last executing test programs: 9m51.969487157s ago: executing program 1 (id=19): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x62d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x1, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000200)='pipefs\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f00000000c0), 0x10044, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000140), 0x4, 0x100) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, r4, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc020aa08, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 9m50.728403073s ago: executing program 1 (id=22): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0xffffffffffffffdb) sendmmsg$unix(r3, &(0x7f000000cb40)=[{{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000180)="318f1323208142f2d5c3f8623775c9aa624f1aca54c33ce543dac0a14c", 0x1d}], 0x1, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00}}}], 0x20, 0x4080}}, {{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000500)="3c099e6116181d57dd231b41a0f1a1f4dcf6e2dc46dc117093b2eae5436a6ec81d701310af6abbe5623521c17b9ad8fbdc903e1f6f179d49cafe0a156c2ede34baf303afb7af3fdf3bb7d28da4b484acdb4c461841debde9fcf39fc593cd1b396e32554de534136e952da0ca768f683e10ea2009888e0d5f337e237d615b74", 0x7f}, {&(0x7f0000000580)="bb7f7f344b41d3df12dbea508eecbb9f", 0x10}], 0x2, &(0x7f00000006c0), 0x0, 0x4004081}}, {{&(0x7f0000000a00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000a80)="afcf25dae0742a75817520495f929c49c84c929aeb367471eaf1bc967254817d761ae645d53ab7f85f6ee34acb7aff8700f17fcaf464b4626d74658efa8d3e7ab4f6126999e3ae4718ced6a9d0891120c8ad5fd3ca4bb913f910a3b9f5a23854ddd4dd419ee7db8e2140e7385c5612676e4df2a4abb8f2cee13d59abd8007dbe551c283065a68986bb12fd2ea1ce2441b757", 0x92}, {&(0x7f0000000e80)="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", 0x1000}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='-t\x00\x00'], 0x90, 0x8}}, {{&(0x7f0000000c00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f000000c6c0), 0x0, 0x0, 0x0, 0x400a010}}, {{&(0x7f000000c780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000c8c0)=[{&(0x7f000000c800)="c1c663f349b3df4da13796f06c98ddc8b3d64caf07b22d7cf16165dce5a3d512b9ecc01296a75338bbc7ac5bfd5c24f0187c9b5f3a16ded96f1f848a726f977c5697a6f32911ccdfc78e266cff6c39c138d440d179ac428d3918e0b4724b8263fec9d62db6e0dcbef1e1f05d43224923a3e209e6b4299c484543bea917abd908f745e31c619bdccf2f7a7277590ccd59cd43d8af293038167c75b4c48b", 0x9d}, {&(0x7f0000002080)="6b0ca2de1be9abfae24bceddd0dd3e256af9c748c5194d8351f52aa7e4705e9331725cce5290032d32ebb09b56", 0x2d}], 0x2, 0x0, 0x0, 0x4}}, {{&(0x7f000000c900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000cac0)=[{&(0x7f000000c980)="ae8a81de598e15d5d94e4bf59a62982a52c820f1f24a52d4c1f4a79ce3b3891f5dd3162eb586d77fcd90f0a9e4123a8897fa8a837f218e74bb98d8d01963bd2852ddb1dd8db7ea53193e8e7be5f51ca4cc77ff302d074b155d36ba42679f05394597b4ed6c9187c3f705e68e4d3049e406e2be1eb286045ff4899d2dbad008adff94845aa22d92650aa0fca3595fe5020892b8b2a30fcbe28a78e0b18eb2cc7870cd297dca9a09ac65e518006ae67730819b3b92802132bbde44ef4e2536439e05", 0xc1}, {&(0x7f000000ca80)="7cd2a3419979ec923df7214afa6b12aa3d26ae4833e085d02ea97dc6f98f991a15a66f6afc117655e4975ea97925", 0x2e}], 0x2, &(0x7f000000cb00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x6, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, &(0x7f0000000200)='\x00\x80\x00\x00\x00\x00\x00\x06\x8a\x82,\x9eA\x93\x8a\xb4\xf1y\x8d\x80\x00\xbb\x14C\xee\xd2(]\x1fZG\xdb\xee\xd3\xcf\x98+\x1d\x01\x87Q\xe9\x03H;0\xa8\xe4\xfe\x1a\xbb\x17\xb9\xf0\xe2\t\x93\xde\xf4\xad\x8a\xa2\xf6{\x1d\x02\x85I\f\x06\xe0\x03\xcd\xca\xa2d\x0e\x1d\xc6[\xe8\xd2\xe1\x9cX\xed\xc1?n9%\x00#_\b\xaadP\xf8\xab\xa0#') ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1a004e0078768000", 0x4, 0x2}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x1) 9m49.213329357s ago: executing program 1 (id=26): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r2, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(r3, 0x2) fcntl$notify(r1, 0x402, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f00000000c0), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000240)={r7, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x0, 0x68}, 0x90) landlock_restrict_self(r5, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r8, &(0x7f00000003c0)=[{{&(0x7f0000000080)=@phonet={0x23, 0x4, 0x2, 0xff}, 0x80, 0x0}}], 0x1, 0x40001) landlock_restrict_self(r4, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a3100000000091f010073797a3000000000080005400000002110001180090001006861736800000000140000001000010000000000000000000084000a"], 0x94}}, 0x0) socket$unix(0x1, 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) listen(r10, 0x0) 9m43.579262111s ago: executing program 1 (id=36): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0xffffffffffffffdb) sendmmsg$unix(r3, &(0x7f000000cb40)=[{{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000180)="318f1323208142f2d5c3f8623775c9aa624f1aca54c33ce543dac0a14c", 0x1d}], 0x1, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00}}}], 0x20, 0x4080}}, {{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000500)="3c099e6116181d57dd231b41a0f1a1f4dcf6e2dc46dc117093b2eae5436a6ec81d701310af6abbe5623521c17b9ad8fbdc903e1f6f179d49cafe0a156c2ede34baf303afb7af3fdf3bb7d28da4b484acdb4c461841debde9fcf39fc593cd1b396e32554de534136e952da0ca768f683e10ea2009888e0d5f337e237d615b74", 0x7f}, {&(0x7f0000000580)="bb7f7f344b41d3df12dbea508eecbb9f", 0x10}], 0x2, &(0x7f00000006c0), 0x0, 0x4004081}}, {{&(0x7f0000000a00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000a80)="afcf25dae0742a75817520495f929c49c84c929aeb367471eaf1bc967254817d761ae645d53ab7f85f6ee34acb7aff8700f17fcaf464b4626d74658efa8d3e7ab4f6126999e3ae4718ced6a9d0891120c8ad5fd3ca4bb913f910a3b9f5a23854ddd4dd419ee7db8e2140e7385c5612676e4df2a4abb8f2cee13d59abd8007dbe551c283065a68986bb12fd2ea1ce2441b757", 0x92}, {&(0x7f0000000e80)="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", 0x1000}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='-t\x00\x00'], 0x90, 0x8}}, {{&(0x7f0000000c00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f000000c6c0), 0x0, 0x0, 0x0, 0x400a010}}, {{&(0x7f000000c780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000c8c0)=[{&(0x7f000000c800)="c1c663f349b3df4da13796f06c98ddc8b3d64caf07b22d7cf16165dce5a3d512b9ecc01296a75338bbc7ac5bfd5c24f0187c9b5f3a16ded96f1f848a726f977c5697a6f32911ccdfc78e266cff6c39c138d440d179ac428d3918e0b4724b8263fec9d62db6e0dcbef1e1f05d43224923a3e209e6b4299c484543bea917abd908f745e31c619bdccf2f7a7277590ccd59cd43d8af293038167c75b4c48b", 0x9d}, {&(0x7f0000002080)="6b0ca2de1be9abfae24bceddd0dd3e256af9c748c5194d8351f52aa7e4705e9331725cce5290032d32ebb09b56", 0x2d}], 0x2, 0x0, 0x0, 0x4}}, {{&(0x7f000000c900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000cac0)=[{&(0x7f000000c980)="ae8a81de598e15d5d94e4bf59a62982a52c820f1f24a52d4c1f4a79ce3b3891f5dd3162eb586d77fcd90f0a9e4123a8897fa8a837f218e74bb98d8d01963bd2852ddb1dd8db7ea53193e8e7be5f51ca4cc77ff302d074b155d36ba42679f05394597b4ed6c9187c3f705e68e4d3049e406e2be1eb286045ff4899d2dbad008adff94845aa22d92650aa0fca3595fe5020892b8b2a30fcbe28a78e0b18eb2cc7870cd297dca9a09ac65e518006ae67730819b3b92802132bbde44ef4e2536439e05", 0xc1}, {&(0x7f000000ca80)="7cd2a3419979ec923df7214afa6b12aa3d26ae4833e085d02ea97dc6f98f991a15a66f6afc117655e4975ea97925", 0x2e}], 0x2, &(0x7f000000cb00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x6, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1a004e0078768000", 0x4, 0x2}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x1) 9m42.164755541s ago: executing program 1 (id=40): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100), 0x6000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92F\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) fspick(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1) fsopen(0x0, 0x1) 9m34.967050141s ago: executing program 1 (id=60): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) eventfd(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sg(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x81) mkdirat(0xffffffffffffffff, 0x0, 0x1ea) rmdir(&(0x7f0000000100)='./control\x00') 9m19.653386041s ago: executing program 32 (id=60): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) eventfd(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sg(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x81) mkdirat(0xffffffffffffffff, 0x0, 0x1ea) rmdir(&(0x7f0000000100)='./control\x00') 6m55.459988265s ago: executing program 0 (id=388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r4, &(0x7f0000001480)=""/4122, 0x101a, 0x99) 6m54.185941788s ago: executing program 0 (id=391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 6m53.534717377s ago: executing program 0 (id=393): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x80811501, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtaction={0x14, 0x30, 0x400, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@local, 0x0, 0x33}, @in=@broadcast, {0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x45, 0xfffffffffffffffd}, {0x0, 0x1}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x58}, 0x0, 0x1}}, 0xf8}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000001f40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001f00)={&(0x7f0000000b00)={0x1c, 0x17, 0xa, 0x201, 0x0, 0x0, {0x9, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000801) sendmmsg(r3, &(0x7f0000001e80)=[{{&(0x7f0000000180)=@llc={0x1a, 0x308, 0xdf, 0x1, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="5f22020212c12fefcfbcc6c7f01d96ad1f77fefa129cb4dd3529b2347ed2860e1c45f82304bcc3651672b5aa93e069f9725d89609ca094ddf9a47b72ab497fa1dd72c5184cffb81e2f703611f528f15f9379805101faed0b8c086ca9f53b520606224dfc3a3e7147b32adbd3089912202808ad88336f3b1633e9cbc67f81ab22b717f9787d51300a3377d5dcf79594d0931112d7fcde9d8e5625e579ed28729cb4ff9bebcdd8", 0xa6}, {&(0x7f0000000440)="56b0f4c80a6f690bab4d085c344545b677e4052e17b05ba8746828cd2a93a78fe2e6a82c644c1e4277a928b6aab9fc4912c4b64dbf001bbdc9aabdfa8aff9bfcbf318b23d31e234e8b885f80de88c966f775cedac6a0fcb016f97181dec057112fe27a6bb51e3d6569d89b5c1d0739", 0x6f}, {&(0x7f00000004c0)="c0055c1bccc015cd1fa98196226ea20e5f757e40766029d7477aceb295be4ae42b3270f7b06b7606c506b03b712fe4446ab8c636d8f9e44ae872f5cc1b2b3a81c7d57ebbd4f98604724ed80ed8c843b8d94c2065403ce40ce43313", 0x5b}, {&(0x7f0000000580)="b213d60b02fedd61f47d2cde2b8611ebe68febcb2a4571e18d1171154ec80daacb5a509079f512fcd0f8845d15a08fa8722307602968fa758cba2d617c8657be083b4102a06f284f10992ff2908f763659f2f1c3acf47d37a5496e081018d08d5c", 0x61}], 0x4, &(0x7f0000000700)=[{0x50, 0x0, 0x4, "ab7ca1c304574e02e14e7a9c8589699ffdaa0ae1c4575f95d043607a1d4172d18877ba83a394ea9c65f0d14d151898e7940dc12aaedde6bce0f5"}, {0xf8, 0x10c, 0x80, "a393d8657747ebb9149e7b39cc7f9eb7d2651480c843db4616c39edd3bc0eef695c33dc5c20ce97c4ff744b0ab69e90f6c6f14cd6d96fbfce65daaa1e59cd8f10172e46b2bda4cf881160f03b644017b7736acd32e8286340810a1f779a72b175ca7b675fc713bea551acc720880b567593b354acb22e3a7a55e70cd6df87ee0dc4f7981d9888c7c22f97e4a202d97151c1843b2306f1dc389f56bd2c33a8199db44db15c19731fc98cd9e2ea7c360011f71736fcfab95311ec6bf391a4c486238e43f2982d54750bdf588d639d2c7a87d4477747e027d38715642fc5d196092b9"}, {0xf0, 0x117, 0x1, "9e0bf1c758c68e416454dc56302c3676f9b35cce3c7dd0d79fefddb27282eb27dd581497f053d980351195760e287bd5c83ecf43f53832a416cf63a697a227a7a1b764c4708addc17223e2eed1d50508bd98cc89d824320bd2ffd398437ab1da69b933b106ce0037ecef1a172a97a62624e710daedb4ec498fac5e7c82df538c38f20f428f17ad2568e741af5bca08e43865fad112016c23c5062d8f17533de89832ffa8b1ce3556d20f91ef71d28d22e9714fee6939a9f36c5429a8bd09fd8b25ec9470e747daf2228caf2876f8254092aaf0edeb9bb8e0b038a7a23315"}, {0x50, 0x6, 0x9, "7fa63fd51a0b2965e245eab0dd6de06ff48f3865d3d3c9531c229cd3bbc0212ca3b8aa6ccc3adad414f7fde28b05ba0c790a9e4a5e4044070456a006"}, {0x30, 0x29, 0x0, "fe8deae2af6299d1a1571dbb9bff160cd285b78c9677d7e0d49895e71d"}, {0xb8, 0x114, 0x1, "5646bd36a086e590a040d67de3a9e40d9181aa3e5cbcabca6e0ff72a4a5cc78a6b464723a503b893646425c4dbb975ef6e7c3024d6c2211a601a147b2e87d37f54daba0fe53739f40c7672cd47d269e5df6e021ec1ed8a39b938dac08a34728c1dfa0fa2ca90a7fe7588d12465e9869a3c682b79a15c3a49b482a5b73c493b265c444b2d0ce2c9f5e801a5f5f9032b223666dbc357de0512008280c4a5f4f32d4b37"}], 0x370}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000a80)="642b56fdf76103f3909d508cb7192ed1a59703d4b6fee1aed181b95d9f50780afbe19d3415176f55fbd466a1aa28640a975b9050668e84458d72954d6641dd11c257d155935ff4da0d4fa4d5552cf141126aece6", 0x54}, {&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000001b80)="ba8f589104bc053d167c6a8e293525e9b3b2c58a32313de7b7e4912fe635343ccd34e4861a21b3832f46e4d4d57b885613fccbe699eacbaf5cecc9cad7827d3ab1430363b9c14c66bd57c7c4315bc7641fc29f1bebde6cdb4fa044f97fb05b5915f87d041e6dec990cf0cafc4e57b0f827dad80566e01ce2751c1c6933e067fa96b51a143f24a565166e3cdc637ebe1a48531b4e1ee6fda223ea93eaec7aca76dabb7f143aefbb0406f760f6cc0f74fd8677fe346b5ee9fc9521c01afcb2ef94b836774124a4b72622e90d28717e9487bf8449ed2349524fdf8f5f7e1b7e", 0xde}, {&(0x7f0000001c80)="ee126a6bff271cecf891bafee3288eb9b3fc4b224118eaf365158225f8f1e5d1b5e58aa2912a7122a814eb0930325eb7656e0808dcfd103818f5997b2941a9afbacf63b4b58575bbbb9d06b730cfc52f7567480ee0dbd55d3cce06c5c7f15411693cf2b76fece7dda7b09971c8a4002c900141f0c42fcf6d82543025110ad7b64c1c2badcfe483d952fe34fd571b329fb1d38b98f3e06349660641892ee12f", 0x9f}, {&(0x7f0000001d40)="41c8251a6369b87781af40cff01c6843549c419fc5c91971c4016ad63642420a1e814fc088b0b7c389794da9dd4996640c1a53c8a630b4c2b105c28d418c214c9c5fa930234226c0521dedda2fcb7de7dc710cbcc841a59781235198680c0049ec109e6b2fd8c8ca90541fe7466afaabf0e5844ff3a5160e6fdf999d9a9f9fb060cfa2f0aa", 0x85}], 0x5}}], 0x2, 0x0) 6m53.365963594s ago: executing program 0 (id=394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f00000017c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@sndrcv={0x30, 0x84, 0x1, {0xffff, 0x6, 0x8004, 0x1, 0x5, 0x0, 0x953}}], 0x30}], 0x1, 0x801) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xb770b3f6ef8f772, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x80000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r4, 0x40384708, &(0x7f0000000080)={0x1, 0xffff, 0x9, 0x0, 0x2, "3eccd800"}) 6m52.025975607s ago: executing program 0 (id=397): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xb0a3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0xffff}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7, {0x7}}, './file0\x00'}) shutdown(r2, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 6m48.35836482s ago: executing program 0 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, 0x0, 0x0) close(r2) (fail_nth: 1) 6m32.199439612s ago: executing program 33 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, 0x0, 0x0) close(r2) (fail_nth: 1) 2m15.337624466s ago: executing program 4 (id=1106): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, 0x0, 0xa800) 2m15.216832713s ago: executing program 4 (id=1108): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x1406, 0x200, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket(0x2d, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000440)={0x2d, 0x0, 0x4000}, 0xc) connect$qrtr(r3, &(0x7f0000000c80)={0x2d, 0xfffffffffffffffb, 0x1}, 0xc) 2m13.870243387s ago: executing program 4 (id=1111): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000170100000300000069288bb80000000018"], 0x30, 0x4000880}], 0x1, 0x4044800) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8080) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r4, &(0x7f00000083c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ddffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x7, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x0, 0x7ff, 0x0, 0x80, 0xfffffff7, 0x1, {0x10000000000003, 0x4, 0x8001, 0xbd94, 0xa, 0xd76, 0x4, 0x100, 0x3, 0x4000, 0x0, r6, 0x0, 0x0, 0x10}}, {0x4, 0x1ff, 0x5, 0xf2f, 'fuse\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r7, &(0x7f0000000100)=""/134, 0x86) close_range(r0, 0xffffffffffffffff, 0x0) 2m13.655293791s ago: executing program 4 (id=1113): gettid() truncate(&(0x7f0000000000)='./file0\x00', 0x96f) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), 0x0, &(0x7f00000004c0), 0x200000, 0x0) chdir(&(0x7f0000000300)='./file0\x00') socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$rose(r3, 0x0, 0x0, 0x0) 2m12.233767971s ago: executing program 4 (id=1115): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x25, &(0x7f0000000880)=ANY=[@ANYBLOB="85100000fbffffff059193c18d000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r1, @ANYBLOB="00000200b70500000800000085000000a5000000b708"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x2, 0xfffffff8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000700)="ec76b3b81f8baf", 0x7}], 0x1}}], 0x2, 0x404c041) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000002c0)={0x9c, 0x6}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) r8 = accept4$alg(r0, 0x0, 0x0, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m11.505146063s ago: executing program 4 (id=1121): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0xe0}], 0x1}, 0x8040850) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000180)=ANY=[], 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) gettid() r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000b80)={@val={0xa, 0x10}, @void, @eth={@link_local, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "000400", 0x0, 0x84, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2}}}}}, 0x3a) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x9, 0x1, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 1m54.751659161s ago: executing program 34 (id=1121): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0xe0}], 0x1}, 0x8040850) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000180)=ANY=[], 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) gettid() r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000b80)={@val={0xa, 0x10}, @void, @eth={@link_local, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "000400", 0x0, 0x84, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2}}}}}, 0x3a) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x9, 0x1, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 1m46.104512427s ago: executing program 2 (id=1201): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x3f}, {0x0, 0x4, 0x1, 0x0, 0x0, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000480)={0x80}) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000380)={{0x2, 0x4e23, @broadcast}, {0x304, @remote}, 0x8, {0x2, 0x4e23, @loopback}, 'team0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) setregid(0x0, 0x0) 1m39.922354383s ago: executing program 2 (id=1218): syz_usb_connect(0x0, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003215124099043e10184e01020301090223000100000000090400000800000000082403010000000009050f", @ANYRES16], 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300), &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000180)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="02002bbd7000fbdbdf250600000008000300", @ANYRES32=0x0, @ANYBLOB="0500530001000000080005000000000005005300db4c269fd05a1a20359a7b983a5b000000000a00e8000802110000010000140017800400"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000040)={r4, 0x9, 0x5975f194459920f}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r2, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040044}, 0x8040) syz_usb_connect$uac1(0x6, 0xaf, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0x6, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x303, 0x2, 0x2, 0x2f}, @extension_unit={0xc, 0x24, 0x8, 0x4, 0x7, 0x1, "805d1c7ac0"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x6, 0x1, 0x40, {0x7, 0x25, 0x1, 0x2, 0x81, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xb, 0x2, 0x47, 0x8, "eb520cb9eefda04fb4"}, @as_header={0x7, 0x24, 0x1, 0xfa, 0x20, 0x4}, @as_header={0x7, 0x24, 0x1, 0x10, 0xfa, 0x5}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x8, 0x2, 0x5, 'f'}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0x4, 0x1, {0x7, 0x25, 0x1, 0x0, 0x0, 0xa}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x250, 0x8, 0x21, 0x84, 0x10, 0xb}, 0xb, &(0x7f0000000480)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x5, [{0xcd, &(0x7f0000000640)=@string={0xcd, 0x3, "4ade34c8f2039a218e63340b81bffb868d771f26cff3a4c467fb2db433468dc8c7d5354b97dba36fb4231fd98ca1c49c1829419d38e58f29b6c084bb55eb6620502f05a7cade1dd34bdebd6ecc8df099b59073b785b61252f698d092d5064653f16ef3463b523cf28ef87329a03548d98ddbbec652669cad9e6e46bb83834b3f3bb9c8708c30176333d73cf71dbe16771bd13b37195480c9be696bc39d420db629e689f62da6b1d06558cba9e5b50cef0d5fefd966b16b868e5d55e1509a5537ee32528dcc811a0b49e7fa"}}, {0x69, &(0x7f0000000740)=@string={0x69, 0x3, "cd7b3c50ff80ed2e140374d92c2c8c93527aa91509327f8e6619c9484d87c6ea0477480be3f7ca5fd0da27491ffb69fe66f2870fa922199e98228b81ac5171436410c40dcdd5f4b3cd50a9a31e3fabcd740d7434b9fe33e9c136c5586fb1ae84847411307f835b"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0xc01}}, {0x2a, &(0x7f0000000880)=@string={0x2a, 0x3, "96acbac4c4955996cd68d99e758d3bfff97b8bced96497b62477e340aa73b815f22e0490683ee0d9"}}]}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 1m37.484063102s ago: executing program 2 (id=1229): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=@newsa={0xf0, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {@in=@broadcast, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x37}, {}, {}, {0x10, 0xd29}, 0x0, 0x0, 0xa, 0x1}}, 0xf0}}, 0x20000881) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=0x0, @ANYRESDEC=r2], 0x1c8}, 0x1, 0x0, 0x0, 0x85}, 0x20000018) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) 1m37.31740237s ago: executing program 2 (id=1230): ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)={0x0, 0x0}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x10802, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r0}) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000001240)={0x7, 0x1ff, 0x0, 