last executing test programs: 4m3.970481056s ago: executing program 4 (id=93): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x4, 0x7ffe}, 0x80, &(0x7f0000000080)=[{&(0x7f00000016c0)="27031c00160014000000002f06afacf706e105400000894f00050003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c36505968f28a4cf8b401618bcfc1480ffaa7585283a2c2da93510fcc826b10c3b3ccb2e1a3de2e549fb2fccd96a9f5e4d5573f5fde1945dd4e631ac0cf6742d79135dc7626a127b11cce50b1d626c0add12b8564655ecf4b37c1acb61d171708974e8ef3bde8af180fa182cf54f5605997fb370f05443a27ab9b693a86a90423c7a7297c2ccfd07fdfbc24f42d0a723daa6975f20109e2cf10080f1c72b3bc15b5b8da6700cf210b3750a7eda5145994437ccddc97158806b984865b3c0c801", 0xf1}, {&(0x7f0000000540)="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", 0xe69}], 0x2}, 0x20000004) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05072bbd7000ffdbdf250100000018000180140002006c6f00000000000000000000000000001800028048000180080001803e0000000800010000000000040003"], 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) 4m3.517208597s ago: executing program 4 (id=95): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x3) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r1, 0x8, 0x0, @val=@tcx}, 0x1c) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r3, 0x4) 4m1.605536687s ago: executing program 4 (id=99): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 4m1.297936137s ago: executing program 4 (id=101): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000180)=0x6, 0x2) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct]}, {0x0, [0x2e, 0x5f, 0x0, 0x4f]}}, 0x0, 0x2a}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r4, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [{0xa7d}, {0x2bd, 0x0, 0x7}]}) r5 = syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000480)=ANY=[@ANYBLOB="120150020000004066241080400001020301090260000301e460030904000000010100000a240107000a0002010209040100000102000009040101010102000009050109000208190e0725010c020000090402000001020000090402010101020000090582090800047fc10725010c08e0001ed93536fc52bf325d495068b20db9b35e9bd08d5169ca0baa0fa7a22c5fd44e8264110df5c5f4b0aa9c872c80d159d60ac55652c2b6aca13925281cfef09bd6cba0dce89565f1c47affb559"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000d081000418e00000004fcff", 0x58}], 0x1) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x1, 0x4800003e, r8, 0x0) ioctl$NBD_SET_SOCK(r8, 0xab00, r2) r10 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007"], 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r11, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a"], 0x94}}, 0x20008841) write$binfmt_misc(r12, &(0x7f0000000000), 0xfffffecc) splice(r11, 0x0, r13, 0x0, 0x8201, 0x4) ioctl$USBDEVFS_DROP_PRIVILEGES(r10, 0x4004551e, &(0x7f0000000000)=0x4) ioctl$USBDEVFS_FREE_STREAMS(r10, 0xc0105500, &(0x7f0000000240)=ANY=[@ANYBLOB="a1"]) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="2000000000000000840000000200000004004100"], 0x38, 0x4008800}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES32=r6], 0x30}}, 0x8040) syz_usb_control_io$uac1(r5, 0x0, 0x0) ioctl$FITRIM(r7, 0xc0185879, &(0x7f0000000240)={0x5, 0x8000000000000000, 0x5}) 3m54.813177467s ago: executing program 4 (id=113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioprio_set$pid(0x1, r0, 0x2007) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = dup3(r4, r3, 0x80000) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000000)=0xd, 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x44) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mkdir(0x0, 0x11c) preadv2(r6, &(0x7f0000000000)=[{&(0x7f0000000080), 0xffffff61}], 0x1, 0x2, 0x2, 0xc) 3m51.857134475s ago: executing program 4 (id=117): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x891c, &(0x7f0000000040)={'ipvlan0\x00', @random="0200ff7fffff"}) bind$rds(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f0000001a40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@ignoreqv}]}}) r4 = syz_usb_connect$lan78xx(0x6, 0x22, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x147, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002a8cbc408e8048968"], 0x0) syz_usb_disconnect(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_ep_write(r4, 0x9, 0x9b, &(0x7f0000000080)="27b6fd900f7f979cb79acec5d538e3e3693edec1ab8f6e942cc385c3bf3416587dc6e9f7ec133d08cac858602d6f51ede1f2696c96a91316abe12522820e400b6982c04d959c8e5b9873faec20836552e3664dec0fe2eb6dfdf6b5c236c689ada57293a12e13a3389a90729996808a083101d5a94e4922ba552e9c9ecb6fd2bb4a57b8ac3a158acae2cee5868e73ecd88c4b816fc5cd5d15248230") ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)={0x20, r0, 0x200, 0x400, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x4}]}, 0x20}}, 0x40) 3m36.701797698s ago: executing program 32 (id=117): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x891c, &(0x7f0000000040)={'ipvlan0\x00', @random="0200ff7fffff"}) bind$rds(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f0000001a40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@ignoreqv}]}}) r4 = syz_usb_connect$lan78xx(0x6, 0x22, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x147, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002a8cbc408e8048968"], 0x0) syz_usb_disconnect(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_ep_write(r4, 0x9, 0x9b, &(0x7f0000000080)="27b6fd900f7f979cb79acec5d538e3e3693edec1ab8f6e942cc385c3bf3416587dc6e9f7ec133d08cac858602d6f51ede1f2696c96a91316abe12522820e400b6982c04d959c8e5b9873faec20836552e3664dec0fe2eb6dfdf6b5c236c689ada57293a12e13a3389a90729996808a083101d5a94e4922ba552e9c9ecb6fd2bb4a57b8ac3a158acae2cee5868e73ecd88c4b816fc5cd5d15248230") ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)={0x20, r0, 0x200, 0x400, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x4}]}, 0x20}}, 0x40) 2m20.33661506s ago: executing program 0 (id=250): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x4, 0x7, 0x8, @vifc_lcl_ifindex, @private=0xa010102}, 0x10) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x5, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x4010) (async) writev(r0, &(0x7f0000001340)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="080b0ab4bf7bf41716cdb2d5ea98ae136eabdddf6ed5a03546c3b879f325a3933b9af275231e2d079ac7fb683bceefba43a4312ca4f1a7992a891ef09f0ac88b52dd4ffbcbc461a9a4d701d971e1613eb76329c37cdb7813bd8c796754a63ce79c837624d3e05e8edc4baa337efcc515a2eafc79", 0x74}, {&(0x7f0000001240)="85d0249a9d97d7e09c8637dc71606c334a1baa837eb334ee40f4b95e511c03dafc3661efc7e7be13d4fb976e3862380d408c723c2699160c5d01ac71bb638578292c5590f2eb3ddb1dbbff18185100d89baf6e377e36bc0a3912d3bcb40ff74d01710a89c7e1da584c17894219c30ded59f46075a98d4c195ab7e8bcbb5189f542f17ae915f88f427daeda22d6a5e5b0507f3d09558c1ae845f0ad98e20513a39fe6a0a29e6243f9f9e24d49e58be3931472e8cb26aebb0cc265636e0d0b55b8044776c500f4782a2068d9b752b16f4d41aef75dcc17e1ef8ac76bf9e210a20ac43dc7f6be5e003d58d1", 0xea}], 0x3) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000001380)=""/243) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000001480)=[{}, {}, {}, {}], 0x4, 0xe93b, &(0x7f00000014c0)={[0x4]}, 0x8) (async) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x3) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000001500)=@overlay={0x1, 0x1, 0x4, 0x1000, 0xffffffff, {0x0, 0xea60}, {0x5, 0x0, 0x3, 0xa, 0x80, 0x0, "06db4ce1"}, 0x5, 0x3, {}, 0xfffffff7, 0x0, r1}) (async) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r2, 0x40106e80, &(0x7f0000001580)={0xfffffffffffffffc}) r4 = syz_open_dev$loop(&(0x7f00000015c0), 0x5, 0x105900) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) (async) r5 = memfd_secret(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000001600)={0x0, 0x8, 0x5}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001a00)={r6, 0x28d0, 0x0, [0x8, 0x1, 0x2, 0x8, 0x8], [0xe, 0xdd2, 0x4d5, 0x0, 0x8, 0x400, 0x3, 0xffffffffffff8001, 0x8, 0x80000001, 0x6, 0x7, 0xfdb, 0x5, 0x9, 0x8001, 0x3, 0x5, 0x6, 0x7fff, 0xb3e5, 0x6, 0x9, 0x7ff, 0x5, 0xd37, 0x81, 0x6, 0x8, 0xfffffffffffff5f6, 0x9, 0x7, 0x6, 0xb, 0xff, 0x8, 0x1000, 0x0, 0x5, 0xc, 0x3, 0x7, 0x903f, 0x0, 0x100, 0x3ff, 0x1, 0x5, 0x2, 0x5, 0x3, 0x81, 0x2ec6, 0x7, 0x3, 0x7, 0x4, 0x0, 0x9, 0x5, 0x8001, 0x1, 0xc284, 0x8000, 0xffffffffffffffff, 0xa, 0x9, 0x6, 0x4, 0xffffffff80000001, 0x5, 0xf, 0x3, 0x100, 0xfffffffffffffff4, 0xf91, 0xd4b, 0x3, 0x2, 0x0, 0x5, 0x0, 0x6, 0x401, 0xd, 0x0, 0x11, 0x9, 0x8, 0x100000001, 0x9, 0x6, 0x0, 0x73d5, 0x7, 0x33, 0xa4, 0xff, 0x1, 0x131, 0x101, 0x2, 0x0, 0x0, 0x1000, 0x3, 0xa, 0x4e94, 0xf, 0x0, 0x1, 0x80000001, 0x1, 0x10001, 0x8, 0x5, 0x3, 0x8000000000000000, 0x2, 0x3, 0xca]}) (async) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000001e40)=""/57) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002f80)={0xffffffffffffffff, 0x0, 0x1000, 0x23, &(0x7f0000001e80)="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", &(0x7f0000002e80)=""/35, 0x3, 0x0, 0x58, 0x27, &(0x7f0000002ec0)="6df978977cf607833d72e6a1a16e88f1999f9e21147a58590c79d1ca1ac569f396a0a59eec15b11c8d0de691c497f6c44b5e7d6087152afc365be8bb842e81fc748327cea3488ee4779d9656bf4211300c07d16295cd13b2", &(0x7f0000002f40)="3f70b0d06b5521bf3f5c0c0e5e9d8d17369d593e205581bcab4066d8eed735c2cbd71f936951ea", 0x5, 0x0, 0x2800}, 0x50) (async) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000003040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000003080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000030c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000003100)=0x0) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f0000003000), 0xc, &(0x7f0000003180)={&(0x7f0000003140)={0x2c, r7, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60000040}, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000003200)={0x7, 0x4e5, 0x0, 0x7ff, 0x5, 0x1, 0x6, 0xfdbf, 0x0}, &(0x7f0000003240)=0x20) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000003280)=@assoc_value={r11, 0x6}, 0x8) sendto$inet(r1, &(0x7f00000032c0)="302c2bf881a156bcf259086a6f8b041f1b9144ad2b7bd57638b71a46f909e69d2f4eaffd875f1565cd28c3c29ecf57882d52183342b51d0485a36572118bc7b9dd242d3c78534639ee4b9dac323aa7a58f9f736dccb2289c2024a7f5067d3727001a196df4df4ff79fca94cadf743157e179876ee4741357cd73fdc4cb03abec37aadac450520f189c603125c2c6832e726be58dc91a28c3a42ece35b84427495953bbf95788a911ed49cf5dec453ca6b354e879a5", 0xb5, 0x20000041, &(0x7f0000003380)={0x2, 0x4e22, @remote}, 0x10) (async) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f00000033c0)={0x10, 0x0, "ce1ca97c3e560ce04dcab121c8d119e0"}) (async) r12 = syz_usb_connect$uac2(0x3, 0xf6, &(0x7f0000003400)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x763, 0x2008, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x3, 0x1, 0x7, 0x60, 0x5, {0x8, 0xb, 0x1, 0x2, 0x1, 0xff, 0x20, 0xff}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x6, 0x3c, 0xa3}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x5, [0x5, 0xa, 0x5, 0x0, 0x5, 0x9]}, @effect_unit={0xb, 0x24, 0x7, 0x1, 0x2, 0x1, [0x2, 0x3]}, @source_unit={0x8, 0x24, 0xa, 0x17, 0x4, 0xe1, 0x5, 0x1}, @multiply_unit={0x7, 0x24, 0xc, 0xd, 0x1, 0x42, 0x1d}, @source_unit={0x8, 0x24, 0xa, 0x7, 0x2, 0x2, 0xb, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8, 0x5, 0x5}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x2, 0x8, 0x2, "0f"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x7fff, 0x1, 0x79}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x7, 0x3e, {0x8, 0x25, 0x1, 0x3, 0x33, 0x0, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x7, 0x96d, 0x6, '%'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x3, 0x7, 0x5, 0x2}, @as_header={0x10, 0x24, 0x1, 0x8, 0x3, 0x2, 0x4, 0x9, 0x2, 0x2}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x2, 0x55, 0xf, "a1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0x7, 0x73, {0x8, 0x25, 0x1, 0x1, 0xc, 0x6, 0xcf9}}}}}}}}]}}, &(0x7f00000037c0)={0xa, &(0x7f0000003500)={0xa, 0x6, 0x300, 0x5, 0x7, 0xe, 0x20, 0x7}, 0xc, &(0x7f0000003540)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x6, 0x5}]}, 0x4, [{0xf0, &(0x7f0000003580)=@string={0xf0, 0x3, "c35bf7f05a597eb568ed9a1204ed94ac3cccf351414ea40e7e05bd0b8fb4c1759bdeb44fdd44498e6b9cec29d10be8ab836ed232dffbaf0855988622b1c09806aab21e22b0a5bc13f40a805d9d27cf86bdff443c93680ddbf849d44420291274223ec28987361d415f15846e31fad1872d82527ba51e7c98c51dd3d73a2cbc22494171b5e0a24043c7ebf8ff45b42e3e323a5ee8bd56ed46e6bac334186aaff4495894420fb07fd59f4ddc6e5fd04e57a6a7a135ed2d38cc11243657f23c2ef0f6a618390813df426e72ad3035a9bc2778d302a7087d097112b2f037d94e0687007142e72f079398a723eafb8ee7"}}, {0x4, &(0x7f0000003680)=@lang_id={0x4, 0x3, 0x446}}, {0x47, &(0x7f00000036c0)=@string={0x47, 0x3, "d8d93b26881f0a71414ded990f78d4a3ef4f545a115fcc537d4e19cd06181c1ef43bed7f7d44e72fc45e4187d4053ed48e85b10ef5bd13cf9a72d2aca7a00583998484b1fb"}}, {0x44, &(0x7f0000003740)=@string={0x44, 0x3, "524ad3053afe8f4dc875cf9d9443d43fa31a9c39999b43853869c07e03b80fd92ba0c7adc38949c2a9ea3aa04ecefc5b08cc48ed48885ee71a6b09ff407f068f9fbd"}}]}) syz_usb_control_io(r12, &(0x7f0000003a40)={0x2c, &(0x7f0000003840)={0x20, 0x4, 0xd, {0xd, 0x30, "250a2c9ab39b9dc71e342d"}}, &(0x7f0000003880)={0x0, 0x3, 0xcc, @string={0xcc, 0x3, "94fd1fb379145fb10c4ed77d72ee0131f4f86f74809fd3f384200762e4eca228d87fddb289384360866c5faa5b3c2b06bcf33f2c00981a01839b18ed9e25bf2ce49ad478f4da6aa904d1626ee52339b8345754f30c2775f966d28d08c21781894e97152d926eab337348a896819536e3c82fa56ec630d5493cb1ad23e15cabc65e9dc88dfa2f9374ed336752220285ed7b40cdfef743abc4aa7b1e144ac35dc3fadfef79db68e370d7e456a615f018fd7bd194e6f31e5c63979b9b0bf6931751ab73d37cc46c97644ca5"}}, &(0x7f0000003980)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000039c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x60, 0x1, 0x6, "ca830695", "2a89fe72"}}, &(0x7f0000003a00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xbc, 0x60, 0x8, 0x7, 0xf, 0xc1d, 0xfbf}}}, &(0x7f0000003f40)={0x84, &(0x7f0000003a80)={0x40, 0x18, 0xf7, "0a7ddda57a705a210672830802693aedf652b4edb5f565a9c7de158bfe7c6ecea7ec3f72b4c65834bdfa01aaf51305129e5d08905e8a5ff35c65a47e95a20f588233c353dc76cc9f0e73c3f6f0504e9a73cd6c20cf9c9b2a1a61e19f957579513adcd6a470edfdc210b3542b5e651dd9118eff6648361a745e764e8129951d959e2bc88cde492210ae06f18f57d0359d36057798e5d924bec47e661ee994084ccf2ca645c072dab1b168a12312b20c8c98f251c1ac9b5cc28d2cf3f746d0f61d79d65bb3dc24aab76ae563bc2ab52b9b4f3502d49084877dd4d277294fcb047350715824b4b6f60a1f2d871ac1ecf03b9bf1088cf0ea43"}, &(0x7f0000003b80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000003bc0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000003c00)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000003c40)={0x20, 0x0, 0x4, {0xe0, 0x4}}, &(0x7f0000003c80)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000003cc0)={0x40, 0x9, 0x1}, &(0x7f0000003d00)={0x40, 0xb, 0x2, "e2c3"}, &(0x7f0000003d40)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000003d80)={0x40, 0x13, 0x6, @random="e48c6190e929"}, &(0x7f0000003dc0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, &(0x7f0000003e00)={0x40, 0x19, 0x2, "d9d7"}, &(0x7f0000003e40)={0x40, 0x1a, 0x2, 0x59}, &(0x7f0000003e80)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000003ec0)={0x40, 0x1e, 0x1, 0x8f}, &(0x7f0000003f00)={0x40, 0x21, 0x1, 0x5}}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000004040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000004000), 0x106, 0x9}}, 0x20) 2m17.309305069s ago: executing program 0 (id=253): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="3d985d1b9858", 0x187c737b6f2748e3) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000000c0)={0xc, r5}) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000100)={0xc}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000180)={0x18, r5, 0x0, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000200)={0xc, r5}) ioctl$IOMMU_VFIO_GET_API_VERSION(r3, 0x3b64) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x3) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x9) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f0000000280)={0x20, 0x0, &(0x7f00000002c0)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000300)={0x18, 0x0, 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000340)={0x18, r5}) 2m16.235556465s ago: executing program 0 (id=256): socket$packet(0x11, 0x2, 0x300) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x90010022}]}, 0x90) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000000100008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000240)={0x1, 0x1, 0x20, "749681adef998ce293459e863f4b9948a3f20baf9c3cce8ec967f3e9e7a3cde7", 0x3234564e}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r6 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x189083) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r6, 0x40045702, &(0x7f0000000040)) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000100)=0x4) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000080)={0x1, 0x82, 0x5, 0x1, 0x1}) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000300)={0x3, 0x1, 0xc4, 0x0, 0x40, 0x9, 0x4, 0x0, 0x7f, 0x4, 0x1, 0x9, 0xf9, 0x3}, 0xe) dup(r10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f00000002c0)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r11 = dup(r10) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r9, @ANYRES16=r6, @ANYRES32=r5, @ANYRES64=r8, @ANYRES8=r11], 0x1c}, 0x1, 0x0, 0x0, 0xa800}, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c) 2m12.966488194s ago: executing program 0 (id=261): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x3, 0x0, {0x0}, {0x0}, 0x6, 0xb664}) rt_sigqueueinfo(r0, 0x9, &(0x7f0000000040)={0x14, 0x7, 0x2}) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f00000000c0), 0x1001) r2 = socket$unix(0x1, 0x7, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002340)={0x0, 0x0}, &(0x7f0000002380)=0xc) statx(0xffffffffffffff9c, &(0x7f00000023c0)='./file0\x00', 0x400, 0x200, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000002580)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="1f8745a7989d9a1a0ad60781a1dd3fcf5f5251bca7ed699919fcec2dcef4c6c8956c4fbea3e973357c9bcd8978aacfb544559458e9a4677252ce634ea42bc09a7d6694bd7fb4d183d7abe5c2132b252d481e36ae971db2b147285bac21cd9dbd2fed62c54268b0191832f7fbe214be22084e7968ec632f2a080e", 0x7a}, {&(0x7f0000000280)="076a78bb15915546a6c05008bca24d9442a9ffc0e34d83f734d29fce11a39a75c0775da136825f", 0x27}], 0x4, &(0x7f0000002500)=[@rights={{0x18, 0x1, 0x1, [r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {r0, r1, r5}}}, @cred={{0x1c, 0x1, 0x2, {r0, r8, r9}}}], 0x58, 0x4000}, 0x2400c081) syz_open_dev$sndmidi(&(0x7f00000025c0), 0x4, 0x10442) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000002600)={0x17789ab6, 0x7ea1}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r7, 0x10, &(0x7f0000002640)={0x7}) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000002680)=0x3, 0x4) r10 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000026c0), 0xc0841, 0x0) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000002840)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002800)={&(0x7f0000002740)={0xbc, 0x9, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x401}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x8}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x83c7}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfffffffd}, @IPSET_ATTR_IFACE={0x14, 0x17, 'wg2\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20008800}, 0x8000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000002880)={0x0, 'veth0_macvtap\x00', {0x3}, 0x2}) ioprio_get$pid(0x3, r6) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000002900), r10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000002a80)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x8004}, 0xc, &(0x7f0000002a40)={&(0x7f0000002940)={0xd4, r11, 0x8, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4040041}, 0x4000000) ioctl$DRM_IOCTL_AGP_ALLOC(r10, 0xc0206434, &(0x7f0000002ac0)={0x100, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r10, 0x40106439, &(0x7f0000002b00)={0xf3d, r12}) sendmsg$SEG6_CMD_SET_TUNSRC(r10, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x38, 0x0, 0xc27fe85e7eecaf7e, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9db7}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20040854) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002c40), 0x4000) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002c80)={0x1, 0x2, 0x8000000000000000, 0x6, 0x200, 0x3}) r13 = pidfd_getfd(r10, r3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r13, 