T6259] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020223000 [ 123.777633][ T6259] RBP: 00007f4350ff4090 R08: 0000000000000000 R09: 0000000000000000 [ 123.777643][ T6259] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 123.777653][ T6259] R13: 00007f4353026218 R14: 00007f4353026180 R15: 00007ffd2d8380f8 [ 123.777680][ T6259] [ 123.927909][ T5979] hid_parser_main: 73 callbacks suppressed [ 123.927932][ T5979] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 123.927961][ T5979] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 123.927985][ T5979] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 123.928008][ T5979] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 123.928031][ T5979] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 123.928054][ T5979] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 123.928077][ T5979] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 124.045227][ T5979] lua 0003:1E7D:2C2E.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.3-1/input0 [ 124.064237][ T6256] uprobe: syz.2.99:6256 failed to unregister, leaking uprobe [ 124.157700][ T6264] FAULT_INJECTION: forcing a failure. [ 124.157700][ T6264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.157733][ T6264] CPU: 1 UID: 0 PID: 6264 Comm: syz.1.101 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 124.157752][ T6264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 124.157763][ T6264] Call Trace: [ 124.157770][ T6264] [ 124.157777][ T6264] dump_stack_lvl+0x189/0x250 [ 124.157804][ T6264] ? __pfx____ratelimit+0x10/0x10 [ 124.157825][ T6264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.157848][ T6264] ? __pfx__printk+0x10/0x10 [ 124.157879][ T6264] should_fail_ex+0x46c/0x600 [ 124.157906][ T6264] _copy_to_user+0x31/0xb0 [ 124.157926][ T6264] __se_sys_msgctl+0x1c5/0x350 [ 124.157952][ T6264] ? __pfx___se_sys_msgctl+0x10/0x10 [ 124.157982][ T6264] ? ksys_write+0x230/0x260 [ 124.158005][ T6264] ? __pfx_ksys_write+0x10/0x10 [ 124.158027][ T6264] ? do_syscall_64+0xbe/0xfa0 [ 124.158050][ T6264] do_syscall_64+0xfa/0xfa0 [ 124.158068][ T6264] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.158087][ T6264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.158104][ T6264] ? clear_bhb_loop+0x60/0xb0 [ 124.158123][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.158138][ T6264] RIP: 0033:0x7f7ef160efc9 [ 124.158154][ T6264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.158175][ T6264] RSP: 002b:00007f7eef876038 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 124.158194][ T6264] RAX: ffffffffffffffda RBX: 00007f7ef1865fa0 RCX: 00007f7ef160efc9 [ 124.158206][ T6264] RDX: 0000200000000540 RSI: 0000000000000002 RDI: 0000000000000000 [ 124.158216][ T6264] RBP: 00007f7eef876090 R08: 0000000000000000 R09: 0000000000000000 [ 124.158226][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.158236][ T6264] R13: 00007f7ef1866038 R14: 00007f7ef1865fa0 R15: 00007fff213b5be8 [ 124.158266][ T6264] [ 124.733729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.734788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.932296][ T5816] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 125.417987][ T6256] uprobe: syz.2.99:6256 failed to unregister, leaking uprobe [ 125.820248][ T6277] overlayfs: failed to resolve './file1': -2 [ 126.363540][ T6297] FAULT_INJECTION: forcing a failure. [ 126.363540][ T6297] name failslab, interval 1, probability 0, space 0, times 0 [ 126.363569][ T6297] CPU: 1 UID: 0 PID: 6297 Comm: syz.4.114 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.363589][ T6297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 126.363599][ T6297] Call Trace: [ 126.363606][ T6297] [ 126.363614][ T6297] dump_stack_lvl+0x189/0x250 [ 126.363643][ T6297] ? __pfx____ratelimit+0x10/0x10 [ 126.363664][ T6297] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.363687][ T6297] ? __pfx__printk+0x10/0x10 [ 126.363713][ T6297] ? __pfx___might_resched+0x10/0x10 [ 126.363736][ T6297] should_fail_ex+0x46c/0x600 [ 126.363763][ T6297] should_failslab+0xa8/0x100 [ 126.363788][ T6297] __kmalloc_noprof+0xcc/0x7d0 [ 126.363808][ T6297] ? kfree+0x51/0x950 [ 126.363824][ T6297] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 126.363851][ T6297] tomoyo_realpath_from_path+0xe3/0x5d0 [ 126.363871][ T6297] ? tomoyo_domain+0xda/0x130 [ 126.363897][ T6297] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 126.363921][ T6297] tomoyo_path_number_perm+0x1e8/0x5a0 [ 126.363947][ T6297] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 126.363973][ T6297] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 126.363995][ T6297] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.364045][ T6297] ? __fget_files+0x2a/0x420 [ 126.364071][ T6297] ? __fget_files+0x3a6/0x420 [ 126.364091][ T6297] ? __fget_files+0x2a/0x420 [ 126.364117][ T6297] security_file_ioctl+0xcb/0x2d0 [ 126.364138][ T6297] __se_sys_ioctl+0x47/0x170 [ 126.364160][ T6297] do_syscall_64+0xfa/0xfa0 [ 126.364179][ T6297] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.364220][ T6297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.364238][ T6297] ? clear_bhb_loop+0x60/0xb0 [ 126.364259][ T6297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.364275][ T6297] RIP: 0033:0x7f41b434efc9 [ 126.364291][ T6297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.364305][ T6297] RSP: 002b:00007f41b25b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.364324][ T6297] RAX: ffffffffffffffda RBX: 00007f41b45a5fa0 RCX: 00007f41b434efc9 [ 126.364337][ T6297] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 126.364347][ T6297] RBP: 00007f41b25b6090 R08: 0000000000000000 R09: 0000000000000000 [ 126.364358][ T6297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.364368][ T6297] R13: 00007f41b45a6038 R14: 00007f41b45a5fa0 R15: 00007ffd70833508 [ 126.364398][ T6297] [ 126.364406][ T6297] ERROR: Out of memory at tomoyo_realpath_from_path. [ 126.842367][ T992] usb 4-1: USB disconnect, device number 5 [ 127.085915][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.127'. [ 127.531880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 127.532042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 127.639861][ T6326] FAULT_INJECTION: forcing a failure. [ 127.639861][ T6326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.639883][ T6326] CPU: 0 UID: 0 PID: 6326 Comm: syz.0.126 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 127.639895][ T6326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.639902][ T6326] Call Trace: [ 127.639907][ T6326] [ 127.639911][ T6326] dump_stack_lvl+0x189/0x250 [ 127.639930][ T6326] ? __pfx____ratelimit+0x10/0x10 [ 127.639943][ T6326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.639957][ T6326] ? __pfx__printk+0x10/0x10 [ 127.639969][ T6326] ? __might_fault+0xb0/0x130 [ 127.639988][ T6326] should_fail_ex+0x46c/0x600 [ 127.640005][ T6326] _copy_from_user+0x2d/0xb0 [ 127.640016][ T6326] do_semtimedop+0x1d3/0x2e0 [ 127.640028][ T6326] ? __pfx_do_semtimedop+0x10/0x10 [ 127.640037][ T6326] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 127.640069][ T6326] ? __pfx_ksys_write+0x10/0x10 [ 127.640092][ T6326] ? do_syscall_64+0xbe/0xfa0 [ 127.640106][ T6326] do_syscall_64+0xfa/0xfa0 [ 127.640119][ T6326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.640128][ T6326] ? asm_sysvec_call_function_single+0x1a/0x20 [ 127.640138][ T6326] ? clear_bhb_loop+0x60/0xb0 [ 127.640149][ T6326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.640159][ T6326] RIP: 0033:0x7f06d1faefc9 [ 127.640168][ T6326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.640176][ T6326] RSP: 002b:00007f06d01ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 127.640188][ T6326] RAX: ffffffffffffffda RBX: 00007f06d2206090 RCX: 00007f06d1faefc9 [ 127.640195][ T6326] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000000 [ 127.640201][ T6326] RBP: 00007f06d01ed090 R08: 0000000000000000 R09: 0000000000000000 [ 127.640207][ T6326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.640213][ T6326] R13: 00007f06d2206128 R14: 00007f06d2206090 R15: 00007ffc651e2398 [ 127.640229][ T6326] [ 128.365829][ T6339] warning: `syz.1.130' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.422380][ T6343] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 128.431253][ T6343] qnx6: wrong signature (magic) in superblock #1. [ 128.431267][ T6343] qnx6: unable to read the first superblock [ 128.834278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.267984][ T6357] FAULT_INJECTION: forcing a failure. [ 130.267984][ T6357] name failslab, interval 1, probability 0, space 0, times 0 [ 130.268014][ T6357] CPU: 0 UID: 0 PID: 6357 Comm: syz.0.139 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 130.268030][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 130.268039][ T6357] Call Trace: [ 130.268045][ T6357] [ 130.268052][ T6357] dump_stack_lvl+0x189/0x250 [ 130.268077][ T6357] ? __pfx____ratelimit+0x10/0x10 [ 130.268093][ T6357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.268111][ T6357] ? __pfx__printk+0x10/0x10 [ 130.268130][ T6357] ? __pfx___might_resched+0x10/0x10 [ 130.268145][ T6357] ? fs_reclaim_acquire+0x7d/0x100 [ 130.268167][ T6357] should_fail_ex+0x46c/0x600 [ 130.268190][ T6357] ? __alloc_skb+0x112/0x2d0 [ 130.268204][ T6357] should_failslab+0xa8/0x100 [ 130.268225][ T6357] ? __alloc_skb+0x112/0x2d0 [ 130.268236][ T6357] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 130.268253][ T6357] ? __pfx_tcp_current_mss+0x10/0x10 [ 130.268267][ T6357] ? try_to_take_rt_mutex+0x840/0xb00 [ 130.268289][ T6357] __alloc_skb+0x112/0x2d0 [ 130.268306][ T6357] tcp_stream_alloc_skb+0x3d/0x340 [ 130.268330][ T6357] tcp_sendmsg_locked+0x1c85/0x5550 [ 130.268379][ T6357] ? __local_bh_enable+0x28c/0x410 [ 130.268397][ T6357] ? reacquire_held_locks+0x127/0x1d0 [ 130.268424][ T6357] ? __pfx___local_bh_enable+0x10/0x10 [ 130.268456][ T6357] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 130.268482][ T6357] ? rt_spin_unlock+0x161/0x200 [ 130.268497][ T6357] ? lock_sock_nested+0x5f/0x130 [ 130.268518][ T6357] ? lock_sock_nested+0xdd/0x130 [ 130.268538][ T6357] tcp_sendmsg+0x2f/0x50 [ 130.268559][ T6357] __sock_sendmsg+0x19c/0x270 [ 130.268581][ T6357] __sys_sendto+0x3c7/0x520 [ 130.268597][ T6357] ? __pfx___sys_sendto+0x10/0x10 [ 130.268632][ T6357] ? ksys_write+0x230/0x260 [ 130.268650][ T6357] ? __pfx_ksys_write+0x10/0x10 [ 130.268668][ T6357] __x64_sys_sendto+0xde/0x100 [ 130.268684][ T6357] do_syscall_64+0xfa/0xfa0 [ 130.268699][ T6357] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.268714][ T6357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.268728][ T6357] ? clear_bhb_loop+0x60/0xb0 [ 130.268744][ T6357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.268757][ T6357] RIP: 0033:0x7f06d1faefc9 [ 130.268807][ T6357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.268825][ T6357] RSP: 002b:00007f06d020e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 130.268843][ T6357] RAX: ffffffffffffffda RBX: 00007f06d2205fa0 RCX: 00007f06d1faefc9 [ 130.268853][ T6357] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 130.268861][ T6357] RBP: 00007f06d020e090 R08: 0000000000000000 R09: 0000000000000000 [ 130.268868][ T6357] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001 [ 130.268876][ T6357] R13: 00007f06d2206038 R14: 00007f06d2205fa0 R15: 00007ffc651e2398 [ 130.268899][ T6357] [ 130.903134][ T5802] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 131.062308][ T5802] usb 4-1: Using ep0 maxpacket: 16 [ 131.066764][ T5802] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 131.066789][ T5802] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.069828][ T5802] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.069854][ T5802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.069871][ T5802] usb 4-1: Product: syz [ 131.069883][ T5802] usb 4-1: Manufacturer: syz [ 131.069895][ T5802] usb 4-1: SerialNumber: syz [ 131.554918][ T6376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.643582][ T5816] Bluetooth: hci4: link tx timeout [ 131.645708][ T5816] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.864667][ T6383] FAULT_INJECTION: forcing a failure. [ 132.864667][ T6383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.864723][ T6383] CPU: 1 UID: 0 PID: 6383 Comm: syz.4.145 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 132.864743][ T6383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 132.864753][ T6383] Call Trace: [ 132.864760][ T6383] [ 132.864768][ T6383] dump_stack_lvl+0x189/0x250 [ 132.864797][ T6383] ? __pfx____ratelimit+0x10/0x10 [ 132.864818][ T6383] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.864841][ T6383] ? __pfx__printk+0x10/0x10 [ 132.864858][ T6383] ? lock_acquire+0x175/0x360 [ 132.864893][ T6383] should_fail_ex+0x46c/0x600 [ 132.864920][ T6383] _copy_from_user+0x2d/0xb0 [ 132.864940][ T6383] ___sys_sendmsg+0x158/0x2a0 [ 132.864962][ T6383] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.865016][ T6383] ? __fget_files+0x2a/0x420 [ 132.865038][ T6383] ? __fget_files+0x3a6/0x420 [ 132.865069][ T6383] __sys_sendmmsg+0x22d/0x430 [ 132.865094][ T6383] ? __pfx___sys_sendmmsg+0x10/0x10 [ 132.865124][ T6383] ? trace_irq_disable+0x37/0x110 [ 132.865158][ T6383] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.865192][ T6383] __x64_sys_sendmmsg+0xa0/0xc0 [ 132.865214][ T6383] do_syscall_64+0xfa/0xfa0 [ 132.865236][ T6383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.865252][ T6383] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 132.865268][ T6383] ? clear_bhb_loop+0x60/0xb0 [ 132.865288][ T6383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.865305][ T6383] RIP: 0033:0x7f41b434efc9 [ 132.865320][ T6383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.865334][ T6383] RSP: 002b:00007f41b2595038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 132.865353][ T6383] RAX: ffffffffffffffda RBX: 00007f41b45a6090 RCX: 00007f41b434efc9 [ 132.865365][ T6383] RDX: 00000000ffffff80 RSI: 0000200000004100 RDI: 0000000000000007 [ 132.865377][ T6383] RBP: 00007f41b2595090 R08: 0000000000000000 R09: 0000000000000000 [ 132.865387][ T6383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.865397][ T6383] R13: 00007f41b45a6128 R14: 00007f41b45a6090 R15: 00007ffd70833508 [ 132.865427][ T6383] [ 132.904779][ T6363] tipc: Enabling of bearer rejected, already enabled [ 133.395882][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.395975][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.575009][ T5802] usb 4-1: 0:2 : does not exist [ 133.645711][ T5802] usb 4-1: USB disconnect, device number 6 [ 133.723114][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.732630][ T5801] Bluetooth: hci4: command 0x0406 tx timeout [ 135.337527][ T6398] FAULT_INJECTION: forcing a failure. [ 135.337527][ T6398] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 135.337566][ T6398] CPU: 1 UID: 0 PID: 6398 Comm: syz.2.152 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 135.337586][ T6398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 135.337595][ T6398] Call Trace: [ 135.337603][ T6398] [ 135.337611][ T6398] dump_stack_lvl+0x189/0x250 [ 135.337640][ T6398] ? __pfx____ratelimit+0x10/0x10 [ 135.337661][ T6398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.337684][ T6398] ? __pfx__printk+0x10/0x10 [ 135.337706][ T6398] ? fs_reclaim_acquire+0x7d/0x100 [ 135.337737][ T6398] should_fail_ex+0x46c/0x600 [ 135.337764][ T6398] prepare_alloc_pages+0x213/0x670 [ 135.337795][ T6398] __alloc_frozen_pages_noprof+0x123/0x370 [ 135.337828][ T6398] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 135.337850][ T6398] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 135.337875][ T6398] ? policy_nodemask+0x27c/0x720 [ 135.337903][ T6398] alloc_pages_mpol+0xd1/0x380 [ 135.337929][ T6398] alloc_pages_noprof+0xcf/0x1e0 [ 135.337954][ T6398] get_free_pages_noprof+0xf/0x80 [ 135.337978][ T6398] __se_sys_mincore+0xd9/0x5c0 [ 135.337996][ T6398] ? do_syscall_64+0xbe/0xfa0 [ 135.338020][ T6398] do_syscall_64+0xfa/0xfa0 [ 135.338043][ T6398] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.338062][ T6398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.338078][ T6398] ? clear_bhb_loop+0x60/0xb0 [ 135.338099][ T6398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.338115][ T6398] RIP: 0033:0x7f4352dcefc9 [ 135.338128][ T6398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.338138][ T6398] RSP: 002b:00007f4350ff4038 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 135.338152][ T6398] RAX: ffffffffffffffda RBX: 00007f4353026180 RCX: 00007f4352dcefc9 [ 135.338162][ T6398] RDX: 0000200000000340 RSI: 0000000000003000 RDI: 0000200000000000 [ 135.338171][ T6398] RBP: 00007f4350ff4090 R08: 0000000000000000 R09: 0000000000000000 [ 135.338178][ T6398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.338186][ T6398] R13: 00007f4353026218 R14: 00007f4353026180 R15: 00007ffd2d8380f8 [ 135.338208][ T6398] [ 135.752184][ T992] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 135.904694][ T992] usb 1-1: Using ep0 maxpacket: 32 [ 135.908069][ T992] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 135.908094][ T992] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.908110][ T992] usb 1-1: config 0 has no interface number 0 [ 135.908155][ T992] usb 1-1: config 0 interface 196 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 135.908178][ T992] usb 1-1: config 0 interface 196 has no altsetting 0 [ 135.921846][ T992] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 135.921872][ T992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.921889][ T992] usb 1-1: Product: syz [ 135.921902][ T992] usb 1-1: Manufacturer: syz [ 135.921914][ T992] usb 1-1: SerialNumber: syz [ 135.966646][ T992] usb 1-1: config 0 descriptor?? [ 136.010192][ T992] ipheth 1-1:0.196: Unable to find alternate settings interface [ 136.197713][ T992] usb 1-1: USB disconnect, device number 5 [ 137.507015][ T6418] binder: 6417:6418 ioctl c0306201 0 returned -14 [ 137.855414][ T6034] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 137.933388][ T992] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 138.426672][ T992] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.430666][ T992] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 138.430808][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 138.430857][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 138.430901][ T992] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 138.664988][ T6034] usb 2-1: config index 0 descriptor too short (expected 1051, got 27) [ 138.665022][ T6034] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 138.665040][ T6034] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 138.665090][ T6034] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 138.665110][ T6034] usb 2-1: config 0 interface 0 altsetting 12 bulk endpoint 0x83 has invalid maxpacket 0 [ 138.665131][ T6034] usb 2-1: config 0 interface 0 has no altsetting 0 [ 138.668055][ T6034] usb 2-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 138.668080][ T6034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.668097][ T6034] usb 2-1: Product: syz [ 138.668109][ T6034] usb 2-1: Manufacturer: syz [ 138.668122][ T6034] usb 2-1: SerialNumber: syz [ 138.919543][ T992] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 138.919572][ T992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.919590][ T992] usb 5-1: Product: syz [ 138.919603][ T992] usb 5-1: Manufacturer: syz [ 138.919613][ T992] usb 5-1: SerialNumber: syz [ 138.967399][ T6034] usb 2-1: config 0 descriptor?? [ 138.978648][ T6034] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 139.014922][ T992] usb 5-1: config 0 descriptor?? [ 139.029910][ T992] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected [ 139.032684][ T6034] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 139.032759][ T6034] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 139.060725][ T992] garmin_gps ttyUSB0: failed to submit interrupt urb: -90 [ 139.060782][ T992] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 139.098538][ T6034] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 139.098632][ T6034] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 140.180660][ T6034] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 140.195521][ T6034] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 140.195573][ T6034] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 140.206738][ T6034] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 140.213178][ T6034] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 140.259250][ T6034] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 140.268239][ T6034] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 140.268290][ T6034] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 140.288693][ T5979] usb 5-1: USB disconnect, device number 7 [ 140.297863][ T6034] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 140.375234][ T5979] garmin_gps 5-1:0.0: device disconnected [ 140.575242][ T992] usb 2-1: USB disconnect, device number 8 [ 140.639010][ T992] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 140.656177][ T992] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 140.697337][ T992] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 140.731656][ T992] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 140.752679][ T992] keyspan 2-1:0.0: device disconnected [ 141.235963][ T6474] FAULT_INJECTION: forcing a failure. [ 141.235963][ T6474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.235984][ T6474] CPU: 1 UID: 0 PID: 6474 Comm: syz.2.173 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 141.235996][ T6474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 141.236002][ T6474] Call Trace: [ 141.236006][ T6474] [ 141.236010][ T6474] dump_stack_lvl+0x189/0x250 [ 141.236029][ T6474] ? __pfx____ratelimit+0x10/0x10 [ 141.236041][ T6474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.236054][ T6474] ? __pfx__printk+0x10/0x10 [ 141.236066][ T6474] ? __might_fault+0xb0/0x130 [ 141.236084][ T6474] should_fail_ex+0x46c/0x600 [ 141.236101][ T6474] _copy_from_iter+0x1de/0x1790 [ 141.236114][ T6474] ? __lock_acquire+0xab9/0xd20 [ 141.236133][ T6474] ? file_tty_write+0x217/0xa30 [ 141.236145][ T6474] ? __pfx__copy_from_iter+0x10/0x10 [ 141.236156][ T6474] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 141.236171][ T6474] ? _mutex_trylock_nest_lock+0x129/0x180 [ 141.236179][ T6474] ? file_tty_write+0x217/0xa30 [ 141.236192][ T6474] file_tty_write+0x4ca/0xa30 [ 141.236207][ T6474] vfs_write+0x5d5/0xb40 [ 141.236222][ T6474] ? __pfx_tty_write+0x10/0x10 [ 141.236232][ T6474] ? __pfx_vfs_write+0x10/0x10 [ 141.236248][ T6474] ? __fget_files+0x2a/0x420 [ 141.236266][ T6474] ksys_write+0x14b/0x260 [ 141.236279][ T6474] ? __pfx_ksys_write+0x10/0x10 [ 141.236292][ T6474] ? do_syscall_64+0xbe/0xfa0 [ 141.236306][ T6474] do_syscall_64+0xfa/0xfa0 [ 141.236316][ T6474] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.236327][ T6474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.236337][ T6474] ? clear_bhb_loop+0x60/0xb0 [ 141.236348][ T6474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.236357][ T6474] RIP: 0033:0x7f4352dcefc9 [ 141.236366][ T6474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.236374][ T6474] RSP: 002b:00007f4350ff4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 141.236385][ T6474] RAX: ffffffffffffffda RBX: 00007f4353026180 RCX: 00007f4352dcefc9 [ 141.236392][ T6474] RDX: 0000000000001006 RSI: 0000200000001980 RDI: 0000000000000003 [ 141.236398][ T6474] RBP: 00007f4350ff4090 R08: 0000000000000000 R09: 0000000000000000 [ 141.236404][ T6474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.236409][ T6474] R13: 00007f4353026218 R14: 00007f4353026180 R15: 00007ffd2d8380f8 [ 141.236426][ T6474] [ 142.238823][ T37] audit: type=1326 audit(1761414301.412:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6458 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef160efc9 code=0x7ffc0000 [ 142.238875][ T37] audit: type=1326 audit(1761414301.412:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6458 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f7ef160efc9 code=0x7ffc0000 [ 142.238915][ T37] audit: type=1326 audit(1761414301.412:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6458 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef160efc9 code=0x7ffc0000 [ 142.238951][ T37] audit: type=1326 audit(1761414301.412:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6458 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7ef160efc9 code=0x7ffc0000 [ 142.238988][ T37] audit: type=1326 audit(1761414301.432:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6458 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef160efc9 code=0x7ffc0000 [ 142.239025][ T37] audit: type=1326 audit(1761414301.442:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6458 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef160efc9 code=0x7ffc0000 [ 143.224013][ T6498] FAULT_INJECTION: forcing a failure. [ 143.224013][ T6498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.224044][ T6498] CPU: 0 UID: 0 PID: 6498 Comm: syz.0.183 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 143.224064][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 143.224073][ T6498] Call Trace: [ 143.224080][ T6498] [ 143.224088][ T6498] dump_stack_lvl+0x189/0x250 [ 143.224116][ T6498] ? __pfx____ratelimit+0x10/0x10 [ 143.224137][ T6498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.224160][ T6498] ? __pfx__printk+0x10/0x10 [ 143.224192][ T6498] should_fail_ex+0x46c/0x600 [ 143.224219][ T6498] _copy_to_user+0x31/0xb0 [ 143.224239][ T6498] quota_getinfo+0x216/0x2a0 [ 143.224260][ T6498] ? __lock_acquire+0xab9/0xd20 [ 143.224283][ T6498] ? __pfx_quota_getinfo+0x10/0x10 [ 143.224340][ T6498] ? do_quotactl+0x7df/0x860 [ 143.224368][ T6498] __se_sys_quotactl_fd+0x278/0x410 [ 143.224394][ T6498] do_syscall_64+0xfa/0xfa0 [ 143.224413][ T6498] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.224433][ T6498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.224450][ T6498] ? clear_bhb_loop+0x60/0xb0 [ 143.224468][ T6498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.224484][ T6498] RIP: 0033:0x7f06d1faefc9 [ 143.224498][ T6498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.224511][ T6498] RSP: 002b:00007f06d020e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bb [ 143.224530][ T6498] RAX: ffffffffffffffda RBX: 00007f06d2205fa0 RCX: 00007f06d1faefc9 [ 143.224541][ T6498] RDX: 0000000000000000 RSI: ffffffff80000500 RDI: 0000000000000003 [ 143.224551][ T6498] RBP: 00007f06d020e090 R08: 0000000000000000 R09: 0000000000000000 [ 143.224561][ T6498] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 143.224570][ T6498] R13: 00007f06d2206038 R14: 00007f06d2205fa0 R15: 00007ffc651e2398 [ 143.224599][ T6498] [ 144.532013][ T6517] FAULT_INJECTION: forcing a failure. [ 144.532013][ T6517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.532043][ T6517] CPU: 0 UID: 0 PID: 6517 Comm: syz.2.191 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 144.532064][ T6517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 144.532073][ T6517] Call Trace: [ 144.532079][ T6517] [ 144.532086][ T6517] dump_stack_lvl+0x189/0x250 [ 144.532114][ T6517] ? __pfx____ratelimit+0x10/0x10 [ 144.532141][ T6517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.532163][ T6517] ? __pfx__printk+0x10/0x10 [ 144.532194][ T6517] should_fail_ex+0x46c/0x600 [ 144.532220][ T6517] _copy_to_user+0x31/0xb0 [ 144.532241][ T6517] simple_read_from_buffer+0xe1/0x170 [ 144.532267][ T6517] proc_fail_nth_read+0x1b6/0x220 [ 144.532288][ T6517] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.532313][ T6517] ? rw_verify_area+0x2ac/0x4e0 [ 144.532332][ T6517] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.532351][ T6517] vfs_read+0x206/0xa30 [ 144.532379][ T6517] ? __pfx_vfs_read+0x10/0x10 [ 144.532395][ T6517] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 144.532421][ T6517] ? mutex_lock_nested+0x154/0x1d0 [ 144.532436][ T6517] ? fdget_pos+0x253/0x320 [ 144.532466][ T6517] ksys_read+0x14b/0x260 [ 144.532488][ T6517] ? __pfx_ksys_read+0x10/0x10 [ 144.532511][ T6517] ? do_syscall_64+0xbe/0xfa0 [ 144.532534][ T6517] do_syscall_64+0xfa/0xfa0 [ 144.532553][ T6517] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.532572][ T6517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.532590][ T6517] ? clear_bhb_loop+0x60/0xb0 [ 144.532610][ T6517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.532627][ T6517] RIP: 0033:0x7f4352dcd9dc [ 144.532642][ T6517] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 144.532656][ T6517] RSP: 002b:00007f4351036030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.532675][ T6517] RAX: ffffffffffffffda RBX: 00007f4353025fa0 RCX: 00007f4352dcd9dc [ 144.532687][ T6517] RDX: 000000000000000f RSI: 00007f43510360a0 RDI: 0000000000000004 [ 144.532698][ T6517] RBP: 00007f4351036090 R08: 0000000000000000 R09: 0000000000000000 [ 144.532708][ T6517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.532718][ T6517] R13: 00007f4353026038 R14: 00007f4353025fa0 R15: 00007ffd2d8380f8 [ 144.532747][ T6517] [ 147.035006][ T6546] FAULT_INJECTION: forcing a failure. [ 147.035006][ T6546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.035037][ T6546] CPU: 1 UID: 0 PID: 6546 Comm: syz.1.203 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 147.035056][ T6546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 147.035066][ T6546] Call Trace: [ 147.035074][ T6546] [ 147.035082][ T6546] dump_stack_lvl+0x189/0x250 [ 147.035114][ T6546] ? __pfx____ratelimit+0x10/0x10 [ 147.035134][ T6546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.035158][ T6546] ? __pfx__printk+0x10/0x10 [ 147.035194][ T6546] should_fail_ex+0x46c/0x600 [ 147.035223][ T6546] _copy_to_user+0x31/0xb0 [ 147.035244][ T6546] simple_read_from_buffer+0xe1/0x170 [ 147.035271][ T6546] proc_fail_nth_read+0x1b6/0x220 [ 147.035292][ T6546] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 147.035314][ T6546] ? rw_verify_area+0x2ac/0x4e0 [ 147.035334][ T6546] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 147.035354][ T6546] vfs_read+0x206/0xa30 [ 147.035383][ T6546] ? __pfx_vfs_read+0x10/0x10 [ 147.035399][ T6546] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 147.035426][ T6546] ? mutex_lock_nested+0x154/0x1d0 [ 147.035442][ T6546] ? fdget_pos+0x253/0x320 [ 147.035473][ T6546] ksys_read+0x14b/0x260 [ 147.035496][ T6546] ? __pfx_ksys_read+0x10/0x10 [ 147.035519][ T6546] ? do_syscall_64+0xbe/0xfa0 [ 147.035543][ T6546] do_syscall_64+0xfa/0xfa0 [ 147.035561][ T6546] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.035580][ T6546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.035597][ T6546] ? clear_bhb_loop+0x60/0xb0 [ 147.035618][ T6546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.035634][ T6546] RIP: 0033:0x7f7ef160d9dc [ 147.035650][ T6546] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 147.035664][ T6546] RSP: 002b:00007f7eef876030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 147.035683][ T6546] RAX: ffffffffffffffda RBX: 00007f7ef1865fa0 RCX: 00007f7ef160d9dc [ 147.035696][ T6546] RDX: 000000000000000f RSI: 00007f7eef8760a0 RDI: 0000000000000004 [ 147.035707][ T6546] RBP: 00007f7eef876090 R08: 0000000000000000 R09: 0000000000000000 [ 147.035718][ T6546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.035728][ T6546] R13: 00007f7ef1866038 R14: 00007f7ef1865fa0 R15: 00007fff213b5be8 [ 147.035760][ T6546] [ 148.413585][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'. [ 149.204446][ T6017] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 149.559913][ T6017] usb 5-1: config index 0 descriptor too short (expected 1051, got 27) [ 149.559938][ T6017] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 149.559953][ T6017] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 149.560000][ T6017] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 149.560018][ T6017] usb 5-1: config 0 interface 0 altsetting 12 bulk endpoint 0x83 has invalid maxpacket 0 [ 149.560037][ T6017] usb 5-1: config 0 interface 0 has no altsetting 0 [ 149.568879][ T6017] usb 5-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 149.568903][ T6017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.568920][ T6017] usb 5-1: Product: syz [ 149.568931][ T6017] usb 5-1: Manufacturer: syz [ 149.568942][ T6017] usb 5-1: SerialNumber: syz [ 149.725373][ T6017] usb 5-1: config 0 descriptor?? [ 149.741674][ T6017] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 149.764700][ T6017] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 149.764779][ T6017] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 149.767002][ T6017] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 149.767088][ T6017] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 149.969590][ T6017] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 150.200426][ T6017] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 82 [ 150.222924][ T6017] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 150.604791][ T6017] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 150.635642][ T6017] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 150.642010][ T6017] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 150.676544][ T6017] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 84 [ 150.676640][ T6017] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 150.748839][ T6017] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 150.855859][ T6596] FAULT_INJECTION: forcing a failure. [ 150.855859][ T6596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.855894][ T6596] CPU: 1 UID: 0 PID: 6596 Comm: syz.3.220 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 150.855936][ T6596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 150.855959][ T6596] Call Trace: [ 150.855971][ T6596] [ 150.855978][ T6596] dump_stack_lvl+0x189/0x250 [ 150.856006][ T6596] ? __pfx____ratelimit+0x10/0x10 [ 150.856027][ T6596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.856048][ T6596] ? __pfx__printk+0x10/0x10 [ 150.856079][ T6596] should_fail_ex+0x46c/0x600 [ 150.856107][ T6596] _copy_to_user+0x31/0xb0 [ 150.856127][ T6596] quota_getinfo+0x216/0x2a0 [ 150.856148][ T6596] ? __lock_acquire+0xab9/0xd20 [ 150.856171][ T6596] ? __pfx_quota_getinfo+0x10/0x10 [ 150.856221][ T6596] ? do_quotactl+0x7df/0x860 [ 150.856250][ T6596] __se_sys_quotactl_fd+0x278/0x410 [ 150.856276][ T6596] do_syscall_64+0xfa/0xfa0 [ 150.856296][ T6596] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.856316][ T6596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.856333][ T6596] ? clear_bhb_loop+0x60/0xb0 [ 150.856354][ T6596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.856371][ T6596] RIP: 0033:0x7f39d84defc9 [ 150.856386][ T6596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.856399][ T6596] RSP: 002b:00007f39d6746038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bb [ 150.856418][ T6596] RAX: ffffffffffffffda RBX: 00007f39d8735fa0 RCX: 00007f39d84defc9 [ 150.856430][ T6596] RDX: 0000000000000000 RSI: ffffffff80000500 RDI: 0000000000000003 [ 150.856441][ T6596] RBP: 00007f39d6746090 R08: 0000000000000000 R09: 0000000000000000 [ 150.856451][ T6596] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 150.856462][ T6596] R13: 00007f39d8736038 R14: 00007f39d8735fa0 R15: 00007fff2092f898 [ 150.856492][ T6596] [ 151.280077][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.559943][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.595237][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.627920][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.800331][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.327537][ T6606] FAULT_INJECTION: forcing a failure. [ 152.327537][ T6606] name failslab, interval 1, probability 0, space 0, times 0 [ 152.327566][ T6606] CPU: 1 UID: 0 PID: 6606 Comm: syz.0.223 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.327585][ T6606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 152.327595][ T6606] Call Trace: [ 152.327601][ T6606] [ 152.327608][ T6606] dump_stack_lvl+0x189/0x250 [ 152.327635][ T6606] ? __pfx____ratelimit+0x10/0x10 [ 152.327656][ T6606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.327678][ T6606] ? __pfx__printk+0x10/0x10 [ 152.327703][ T6606] ? __pfx___might_resched+0x10/0x10 [ 152.327721][ T6606] ? fs_reclaim_acquire+0x7d/0x100 [ 152.327748][ T6606] should_fail_ex+0x46c/0x600 [ 152.327773][ T6606] ? getname_flags+0xb8/0x540 [ 152.327794][ T6606] should_failslab+0xa8/0x100 [ 152.327816][ T6606] ? getname_flags+0xb8/0x540 [ 152.327836][ T6606] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 152.327857][ T6606] ? __pfx_vfs_write+0x10/0x10 [ 152.327880][ T6606] getname_flags+0xb8/0x540 [ 152.327905][ T6606] do_sys_openat2+0xbc/0x1c0 [ 152.327924][ T6606] ? __pfx_do_sys_openat2+0x10/0x10 [ 152.327944][ T6606] ? ksys_write+0x230/0x260 [ 152.327965][ T6606] ? __pfx_ksys_write+0x10/0x10 [ 152.327986][ T6606] __x64_sys_openat+0x138/0x170 [ 152.328007][ T6606] do_syscall_64+0xfa/0xfa0 [ 152.328026][ T6606] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.328045][ T6606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.328061][ T6606] ? clear_bhb_loop+0x60/0xb0 [ 152.328081][ T6606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.328096][ T6606] RIP: 0033:0x7f06d1fad810 [ 152.328111][ T6606] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 152.328125][ T6606] RSP: 002b:00007f06d01cbf60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 152.328143][ T6606] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f06d1fad810 [ 152.328155][ T6606] RDX: 0000000000000000 RSI: 00007f06d203207e RDI: 00000000ffffff9c [ 152.328166][ T6606] RBP: 00007f06d203207e R08: 0000000000000000 R09: 0000000000000000 [ 152.328176][ T6606] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 152.328185][ T6606] R13: 00007f06d2206218 R14: 00007f06d2206180 R15: 00007ffc651e2398 [ 152.328215][ T6606] [ 152.329427][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.508817][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.540993][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.651157][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.749066][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.850385][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.875974][ T44] usb 5-1: USB disconnect, device number 8 [ 152.957206][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.153838][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.270893][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.466813][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.571328][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.668668][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.769240][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.881709][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.177105][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.281373][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.446801][ T44] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 154.499955][ T44] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 154.527524][ T44] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 154.551140][ T44] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 154.561596][ T44] keyspan 5-1:0.0: device disconnected [ 154.932344][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.022943][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.226'. [ 155.223700][ T6623] FAULT_INJECTION: forcing a failure. [ 155.223700][ T6623] name failslab, interval 1, probability 0, space 0, times 0 [ 155.223731][ T6623] CPU: 1 UID: 0 PID: 6623 Comm: syz.3.230 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 155.223750][ T6623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 155.223760][ T6623] Call Trace: [ 155.223767][ T6623] [ 155.223775][ T6623] dump_stack_lvl+0x189/0x250 [ 155.223803][ T6623] ? __pfx____ratelimit+0x10/0x10 [ 155.223824][ T6623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.223847][ T6623] ? __pfx__printk+0x10/0x10 [ 155.223872][ T6623] ? __pfx___might_resched+0x10/0x10 [ 155.223891][ T6623] ? fs_reclaim_acquire+0x7d/0x100 [ 155.223918][ T6623] should_fail_ex+0x46c/0x600 [ 155.223943][ T6623] ? getname_flags+0xb8/0x540 [ 155.223965][ T6623] should_failslab+0xa8/0x100 [ 155.223989][ T6623] ? getname_flags+0xb8/0x540 [ 155.224008][ T6623] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 155.224030][ T6623] ? __pfx_vfs_write+0x10/0x10 [ 155.224053][ T6623] getname_flags+0xb8/0x540 [ 155.224079][ T6623] do_sys_openat2+0xbc/0x1c0 [ 155.224099][ T6623] ? __pfx_do_sys_openat2+0x10/0x10 [ 155.224120][ T6623] ? ksys_write+0x230/0x260 [ 155.224141][ T6623] ? __pfx_ksys_write+0x10/0x10 [ 155.224170][ T6623] __x64_sys_openat+0x138/0x170 [ 155.224193][ T6623] do_syscall_64+0xfa/0xfa0 [ 155.224212][ T6623] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.224232][ T6623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.224249][ T6623] ? clear_bhb_loop+0x60/0xb0 [ 155.224269][ T6623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.224285][ T6623] RIP: 0033:0x7f39d84defc9 [ 155.224300][ T6623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.224314][ T6623] RSP: 002b:00007f39d6746038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 155.224332][ T6623] RAX: ffffffffffffffda RBX: 00007f39d8735fa0 RCX: 00007f39d84defc9 [ 155.224345][ T6623] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 155.224356][ T6623] RBP: 00007f39d6746090 R08: 0000000000000000 R09: 0000000000000000 [ 155.224367][ T6623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.224377][ T6623] R13: 00007f39d8736038 R14: 00007f39d8735fa0 R15: 00007fff2092f898 [ 155.224406][ T6623] [ 157.762256][ T6017] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 157.924609][ T6017] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.924632][ T6017] usb 4-1: config 0 has no interfaces? [ 157.924659][ T6017] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 157.924679][ T6017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.160753][ T6017] usb 4-1: config 0 descriptor?? [ 158.366755][ T6641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.367247][ T6641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.683844][ T6641] FAULT_INJECTION: forcing a failure. [ 158.683844][ T6641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.683876][ T6641] CPU: 1 UID: 0 PID: 6641 Comm: syz.3.234 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 158.683896][ T6641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 158.683906][ T6641] Call Trace: [ 158.683913][ T6641] [ 158.683921][ T6641] dump_stack_lvl+0x189/0x250 [ 158.683951][ T6641] ? __pfx____ratelimit+0x10/0x10 [ 158.683973][ T6641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.683995][ T6641] ? __pfx__printk+0x10/0x10 [ 158.684031][ T6641] should_fail_ex+0x46c/0x600 [ 158.684060][ T6641] _copy_to_user+0x31/0xb0 [ 158.684081][ T6641] simple_read_from_buffer+0xe1/0x170 [ 158.684108][ T6641] proc_fail_nth_read+0x1b6/0x220 [ 158.684130][ T6641] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.684152][ T6641] ? rw_verify_area+0x2ac/0x4e0 [ 158.684172][ T6641] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.684191][ T6641] vfs_read+0x206/0xa30 [ 158.684220][ T6641] ? __pfx_vfs_read+0x10/0x10 [ 158.684237][ T6641] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 158.684264][ T6641] ? mutex_lock_nested+0x154/0x1d0 [ 158.684280][ T6641] ? fdget_pos+0x253/0x320 [ 158.684311][ T6641] ksys_read+0x14b/0x260 [ 158.684333][ T6641] ? __pfx_ksys_read+0x10/0x10 [ 158.684357][ T6641] ? do_syscall_64+0xbe/0xfa0 [ 158.684381][ T6641] do_syscall_64+0xfa/0xfa0 [ 158.684396][ T6641] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.684411][ T6641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.684423][ T6641] ? clear_bhb_loop+0x60/0xb0 [ 158.684440][ T6641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.684453][ T6641] RIP: 0033:0x7f39d84dd9dc [ 158.684472][ T6641] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 158.684596][ T6641] RSP: 002b:00007f39d6746030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 158.684614][ T6641] RAX: ffffffffffffffda RBX: 00007f39d8735fa0 RCX: 00007f39d84dd9dc [ 158.684625][ T6641] RDX: 000000000000000f RSI: 00007f39d67460a0 RDI: 000000000000000d [ 158.684633][ T6641] RBP: 00007f39d6746090 R08: 0000000000000000 R09: 0000000000000000 [ 158.684642][ T6641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.684650][ T6641] R13: 00007f39d8736038 R14: 00007f39d8735fa0 R15: 00007fff2092f898 [ 158.684679][ T6641] [ 160.162210][ T5979] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 160.326020][ T6017] usb 4-1: USB disconnect, device number 7 [ 160.354746][ T5979] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.354797][ T5979] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 160.354816][ T5979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.414313][ T5979] usb 1-1: config 0 descriptor?? [ 160.426823][ T6682] sch_fq: defrate 4294967295 ignored. [ 160.450607][ T5979] pwc: Askey VC010 type 2 USB webcam detected. [ 160.565111][ T6688] FAULT_INJECTION: forcing a failure. [ 160.565111][ T6688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.565195][ T6688] CPU: 1 UID: 0 PID: 6688 Comm: syz.3.251 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 160.565215][ T6688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 160.565225][ T6688] Call Trace: [ 160.565233][ T6688] [ 160.565240][ T6688] dump_stack_lvl+0x189/0x250 [ 160.565268][ T6688] ? __pfx____ratelimit+0x10/0x10 [ 160.565290][ T6688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.565316][ T6688] ? __pfx__printk+0x10/0x10 [ 160.565336][ T6688] ? __might_fault+0xb0/0x130 [ 160.565369][ T6688] should_fail_ex+0x46c/0x600 [ 160.565396][ T6688] _copy_from_user+0x2d/0xb0 [ 160.565414][ T6688] ___sys_sendmsg+0x158/0x2a0 [ 160.565437][ T6688] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.565493][ T6688] ? __fget_files+0x2a/0x420 [ 160.565514][ T6688] ? __fget_files+0x3a6/0x420 [ 160.565545][ T6688] __x64_sys_sendmsg+0x1a1/0x260 [ 160.565566][ T6688] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.565595][ T6688] ? __pfx_ksys_write+0x10/0x10 [ 160.565619][ T6688] ? do_syscall_64+0xbe/0xfa0 [ 160.565652][ T6688] do_syscall_64+0xfa/0xfa0 [ 160.565670][ T6688] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.565690][ T6688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.565706][ T6688] ? clear_bhb_loop+0x60/0xb0 [ 160.565727][ T6688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.565743][ T6688] RIP: 0033:0x7f39d84defc9 [ 160.565759][ T6688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.565773][ T6688] RSP: 002b:00007f39d6746038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.565792][ T6688] RAX: ffffffffffffffda RBX: 00007f39d8735fa0 RCX: 00007f39d84defc9 [ 160.565804][ T6688] RDX: 0000000004048000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 160.565815][ T6688] RBP: 00007f39d6746090 R08: 0000000000000000 R09: 0000000000000000 [ 160.565826][ T6688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.565836][ T6688] R13: 00007f39d8736038 R14: 00007f39d8735fa0 R15: 00007fff2092f898 [ 160.565866][ T6688] [ 160.692762][ T6690] sch_fq: defrate 4294967295 ignored. [ 160.823977][ T5979] pwc: recv_control_msg error -32 req 02 val 2b00 [ 160.827395][ T5979] pwc: recv_control_msg error -32 req 02 val 2700 [ 161.104652][ T6700] netlink: 104 bytes leftover after parsing attributes in process `syz.2.254'. [ 161.175639][ T5979] pwc: recv_control_msg error -71 req 02 val 2c00 [ 161.177495][ T5979] pwc: recv_control_msg error -71 req 04 val 1000 [ 161.278248][ T6703] FAULT_INJECTION: forcing a failure. [ 161.278248][ T6703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.278278][ T6703] CPU: 0 UID: 0 PID: 6703 Comm: syz.3.255 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 161.278298][ T6703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 161.278308][ T6703] Call Trace: [ 161.278315][ T6703] [ 161.278323][ T6703] dump_stack_lvl+0x189/0x250 [ 161.278373][ T6703] ? __pfx____ratelimit+0x10/0x10 [ 161.278395][ T6703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.278418][ T6703] ? __pfx__printk+0x10/0x10 [ 161.278438][ T6703] ? __might_fault+0xb0/0x130 [ 161.278472][ T6703] should_fail_ex+0x46c/0x600 [ 161.278498][ T6703] _copy_from_user+0x2d/0xb0 [ 161.278518][ T6703] ___sys_sendmsg+0x158/0x2a0 [ 161.278541][ T6703] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.278596][ T6703] ? __fget_files+0x2a/0x420 [ 161.278618][ T6703] ? __fget_files+0x3a6/0x420 [ 161.278650][ T6703] __x64_sys_sendmsg+0x1a1/0x260 [ 161.278672][ T6703] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 161.278701][ T6703] ? __pfx_ksys_write+0x10/0x10 [ 161.278725][ T6703] ? do_syscall_64+0xbe/0xfa0 [ 161.278756][ T6703] do_syscall_64+0xfa/0xfa0 [ 161.278778][ T6703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.278794][ T6703] ? asm_sysvec_call_function_single+0x1a/0x20 [ 161.278811][ T6703] ? clear_bhb_loop+0x60/0xb0 [ 161.278831][ T6703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.278848][ T6703] RIP: 0033:0x7f39d84defc9 [ 161.278864][ T6703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.278877][ T6703] RSP: 002b:00007f39d6704038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.278897][ T6703] RAX: ffffffffffffffda RBX: 00007f39d8736180 RCX: 00007f39d84defc9 [ 161.278909][ T6703] RDX: 0000000020000800 RSI: 0000200000002d80 RDI: 000000000000000c [ 161.278920][ T6703] RBP: 00007f39d6704090 R08: 0000000000000000 R09: 0000000000000000 [ 161.278931][ T6703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.278941][ T6703] R13: 00007f39d8736218 R14: 00007f39d8736180 R15: 00007fff2092f898 [ 161.278972][ T6703] [ 161.797188][ T5979] pwc: recv_control_msg error -71 req 04 val 1300 [ 161.798833][ T5979] pwc: recv_control_msg error -71 req 04 val 1400 [ 161.817874][ T5979] pwc: recv_control_msg error -71 req 02 val 2000 [ 161.826742][ T5979] pwc: recv_control_msg error -71 req 02 val 2100 [ 161.852219][ T5979] pwc: recv_control_msg error -71 req 04 val 1500 [ 161.862359][ T5979] pwc: recv_control_msg error -71 req 02 val 2500 [ 161.872544][ T5979] pwc: recv_control_msg error -71 req 02 val 2400 [ 161.873054][ T5979] pwc: recv_control_msg error -71 req 02 val 2600 [ 161.873533][ T5979] pwc: recv_control_msg error -71 req 02 val 2900 [ 161.874006][ T5979] pwc: recv_control_msg error -71 req 02 val 2800 [ 161.912957][ T5979] pwc: recv_control_msg error -71 req 04 val 1100 [ 161.920772][ T5979] pwc: recv_control_msg error -71 req 04 val 1200 [ 161.973061][ T5979] pwc: Registered as video103. [ 162.035767][ T5979] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 162.097721][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 162.101957][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.117335][ T44] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 162.191235][ T5979] usb 1-1: USB disconnect, device number 6 [ 162.304487][ T44] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 162.304513][ T44] usb 5-1: config 0 has no interface number 0 [ 162.304558][ T44] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 162.304581][ T44] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 162.307571][ T44] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 162.307595][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.307613][ T44] usb 5-1: Product: syz [ 162.307625][ T44] usb 5-1: Manufacturer: syz [ 162.307643][ T44] usb 5-1: SerialNumber: syz [ 162.388374][ T44] usb 5-1: config 0 descriptor?? [ 162.680536][ T44] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 162.680835][ T44] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 162.685126][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.832652][ T44] usb 5-1: USB disconnect, device number 9 [ 163.644490][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.828925][ T6734] FAULT_INJECTION: forcing a failure. [ 163.828925][ T6734] name failslab, interval 1, probability 0, space 0, times 0 [ 163.828956][ T6734] CPU: 0 UID: 0 PID: 6734 Comm: syz.3.264 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 163.828972][ T6734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 163.828980][ T6734] Call Trace: [ 163.828987][ T6734] [ 163.828994][ T6734] dump_stack_lvl+0x189/0x250 [ 163.829020][ T6734] ? __pfx____ratelimit+0x10/0x10 [ 163.829039][ T6734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.829058][ T6734] ? __pfx__printk+0x10/0x10 [ 163.829080][ T6734] ? __pfx___might_resched+0x10/0x10 [ 163.829101][ T6734] should_fail_ex+0x46c/0x600 [ 163.829127][ T6734] should_failslab+0xa8/0x100 [ 163.829152][ T6734] __kmalloc_noprof+0xcc/0x7d0 [ 163.829172][ T6734] ? sock_kmalloc+0xd6/0x160 [ 163.829190][ T6734] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 163.829207][ T6734] ? rt_spin_unlock+0x150/0x200 [ 163.829230][ T6734] sock_kmalloc+0xd6/0x160 [ 163.829252][ T6734] alg_setkey+0x55/0x190 [ 163.829267][ T6734] ? alg_setsockopt+0x3c5/0x4a0 [ 163.829279][ T6734] alg_setsockopt+0x3da/0x4a0 [ 163.829290][ T6734] ? __pfx_alg_setsockopt+0x10/0x10 [ 163.829302][ T6734] do_sock_setsockopt+0x17c/0x1b0 [ 163.829315][ T6734] __x64_sys_setsockopt+0x145/0x1b0 [ 163.829330][ T6734] do_syscall_64+0xfa/0xfa0 [ 163.829342][ T6734] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.829353][ T6734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.829363][ T6734] ? clear_bhb_loop+0x60/0xb0 [ 163.829374][ T6734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.829384][ T6734] RIP: 0033:0x7f39d84defc9 [ 163.829393][ T6734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.829401][ T6734] RSP: 002b:00007f39d6725038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 163.829412][ T6734] RAX: ffffffffffffffda RBX: 00007f39d8736090 RCX: 00007f39d84defc9 [ 163.829419][ T6734] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000004 [ 163.829425][ T6734] RBP: 00007f39d6725090 R08: 0000000000000018 R09: 0000000000000000 [ 163.829431][ T6734] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 163.829437][ T6734] R13: 00007f39d8736128 R14: 00007f39d8736090 R15: 00007fff2092f898 [ 163.829453][ T6734] [ 165.172261][ T992] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 165.505580][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.524254][ T992] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 165.524277][ T992] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.524292][ T992] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 165.524310][ T992] usb 4-1: config 1 has no interface number 1 [ 165.524360][ T992] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 165.524396][ T992] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.527062][ T992] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 165.527087][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.527102][ T992] usb 4-1: Product: syz [ 165.527114][ T992] usb 4-1: Manufacturer: syz [ 165.527126][ T992] usb 4-1: SerialNumber: syz [ 166.395292][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.996746][ T6747] netlink: 'syz.1.270': attribute type 16 has an invalid length. [ 167.996767][ T6747] netlink: 'syz.1.270': attribute type 17 has an invalid length. [ 168.085126][ T6747] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 168.419830][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.518538][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.684688][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.699607][ T992] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 168.699719][ T992] usb 4-1: MIDIStreaming interface descriptor not found [ 168.786547][ T992] usb 4-1: USB disconnect, device number 8 [ 169.646394][ T6000] udevd[6000]: setting mode of /dev/bus/usb/004/008 to 020664 failed: No such file or directory [ 169.646578][ T6000] udevd[6000]: setting owner of /dev/bus/usb/004/008 to uid=0, gid=0 failed: No such file or directory [ 169.997341][ T6803] FAULT_INJECTION: forcing a failure. [ 169.997341][ T6803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.997604][ T6803] CPU: 0 UID: 0 PID: 6803 Comm: syz.3.291 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 169.997625][ T6803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 169.997634][ T6803] Call Trace: [ 169.997642][ T6803] [ 169.997650][ T6803] dump_stack_lvl+0x189/0x250 [ 169.997677][ T6803] ? __pfx____ratelimit+0x10/0x10 [ 169.997698][ T6803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.997721][ T6803] ? __pfx__printk+0x10/0x10 [ 169.997741][ T6803] ? __might_fault+0xb0/0x130 [ 169.997774][ T6803] should_fail_ex+0x46c/0x600 [ 169.997800][ T6803] _copy_from_user+0x2d/0xb0 [ 169.997820][ T6803] ___sys_sendmsg+0x158/0x2a0 [ 169.997842][ T6803] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.997903][ T6803] ? __fget_files+0x2a/0x420 [ 169.997924][ T6803] ? __fget_files+0x3a6/0x420 [ 169.997955][ T6803] __sys_sendmmsg+0x22d/0x430 [ 169.997980][ T6803] ? __pfx___sys_sendmmsg+0x10/0x10 [ 169.998009][ T6803] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 169.998042][ T6803] ? ksys_write+0x230/0x260 [ 169.998060][ T6803] ? irqentry_exit+0x74/0x90 [ 169.998080][ T6803] ? __pfx_ksys_write+0x10/0x10 [ 169.998104][ T6803] __x64_sys_sendmmsg+0xa0/0xc0 [ 169.998125][ T6803] do_syscall_64+0xfa/0xfa0 [ 169.998146][ T6803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.998162][ T6803] ? asm_sysvec_call_function_single+0x1a/0x20 [ 169.998179][ T6803] ? clear_bhb_loop+0x60/0xb0 [ 169.998200][ T6803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.998216][ T6803] RIP: 0033:0x7f39d84defc9 [ 169.998232][ T6803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.998245][ T6803] RSP: 002b:00007f39d6725038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 169.998265][ T6803] RAX: ffffffffffffffda RBX: 00007f39d8736090 RCX: 00007f39d84defc9 [ 169.998278][ T6803] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000004 [ 169.998289][ T6803] RBP: 00007f39d6725090 R08: 0000000000000000 R09: 0000000000000000 [ 169.998300][ T6803] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000001 [ 169.998311][ T6803] R13: 00007f39d8736128 R14: 00007f39d8736090 R15: 00007fff2092f898 [ 169.998341][ T6803] [ 170.239790][ T5944] udevd[5944]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.469619][ T6811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.486692][ T6811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.769559][ T6034] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 170.933719][ T6034] usb 5-1: device descriptor read/64, error -71 [ 171.684192][ T6034] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 171.815976][ T6034] usb 5-1: device descriptor read/64, error -71 [ 171.922626][ T6034] usb usb5-port1: attempt power cycle [ 172.284797][ T6034] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 172.660142][ T6034] usb 5-1: device descriptor read/8, error -71 [ 172.942190][ T6034] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 172.966577][ T6034] usb 5-1: device descriptor read/8, error -71 [ 173.076928][ T6034] usb usb5-port1: unable to enumerate USB device [ 173.262722][ T6849] netlink: 'syz.0.304': attribute type 1 has an invalid length. [ 174.373015][ T6857] fuse: Bad value for 'group_id' [ 174.373027][ T6857] fuse: Bad value for 'group_id' [ 174.993868][ T6867] netlink: zone id is out of range [ 174.993883][ T6867] netlink: zone id is out of range [ 175.203993][ T1860] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 175.395736][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 175.492774][ T1860] usb 2-1: Using ep0 maxpacket: 8 [ 175.644231][ T1860] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.650647][ T1860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.651752][ T1860] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 175.971540][ T1860] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 175.971567][ T1860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.011635][ T1860] usb 2-1: config 0 descriptor?? [ 176.054465][ T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 176.054490][ T10] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 176.054506][ T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 176.054523][ T10] usb 4-1: config 220 has no interface number 2 [ 176.054611][ T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 176.054635][ T10] usb 4-1: config 220 interface 0 has no altsetting 0 [ 176.054650][ T10] usb 4-1: config 220 interface 76 has no altsetting 0 [ 176.054666][ T10] usb 4-1: config 220 interface 1 has no altsetting 0 [ 176.057737][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 176.057761][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.057778][ T10] usb 4-1: Product: syz [ 176.057790][ T10] usb 4-1: Manufacturer: syz [ 176.057802][ T10] usb 4-1: SerialNumber: syz [ 176.247403][ T6034] usb 2-1: USB disconnect, device number 9 [ 176.417412][ T10] usb 4-1: selecting invalid altsetting 0 [ 176.419720][ T10] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 176.419755][ T10] uvcvideo 4-1:220.0: No valid video chain found. [ 176.490375][ T10] usb 4-1: selecting invalid altsetting 0 [ 176.490411][ T10] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 176.514100][ T10] usb 4-1: USB disconnect, device number 9 [ 176.575318][ T6000] udevd[6000]: setting mode of /dev/bus/usb/004/009 to 020664 failed: No such file or directory [ 176.575495][ T6000] udevd[6000]: setting owner of /dev/bus/usb/004/009 to uid=0, gid=0 failed: No such file or directory [ 177.132475][ T1860] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 178.212737][ T6017] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 178.238245][ T1860] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.238271][ T1860] usb 2-1: config 0 has no interfaces? [ 178.238298][ T1860] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 178.238318][ T1860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.279457][ T1860] usb 2-1: config 0 descriptor?? [ 178.295501][ T1860] ================================================================== [ 178.295515][ T1860] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 178.295548][ T1860] Read of size 8 at addr ffffc9000de02008 by task kworker/0:4/1860 [ 178.295562][ T1860] [ 178.295576][ T1860] CPU: 0 UID: 0 PID: 1860 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 178.295595][ T1860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 178.295606][ T1860] Workqueue: usb_hub_wq hub_event [ 178.295629][ T1860] Call Trace: [ 178.295636][ T1860] [ 178.295644][ T1860] dump_stack_lvl+0x189/0x250 [ 178.295669][ T1860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.295691][ T1860] ? __pfx__printk+0x10/0x10 [ 178.295710][ T1860] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 178.295731][ T1860] ? __virt_addr_valid+0xdc/0x5c0 [ 178.295753][ T1860] ? __virt_addr_valid+0xdc/0x5c0 [ 178.295775][ T1860] print_report+0xca/0x240 [ 178.295796][ T1860] ? __list_add_valid_or_report+0x4e/0x130 [ 178.295814][ T1860] kasan_report+0x118/0x150 [ 178.295835][ T1860] ? __list_add_valid_or_report+0x4e/0x130 [ 178.295857][ T1860] __list_add_valid_or_report+0x4e/0x130 [ 178.295877][ T1860] kcov_remote_stop+0x52d/0x660 [ 178.295902][ T1860] hub_event+0x45d2/0x4a20 [ 178.295939][ T1860] ? __pfx_hub_event+0x10/0x10 [ 178.295955][ T1860] ? process_scheduled_works+0x9ef/0x17b0 [ 178.295976][ T1860] ? _raw_spin_unlock_irq+0x23/0x50 [ 178.295996][ T1860] ? process_scheduled_works+0x9ef/0x17b0 [ 178.296014][ T1860] ? process_scheduled_works+0x9ef/0x17b0 [ 178.296034][ T1860] process_scheduled_works+0xae1/0x17b0 [ 178.296070][ T1860] ? __pfx_process_scheduled_works+0x10/0x10 [ 178.296096][ T1860] worker_thread+0x8a0/0xda0 [ 178.296116][ T1860] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 178.296140][ T1860] ? __kthread_parkme+0x7b/0x200 [ 178.296164][ T1860] kthread+0x711/0x8a0 [ 178.296186][ T1860] ? __pfx_worker_thread+0x10/0x10 [ 178.296205][ T1860] ? __pfx_kthread+0x10/0x10 [ 178.296224][ T1860] ? rt_spin_unlock+0x150/0x200 [ 178.296242][ T1860] ? rt_spin_unlock+0x161/0x200 [ 178.296257][ T1860] ? __pfx_kthread+0x10/0x10 [ 178.296278][ T1860] ret_from_fork+0x4bc/0x870 [ 178.296298][ T1860] ? __pfx_ret_from_fork+0x10/0x10 [ 178.296317][ T1860] ? __switch_to_asm+0x39/0x70 [ 178.296332][ T1860] ? __switch_to_asm+0x33/0x70 [ 178.296345][ T1860] ? __pfx_kthread+0x10/0x10 [ 178.296365][ T1860] ret_from_fork_asm+0x1a/0x30 [ 178.296387][ T1860] [ 178.296393][ T1860] [ 178.296397][ T1860] The buggy address belongs to a vmalloc virtual mapping [ 178.296411][ T1860] Memory state around the buggy address: [ 178.296421][ T1860] ffffc9000de01f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 178.296431][ T1860] ffffc9000de01f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 178.296442][ T1860] >ffffc9000de02000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 178.296454][ T1860] ^ [ 178.296463][ T1860] ffffc9000de02080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 178.296474][ T1860] ffffc9000de02100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 178.296482][ T1860] ================================================================== [ 178.296502][ T1860] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 178.296514][ T1860] CPU: 0 UID: 0 PID: 1860 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 178.296534][ T1860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 178.296545][ T1860] Workqueue: usb_hub_wq hub_event [ 178.296562][ T1860] Call Trace: [ 178.296569][ T1860] [ 178.296575][ T1860] dump_stack_lvl+0x99/0x250 [ 178.296598][ T1860] ? __asan_memcpy+0x40/0x70 [ 178.296617][ T1860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.296639][ T1860] ? __pfx__printk+0x10/0x10 [ 178.296691][ T1860] vpanic+0x237/0x6d0 [ 178.296707][ T1860] ? __pfx_vpanic+0x10/0x10 [ 178.296726][ T1860] panic+0xb9/0xc0 [ 178.296741][ T1860] ? __pfx_panic+0x10/0x10 [ 178.296757][ T1860] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 178.296777][ T1860] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.296798][ T1860] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 178.296821][ T1860] ? __list_add_valid_or_report+0x4e/0x130 [ 178.296840][ T1860] check_panic_on_warn+0x89/0xb0 [ 178.296857][ T1860] ? __list_add_valid_or_report+0x4e/0x130 [ 178.296875][ T1860] end_report+0x78/0x160 [ 178.296896][ T1860] kasan_report+0x129/0x150 [ 178.296917][ T1860] ? __list_add_valid_or_report+0x4e/0x130 [ 178.296940][ T1860] __list_add_valid_or_report+0x4e/0x130 [ 178.296961][ T1860] kcov_remote_stop+0x52d/0x660 [ 178.296984][ T1860] hub_event+0x45d2/0x4a20 [ 178.297021][ T1860] ? __pfx_hub_event+0x10/0x10 [ 178.297038][ T1860] ? process_scheduled_works+0x9ef/0x17b0 [ 178.297061][ T1860] ? _raw_spin_unlock_irq+0x23/0x50 [ 178.297084][ T1860] ? process_scheduled_works+0x9ef/0x17b0 [ 178.297102][ T1860] ? process_scheduled_works+0x9ef/0x17b0 [ 178.297120][ T1860] process_scheduled_works+0xae1/0x17b0 [ 178.297148][ T1860] ? __pfx_process_scheduled_works+0x10/0x10 [ 178.297172][ T1860] worker_thread+0x8a0/0xda0 [ 178.297193][ T1860] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 178.297217][ T1860] ? __kthread_parkme+0x7b/0x200 [ 178.297240][ T1860] kthread+0x711/0x8a0 [ 178.297263][ T1860] ? __pfx_worker_thread+0x10/0x10 [ 178.297282][ T1860] ? __pfx_kthread+0x10/0x10 [ 178.297302][ T1860] ? rt_spin_unlock+0x150/0x200 [ 178.297321][ T1860] ? rt_spin_unlock+0x161/0x200 [ 178.297336][ T1860] ? __pfx_kthread+0x10/0x10 [ 178.297358][ T1860] ret_from_fork+0x4bc/0x870 [ 178.297378][ T1860] ? __pfx_ret_from_fork+0x10/0x10 [ 178.297399][ T1860] ? __switch_to_asm+0x39/0x70 [ 178.297415][ T1860] ? __switch_to_asm+0x33/0x70 [ 178.297431][ T1860] ? __pfx_kthread+0x10/0x10 [ 178.297453][ T1860] ret_from_fork_asm+0x1a/0x30 [ 178.297477][ T1860] [ 178.297742][ T1860] Kernel Offset: disabled