0x1000, &(0x7f0000000100)=""/4096, 0xd9, &(0x7f0000001100)=""/217, 0x17, &(0x7f0000001200)=""/23}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000001280)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000012c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000002280)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002240)={&(0x7f00000013c0)={0x90, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x90}}, 0x800) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002300)={0x2020}, 0x2020) r4 = dup3(r1, r1, 0x80000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000004340)={0x48}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000043c0)={"6c38f874e3a0fdf2f8bc7232941b4fa0", 0x0, 0x0, {0x6, 0x8}, {0x3, 0x7f}, 0x29, [0x8, 0x9, 0xfdb3, 0x8000, 0x8, 0x0, 0x9, 0x94e, 0x9, 0x6, 0xb, 0x8, 0x9, 0x80000001, 0x7fffffff, 0x200]}) ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f0000004500)={0x7, 0x1}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000004540)={0x0, 0x3, 0x20}, &(0x7f0000004580)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000045c0)={r5, @in6={{0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2000}}, 0x5, 0xf, 0x3, 0xa77, 0x30, 0x5, 0x9}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x9) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000004680)={r0}) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000046c0)) sendmsg$AUDIT_TTY_SET(r6, &(0x7f00000047c0)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004780)={&(0x7f0000004740)={0x18, 0x3f9, 0x20, 0x70bd28, 0x25dfdbfd, {0x1}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 1m36.81780503s ago: executing program 2 (id=1234): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2d, 0x2, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x41000}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) io_uring_setup(0xc90, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xf, 0x2) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e05, 0x1, @mcast1, 0x7}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x2) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendto(r3, &(0x7f00000000c0)='\x00', 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) 1m36.649815248s ago: executing program 2 (id=1237): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4004) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x6, 0x0, @remote, 0xffff}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r4 = getpid() r5 = socket$inet(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x9}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000dd010000070000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x48, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0xfffffffb}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}, @TCA_CAKE_NAT={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x78}}, 0x8850) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r13 = inotify_init() inotify_add_watch(r13, 0x0, 0x5000009) fallocate(r12, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r12, 0x0) 1m20.19686897s ago: executing program 35 (id=1237): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4004) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x6, 0x0, @remote, 0xffff}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r4 = getpid() r5 = socket$inet(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x9}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000dd010000070000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x48, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0xfffffffb}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}, @TCA_CAKE_NAT={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x78}}, 0x8850) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r13 = inotify_init() inotify_add_watch(r13, 0x0, 0x5000009) fallocate(r12, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r12, 0x0) 53.805078037s ago: executing program 6 (id=1322): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, 0x0) (fail_nth: 3) 53.732558533s ago: executing program 6 (id=1323): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r1, 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) setregid(0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) r5 = socket(0x10, 0x3, 0x9) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000ffff270400"/20, @ANYRES32=0x0, @ANYBLOB="973401002120000008000500", @ANYRES32, @ANYBLOB="3800128009000100766c616e000000002800028006000100010000001c0004800c00010006000000060000000c0001000600000000000000"], 0x60}}, 0x8000002) 48.734754369s ago: executing program 6 (id=1330): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r0, 0x4048aecb, &(0x7f0000000040)=@arm64_sys={0x603000000013e6c7, 0x0}) 48.547146269s ago: executing program 6 (id=1332): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x5f3a, 0x4) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) syz_emit_ethernet(0xc2, &(0x7f0000000300)={@remote, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0xb4, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x11, 0x2, 0x7ffe, 0x0, 0xfffc, {[@timestamp={0x8, 0xa, 0xc8f, 0x5}, @generic={0xfe, 0xc, "ff81714a7e631e667ea1"}, @eol, @sack={0x5, 0xe, [0x10, 0x7fff, 0x9ec]}, @fastopen={0x22, 0x5, "4ac7e6"}, @mss={0x2, 0x4, 0x5941}]}}, {"fbef0a77a12a7f81fc1e01be44cf1b8e9d47122b0ae320187ff811f7f8fbe0bc9c55b978b9faef706968927f8e1390fe3f398f823b7961715ba7960c6431c195748652370beefe40fb4d02ab6399e051b7dcb7bb08c348602d153290"}}}}}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0xc00c6211, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{0x0, 0x2a}, {&(0x7f00000002c0)=""/144, 0x90}], 0x2, 0x0, 0x0, 0x4}, 0x20000000) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x100, 0x100, 0x1, 0x4000}}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="4d01000000000000000100e5", 0xc, 0x81, &(0x7f0000000340)={0x11, 0x0, r5, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8810) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000280)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000ffdbdf25010000001c000180060001000200000008000300ac1414bb080006002b"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x10) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="677111ea1c7ce102ac0526929ab20102030109cf00000100000000090400000103e900000905000000000000000705d77b5d2898"], 0x0) socket(0x1f, 0x1, 0x6) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) 43.554368734s ago: executing program 6 (id=1343): setreuid(0x0, 0xee00) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, 0x0) 41.467443974s ago: executing program 6 (id=1344): unshare(0x22020600) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_setup(0x2, &(0x7f0000000000)=0x0) r3 = fanotify_init(0x48, 0x8000) io_submit(r2, 0x1, &(0x7f00000007c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x81, r3, 0x0, 0x0, 0x1, 0x0, 0x3, r1}]) r4 = syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket(0x2000000015, 0x80005, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), 0x0, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = memfd_create(&(0x7f0000000840)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842.\x17c`\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10d\x89J\xb3zz\x83\x81\x0f\xbd\xdf\xff9**\xb7\xfa\xa9h;<\xe8\x85\v\x9e\x02\x03\xad\xa4\x11R\x14\xbc\xc8\xb5\x89\xffx\x98%O\xf8n~1G\x89\x96\x1d\xecz\xe8\x04\x86G%\xa0\xd5[\xda\xc9', 0x4) fallocate(r6, 0x0, 0x0, 0x100000000) recvfrom$packet(r5, 0x0, 0x0, 0x40000000, &(0x7f0000000440)={0x11, 0x15, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000080)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$KVM_CAP_DISABLE_QUIRKS2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x8}) 38.209449183s ago: executing program 5 (id=1346): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYBLOB="23020000000000000000030000000800020005000000140001"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0xa800) 37.582404564s ago: executing program 5 (id=1347): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc24f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x1, 0x5d9, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x7b, 0x7b, 0x42, 0x20, 0x45e, 0x28c, 0x2b3c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c7, 0x1, 0xf8, 0xb, 0x20, 0x2, [{{0x9, 0x4, 0xce, 0x4, 0x9, 0x42, 0x6c, 0xf6, 0x9, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, '$'}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x5e64327d, 0xa0, 0x800, 0x9}, {0x6, 0x24, 0x1a, 0x2, 0x36}, [@obex={0x5, 0x24, 0x15, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x9b80}, @mbim={0xc, 0x24, 0x1b, 0x7fff, 0xfffc, 0xfc, 0x2, 0xfff8, 0x9}]}], [{{0x9, 0x5, 0x8, 0x10, 0x40, 0x4, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xfa, 0x8}]}}, {{0x9, 0x5, 0xc, 0x2, 0x40, 0xa1, 0x5, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xfffe}]}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0x5, 0x5, 0xf5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfa, 0xb}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x1, 0x10, 0x45, [@generic={0xe2, 0x22, "942c9c0bc8f8d4c090f0eb2bdbf1a5220e30fcda0816af5c0db096ee53f158156d910b3428236873c8c5717e0802ffd6d721e4b543f7601777f1a877285684b1399ef6df5e192b56ccc9d3ab7e81e528d7f3f469944a008319e42506258bdd47b6aa58b75b067328a105649b07b3eecaec6f65cca0ce0904a84f203fb21d3732b9a36966f6a3d197135abab8c879fffa7a689ba615efa04e59add7e048d33901df64a824edaa3324b3f00a27650086499ce36f66ec8c9d6343804318a3b67669d1dbc3e360947283bbfe8afe902275fa7d3f33ccd8429eaaf000ddffb9bb54be"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0xa, 0x1, 0x80, [@generic={0xfa, 0xc, "af1ea61b98c92a697c950d8b1bff457e270aed5c76b57b0dce3ff944b03c38b35e60cae1bd9163d483aa6f7df66f1f1c4bb7c07a847d2e7ef11d69ccec276269b330e1167690d0aa5e397637dbd7d135747032d00807520a19eeca8ad5a8e38ec1c25263720a878fa1536b61db1ebc4af1c286275efa6252aefea7982bd9f14491fb41498cca5c3563ef37a7abb1e4db1a61df7e187169d23c478ef3f2cd49054b5dcdf928856dbf0ce269cfe4a463c97f0cfa60c05750e54ba44c71022f62f91cf0e117cdb4440f42bf50d7f33fcb09d573c7635688a47c71d659ffcc878fe45a3185bcff279b4a61f65d04654488291b1a73e662884aa7"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x9, 0x3, 0x0, [@generic={0xce, 0x21, "f2925ec726b7d195011e497ba4cd6b4e5e1f4468d4bf26589ea14e814f005e9c149f059f1cf654cd6fd6912dc56c450fc1e159b96d9edc534a893e564229673c750eb2f8b5ebb76793e77ff9fa8241454f3c0e46d96e20db7dba3fd35b3a20d55189b311b0b3850c86ab77df8858d48a85e0e28349fbec01b5722ed0c1d06ba3267297214aa8bb2fe883c0c18a12ee65c625ab70b26b42019e913ce02778d45c69c95e0dff6f94fc9aae190528c593778573e2940b1e0a9a143c81a54f36a8c0d62090233b70c2ff64c79a09"}, @generic={0x30, 0x8661cf1473214ce2, "6252c7bac5f840bb252548f219d2ffe383bbf6f35d1190528928a70cf5605a04071ce110133731d82d03210d8e60"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x40, 0x8c, 0x1, 0xcc, [@generic={0xbd, 0x22, "3d1ac09c99991af7fdf9484a73cff2b3570d6f18658cbdea26688c45f7ec13b4a8d3d736f25875543120c0d914de49628dc7397c86f58b74c1a4393801990f1d135606aa9eccc0a9cf5d6874ff9104daf6d1a5c2a076ac424b377add03784643d92ffb47a37efd43cc96bbdb8b37f0d5cbda79dc793a6e08393275bea674a918cc817be436388786a8fec1f6bc5a95116cb3266d2ca35e64262506605427df99b6093e6e4f6b88056b3d9c4f4117d6316c453023077e9db2a2aeb0"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x2, 0x5, 0x3, [@generic={0xdd, 0x6, "ec76e770c371e5819fafa458362fcf63fde348d2d232cc2f23faa69ae8209a7afc8e0c24b69119ccaacf2e5c9c6293c72bf9a39055cd380e4b7bac903e542e10b911786ba3166d8d7653aceee315378af7edb229b94f2985b63d7be9f255da3227c4075a3288daa53af34980cb92d6a2e8906d13b5a2bf3ed160c5c6b136e3d622319f6216b58482d066b0ea14ce278db69c85029637bdb231f6f9b74e236e72b6e9cf4d1cbe2bb648b5e2a853513c60b37c7306a25135c0eb98375c83cd7d67d27499c488b1f20c85e2ae22120815c655af5a8774e194c102aa50"}, @generic={0x82, 0xd, "7f3495e92d290e650ef0b234452b5ed4f206651b8b5b83621c98c48b02376e09fd674379f0da24c71c2ea7d7656291c51e1883480611c3eb151a359497fd06ccdde75f0235cd854d6e54ae18da3522b45516cf6419af2e8b254ffa73241ab4214b9c4a2e921253978da1518c5fe8e6159a7931765128f916145aef8a765659ea"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x7, 0x20, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x4}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x0, 0x1, 0x4, 0x20, 0x83}, 0x8e, &(0x7f00000000c0)={0x5, 0xf, 0x8e, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xde, "b1401df569bbf59fd0835f8142c8463f"}, @generic={0x6b, 0x10, 0xb, "0016805b0a2ede55ce17609205cf400bef8303299aa371355badcf58366341dacc9726dd5ef7e050d63c9da21104822313541f2013a322306b93e6d855014ace7c83cfb6fe189a038c68eed00b7d0087645b4d6ac86a4cfc00efdda0e76f34fd04099d9688b053bd"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xf, 0x5, 0x7f}]}, 0x8, [{0x24, &(0x7f0000000180)=@string={0x24, 0x3, "2a52875a9e2cbcbdc24c0d8eee90dd3560e7275c010f3acd886599f2d9d7129ac1f8"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x409}}, {0x17, &(0x7f0000000200)=@string={0x17, 0x3, "54e15f98623f35bee802e5e225e908b89519e5b252"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42b}}, {0xbf, &(0x7f0000000900)=@string={0xbf, 0x3, "0f466f824c090f6b95297cdb9de491a448eeaa748a25aeb7f7d3dbebd9881c707eee552f81a7d5b35982b2e12b5cf50babf805ffbb2ef727a337f89030758d8bc99289fe868e2e5ef5ba126af18ef48663180d180c942b08f7d95ad2fe82a10cfd893b486105f190bcf195ad68aae15da06cba03235dd6914a246559a00fe5212af07b5c92f8549d20250184e98091ea1c07af4d7e25af384fc8f55da35a232363285ede7ac918a1a64f4a0e50ef32b80a1de3172ca64c272e950a9bef"}}, {0xe0, &(0x7f00000009c0)=@string={0xe0, 0x3, "c4d9ece26b83d8c1508d267b141bc0f81993dc5de58c4e3b1d491156250a32a115c87dfe270c0de51314a18e534b297b70dbec6e00eaef9f1da5fe9c5e139c3a31b2ac2d3fa1dcdded0c127f7e4597f7573c649813763a39891401170d7d80c6f26820acb856e43d96f9871989d75949b4bdaf3d92ccdb8ae3fcf1f1a6d7374d17efd43cea3bb263e59667ed69fe1dbed0f5a0b817f03016cafec473bb30a83d8f226734ece9165475a02e4cafc3be02674431e831885011feb9dbecefd309fcf03dd52d237357ec545344ae6f2646b42fbfbb67817b58c6bbc973b9442e"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x412}}, {0x86, &(0x7f0000000ac0)=@string={0x86, 0x3, "16adbfd5ad7996c1c5742ce0018d1e37c1b9f36d3fbb8318905f1e2de5a9291bdd2daea49f7cd74a257042d97447c7d0428abad9227c03f961df89c8d961ee29e5c3cd9dcf5efdd60d1e72f9d214ca25eaea669c8fcd6d8de8ca815291beca1d6775eefcd6a9bdc6b33bfe03fa716af464378b38cf3d4192a48545cc41ce745e61968b23"}}]}) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x0, 0x5, 0x7, {0x7, 0xa, "b85f54897b"}}, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffd) 36.411386903s ago: executing program 5 (id=1348): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) close(0x3) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x102, 0x0) sendfile(r2, r2, 0x0, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0xb6f8000) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', &(0x7f0000002fc0)=@ethtool_stats}) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000001010902240001000000000904010002ffffff000905b6aa"], 0x0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r1, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x20004005}, 0x0) 34.450327663s ago: executing program 3 (id=1349): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d03, 0x0, 0x800}]}) (async) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x50, 0xffffffffffffffff, 0x16780000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'mpc624\x00', [0x4f2a, 0x8, 0x10000, 0x4, 0x4001000, 0xcc7, 0x8, 0x7, 0xa, 0x6, 0x400002, 0x1, 0x1, 0x1, 0x6, 0x101, 0x7, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e58, 0xb, 0xe67, 0x3d, 0x8, 0x4088, 0x0, 0xfffffff8]}) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 33.585359714s ago: executing program 5 (id=1350): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r1, 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) setregid(0x0, 0x0) r5 = socket(0x10, 0x3, 0x9) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000ffff270400"/20, @ANYRES32=0x0, @ANYBLOB="973401002120000008000500", @ANYRES32, @ANYBLOB="3800128009000100766c616e000000002800028006000100010000001c0004800c00010006000000060000000c0001000600000000000000"], 0x60}}, 0x8000002) 32.870120827s ago: executing program 3 (id=1351): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x5f3a, 0x4) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) syz_emit_ethernet(0xc2, &(0x7f0000000300)={@remote, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0xb4, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x11, 0x2, 0x7ffe, 0x0, 0xfffc, {[@timestamp={0x8, 0xa, 0xc8f, 0x5}, @generic={0xfe, 0xc, "ff81714a7e631e667ea1"}, @eol, @sack={0x5, 0xe, [0x10, 0x7fff, 0x9ec]}, @fastopen={0x22, 0x5, "4ac7e6"}, @mss={0x2, 0x4, 0x5941}]}}, {"fbef0a77a12a7f81fc1e01be44cf1b8e9d47122b0ae320187ff811f7f8fbe0bc9c55b978b9faef706968927f8e1390fe3f398f823b7961715ba7960c6431c195748652370beefe40fb4d02ab6399e051b7dcb7bb08c348602d153290"}}}}}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0xc00c6211, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{0x0, 0x2a}, {&(0x7f00000002c0)=""/144, 0x90}], 0x2, 0x0, 0x0, 0x4}, 0x20000000) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x100, 0x100, 0x1, 0x4000}}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="4d01000000000000000100e5", 0xc, 0x81, &(0x7f0000000340)={0x11, 0x0, r5, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8810) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000280)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000ffdbdf25010000001c000180060001000200000008000300ac1414bb080006002b"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x10) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="677111ea1c7ce102ac0526929ab20102030109cf00000100000000090400000103e900000905000000000000000705d77b5d2898"], 0x0) socket(0x1f, 0x1, 0x6) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) 31.462517141s ago: executing program 5 (id=1352): setreuid(0x0, 0xee00) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000011c0), 0x0) 29.057610622s ago: executing program 5 (id=1353): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000100)={0x48}) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000180)=0xffffffffffffffff) io_setup(0x23, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000f8000000bfa300000000000007030000f8ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r6, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@hoplimit={{0x14, 0x29, 0x34, 0xb}}], 0x18}, 0x4040854) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000280)={0x28, 0x10000, r4, r4, 0xf6248, 0x8, 0x1, 0x54f76}) 27.207461221s ago: executing program 3 (id=1354): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001007b0000001e040000002ac59800"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') writev(r1, &(0x7f0000000240)=[{&(0x7f0000000080)='y', 0x1}], 0x1) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="85382dbd7000fddbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x48810}, 0x80) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000340)=0x7fa, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x5, @empty}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 24.369119357s ago: executing program 36 (id=1344): unshare(0x22020600) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_setup(0x2, &(0x7f0000000000)=0x0) r3 = fanotify_init(0x48, 0x8000) io_submit(r2, 0x1, &(0x7f00000007c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x81, r3, 0x0, 0x0, 0x1, 0x0, 0x3, r1}]) r4 = syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket(0x2000000015, 0x80005, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), 0x0, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = memfd_create(&(0x7f0000000840)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842.