0xc04064a0, &(0x7f0000002dc0)={&(0x7f0000002cc0)=[0x0], &(0x7f0000002d00)=[0x0, 0x0, 0x0], &(0x7f0000002d40)=[0x0, 0x0, 0x0], &(0x7f0000002d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x3, 0x6}) r14 = openat$incfs(r13, &(0x7f0000002e00)='.pending_reads\x00', 0x4a2002, 0xa) prlimit64(r7, 0xd, &(0x7f0000002e40)={0x9, 0x7fff}, &(0x7f0000002e80)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003040)={@map=r14, 0xffffffffffffffff, 0x28, 0x0, 0x0, @void, @value=r13}, 0x20) 2m10.189897427s ago: executing program 0 (id=266): r0 = userfaultfd(0x801) poll(&(0x7f0000000180)=[{r0}], 0x1, 0xe2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000200), 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100feffffff00000000540000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003"], 0x3c}}, 0x4044094) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="150c0000000000002c0012800e000100697036677265746170"], 0x58}}, 0x8000) sendmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000040)=ANY=[@ANYBLOB="05000000030600"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000004001003088979b52d0b30000e3ff0000000100008c"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4040004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x2400c080}, 0x800) 2m7.693839485s ago: executing program 0 (id=269): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80243, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000140)={0x1, 0x0, 0x800000000c, 0xfffffffffffffffd}) fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x0, 0x1, 0xfff, 0x6}) fcntl$lock(r2, 0x26, &(0x7f00000000c0)={0x2, 0x0, 0x100000001, 0x3}) io_uring_setup(0x6fd0, &(0x7f00000002c0)={0x0, 0xbc5c, 0x4000, 0x2, 0x64, 0x0, r2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r5 = eventfd2(0x39, 0x80000) shmctl$IPC_RMID(0x0, 0x204) io_pgetevents(0x0, 0x2, 0x800000000000178, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffffffffffffffd2, 0x0, 0x4f, 0x5865}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_destroy(r4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x79, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c7099e40431957225181000000010902670001040080000904"], 0x0) 1m51.914318391s ago: executing program 33 (id=269): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80243, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000140)={0x1, 0x0, 0x800000000c, 0xfffffffffffffffd}) fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x0, 0x1, 0xfff, 0x6}) fcntl$lock(r2, 0x26, &(0x7f00000000c0)={0x2, 0x0, 0x100000001, 0x3}) io_uring_setup(0x6fd0, &(0x7f00000002c0)={0x0, 0xbc5c, 0x4000, 0x2, 0x64, 0x0, r2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r5 = eventfd2(0x39, 0x80000) shmctl$IPC_RMID(0x0, 0x204) io_pgetevents(0x0, 0x2, 0x800000000000178, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffffffffffffffd2, 0x0, 0x4f, 0x5865}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_destroy(r4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x79, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c7099e40431957225181000000010902670001040080000904"], 0x0) 1m26.86700544s ago: executing program 1 (id=313): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000400)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x2, 0x0, 0x1}, 0x10}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000000) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) syz_open_dev$mouse(&(0x7f0000000080), 0x6, 0x50040) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="b9fe130768045c8c989a14ee88a8657986ddd510e921ff2e03d235c95a9ed6fcd93f99fa4e71a5ba", 0x0, 0xf5d, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x4, 0x2, 0xffff, 0x8, 0x80000001}, 0x14) 1m25.673210419s ago: executing program 1 (id=316): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, 0x0, &(0x7f0000001480)) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={0x0, 0x4e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0xceb0, 0x0, [0x0], [], [0x8, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x28, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x14, 0x18, 0x0, 0x0, @binary="08ac0f0002ac0f0009ac0f0006ac0f00"}]}, 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1m25.601424795s ago: executing program 2 (id=317): syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000340)={0x3, r1, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) close(0x3) io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000500)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendto(0xffffffffffffffff, &(0x7f00000000c0)="1200000012", 0x5, 0x0, 0x0, 0x0) listen(r2, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1m23.982384637s ago: executing program 2 (id=318): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001dc0)=@newtaction={0x14, 0x30, 0x12f}, 0x14}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r1, &(0x7f0000000240)=""/164, 0x131, 0x38) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000080)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="840000001000010429bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000002000005c0012800b00010067656e65766500004c00028005000c0001000000050004"], 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x64, r5, 0x1, 0x70bd28, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}, 0x1, 0x0, 0x0, 0xfcb3ae1e0968c18e}, 0x8006) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x11c, r5, 0x800, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000) sendmmsg$inet6(r2, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) sendto$inet6(r2, 0x0, 0x0, 0x8014, 0x0, 0x0) 1m21.736607908s ago: executing program 1 (id=320): r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0xffffffffffffbfb8, 0x8cc2) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x7, 0x110, 0x0, 0xecb8}}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="80007f0a0a00020001"], 0x34}, 0x1, 0x0, 0x0, 0x80140}, 0x4040004) 1m20.030207464s ago: executing program 2 (id=322): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000040000000005000000180001801400020074756e6c3000000000000000000000000800090001"], 0x34}, 0x1, 0x0, 0x0, 0x2000c800}, 0x44) (fail_nth: 4) 1m19.012375852s ago: executing program 2 (id=324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000001540)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@multicast1, @in=@local, @in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, @in=@local, @in6=@local, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}]}, 0xec}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002800)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000015c0)="c295c5ab29caa299", 0x8}], 0x1, 0x0, 0x0, 0xc0}], 0x1, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0x10000) 1m18.53821576s ago: executing program 1 (id=325): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000400)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x2, 0x0, 0x1}, 0x10}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000000) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) syz_open_dev$mouse(&(0x7f0000000080), 0x6, 0x50040) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="b9fe130768045c8c989a14ee88a8657986ddd510e921ff2e03d235c95a9ed6fcd93f99fa4e71a5ba", 0x0, 0xf5d, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x4, 0x2, 0xffff, 0x8, 0x80000001}, 0x14) 1m15.974103385s ago: executing program 1 (id=327): r0 = socket(0x400000000010, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1e000000000000000b0000000700000000000000", @ANYRES32, @ANYBLOB="fdffffffffffffffb66e0000000000f958d87200", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r3 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) recvmmsg(r4, &(0x7f0000007a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000023, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) write(r5, &(0x7f0000000280)="1c0000001a009b8a3c90f4ae0009042400000000ff02000000000000", 0x1c) recvmmsg$unix(r5, &(0x7f0000006440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81ff}}], 0x11, 0x10002, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x1, @local, 0x72}}, 0x0, 0x7fff, 0x100, 0xffff55f3, 0xc}, &(0x7f0000000840)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000880)={r6, 0x87200000, 0x10}, 0xc) sendmsg$inet6(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000200)="d7c4cd5af5261066625178e375cd643dd70c5db0a4934db4bc9293bd8d67fe1a60068f3e7f5526790471e99a3307da8149d857fd5b583e70ad39b0e6870d9f11768bec369986cb3f28259fc2da639b443c50254d8491af9e1a95447f28ea1fdee7a1653d1605a5c04796a0518ada5df030141e362d418c8a45b7651c34b22406a3577e99", 0x84}, {&(0x7f0000000340)="551952ea93d7640b54c55550fae1025e0af453dab8f1b5ea7f751e02f4349437fa0e9bfb998508e468589feec2b05c7c2b4ca0e5bd6af5ec638bdeaebf447897ee927ad1efd4a057c8861a812cbf59b8d2270b9d0dd6a694e657cbe6b81f715dfb99a6a80b7dc47f4bc115e25ec6d6f4670b2fa19ce91df167b246aae47ef2abf3b2a2ee146479be708e7926d99a27c53e96a8fecf2889017f31067741fe1bbd0ad44ed75f548b906135276ab34a435089321eb92e2a63cae4c9d86b8349a42d99e2f848926a5f1813e0ee92c27f10fa1551ce0d3cad06cd2fa606d52872ac9dad4f", 0xe2}, {&(0x7f0000000440)="52167501d594b30cd367fd2476fb9c0143017e5c1ea87cc055a5d1dd975c06055e9a5354e0db1dbb49c529e6e521d4e2cb10b6b186325c131d16b7772f950eeaf84a9dd3c428f46d2709165c4aea69a596673992a8afb39a9264d9eb81cd318f1d2359bd143e4721c43d1d8f48d0a2b5ce474ec45ef1dc682fb377ea84c20fdfc8c6dfbfed0eafe7a3bb82ad1eb4e7c92ea52a46ae49dcc56150d19f0a962c3f2a25db7ac33333447ac681a404913969659c596a65f080f5c80f006a0b96c9fd767790f65ba4e869fcdbd390b52cde655f69d6ee", 0xd4}, {&(0x7f0000000540)="b807a2f8ff220fbd07ecf58fbedfeb818d29eecfb96f4e391cfcdde4efd7ae4887e88f765d67cab182091243a43b04b779bcc0605a40e35e933c5031d50765d33362fae101956096d0091e82c73575a5d81993167f1748428e12fdabc9e0cd11b6421405510c85e4af456655f201ab80e1a5cdb4d10c741536d51828847429660a72cdca5df2eb3bf480f35769a6c6e5e0db", 0x92}, {&(0x7f0000000600)="a3e7ea6641422afc1492d77054a69336e133637919d99c141aaeecbe6a8d", 0x1e}], 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="480000000000000029000000040000008705000000000000c910fe80000000000000000ce8d22206494dad01c910000000000000000000000000000000000502000300000000200000000000000029000000360000003a000000000000000401226211c5378b813c"], 0x68}, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x2, 0xfff3}, {0xa, 0x7}, {0xffff, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0x76}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x45010}, 0x20) 1m13.309141003s ago: executing program 2 (id=328): prlimit64(0x0, 0x2, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='target '], 0x13) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) 1m13.207164076s ago: executing program 1 (id=329): creat(&(0x7f0000000c00)='./file0\x00', 0x84) eventfd2(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x82) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101101, 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) futex(&(0x7f000000cffc)=0xfffffffc, 0x80000000000b, 0x2, 0x0, &(0x7f0000048000)=0x2000000, 0x2fe) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) (fail_nth: 1) 1m12.462552191s ago: executing program 2 (id=331): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000030) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x2, 0x0, {{@in=@multicast1=0xe0000002, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x300, 0xac8, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x2b}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, {0x2, 0x6, 0x0, 0xffefffff7ffffffe}, 0x2, 0x0, 0x2, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 57.742951448s ago: executing program 34 (id=329): creat(&(0x7f0000000c00)='./file0\x00', 0x84) eventfd2(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x82) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101101, 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) futex(&(0x7f000000cffc)=0xfffffffc, 0x80000000000b, 0x2, 0x0, &(0x7f0000048000)=0x2000000, 0x2fe) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) (fail_nth: 1) 56.102460107s ago: executing program 35 (id=331): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000030) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x2, 0x0, {{@in=@multicast1=0xe0000002, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x300, 0xac8, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x2b}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, {0x2, 0x6, 0x0, 0xffefffff7ffffffe}, 0x2, 0x0, 0x2, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 27.23300681s ago: executing program 3 (id=347): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x0, 0x210, 0x210, 0x120, 0x210, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000000), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x23}, @local, 0x0, 0x0, 'hsr0\x00', 'geneve1\x00', {}, {}, 0x62, 0x1, 0xd}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@cluster={{0x30}, {0xfffffffa, 0x1800, 0xffffffff}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x5, 0x6, [0x3f, 0x19, 0x10, 0x19, 0x2a, 0xa, 0x1, 0x12, 0x18, 0x31, 0x19, 0x1, 0x3f, 0x38, 0x40, 0x1c], 0x3, 0xfffffff7, 0x354}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e21], [0x4e20, 0x4e21], 0x8, 0xc2, 0x20, 0x4}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x8}}}, {{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0xe}, 0xff000000, 0xffffffff, 'veth0_to_batadv\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x29, 0x1, 0x6d}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x7, 0x3}}}, {{@ip={@rand_addr=0x64010101, @empty, 0x0, 0x0, 'pim6reg0\x00', 'pim6reg\x00', {}, {0xff}, 0x73, 0x0, 0x11}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x8, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000c80), 0x800, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000080)={0x8, 0xd6d, 0x8, 0xfb08}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r3}, 0xc) 25.62020027s ago: executing program 3 (id=348): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4000000000, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x8, 0x200}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'default', 0x20, 'user:', '\xd2', 0x20, 0xfff}, 0x2a, 0xfffffffffffffffc) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x25, 0x0, @val=@netfilter={0x0, 0x0, 0x3, 0x1}}, 0x20) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0xc, &(0x7f00000015c0)=0x9, 0x4) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x2}]) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 22.168520264s ago: executing program 3 (id=349): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x4e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0xceb0, 0x0, [0x0], [], [0x8, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) 19.61382743s ago: executing program 3 (id=350): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r3, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/218, 0xda}], 0x1, 0x5, 0x2, 0x32) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@deltclass={0xa8, 0x29, 0x810, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x7, 0x10}, {0x6}, {0x7, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x1a, 0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x240}}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x7, 0x6}}, @tclass_kind_options=@c_qfq={{0x8}, {0x3c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x9}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x7ff}, @TCA_QFQ_LMAX={0x8, 0x2, 0x81}, @TCA_QFQ_LMAX={0x8, 0x2, 0x400}, @TCA_QFQ_LMAX={0x8, 0x2, 0x3}, @TCA_QFQ_LMAX={0x8, 0x2, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x40}]}}]}, 0xa8}}, 0x20000040) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {}, {}, {0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x1}, {0x0, 0x0, 0x1}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x5, 0x0, 0xdc7a}, '%AC'}}]}]}]}}]}, 0x64}}, 0x8050) 15.975315117s ago: executing program 3 (id=351): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x8, 0x0, @val=@tcx}, 0x1c) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r1, 0x4) 15.585658704s ago: executing program 3 (id=352): r0 = socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0xe0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000380012800b00010067656e6576650000280002"], 0x58}, 0x1, 0x0, 0x0, 0xc004}, 0x4804) 0s ago: executing program 36 (id=352): r0 = socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0xe0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000380012800b00010067656e6576650000280002"], 0x58}, 0x1, 0x0, 0x0, 0xc004}, 0x4804) kernel console output (not intermixed with test programs): .513172][ T5796] usb 4-1: SerialNumber: syz [ 134.094404][ T5896] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 134.203682][ T5899] usb 1-1: USB disconnect, device number 7 [ 134.254385][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 134.321396][ T5896] usb 3-1: config 1 interface 0 has no altsetting 0 [ 134.423223][ T5896] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.40 [ 134.423257][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.423276][ T5896] usb 3-1: Product: syz [ 134.423289][ T5896] usb 3-1: Manufacturer: syz [ 134.423302][ T5896] usb 3-1: SerialNumber: syz [ 134.523229][ T6232] FAULT_INJECTION: forcing a failure. [ 134.523229][ T6232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.523268][ T6232] CPU: 0 UID: 0 PID: 6232 Comm: syz.1.96 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 134.523288][ T6232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 134.523299][ T6232] Call Trace: [ 134.523305][ T6232] [ 134.523313][ T6232] dump_stack_lvl+0xe8/0x150 [ 134.523346][ T6232] should_fail_ex+0x46b/0x600 [ 134.523376][ T6232] _copy_from_iter+0x1d3/0x1670 [ 134.523410][ T6232] ? trace_kmem_cache_alloc+0x29/0xe0 [ 134.523434][ T6232] ? __alloc_skb+0x27d/0x7d0 [ 134.523453][ T6232] ? __pfx__copy_from_iter+0x10/0x10 [ 134.523476][ T6232] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 134.523498][ T6232] ? __alloc_skb+0x27d/0x7d0 [ 134.523520][ T6232] ? netlink_sendmsg+0x650/0xb40 [ 134.523537][ T6232] ? skb_put+0x11b/0x210 [ 134.523571][ T6232] netlink_sendmsg+0x6c0/0xb40 [ 134.523600][ T6232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.523621][ T6232] ? unwind_get_return_address+0x4d/0x90 [ 134.523646][ T6232] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 134.523678][ T6232] ____sys_sendmsg+0x94c/0x9c0 [ 134.523709][ T6232] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.523741][ T6232] ? import_iovec+0x73/0xa0 [ 134.523765][ T6232] ___sys_sendmsg+0x2a5/0x360 [ 134.523789][ T6232] ? __lock_acquire+0x6b5/0x2cf0 [ 134.523815][ T6232] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.523877][ T6232] ? __fget_files+0x2a/0x420 [ 134.523899][ T6232] ? __fget_files+0x3a6/0x420 [ 134.523932][ T6232] __x64_sys_sendmsg+0x1c3/0x2a0 [ 134.523958][ T6232] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 134.523994][ T6232] ? __pfx_ksys_write+0x10/0x10 [ 134.524037][ T6232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.524060][ T6232] do_syscall_64+0x15f/0xf80 [ 134.524088][ T6232] ? trace_irq_disable+0x3b/0x140 [ 134.524117][ T6232] ? clear_bhb_loop+0x40/0x90 [ 134.524143][ T6232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.524163][ T6232] RIP: 0033:0x7f658526c819 [ 134.524197][ T6232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.524215][ T6232] RSP: 002b:00007f65834a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.524238][ T6232] RAX: ffffffffffffffda RBX: 00007f65854e6090 RCX: 00007f658526c819 [ 134.524254][ T6232] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 134.524267][ T6232] RBP: 00007f65834a5090 R08: 0000000000000000 R09: 0000000000000000 [ 134.524280][ T6232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.524293][ T6232] R13: 00007f65854e6128 R14: 00007f65854e6090 R15: 00007ffeff0dff48 [ 134.524326][ T6232] [ 135.327340][ T6235] FAULT_INJECTION: forcing a failure. [ 135.327340][ T6235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.327379][ T6235] CPU: 0 UID: 0 PID: 6235 Comm: syz.1.98 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 135.327402][ T6235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 135.327414][ T6235] Call Trace: [ 135.327422][ T6235] [ 135.327431][ T6235] dump_stack_lvl+0xe8/0x150 [ 135.327471][ T6235] should_fail_ex+0x46b/0x600 [ 135.327509][ T6235] _copy_from_user+0x2d/0xb0 [ 135.327531][ T6235] ___sys_sendmsg+0x1c6/0x360 [ 135.327558][ T6235] ? __lock_acquire+0x6b5/0x2cf0 [ 135.327586][ T6235] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.327653][ T6235] ? __fget_files+0x2a/0x420 [ 135.327677][ T6235] ? __fget_files+0x3a6/0x420 [ 135.327712][ T6235] __x64_sys_sendmsg+0x1c3/0x2a0 [ 135.327750][ T6235] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 135.327797][ T6235] ? __pfx_ksys_write+0x10/0x10 [ 135.327836][ T6235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.327860][ T6235] do_syscall_64+0x15f/0xf80 [ 135.327889][ T6235] ? trace_irq_disable+0x3b/0x140 [ 135.327923][ T6235] ? clear_bhb_loop+0x40/0x90 [ 135.327955][ T6235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.327974][ T6235] RIP: 0033:0x7f658526c819 [ 135.327994][ T6235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.328012][ T6235] RSP: 002b:00007f65834c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.328035][ T6235] RAX: ffffffffffffffda RBX: 00007f65854e5fa0 RCX: 00007f658526c819 [ 135.328050][ T6235] RDX: 00000000000480c5 RSI: 0000200000000200 RDI: 0000000000000004 [ 135.328065][ T6235] RBP: 00007f65834c6090 R08: 0000000000000000 R09: 0000000000000000 [ 135.328077][ T6235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.328090][ T6235] R13: 00007f65854e6038 R14: 00007f65854e5fa0 R15: 00007ffeff0dff48 [ 135.328124][ T6235] [ 135.775924][ T5796] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 136.548477][ T5796] usb 4-1: USB disconnect, device number 3 [ 136.957218][ T6250] capability: warning: `syz.4.101' uses deprecated v2 capabilities in a way that may be insecure [ 137.046501][ T5896] usbhid 3-1:1.0: can't add hid device: -71 [ 137.046719][ T5896] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 137.921994][ T5896] usb 3-1: USB disconnect, device number 2 [ 138.354165][ T6015] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 138.517557][ T6015] usb 5-1: unable to get BOS descriptor or descriptor too short [ 138.820434][ T6015] usb 5-1: string descriptor 0 read error: -22 [ 138.820600][ T6015] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 138.820625][ T6015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.127463][ T6262] FAULT_INJECTION: forcing a failure. [ 139.127463][ T6262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.127500][ T6262] CPU: 0 UID: 0 PID: 6262 Comm: syz.3.104 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 139.127524][ T6262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 139.127536][ T6262] Call Trace: [ 139.127545][ T6262] [ 139.127553][ T6262] dump_stack_lvl+0xe8/0x150 [ 139.127592][ T6262] should_fail_ex+0x46b/0x600 [ 139.127629][ T6262] _copy_to_user+0x31/0xb0 [ 139.127655][ T6262] simple_read_from_buffer+0xe1/0x170 [ 139.127685][ T6262] proc_fail_nth_read+0x1be/0x230 [ 139.127713][ T6262] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.127752][ T6262] ? rw_verify_area+0x2ac/0x4e0 [ 139.127781][ T6262] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.127814][ T6262] vfs_read+0x212/0xa80 [ 139.127852][ T6262] ? __pfx_vfs_read+0x10/0x10 [ 139.127883][ T6262] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 139.127914][ T6262] ? lockdep_hardirqs_on+0x7a/0x110 [ 139.127944][ T6262] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 139.127974][ T6262] ? mutex_lock_nested+0x152/0x1d0 [ 139.127997][ T6262] ? fdget_pos+0x252/0x320 [ 139.128033][ T6262] ksys_read+0x156/0x270 [ 139.128066][ T6262] ? __pfx_ksys_read+0x10/0x10 [ 139.128105][ T6262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.128129][ T6262] do_syscall_64+0x15f/0xf80 [ 139.128159][ T6262] ? trace_irq_disable+0x3b/0x140 [ 139.128192][ T6262] ? clear_bhb_loop+0x40/0x90 [ 139.128217][ T6262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.128237][ T6262] RIP: 0033:0x7f9b9778d04e [ 139.128258][ T6262] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 139.128275][ T6262] RSP: 002b:00007f9b95a1dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 139.128297][ T6262] RAX: ffffffffffffffda RBX: 00007f9b95a1e6c0 RCX: 00007f9b9778d04e [ 139.128313][ T6262] RDX: 000000000000000f RSI: 00007f9b95a1e0a0 RDI: 0000000000000004 [ 139.128326][ T6262] RBP: 00007f9b95a1e090 R08: 0000000000000000 R09: 0000000000000000 [ 139.128340][ T6262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.128352][ T6262] R13: 00007f9b97a46038 R14: 00007f9b97a45fa0 R15: 00007ffc10bd1fd8 [ 139.128388][ T6262] [ 139.931765][ T6268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.973321][ T6268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.198644][ T6268] usb usb9: usbfs: process 6268 (syz.4.101) did not claim interface 0 before use [ 140.404015][ T5820] Bluetooth: hci2: unexpected event 0x04 length: 13 > 10 [ 140.404125][ T5820] Bluetooth: unknown link type 10 [ 140.404189][ T5820] Bluetooth: hci2: connection err: -111 [ 141.445069][ T6280] netlink: 'syz.3.108': attribute type 1 has an invalid length. [ 141.942381][ T6286] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 142.048245][ T6015] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 142.158835][ T6015] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 142.417934][ T6015] usb 5-1: USB disconnect, device number 2 [ 143.980072][ T5820] Bluetooth: hci1: unexpected event 0x04 length: 13 > 10 [ 143.980105][ T5820] Bluetooth: unknown link type 10 [ 143.980134][ T5820] Bluetooth: hci1: connection err: -111 [ 145.414263][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 145.491213][ T6258] udevd[6258]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.697356][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 251, using maximum allowed: 30 [ 145.697408][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 251 [ 145.697452][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 145.697475][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.078354][ T9] usb 2-1: config 0 descriptor?? [ 146.141551][ T6298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.115'. [ 146.161358][ T6298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.115'. [ 146.194501][ T6298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.115'. [ 146.200048][ T6298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.115'. [ 146.201454][ T6298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.115'. [ 146.203372][ T6298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.115'. [ 146.279399][ T6298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.115'. [ 146.297230][ T6298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.115'. [ 146.316171][ T6298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.115'. [ 146.320909][ T6298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.115'. [ 146.428608][ T5796] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 146.575148][ T9] usb 2-1: string descriptor 0 read error: -71 [ 146.589656][ T5796] usb 5-1: Using ep0 maxpacket: 8 [ 146.622726][ T9] ldusb 2-1:0.0: Interrupt in endpoint not found [ 146.632407][ T5796] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 0.00 [ 146.632464][ T5796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.632485][ T5796] usb 5-1: Product: syz [ 146.632500][ T5796] usb 5-1: Manufacturer: syz [ 146.632514][ T5796] usb 5-1: SerialNumber: syz [ 146.679787][ T9] usb 2-1: USB disconnect, device number 3 [ 146.735729][ T6298] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.783193][ T5796] kalmia 5-1:1.0 (unnamed net_device) (uninitialized): Error sending init packet. Status -71 [ 147.783537][ T5796] kalmia 5-1:1.0: probe with driver kalmia failed with error -71 [ 148.134281][ T5796] usb 5-1: USB disconnect, device number 3 [ 148.571889][ T6330] mmap: syz.0.123 (6330) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 149.838048][ T6340] Zero length message leads to an empty skb [ 153.024528][ T6368] FAULT_INJECTION: forcing a failure. [ 153.024528][ T6368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.024577][ T6368] CPU: 0 UID: 0 PID: 6368 Comm: syz.0.132 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 153.024602][ T6368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 153.024614][ T6368] Call Trace: [ 153.024623][ T6368] [ 153.024632][ T6368] dump_stack_lvl+0xe8/0x150 [ 153.024673][ T6368] should_fail_ex+0x46b/0x600 [ 153.024711][ T6368] _copy_to_user+0x31/0xb0 [ 153.024737][ T6368] simple_read_from_buffer+0xe1/0x170 [ 153.024768][ T6368] proc_fail_nth_read+0x1be/0x230 [ 153.024798][ T6368] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.024827][ T6368] ? rw_verify_area+0x2ac/0x4e0 [ 153.024853][ T6368] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.024880][ T6368] vfs_read+0x212/0xa80 [ 153.024918][ T6368] ? __pfx_vfs_read+0x10/0x10 [ 153.024950][ T6368] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 153.024981][ T6368] ? lockdep_hardirqs_on+0x7a/0x110 [ 153.025012][ T6368] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 153.025042][ T6368] ? mutex_lock_nested+0x152/0x1d0 [ 153.025065][ T6368] ? fdget_pos+0x252/0x320 [ 153.025099][ T6368] ksys_read+0x156/0x270 [ 153.025131][ T6368] ? __pfx_ksys_read+0x10/0x10 [ 153.025162][ T6368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.025184][ T6368] do_syscall_64+0x15f/0xf80 [ 153.025219][ T6368] ? trace_irq_disable+0x3b/0x140 [ 153.025252][ T6368] ? clear_bhb_loop+0x40/0x90 [ 153.025279][ T6368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.025300][ T6368] RIP: 0033:0x7f9648e6d04e [ 153.025327][ T6368] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 153.025344][ T6368] RSP: 002b:00007f9647105fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 153.025367][ T6368] RAX: ffffffffffffffda RBX: 00007f96471066c0 RCX: 00007f9648e6d04e [ 153.025383][ T6368] RDX: 000000000000000f RSI: 00007f96471060a0 RDI: 0000000000000004 [ 153.025396][ T6368] RBP: 00007f9647106090 R08: 0000000000000000 R09: 0000000000000000 [ 153.025409][ T6368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.025422][ T6368] R13: 00007f9649126038 R14: 00007f9649125fa0 R15: 00007ffd4e34e268 [ 153.025457][ T6368] [ 154.388419][ T6388] FAULT_INJECTION: forcing a failure. [ 154.388419][ T6388] name failslab, interval 1, probability 0, space 0, times 0 [ 154.388458][ T6388] CPU: 0 UID: 0 PID: 6388 Comm: syz.3.139 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 154.388483][ T6388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 154.388495][ T6388] Call Trace: [ 154.388503][ T6388] [ 154.388512][ T6388] dump_stack_lvl+0xe8/0x150 [ 154.388552][ T6388] should_fail_ex+0x46b/0x600 [ 154.388590][ T6388] should_failslab+0xa8/0x100 [ 154.388623][ T6388] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 154.388654][ T6388] ? preload_this_cpu_lock+0x49/0xc0 [ 154.388694][ T6388] preload_this_cpu_lock+0x49/0xc0 [ 154.388729][ T6388] alloc_vmap_area+0x3dc/0x1480 [ 154.388773][ T6388] ? __pfx_alloc_vmap_area+0x10/0x10 [ 154.388802][ T6388] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 154.388832][ T6388] ? __get_vm_area_node+0x171/0x350 [ 154.388859][ T6388] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 154.388882][ T6388] __get_vm_area_node+0x226/0x350 [ 154.388917][ T6388] __vmalloc_node_range_noprof+0x36a/0x1750 [ 154.388948][ T6388] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 154.388989][ T6388] ? is_bpf_text_address+0x26/0x2b0 [ 154.389015][ T6388] ? kernel_text_address+0xa5/0xe0 [ 154.389044][ T6388] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 154.389087][ T6388] ? __lock_acquire+0x6b5/0x2cf0 [ 154.389117][ T6388] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 154.389137][ T6388] __vmalloc_noprof+0xd2/0x120 [ 154.389166][ T6388] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 154.389189][ T6388] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 154.389216][ T6388] bpf_prog_alloc+0x3c/0x1a0 [ 154.389240][ T6388] bpf_prog_load+0x7ba/0x1ae0 [ 154.389290][ T6388] ? __pfx_bpf_prog_load+0x10/0x10 [ 154.389311][ T6388] ? __might_fault+0xaf/0x130 [ 154.389361][ T6388] ? bpf_lsm_bpf+0x9/0x20 [ 154.389380][ T6388] ? security_bpf+0x7e/0x2d0 [ 154.389411][ T6388] __sys_bpf+0x618/0x950 [ 154.389447][ T6388] ? __pfx___sys_bpf+0x10/0x10 [ 154.389477][ T6388] ? rt_mutex_slowunlock+0x1cb/0x300 [ 154.389520][ T6388] ? ksys_write+0x248/0x270 [ 154.389551][ T6388] ? __pfx_ksys_write+0x10/0x10 [ 154.389584][ T6388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.389608][ T6388] __x64_sys_bpf+0x7c/0x90 [ 154.389639][ T6388] do_syscall_64+0x15f/0xf80 [ 154.389668][ T6388] ? trace_irq_disable+0x3b/0x140 [ 154.389701][ T6388] ? clear_bhb_loop+0x40/0x90 [ 154.389728][ T6388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.389749][ T6388] RIP: 0033:0x7f9b977cc819 [ 154.389768][ T6388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.389786][ T6388] RSP: 002b:00007f9b95a1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 154.389810][ T6388] RAX: ffffffffffffffda RBX: 00007f9b97a45fa0 RCX: 00007f9b977cc819 [ 154.389826][ T6388] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 154.389840][ T6388] RBP: 00007f9b95a1e090 R08: 0000000000000000 R09: 0000000000000000 [ 154.389853][ T6388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.389866][ T6388] R13: 00007f9b97a46038 R14: 00007f9b97a45fa0 R15: 00007ffc10bd1fd8 [ 154.389899][ T6388] [ 156.010961][ T6402] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 156.065345][ T5899] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 156.379618][ T5899] usb 2-1: not running at top speed; connect to a high speed hub [ 156.382912][ T5899] usb 2-1: config 7 has an invalid interface number: 8 but max is 2 [ 156.382943][ T5899] usb 2-1: config 7 has an invalid interface number: 10 but max is 2 [ 156.382966][ T5899] usb 2-1: config 7 has an invalid interface number: 163 but max is 2 [ 156.382986][ T5899] usb 2-1: config 7 has an invalid interface number: 79 but max is 2 [ 156.383006][ T5899] usb 2-1: config 7 has 4 interfaces, different from the descriptor's value: 3 [ 156.383126][ T5899] usb 2-1: config 7 has no interface number 0 [ 156.383144][ T5899] usb 2-1: config 7 has no interface number 1 [ 156.383160][ T5899] usb 2-1: config 7 has no interface number 2 [ 156.383176][ T5899] usb 2-1: config 7 has no interface number 3 [ 156.383287][ T5899] usb 2-1: config 7 interface 8 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 156.383312][ T5899] usb 2-1: config 7 interface 8 altsetting 3 endpoint 0x3 has invalid maxpacket 52742, setting to 64 [ 156.383340][ T5899] usb 2-1: config 7 interface 8 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 156.383362][ T5899] usb 2-1: config 7 interface 8 altsetting 3 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 156.383388][ T5899] usb 2-1: config 7 interface 8 altsetting 3 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 156.383411][ T5899] usb 2-1: config 7 interface 8 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 156.383432][ T5899] usb 2-1: config 7 interface 8 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 156.383454][ T5899] usb 2-1: config 7 interface 8 altsetting 3 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 156.383479][ T5899] usb 2-1: config 7 interface 8 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 156.383519][ T5899] usb 2-1: config 7 interface 10 altsetting 12 endpoint 0x8 has invalid wMaxPacketSize 0 [ 156.383542][ T5899] usb 2-1: config 7 interface 10 altsetting 12 has a duplicate endpoint with address 0xB, skipping [ 156.383565][ T5899] usb 2-1: config 7 interface 10 altsetting 12 has a duplicate endpoint with address 0x9, skipping [ 156.383588][ T5899] usb 2-1: config 7 interface 10 altsetting 12 has a duplicate endpoint with address 0x9, skipping [ 156.383610][ T5899] usb 2-1: config 7 interface 10 altsetting 12 has a duplicate endpoint with address 0xD, skipping [ 156.383634][ T5899] usb 2-1: config 7 interface 10 altsetting 12 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 156.383661][ T5899] usb 2-1: config 7 interface 10 altsetting 12 has a duplicate endpoint with address 0xB, skipping [ 156.383683][ T5899] usb 2-1: config 7 interface 10 altsetting 12 has a duplicate endpoint with address 0xD, skipping [ 156.383720][ T5899] usb 2-1: config 7 interface 163 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 156.383741][ T5899] usb 2-1: config 7 interface 163 altsetting 127 has a duplicate endpoint with address 0x8, skipping [ 156.383765][ T5899] usb 2-1: config 7 interface 163 altsetting 127 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 156.383796][ T5899] usb 2-1: config 7 interface 163 altsetting 127 has a duplicate endpoint with address 0x6, skipping [ 156.383818][ T5899] usb 2-1: config 7 interface 163 altsetting 127 has 6 endpoint descriptors, different from the interface descriptor's value: 10 [ 156.383845][ T5899] usb 2-1: too many endpoints for config 7 interface 79 altsetting 115: 46, using maximum allowed: 30 [ 156.383885][ T5899] usb 2-1: config 7 interface 79 altsetting 115 has a duplicate endpoint with address 0x6, skipping [ 156.383908][ T5899] usb 2-1: config 7 interface 79 altsetting 115 has a duplicate endpoint with address 0x2, skipping [ 156.383930][ T5899] usb 2-1: config 7 interface 79 altsetting 115 has a duplicate endpoint with address 0x3, skipping [ 156.453177][ T5899] usb 2-1: config 7 interface 79 altsetting 115 has an endpoint descriptor with address 0x3F, changing to 0xF [ 156.453214][ T5899] usb 2-1: config 7 interface 79 altsetting 115 has a duplicate endpoint with address 0xF, skipping [ 156.453236][ T5899] usb 2-1: config 7 interface 79 altsetting 115 has 4 endpoint descriptors, different from the interface descriptor's value: 46 [ 156.453274][ T5899] usb 2-1: config 7 interface 8 has no altsetting 0 [ 156.453292][ T5899] usb 2-1: config 7 interface 10 has no altsetting 0 [ 156.453310][ T5899] usb 2-1: config 7 interface 163 has no altsetting 0 [ 156.453328][ T5899] usb 2-1: config 7 interface 79 has no altsetting 0 [ 156.945104][ T5899] usb 2-1: New USB device found, idVendor=0846, idProduct=68a2, bcdDevice= 2.18 [ 156.945139][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.945161][ T5899] usb 2-1: Product: 㐊 [ 156.945176][ T5899] usb 2-1: Manufacturer: ᐌ [ 156.945191][ T5899] usb 2-1: SerialNumber: 헱怒鏶Ѝ輡걀瀴蝓᳾돮黻䋳ꁸ榉窎胕䤂泇糶췖瞵ᯙᑓ㙴婭ᤌ쌵㡱଩脚 [ 157.053942][ T6399] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 157.954210][ T5891] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 158.154286][ T5891] usb 4-1: device descriptor read/64, error -71 [ 158.732444][ T6414] trusted_key: encrypted_key: master key parameter is missing [ 159.564175][ T5891] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 159.674354][ T5899] usb 2-1: USB disconnect, device number 4 [ 159.893118][ T5891] usb 4-1: device descriptor read/64, error -71 [ 159.995411][ T5891] usb usb4-port1: attempt power cycle [ 161.010921][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 161.046535][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 161.048156][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 161.053321][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 161.111436][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 161.986301][ T59] Bluetooth: hci4: connection err: -111 [ 162.197451][ T59] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 162.197479][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 162.197506][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 162.197519][ T59] Workqueue: hci2 hci_rx_work [ 162.197557][ T59] Call Trace: [ 162.197564][ T59] [ 162.197574][ T59] dump_stack_lvl+0xe8/0x150 [ 162.197610][ T59] sysfs_create_dir_ns+0x271/0x2a0 [ 162.197633][ T59] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 162.197659][ T59] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 162.197685][ T59] ? rt_spin_unlock+0x160/0x200 [ 162.197709][ T59] kobject_add_internal+0x631/0xd10 [ 162.197739][ T59] kobject_add+0x163/0x240 [ 162.197775][ T59] ? __pfx_kobject_add+0x10/0x10 [ 162.197812][ T59] ? get_device_parent+0x370/0x3a0 [ 162.197848][ T59] device_add+0x408/0xb80 [ 162.197882][ T59] hci_conn_add_sysfs+0xd5/0x210 [ 162.197914][ T59] le_conn_complete_evt+0x10e6/0x16b0 [ 162.197953][ T59] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 162.197978][ T59] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 162.198005][ T59] ? lockdep_hardirqs_on+0x7a/0x110 [ 162.198034][ T59] ? skb_pull_data+0xfb/0x200 [ 162.198067][ T59] hci_le_conn_complete_evt+0x187/0x470 [ 162.198099][ T59] hci_event_packet+0x659/0xef0 [ 162.198140][ T59] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 162.198164][ T59] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 