\x17c`\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10d\x89J\xb3zz\x83\x81\x0f\xbd\xdf\xff9**\xb7\xfa\xa9h;<\xe8\x85\v\x9e\x02\x03\xad\xa4\x11R\x14\xbc\xc8\xb5\x89\xffx\x98%O\xf8n~1G\x89\x96\x1d\xecz\xe8\x04\x86G%\xa0\xd5[\xda\xc9', 0x4) fallocate(r6, 0x0, 0x0, 0x100000000) recvfrom$packet(r5, 0x0, 0x0, 0x40000000, &(0x7f0000000440)={0x11, 0x15, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000080)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$KVM_CAP_DISABLE_QUIRKS2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x8}) 23.183658642s ago: executing program 3 (id=1356): openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x140, 0x40) socket$inet6_udplite(0xa, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) r0 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r0], 0x2b) sendfile(r2, r0, 0x0, 0x4000000053d2) 21.78634237s ago: executing program 3 (id=1357): syz_usb_connect$uac1(0x5, 0x71, &(0x7f0000000100)=ANY=[@ANYBLOB="12011003000000406b1d010140000102030109025f0003010130080602"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$vicodec1(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000080)={0x0, 0xc46, 0x2}) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x1, 0x2000) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x3264, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0xfff9, 0x2, 0x1, {0x22, 0xf64}}, {{{0x9, 0x5, 0x81, 0x3, 0x19f, 0x80, 0xfc, 0xf9}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x2, 0x4, 0x2}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x1, 0xb, 0x6, 0x8, 0x52}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x5, [{0x87, &(0x7f00000002c0)=@string={0x87, 0x3, "7f313cf3b8e89eb3ddebae133659bbf84d1452c635427b8d9cdfc6dd8dda2683d36fe53be30891fd451b1903bfbbf6d2d04f0931bb19ea423b9059aba1962b1b7557375469894e7df51232b40f97b97340c78f7f8d601a1c1d64720a5bdfc852445c6e89a3033956f49664cf995e905da2ed1a1b49003d733d808e1296525956e09c67706d"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x820}}, {0xe, &(0x7f00000003c0)=@string={0xe, 0x3, "e8e9429620d8afdb97710956"}}, {0x77, &(0x7f00000004c0)=@string={0x77, 0x3, "c86ec3119f483e4685ac7782e4405ce2db126b60ae8ea41c2d13b0a690b1e5ff7906bccce2e5b71052d3eac6043c2197233a1a9863530b554e4b24798dc5f2a5ff5e4a9da0083603beb93cf7d3ae1952c234cd58d0dea74baca87476fda320d12f1efd7689c365b095ae5bff09ffbaadb4f9506298"}}, {0x0, 0x0}]}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x2, 0x5c7, {0xffffffffffffffff}, {}, 0x800, 0x10}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0xffffffff, "030000000000000023000000debd12ffff00000000000000000020000400"}) r5 = epoll_create1(0x0) epoll_wait(r5, &(0x7f0000000a80)=[{}], 0x1, 0x4) fcntl$setown(r2, 0x8, r3) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x4aa, 0x12) r6 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000008c0)={0x64, r0, 0x1, 0x70bd2d, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8045) 17.497323374s ago: executing program 3 (id=1358): openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000440)=""/127, 0x7f}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11.215152654s ago: executing program 37 (id=1353): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000100)={0x48}) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000180)=0xffffffffffffffff) io_setup(0x23, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r6, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@hoplimit={{0x14, 0x29, 0x34, 0xb}}], 0x18}, 0x4040854) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000280)={0x28, 0x10000, r4, r4, 0xf6248, 0x8, 0x1, 0x54f76}) 0s ago: executing program 38 (id=1358): openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000440)=""/127, 0x7f}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): fn=smack_socket_sock_rcv_skb action=denied subject="_" object="y" requested=w pid=9344 comm="syz.6.911" saddr=fc01::25:300:0:0 daddr=ff02::1 dest=3618 netif=wpan0 [ 483.005141][ T5869] usb 7-1: USB disconnect, device number 21 [ 483.161349][ T5183] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 483.245066][ T9380] netlink: 'syz.2.921': attribute type 1 has an invalid length. [ 483.245098][ T9380] netlink: 9184 bytes leftover after parsing attributes in process `syz.2.921'. [ 483.352132][ T5183] usb 5-1: Using ep0 maxpacket: 32 [ 483.354732][ T5183] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 483.354755][ T5183] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.354773][ T5183] usb 5-1: config 0 has no interface number 0 [ 483.354820][ T5183] usb 5-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 483.354847][ T5183] usb 5-1: config 0 interface 2 has no altsetting 0 [ 483.357350][ T5183] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 483.357376][ T5183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.357395][ T5183] usb 5-1: Product: syz [ 483.357409][ T5183] usb 5-1: Manufacturer: syz [ 483.357423][ T5183] usb 5-1: SerialNumber: syz [ 483.441750][ T5183] usb 5-1: config 0 descriptor?? [ 483.526936][ T5869] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 483.685456][ T5183] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 483.691319][ T5869] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 483.691347][ T5869] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.691367][ T5869] usb 7-1: config 0 has no interface number 0 [ 483.691418][ T5869] usb 7-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 483.695224][ T5869] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 483.695251][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.695270][ T5869] usb 7-1: Product: syz [ 483.695283][ T5869] usb 7-1: Manufacturer: syz [ 483.695296][ T5869] usb 7-1: SerialNumber: syz [ 483.716498][ T5869] usb 7-1: config 0 descriptor?? [ 483.730619][ T5869] asix 7-1:0.251: probe with driver asix failed with error -22 [ 484.053720][ T5183] usb 5-1: invalid MIDI in EP 0 [ 484.271217][ T5183] snd-usb-audio 5-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 484.294950][ T5183] usb 5-1: USB disconnect, device number 45 [ 484.342584][ T6005] udevd[6005]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.595719][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 486.165460][ T5183] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 486.389951][ T5183] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 486.389978][ T5183] usb 5-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 486.389997][ T5183] usb 5-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 486.390019][ T5183] usb 5-1: config 150 has no interface number 0 [ 486.390056][ T5183] usb 5-1: config 150 interface 204 has no altsetting 0 [ 486.509759][ T5183] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 486.509827][ T5183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.509882][ T5183] usb 5-1: Product: syz [ 486.509946][ T5183] usb 5-1: Manufacturer: syz [ 486.510000][ T5183] usb 5-1: SerialNumber: syz [ 487.427985][ T9408] program syz.4.927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 487.439877][ T9408] netlink: 64 bytes leftover after parsing attributes in process `syz.4.927'. [ 487.694640][ T5888] usb 7-1: USB disconnect, device number 22 [ 487.805270][ T5183] usb 5-1: USB disconnect, device number 46 [ 488.239986][ T5183] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 488.487472][ T5183] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 488.487547][ T5183] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 488.567589][ T5183] usb 4-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 488.567620][ T5183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.567674][ T5183] usb 4-1: Product: syz [ 488.567725][ T5183] usb 4-1: Manufacturer: syz [ 488.567795][ T5183] usb 4-1: SerialNumber: syz [ 488.837291][ T5183] usb 4-1: config 0 descriptor?? [ 489.522524][ T5869] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 490.531743][ C1] vkms_vblank_simulate: vblank timer overrun [ 490.541174][ T5183] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 490.580691][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 490.583127][ T5869] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.583153][ T5869] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 490.587632][ T5869] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 490.587661][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.587682][ T5869] usb 3-1: Product: syz [ 490.587696][ T5869] usb 3-1: Manufacturer: syz [ 490.587709][ T5869] usb 3-1: SerialNumber: syz [ 490.601970][ T1584] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 490.681808][ T5869] usb 3-1: config 0 descriptor?? [ 490.711545][ T5183] usb 4-1: USB disconnect, device number 39 [ 490.762371][ T1584] usb 5-1: Using ep0 maxpacket: 8 [ 490.769122][ T1584] usb 5-1: unable to get BOS descriptor or descriptor too short [ 490.771685][ T1584] usb 5-1: config 17 has an invalid interface number: 8 but max is 1 [ 490.771710][ T1584] usb 5-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 490.771730][ T1584] usb 5-1: config 17 has no interface number 0 [ 490.771852][ T1584] usb 5-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 490.771875][ T1584] usb 5-1: config 17 interface 8 has no altsetting 0 [ 490.800908][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 490.845249][ T1584] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 490.845349][ T1584] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.845369][ T1584] usb 5-1: Product: syz [ 490.845383][ T1584] usb 5-1: Manufacturer: syz [ 490.845396][ T1584] usb 5-1: SerialNumber: syz [ 491.344163][ C1] vkms_vblank_simulate: vblank timer overrun [ 492.034634][ C1] vkms_vblank_simulate: vblank timer overrun [ 492.482127][ C1] vkms_vblank_simulate: vblank timer overrun [ 492.626048][ C1] vkms_vblank_simulate: vblank timer overrun [ 492.778449][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.084721][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.136890][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.179197][ T5869] usb 3-1: USB disconnect, device number 43 [ 493.861247][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.103280][ T1584] usb 5-1: selecting invalid altsetting 0 [ 494.279807][ T1584] usb 5-1: USB disconnect, device number 47 [ 494.457556][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 494.580926][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.951'. [ 495.273792][ T5888] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 495.441074][ T5888] usb 3-1: unable to get BOS descriptor or descriptor too short [ 495.442285][ T5888] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.442299][ T5888] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 495.444602][ T5888] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 495.444618][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.444628][ T5888] usb 3-1: Product: syz [ 495.444636][ T5888] usb 3-1: Manufacturer: syz [ 495.444643][ T5888] usb 3-1: SerialNumber: syz [ 495.817582][ T5888] usb 3-1: USB disconnect, device number 44 [ 499.795983][ T5869] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 500.816452][ T5869] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 500.816504][ T5869] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 500.816528][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.834696][ T5869] usb 5-1: config 0 descriptor?? [ 501.946956][ T9525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.966'. [ 501.972560][ T5869] usb 5-1: language id specifier not provided by device, defaulting to English [ 502.218123][ T5869] letsketch 0003:6161:4D15.0009: Device info: 㡵 [ 502.385257][ T9534] netlink: 4 bytes leftover after parsing attributes in process `syz.6.968'. [ 502.481733][ T5869] usb 5-1: Max retries (5) exceeded reading string descriptor 201 [ 502.481833][ T5869] letsketch 0003:6161:4D15.0009: probe with driver letsketch failed with error -71 [ 502.516860][ T5869] usb 5-1: USB disconnect, device number 48 [ 502.864253][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 505.315605][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 505.318931][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 505.320647][ T9] usb 4-1: config 17 has an invalid interface number: 8 but max is 1 [ 505.320673][ T9] usb 4-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 505.320695][ T9] usb 4-1: config 17 has no interface number 0 [ 505.320743][ T9] usb 4-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 505.320766][ T9] usb 4-1: config 17 interface 8 has no altsetting 0 [ 505.329614][ T9] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 505.329645][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.329665][ T9] usb 4-1: Product: syz [ 505.329679][ T9] usb 4-1: Manufacturer: syz [ 505.329693][ T9] usb 4-1: SerialNumber: syz [ 508.189368][ T5965] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 508.551562][ T5965] usb 7-1: Using ep0 maxpacket: 8 [ 508.569523][ T5965] usb 7-1: unable to get BOS descriptor or descriptor too short [ 508.571305][ T5965] usb 7-1: config 17 has an invalid interface number: 8 but max is 1 [ 508.571330][ T5965] usb 7-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 508.571350][ T5965] usb 7-1: config 17 has no interface number 0 [ 508.571398][ T5965] usb 7-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 508.571421][ T5965] usb 7-1: config 17 interface 8 has no altsetting 0 [ 509.721782][ T5965] usb 7-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 509.721813][ T5965] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.721833][ T5965] usb 7-1: Product: syz [ 509.721846][ T5965] usb 7-1: Manufacturer: syz [ 509.721869][ T5965] usb 7-1: SerialNumber: syz [ 509.926982][ T9] usb 4-1: selecting invalid altsetting 0 [ 510.008976][ T9] usb 4-1: USB disconnect, device number 40 [ 510.129231][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.158575][ T9582] syz.4.982 uses obsolete (PF_INET,SOCK_PACKET) [ 510.161569][ T9582] netlink: 28 bytes leftover after parsing attributes in process `syz.4.982'. [ 518.583092][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 519.950400][ T5965] usb 7-1: selecting invalid altsetting 0 [ 520.593277][ T9612] netlink: zone id is out of range [ 520.622675][ T5869] usb 7-1: USB disconnect, device number 23 [ 520.776974][ T9612] netlink: set zone limit has 4 unknown bytes [ 521.111832][ T5805] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 521.304978][ T5805] usb 4-1: Using ep0 maxpacket: 8 [ 521.319097][ T9625] netlink: 'syz.5.997': attribute type 1 has an invalid length. [ 521.335662][ T5805] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.335706][ T5805] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 521.456188][ T5805] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 521.456218][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.456237][ T5805] usb 4-1: Product: syz [ 521.456250][ T5805] usb 4-1: Manufacturer: syz [ 521.456263][ T5805] usb 4-1: SerialNumber: syz [ 521.510525][ T5805] usb 4-1: config 0 descriptor?? [ 521.607673][ T9625] bond1: entered promiscuous mode [ 521.608191][ T9625] 8021q: adding VLAN 0 to HW filter on device bond1 [ 521.660982][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 521.661117][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 521.807509][ T9626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 521.807928][ T9626] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 521.807953][ T9626] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 521.844556][ T5869] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 521.845099][ T9626] bond1: (slave gre1): making interface the new active one [ 521.845122][ T9626] gre1: entered promiscuous mode [ 521.847846][ T9626] bond1: (slave gre1): Enslaving as an active interface with an up link [ 521.941478][ T37] audit: type=1400 audit(6055654442.858:18): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="y" requested=w pid=9616 comm="syz.3.994" saddr=fc01::25:300:0:0 daddr=ff02::1 dest=3618 netif=wpan0 [ 522.019412][ T5869] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 522.019446][ T5869] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 522.025870][ T5869] usb 7-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 522.025898][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.025918][ T5869] usb 7-1: Product: syz [ 522.025931][ T5869] usb 7-1: Manufacturer: syz [ 522.025944][ T5869] usb 7-1: SerialNumber: syz [ 522.058221][ T1584] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 522.101216][ T5869] usb 7-1: config 0 descriptor?? [ 522.250587][ T1584] usb 5-1: Using ep0 maxpacket: 32 [ 522.253747][ T1584] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 522.253782][ T1584] usb 5-1: config 2 has no interface number 0 [ 522.253909][ T1584] usb 5-1: config 2 interface 88 has no altsetting 0 [ 522.271420][ T1584] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 522.288952][ T1584] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.288977][ T1584] usb 5-1: Product: syz [ 522.288991][ T1584] usb 5-1: Manufacturer: syz [ 522.289000][ T1584] usb 5-1: SerialNumber: syz [ 522.865559][ T5869] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 523.006642][ T5869] usb 7-1: USB disconnect, device number 24 [ 523.767312][ T6032] udevd[6032]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 523.991077][ C0] vkms_vblank_simulate: vblank timer overrun [ 525.114732][ C0] vkms_vblank_simulate: vblank timer overrun [ 525.253090][ T1228] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 525.311117][ T1584] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 525.311397][ T1584] asix 5-1:2.88: probe with driver asix failed with error -71 [ 525.352453][ T1584] usb 5-1: USB disconnect, device number 49 [ 525.412698][ T9661] netlink: zone id is out of range [ 525.437670][ T1228] usb 7-1: Using ep0 maxpacket: 16 [ 525.439484][ T1228] usb 7-1: no configurations [ 525.439500][ T1228] usb 7-1: can't read configurations, error -22 [ 525.585270][ T1228] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 525.704486][ T9661] netlink: set zone limit has 4 unknown bytes [ 525.744556][ T1228] usb 7-1: Using ep0 maxpacket: 16 [ 525.746086][ T1228] usb 7-1: no configurations [ 525.746103][ T1228] usb 7-1: can't read configurations, error -22 [ 525.746548][ T1228] usb usb7-port1: attempt power cycle [ 525.880518][ T5805] usb 4-1: USB disconnect, device number 41 [ 526.108030][ T1228] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 526.131545][ T1228] usb 7-1: Using ep0 maxpacket: 16 [ 526.134306][ T1228] usb 7-1: no configurations [ 526.134338][ T1228] usb 7-1: can't read configurations, error -22 [ 526.288024][ T1228] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 526.356174][ C0] vkms_vblank_simulate: vblank timer overrun [ 527.400672][ C0] vkms_vblank_simulate: vblank timer overrun [ 527.402897][ T1228] usb 7-1: Using ep0 maxpacket: 16 [ 527.406089][ T1228] usb 7-1: no configurations [ 527.406106][ T1228] usb 7-1: can't read configurations, error -22 [ 527.406725][ T1228] usb usb7-port1: unable to enumerate USB device [ 527.510775][ C0] vkms_vblank_simulate: vblank timer overrun [ 527.729980][ C0] vkms_vblank_simulate: vblank timer overrun [ 527.827575][ C0] vkms_vblank_simulate: vblank timer overrun [ 527.934975][ C0] vkms_vblank_simulate: vblank timer overrun [ 528.875421][ T5965] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 529.046714][ T5965] usb 3-1: Using ep0 maxpacket: 8 [ 529.209836][ T5965] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 529.209915][ T5965] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 529.209960][ T5965] usb 3-1: config 135 has no interface number 0 [ 529.210347][ T5965] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 529.399718][ T5805] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 530.153699][ T5965] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 530.153732][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.153758][ T5965] usb 3-1: Product: syz [ 530.153772][ T5965] usb 3-1: Manufacturer: syz [ 530.153786][ T5965] usb 3-1: SerialNumber: syz [ 530.247159][ T5965] uvcvideo 3-1:135.230: probe with driver uvcvideo failed with error -22 [ 530.253711][ T5805] usb 5-1: Using ep0 maxpacket: 8 [ 530.267578][ T5805] usb 5-1: unable to get BOS descriptor or descriptor too short [ 530.268966][ T5805] usb 5-1: config 17 has an invalid interface number: 8 but max is 1 [ 530.268991][ T5805] usb 5-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 530.269010][ T5805] usb 5-1: config 17 has no interface number 0 [ 530.269055][ T5805] usb 5-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 530.269069][ T5805] usb 5-1: config 17 interface 8 has no altsetting 0 [ 530.275819][ T5805] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 530.275850][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.275872][ T5805] usb 5-1: Product: syz [ 530.275886][ T5805] usb 5-1: Manufacturer: syz [ 530.275899][ T5805] usb 5-1: SerialNumber: syz [ 530.456070][ T5965] usb 3-1: USB disconnect, device number 45 [ 530.809192][ T5869] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 530.990859][ T5869] usb 7-1: Using ep0 maxpacket: 8 [ 530.993836][ T5869] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.993861][ T5869] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 531.034954][ T5869] usb 7-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 531.034984][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.035004][ T5869] usb 7-1: Product: syz [ 531.035016][ T5869] usb 7-1: Manufacturer: syz [ 531.035030][ T5869] usb 7-1: SerialNumber: syz [ 531.095928][ T5869] usb 7-1: config 0 descriptor?? [ 532.155622][ T1228] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 532.380023][ T1228] usb 3-1: Using ep0 maxpacket: 8 [ 532.388351][ T1228] usb 3-1: unable to get BOS descriptor or descriptor too short [ 532.393896][ T1228] usb 3-1: config 17 has an invalid interface number: 8 but max is 1 [ 532.393921][ T1228] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 532.393941][ T1228] usb 3-1: config 17 has no interface number 0 [ 532.394902][ T1228] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 532.394927][ T1228] usb 3-1: config 17 interface 8 has no altsetting 0 [ 532.409647][ T1228] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 532.409676][ T1228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.410155][ T1228] usb 3-1: Product: syz [ 532.410164][ T1228] usb 3-1: Manufacturer: syz [ 532.410172][ T1228] usb 3-1: SerialNumber: syz [ 533.919468][ T5805] usb 5-1: selecting invalid altsetting 0 [ 534.175497][ T5805] usb 5-1: USB disconnect, device number 50 [ 534.553643][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.036567][ T1228] usb 3-1: selecting invalid altsetting 0 [ 538.355238][ T1228] usb 3-1: USB disconnect, device number 46 [ 538.418789][ T5869] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 538.730591][ T1228] usb 7-1: USB disconnect, device number 29 [ 538.779498][ T9735] FAULT_INJECTION: forcing a failure. [ 538.779498][ T9735] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 538.779533][ T9735] CPU: 0 UID: 0 PID: 9735 Comm: syz.6.1031 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 538.779554][ T9735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 538.779565][ T9735] Call Trace: [ 538.779573][ T9735] [ 538.779581][ T9735] dump_stack_lvl+0x189/0x250 [ 538.779702][ T9735] ? __pfx____ratelimit+0x10/0x10 [ 538.779854][ T9735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.779880][ T9735] ? __pfx__printk+0x10/0x10 [ 538.779912][ T9735] ? fs_reclaim_acquire+0x7d/0x100 [ 538.779959][ T9735] should_fail_ex+0x46c/0x600 [ 538.780014][ T9735] prepare_alloc_pages+0x213/0x670 [ 538.780048][ T9735] __alloc_frozen_pages_noprof+0x123/0x370 [ 538.780078][ T9735] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 538.780113][ T9735] ? policy_nodemask+0x27c/0x720 [ 538.780143][ T9735] alloc_pages_mpol+0xd1/0x380 [ 538.780172][ T9735] vma_alloc_folio_noprof+0xe4/0x280 [ 538.780200][ T9735] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 538.780239][ T9735] folio_prealloc+0x30/0x180 [ 538.780281][ T9735] handle_mm_fault+0x12ee/0x3400 [ 538.780303][ T9735] ? reacquire_held_locks+0x127/0x1d0 [ 538.780353][ T9735] ? handle_mm_fault+0xdb/0x3400 [ 538.780383][ T9735] ? __pfx_handle_mm_fault+0x10/0x10 [ 538.780404][ T9735] ? lock_vma_under_rcu+0x42c/0x4a0 [ 538.780428][ T9735] ? do_sys_openat2+0x154/0x1c0 [ 538.780469][ T9735] ? do_user_addr_fault+0x1a8/0x1380 [ 538.780501][ T9735] do_user_addr_fault+0xa7c/0x1380 [ 538.780523][ T9735] ? rcu_is_watching+0x15/0xb0 [ 538.780553][ T9735] ? trace_page_fault_user+0x84/0x1e0 [ 538.780649][ T9735] exc_page_fault+0x82/0x100 [ 538.780752][ T9735] asm_exc_page_fault+0x26/0x30 [ 538.780818][ T9735] RIP: 0033:0x7f59b7020616 [ 538.780834][ T9735] Code: 00 00 00 00 41 57 31 c0 41 56 49 89 d6 41 55 49 89 f5 48 89 d6 41 54 49 89 fc 48 8d 3d 6c 4e 1b 00 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 4c d9 fe ff 4d 85 f6 0f 84 46 0a 00 [ 538.780850][ T9735] RSP: 002b:00007f59b53b3f70 EFLAGS: 00010202 [ 538.780866][ T9735] RAX: 0000000000000000 RBX: 00007f59b73a5fa0 RCX: 0000200000000740 [ 538.780879][ T9735] RDX: 0000200000000300 RSI: 0000200000000300 RDI: 00007f59b71d5479 [ 538.780892][ T9735] RBP: 00007f59b53b6090 R08: 00007f59b700e2f0 R09: 0000000000000000 [ 538.780904][ T9735] R10: 0000000000000000 R11: 0000200000000300 R12: 0000000000000000 [ 538.780915][ T9735] R13: 0000000000000057 R14: 0000200000000300 R15: 00007fff70f6d3f8 [ 538.780954][ T9735] [ 538.812118][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 538.813261][ T5869] usb 5-1: no configurations [ 538.813277][ T5869] usb 5-1: can't read configurations, error -22 [ 538.953046][ T9735] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 539.009363][ T5869] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 539.256201][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 539.319332][ T5869] usb 5-1: no configurations [ 539.319844][ T5869] usb 5-1: can't read configurations, error -22 [ 539.716090][ T5869] usb usb5-port1: attempt power cycle [ 539.966221][ T44] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 540.126562][ T5869] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 540.159525][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 540.160110][ T5869] usb 5-1: no configurations [ 540.160121][ T5869] usb 5-1: can't read configurations, error -22 [ 540.162553][ T44] usb 7-1: unable to get BOS descriptor or descriptor too short [ 540.164021][ T44] usb 7-1: config 0 has no interfaces? [ 540.166903][ T44] usb 7-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 540.166931][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.166951][ T44] usb 7-1: Product: syz [ 540.166965][ T44] usb 7-1: Manufacturer: syz [ 540.166978][ T44] usb 7-1: SerialNumber: syz [ 540.247150][ T44] usb 7-1: config 0 descriptor?? [ 540.297596][ T5869] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 540.319538][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 540.320392][ T5869] usb 5-1: no configurations [ 540.320407][ T5869] usb 5-1: can't read configurations, error -22 [ 540.321071][ T5869] usb usb5-port1: unable to enumerate USB device [ 541.053606][ T1228] usb 7-1: USB disconnect, device number 30 [ 541.634854][ T9772] FAULT_INJECTION: forcing a failure. [ 541.634854][ T9772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.634889][ T9772] CPU: 0 UID: 0 PID: 9772 Comm: syz.3.1043 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 541.634915][ T9772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 541.634924][ T9772] Call Trace: [ 541.634931][ T9772] [ 541.634940][ T9772] dump_stack_lvl+0x189/0x250 [ 541.634970][ T9772] ? __pfx____ratelimit+0x10/0x10 [ 541.634996][ T9772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 541.635021][ T9772] ? __pfx__printk+0x10/0x10 [ 541.635042][ T9772] ? __might_fault+0xb0/0x130 [ 541.635077][ T9772] should_fail_ex+0x46c/0x600 [ 541.635106][ T9772] _copy_from_user+0x2d/0xb0 [ 541.635127][ T9772] do_tcp_setsockopt+0x47d/0x1f20 [ 541.635286][ T9772] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 541.635316][ T9772] ? __fget_files+0x2a/0x420 [ 541.635360][ T9772] ? sock_common_setsockopt+0x36/0xc0 [ 541.635444][ T9772] ? tcp_setsockopt+0x3d/0xe0 [ 541.635461][ T9772] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 541.635488][ T9772] do_sock_setsockopt+0x17c/0x1b0 [ 541.635540][ T9772] __x64_sys_setsockopt+0x145/0x1b0 [ 541.635563][ T9772] do_syscall_64+0xfa/0xfa0 [ 541.635584][ T9772] ? lockdep_hardirqs_on+0x9c/0x150 [ 541.635605][ T9772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.635621][ T9772] ? clear_bhb_loop+0x60/0xb0 [ 541.635640][ T9772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.635657][ T9772] RIP: 0033:0x7fbe4b76f749 [ 541.635672][ T9772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.635687][ T9772] RSP: 002b:00007fbe499ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 541.635707][ T9772] RAX: ffffffffffffffda RBX: 00007fbe4b9c6090 RCX: 00007fbe4b76f749 [ 541.635720][ T9772] RDX: 0000000000000014 RSI: 0000000000000006 RDI: 0000000000000003 [ 541.635729][ T9772] RBP: 00007fbe499ad090 R08: 0000000000000004 R09: 0000000000000000 [ 541.635739][ T9772] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 541.635750][ T9772] R13: 00007fbe4b9c6128 R14: 00007fbe4b9c6090 R15: 00007ffd147de5f8 [ 541.635782][ T9772] [ 543.349747][ T9785] binder: 9783:9785 ioctl c0306201 0 returned -14 [ 543.350198][ T9785] binder: 9783:9785 ioctl c00c6211 0 returned -14 [ 543.561249][ T5869] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 543.609963][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 543.760113][ T9] usb 3-1: device descriptor read/64, error -71 [ 544.158296][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 544.360944][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 544.360997][ T5869] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 544.361021][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.375376][ T5869] usb 4-1: config 0 descriptor?? [ 544.485703][ T9] usb 3-1: device descriptor read/64, error -71 [ 544.604350][ T9] usb usb3-port1: attempt power cycle [ 545.011922][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 545.050068][ T9] usb 3-1: device descriptor read/8, error -71 [ 545.271025][ T5888] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 545.373383][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 545.407526][ T9] usb 3-1: device descriptor read/8, error -71 [ 545.507594][ T5888] usb 7-1: Using ep0 maxpacket: 32 [ 545.533043][ T5888] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 545.533073][ T5888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.561509][ T9] usb usb3-port1: unable to enumerate USB device [ 545.678814][ T5888] usb 7-1: config 0 descriptor?? [ 545.682601][ T5869] usb 4-1: language id specifier not provided by device, defaulting to English [ 545.686504][ T5888] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 545.687203][ T5869] letsketch 0003:6161:4D15.000A: Device info: 㡵 [ 545.920287][ T5888] gspca_vc032x: reg_r err -32 [ 545.920306][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.920316][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.920324][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.920332][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.920339][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.920347][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.920355][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.920363][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.920369][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.920378][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.920386][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.920394][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.920401][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.920410][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.920418][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.920425][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.920434][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.920442][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.920449][ T5888] gspca_vc032x: Unknown sensor... [ 545.920533][ T5888] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 545.942667][ T5869] usb 4-1: Max retries (5) exceeded reading string descriptor 201 [ 545.942752][ T5869] letsketch 0003:6161:4D15.000A: probe with driver letsketch failed with error -71 [ 545.959207][ T5869] usb 4-1: USB disconnect, device number 42 [ 546.003125][ T1584] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 546.166423][ T1584] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 546.166458][ T1584] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 546.168936][ T1584] usb 5-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 546.168966][ T1584] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.168985][ T1584] usb 5-1: Product: syz [ 546.169037][ T1584] usb 5-1: Manufacturer: syz [ 546.169057][ T1584] usb 5-1: SerialNumber: syz [ 546.175743][ T1584] usb 5-1: config 0 descriptor?? [ 546.452146][ T1584] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 546.503751][ T1584] usb 5-1: USB disconnect, device number 55 [ 546.579526][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 547.551630][ C0] vkms_vblank_simulate: vblank timer overrun [ 547.552217][ T9839] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1056'. [ 547.811289][ C0] vkms_vblank_simulate: vblank timer overrun [ 548.989351][ C0] vkms_vblank_simulate: vblank timer overrun [ 549.027079][ C0] vkms_vblank_simulate: vblank timer overrun [ 549.532553][ C0] vkms_vblank_simulate: vblank timer overrun [ 551.098211][ C0] vkms_vblank_simulate: vblank timer overrun [ 551.320191][ C0] vkms_vblank_simulate: vblank timer overrun [ 551.358216][ C0] vkms_vblank_simulate: vblank timer overrun [ 551.385841][ C0] vkms_vblank_simulate: vblank timer overrun [ 551.691351][ C0] vkms_vblank_simulate: vblank timer overrun [ 552.087171][ T5965] usb 7-1: USB disconnect, device number 31 [ 553.521037][ T9876] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1075'. [ 553.674803][ T5805] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 553.836789][ T5805] usb 5-1: Using ep0 maxpacket: 8 [ 553.840566][ T5805] usb 5-1: unable to get BOS descriptor or descriptor too short [ 553.842321][ T5805] usb 5-1: config 17 has an invalid interface number: 8 but max is 1 [ 553.842345][ T5805] usb 5-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 553.842366][ T5805] usb 5-1: config 17 has no interface number 0 [ 553.842658][ T5805] usb 5-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 553.842680][ T5805] usb 5-1: config 17 interface 8 has no altsetting 0 [ 553.901956][ T5805] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 553.901975][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.901985][ T5805] usb 5-1: Product: syz [ 553.901992][ T5805] usb 5-1: Manufacturer: syz [ 553.901999][ T5805] usb 5-1: SerialNumber: syz [ 554.016804][ T5888] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 554.181193][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 554.181327][ T5888] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 554.181351][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.224799][ T5888] usb 4-1: config 0 descriptor?? [ 554.250367][ T37] audit: type=1326 audit(6055654473.088:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9884 comm="syz.2.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671ac3f749 code=0x7fc00000 [ 555.592569][ T5888] usb 4-1: string descriptor 0 read error: -71 [ 555.610319][ T5805] usb 5-1: selecting invalid altsetting 0 [ 555.630216][ T5888] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 555.630314][ T5888] letsketch 0003:6161:4D15.000B: probe with driver letsketch failed with error -32 [ 555.675537][ T5888] usb 4-1: USB disconnect, device number 43 [ 555.752890][ T5805] usb 5-1: USB disconnect, device number 56 [ 556.789567][ T9874] udevd[9874]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 557.285242][ T9913] netlink: 184 bytes leftover after parsing attributes in process `syz.6.1087'. [ 560.436798][ T9928] binder: 9922:9928 ioctl c0306201 0 returned -14 [ 560.437220][ T9928] binder: 9922:9928 ioctl c00c6211 0 returned -14 [ 560.450444][ T9913] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 561.240649][ T5805] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 561.392697][ T9936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1094'. [ 561.474878][ T5805] usb 5-1: device descriptor read/64, error -71 [ 561.763635][ T9944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1095'. [ 562.013430][ T9947] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1099'. [ 562.180428][ T5888] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 562.340373][ T5888] usb 7-1: Using ep0 maxpacket: 8 [ 562.345271][ T5888] usb 7-1: unable to get BOS descriptor or descriptor too short [ 562.347339][ T5888] usb 7-1: config 17 has an invalid interface number: 8 but max is 1 [ 562.347364][ T5888] usb 7-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 562.347384][ T5888] usb 7-1: config 17 has no interface number 0 [ 562.347647][ T5888] usb 7-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 562.347670][ T5888] usb 7-1: config 17 interface 8 has no altsetting 0 [ 562.404994][ T5888] usb 7-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 562.405023][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.405042][ T5888] usb 7-1: Product: syz [ 562.405055][ T5888] usb 7-1: Manufacturer: syz [ 562.405068][ T5888] usb 7-1: SerialNumber: syz [ 563.987907][ T9983] binder: 9982:9983 ioctl c0306201 0 returned -14 [ 563.988336][ T9983] binder: 9982:9983 ioctl c00c6211 0 returned -14 [ 564.252904][ T5965] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 564.354978][ T5888] usb 7-1: selecting invalid altsetting 0 [ 564.376970][ T5888] usb 7-1: USB disconnect, device number 32 [ 564.391916][ T5965] usb 4-1: device descriptor read/64, error -71 [ 564.415713][ T9874] udevd[9874]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 565.382899][ T5869] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 565.449579][ T5965] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 565.545785][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 565.547895][ T5869] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1023 [ 565.547919][ T5869] usb 3-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 565.547934][ T5869] usb 3-1: config 1 interface 0 has no altsetting 0 [ 565.550214][ T5869] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 565.550232][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.550243][ T5869] usb 3-1: Product: 顀鳳嘄î†ç©¢å”œãª¾î¿æœ¤â¼ê¡µî±ªæ²±ç—溹뮴袣J抧竧▆壿횑ì€ë¾¯ãŒ–㻽å✵魨ଗ⯘湡輓鵤⢗䌈﷮ᓹ㗒枖ィ펀íŸë„žîºì°ç¢‹å²…Ꚙî䀻䉩 [ 565.550255][ T5869] usb 3-1: Manufacturer: Ñ™ [ 565.550262][ T5869] usb 3-1: SerialNumber: syz [ 565.567977][ T9993] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 565.568228][ T9993] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 565.588533][ T5965] usb 4-1: device descriptor read/64, error -71 [ 565.706684][ T5965] usb usb4-port1: attempt power cycle [ 565.787056][T10005] 9pnet_fd: Insufficient options for proto=fd [ 565.790003][ T5869] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 566.069340][ T5965] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 566.081094][ T1228] usb 3-1: USB disconnect, device number 51 [ 566.095158][ T5965] usb 4-1: device descriptor read/8, error -71 [ 566.369125][ T5965] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 566.402716][ T5965] usb 4-1: device descriptor read/8, error -71 [ 566.572764][ T5965] usb usb4-port1: unable to enumerate USB device [ 567.320039][ T5965] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 568.227735][ T5965] usb 3-1: Using ep0 maxpacket: 32 [ 568.229933][ T5965] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 568.229962][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.263193][ T5965] usb 3-1: config 0 descriptor?? [ 568.280456][T10026] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1126'. [ 568.280480][T10026] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1126'. [ 568.280495][T10026] netlink: 'syz.5.1126': attribute type 6 has an invalid length. [ 568.280512][T10026] netlink: 'syz.5.1126': attribute type 5 has an invalid length. [ 568.280524][T10026] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1126'. [ 568.333334][ T5965] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 568.579706][T10030] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 568.601622][ T5888] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 568.762165][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 568.768288][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.768309][ T5888] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 568.771296][ T5888] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 568.771322][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.771333][ T5888] usb 4-1: Product: syz [ 568.771341][ T5888] usb 4-1: Manufacturer: syz [ 568.771349][ T5888] usb 4-1: SerialNumber: syz [ 569.052333][ T5888] usb 4-1: config 0 descriptor?? [ 569.678515][ T5965] gspca_vc032x: reg_w err -110 [ 569.678561][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.678571][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.678592][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.678600][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.678636][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.678784][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.678819][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.678854][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.678888][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.678923][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.678957][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.678991][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.679034][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.679079][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.679114][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.679148][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.679182][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.679216][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.679250][ T5965] gspca_vc032x: Unknown sensor... [ 569.679520][ T5965] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 569.791437][ T37] audit: type=1400 audit(6055654487.407:20): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="y" requested=w pid=10025 comm="syz.3.1127" saddr=fc01::25:300:0:0 daddr=ff02::1 dest=3618 netif=wpan0 [ 570.624433][T10036] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1124'. [ 571.745277][T10047] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1131'. [ 571.771297][ T5888] usb 4-1: USB disconnect, device number 48 [ 572.208457][T10050] FAULT_INJECTION: forcing a failure. [ 572.208457][T10050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.208491][T10050] CPU: 0 UID: 0 PID: 10050 Comm: syz.3.1133 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 572.208513][T10050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 572.208524][T10050] Call Trace: [ 572.208530][T10050] [ 572.208539][T10050] dump_stack_lvl+0x189/0x250 [ 572.208576][T10050] ? __pfx____ratelimit+0x10/0x10 [ 572.208602][T10050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 572.208627][T10050] ? __pfx__printk+0x10/0x10 [ 572.208664][T10050] should_fail_ex+0x46c/0x600 [ 572.208694][T10050] _copy_to_user+0x31/0xb0 [ 572.208716][T10050] simple_read_from_buffer+0xe1/0x170 [ 572.208746][T10050] proc_fail_nth_read+0x1b6/0x220 [ 572.208800][T10050] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 572.208821][T10050] ? rw_verify_area+0x2ac/0x4e0 [ 572.208843][T10050] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 572.208872][T10050] vfs_read+0x206/0xa30 [ 572.208903][T10050] ? __pfx_vfs_read+0x10/0x10 [ 572.208920][T10050] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 572.209015][T10050] ? mutex_lock_nested+0x154/0x1d0 [ 572.209034][T10050] ? fdget_pos+0x253/0x320 [ 572.209067][T10050] ksys_read+0x14b/0x260 [ 572.209090][T10050] ? __pfx_ksys_read+0x10/0x10 [ 572.209114][T10050] ? do_syscall_64+0xbe/0xfa0 [ 572.209142][T10050] do_syscall_64+0xfa/0xfa0 [ 572.209164][T10050] ? lockdep_hardirqs_on+0x9c/0x150 [ 572.209187][T10050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.209206][T10050] ? clear_bhb_loop+0x60/0xb0 [ 572.209228][T10050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.209245][T10050] RIP: 0033:0x7fbe4b76e15c [ 572.209262][T10050] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 572.209276][T10050] RSP: 002b:00007fbe499ad030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 572.209295][T10050] RAX: ffffffffffffffda RBX: 00007fbe4b9c6090 RCX: 00007fbe4b76e15c [ 572.209307][T10050] RDX: 000000000000000f RSI: 00007fbe499ad0a0 RDI: 0000000000000003 [ 572.209319][T10050] RBP: 00007fbe499ad090 R08: 0000000000000000 R09: 0000000000000000 [ 572.209330][T10050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.209341][T10050] R13: 00007fbe4b9c6128 R14: 00007fbe4b9c6090 R15: 00007ffd147de5f8 [ 572.209374][T10050] [ 573.503145][ T5965] usb 3-1: USB disconnect, device number 52 [ 574.330917][T10061] binder: 10060:10061 ioctl c00c6211 0 returned -14 [ 574.595967][ T5888] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 574.734967][ T5888] usb 3-1: device descriptor read/64, error -71 [ 574.941041][T10078] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 574.991750][ T5888] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 575.226346][ T5888] usb 3-1: device descriptor read/64, error -71 [ 575.344161][ T5888] usb usb3-port1: attempt power cycle [ 575.707121][ T5888] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 575.729881][ T5888] usb 3-1: device descriptor read/8, error -71 [ 575.988456][ T5888] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 576.007232][ T5888] usb 3-1: device descriptor read/8, error -71 [ 576.124201][ T5888] usb usb3-port1: unable to enumerate USB device [ 576.525312][T10095] FAULT_INJECTION: forcing a failure. [ 576.525312][T10095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.525346][T10095] CPU: 1 UID: 0 PID: 10095 Comm: syz.3.1147 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 576.525370][T10095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 576.525380][T10095] Call Trace: [ 576.525388][T10095] [ 576.525396][T10095] dump_stack_lvl+0x189/0x250 [ 576.525426][T10095] ? __pfx____ratelimit+0x10/0x10 [ 576.525451][T10095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 576.525476][T10095] ? __pfx__printk+0x10/0x10 [ 576.525498][T10095] ? __might_fault+0xb0/0x130 [ 576.525533][T10095] should_fail_ex+0x46c/0x600 [ 576.525563][T10095] _copy_from_user+0x2d/0xb0 [ 576.525592][T10095] __sys_bpf+0x1e3/0x860 [ 576.525654][T10095] ? __pfx___sys_bpf+0x10/0x10 [ 576.525673][T10095] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 576.525712][T10095] ? ksys_write+0x230/0x260 [ 576.525737][T10095] ? __pfx_ksys_write+0x10/0x10 [ 576.525764][T10095] __x64_sys_bpf+0x7c/0x90 [ 576.525787][T10095] do_syscall_64+0xfa/0xfa0 [ 576.525810][T10095] ? lockdep_hardirqs_on+0x9c/0x150 [ 576.525833][T10095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.525850][T10095] ? clear_bhb_loop+0x60/0xb0 [ 576.525872][T10095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.525889][T10095] RIP: 0033:0x7fbe4b76f749 [ 576.525905][T10095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.525920][T10095] RSP: 002b:00007fbe499ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 576.525939][T10095] RAX: ffffffffffffffda RBX: 00007fbe4b9c5fa0 RCX: 00007fbe4b76f749 [ 576.525952][T10095] RDX: 0000000000000010 RSI: 0000200000000500 RDI: 000000000000000f [ 576.525963][T10095] RBP: 00007fbe499ce090 R08: 0000000000000000 R09: 0000000000000000 [ 576.525974][T10095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.525985][T10095] R13: 00007fbe4b9c6038 R14: 00007fbe4b9c5fa0 R15: 00007ffd147de5f8 [ 576.526017][T10095] [ 578.256695][T10110] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1150'. [ 579.783190][T10127] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 581.449462][T10137] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 581.449489][T10137] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 581.451828][T10137] vhci_hcd vhci_hcd.0: Device attached [ 581.457174][T10138] vhci_hcd: connection closed [ 581.481190][ T68] vhci_hcd: stop threads [ 581.481204][ T68] vhci_hcd: release socket [ 581.481225][ T68] vhci_hcd: disconnect device [ 582.843261][T10145] binder: 10144:10145 ioctl c0306201 0 returned -14 [ 582.843563][T10145] binder: 10144:10145 ioctl c00c6211 0 returned -14 [ 583.128688][ T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 583.261366][ T9] usb 4-1: device descriptor read/64, error -71 [ 583.332776][ T37] audit: type=1800 audit(6055654500.276:21): pid=10150 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.1165" name="nullb0" dev="tmpfs" ino=1064 res=0 errno=0 [ 583.528485][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 583.667405][ T9] usb 4-1: device descriptor read/64, error -71 [ 583.694358][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 583.700239][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 583.703033][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 583.704310][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 583.705129][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 583.786840][ T9] usb usb4-port1: attempt power cycle [ 584.148196][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 584.171550][ T9] usb 4-1: device descriptor read/8, error -71 [ 584.426012][ T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 584.456684][ T9] usb 4-1: device descriptor read/8, error -71 [ 585.420250][ T9] usb usb4-port1: unable to enumerate USB device [ 585.740253][ T5917] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 585.904798][ T5917] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 585.904826][ T5917] usb 3-1: config 7 has no interface number 0 [ 585.907675][ T5917] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 585.907705][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.907725][ T5917] usb 3-1: Product: syz [ 585.907738][ T5917] usb 3-1: Manufacturer: syz [ 585.907752][ T5917] usb 3-1: SerialNumber: syz [ 586.039471][ T5814] Bluetooth: hci5: command tx timeout [ 586.128211][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.349925][ T5917] as10x_usb: device has been detected [ 586.350905][ T5917] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 586.403173][ T5917] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 586.437172][ T5917] as10x_usb: error during firmware upload part1 [ 586.437881][ T5917] Registered device Elgato EyeTV DTT Deluxe [ 586.453960][ T5917] usb 3-1: USB disconnect, device number 57 [ 586.491160][ T5917] Unregistered device Elgato EyeTV DTT Deluxe [ 586.494107][ T5917] as10x_usb: device has been disconnected [ 586.502075][ T9] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 586.598893][ C0] vkms_vblank_simulate: vblank timer overrun [ 586.654578][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.676458][T10200] FAULT_INJECTION: forcing a failure. [ 586.676458][T10200] name failslab, interval 1, probability 0, space 0, times 0 [ 586.676489][T10200] CPU: 0 UID: 0 PID: 10200 Comm: syz.3.1182 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 586.676511][T10200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 586.676521][T10200] Call Trace: [ 586.676529][T10200] [ 586.676537][T10200] dump_stack_lvl+0x189/0x250 [ 586.676568][T10200] ? __pfx____ratelimit+0x10/0x10 [ 586.676594][T10200] ? __pfx_dump_stack_lvl+0x10/0x10 [ 586.676619][T10200] ? __pfx__printk+0x10/0x10 [ 586.676647][T10200] ? __pfx___might_resched+0x10/0x10 [ 586.676666][T10200] ? fs_reclaim_acquire+0x7d/0x100 [ 586.676694][T10200] should_fail_ex+0x46c/0x600 [ 586.676723][T10200] ? __alloc_skb+0x112/0x2d0 [ 586.676742][T10200] should_failslab+0xa8/0x100 [ 586.676767][T10200] ? __alloc_skb+0x112/0x2d0 [ 586.676783][T10200] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 586.676815][T10200] __alloc_skb+0x112/0x2d0 [ 586.676838][T10200] alloc_skb_with_frags+0xca/0x890 [ 586.677002][T10200] sock_alloc_send_pskb+0x859/0x990 [ 586.677046][T10200] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 586.677069][T10200] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 586.677117][T10200] ? __might_fault+0xb0/0x130 [ 586.677145][T10200] hci_sock_sendmsg+0x207/0xef0 [ 586.677255][T10200] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 586.677285][T10200] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 586.677319][T10200] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 586.677345][T10200] __sock_sendmsg+0x21c/0x270 [ 586.677398][T10200] sock_write_iter+0x27f/0x370 [ 586.677425][T10200] ? __pfx_sock_write_iter+0x10/0x10 [ 586.677474][T10200] vfs_write+0x5d5/0xb40 [ 586.677501][T10200] ? __pfx_sock_write_iter+0x10/0x10 [ 586.677525][T10200] ? __pfx_vfs_write+0x10/0x10 [ 586.677558][T10200] ? __fget_files+0x2a/0x420 [ 586.677592][T10200] ksys_write+0x14b/0x260 [ 586.677616][T10200] ? __pfx_ksys_write+0x10/0x10 [ 586.677641][T10200] ? do_syscall_64+0xbe/0xfa0 [ 586.677670][T10200] do_syscall_64+0xfa/0xfa0 [ 586.677691][T10200] ? lockdep_hardirqs_on+0x9c/0x150 [ 586.677715][T10200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.677733][T10200] ? clear_bhb_loop+0x60/0xb0 [ 586.677756][T10200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.677773][T10200] RIP: 0033:0x7fbe4b76f749 [ 586.677789][T10200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.677804][T10200] RSP: 002b:00007fbe499ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 586.677823][T10200] RAX: ffffffffffffffda RBX: 00007fbe4b9c5fa0 RCX: 00007fbe4b76f749 [ 586.677837][T10200] RDX: 000000000000000d RSI: 0000200000000000 RDI: 000000000000000d [ 586.677848][T10200] RBP: 00007fbe499ce090 R08: 0000000000000000 R09: 0000000000000000 [ 586.677859][T10200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.677871][T10200] R13: 00007fbe4b9c6038 R14: 00007fbe4b9c5fa0 R15: 00007ffd147de5f8 [ 586.677903][T10200] [ 586.708197][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 586.708247][ T9] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 586.708270][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.721389][ T9] usb 7-1: config 0 descriptor?? [ 587.167454][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 587.167581][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 587.218510][ T9] usb 7-1: USB disconnect, device number 33 [ 587.232635][T10156] virt_wifi0 speed is unknown, defaulting to 1000 [ 587.290241][ C0] vkms_vblank_simulate: vblank timer overrun [ 587.310459][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 587.310531][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 587.494930][T10207] FAULT_INJECTION: forcing a failure. [ 587.494930][T10207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.494963][T10207] CPU: 0 UID: 0 PID: 10207 Comm: syz.3.1185 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 587.494984][T10207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 587.494995][T10207] Call Trace: [ 587.495002][T10207] [ 587.495010][T10207] dump_stack_lvl+0x189/0x250 [ 587.495041][T10207] ? __pfx____ratelimit+0x10/0x10 [ 587.495067][T10207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 587.495092][T10207] ? __pfx__printk+0x10/0x10 [ 587.495112][T10207] ? __might_fault+0xb0/0x130 [ 587.495147][T10207] should_fail_ex+0x46c/0x600 [ 587.495178][T10207] _copy_from_user+0x2d/0xb0 [ 587.495199][T10207] __sys_bind+0x19f/0x3e0 [ 587.495221][T10207] ? __pfx___sys_bind+0x10/0x10 [ 587.495252][T10207] ? __pfx_ksys_write+0x10/0x10 [ 587.495286][T10207] __x64_sys_bind+0x7a/0x90 [ 587.495305][T10207] do_syscall_64+0xfa/0xfa0 [ 587.495328][T10207] ? lockdep_hardirqs_on+0x9c/0x150 [ 587.495352][T10207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.495369][T10207] ? clear_bhb_loop+0x60/0xb0 [ 587.495391][T10207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.495408][T10207] RIP: 0033:0x7fbe4b76f749 [ 587.495424][T10207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.495440][T10207] RSP: 002b:00007fbe499ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 587.495459][T10207] RAX: ffffffffffffffda RBX: 00007fbe4b9c5fa0 RCX: 00007fbe4b76f749 [ 587.495472][T10207] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 0000000000000003 [ 587.495484][T10207] RBP: 00007fbe499ce090 R08: 0000000000000000 R09: 0000000000000000 [ 587.495495][T10207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.495506][T10207] R13: 00007fbe4b9c6038 R14: 00007fbe4b9c5fa0 R15: 00007ffd147de5f8 [ 587.495538][T10207] [ 587.958381][ C0] vkms_vblank_simulate: vblank timer overrun [ 588.242805][ T5814] Bluetooth: hci5: command tx timeout [ 588.542724][ C0] vkms_vblank_simulate: vblank timer overrun [ 588.799560][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.107822][T10222] overlayfs: failed to resolve './file0': -2 [ 589.130602][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.381760][ C0] vkms_vblank_simulate: vblank timer overrun [ 589.847843][ C0] vkms_vblank_simulate: vblank timer overrun [ 590.922595][ T5814] Bluetooth: hci5: command tx timeout [ 590.964076][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.086341][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.408760][T10156] chnl_net:caif_netlink_parms(): no params data found [ 591.455421][ T12] bridge_slave_1: left allmulticast mode [ 591.455448][ T12] bridge_slave_1: left promiscuous mode [ 591.455706][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.600268][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.641871][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.726828][ C0] vkms_vblank_simulate: vblank timer overrun [ 592.013930][ T12] bridge_slave_0: left allmulticast mode [ 592.013965][ T12] bridge_slave_0: left promiscuous mode [ 592.014218][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.776108][T10268] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 593.141844][ T5814] Bluetooth: hci5: command tx timeout [ 594.598503][ T1228] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 594.790777][ T1228] usb 4-1: Using ep0 maxpacket: 8 [ 595.129162][ T1228] usb 4-1: unable to get BOS descriptor or descriptor too short [ 595.157036][ T1228] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 595.159233][ T1228] usb 4-1: can't read configurations, error -71 [ 596.364697][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.425896][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.450826][ T12] bond0 (unregistering): Released all slaves [ 596.510693][ T1228] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 596.709275][ T1228] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 596.709325][ T1228] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 596.709347][ T1228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.776676][ T1228] usb 4-1: config 0 descriptor?? [ 597.242914][ T1228] usbhid 4-1:0.0: can't add hid device: -71 [ 597.243042][ T1228] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 597.296474][ T1228] usb 4-1: USB disconnect, device number 55 [ 597.593072][ T12] bond1 (unregistering): Released all slaves [ 598.134777][ T5805] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 598.286137][T10326] FAULT_INJECTION: forcing a failure. [ 598.286137][T10326] name failslab, interval 1, probability 0, space 0, times 0 [ 598.286167][T10326] CPU: 1 UID: 0 PID: 10326 Comm: syz.3.1222 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 598.286186][T10326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 598.286197][T10326] Call Trace: [ 598.286203][T10326] [ 598.286211][T10326] dump_stack_lvl+0x189/0x250 [ 598.286240][T10326] ? __pfx____ratelimit+0x10/0x10 [ 598.286264][T10326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 598.286285][T10326] ? __pfx__printk+0x10/0x10 [ 598.286312][T10326] ? __pfx___might_resched+0x10/0x10 [ 598.286331][T10326] ? fs_reclaim_acquire+0x7d/0x100 [ 598.286359][T10326] should_fail_ex+0x46c/0x600 [ 598.286387][T10326] ? getname_flags+0xb8/0x540 [ 598.286409][T10326] should_failslab+0xa8/0x100 [ 598.286434][T10326] ? getname_flags+0xb8/0x540 [ 598.286460][T10326] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 598.286484][T10326] ? __pfx_vfs_write+0x10/0x10 [ 598.286508][T10326] getname_flags+0xb8/0x540 [ 598.286536][T10326] do_sys_openat2+0xbc/0x1c0 [ 598.286557][T10326] ? __pfx_do_sys_openat2+0x10/0x10 [ 598.286579][T10326] ? ksys_write+0x230/0x260 [ 598.286602][T10326] ? __pfx_ksys_write+0x10/0x10 [ 598.286625][T10326] __x64_sys_openat+0x138/0x170 [ 598.286646][T10326] do_syscall_64+0xfa/0xfa0 [ 598.286668][T10326] ? lockdep_hardirqs_on+0x9c/0x150 [ 598.286689][T10326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.286707][T10326] ? clear_bhb_loop+0x60/0xb0 [ 598.286728][T10326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.286745][T10326] RIP: 0033:0x7fbe4b76f749 [ 598.286761][T10326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.286777][T10326] RSP: 002b:00007fbe499ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 598.286796][T10326] RAX: ffffffffffffffda RBX: 00007fbe4b9c5fa0 RCX: 00007fbe4b76f749 [ 598.286808][T10326] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 598.286819][T10326] RBP: 00007fbe499ce090 R08: 0000000000000000 R09: 0000000000000000 [ 598.286829][T10326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.286839][T10326] R13: 00007fbe4b9c6038 R14: 00007fbe4b9c5fa0 R15: 00007ffd147de5f8 [ 598.286868][T10326] [ 598.348817][ T5805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 598.348849][ T5805] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 598.381220][ T5805] usb 3-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 598.381261][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.381334][ T5805] usb 3-1: Product: syz [ 598.381348][ T5805] usb 3-1: Manufacturer: syz [ 598.381362][ T5805] usb 3-1: SerialNumber: syz [ 598.686168][ T5805] usb 3-1: config 0 descriptor?? [ 598.948752][T10331] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 599.234883][ T5805] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 599.331909][ T5805] usb 3-1: USB disconnect, device number 58 [ 599.716293][ T9869] udevd[9869]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 599.825509][T10335] sit0: entered promiscuous mode [ 599.840751][T10335] netlink: 'syz.3.1226': attribute type 1 has an invalid length. [ 599.840775][T10335] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1226'. [ 599.945961][T10156] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.946186][T10156] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.946416][T10156] bridge_slave_0: entered allmulticast mode [ 599.949471][T10156] bridge_slave_0: entered promiscuous mode [ 599.984668][T10156] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.984894][T10156] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.986350][T10156] bridge_slave_1: entered allmulticast mode [ 599.991017][T10156] bridge_slave_1: entered promiscuous mode [ 600.243660][T10336] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 600.247398][T10336] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 600.298253][ C0] vkms_vblank_simulate: vblank timer overrun [ 600.423350][T10336] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 600.423472][T10336] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 600.489257][T10359] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1231'. [ 600.516159][T10336] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 600.516298][T10336] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 600.530037][T10359] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1231'. [ 600.621993][T10336] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 600.937826][T10371] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 600.988784][ T5805] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 601.063542][T10156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.164457][ T5805] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 601.164488][ T5805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.164508][ T5805] usb 7-1: Product: syz [ 601.164523][ T5805] usb 7-1: Manufacturer: syz [ 601.164537][ T5805] usb 7-1: SerialNumber: syz [ 601.188018][ T5805] r8152-cfgselector 7-1: Unknown version 0x0000 [ 601.188044][ T5805] r8152-cfgselector 7-1: config 0 descriptor?? [ 601.244090][ T12] hsr_slave_0: left promiscuous mode [ 601.288035][ T12] hsr_slave_1: left promiscuous mode [ 601.290232][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.290258][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.362695][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.362723][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.597201][ C0] vkms_vblank_simulate: vblank timer overrun [ 601.970408][ T12] veth1_macvtap: left promiscuous mode [ 602.009819][ T12] veth0_macvtap: left promiscuous mode [ 602.010079][ T12] veth1_vlan: left promiscuous mode [ 602.012680][ T12] veth0_vlan: left promiscuous mode [ 602.184656][ T5814] Bluetooth: hci1: command 0x0406 tx timeout [ 602.600976][ T5814] Bluetooth: hci0: command 0x0406 tx timeout [ 602.686679][ T5814] Bluetooth: hci5: command 0x0c1a tx timeout [ 603.167324][ T1228] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 603.359763][ T1228] usb 4-1: Using ep0 maxpacket: 8 [ 603.363028][ T1228] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.363053][ T1228] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 603.367530][ T1228] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 603.367558][ T1228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.367578][ T1228] usb 4-1: Product: syz [ 603.367593][ T1228] usb 4-1: Manufacturer: syz [ 603.367607][ T1228] usb 4-1: SerialNumber: syz [ 603.428527][ T1228] usb 4-1: config 0 descriptor?? [ 603.527408][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.590592][ T1584] r8152-cfgselector 7-1: USB disconnect, device number 34 [ 603.897399][ T37] audit: type=1400 audit(6055654519.509:22): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="y" requested=w pid=10393 comm="syz.3.1241" saddr=fc01::25:300:0:0 daddr=ff02::1 dest=3618 netif=wpan0 [ 604.706840][ T5814] Bluetooth: hci1: command 0x0406 tx timeout [ 604.834522][ T5814] Bluetooth: hci0: command 0x0406 tx timeout [ 604.919908][ T5814] Bluetooth: hci5: command 0x0c1a tx timeout [ 605.240270][ T5917] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 605.443301][ T5917] usb 7-1: Using ep0 maxpacket: 8 [ 605.446041][ T5917] usb 7-1: unable to get BOS descriptor or descriptor too short [ 605.447754][ T5917] usb 7-1: config 17 has an invalid interface number: 8 but max is 1 [ 605.447778][ T5917] usb 7-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 605.447799][ T5917] usb 7-1: config 17 has no interface number 0 [ 605.447847][ T5917] usb 7-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 605.447870][ T5917] usb 7-1: config 17 interface 8 has no altsetting 0 [ 605.451465][ T5917] usb 7-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 605.451494][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.451513][ T5917] usb 7-1: Product: syz [ 605.451527][ T5917] usb 7-1: Manufacturer: syz [ 605.451541][ T5917] usb 7-1: SerialNumber: syz [ 606.165169][ T1228] usb 4-1: USB disconnect, device number 56 [ 606.674330][ T1228] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 606.762927][ T5917] usb 7-1: selecting invalid altsetting 0 [ 606.785660][ T5917] usb 7-1: USB disconnect, device number 35 [ 606.853207][ T1228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 606.853242][ T1228] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 606.857261][ T1228] usb 4-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 606.857289][ T1228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.857308][ T1228] usb 4-1: Product: syz [ 606.857323][ T1228] usb 4-1: Manufacturer: syz [ 606.857337][ T1228] usb 4-1: SerialNumber: syz [ 606.863343][ T1228] usb 4-1: config 0 descriptor?? [ 607.135197][ T5814] Bluetooth: hci5: command 0x0c1a tx timeout [ 607.160198][ T1228] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 607.197560][ T1228] usb 4-1: USB disconnect, device number 57 [ 607.254404][ T9869] udevd[9869]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 607.402388][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.666250][ T12] team0 (unregistering): Port device team_slave_1 removed [ 607.759979][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.836416][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.886698][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.965588][ T12] team0 (unregistering): Port device team_slave_0 removed [ 608.212090][ C0] vkms_vblank_simulate: vblank timer overrun [ 608.212207][ T1228] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 608.284779][ C0] vkms_vblank_simulate: vblank timer overrun [ 608.414042][ T1228] usb 4-1: Using ep0 maxpacket: 8 [ 608.419075][ T1228] usb 4-1: unable to get BOS descriptor or descriptor too short [ 608.420389][ T1228] usb 4-1: config 17 has an invalid interface number: 8 but max is 1 [ 608.420414][ T1228] usb 4-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 608.420434][ T1228] usb 4-1: config 17 has no interface number 0 [ 608.420479][ T1228] usb 4-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 608.420502][ T1228] usb 4-1: config 17 interface 8 has no altsetting 0 [ 608.422855][ T1228] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 608.422881][ T1228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.422901][ T1228] usb 4-1: Product: syz [ 608.422966][ T1228] usb 4-1: Manufacturer: syz [ 608.422981][ T1228] usb 4-1: SerialNumber: syz [ 609.676632][ T1228] usb 4-1: selecting invalid altsetting 0 [ 609.717799][ T1228] usb 4-1: USB disconnect, device number 58 [ 609.780798][ T9874] udevd[9874]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 610.058457][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.165968][ T5917] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 610.244775][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.287289][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.305072][ T5917] usb 7-1: device descriptor read/64, error -71 [ 610.396990][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.524574][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.572893][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.575230][ T5917] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 610.727712][ T5917] usb 7-1: device descriptor read/64, error -71 [ 610.839653][ T5917] usb usb7-port1: attempt power cycle [ 611.146915][ T1584] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 611.221306][ T5917] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 611.237842][ T5917] usb 7-1: device descriptor read/8, error -71 [ 611.408542][ T1584] usb 4-1: Using ep0 maxpacket: 16 [ 611.438841][ T1584] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.438944][ T1584] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 611.439007][ T1584] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.491045][ T5917] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 611.515655][ T5917] usb 7-1: device descriptor read/8, error -71 [ 611.561820][ T1584] usb 4-1: config 0 descriptor?? [ 611.638339][ T5917] usb usb7-port1: unable to enumerate USB device [ 612.053903][T10439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.060202][T10439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.485079][ T1584] usbhid 4-1:0.0: can't add hid device: -71 [ 615.485202][ T1584] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 615.512601][ T1584] usb 4-1: USB disconnect, device number 59 [ 615.538920][T10444] FAULT_INJECTION: forcing a failure. [ 615.538920][T10444] name failslab, interval 1, probability 0, space 0, times 0 [ 615.538952][T10444] CPU: 0 UID: 0 PID: 10444 Comm: syz.3.1258 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 615.538974][T10444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 615.538986][T10444] Call Trace: [ 615.538994][T10444] [ 615.539002][T10444] dump_stack_lvl+0x189/0x250 [ 615.539035][T10444] ? __pfx____ratelimit+0x10/0x10 [ 615.539059][T10444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 615.539085][T10444] ? __pfx__printk+0x10/0x10 [ 615.539112][T10444] ? __pfx___might_resched+0x10/0x10 [ 615.539131][T10444] ? fs_reclaim_acquire+0x7d/0x100 [ 615.539160][T10444] should_fail_ex+0x46c/0x600 [ 615.539189][T10444] should_failslab+0xa8/0x100 [ 615.539215][T10444] __kmalloc_noprof+0xcc/0x7d0 [ 615.539238][T10444] ? tomoyo_encode+0x28b/0x550 [ 615.539266][T10444] tomoyo_encode+0x28b/0x550 [ 615.539291][T10444] tomoyo_realpath_from_path+0x58d/0x5d0 [ 615.539322][T10444] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 615.539349][T10444] tomoyo_path_number_perm+0x1e8/0x5a0 [ 615.539378][T10444] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 615.539410][T10444] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 615.539528][T10444] ? lockdep_hardirqs_on+0x9c/0x150 [ 615.539583][T10444] ? __fget_files+0x2a/0x420 [ 615.539611][T10444] ? __fget_files+0x3a6/0x420 [ 615.539632][T10444] ? __fget_files+0x2a/0x420 [ 615.539671][T10444] security_file_ioctl+0xcb/0x2d0 [ 615.539698][T10444] __se_sys_ioctl+0x47/0x170 [ 615.539720][T10444] do_syscall_64+0xfa/0xfa0 [ 615.539741][T10444] ? lockdep_hardirqs_on+0x9c/0x150 [ 615.539762][T10444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.539779][T10444] ? clear_bhb_loop+0x60/0xb0 [ 615.539801][T10444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.539819][T10444] RIP: 0033:0x7fbe4b76f749 [ 615.539837][T10444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.539852][T10444] RSP: 002b:00007fbe499ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 615.539872][T10444] RAX: ffffffffffffffda RBX: 00007fbe4b9c5fa0 RCX: 00007fbe4b76f749 [ 615.539885][T10444] RDX: 0000000000000000 RSI: 0000000000003b83 RDI: 0000000000000003 [ 615.539900][T10444] RBP: 00007fbe499ce090 R08: 0000000000000000 R09: 0000000000000000 [ 615.539911][T10444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.539920][T10444] R13: 00007fbe4b9c6038 R14: 00007fbe4b9c5fa0 R15: 00007ffd147de5f8 [ 615.539951][T10444] [ 615.539989][T10444] ERROR: Out of memory at tomoyo_realpath_from_path. [ 616.707023][ T1584] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 616.825415][T10156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.877795][ T1584] usb 4-1: unable to get BOS descriptor or descriptor too short [ 616.879521][ T1584] usb 4-1: config 6 has an invalid interface number: 200 but max is 0 [ 616.879547][ T1584] usb 4-1: config 6 has no interface number 0 [ 616.879594][ T1584] usb 4-1: config 6 interface 200 altsetting 8 endpoint 0x1 has invalid wMaxPacketSize 0 [ 616.879618][ T1584] usb 4-1: config 6 interface 200 has no altsetting 0 [ 616.884495][ T1584] usb 4-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 616.884524][ T1584] usb 4-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 616.884545][ T1584] usb 4-1: Product: syz [ 616.884559][ T1584] usb 4-1: Manufacturer: syz [ 616.884573][ T1584] usb 4-1: SerialNumber: syz [ 617.057703][ T5805] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 617.231816][ T5805] usb 7-1: Using ep0 maxpacket: 8 [ 617.244494][ T5805] usb 7-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 617.244523][ T5805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.244541][ T5805] usb 7-1: Product: syz [ 617.244554][ T5805] usb 7-1: Manufacturer: syz [ 617.244566][ T5805] usb 7-1: SerialNumber: syz [ 617.273008][ T1584] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 617.273506][ T1584] dvb-usb: bulk message failed: -8 (3/0) [ 617.284796][ T5805] usb 7-1: config 0 descriptor?? [ 617.291573][ T5805] option 7-1:0.0: GSM modem (1-port) converter detected [ 617.349092][ T1584] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 617.351335][ T1584] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 617.351388][ T1584] usb 4-1: media controller created [ 617.404721][ T1584] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 617.457755][ T1584] dvb-usb: bulk message failed: -8 (6/0) [ 617.458159][ T1584] dvb-usb: bulk message failed: -8 (6/0) [ 617.458297][ T1584] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 617.513112][ T5805] usb 7-1: USB disconnect, device number 40 [ 617.527446][ T5805] option 7-1:0.0: device disconnected [ 617.534555][ T1584] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 617.548575][ T1584] dvb-usb: schedule remote query interval to 150 msecs. [ 617.548601][ T1584] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 617.572924][ T1584] usb 4-1: USB disconnect, device number 60 [ 617.796530][ T1584] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 618.000015][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 618.021212][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 618.022632][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 618.063032][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 618.065751][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 618.372003][ T1584] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 618.414680][ T5805] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 618.536417][ T1584] usb 4-1: config index 0 descriptor too short (expected 215, got 45) [ 618.559699][ T1584] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 618.559732][ T1584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.559754][ T1584] usb 4-1: Product: syz [ 618.559769][ T1584] usb 4-1: Manufacturer: syz [ 618.559783][ T1584] usb 4-1: SerialNumber: syz [ 618.581278][T10476] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1267'. [ 618.588518][ T5805] usb 7-1: Using ep0 maxpacket: 32 [ 618.591332][ T5805] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 618.591356][ T5805] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.591375][ T5805] usb 7-1: config 0 has no interface number 0 [ 618.593504][ T5805] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 618.593527][ T5805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.593543][ T5805] usb 7-1: Product: syz [ 618.593556][ T5805] usb 7-1: Manufacturer: syz [ 618.593569][ T5805] usb 7-1: SerialNumber: syz [ 618.599153][ T5805] usb 7-1: config 0 descriptor?? [ 618.666406][T10156] team0: Port device team_slave_0 added [ 618.719157][T10156] team0: Port device team_slave_1 added [ 618.858863][ T5805] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 618.998088][ T5805] snd-usb-audio 7-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 619.065776][ T5805] usb 7-1: USB disconnect, device number 41 [ 619.110429][ T9873] udevd[9873]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 619.175215][ T1584] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 619.175276][ T1584] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 619.655245][T10156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.655264][T10156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.655281][T10156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.662326][T10465] virt_wifi0 speed is unknown, defaulting to 1000 [ 619.790068][T10156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.790085][T10156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.790119][T10156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.238833][ T5814] Bluetooth: hci3: command tx timeout [ 620.489568][ T1584] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 620.585637][T10156] hsr_slave_0: entered promiscuous mode [ 620.606394][T10156] hsr_slave_1: entered promiscuous mode [ 620.607411][T10156] debugfs: 'hsr0' already exists in 'hsr' [ 620.607437][T10156] Cannot create hsr debugfs directory [ 620.939484][ T1584] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 620.940083][ T1584] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 620.940152][ T1584] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 620.941784][ T1584] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 620.992747][ T1584] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 621.011720][ T1584] usb 4-1: USB disconnect, device number 61 [ 621.136990][T10504] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1273'. [ 622.435731][ T5814] Bluetooth: hci3: command tx timeout [ 623.116090][ T5869] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 623.139253][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.308615][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 623.310972][ T5869] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.310997][ T5869] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 623.314169][ T5869] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 623.314198][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.314218][ T5869] usb 4-1: Product: syz [ 623.314232][ T5869] usb 4-1: Manufacturer: syz [ 623.314247][ T5869] usb 4-1: SerialNumber: syz [ 623.416496][ T5869] usb 4-1: config 0 descriptor?? [ 624.322597][ T37] audit: type=1400 audit(6055654538.666:23): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="y" requested=w pid=10521 comm="syz.3.1277" saddr=fc01::25:300:0:0 daddr=ff02::1 dest=3618 netif=wpan0 [ 624.685434][ T5814] Bluetooth: hci3: command tx timeout [ 624.854854][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.683327][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.840242][T10465] chnl_net:caif_netlink_parms(): no params data found [ 626.105806][ T5869] usb 4-1: USB disconnect, device number 62 [ 626.137111][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.299036][T10549] trusted_key: encrypted_key: insufficient parameters specified [ 626.909846][ T5814] Bluetooth: hci3: command tx timeout [ 627.256176][ T5869] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 627.478364][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 627.684833][ T5869] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.685608][ T5869] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 628.340389][ T5869] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 628.340421][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.340442][ T5869] usb 4-1: Product: syz [ 628.340456][ T5869] usb 4-1: Manufacturer: syz [ 628.340471][ T5869] usb 4-1: SerialNumber: syz [ 628.395049][ T5869] usb 4-1: config 0 descriptor?? [ 628.812882][ T37] audit: type=1400 audit(6055654542.841:24): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="y" requested=w pid=10546 comm="syz.3.1285" saddr=fc01::25:300:0:0 daddr=ff02::1 dest=3618 netif=wpan0 [ 629.641150][ T44] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 629.890017][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 629.890052][ T44] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 629.920960][ T44] usb 7-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 629.921045][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.921067][ T44] usb 7-1: Product: syz [ 629.921082][ T44] usb 7-1: Manufacturer: syz [ 629.921095][ T44] usb 7-1: SerialNumber: syz [ 629.936770][ T44] usb 7-1: config 0 descriptor?? [ 630.238906][ T44] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 630.495222][ T44] usb 7-1: USB disconnect, device number 42 [ 630.666388][T10465] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.667836][T10465] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.669534][T10465] bridge_slave_0: entered allmulticast mode [ 630.687114][T10465] bridge_slave_0: entered promiscuous mode [ 630.831725][ T5869] usb 4-1: USB disconnect, device number 63 [ 630.854331][T10465] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.854465][T10465] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.854704][T10465] bridge_slave_1: entered allmulticast mode [ 630.857445][T10465] bridge_slave_1: entered promiscuous mode [ 630.868828][T10571] udevd[10571]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 631.258045][T10156] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 631.330514][T10583] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1289'. [ 631.478006][T10156] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 631.585809][T10465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.587871][T10156] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 631.608650][T10590] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1290'. [ 631.668321][T10465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.669030][T10156] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 631.821337][ T12] bridge_slave_1: left allmulticast mode [ 631.821369][ T12] bridge_slave_1: left promiscuous mode [ 631.821811][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.912386][ T12] bridge_slave_0: left allmulticast mode [ 631.912408][ T12] bridge_slave_0: left promiscuous mode [ 631.912581][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.294252][ C0] vkms_vblank_simulate: vblank timer overrun [ 632.417287][ C0] vkms_vblank_simulate: vblank timer overrun [ 632.475564][ C0] vkms_vblank_simulate: vblank timer overrun [ 632.516225][ C0] vkms_vblank_simulate: vblank timer overrun [ 632.562571][ C0] vkms_vblank_simulate: vblank timer overrun [ 632.614877][ C0] vkms_vblank_simulate: vblank timer overrun [ 632.669842][ C0] vkms_vblank_simulate: vblank timer overrun [ 632.732168][ C0] vkms_vblank_simulate: vblank timer overrun [ 632.775308][ C0] vkms_vblank_simulate: vblank timer overrun [ 632.829973][ C0] vkms_vblank_simulate: vblank timer overrun [ 632.881069][ C0] vkms_vblank_simulate: vblank timer overrun [ 632.938791][ C0] vkms_vblank_simulate: vblank timer overrun [ 633.002639][ C0] vkms_vblank_simulate: vblank timer overrun [ 633.066120][ C0] vkms_vblank_simulate: vblank timer overrun [ 633.224567][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.310737][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.376164][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 633.396794][ T12] bond0 (unregistering): Released all slaves [ 633.432242][ C0] vkms_vblank_simulate: vblank timer overrun [ 633.485492][ C0] vkms_vblank_simulate: vblank timer overrun [ 633.745557][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.127008][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.198623][ T12] bond1 (unregistering): Released all slaves [ 634.606315][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.617078][T10465] team0: Port device team_slave_0 added [ 634.652326][T10465] team0: Port device team_slave_1 added [ 634.966389][ T44] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 635.121808][ C0] vkms_vblank_simulate: vblank timer overrun [ 635.123479][T10465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.123491][T10465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.123512][T10465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.139114][T10465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.139129][T10465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.139150][T10465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.163005][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 635.163037][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 635.179559][ T44] usb 4-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 635.179589][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.179609][ T44] usb 4-1: Product: syz [ 635.179623][ T44] usb 4-1: Manufacturer: syz [ 635.179637][ T44] usb 4-1: SerialNumber: syz [ 635.201704][ T44] usb 4-1: config 0 descriptor?? [ 635.725867][ T44] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 635.983254][ T44] usb 4-1: USB disconnect, device number 64 [ 636.613464][T10571] udevd[10571]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 637.151224][T10636] FAULT_INJECTION: forcing a failure. [ 637.151224][T10636] name failslab, interval 1, probability 0, space 0, times 0 [ 637.151267][T10636] CPU: 1 UID: 0 PID: 10636 Comm: syz.3.1304 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 637.151290][T10636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 637.151301][T10636] Call Trace: [ 637.151309][T10636] [ 637.151318][T10636] dump_stack_lvl+0x189/0x250 [ 637.151350][T10636] ? __pfx____ratelimit+0x10/0x10 [ 637.151375][T10636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 637.151401][T10636] ? __pfx__printk+0x10/0x10 [ 637.151439][T10636] should_fail_ex+0x46c/0x600 [ 637.151471][T10636] should_failslab+0xa8/0x100 [ 637.151498][T10636] __kmalloc_cache_noprof+0x6f/0x6c0 [ 637.151521][T10636] ? sctp_v6_cmp_addr+0x15/0xd0 [ 637.151656][T10636] ? sctp_add_bind_addr+0x8c/0x370 [ 637.151709][T10636] sctp_add_bind_addr+0x8c/0x370 [ 637.151738][T10636] sctp_copy_local_addr_list+0x30b/0x4e0 [ 637.151789][T10636] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 637.151813][T10636] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 637.151834][T10636] ? irqentry_exit+0x74/0x90 [ 637.151861][T10636] ? sctp_v6_is_any+0x64/0x80 [ 637.151887][T10636] ? sctp_copy_one_addr+0x93/0x360 [ 637.151914][T10636] sctp_bind_addr_copy+0xb3/0x3c0 [ 637.151939][T10636] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 637.151988][T10636] sctp_connect_new_asoc+0x2e0/0x690 [ 637.152034][T10636] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 637.152088][T10636] ? rt_spin_unlock+0x161/0x200 [ 637.152110][T10636] ? lock_sock_nested+0x5f/0x130 [ 637.152135][T10636] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 637.152152][T10636] ? security_sctp_bind_connect+0x7e/0x2e0 [ 637.152176][T10636] sctp_sendmsg+0x14fd/0x2590 [ 637.152216][T10636] ? __pfx_sctp_sendmsg+0x10/0x10 [ 637.152242][T10636] ? __lock_acquire+0xab9/0xd20 [ 637.152285][T10636] ? sock_rps_record_flow+0x19/0x410 [ 637.152349][T10636] ? inet_sendmsg+0x2f4/0x370 [ 637.152379][T10636] __sock_sendmsg+0x19c/0x270 [ 637.152410][T10636] __sys_sendto+0x3c7/0x520 [ 637.152433][T10636] ? __pfx___sys_sendto+0x10/0x10 [ 637.152482][T10636] ? ksys_write+0x230/0x260 [ 637.152508][T10636] ? __pfx_ksys_write+0x10/0x10 [ 637.152533][T10636] __x64_sys_sendto+0xde/0x100 [ 637.152557][T10636] do_syscall_64+0xfa/0xfa0 [ 637.152581][T10636] ? lockdep_hardirqs_on+0x9c/0x150 [ 637.152611][T10636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.152630][T10636] ? clear_bhb_loop+0x60/0xb0 [ 