162.198185][ T59] ? __pfx_hci_event_packet+0x10/0x10 [ 162.198213][ T59] ? rt_spin_unlock+0x14f/0x200 [ 162.198249][ T59] ? hci_send_to_monitor+0xe2/0x590 [ 162.198277][ T59] hci_rx_work+0x3ee/0x1040 [ 162.198319][ T59] ? process_scheduled_works+0xa70/0x1860 [ 162.198350][ T59] process_scheduled_works+0xb5d/0x1860 [ 162.198414][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 162.198459][ T59] ? assign_work+0x3d5/0x5e0 [ 162.198492][ T59] worker_thread+0xa53/0xfc0 [ 162.198552][ T59] kthread+0x388/0x470 [ 162.198575][ T59] ? __pfx_worker_thread+0x10/0x10 [ 162.198602][ T59] ? __pfx_kthread+0x10/0x10 [ 162.198624][ T59] ret_from_fork+0x514/0xb70 [ 162.198658][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 162.198689][ T59] ? __switch_to+0xc79/0x1410 [ 162.198718][ T59] ? __pfx_kthread+0x10/0x10 [ 162.198741][ T59] ret_from_fork_asm+0x1a/0x30 [ 162.198781][ T59] [ 162.198845][ T59] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 162.198889][ T59] Bluetooth: hci2: failed to register connection device [ 163.318277][ T6447] overlayfs: missing 'lowerdir' [ 163.414204][ T5820] Bluetooth: hci5: command tx timeout [ 165.494523][ T5820] Bluetooth: hci5: command tx timeout [ 165.697977][ T6429] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 165.725236][ T6429] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 167.058908][ T6429] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 167.574177][ T5820] Bluetooth: hci5: command tx timeout [ 167.657507][ T6429] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 167.657671][ T6429] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 167.734421][ T5820] Bluetooth: hci4: command 0x0c1a tx timeout [ 168.283753][ T6429] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 168.440796][ T6429] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 168.702880][ T6429] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 168.703054][ T6429] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 168.860420][ T6429] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 168.932600][ T6429] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 168.932773][ T6429] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 169.044191][ T6429] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 169.654196][ T5820] Bluetooth: hci5: command tx timeout [ 169.734198][ T5820] Bluetooth: hci2: command 0x0c1a tx timeout [ 169.817407][ T5820] Bluetooth: hci4: command 0x0c1a tx timeout [ 169.843936][ T6429] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 169.854378][ T6429] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 170.721176][ T6429] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 170.775714][ T5820] Bluetooth: hci1: command 0x0c1a tx timeout [ 170.934488][ T5820] Bluetooth: hci0: command 0x0c1a tx timeout [ 171.144102][ T6429] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 171.144248][ T6429] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 171.310491][ T6429] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 171.820410][ T5820] Bluetooth: hci2: command 0x0c1a tx timeout [ 171.905228][ T5820] Bluetooth: hci3: command 0x0c1a tx timeout [ 171.905237][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 172.456572][ T6460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.457089][ T6460] batadv_slave_0: entered promiscuous mode [ 172.457113][ T6460] batadv_slave_0: entered allmulticast mode [ 172.864137][ T5820] Bluetooth: hci1: command 0x0c1a tx timeout [ 173.203651][ T5820] Bluetooth: hci0: command 0x0c1a tx timeout [ 174.132792][ T5820] Bluetooth: hci5: command 0x0c1a tx timeout [ 174.136777][ T59] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.136888][ T5820] Bluetooth: hci2: command 0x0c1a tx timeout [ 174.201013][ T6423] chnl_net:caif_netlink_parms(): no params data found [ 174.939059][ T59] Bluetooth: hci1: command 0x0c1a tx timeout [ 175.086309][ T59] Bluetooth: hci0: unexpected event 0x04 length: 13 > 10 [ 175.086341][ T59] Bluetooth: unknown link type 10 [ 175.086406][ T59] Bluetooth: hci0: connection err: -111 [ 175.256238][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 176.135281][ T59] Bluetooth: hci5: command 0x0c1a tx timeout [ 176.214820][ T5820] Bluetooth: hci3: command 0x0c1a tx timeout [ 176.214879][ T59] Bluetooth: hci2: command 0x0c1a tx timeout [ 178.214228][ T59] Bluetooth: hci5: command 0x0c1a tx timeout [ 179.555243][ T6423] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.555398][ T6423] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.555691][ T6423] bridge_slave_0: entered allmulticast mode [ 179.584841][ T6423] bridge_slave_0: entered promiscuous mode [ 180.002064][ T5899] kernel read not supported for file /vga_arbiter (pid: 5899 comm: kworker/0:6) [ 180.169479][ T6423] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.169645][ T6423] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.169902][ T6423] bridge_slave_1: entered allmulticast mode [ 180.276529][ T6423] bridge_slave_1: entered promiscuous mode [ 180.335179][ T5820] Bluetooth: hci5: command 0x0c1a tx timeout [ 180.648328][ T5820] Bluetooth: hci2: unexpected event 0x04 length: 13 > 10 [ 180.648360][ T5820] Bluetooth: unknown link type 10 [ 180.648387][ T5820] Bluetooth: hci2: connection err: -111 [ 181.480622][ T6423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.705361][ T6423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.004188][ T5891] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 182.396660][ T5891] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 182.396709][ T5891] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 182.396753][ T5891] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 182.396781][ T5891] usb 1-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 182.396810][ T5891] usb 1-1: config 168 interface 0 has no altsetting 0 [ 182.398272][ T5891] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 182.398311][ T5891] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 182.398400][ T5891] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 182.398428][ T5891] usb 1-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 182.398470][ T5891] usb 1-1: config 168 interface 0 has no altsetting 0 [ 182.399907][ T5891] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 182.399946][ T5891] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 182.399996][ T5891] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 182.400024][ T5891] usb 1-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 182.400052][ T5891] usb 1-1: config 168 interface 0 has no altsetting 0 [ 183.183670][ T5891] usb 1-1: string descriptor 0 read error: -22 [ 183.183830][ T5891] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 183.183857][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.381811][ T5891] adutux 1-1:168.0: interrupt endpoints not found [ 183.936570][ T6550] FAULT_INJECTION: forcing a failure. [ 183.936570][ T6550] name failslab, interval 1, probability 0, space 0, times 0 [ 183.936607][ T6550] CPU: 1 UID: 0 PID: 6550 Comm: syz.2.182 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 183.936631][ T6550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 183.936644][ T6550] Call Trace: [ 183.936652][ T6550] [ 183.936661][ T6550] dump_stack_lvl+0xe8/0x150 [ 183.936702][ T6550] should_fail_ex+0x46b/0x600 [ 183.936739][ T6550] should_failslab+0xa8/0x100 [ 183.936773][ T6550] kmem_cache_alloc_noprof+0x87/0x680 [ 183.936802][ T6550] ? security_inode_alloc+0x39/0x310 [ 183.936840][ T6550] security_inode_alloc+0x39/0x310 [ 183.936874][ T6550] inode_init_always_gfp+0x99a/0xd50 [ 183.936904][ T6550] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 183.936925][ T6550] alloc_inode+0x82/0x1b0 [ 183.936949][ T6550] new_inode+0x22/0x170 [ 183.936971][ T6550] ? resv_map_alloc+0x200/0x2e0 [ 183.937001][ T6550] hugetlbfs_get_inode+0x78/0x650 [ 183.937049][ T6550] hugetlb_file_setup+0x21d/0x630 [ 183.937084][ T6550] ksys_mmap_pgoff+0x22e/0x720 [ 183.937114][ T6550] ? __x64_sys_mmap+0x7f/0x140 [ 183.937135][ T6550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.937159][ T6550] do_syscall_64+0x15f/0xf80 [ 183.937198][ T6550] ? trace_irq_disable+0x3b/0x140 [ 183.937231][ T6550] ? clear_bhb_loop+0x40/0x90 [ 183.937257][ T6550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.937279][ T6550] RIP: 0033:0x7f5163fec819 [ 183.937299][ T6550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.937316][ T6550] RSP: 002b:00007f5162225028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 183.937340][ T6550] RAX: ffffffffffffffda RBX: 00007f5164266090 RCX: 00007f5163fec819 [ 183.937356][ T6550] RDX: 0000000000000001 RSI: 0000000000c00000 RDI: 0000200000000000 [ 183.937370][ T6550] RBP: 00007f5162225090 R08: ffffffffffffffff R09: 0000000020000000 [ 183.937385][ T6550] R10: 0000000000042072 R11: 0000000000000246 R12: 0000000000000001 [ 183.937399][ T6550] R13: 00007f5164266128 R14: 00007f5164266090 R15: 00007ffd2c0c3e28 [ 183.937442][ T6550] [ 183.945747][ T5891] usb 1-1: USB disconnect, device number 8 [ 184.297763][ T6423] team0: Port device team_slave_0 added [ 184.335498][ T6423] team0: Port device team_slave_1 added [ 184.797046][ T6558] FAULT_INJECTION: forcing a failure. [ 184.797046][ T6558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.812587][ T6558] CPU: 1 UID: 0 PID: 6558 Comm: syz.1.187 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 184.812618][ T6558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 184.812630][ T6558] Call Trace: [ 184.812639][ T6558] [ 184.812648][ T6558] dump_stack_lvl+0xe8/0x150 [ 184.812686][ T6558] should_fail_ex+0x46b/0x600 [ 184.812721][ T6558] _copy_from_user+0x2d/0xb0 [ 184.812744][ T6558] __sys_bind+0x1cc/0x410 [ 184.812785][ T6558] ? __pfx___sys_bind+0x10/0x10 [ 184.812819][ T6558] ? __pfx_ksys_write+0x10/0x10 [ 184.812855][ T6558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.812879][ T6558] __x64_sys_bind+0x7a/0x90 [ 184.812901][ T6558] do_syscall_64+0x15f/0xf80 [ 184.812930][ T6558] ? trace_irq_disable+0x3b/0x140 [ 184.812957][ T6558] ? clear_bhb_loop+0x40/0x90 [ 184.812979][ T6558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.812996][ T6558] RIP: 0033:0x7f658526c819 [ 184.813013][ T6558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.813029][ T6558] RSP: 002b:00007f65834c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 184.813052][ T6558] RAX: ffffffffffffffda RBX: 00007f65854e5fa0 RCX: 00007f658526c819 [ 184.813068][ T6558] RDX: 000000000000001c RSI: 0000200000000500 RDI: 0000000000000003 [ 184.813082][ T6558] RBP: 00007f65834c6090 R08: 0000000000000000 R09: 0000000000000000 [ 184.813094][ T6558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.813107][ T6558] R13: 00007f65854e6038 R14: 00007f65854e5fa0 R15: 00007ffeff0dff48 [ 184.813138][ T6558] [ 184.887440][ T6423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.887457][ T6423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.887480][ T6423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.914344][ T6423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.914363][ T6423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.914387][ T6423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.902726][ T6423] hsr_slave_0: entered promiscuous mode [ 186.983665][ T6423] hsr_slave_1: entered promiscuous mode [ 186.995434][ T6423] debugfs: 'hsr0' already exists in 'hsr' [ 186.995465][ T6423] Cannot create hsr debugfs directory [ 187.719043][ T6579] Invalid argument reading file caps for ./file0 [ 188.254194][ T36] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 188.696770][ T36] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 188.696817][ T36] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 188.696861][ T36] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 188.696888][ T36] usb 1-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 188.696918][ T36] usb 1-1: config 168 interface 0 has no altsetting 0 [ 188.700457][ T36] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 188.700503][ T36] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 188.700553][ T36] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 188.700579][ T36] usb 1-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 188.700605][ T36] usb 1-1: config 168 interface 0 has no altsetting 0 [ 188.702421][ T36] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 188.702459][ T36] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 188.702496][ T36] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 188.702521][ T36] usb 1-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 188.702549][ T36] usb 1-1: config 168 interface 0 has no altsetting 0 [ 188.812216][ T36] usb 1-1: string descriptor 0 read error: -22 [ 188.812395][ T36] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 188.812418][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.099076][ T36] adutux 1-1:168.0: interrupt endpoints not found [ 189.865908][ T36] usb 1-1: USB disconnect, device number 9 [ 193.217055][ T6616] FAULT_INJECTION: forcing a failure. [ 193.217055][ T6616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.217104][ T6616] CPU: 0 UID: 0 PID: 6616 Comm: syz.1.200 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 193.217128][ T6616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 193.217141][ T6616] Call Trace: [ 193.217149][ T6616] [ 193.217157][ T6616] dump_stack_lvl+0xe8/0x150 [ 193.217198][ T6616] should_fail_ex+0x46b/0x600 [ 193.217237][ T6616] _copy_from_user+0x2d/0xb0 [ 193.217261][ T6616] bpf_test_init+0xd8/0x150 [ 193.217288][ T6616] bpf_prog_test_run_xdp+0x529/0x1160 [ 193.217330][ T6616] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 193.217360][ T6616] ? __fget_files+0x2a/0x420 [ 193.217391][ T6616] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 193.217417][ T6616] bpf_prog_test_run+0x2cd/0x340 [ 193.217443][ T6616] __sys_bpf+0x643/0x950 [ 193.217481][ T6616] ? __pfx___sys_bpf+0x10/0x10 [ 193.217510][ T6616] ? rt_mutex_slowunlock+0x1cb/0x300 [ 193.217553][ T6616] ? ksys_write+0x248/0x270 [ 193.217586][ T6616] ? __pfx_ksys_write+0x10/0x10 [ 193.217620][ T6616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.217644][ T6616] __x64_sys_bpf+0x7c/0x90 [ 193.217676][ T6616] do_syscall_64+0x15f/0xf80 [ 193.217706][ T6616] ? trace_irq_disable+0x3b/0x140 [ 193.217738][ T6616] ? clear_bhb_loop+0x40/0x90 [ 193.217773][ T6616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.217794][ T6616] RIP: 0033:0x7f658526c819 [ 193.217823][ T6616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.217840][ T6616] RSP: 002b:00007f65834c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 193.217863][ T6616] RAX: ffffffffffffffda RBX: 00007f65854e5fa0 RCX: 00007f658526c819 [ 193.217879][ T6616] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 193.217898][ T6616] RBP: 00007f65834c6090 R08: 0000000000000000 R09: 0000000000000000 [ 193.217911][ T6616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.217924][ T6616] R13: 00007f65854e6038 R14: 00007f65854e5fa0 R15: 00007ffeff0dff48 [ 193.217959][ T6616] [ 194.545842][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.545934][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.737519][ T6619] FAULT_INJECTION: forcing a failure. [ 194.737519][ T6619] name failslab, interval 1, probability 0, space 0, times 0 [ 194.737556][ T6619] CPU: 1 UID: 0 PID: 6619 Comm: syz.0.201 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 194.737581][ T6619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 194.737593][ T6619] Call Trace: [ 194.737601][ T6619] [ 194.737610][ T6619] dump_stack_lvl+0xe8/0x150 [ 194.737651][ T6619] should_fail_ex+0x46b/0x600 [ 194.737689][ T6619] should_failslab+0xa8/0x100 [ 194.737723][ T6619] kmem_cache_alloc_noprof+0x87/0x680 [ 194.737752][ T6619] ? security_inode_alloc+0x39/0x310 [ 194.737799][ T6619] security_inode_alloc+0x39/0x310 [ 194.737833][ T6619] inode_init_always_gfp+0x99a/0xd50 [ 194.737872][ T6619] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 194.737894][ T6619] alloc_inode+0x82/0x1b0 [ 194.737918][ T6619] new_inode+0x22/0x170 [ 194.737941][ T6619] ? resv_map_alloc+0x200/0x2e0 [ 194.737970][ T6619] hugetlbfs_get_inode+0x78/0x650 [ 194.738010][ T6619] hugetlb_file_setup+0x21d/0x630 [ 194.738045][ T6619] ksys_mmap_pgoff+0x22e/0x720 [ 194.738075][ T6619] ? __x64_sys_mmap+0x7f/0x140 [ 194.738096][ T6619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.738118][ T6619] do_syscall_64+0x15f/0xf80 [ 194.738147][ T6619] ? trace_irq_disable+0x3b/0x140 [ 194.738177][ T6619] ? clear_bhb_loop+0x40/0x90 [ 194.738202][ T6619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.738223][ T6619] RIP: 0033:0x7f9648eac819 [ 194.738242][ T6619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.738259][ T6619] RSP: 002b:00007f9647106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 194.738283][ T6619] RAX: ffffffffffffffda RBX: 00007f9649125fa0 RCX: 00007f9648eac819 [ 194.738299][ T6619] RDX: 0000000000000009 RSI: 000000000095c000 RDI: 0000200000000000 [ 194.738312][ T6619] RBP: 00007f9647106090 R08: ffffffffffffffff R09: 0000000000000000 [ 194.738327][ T6619] R10: 8c4b815a5465c2b1 R11: 0000000000000246 R12: 0000000000000001 [ 194.738340][ T6619] R13: 00007f9649126038 R14: 00007f9649125fa0 R15: 00007ffd4e34e268 [ 194.738375][ T6619] [ 196.584191][ T36] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 196.703570][ T6631] FAULT_INJECTION: forcing a failure. [ 196.703570][ T6631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.703611][ T6631] CPU: 1 UID: 0 PID: 6631 Comm: syz.3.207 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 196.703638][ T6631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 196.703651][ T6631] Call Trace: [ 196.703659][ T6631] [ 196.703668][ T6631] dump_stack_lvl+0xe8/0x150 [ 196.703715][ T6631] should_fail_ex+0x46b/0x600 [ 196.703751][ T6631] _copy_to_user+0x31/0xb0 [ 196.703778][ T6631] bpf_test_finish+0x1db/0x6b0 [ 196.703809][ T6631] ? __pfx____migrate_enable+0x10/0x10 [ 196.703833][ T6631] ? __pfx_bpf_test_finish+0x10/0x10 [ 196.703883][ T6631] bpf_prog_test_run_flow_dissector+0x478/0x610 [ 196.703925][ T6631] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 196.703954][ T6631] ? __fget_files+0x2a/0x420 [ 196.703986][ T6631] ? __fget_files+0x2a/0x420 [ 196.704012][ T6631] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 196.704037][ T6631] bpf_prog_test_run+0x2cd/0x340 [ 196.704064][ T6631] __sys_bpf+0x643/0x950 [ 196.704100][ T6631] ? __pfx___sys_bpf+0x10/0x10 [ 196.704128][ T6631] ? rt_mutex_slowunlock+0x1cb/0x300 [ 196.704171][ T6631] ? ksys_write+0x248/0x270 [ 196.704203][ T6631] ? __pfx_ksys_write+0x10/0x10 [ 196.704238][ T6631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.704263][ T6631] __x64_sys_bpf+0x7c/0x90 [ 196.704294][ T6631] do_syscall_64+0x15f/0xf80 [ 196.704324][ T6631] ? trace_irq_disable+0x3b/0x140 [ 196.704357][ T6631] ? clear_bhb_loop+0x40/0x90 [ 196.704384][ T6631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.704406][ T6631] RIP: 0033:0x7f9b977cc819 [ 196.704427][ T6631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.704444][ T6631] RSP: 002b:00007f9b95a1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 196.704467][ T6631] RAX: ffffffffffffffda RBX: 00007f9b97a45fa0 RCX: 00007f9b977cc819 [ 196.704482][ T6631] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 196.704496][ T6631] RBP: 00007f9b95a1e090 R08: 0000000000000000 R09: 0000000000000000 [ 196.704509][ T6631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.704521][ T6631] R13: 00007f9b97a46038 R14: 00007f9b97a45fa0 R15: 00007ffc10bd1fd8 [ 196.704555][ T6631] [ 196.760001][ T36] usb 1-1: Using ep0 maxpacket: 8 [ 196.760969][ T36] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 196.846552][ T36] usb 1-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 196.846588][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.846608][ T36] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 196.846630][ T36] usb 1-1: config 0 has no interface number 0 [ 196.851978][ T36] usb 1-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 196.852008][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.852027][ T36] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 196.852049][ T36] usb 1-1: config 0 has no interface number 0 [ 197.016359][ T36] usb 1-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 197.016388][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.016405][ T36] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 197.016424][ T36] usb 1-1: config 0 has no interface number 0 [ 197.018238][ T36] usb 1-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 197.018261][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.018277][ T36] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 197.018296][ T36] usb 1-1: config 0 has no interface number 0 [ 197.019674][ T36] usb 1-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 197.019694][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.019711][ T36] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 197.019730][ T36] usb 1-1: config 0 has no interface number 0 [ 197.021934][ T36] usb 1-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 197.021955][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.021971][ T36] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 197.021989][ T36] usb 1-1: config 0 has no interface number 0 [ 197.033796][ T36] usb 1-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 197.033823][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.033840][ T36] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 197.033860][ T36] usb 1-1: config 0 has no interface number 0 [ 197.037003][ T36] usb 1-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 197.037028][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.037044][ T36] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 197.037063][ T36] usb 1-1: config 0 has no interface number 0 [ 197.090934][ T36] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 197.090963][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 197.090982][ T36] usb 1-1: SerialNumber: syz [ 197.134734][ T36] usb 1-1: config 0 descriptor?? [ 197.280070][ T36] gspca_main: 0000:0000 too many config [ 197.654265][ T36] usb 1-1: USB disconnect, device number 10 [ 197.707177][ T5796] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 198.347337][ T6640] FAULT_INJECTION: forcing a failure. [ 198.347337][ T6640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.347375][ T6640] CPU: 0 UID: 0 PID: 6640 Comm: syz.0.211 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 198.347400][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 198.347412][ T6640] Call Trace: [ 198.347420][ T6640] [ 198.347429][ T6640] dump_stack_lvl+0xe8/0x150 [ 198.347468][ T6640] should_fail_ex+0x46b/0x600 [ 198.347507][ T6640] _copy_from_iter+0x1d3/0x1670 [ 198.347550][ T6640] ? trace_kmem_cache_alloc+0x29/0xe0 [ 198.347579][ T6640] ? __alloc_skb+0x27d/0x7d0 [ 198.347603][ T6640] ? __pfx__copy_from_iter+0x10/0x10 [ 198.347631][ T6640] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 198.347661][ T6640] ? __alloc_skb+0x27d/0x7d0 [ 198.347689][ T6640] ? netlink_sendmsg+0x650/0xb40 [ 198.347718][ T6640] ? skb_put+0x11b/0x210 [ 198.347746][ T6640] netlink_sendmsg+0x6c0/0xb40 [ 198.347779][ T6640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.347804][ T6640] ? unwind_get_return_address+0x4d/0x90 [ 198.347833][ T6640] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 198.347867][ T6640] ____sys_sendmsg+0x94c/0x9c0 [ 198.347901][ T6640] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.347937][ T6640] ? import_iovec+0x73/0xa0 [ 198.347964][ T6640] ___sys_sendmsg+0x2a5/0x360 [ 198.347989][ T6640] ? __lock_acquire+0x6b5/0x2cf0 [ 198.348017][ T6640] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.348089][ T6640] ? __fget_files+0x2a/0x420 [ 198.348114][ T6640] ? __fget_files+0x3a6/0x420 [ 198.348150][ T6640] __x64_sys_sendmsg+0x1c3/0x2a0 [ 198.348180][ T6640] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 198.348217][ T6640] ? __pfx_ksys_write+0x10/0x10 [ 198.348256][ T6640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.348279][ T6640] do_syscall_64+0x15f/0xf80 [ 198.348310][ T6640] ? trace_irq_disable+0x3b/0x140 [ 198.348342][ T6640] ? clear_bhb_loop+0x40/0x90 [ 198.348369][ T6640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.348391][ T6640] RIP: 0033:0x7f9648eac819 [ 198.348411][ T6640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.348428][ T6640] RSP: 002b:00007f9647106028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.348452][ T6640] RAX: ffffffffffffffda RBX: 00007f9649125fa0 RCX: 00007f9648eac819 [ 198.348467][ T6640] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 198.348481][ T6640] RBP: 00007f9647106090 R08: 0000000000000000 R09: 0000000000000000 [ 198.348494][ T6640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.348506][ T6640] R13: 00007f9649126038 R14: 00007f9649125fa0 R15: 00007ffd4e34e268 [ 198.348540][ T6640] [ 198.501855][ T5796] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 198.501883][ T5796] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 198.864174][ T5899] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 198.891584][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 198.939401][ T5796] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 198.939436][ T5796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.939456][ T5796] usb 4-1: Product: syz [ 198.939471][ T5796] usb 4-1: Manufacturer: syz [ 198.939486][ T5796] usb 4-1: SerialNumber: syz [ 199.054246][ T5899] usb 2-1: device descriptor read/64, error -32 [ 199.455287][ T5899] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 199.481618][ T5796] usb 4-1: config 0 descriptor?? [ 199.893004][ T5796] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 199.976170][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 200.026742][ T5899] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 200.026773][ T5899] usb 2-1: config 0 has no interface number 0 [ 200.034202][ T5899] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 200.034236][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.034257][ T5899] usb 2-1: Product: syz [ 200.034272][ T5899] usb 2-1: Manufacturer: syz [ 200.034288][ T5899] usb 2-1: SerialNumber: syz [ 200.198963][ T5899] usb 2-1: config 0 descriptor?? [ 200.638177][ T5796] gspca_sunplus: reg_r err -110 [ 200.638293][ T5796] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 201.268546][ T5899] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 201.268581][ T5899] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 201.644370][ T5899] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 201.644712][ T5899] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 204.042335][ T5899] usb 2-1: USB disconnect, device number 6 [ 205.744197][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 206.024200][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 206.048458][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.048496][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.048538][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 206.048562][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.154764][ T9] usb 2-1: config 0 descriptor?? [ 206.762264][ T9] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 206.762304][ T9] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 207.104169][ T9] ft260 0003:0403:6030.0002: chip code: d186 9f74 [ 207.485123][ T9] ft260 0003:0403:6030.0002: failed to retrieve system status [ 207.487252][ T9] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -5 [ 207.556214][ T6648] syz_tun: entered promiscuous mode [ 207.929996][ T9] usb 2-1: USB disconnect, device number 7 [ 207.979402][ T5826] usb 4-1: USB disconnect, device number 7 [ 208.263846][ T6648] syz.3.209 (6648) used greatest stack depth: 18600 bytes left [ 210.974166][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 213.068150][ T6694] __nla_validate_parse: 8 callbacks suppressed [ 213.068174][ T6694] netlink: 68 bytes leftover after parsing attributes in process `syz.0.223'. [ 214.956086][ T6423] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 216.469288][ T6423] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 216.509019][ T6423] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 216.573553][ T6708] delete_channel: no stack [ 216.715156][ T6714] FAULT_INJECTION: forcing a failure. [ 216.715156][ T6714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.715319][ T6714] CPU: 0 UID: 0 PID: 6714 Comm: syz.2.229 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 216.715341][ T6714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 216.715352][ T6714] Call Trace: [ 216.715358][ T6714] [ 216.715366][ T6714] dump_stack_lvl+0xe8/0x150 [ 216.715399][ T6714] should_fail_ex+0x46b/0x600 [ 216.715430][ T6714] _copy_from_user+0x2d/0xb0 [ 216.715449][ T6714] ___sys_sendmsg+0x1c6/0x360 [ 216.715471][ T6714] ? __lock_acquire+0x6b5/0x2cf0 [ 216.715497][ T6714] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.715548][ T6714] ? __fget_files+0x2a/0x420 [ 216.715567][ T6714] ? __fget_files+0x3a6/0x420 [ 216.715598][ T6714] __x64_sys_sendmsg+0x1c3/0x2a0 [ 216.715623][ T6714] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 216.715652][ T6714] ? __pfx_ksys_write+0x10/0x10 [ 216.715683][ T6714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.715702][ T6714] do_syscall_64+0x15f/0xf80 [ 216.715727][ T6714] ? trace_irq_disable+0x3b/0x140 [ 216.715753][ T6714] ? clear_bhb_loop+0x40/0x90 [ 216.715775][ T6714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.715803][ T6714] RIP: 0033:0x7f5163fec819 [ 216.715823][ T6714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.715838][ T6714] RSP: 002b:00007f5162225028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.715858][ T6714] RAX: ffffffffffffffda RBX: 00007f5164266090 RCX: 00007f5163fec819 [ 216.715870][ T6714] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 216.715881][ T6714] RBP: 00007f5162225090 R08: 0000000000000000 R09: 0000000000000000 [ 216.715892][ T6714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.715902][ T6714] R13: 00007f5164266128 R14: 00007f5164266090 R15: 00007ffd2c0c3e28 [ 216.715931][ T6714] [ 216.743319][ T6423] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 216.756395][ T6423] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 217.578103][ T6423] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 217.797846][ T6423] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 218.309583][ T6423] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 220.079074][ T6737] FAULT_INJECTION: forcing a failure. [ 220.079074][ T6737] name failslab, interval 1, probability 0, space 0, times 0 [ 220.079113][ T6737] CPU: 1 UID: 0 PID: 6737 Comm: syz.0.234 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 220.079137][ T6737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 220.079150][ T6737] Call Trace: [ 220.079158][ T6737] [ 220.079168][ T6737] dump_stack_lvl+0xe8/0x150 [ 220.079209][ T6737] should_fail_ex+0x46b/0x600 [ 220.079247][ T6737] should_failslab+0xa8/0x100 [ 220.079282][ T6737] __kmalloc_noprof+0xdf/0x7b0 [ 220.079313][ T6737] ? sk_prot_alloc+0xe7/0x210 [ 220.079345][ T6737] sk_prot_alloc+0xe7/0x210 [ 220.079368][ T6737] ? sk_alloc+0x27/0x390 [ 220.079395][ T6737] sk_alloc+0x3a/0x390 [ 220.079426][ T6737] bpf_prog_test_run_skb+0x415/0x2260 [ 220.079472][ T6737] ? __fget_files+0x3a6/0x420 [ 220.079497][ T6737] ? __fget_files+0x2a/0x420 [ 220.079527][ T6737] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 220.079552][ T6737] bpf_prog_test_run+0x2cd/0x340 [ 220.079588][ T6737] __sys_bpf+0x643/0x950 [ 220.079630][ T6737] ? __pfx___sys_bpf+0x10/0x10 [ 220.079661][ T6737] ? rt_mutex_slowunlock+0x1cb/0x300 [ 220.079705][ T6737] ? ksys_write+0x248/0x270 [ 220.079737][ T6737] ? __pfx_ksys_write+0x10/0x10 [ 220.079772][ T6737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.079797][ T6737] __x64_sys_bpf+0x7c/0x90 [ 220.079827][ T6737] do_syscall_64+0x15f/0xf80 [ 220.079860][ T6737] ? clear_bhb_loop+0x40/0x90 [ 220.079887][ T6737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.079908][ T6737] RIP: 0033:0x7f9648eac819 [ 220.079929][ T6737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.079948][ T6737] RSP: 002b:00007f9647106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 220.079973][ T6737] RAX: ffffffffffffffda RBX: 00007f9649125fa0 RCX: 00007f9648eac819 [ 220.079990][ T6737] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 220.080004][ T6737] RBP: 00007f9647106090 R08: 0000000000000000 R09: 0000000000000000 [ 220.080018][ T6737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.080031][ T6737] R13: 00007f9649126038 R14: 00007f9649125fa0 R15: 00007ffd4e34e268 [ 220.080066][ T6737] [ 221.704612][ T5896] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 221.978292][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 221.982338][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.982378][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 221.982424][ T5896] usb 1-1: New USB device found, idVendor=04e7, idProduct=0050, bcdDevice= 0.00 [ 221.982450][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.352063][ T5896] usb 1-1: config 0 descriptor?? [ 223.047625][ T5896] hid-accutouch 0003:04E7:0050.0003: unknown main item tag 0x0 [ 223.047679][ T5896] hid-accutouch 0003:04E7:0050.0003: unknown main item tag 0x0 [ 223.047713][ T5896] hid-accutouch 0003:04E7:0050.0003: unknown main item tag 0x0 [ 223.047738][ T5896] hid-accutouch 0003:04E7:0050.0003: unknown main item tag 0x0 [ 223.047775][ T5896] hid-accutouch 0003:04E7:0050.0003: unknown main item tag 0x0 [ 223.047807][ T5896] hid-accutouch 0003:04E7:0050.0003: unknown main item tag 0x0 [ 223.047839][ T5896] hid-accutouch 0003:04E7:0050.0003: unknown main item tag 0x0 [ 223.047872][ T5896] hid-accutouch 0003:04E7:0050.0003: unknown main item tag 0x0 [ 223.047895][ T5896] hid-accutouch 0003:04E7:0050.0003: unknown main item tag 0x0 [ 223.047926][ T5896] hid-accutouch 0003:04E7:0050.0003: unknown main item tag 0x0 [ 223.077615][ T6742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.104847][ T6742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.145834][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.235'. [ 223.879055][ T5896] hid-accutouch 0003:04E7:0050.0003: hidraw0: USB HID v0.04 Device [HID 04e7:0050] on usb-dummy_hcd.0-1/input0 [ 225.250765][ T5896] usb 1-1: USB disconnect, device number 11 [ 226.409383][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 226.502695][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 226.538269][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 226.540443][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 226.649068][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 226.869028][ T6746] fido_id[6746]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 226.915333][ T6755] netlink: 72 bytes leftover after parsing attributes in process `syz.2.239'. [ 228.344642][ T5820] Bluetooth: hci1: unexpected event 0x04 length: 13 > 10 [ 228.344700][ T5820] Bluetooth: hci1: connection err: -111 [ 228.775955][ T5820] Bluetooth: hci6: command tx timeout [ 229.461099][ T5899] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 229.806628][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 229.809469][ T5899] usb 2-1: config 1 interface 0 altsetting 196 bulk endpoint 0x1 has invalid maxpacket 32 [ 229.809504][ T5899] usb 2-1: config 1 interface 0 altsetting 196 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.809531][ T5899] usb 2-1: config 1 interface 0 has no altsetting 0 [ 229.812829][ T5899] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 229.812859][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.812880][ T5899] usb 2-1: Product: 䔑払䟘긆뱤罝폦ꇕ嚖Ҭﳻ帷拨晑쾶吋谉澕脬䚓뮁헡붼倲뭮ꖥ௏⨎㠬ᶄ졈勾ꩊ㚰덥郟掹렴쏈㹝መ䤊퍯⸾盅﫤以⸜衑뀾ೢ魏黴峇銜伍⽣臒몛잉贮헗坶䃋ଛዟ‭禓ᇲ困榾ᒫಧ뼂ᆂ [ 229.812910][ T5899] usb 2-1: Manufacturer: 낣離ʵ둌뵼߹沖쪄欔䛆쥛囫乶╸千穴㬘⩇䣂墼蠕뷭붿 [ 229.812930][ T5899] usb 2-1: SerialNumber: ꍦ⳿驴孂汹荳茶麓ꂪ꒧릊࿷ἳ뾲椌ￗ턿ㄶꛖ⬥湚埔蛪ሤᤴ䊙뺸쟃饛냫䠒릖赹䕸疿㴣м [ 229.863403][ T6769] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 229.898028][ T6769] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 230.857305][ T5820] Bluetooth: hci6: command tx timeout [ 232.934301][ T5820] Bluetooth: hci6: command tx timeout [ 232.965718][ T5899] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 196 proto 1 vid 0x0525 pid 0xA4A8 [ 233.210441][ T5899] usb 2-1: USB disconnect, device number 8 [ 233.355192][ T6781] netlink: 72 bytes leftover after parsing attributes in process `syz.3.245'. [ 233.512894][ T5899] usblp0: removed [ 233.582927][ T6116] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 233.826735][ T6116] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 233.826771][ T6116] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.902342][ T6116] usb 3-1: config 0 descriptor?? [ 234.060801][ T6116] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 235.014313][ T5820] Bluetooth: hci6: command tx timeout [ 235.245158][ T6116] gspca_cpia1: usb_control_msg 05, error -110 [ 235.705174][ T6116] cpia1 3-1:0.0: only firmware version 1 is supported (got: 185) [ 237.259233][ T6794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.259988][ T6794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.286785][ T5891] usb 3-1: USB disconnect, device number 4 [ 239.433503][ T6798] pimreg: entered allmulticast mode [ 239.646850][ T6808] FAULT_INJECTION: forcing a failure. [ 239.646850][ T6808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.646888][ T6808] CPU: 0 UID: 0 PID: 6808 Comm: syz.2.252 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 239.646914][ T6808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 239.646927][ T6808] Call Trace: [ 239.646935][ T6808] [ 239.646944][ T6808] dump_stack_lvl+0xe8/0x150 [ 239.646986][ T6808] should_fail_ex+0x46b/0x600 [ 239.647023][ T6808] _copy_from_iter+0x1d3/0x1670 [ 239.647066][ T6808] ? trace_kmem_cache_alloc+0x29/0xe0 [ 239.647097][ T6808] ? __alloc_skb+0x27d/0x7d0 [ 239.647119][ T6808] ? __pfx__copy_from_iter+0x10/0x10 [ 239.647149][ T6808] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 239.647178][ T6808] ? __alloc_skb+0x27d/0x7d0 [ 239.647212][ T6808] ? netlink_sendmsg+0x650/0xb40 [ 239.647236][ T6808] ? skb_put+0x11b/0x210 [ 239.647264][ T6808] netlink_sendmsg+0x6c0/0xb40 [ 239.647307][ T6808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.647341][ T6808] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 239.647374][ T6808] ____sys_sendmsg+0x94c/0x9c0 [ 239.647409][ T6808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.647446][ T6808] ? import_iovec+0x73/0xa0 [ 239.647472][ T6808] ___sys_sendmsg+0x2a5/0x360 [ 239.647498][ T6808] ? __lock_acquire+0x6b5/0x2cf0 [ 239.647526][ T6808] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.647557][ T6808] ? kstrtouint+0x6e/0xe0 [ 239.647613][ T6808] ? __fget_files+0x2a/0x420 [ 239.647636][ T6808] ? __fget_files+0x3a6/0x420 [ 239.647669][ T6808] __sys_sendmmsg+0x282/0x4e0 [ 239.647699][ T6808] ? __pfx___sys_sendmmsg+0x10/0x10 [ 239.647734][ T6808] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 239.647774][ T6808] ? ksys_write+0x248/0x270 [ 239.647804][ T6808] ? __pfx_ksys_write+0x10/0x10 [ 239.647840][ T6808] __x64_sys_sendmmsg+0xa0/0xc0 [ 239.647866][ T6808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.647889][ T6808] do_syscall_64+0x15f/0xf80 [ 239.647918][ T6808] ? trace_irq_disable+0x3b/0x140 [ 239.647951][ T6808] ? clear_bhb_loop+0x40/0x90 [ 239.647978][ T6808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.648000][ T6808] RIP: 0033:0x7f5163fec819 [ 239.648021][ T6808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.648039][ T6808] RSP: 002b:00007f5162246028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 239.648063][ T6808] RAX: ffffffffffffffda RBX: 00007f5164265fa0 RCX: 00007f5163fec819 [ 239.648079][ T6808] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 239.648093][ T6808] RBP: 00007f5162246090 R08: 0000000000000000 R09: 0000000000000000 [ 239.648107][ T6808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.648121][ T6808] R13: 00007f5164266038 R14: 00007f5164265fa0 R15: 00007ffd2c0c3e28 [ 239.648153][ T6808] [ 245.579690][ T6846] FAULT_INJECTION: forcing a failure. [ 245.579690][ T6846] name failslab, interval 1, probability 0, space 0, times 0 [ 245.579729][ T6846] CPU: 0 UID: 0 PID: 6846 Comm: syz.3.262 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 245.579753][ T6846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 245.579766][ T6846] Call Trace: [ 245.579775][ T6846] [ 245.579783][ T6846] dump_stack_lvl+0xe8/0x150 [ 245.579824][ T6846] should_fail_ex+0x46b/0x600 [ 245.579862][ T6846] should_failslab+0xa8/0x100 [ 245.579897][ T6846] __kmalloc_cache_noprof+0x84/0x690 [ 245.579928][ T6846] ? sctp_add_bind_addr+0x8c/0x370 [ 245.579962][ T6846] sctp_add_bind_addr+0x8c/0x370 [ 245.579994][ T6846] sctp_do_bind+0x5b2/0x9d0 [ 245.580041][ T6846] sctp_connect_new_asoc+0x270/0x6b0 [ 245.580077][ T6846] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 245.580114][ T6846] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 245.580146][ T6846] ? lockdep_hardirqs_on+0x7a/0x110 [ 245.580176][ T6846] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 245.580206][ T6846] ? security_sctp_bind_connect+0x7e/0x2c0 [ 245.580237][ T6846] sctp_sendmsg+0x14c0/0x2990 [ 245.580287][ T6846] ? __pfx_sctp_sendmsg+0x10/0x10 [ 245.580316][ T6846] ? __lock_acquire+0x6b5/0x2cf0 [ 245.580345][ T6846] ? __lock_acquire+0x6b5/0x2cf0 [ 245.580382][ T6846] ? sock_rps_record_flow+0x19/0x350 [ 245.580411][ T6846] ? inet_sendmsg+0x2f4/0x370 [ 245.580447][ T6846] ____sys_sendmsg+0x7da/0x9c0 [ 245.580481][ T6846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.580519][ T6846] ? import_iovec+0x73/0xa0 [ 245.580552][ T6846] ___sys_sendmsg+0x2a5/0x360 [ 245.580578][ T6846] ? __lock_acquire+0x6b5/0x2cf0 [ 245.580606][ T6846] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.580640][ T6846] ? kstrtouint+0x6e/0xe0 [ 245.580698][ T6846] ? __fget_files+0x2a/0x420 [ 245.580723][ T6846] ? __fget_files+0x3a6/0x420 [ 245.580759][ T6846] __sys_sendmmsg+0x282/0x4e0 [ 245.580793][ T6846] ? __pfx___sys_sendmmsg+0x10/0x10 [ 245.580831][ T6846] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 245.580873][ T6846] ? ksys_write+0x248/0x270 [ 245.580905][ T6846] ? __pfx_ksys_write+0x10/0x10 [ 245.580942][ T6846] __x64_sys_sendmmsg+0xa0/0xc0 [ 245.580969][ T6846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.580992][ T6846] do_syscall_64+0x15f/0xf80 [ 245.581021][ T6846] ? trace_irq_disable+0x3b/0x140 [ 245.581053][ T6846] ? clear_bhb_loop+0x40/0x90 [ 245.581081][ T6846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.581102][ T6846] RIP: 0033:0x7f9b977cc819 [ 245.581123][ T6846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.581142][ T6846] RSP: 002b:00007f9b95a1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 245.581166][ T6846] RAX: ffffffffffffffda RBX: 00007f9b97a45fa0 RCX: 00007f9b977cc819 [ 245.581182][ T6846] RDX: 0000000000000002 RSI: 0000200000001a80 RDI: 0000000000000003 [ 245.581195][ T6846] RBP: 00007f9b95a1e090 R08: 0000000000000000 R09: 0000000000000000 [ 245.581208][ T6846] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 245.581221][ T6846] R13: 00007f9b97a46038 R14: 00007f9b97a45fa0 R15: 00007ffc10bd1fd8 [ 245.581256][ T6846] [ 246.827362][ T37] audit: type=1326 audit(1776427491.992:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6849 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b977cc819 code=0x7ffc0000 [ 246.827486][ T37] audit: type=1326 audit(1776427491.992:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6849 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b977cc819 code=0x7ffc0000 [ 246.827537][ T37] audit: type=1326 audit(1776427491.992:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6849 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b977cc819 code=0x7ffc0000 [ 246.827584][ T37] audit: type=1326 audit(1776427491.992:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6849 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b977cc819 code=0x7ffc0000 [ 246.827634][ T37] audit: type=1326 audit(1776427491.992:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6849 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b977cc819 code=0x7ffc0000 [ 246.827681][ T37] audit: type=1326 audit(1776427492.002:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6849 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f9b977cc819 code=0x7ffc0000 [ 246.827728][ T37] audit: type=1326 audit(1776427492.002:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6849 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b977cc819 code=0x7ffc0000 [ 246.827775][ T37] audit: type=1326 audit(1776427492.002:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6849 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b977cc819 code=0x7ffc0000 [ 246.827829][ T37] audit: type=1326 audit(1776427492.012:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6849 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b977cc819 code=0x7ffc0000 [ 246.827877][ T37] audit: type=1326 audit(1776427492.012:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6849 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b977cc819 code=0x7ffc0000 [ 247.748171][ T6747] chnl_net:caif_netlink_parms(): no params data found [ 247.922932][ T5826] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 248.104104][ T5826] usb 4-1: Using ep0 maxpacket: 16 [ 248.522389][ T5826] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 248.522424][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.548441][ T5826] usb 4-1: config 0 descriptor?? [ 248.553581][ T5826] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 249.756409][ T5826] usb 4-1: Detected FT232B [ 250.390317][ T5826] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 250.418309][ T5826] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 250.880463][ T6423] syz-executor (6423) used greatest stack depth: 18168 bytes left [ 251.400862][ T5826] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 251.445915][ T5826] usb 4-1: USB disconnect, device number 8 [ 252.608378][ T6747] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.608523][ T6747] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.608784][ T6747] bridge_slave_0: entered allmulticast mode [ 252.609597][ T5826] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 252.660965][ T5826] ftdi_sio 4-1:0.0: device disconnected [ 252.973242][ T6747] bridge_slave_0: entered promiscuous mode [ 253.114496][ T6747] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.114652][ T6747] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.114926][ T6747] bridge_slave_1: entered allmulticast mode [ 253.178997][ T6747] bridge_slave_1: entered promiscuous mode [ 255.883232][ T6747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.920500][ T6747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.003683][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.003759][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.437743][ T6747] team0: Port device team_slave_0 added [ 256.549380][ T6747] team0: Port device team_slave_1 added [ 257.923604][ T5899] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 258.163627][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 258.185899][ T5899] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 258.185932][ T5899] usb 3-1: config 0 has no interface number 0 [ 258.185980][ T5899] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 258.186004][ T5899] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 258.186032][ T5899] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 258.186059][ T5899] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 258.186084][ T5899] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 258.186111][ T5899] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 258.186133][ T5899] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 258.186159][ T5899] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 258.186182][ T5899] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.211915][ T5899] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 258.211951][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.211973][ T5899] usb 3-1: Product: syz [ 258.211988][ T5899] usb 3-1: Manufacturer: syz [ 258.212004][ T5899] usb 3-1: SerialNumber: syz [ 258.532948][ T5899] usb 3-1: config 0 descriptor?? [ 258.649762][ T6903] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 258.846209][ T5899] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 258.846233][ T5899] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 258.958129][ T5899] usb 3-1: USB disconnect, device number 5 [ 259.738476][ T6747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.738499][ T6747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.738529][ T6747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.822272][ T6747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.822292][ T6747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.822321][ T6747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.720665][ T5899] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 262.240200][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 262.286499][ T5899] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 262.286541][ T5899] usb 2-1: config 0 has no interface number 0 [ 262.290145][ T5899] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 262.290176][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.290197][ T5899] usb 2-1: Product: syz [ 262.290213][ T5899] usb 2-1: Manufacturer: syz [ 262.290228][ T5899] usb 2-1: SerialNumber: syz [ 262.662271][ T6747] hsr_slave_0: entered promiscuous mode [ 262.663798][ T6747] hsr_slave_1: entered promiscuous mode [ 262.679374][ T6747] debugfs: 'hsr0' already exists in 'hsr' [ 262.679405][ T6747] Cannot create hsr debugfs directory [ 262.728243][ T5899] usb 2-1: config 0 descriptor?? [ 263.243141][ T5899] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 263.243178][ T5899] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 263.434610][ T36] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 264.943695][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 265.038372][ T36] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 265.038403][ T36] usb 4-1: config 0 has no interface number 0 [ 265.081192][ T5899] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 265.081552][ T5899] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 265.116795][ T36] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 265.116828][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.116846][ T36] usb 4-1: Product: syz [ 265.116859][ T36] usb 4-1: Manufacturer: syz [ 265.116872][ T36] usb 4-1: SerialNumber: syz [ 265.336690][ T36] usb 4-1: config 0 descriptor?? [ 265.496879][ T5899] usb 2-1: USB disconnect, device number 9 [ 265.705115][ T6931] FAULT_INJECTION: forcing a failure. [ 265.705115][ T6931] name failslab, interval 1, probability 0, space 0, times 0 [ 265.705153][ T6931] CPU: 0 UID: 0 PID: 6931 Comm: syz.1.285 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 265.705179][ T6931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 265.705193][ T6931] Call Trace: [ 265.705202][ T6931] [ 265.705211][ T6931] dump_stack_lvl+0xe8/0x150 [ 265.705263][ T6931] should_fail_ex+0x46b/0x600 [ 265.705302][ T6931] should_failslab+0xa8/0x100 [ 265.705336][ T6931] kmem_cache_alloc_noprof+0x87/0x680 [ 265.705366][ T6931] ? __netlink_lookup+0xc6/0x8b0 [ 265.705390][ T6931] ? skb_clone+0x212/0x3a0 [ 265.705424][ T6931] skb_clone+0x212/0x3a0 [ 265.705456][ T6931] __netlink_deliver_tap+0x404/0x850 [ 265.705493][ T6931] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.705520][ T6931] netlink_deliver_tap+0x19c/0x1b0 [ 265.705545][ T6931] netlink_unicast+0x754/0x920 [ 265.705592][ T6931] netlink_sendmsg+0x813/0xb40 [ 265.705633][ T6931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.705661][ T6931] ? unwind_get_return_address+0x4d/0x90 [ 265.705691][ T6931] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 265.705725][ T6931] ____sys_sendmsg+0x94c/0x9c0 [ 265.705759][ T6931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.705798][ T6931] ? import_iovec+0x73/0xa0 [ 265.705825][ T6931] ___sys_sendmsg+0x2a5/0x360 [ 265.705851][ T6931] ? __lock_acquire+0x6b5/0x2cf0 [ 265.705880][ T6931] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.705947][ T6931] ? __fget_files+0x2a/0x420 [ 265.705972][ T6931] ? __fget_files+0x3a6/0x420 [ 265.706009][ T6931] __x64_sys_sendmsg+0x1c3/0x2a0 [ 265.706039][ T6931] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 265.706077][ T6931] ? __pfx_ksys_write+0x10/0x10 [ 265.706117][ T6931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.706142][ T6931] do_syscall_64+0x15f/0xf80 [ 265.706172][ T6931] ? trace_irq_disable+0x3b/0x140 [ 265.706206][ T6931] ? clear_bhb_loop+0x40/0x90 [ 265.706242][ T6931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.706264][ T6931] RIP: 0033:0x7f658526c819 [ 265.706286][ T6931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.706305][ T6931] RSP: 002b:00007f65834c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.706329][ T6931] RAX: ffffffffffffffda RBX: 00007f65854e5fa0 RCX: 00007f658526c819 [ 265.706345][ T6931] RDX: 0000000000008000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 265.706359][ T6931] RBP: 00007f65834c6090 R08: 0000000000000000 R09: 0000000000000000 [ 265.706373][ T6931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.706386][ T6931] R13: 00007f65854e6038 R14: 00007f65854e5fa0 R15: 00007ffeff0dff48 [ 265.706421][ T6931] [ 265.730745][ T6931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.285'. [ 266.064318][ T36] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 266.064354][ T36] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 266.441249][ T36] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 266.441598][ T36] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 267.743798][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 267.847928][ T5826] usb 4-1: USB disconnect, device number 9 [ 267.868173][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 267.869556][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 267.911122][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 267.952523][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 269.572817][ T6942] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 270.080983][ T5820] Bluetooth: hci5: command tx timeout [ 272.214104][ T5820] Bluetooth: hci5: command tx timeout [ 273.758071][ T6956] FAULT_INJECTION: forcing a failure. [ 273.758071][ T6956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.758111][ T6956] CPU: 1 UID: 0 PID: 6956 Comm: syz.1.293 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 273.758148][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 273.758161][ T6956] Call Trace: [ 273.758170][ T6956] [ 273.758179][ T6956] dump_stack_lvl+0xe8/0x150 [ 273.758220][ T6956] should_fail_ex+0x46b/0x600 [ 273.758259][ T6956] _copy_from_iter+0x1d3/0x1670 [ 273.758302][ T6956] ? trace_kmem_cache_alloc+0x29/0xe0 [ 273.758332][ T6956] ? __alloc_skb+0x27d/0x7d0 [ 273.758356][ T6956] ? __pfx__copy_from_iter+0x10/0x10 [ 273.758386][ T6956] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 273.758416][ T6956] ? __alloc_skb+0x27d/0x7d0 [ 273.758444][ T6956] ? netlink_sendmsg+0x650/0xb40 [ 273.758467][ T6956] ? skb_put+0x11b/0x210 [ 273.758495][ T6956] netlink_sendmsg+0x6c0/0xb40 [ 273.758529][ T6956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.758556][ T6956] ? unwind_get_return_address+0x4d/0x90 [ 273.758585][ T6956] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 273.758619][ T6956] ____sys_sendmsg+0x94c/0x9c0 [ 273.758653][ T6956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.758690][ T6956] ? import_iovec+0x73/0xa0 [ 273.758716][ T6956] ___sys_sendmsg+0x2a5/0x360 [ 273.758742][ T6956] ? __lock_acquire+0x6b5/0x2cf0 [ 273.758770][ T6956] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.758835][ T6956] ? __fget_files+0x2a/0x420 [ 273.758859][ T6956] ? __fget_files+0x3a6/0x420 [ 273.758894][ T6956] __x64_sys_sendmsg+0x1c3/0x2a0 [ 273.758924][ T6956] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 273.758962][ T6956] ? __pfx_ksys_write+0x10/0x10 [ 273.759000][ T6956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.759024][ T6956] do_syscall_64+0x15f/0xf80 [ 273.759055][ T6956] ? trace_irq_disable+0x3b/0x140 [ 273.759088][ T6956] ? clear_bhb_loop+0x40/0x90 [ 273.759122][ T6956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.759144][ T6956] RIP: 0033:0x7f658526c819 [ 273.759164][ T6956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.759183][ T6956] RSP: 002b:00007f65834c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.759207][ T6956] RAX: ffffffffffffffda RBX: 00007f65854e5fa0 RCX: 00007f658526c819 [ 273.759223][ T6956] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 273.759237][ T6956] RBP: 00007f65834c6090 R08: 0000000000000000 R09: 0000000000000000 [ 273.759251][ T6956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.759264][ T6956] R13: 00007f65854e6038 R14: 00007f65854e5fa0 R15: 00007ffeff0dff48 [ 273.759298][ T6956] [ 274.353721][ T5820] Bluetooth: hci5: command tx timeout [ 276.454573][ T5820] Bluetooth: hci5: command tx timeout [ 278.384857][ T5826] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 278.597633][ T5826] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 278.597666][ T5826] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 278.597687][ T5826] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 278.597708][ T5826] usb 2-1: config 220 has no interface number 2 [ 278.597787][ T5826] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 278.597816][ T5826] usb 2-1: config 220 interface 0 has no altsetting 0 [ 278.597835][ T5826] usb 2-1: config 220 interface 76 has no altsetting 0 [ 278.597854][ T5826] usb 2-1: config 220 interface 1 has no altsetting 0 [ 278.601953][ T5826] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 278.601987][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.602009][ T5826] usb 2-1: Product: syz [ 278.602025][ T5826] usb 2-1: Manufacturer: syz [ 278.602041][ T5826] usb 2-1: SerialNumber: syz [ 279.214467][ T5826] usb 2-1: selecting invalid altsetting 0 [ 279.219957][ T5826] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 279.219997][ T5826] uvcvideo 2-1:220.0: No valid video chain found. [ 279.633187][ T5826] usb 2-1: selecting invalid altsetting 0 [ 279.633233][ T5826] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 280.096065][ T5826] usb 2-1: USB disconnect, device number 10 [ 282.169753][ T37] kauditd_printk_skb: 172 callbacks suppressed [ 282.169775][ T37] audit: type=1326 audit(1776427527.362:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6975 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5163fec819 code=0x7ffc0000 [ 282.171860][ T37] audit: type=1326 audit(1776427527.362:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6975 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5163fec819 code=0x7ffc0000 [ 282.171913][ T37] audit: type=1326 audit(1776427527.362:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6975 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5163fec819 code=0x7ffc0000 [ 282.192513][ T37] audit: type=1326 audit(1776427527.372:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6975 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5163fec819 code=0x7ffc0000 [ 282.192566][ T37] audit: type=1326 audit(1776427527.382:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6975 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5163fec819 code=0x7ffc0000 [ 282.192606][ T37] audit: type=1326 audit(1776427527.382:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6975 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f5163fec819 code=0x7ffc0000 [ 282.192646][ T37] audit: type=1326 audit(1776427527.382:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6975 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5163fec819 code=0x7ffc0000 [ 282.198536][ T37] audit: type=1326 audit(1776427527.392:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6975 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5163fec819 code=0x7ffc0000 [ 282.198589][ T37] audit: type=1326 audit(1776427527.392:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6975 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5163fec819 code=0x7ffc0000 [ 282.205297][ T37] audit: type=1326 audit(1776427527.392:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6975 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5163fec819 code=0x7ffc0000 [ 282.633621][ T6980] FAULT_INJECTION: forcing a failure. [ 282.633621][ T6980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.633659][ T6980] CPU: 0 UID: 0 PID: 6980 Comm: syz.3.300 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 282.633682][ T6980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 282.633695][ T6980] Call Trace: [ 282.633704][ T6980] [ 282.633713][ T6980] dump_stack_lvl+0xe8/0x150 [ 282.633751][ T6980] should_fail_ex+0x46b/0x600 [ 282.633796][ T6980] _copy_from_user+0x2d/0xb0 [ 282.633820][ T6980] bpf_test_init+0xd8/0x150 [ 282.633847][ T6980] bpf_prog_test_run_xdp+0x529/0x1160 [ 282.633885][ T6980] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 282.633914][ T6980] ? __fget_files+0x2a/0x420 [ 282.633944][ T6980] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 282.633974][ T6980] bpf_prog_test_run+0x2cd/0x340 [ 282.633999][ T6980] __sys_bpf+0x643/0x950 [ 282.634032][ T6980] ? __pfx___sys_bpf+0x10/0x10 [ 282.634058][ T6980] ? rt_mutex_slowunlock+0x1cb/0x300 [ 282.634100][ T6980] ? ksys_write+0x248/0x270 [ 282.634132][ T6980] ? __pfx_ksys_write+0x10/0x10 [ 282.634166][ T6980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.634191][ T6980] __x64_sys_bpf+0x7c/0x90 [ 282.634221][ T6980] do_syscall_64+0x15f/0xf80 [ 282.634249][ T6980] ? trace_irq_disable+0x3b/0x140 [ 282.634282][ T6980] ? clear_bhb_loop+0x40/0x90 [ 282.634309][ T6980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.634331][ T6980] RIP: 0033:0x7f9b977cc819 [ 282.634352][ T6980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.634371][ T6980] RSP: 002b:00007f9b95a1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 282.634395][ T6980] RAX: ffffffffffffffda RBX: 00007f9b97a45fa0 RCX: 00007f9b977cc819 [ 282.634412][ T6980] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 282.634426][ T6980] RBP: 00007f9b95a1e090 R08: 0000000000000000 R09: 0000000000000000 [ 282.634439][ T6980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.634453][ T6980] R13: 00007f9b97a46038 R14: 00007f9b97a45fa0 R15: 00007ffc10bd1fd8 [ 282.634489][ T6980] [ 284.041856][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.302'. [ 284.519974][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 284.646292][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 284.648607][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 284.683507][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 284.685406][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 286.912598][ T59] Bluetooth: hci7: command tx timeout [ 287.745941][ T6999] pimreg: entered allmulticast mode [ 288.944344][ T59] Bluetooth: hci7: command tx timeout [ 291.014069][ T59] Bluetooth: hci7: command tx timeout [ 291.237490][ T6936] chnl_net:caif_netlink_parms(): no params data found [ 291.269530][ T7030] netlink: 71 bytes leftover after parsing attributes in process `syz.1.313'. [ 292.277568][ T7041] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 293.104432][ T59] Bluetooth: hci7: command tx timeout [ 294.749602][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.318'. [ 294.749642][ T7047] netlink: 56 bytes leftover after parsing attributes in process `syz.2.318'. [ 298.098900][ T7060] FAULT_INJECTION: forcing a failure. [ 298.098900][ T7060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.098941][ T7060] CPU: 1 UID: 0 PID: 7060 Comm: syz.2.322 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 298.098967][ T7060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 298.098980][ T7060] Call Trace: [ 298.098988][ T7060] [ 298.098997][ T7060] dump_stack_lvl+0xe8/0x150 [ 298.099039][ T7060] should_fail_ex+0x46b/0x600 [ 298.099077][ T7060] _copy_from_iter+0x1d3/0x1670 [ 298.099118][ T7060] ? trace_kmem_cache_alloc+0x29/0xe0 [ 298.099147][ T7060] ? __alloc_skb+0x27d/0x7d0 [ 298.099171][ T7060] ? __pfx__copy_from_iter+0x10/0x10 [ 298.099202][ T7060] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 298.099231][ T7060] ? __alloc_skb+0x27d/0x7d0 [ 298.099259][ T7060] ? netlink_sendmsg+0x650/0xb40 [ 298.099282][ T7060] ? skb_put+0x11b/0x210 [ 298.099310][ T7060] netlink_sendmsg+0x6c0/0xb40 [ 298.099343][ T7060] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.099370][ T7060] ? unwind_get_return_address+0x4d/0x90 [ 298.099400][ T7060] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 298.099433][ T7060] ____sys_sendmsg+0x94c/0x9c0 [ 298.099467][ T7060] ? __pfx_____sys_sendmsg+0x10/0x10 [ 298.099504][ T7060] ? import_iovec+0x73/0xa0 [ 298.099530][ T7060] ___sys_sendmsg+0x2a5/0x360 [ 298.099556][ T7060] ? __lock_acquire+0x6b5/0x2cf0 [ 298.099585][ T7060] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.099658][ T7060] ? __fget_files+0x2a/0x420 [ 298.099683][ T7060] ? __fget_files+0x3a6/0x420 [ 298.099719][ T7060] __x64_sys_sendmsg+0x1c3/0x2a0 [ 298.099755][ T7060] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 298.099793][ T7060] ? __pfx_ksys_write+0x10/0x10 [ 298.099832][ T7060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.099856][ T7060] do_syscall_64+0x15f/0xf80 [ 298.099885][ T7060] ? trace_irq_disable+0x3b/0x140 [ 298.099918][ T7060] ? clear_bhb_loop+0x40/0x90 [ 298.099945][ T7060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.099966][ T7060] RIP: 0033:0x7f5163fec819 [ 298.099987][ T7060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.100006][ T7060] RSP: 002b:00007f5162246028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.100030][ T7060] RAX: ffffffffffffffda RBX: 00007f5164265fa0 RCX: 00007f5163fec819 [ 298.100046][ T7060] RDX: 0000000000000044 RSI: 0000200000000280 RDI: 0000000000000003 [ 298.100061][ T7060] RBP: 00007f5162246090 R08: 0000000000000000 R09: 0000000000000000 [ 298.100074][ T7060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.100087][ T7060] R13: 00007f5164266038 R14: 00007f5164265fa0 R15: 00007ffd2c0c3e28 [ 298.100121][ T7060] [ 298.200910][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.320'. [ 299.292659][ T6936] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.292865][ T6936] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.293148][ T6936] bridge_slave_0: entered allmulticast mode [ 299.300691][ T6936] bridge_slave_0: entered promiscuous mode [ 299.333239][ T6936] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.333384][ T6936] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.333653][ T6936] bridge_slave_1: entered allmulticast mode [ 299.361989][ T7068] netlink: 71 bytes leftover after parsing attributes in process `syz.1.325'. [ 299.362525][ T6936] bridge_slave_1: entered promiscuous mode [ 301.903673][ T6936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.566056][ T6936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.804538][ T6984] chnl_net:caif_netlink_parms(): no params data found [ 304.256569][ T7082] mmap: syz.2.328 (7082): VmData 37597184 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data. [ 304.406361][ T7085] FAULT_INJECTION: forcing a failure. [ 304.406361][ T7085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.406399][ T7085] CPU: 1 UID: 0 PID: 7085 Comm: syz.1.329 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 304.406424][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 304.406437][ T7085] Call Trace: [ 304.406446][ T7085] [ 304.406455][ T7085] dump_stack_lvl+0xe8/0x150 [ 304.406493][ T7085] should_fail_ex+0x46b/0x600 [ 304.406533][ T7085] _copy_to_user+0x31/0xb0 [ 304.406558][ T7085] simple_read_from_buffer+0xe1/0x170 [ 304.406588][ T7085] proc_fail_nth_read+0x1be/0x230 [ 304.406617][ T7085] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 304.406646][ T7085] ? rw_verify_area+0x2ac/0x4e0 [ 304.406675][ T7085] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 304.406702][ T7085] vfs_read+0x212/0xa80 [ 304.406749][ T7085] ? __pfx_vfs_read+0x10/0x10 [ 304.406782][ T7085] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 304.406814][ T7085] ? lockdep_hardirqs_on+0x7a/0x110 [ 304.406845][ T7085] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 304.406875][ T7085] ? mutex_lock_nested+0x152/0x1d0 [ 304.406898][ T7085] ? fdget_pos+0x252/0x320 [ 304.406933][ T7085] ksys_read+0x156/0x270 [ 304.406965][ T7085] ? __pfx_ksys_read+0x10/0x10 [ 304.407004][ T7085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.407029][ T7085] do_syscall_64+0x15f/0xf80 [ 304.407059][ T7085] ? trace_irq_disable+0x3b/0x140 [ 304.407092][ T7085] ? clear_bhb_loop+0x40/0x90 [ 304.407125][ T7085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.407148][ T7085] RIP: 0033:0x7f658522d04e [ 304.407168][ T7085] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 304.407187][ T7085] RSP: 002b:00007f65834a4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 304.407211][ T7085] RAX: ffffffffffffffda RBX: 00007f65834a56c0 RCX: 00007f658522d04e [ 304.407227][ T7085] RDX: 000000000000000f RSI: 00007f65834a50a0 RDI: 000000000000000c [ 304.407240][ T7085] RBP: 00007f65834a5090 R08: 0000000000000000 R09: 0000000000000000 [ 304.407254][ T7085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.407266][ T7085] R13: 00007f65854e6128 R14: 00007f65854e6090 R15: 00007ffeff0dff48 [ 304.407302][ T7085] [ 305.303812][ T6936] team0: Port device team_slave_0 added [ 305.541073][ T6936] team0: Port device team_slave_1 added [ 305.570063][ T7091] netlink: 104 bytes leftover after parsing attributes in process `syz.2.331'. [ 308.676988][ T6936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.677010][ T6936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.677040][ T6936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.920685][ T6936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.920706][ T6936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.920735][ T6936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.978097][ T6984] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.978253][ T6984] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.978634][ T6984] bridge_slave_0: entered allmulticast mode [ 310.053518][ T6984] bridge_slave_0: entered promiscuous mode [ 311.121508][ T6984] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.121652][ T6984] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.121872][ T6984] bridge_slave_1: entered allmulticast mode [ 311.168956][ T6984] bridge_slave_1: entered promiscuous mode [ 313.475027][ T6984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.537476][ T6936] hsr_slave_0: entered promiscuous mode [ 313.542146][ T6936] hsr_slave_1: entered promiscuous mode [ 313.564388][ T6936] debugfs: 'hsr0' already exists in 'hsr' [ 313.564420][ T6936] Cannot create hsr debugfs directory [ 313.829406][ T6984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.510865][ T7107] netlink: 71 bytes leftover after parsing attributes in process `syz.3.335'. [ 317.407140][ T6984] team0: Port device team_slave_0 added [ 317.424542][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.424633][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.499626][ T6984] team0: Port device team_slave_1 added [ 319.317005][ T6984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.317027][ T6984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.317054][ T6984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.379333][ T6984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.379351][ T6984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.379382][ T6984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.985840][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 321.237234][ T7124] ip6gre1: entered promiscuous mode [ 325.693936][ T7126] netlink: 20 bytes leftover after parsing attributes in process `syz.3.339'. [ 326.143934][ T5820] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 326.215688][ T5820] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 326.219729][ T5820] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 326.221098][ T5820] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 326.232507][ T5820] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 326.431776][ T6984] hsr_slave_0: entered promiscuous mode [ 326.443303][ T6984] hsr_slave_1: entered promiscuous mode [ 326.520918][ T6984] debugfs: 'hsr0' already exists in 'hsr' [ 326.520953][ T6984] Cannot create hsr debugfs directory [ 326.559772][ T59] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 326.610879][ T59] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 326.624372][ T59] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 326.625892][ T59] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 326.640125][ T59] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 328.374233][ T59] Bluetooth: hci8: command tx timeout [ 328.779228][ T59] Bluetooth: hci2: unexpected event 0x04 length: 13 > 10 [ 328.779286][ T59] Bluetooth: hci2: connection err: -111 [ 329.095346][ T6116] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 329.320033][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 329.331578][ T6116] usb 4-1: Using ep0 maxpacket: 8 [ 329.365906][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 329.373206][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 329.555726][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 329.558121][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 329.676678][ T6116] usb 4-1: config 1 interface 0 altsetting 196 bulk endpoint 0x1 has invalid maxpacket 32 [ 329.676716][ T6116] usb 4-1: config 1 interface 0 altsetting 196 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 329.676743][ T6116] usb 4-1: config 1 interface 0 has no altsetting 0 [ 329.682013][ T6116] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 329.682047][ T6116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.682067][ T6116] usb 4-1: Product: 䔑払䟘긆뱤罝폦ꇕ嚖Ҭﳻ帷拨晑쾶吋谉澕脬䚓뮁헡붼倲뭮ꖥ௏⨎㠬ᶄ졈勾ꩊ㚰덥郟掹렴쏈㹝መ䤊퍯⸾盅﫤以⸜衑뀾ೢ魏黴峇銜伍⽣臒몛잉贮헗坶䃋ଛዟ‭禓ᇲ困榾ᒫಧ뼂ᆂ [ 329.682097][ T6116] usb 4-1: Manufacturer: 낣離ʵ둌뵼߹沖쪄欔䛆쥛囫乶╸千穴㬘⩇䣂墼蠕뷭붿 [ 329.682116][ T6116] usb 4-1: SerialNumber: ꍦ⳿驴孂汹荳茶麓ꂪ꒧릊࿷ἳ뾲椌ￗ턿ㄶꛖ⬥湚埔蛪ሤᤴ䊙뺸쟃饛냫䠒릖赹䕸疿㴣м [ 329.823865][ T7140] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 329.841989][ T7140] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 329.894292][ T59] Bluetooth: hci9: command tx timeout [ 330.454305][ T59] Bluetooth: hci8: command tx timeout [ 331.654192][ T59] Bluetooth: hci1: command tx timeout [ 331.974126][ T59] Bluetooth: hci9: command tx timeout [ 332.534267][ T59] Bluetooth: hci8: command tx timeout [ 333.754095][ T59] Bluetooth: hci1: command tx timeout [ 334.439132][ T59] Bluetooth: hci9: command tx timeout [ 334.617284][ T59] Bluetooth: hci8: command tx timeout [ 334.998405][ T6116] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 196 proto 1 vid 0x0525 pid 0xA4A8 [ 335.164279][ T6116] usb 4-1: USB disconnect, device number 10 [ 335.514130][ T6116] usblp0: removed [ 335.824044][ T59] Bluetooth: hci1: command tx timeout [ 336.454330][ T59] Bluetooth: hci9: command tx timeout [ 337.967155][ T59] Bluetooth: hci1: command tx timeout [ 341.677893][ T7147] input: syz0 as /devices/virtual/input/input8 [ 344.971771][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 345.026108][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 345.028755][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 345.031838][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 345.058996][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 345.589479][ T7156] netlink: 71 bytes leftover after parsing attributes in process `syz.3.344'. [ 347.494423][ T5820] Bluetooth: hci0: command tx timeout [ 349.574192][ T5820] Bluetooth: hci0: command tx timeout [ 350.320513][ T5820] Bluetooth: hci6: command 0x0406 tx timeout [ 351.655989][ T59] Bluetooth: hci0: command tx timeout [ 353.734224][ T59] Bluetooth: hci0: command tx timeout [ 358.081650][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.350'. [ 363.056344][ T7184] netlink: 36 bytes leftover after parsing attributes in process `syz.3.352'. [ 367.378823][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.495142][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.166187][ T7183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.859691][ T7183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.872577][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.872661][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.533518][ T5820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 380.600065][ T5820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 380.615078][ T5820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 380.620111][ T5820] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 380.621748][ T5820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 381.435716][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 381.492342][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 381.525165][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 381.763385][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 381.773475][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 382.777576][ T5820] Bluetooth: hci5: command tx timeout [ 383.914100][ T5820] Bluetooth: hci7: command tx timeout [ 384.279085][ T59] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 384.751986][ T59] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 384.785825][ T59] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 384.864533][ T59] Bluetooth: hci5: command tx timeout [ 385.031914][ T59] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 385.039360][ T59] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 385.974112][ T5820] Bluetooth: hci7: command tx timeout [ 386.934098][ T5820] Bluetooth: hci5: command tx timeout [ 387.185403][ T59] Bluetooth: hci10: command tx timeout [ 388.055044][ T5820] Bluetooth: hci7: command tx timeout [ 388.630132][ T59] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 388.693627][ T59] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 388.706437][ T59] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 388.724119][ T59] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 388.743912][ T59] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 389.024104][ T59] Bluetooth: hci5: command tx timeout [ 389.254433][ T59] Bluetooth: hci10: command tx timeout [ 390.134323][ T59] Bluetooth: hci7: command tx timeout [ 390.854370][ T59] Bluetooth: hci11: command tx timeout [ 391.336619][ T59] Bluetooth: hci10: command tx timeout [ 392.934238][ T59] Bluetooth: hci11: command tx timeout [ 393.027104][ T7183] ip6gre1: left promiscuous mode [ 393.054601][ T7183] syz.3.352 (7183) used greatest stack depth: 16960 bytes left [ 393.424139][ T59] Bluetooth: hci10: command tx timeout [ 395.014133][ T59] Bluetooth: hci11: command tx timeout [ 397.094139][ T59] Bluetooth: hci11: command tx timeout [ 397.968679][ T3576] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.631338][ T3576] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.337472][ T3576] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.384089][ T3576] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.882548][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 404.935973][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 404.963263][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 404.993782][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 405.017770][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 407.344430][ T5820] Bluetooth: hci1: command tx timeout [ 409.414268][ T5820] Bluetooth: hci1: command tx timeout [ 411.504896][ T5820] Bluetooth: hci1: command tx timeout [ 413.574455][ T59] Bluetooth: hci1: command tx timeout [ 414.465895][ T7209] chnl_net:caif_netlink_parms(): no params data found [ 414.924564][ T7204] chnl_net:caif_netlink_parms(): no params data found [ 415.269771][ T7216] chnl_net:caif_netlink_parms(): no params data found [ 416.200403][ T7220] chnl_net:caif_netlink_parms(): no params data found [ 418.940762][ T7209] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.940958][ T7209] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.941255][ T7209] bridge_slave_0: entered allmulticast mode [ 419.024556][ T7209] bridge_slave_0: entered promiscuous mode [ 419.531050][ T7209] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.531205][ T7209] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.531484][ T7209] bridge_slave_1: entered allmulticast mode [ 419.544218][ T7209] bridge_slave_1: entered promiscuous mode [ 421.078842][ T7204] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.079070][ T7204] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.079335][ T7204] bridge_slave_0: entered allmulticast mode [ 421.144996][ T7204] bridge_slave_0: entered promiscuous mode [ 421.461624][ T7204] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.461781][ T7204] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.462041][ T7204] bridge_slave_1: entered allmulticast mode [ 421.502686][ T7204] bridge_slave_1: entered promiscuous