637.152652][T10636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.152670][T10636] RIP: 0033:0x7fbe4b76f749 [ 637.152688][T10636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.152703][T10636] RSP: 002b:00007fbe499ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 637.152723][T10636] RAX: ffffffffffffffda RBX: 00007fbe4b9c5fa0 RCX: 00007fbe4b76f749 [ 637.152737][T10636] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 637.152749][T10636] RBP: 00007fbe499ce090 R08: 000020000005ffe4 R09: 000000000000001c [ 637.152761][T10636] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 637.152773][T10636] R13: 00007fbe4b9c6038 R14: 00007fbe4b9c5fa0 R15: 00007ffd147de5f8 [ 637.152807][T10636] [ 637.923352][ C0] vkms_vblank_simulate: vblank timer overrun [ 639.496564][ C0] vkms_vblank_simulate: vblank timer overrun [ 639.528465][ C0] vkms_vblank_simulate: vblank timer overrun [ 639.912255][T10648] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1307'. [ 639.915823][T10648] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1307'. [ 639.915853][T10648] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1307'. [ 639.972249][T10465] hsr_slave_0: entered promiscuous mode [ 639.988667][T10465] hsr_slave_1: entered promiscuous mode [ 639.989705][T10465] debugfs: 'hsr0' already exists in 'hsr' [ 639.989737][T10465] Cannot create hsr debugfs directory [ 640.223766][T10667] binder: 10661:10667 ioctl c0306201 0 returned -14 [ 640.224335][T10667] binder: 10661:10667 ioctl c00c6211 0 returned -14 [ 640.225978][ C0] vkms_vblank_simulate: vblank timer overrun [ 641.013442][ T1228] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 641.152428][ T1228] usb 4-1: device descriptor read/64, error -71 [ 641.153447][ T12] hsr_slave_0: left promiscuous mode [ 641.198037][ T12] hsr_slave_1: left promiscuous mode [ 641.199030][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 641.199055][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.243710][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 641.243738][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.341420][ T12] veth1_macvtap: left promiscuous mode [ 641.341492][ T12] veth0_macvtap: left promiscuous mode [ 641.341646][ T12] veth1_vlan: left promiscuous mode [ 641.341745][ T12] veth0_vlan: left promiscuous mode [ 641.429986][ T1228] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 641.430239][ T44] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 641.568882][ T1228] usb 4-1: device descriptor read/64, error -71 [ 641.612638][ T44] usb 7-1: unable to get BOS descriptor or descriptor too short [ 641.613835][ T44] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 641.613860][ T44] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 641.613879][ T44] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 641.616206][ T44] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 641.616231][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.616243][ T44] usb 7-1: Product: syz [ 641.616253][ T44] usb 7-1: Manufacturer: syz [ 641.616262][ T44] usb 7-1: SerialNumber: syz [ 641.689839][ T1228] usb usb4-port1: attempt power cycle [ 641.889931][ T44] usb 7-1: USB disconnect, device number 43 [ 642.060376][ T1228] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 642.115155][ T1228] usb 4-1: device descriptor read/8, error -71 [ 642.370427][ T1228] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 642.411946][ T1228] usb 4-1: device descriptor read/8, error -71 [ 642.526607][ T1228] usb usb4-port1: unable to enumerate USB device [ 642.581930][ T37] audit: type=1326 audit(6055654555.756:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10688 comm="syz.5.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3593aff749 code=0x7ffc0000 [ 642.581981][ T37] audit: type=1326 audit(6055654555.756:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10688 comm="syz.5.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f3593aff749 code=0x7ffc0000 [ 642.582020][ T37] audit: type=1326 audit(6055654555.756:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10688 comm="syz.5.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3593aff749 code=0x7ffc0000 [ 642.582059][ T37] audit: type=1326 audit(6055654555.756:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10688 comm="syz.5.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3593aff749 code=0x7ffc0000 [ 642.920460][ C0] vkms_vblank_simulate: vblank timer overrun [ 643.364998][ C0] vkms_vblank_simulate: vblank timer overrun [ 643.696103][ C0] vkms_vblank_simulate: vblank timer overrun [ 643.807973][ C0] vkms_vblank_simulate: vblank timer overrun [ 643.840954][ T37] audit: type=1326 audit(6055654556.926:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10696 comm="syz.6.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b714f749 code=0x7ffc0000 [ 643.843223][ T37] audit: type=1326 audit(6055654556.935:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10696 comm="syz.6.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b714f749 code=0x7ffc0000 [ 643.843528][ T37] audit: type=1326 audit(6055654556.935:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10696 comm="syz.6.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f59b714df90 code=0x7ffc0000 [ 643.846818][ T37] audit: type=1326 audit(6055654556.935:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10696 comm="syz.6.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f59b714e1ff code=0x7ffc0000 [ 643.847069][T10697] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 643.847085][T10697] audit: out of memory in audit_log_start [ 644.147231][ C0] vkms_vblank_simulate: vblank timer overrun [ 644.204353][ C0] vkms_vblank_simulate: vblank timer overrun [ 644.951209][ C0] vkms_vblank_simulate: vblank timer overrun [ 645.110553][ C0] vkms_vblank_simulate: vblank timer overrun [ 645.436357][ C0] vkms_vblank_simulate: vblank timer overrun [ 645.458367][ T5965] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 645.488334][ C0] vkms_vblank_simulate: vblank timer overrun [ 645.592710][ C0] vkms_vblank_simulate: vblank timer overrun [ 645.629239][ T5965] usb 4-1: Using ep0 maxpacket: 32 [ 645.631235][ T5965] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.633691][ T5965] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 645.633718][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.633729][ T5965] usb 4-1: Product: syz [ 645.633736][ T5965] usb 4-1: Manufacturer: syz [ 645.633744][ T5965] usb 4-1: SerialNumber: syz [ 645.637915][ T5965] usb 4-1: config 0 descriptor?? [ 645.721100][ C0] vkms_vblank_simulate: vblank timer overrun [ 645.777753][ C0] vkms_vblank_simulate: vblank timer overrun [ 645.811865][ C0] vkms_vblank_simulate: vblank timer overrun [ 645.864877][ T12] team0 (unregistering): Port device team_slave_1 removed [ 645.904063][ T5965] usb 4-1: USB disconnect, device number 69 [ 646.131961][ T12] team0 (unregistering): Port device team_slave_0 removed [ 646.472385][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.564471][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.664328][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.847350][ T5805] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 646.879309][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.997505][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.057984][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.060854][ T5805] usb 4-1: unable to get BOS descriptor or descriptor too short [ 647.067597][ T5805] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 647.067621][ T5805] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 647.067640][ T5805] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 647.075742][ T5805] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 647.075770][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.075789][ T5805] usb 4-1: Product: syz [ 647.075804][ T5805] usb 4-1: Manufacturer: syz [ 647.075818][ T5805] usb 4-1: SerialNumber: syz [ 647.126393][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.178309][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.239865][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.303708][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.357810][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.420394][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.444352][ T5805] usb 4-1: USB disconnect, device number 70 [ 647.518043][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.565023][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.751179][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 647.757901][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 647.771273][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 647.773521][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 647.774291][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 647.800887][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.880503][ C0] vkms_vblank_simulate: vblank timer overrun [ 649.140272][T10724] binder: 10723:10724 ioctl c0306201 0 returned -14 [ 649.143555][T10724] binder: 10723:10724 ioctl c00c6211 0 returned -14 [ 649.249653][T10721] macvtap0: entered allmulticast mode [ 649.249675][T10721] veth0_macvtap: entered allmulticast mode [ 649.475690][ T5888] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 649.653173][ T5888] usb 7-1: device descriptor read/64, error -71 [ 649.657684][ T1228] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 649.828270][ T1228] usb 4-1: Using ep0 maxpacket: 8 [ 649.831429][ T1228] usb 4-1: unable to get BOS descriptor or descriptor too short [ 649.833294][ T1228] usb 4-1: config 11 has an invalid interface number: 104 but max is 0 [ 649.833320][ T1228] usb 4-1: config 11 has no interface number 0 [ 649.833353][ T1228] usb 4-1: config 11 interface 104 altsetting 255 has an invalid endpoint descriptor of length 2, skipping [ 649.833377][ T1228] usb 4-1: config 11 interface 104 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 649.833405][ T1228] usb 4-1: config 11 interface 104 has no altsetting 0 [ 649.837633][ T1228] usb 4-1: New USB device found, idVendor=049f, idProduct=0032, bcdDevice=1b.6e [ 649.837660][ T1228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.837680][ T1228] usb 4-1: Product: syz [ 649.837792][ T1228] usb 4-1: Manufacturer: syz [ 649.837807][ T1228] usb 4-1: SerialNumber: syz [ 649.924517][ T5888] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 649.960086][ T61] Bluetooth: hci4: command tx timeout [ 650.065952][ T5888] usb 7-1: device descriptor read/64, error -71 [ 650.183613][ T5888] usb usb7-port1: attempt power cycle [ 650.508983][ T1228] usb 4-1: USB disconnect, device number 71 [ 650.584677][ T5888] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 650.600032][ T5888] usb 7-1: device descriptor read/8, error -71 [ 650.879997][ T5888] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 650.940180][ T5888] usb 7-1: device descriptor read/8, error -71 [ 651.062919][ T5888] usb usb7-port1: unable to enumerate USB device [ 652.179331][ T61] Bluetooth: hci4: command tx timeout [ 652.748603][T10759] /dev/nullb0: Can't lookup blockdev [ 652.956970][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 652.957044][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 654.401477][ T61] Bluetooth: hci4: command tx timeout [ 654.420966][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1342'. [ 654.581415][T10465] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 656.623952][ T61] Bluetooth: hci4: command tx timeout [ 658.697508][T10465] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 659.044582][T10465] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 661.221312][T10709] chnl_net:caif_netlink_parms(): no params data found [ 661.465200][T10465] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 661.603651][ T5965] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 662.811874][ T5965] usb 4-1: unable to get BOS descriptor or descriptor too short [ 662.813385][ T5965] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 662.813407][ T5965] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 662.813427][ T5965] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 662.816150][ T5965] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 662.816177][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.816197][ T5965] usb 4-1: Product: syz [ 662.816212][ T5965] usb 4-1: Manufacturer: syz [ 662.816225][ T5965] usb 4-1: SerialNumber: syz [ 663.146446][ T5965] usb 4-1: can't set config #1, error -71 [ 663.255195][ T5965] usb 4-1: USB disconnect, device number 72 [ 663.895559][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 664.140372][T10799] loop5: detected capacity change from 0 to 7 [ 664.300716][T10799] Dev loop5: unable to read RDB block 7 [ 664.300779][T10799] loop5: unable to read partition table [ 664.301013][T10799] loop5: partition table beyond EOD, truncated [ 664.301051][T10799] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 665.879699][T10812] binder: 10807:10812 ioctl c0306201 0 returned -14 [ 665.880192][T10812] binder: 10807:10812 ioctl c00c6211 0 returned -14 [ 667.415738][ T9] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 667.575944][ T9] usb 4-1: device descriptor read/64, error -71 [ 668.644546][ T9] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 670.430950][T10709] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.431087][T10709] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.431326][T10709] bridge_slave_0: entered allmulticast mode [ 670.437018][T10709] bridge_slave_0: entered promiscuous mode [ 670.578664][T10709] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.578801][T10709] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.579374][T10709] bridge_slave_1: entered allmulticast mode [ 670.591006][T10709] bridge_slave_1: entered promiscuous mode [ 672.734183][ T9] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 674.023037][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 674.442047][ T9] usb 4-1: device descriptor read/all, error -71 [ 678.257347][T10709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.367706][ T9] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 678.598112][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 678.599685][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 678.599707][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.599726][ T9] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 678.621716][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 678.621746][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.621766][ T9] usb 4-1: Product: syz [ 678.621788][ T9] usb 4-1: Manufacturer: syz [ 678.621802][ T9] usb 4-1: SerialNumber: syz [ 679.546986][ T9] usb 4-1: USB disconnect, device number 77 [ 680.313592][ T5814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 680.335593][ T5814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 680.338002][ T5814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 680.342970][ T5814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 680.343822][ T5814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 682.918539][ T61] Bluetooth: hci5: command tx timeout [ 683.765621][T10709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.633357][ T61] Bluetooth: hci5: command tx timeout [ 687.337284][T10709] team0: Port device team_slave_0 added [ 687.469161][T10709] team0: Port device team_slave_1 added [ 687.908977][ T61] Bluetooth: hci5: command tx timeout [ 689.011152][ T5814] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 689.060858][ T5814] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 689.068369][ T5814] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 689.195933][ T5814] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 689.253656][ T5814] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 690.388168][ T61] Bluetooth: hci5: command tx timeout [ 691.359182][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 691.584985][ T5814] Bluetooth: hci6: command tx timeout [ 692.103703][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 692.122824][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 692.124036][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 692.124854][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 694.512480][ T61] Bluetooth: hci6: command tx timeout [ 694.576680][ T61] Bluetooth: hci3: command tx timeout [ 696.714183][ T61] Bluetooth: hci6: command tx timeout [ 696.809813][ T61] Bluetooth: hci3: command tx timeout [ 697.118379][T10709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 697.118396][T10709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 697.118422][T10709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 697.845039][T10709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 697.845056][T10709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 697.845084][T10709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.946757][ T61] Bluetooth: hci6: command tx timeout [ 699.032455][ T61] Bluetooth: hci3: command tx timeout [ 701.489691][ T61] Bluetooth: hci3: command tx timeout [ 705.206967][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 705.237820][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 705.251231][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 705.255656][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 705.257304][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 707.484221][ T5814] Bluetooth: hci0: command tx timeout [ 708.857716][T10709] hsr_slave_0: entered promiscuous mode [ 708.859228][T10709] hsr_slave_1: entered promiscuous mode [ 708.877700][T10709] debugfs: 'hsr0' already exists in 'hsr' [ 708.877730][T10709] Cannot create hsr debugfs directory [ 709.708953][ T5814] Bluetooth: hci0: command tx timeout [ 711.928978][ T5814] Bluetooth: hci0: command tx timeout [ 714.202857][ T5814] Bluetooth: hci0: command tx timeout [ 718.034808][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 718.167905][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 718.381050][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 718.402857][ T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 718.406153][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 718.603285][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 718.603358][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 720.818913][ T5814] Bluetooth: hci7: command tx timeout [ 723.051905][ T5814] Bluetooth: hci7: command tx timeout [ 725.263841][ T5814] Bluetooth: hci7: command tx timeout [ 727.486245][ T5814] Bluetooth: hci7: command tx timeout [ 730.156085][T10833] chnl_net:caif_netlink_parms(): no params data found [ 739.048446][T10833] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 742.572855][T10854] chnl_net:caif_netlink_parms(): no params data found [ 746.926657][T10847] chnl_net:caif_netlink_parms(): no params data found [ 747.947340][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 747.962781][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 747.964148][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 747.965194][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 749.053388][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 752.008049][ T5814] Bluetooth: hci4: command tx timeout [ 754.159410][ T5814] Bluetooth: hci4: command tx timeout [ 756.730650][ T5814] Bluetooth: hci4: command tx timeout [ 759.017289][ T5814] Bluetooth: hci4: command tx timeout [ 760.340292][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 760.542254][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 760.591212][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 760.606303][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 760.607642][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 761.404981][ T5808] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 761.412562][ T5808] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 761.432462][ T5808] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 761.528343][ T5808] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 762.430023][ T5808] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 772.987604][ T61] Bluetooth: hci5: command tx timeout [ 773.783892][ T61] Bluetooth: hci8: command tx timeout [ 775.226359][ T61] Bluetooth: hci5: command tx timeout [ 775.960006][ T61] Bluetooth: hci8: command tx timeout [ 777.422576][ T61] Bluetooth: hci5: command tx timeout [ 778.451622][ T61] Bluetooth: hci8: command tx timeout [ 779.628648][ T61] Bluetooth: hci5: command tx timeout [ 780.415281][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 780.447739][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 780.485374][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 780.507882][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 780.511761][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 780.654439][ T61] Bluetooth: hci8: command tx timeout [ 782.785729][ T61] Bluetooth: hci3: command tx timeout [ 784.343763][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 784.343839][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 784.943496][ T61] Bluetooth: hci3: command tx timeout [ 785.967880][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 785.992573][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 785.996242][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 786.014451][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 786.015206][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 787.150683][ T5814] Bluetooth: hci3: command tx timeout [ 788.433255][ T5814] Bluetooth: hci0: command tx timeout [ 789.373105][ T5814] Bluetooth: hci3: command tx timeout [ 789.738737][T10465] syz-executor (10465) used greatest stack depth: 17656 bytes left [ 790.659588][ T5814] Bluetooth: hci0: command tx timeout [ 792.878228][ T5814] Bluetooth: hci0: command tx timeout [ 795.164356][ T5814] Bluetooth: hci0: command tx timeout [ 795.232076][ T31] kworker/1:0 (31) used greatest stack depth: 13592 bytes left [ 812.152183][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 812.185692][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 812.196483][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 812.246413][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 812.249760][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 814.504045][ T5814] Bluetooth: hci1: command tx timeout [ 816.726460][ T5814] Bluetooth: hci1: command tx timeout [ 818.976054][ T5814] Bluetooth: hci1: command tx timeout [ 821.450794][ T5814] Bluetooth: hci1: command tx timeout [ 823.241768][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 823.319171][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 823.328173][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 823.885560][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 823.903385][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 824.838958][T10857] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 824.875355][T10857] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 824.879956][T10857] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 824.900714][T10857] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 824.907712][T10857] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 826.139462][ T5814] Bluetooth: hci2: command tx timeout [ 827.293872][ T5814] Bluetooth: hci6: command tx timeout [ 828.351642][ T5814] Bluetooth: hci2: command tx timeout [ 829.484249][ T5814] Bluetooth: hci6: command tx timeout [ 830.574121][ T5814] Bluetooth: hci2: command tx timeout [ 831.696153][ T5814] Bluetooth: hci6: command tx timeout [ 832.796783][ T5814] Bluetooth: hci2: command tx timeout [ 833.908201][ T5814] Bluetooth: hci6: command tx timeout [ 846.310061][T10857] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 847.093227][T10857] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 847.294464][T10857] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 847.459840][T10857] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 847.460673][T10857] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 849.900617][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 849.900716][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 850.115413][ T5814] Bluetooth: hci7: command tx timeout [ 852.286516][T10857] Bluetooth: hci7: command tx timeout [ 854.191559][T10945] chnl_net:caif_netlink_parms(): no params data found [ 854.672357][T10857] Bluetooth: hci7: command tx timeout [ 856.582001][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 856.623448][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 856.637796][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 856.653402][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 856.654108][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 856.816283][T10857] Bluetooth: hci7: command tx timeout [ 858.953249][T10857] Bluetooth: hci3: command tx timeout [ 861.274062][T10857] Bluetooth: hci3: command tx timeout [ 863.526364][T10857] Bluetooth: hci3: command tx timeout [ 865.706254][T10857] Bluetooth: hci3: command tx timeout [ 866.439516][T10959] chnl_net:caif_netlink_parms(): no params data found [ 867.558978][T10964] chnl_net:caif_netlink_parms(): no params data found [ 883.818820][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 883.849255][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 883.859937][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 883.880771][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 883.918705][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 885.109794][ T61] Bluetooth: hci4: command 0x0406 tx timeout [ 886.555453][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 886.573905][ T5808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 886.575640][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 886.576866][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 886.586904][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 887.503832][ T38] INFO: task syz-executor:10709 blocked for more than 143 seconds. [ 887.503857][ T38] Not tainted syzkaller #0 [ 887.503868][ T38] Blocked by coredump. [ 887.503875][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 887.503885][ T38] task:syz-executor state:D stack:18088 pid:10709 tgid:10709 ppid:1 task_flags:0x40054c flags:0x00080003 [ 887.503932][ T38] Call Trace: [ 887.503939][ T38] [ 887.503954][ T38] __schedule+0x16f3/0x4c20 [ 887.504016][ T38] ? __pfx___schedule+0x10/0x10 [ 887.504069][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 887.504100][ T38] rt_mutex_schedule+0x77/0xf0 [ 887.504122][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 887.504144][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 887.504185][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 887.504209][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 887.504232][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 887.504251][ T38] ? __lock_acquire+0xab9/0xd20 [ 887.504287][ T38] ? rcu_barrier+0x4c/0x570 [ 887.504320][ T38] ? rcu_barrier+0x4c/0x570 [ 887.504337][ T38] mutex_lock_nested+0x16a/0x1d0 [ 887.504357][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 887.504380][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 887.504535][ T38] rcu_barrier+0x4c/0x570 [ 887.504559][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 887.504582][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 887.504604][ T38] netdev_run_todo+0x327/0xea0 [ 887.504699][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 887.504752][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 887.504775][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 887.504811][ T38] ? netdev_state_change+0x1ca/0x220 [ 887.504832][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 887.504855][ T38] tun_chr_close+0x13f/0x1c0 [ 887.504879][ T38] __fput+0x45b/0xa80 [ 887.504914][ T38] task_work_run+0x1d4/0x260 [ 887.504947][ T38] ? __pfx_task_work_run+0x10/0x10 [ 887.504965][ T38] ? do_exit+0x6b0/0x2300 [ 887.504991][ T38] ? do_exit+0x6b0/0x2300 [ 887.505021][ T38] do_exit+0x6b5/0x2300 [ 887.505046][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 887.505091][ T38] ? __pfx_do_exit+0x10/0x10 [ 887.505114][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 887.505135][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 887.505171][ T38] do_group_exit+0x21c/0x2d0 [ 887.505190][ T38] ? rt_spin_unlock+0x161/0x200 [ 887.505214][ T38] get_signal+0x125d/0x1310 [ 887.505260][ T38] arch_do_signal_or_restart+0xa0/0x790 [ 887.505290][ T38] ? fput_close_sync+0x119/0x200 [ 887.505311][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 887.505351][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 887.505380][ T38] exit_to_user_mode_loop+0x72/0x130 [ 887.505404][ T38] do_syscall_64+0x2bd/0xfa0 [ 887.505428][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 887.505453][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.505474][ T38] ? clear_bhb_loop+0x60/0xb0 [ 887.505497][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.505516][ T38] RIP: 0033:0x7fee327815dc [ 887.505533][ T38] RSP: 002b:00007ffd64da4800 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 887.505554][ T38] RAX: 000000000000006c RBX: 00007fee33504620 RCX: 00007fee327815dc [ 887.505568][ T38] RDX: 000000000000006c RSI: 00007fee33504670 RDI: 0000000000000003 [ 887.505581][ T38] RBP: 0000000000000000 R08: 00007ffd64da4854 R09: 000000000000000c [ 887.505594][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 887.505607][ T38] R13: 0000000000000000 R14: 00007fee33504670 R15: 0000000000000000 [ 887.505639][ T38] [ 887.505688][ T38] [ 887.505688][ T38] Showing all locks held in the system: [ 887.505702][ T38] 4 locks held by rcuc/0/20: [ 887.505715][ T38] 1 lock held by khungtaskd/38: [ 887.505726][ T38] #0: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 887.505780][ T38] 6 locks held by kworker/u8:5/792: [ 887.505792][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 887.505839][ T38] #1: ffffc90004637ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 887.505885][ T38] #2: ffffffff8e8569e0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 887.505928][ T38] #3: ffff888026a190d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 887.506018][ T38] #4: ffff888027b78300 (&devlink->lock_key#8){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 887.506072][ T38] #5: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 887.506119][ T38] 3 locks held by kworker/0:2/1228: [ 887.506143][ T38] 9 locks held by kworker/u8:8/3553: [ 887.506154][ T38] 8 locks held by kworker/u8:10/4877: [ 887.506166][ T38] 7 locks held by udevd/5167: [ 887.506177][ T38] 2 locks held by getty/5554: [ 887.506188][ T38] #0: ffff88823bf428a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 887.506301][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 887.506376][ T38] 3 locks held by kworker/1:3/5869: [ 887.506387][ T38] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 887.506433][ T38] #1: ffffc90004d1fba0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 887.506478][ T38] #2: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 887.506521][ T38] 3 locks held by kworker/u8:11/6054: [ 887.506532][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 887.506582][ T38] #1: ffffc900054bfba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 887.506627][ T38] #2: ffffffff8e8638f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 887.506699][ T38] 3 locks held by kworker/u8:25/7050: [ 887.506712][ T38] #0: ffff88802ff55938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 887.506761][ T38] #1: ffffc90004297ba0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 887.506810][ T38] #2: ffffffff8e8638f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x119/0x15a0 [ 887.506891][ T38] 1 lock held by syz-executor/10709: [ 887.506902][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 887.506945][ T38] 1 lock held by syz.6.1344/10780: [ 887.506956][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 887.507000][ T38] 1 lock held by syz.5.1353/10818: [ 887.507011][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 887.507060][ T38] 1 lock held by syz-executor/10833: [ 887.507071][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 887.507114][ T38] 1 lock held by syz.3.1358/10835: [ 887.507124][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 887.507167][ T38] 1 lock held by syz-executor/10847: [ 887.507178][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 887.507220][ T38] 1 lock held by syz-executor/10854: [ 887.507231][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 887.507274][ T38] 4 locks held by kworker/u9:1/10857: [ 887.507285][ T38] #0: ffff888030491938 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 887.507331][ T38] #1: ffffc900058afba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 887.507376][ T38] #2: ffff888031884e88 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 887.507467][ T38] #3: ffff8880318840a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 887.507517][ T38] 1 lock held by syz-executor/10873: [ 887.507528][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 887.507571][ T38] 1 lock held by syz-executor/10878: [ 887.507582][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 887.507626][ T38] 2 locks held by syz-executor/10906: [ 887.507637][ T38] #0: ffffffff8e8569e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 887.507678][ T38] #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 887.507721][ T38] 2 locks held by syz-executor/10918: [ 887.507731][ T38] #0: ffffffff8e8569e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 887.507772][ T38] #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 887.507815][ T38] 2 locks held by syz-executor/10921: [ 887.507825][ T38] #0: ffffffff8e8569e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 887.507866][ T38] #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 887.507909][ T38] 1 lock held by syz-executor/10934: [ 887.507920][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 887.507962][ T38] 1 lock held by syz-executor/10937: [ 887.507973][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 887.508016][ T38] 1 lock held by syz-executor/10945: [ 887.508028][ T38] 4 locks held by syz-executor/10959: [ 887.508039][ T38] #0: ffff8880724b4e88 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 887.508115][ T38] #1: ffff8880724b40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 887.508162][ T38] #2: ffffffff8e9cbe78 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 887.508232][ T38] #3: ffff88805cf77358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 887.508286][ T38] 2 locks held by syz-executor/10964: [ 887.508297][ T38] #0: ffffffff8ed65a10 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 887.508344][ T38] #1: ffffffff8e8638f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 887.508386][ T38] 2 locks held by syz-executor/10993: [ 887.508398][ T38] #0: ffffffff8e8569e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 887.508438][ T38] #1: ffffffff8e8638f8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 887.508484][ T38] 2 locks held by syz-executor/11005: [ 887.508495][ T38] #0: ffffffff8e8569e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 887.508536][ T38] #1: ffffffff8e8638f8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 887.508608][ T38] 1 lock held by udevd/11031: [ 887.508620][ T38] #0: ffff88802f3d9a08 (&ep->lock){+.+.}-{3:3}, at: do_epoll_wait+0x848/0xbb0 [ 887.508662][ T38] 1 lock held by syz-executor/11037: [ 887.508673][ T38] #0: ffffffff8e8638f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 887.508721][ T38] 1 lock held by syz-executor/11043: [ 887.508732][ T38] #0: ffffffff8e8638f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 887.508780][ T38] 2 locks held by dhcpcd-run-hook/11047: [ 887.508792][ T38] [ 887.508797][ T38] ============================================= [ 887.508797][ T38] [ 887.508811][ T38] NMI backtrace for cpu 1 [ 887.508827][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 887.508848][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 887.508858][ T38] Call Trace: [ 887.508866][ T38] [ 887.508875][ T38] dump_stack_lvl+0x189/0x250 [ 887.508904][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 887.508929][ T38] ? __pfx__printk+0x10/0x10 [ 887.508963][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 887.508988][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 887.509012][ T38] ? __pfx__printk+0x10/0x10 [ 887.509038][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 887.509067][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 887.509091][ T38] watchdog+0xf60/0xfa0 [ 887.509132][ T38] ? watchdog+0x1e2/0xfa0 [ 887.509161][ T38] kthread+0x711/0x8a0 [ 887.509190][ T38] ? __pfx_watchdog+0x10/0x10 [ 887.509213][ T38] ? __pfx_kthread+0x10/0x10 [ 887.509235][ T38] ? rt_spin_unlock+0x150/0x200 [ 887.509259][ T38] ? rt_spin_unlock+0x161/0x200 [ 887.509278][ T38] ? __pfx_kthread+0x10/0x10 [ 887.509302][ T38] ret_from_fork+0x4bc/0x870 [ 887.509326][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 887.509355][ T38] ? __switch_to_asm+0x39/0x70 [ 887.509372][ T38] ? __switch_to_asm+0x33/0x70 [ 887.509388][ T38] ? __pfx_kthread+0x10/0x10 [ 887.509414][ T38] ret_from_fork_asm+0x1a/0x30 [ 887.509449][ T38] [ 887.509457][ T38] Sending NMI from CPU 1 to CPUs 0: [ 887.509483][ C0] NMI backtrace for cpu 0 [ 887.509497][ C0] CPU: 0 UID: 0 PID: 4877 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 887.509516][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 887.509527][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 887.509642][ C0] RIP: 0010:rcu_read_lock_held+0xa/0x50 [ 887.509659][ C0] Code: cc 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 e8 16 e8 1c 09 <85> c0 74 26 31 db e8 4b 2c 01 00 84 c0 74 20 e8 72 75 01 00 84 c0 [ 887.509673][ C0] RSP: 0018:ffffc9000fa5e618 EFLAGS: 00000246 [ 887.509687][ C0] RAX: 0000000000000001 RBX: ffffc9000fa5e8c0 RCX: ffff888033668000 [ 887.509700][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 887.509711][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000100 [ 887.509721][ C0] R10: ffffc9000fa5e740 R11: fffff52001f4bcee R12: ffff888035c20000 [ 887.509733][ C0] R13: ffff888145f88880 R14: ffffc9000fa5e740 R15: dffffc0000000000 [ 887.509745][ C0] FS: 0000000000000000(0000) GS:ffff888126df6000(0000) knlGS:0000000000000000 [ 887.509759][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 887.509770][ C0] CR2: 00007f4f64b45000 CR3: 000000006fd3a000 CR4: 00000000003526f0 [ 887.509786][ C0] Call Trace: [ 887.509792][ C0] [ 887.509800][ C0] fib_lookup+0x195/0x440 [ 887.509865][ C0] ? fib_lookup+0x76/0x440 [ 887.509884][ C0] ip_route_output_key_hash_rcu+0x31b/0x23e0 [ 887.509908][ C0] ? ip_route_output_key_hash+0xc1/0x280 [ 887.509927][ C0] ? ip_route_output_key_hash+0xc1/0x280 [ 887.509947][ C0] ip_route_output_key_hash+0x174/0x280 [ 887.509966][ C0] ? __lock_acquire+0xab9/0xd20 [ 887.509985][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 887.510013][ C0] ip_route_output_flow+0x2a/0x150 [ 887.510031][ C0] ? ip_route_me_harder+0x6ae/0xf10 [ 887.510099][ C0] ip_route_me_harder+0x6c4/0xf10 [ 887.510126][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 887.510155][ C0] ? rcu_is_watching+0x15/0xb0 [ 887.510175][ C0] synproxy_send_tcp+0x3a7/0x700 [ 887.510250][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 887.510276][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 887.510294][ C0] ? nft_jhash_init+0x4f8/0x660 [ 887.510348][ C0] ? synproxy_pernet+0x45/0x270 [ 887.510394][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 887.510418][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 887.510440][ C0] ? nf_ip_checksum+0x13c/0x510 [ 887.510506][ C0] nft_synproxy_do_eval+0x345/0x570 [ 887.510530][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 887.510559][ C0] nft_do_chain+0x40c/0x1920 [ 887.510586][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 887.510624][ C0] nft_do_chain_inet+0x25d/0x340 [ 887.510688][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 887.510708][ C0] ? __lock_acquire+0xab9/0xd20 [ 887.510732][ C0] ? NF_HOOK+0x9a/0x3a0 [ 887.510748][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 887.510768][ C0] nf_hook_slow+0xc5/0x220 [ 887.510788][ C0] NF_HOOK+0x206/0x3a0 [ 887.510805][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 887.510821][ C0] ? NF_HOOK+0x9a/0x3a0 [ 887.510835][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 887.510849][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 887.510866][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 887.510882][ C0] ? skb_dst+0x4f/0xd0 [ 887.510897][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 887.510914][ C0] NF_HOOK+0x30c/0x3a0 [ 887.510930][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 887.510945][ C0] ? NF_HOOK+0x9a/0x3a0 [ 887.510959][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 887.510975][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 887.510996][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 887.511010][ C0] __netif_receive_skb+0x143/0x380 [ 887.511035][ C0] ? process_backlog+0x27b/0x900 [ 887.511049][ C0] process_backlog+0x31e/0x900 [ 887.511070][ C0] __napi_poll+0xb6/0x540 [ 887.511093][ C0] net_rx_action+0x5f7/0xda0 [ 887.511115][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 887.511132][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 887.511157][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 887.511181][ C0] handle_softirqs+0x22f/0x710 [ 887.511204][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 887.511227][ C0] __local_bh_enable_ip+0x1a0/0x2e0 [ 887.511244][ C0] ? reacquire_held_locks+0x127/0x1d0 [ 887.511265][ C0] ? rt_spin_lock+0x1c1/0x3e0 [ 887.511282][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 887.511305][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 887.511325][ C0] ? rt_spin_unlock+0x150/0x200 [ 887.511344][ C0] ? rt_spin_unlock+0x161/0x200 [ 887.511360][ C0] ? nsim_dev_trap_report_work+0x72e/0xbc0 [ 887.511381][ C0] nsim_dev_trap_report_work+0x7f2/0xbc0 [ 887.511409][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 887.511429][ C0] process_scheduled_works+0xae1/0x17b0 [ 887.511461][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 887.511487][ C0] worker_thread+0x8a0/0xda0 [ 887.511518][ C0] kthread+0x711/0x8a0 [ 887.511539][ C0] ? __pfx_worker_thread+0x10/0x10 [ 887.511557][ C0] ? __pfx_kthread+0x10/0x10 [ 887.511576][ C0] ? rt_spin_unlock+0x150/0x200 [ 887.511595][ C0] ? rt_spin_unlock+0x161/0x200 [ 887.511611][ C0] ? __pfx_kthread+0x10/0x10 [ 887.511632][ C0] ret_from_fork+0x4bc/0x870 [ 887.511650][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 887.511671][ C0] ? __switch_to_asm+0x39/0x70 [ 887.511686][ C0] ? __switch_to_asm+0x33/0x70 [ 887.511700][ C0] ? __pfx_kthread+0x10/0x10 [ 887.511721][ C0] ret_from_fork_asm+0x1a/0x30 [ 887.511745][ C0] [ 888.668266][T10857] Bluetooth: hci0: command tx timeout [ 889.586848][T10857] Bluetooth: hci1: command tx timeout [ 890.839939][ T5808] Bluetooth: hci0: command tx timeout [ 891.461285][T10857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 891.476395][T10857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 891.478026][T10857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 891.506386][T10857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 891.512007][T10857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 891.777458][T10857] Bluetooth: hci1: command tx timeout [ 892.245887][T10964] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 893.059400][T10857] Bluetooth: hci0: command tx timeout [ 893.754014][T10857] Bluetooth: hci2: command tx timeout [ 894.025458][T10857] Bluetooth: hci1: command tx timeout [ 895.285283][T10857] Bluetooth: hci0: command tx timeout [ 896.575818][T10857] Bluetooth: hci5: command 0x0406 tx timeout [ 896.575985][T10857] Bluetooth: hci2: command tx timeout [ 896.576008][T10857] Bluetooth: hci1: command tx timeout