mode [ 421.519614][ T7216] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.519759][ T7216] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.520059][ T7216] bridge_slave_0: entered allmulticast mode [ 421.558256][ T7216] bridge_slave_0: entered promiscuous mode [ 421.795222][ T7209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.205688][ T7216] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.205865][ T7216] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.206223][ T7216] bridge_slave_1: entered allmulticast mode [ 422.220303][ T7216] bridge_slave_1: entered promiscuous mode [ 422.229818][ T7227] chnl_net:caif_netlink_parms(): no params data found [ 422.358855][ T7220] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.359032][ T7220] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.359336][ T7220] bridge_slave_0: entered allmulticast mode [ 422.394552][ T7220] bridge_slave_0: entered promiscuous mode [ 422.415569][ T7209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.715941][ T7220] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.716170][ T7220] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.721147][ T7220] bridge_slave_1: entered allmulticast mode [ 423.751854][ T7220] bridge_slave_1: entered promiscuous mode [ 423.885389][ T7204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.524359][ T7204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.570444][ T7216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.906809][ T7209] team0: Port device team_slave_0 added [ 426.463041][ T7216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.957582][ T7220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.984757][ T7209] team0: Port device team_slave_1 added [ 427.708946][ T7220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.969505][ T7204] team0: Port device team_slave_0 added [ 428.636676][ T7204] team0: Port device team_slave_1 added [ 428.640417][ T7216] team0: Port device team_slave_0 added [ 429.298488][ T7209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.298512][ T7209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.298542][ T7209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.589065][ T7216] team0: Port device team_slave_1 added [ 429.721534][ T7220] team0: Port device team_slave_0 added [ 429.725101][ T7209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.725117][ T7209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.725142][ T7209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.839201][ T7227] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.839353][ T7227] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.839605][ T7227] bridge_slave_0: entered allmulticast mode [ 429.846893][ T7227] bridge_slave_0: entered promiscuous mode [ 429.869762][ T7220] team0: Port device team_slave_1 added [ 429.981006][ T7204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.981026][ T7204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.981054][ T7204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.072562][ T7227] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.072706][ T7227] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.073408][ T7227] bridge_slave_1: entered allmulticast mode [ 430.084522][ T7227] bridge_slave_1: entered promiscuous mode [ 430.282172][ T7204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.282194][ T7204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.282225][ T7204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.405283][ T7216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.405304][ T7216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.405343][ T7216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.884285][ T7216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.884304][ T7216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.884336][ T7216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.684566][ T7220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.684586][ T7220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.684616][ T7220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.722682][ T7227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.829203][ T7220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.829223][ T7220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.829253][ T7220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.911637][ T7227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.177999][ T7209] hsr_slave_0: entered promiscuous mode [ 433.183261][ T7209] hsr_slave_1: entered promiscuous mode [ 433.185515][ T7209] debugfs: 'hsr0' already exists in 'hsr' [ 433.185545][ T7209] Cannot create hsr debugfs directory [ 437.094552][ T38] INFO: task kworker/u8:7:780 blocked for more than 143 seconds. [ 437.094581][ T38] Not tainted syzkaller #0 [ 437.094593][ T38] "echo 0 >[ 437.094593][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 437.094604][ T38] task:kworker/u8:7 state:D stack:20296 pid:780 tgid:780 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 437.094671][ T38] Workqueue: netns cleanup_net [ 437.094703][ T38] Call Trace: [ 437.094711][ T38] [ 437.094727][ T38] __schedule+0x1681/0x54c0 [ 437.094795][ T38] ? __pfx___schedule+0x10/0x10 [ 437.094823][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 437.094874][ T38] rt_mutex_schedule+0x76/0xf0 [ 437.094907][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 437.094947][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 437.094976][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 437.095004][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 437.095031][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 437.095070][ T38] ? devlink_pernet_pre_exit+0x129/0x420 [ 437.095105][ T38] ? devlink_pernet_pre_exit+0x129/0x420 [ 437.095141][ T38] ? devlink_pernet_pre_exit+0x129/0x420 [ 437.095177][ T38] mutex_lock_nested+0x168/0x1d0 [ 437.095210][ T38] devlink_pernet_pre_exit+0x129/0x420 [ 437.095243][ T38] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 437.095281][ T38] ? class_remove_file_ns+0x124/0x160 [ 437.095314][ T38] ops_undo_list+0x187/0x940 [ 437.095342][ T38] ? rt_spin_unlock+0x150/0x200 [ 437.095369][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 437.095391][ T38] ? rt_spin_unlock+0x14f/0x200 [ 437.095418][ T38] ? idr_destroy+0x21b/0x2a0 [ 437.095445][ T38] ? rt_spin_unlock+0x160/0x200 [ 437.095474][ T38] cleanup_net+0x56e/0x800 [ 437.095501][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 437.095534][ T38] ? process_scheduled_works+0xa70/0x1860 [ 437.095586][ T38] ? process_scheduled_works+0xa70/0x1860 [ 437.095620][ T38] process_scheduled_works+0xb5d/0x1860 [ 437.095689][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 437.095728][ T38] ? assign_work+0x3d5/0x5e0 [ 437.095766][ T38] worker_thread+0xa53/0xfc0 [ 437.095830][ T38] kthread+0x388/0x470 [ 437.095856][ T38] ? __pfx_worker_thread+0x10/0x10 [ 437.095886][ T38] ? __pfx_kthread+0x10/0x10 [ 437.095912][ T38] ret_from_fork+0x514/0xb70 [ 437.095950][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 437.095984][ T38] ? __switch_to+0xc79/0x1410 [ 437.096016][ T38] ? __pfx_kthread+0x10/0x10 [ 437.096043][ T38] ret_from_fork_asm+0x1a/0x30 [ 437.096086][ T38] [ 437.096241][ T38] [ 437.096241][ T38] Showing all locks held in the system: [ 437.096252][ T38] 3 locks held by kworker/u8:0/12: [ 437.096265][ T38] #0: ffff88801a084138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 437.096331][ T38] #1: ffffc90000117c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 437.096400][ T38] #2: ffffffff8dfce070 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.096460][ T38] 5 locks held by ksoftirqd/0/15: [ 437.096473][ T38] 4 locks held by rcuc/0/20: [ 437.096485][ T38] 5 locks held by rcuc/1/28: [ 437.096497][ T38] 1 lock held by khungtaskd/38: [ 437.096509][ T38] #0: ffffffff8dfc7ec0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 437.096564][ T38] 4 locks held by kworker/u8:2/43: [ 437.096580][ T38] 3 locks held by kworker/u8:6/209: [ 437.096593][ T38] #0: ffff88801a084138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 437.096653][ T38] #1: ffffc90003b4fc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 437.096713][ T38] #2: ffffffff8dfce070 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.096771][ T38] 4 locks held by kworker/u8:7/780: [ 437.096784][ T38] #0: ffff88801b2a0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 437.096841][ T38] #1: ffffc90004ebfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 437.096900][ T38] #2: ffffffff8f355200 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 437.096949][ T38] #3: ffff888060aae160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 437.097024][ T38] 3 locks held by kworker/u8:19/3616: [ 437.097036][ T38] #0: ffff88801a084138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 437.097096][ T38] #1: ffffc9000eb2fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 437.097156][ T38] #2: ffffffff8f363af8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 437.099078][ T38] 2 locks held by getty/5565: [ 437.099092][ T38] #0: ffff8880333790a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 437.099145][ T38] #1: ffffc90003cb62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 437.099216][ T38] 1 lock held by syz-executor/5808: [ 437.099228][ T38] #0: ffffffff8dfce070 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.099296][ T38] 7 locks held by syz-executor/6747: [ 437.099309][ T38] #0: ffff888037b08480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 437.099372][ T38] #1: ffff8880628a6078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 437.099433][ T38] #2: ffff888028eac698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 437.099499][ T38] #3: ffffffff8ebcc3f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 437.099549][ T38] #4: ffff888060aae160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 437.099601][ T38] #5: ffff888040ab2310 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 437.099659][ T38] #6: ffffffff8dfce070 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.099716][ T38] 1 lock held by syz.0.269/6867: [ 437.099728][ T38] #0: ffffffff8dfce070 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.099785][ T38] 1 lock held by syz-executor/6936: [ 437.099797][ T38] #0: ffffffff8dfce070 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.099874][ T38] 1 lock held by syz-executor/6984: [ 437.099886][ T38] #0: ffffffff8dfce070 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.099942][ T38] 1 lock held by syz.1.329/7084: [ 437.099954][ T38] #0: ffffffff8dfce070 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.100010][ T38] 1 lock held by syz.2.331/7088: [ 437.100022][ T38] #0: ffffffff8dfce070 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.100080][ T38] 1 lock held by syz-executor/7130: [ 437.100092][ T38] #0: ffffffff8dfce070 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.100148][ T38] 2 locks held by syz-executor/7134: [ 437.100169][ T38] #0: ffffffff8f355200 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 437.100220][ T38] #1: ffffffff8dfce070 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.100277][ T38] 1 lock held by syz-executor/7143: [ 437.100290][ T38] #0: ffffffff8dfce070 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.100347][ T38] 1 lock held by syz-executor/7152: [ 437.100359][ T38] #0: ffffffff8dfce070 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.100418][ T38] 2 locks held by syz.3.352/7184: [ 437.100430][ T38] #0: ffffffff8f8b6c38 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 437.100486][ T38] #1: ffffffff8dfce070 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.100545][ T38] 2 locks held by syz-executor/7204: [ 437.100557][ T38] #0: ffffffff8f8d3b68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 437.100614][ T38] #1: ffffffff8f363af8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 437.100662][ T38] 2 locks held by syz-executor/7209: [ 437.100674][ T38] #0: ffffffff8eab9888 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 437.100730][ T38] #1: ffffffff8f363af8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 437.100781][ T38] 2 locks held by syz-executor/7216: [ 437.100794][ T38] #0: ffffffff8f8d3b68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 437.100851][ T38] #1: ffffffff8f363af8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 437.100901][ T38] 1 lock held by syz-executor/7220: [ 437.100913][ T38] 1 lock held by syz-executor/7227: [ 437.100923][ T38] #0: ffffffff8f363af8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 437.100965][ T38] [ 437.100969][ T38] ============================================= [ 437.100969][ T38] [ 437.100977][ T38] NMI backtrace for cpu 0 [ 437.100991][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 437.101011][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 437.101024][ T38] Call Trace: [ 437.101032][ T38] [ 437.101041][ T38] dump_stack_lvl+0xe8/0x150 [ 437.101077][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 437.101101][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 437.101138][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 437.101176][ T38] sys_info+0x135/0x170 [ 437.101197][ T38] watchdog+0xfaa/0x1000 [ 437.101235][ T38] ? watchdog+0x209/0x1000 [ 437.101274][ T38] kthread+0x388/0x470 [ 437.101298][ T38] ? __pfx_watchdog+0x10/0x10 [ 437.101327][ T38] ? __pfx_kthread+0x10/0x10 [ 437.101352][ T38] ret_from_fork+0x514/0xb70 [ 437.101388][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 437.101421][ T38] ? __switch_to+0xc79/0x1410 [ 437.101453][ T38] ? __pfx_kthread+0x10/0x10 [ 437.101478][ T38] ret_from_fork_asm+0x1a/0x30 [ 437.101518][ T38] [ 437.101526][ T38] Sending NMI from CPU 0 to CPUs 1: [ 437.101555][ C1] NMI backtrace for cpu 1 [ 437.101574][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 437.101594][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 437.101603][ C1] RIP: 0010:unwind_next_frame+0x50e/0x2550 [ 437.101626][ C1] Code: c1 e8 3f 48 01 c8 48 83 e0 fe 4c 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 49 [ 437.101641][ C1] RSP: 0018:ffffc90000a2ea58 EFLAGS: 00000a07 [ 437.101657][ C1] RAX: 0000000000000000 RBX: ffffffff8ffa60c4 RCX: dffffc0000000000 [ 437.101671][ C1] RDX: ffffffff8ffa60c4 RSI: ffffffff909ca7cc RDI: ffffffff8ba70320 [ 437.101683][ C1] RBP: ffffffff8ffa60c4 R08: 0000000000000001 R09: ffffffff8dfc7ec0 [ 437.101696][ C1] R10: ffffc90000a2eb78 R11: ffffffff81aef0c0 R12: ffffffff895829ef [ 437.101708][ C1] R13: ffffffff8ffa60c4 R14: ffffc90000a2eb28 R15: ffffffff8ffa60c4 [ 437.101720][ C1] FS: 0000000000000000(0000) GS:ffff888126215000(0000) knlGS:0000000000000000 [ 437.101734][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 437.101747][ C1] CR2: 00007f222ddf9d84 CR3: 000000000ddb6000 CR4: 00000000003526f0 [ 437.101764][ C1] Call Trace: [ 437.101771][ C1] [ 437.101781][ C1] ? unwind_next_frame+0xa6/0x2550 [ 437.101801][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 437.101822][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 437.101844][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 437.101869][ C1] arch_stack_walk+0x11b/0x150 [ 437.101890][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 437.101923][ C1] stack_trace_save+0xa9/0x100 [ 437.101946][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 437.101975][ C1] kasan_save_track+0x3e/0x80 [ 437.101995][ C1] ? kasan_save_track+0x3e/0x80 [ 437.102014][ C1] ? kasan_save_free_info+0x46/0x50 [ 437.102030][ C1] ? __kasan_slab_free+0x5c/0x80 [ 437.102050][ C1] ? kfree+0x1c5/0x6c0 [ 437.102068][ C1] ? skb_release_data+0x828/0xa60 [ 437.102087][ C1] ? __kfree_skb+0x5d/0x210 [ 437.102104][ C1] ? nft_synproxy_eval_v4+0x352/0x4e0 [ 437.102125][ C1] ? nft_synproxy_do_eval+0x305/0x580 [ 437.102144][ C1] ? nft_do_chain+0x467/0x19f0 [ 437.102165][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 437.102207][ C1] kasan_save_free_info+0x46/0x50 [ 437.102223][ C1] __kasan_slab_free+0x5c/0x80 [ 437.102245][ C1] kfree+0x1c5/0x6c0 [ 437.102263][ C1] ? skb_release_data+0x828/0xa60 [ 437.102284][ C1] skb_release_data+0x828/0xa60 [ 437.102308][ C1] __kfree_skb+0x5d/0x210 [ 437.102327][ C1] nft_synproxy_eval_v4+0x352/0x4e0 [ 437.102351][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 437.102373][ C1] ? nf_ip_checksum+0x13c/0x510 [ 437.102399][ C1] nft_synproxy_do_eval+0x305/0x580 [ 437.102423][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 437.102446][ C1] ? lapic_next_event+0x11/0x20 [ 437.102466][ C1] nft_do_chain+0x467/0x19f0 [ 437.102495][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 437.102530][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 437.102553][ C1] nft_do_chain_inet+0x360/0x4b0 [ 437.102576][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 437.102601][ C1] ? NF_HOOK+0x9e/0x3c0 [ 437.102623][ C1] ? NF_HOOK+0x9e/0x3c0 [ 437.102644][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 437.102666][ C1] nf_hook_slow+0xc5/0x220 [ 437.102688][ C1] NF_HOOK+0x21f/0x3c0 [ 437.102710][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 437.102733][ C1] ? NF_HOOK+0x9e/0x3c0 [ 437.102753][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 437.102773][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 437.102796][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 437.102821][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 437.102845][ C1] NF_HOOK+0x336/0x3c0 [ 437.102865][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 437.102888][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 437.102909][ C1] ? NF_HOOK+0x9e/0x3c0 [ 437.102936][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 437.102958][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 437.102982][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 437.103003][ C1] ? process_backlog+0x271/0xc60 [ 437.103018][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 437.103040][ C1] process_backlog+0x569/0xc60 [ 437.103057][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 437.103095][ C1] __napi_poll+0xab/0x550 [ 437.103120][ C1] net_rx_action+0x696/0xe00 [ 437.103144][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 437.103159][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 437.103185][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 437.103214][ C1] handle_softirqs+0x1de/0x6d0 [ 437.103243][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 437.103266][ C1] ? rcu_cpu_kthread+0x205/0x1470 [ 437.103284][ C1] rcu_cpu_kthread+0x9e8/0x1470 [ 437.103305][ C1] ? rcu_cpu_kthread+0x205/0x1470 [ 437.103327][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 437.103346][ C1] ? schedule+0x90/0x360 [ 437.103370][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 437.103394][ C1] smpboot_thread_fn+0x541/0xa50 [ 437.103419][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 437.103447][ C1] kthread+0x388/0x470 [ 437.103465][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 437.103488][ C1] ? __pfx_kthread+0x10/0x10 [ 437.103505][ C1] ret_from_fork+0x514/0xb70 [ 437.103531][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 437.103554][ C1] ? __switch_to+0xc79/0x1410 [ 437.103576][ C1] ? __pfx_kthread+0x10/0x10 [ 437.103594][ C1] ret_from_fork_asm+0x1a/0x30 [ 437.103619][ C1] [ 437.119834][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 437.119855][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 437.119878][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 437.119889][ T38] Call Trace: [ 437.119897][ T38] [ 437.119906][ T38] vpanic+0x56c/0xa60 [ 437.119930][ T38] ? __pfx___schedule+0x10/0x10 [ 437.119956][ T38] ? __pfx_vpanic+0x10/0x10 [ 437.119984][ T38] panic+0xc5/0xd0 [ 437.120001][ T38] ? __pfx_panic+0x10/0x10 [ 437.120021][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 437.120051][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 437.120076][ T38] watchdog+0xff4/0x1000 [ 437.120108][ T38] ? watchdog+0x209/0x1000 [ 437.120141][ T38] kthread+0x388/0x470 [ 437.120169][ T38] ? __pfx_watchdog+0x10/0x10 [ 437.120194][ T38] ? __pfx_kthread+0x10/0x10 [ 437.120216][ T38] ret_from_fork+0x514/0xb70 [ 437.120247][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 437.120275][ T38] ? __switch_to+0xc79/0x1410 [ 437.120302][ T38] ? __pfx_kthread+0x10/0x10 [ 437.120324][ T38] ret_from_fork_asm+0x1a/0x30 [ 437.120358][ T38] [ 437.120516][ T38] Kernel Offset: disabled