last executing test programs: 1m35.656553865s ago: executing program 2 (id=1104): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0xa, 0x1, 0x0) getsockopt(r0, 0x1, 0x53, 0x0, &(0x7f0000000040)) 1m35.46937554s ago: executing program 2 (id=1105): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) bind$unix(r1, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e22}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) r4 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x4004510d, &(0x7f0000000000)) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) gettid() r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r5, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {&(0x7f0000000240)=""/78, 0x4e}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x3c, 0x0, @thr={0x0, &(0x7f0000000100)="8700ce0bc89e8283082ccc47363814fc9bcc0e7522b190110bc257698a1f9d0981016b437d04d98d5c0f4b5dcf4c3565673606dc2d1f6e1382cddb7d0c788767f677caeaa1f8a7a37bdb7f7dc7ef27350a1f4a3a2e9e0db56a16da4a05f80fbc4678648b84f8a1e33de36bfe1c3e68f042"}}, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x64, 0x21c) recvmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0x1}], 0x1, 0x0, 0x0, 0x20000805}, 0x20000880) 1m33.135711545s ago: executing program 2 (id=1114): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000000080002"], 0xa4}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x8031, 0xffffffffffffffff, 0xe651e000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e50002"], 0x0}, 0x94) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="02000000000080008000120008000100767469367400020060"], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f00000002c0)=""/103, 0x67, 0x0, &(0x7f0000000340)=""/94, 0x5e}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=r5, 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x211}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r10, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m31.144438738s ago: executing program 2 (id=1123): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f00000001c0)={0x5, 0x0, 0x2}) 1m30.212166859s ago: executing program 2 (id=1126): syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x0, 0x4000, 0x0, 0x4000b49, 0x3, 0x8, 0x0, 0x2}, 0x0) r5 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0) syz_clone3(&(0x7f0000000340)={0x8000000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) r7 = openat$6lowpan_enable(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_enable(r7, &(0x7f0000000080)='0', 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000140)="290000001600190f00f43fff0800da060200000000e80003dd08000401000000000000000005", 0x26}], 0x1) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0xa, @pix_mp={0x1ff, 0x0, 0x34324d59, 0x2, 0x2, [{0x9, 0x4}, {0x7, 0x2}, {0x91a, 0x9}, {0x7fffffff, 0x1}, {0x7, 0x3}, {0x6, 0x2}, {0x7fffffff, 0x74e5}, {0x8, 0x7}], 0x98, 0x1, 0x0, 0x0, 0x3}}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 1m29.421254589s ago: executing program 2 (id=1128): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@any, 0xfd, 0xc9, 0x4, '*,;', 0x3, 0x2}]}}}, 0x13) r0 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000080)=0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f00000002c0)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e21, 0x3}}, @tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x1}}, @nfc={0x27, r4, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0xff32, &(0x7f0000000280)='ip_vti0\x00', 0x5, 0x7, 0x81}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, @generic={0x1a, "9b2327027c4c492dd04e2515f58d"}, @l2={0x1f, 0x8, @none, 0x200, 0x1}, @nfc={0x27, r4}, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6, 0x6, 0xfff8}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000880), 0x802, 0x0) socket$inet(0xa, 0x801, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003}, 0x94) r5 = syz_io_uring_setup(0x7dd3, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x0, 0x3c5}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000040)=ANY=[@ANYRES64=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m28.752780734s ago: executing program 32 (id=1128): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@any, 0xfd, 0xc9, 0x4, '*,;', 0x3, 0x2}]}}}, 0x13) r0 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000080)=0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f00000002c0)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e21, 0x3}}, @tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x1}}, @nfc={0x27, r4, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0xff32, &(0x7f0000000280)='ip_vti0\x00', 0x5, 0x7, 0x81}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, @generic={0x1a, "9b2327027c4c492dd04e2515f58d"}, @l2={0x1f, 0x8, @none, 0x200, 0x1}, @nfc={0x27, r4}, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6, 0x6, 0xfff8}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000880), 0x802, 0x0) socket$inet(0xa, 0x801, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003}, 0x94) r5 = syz_io_uring_setup(0x7dd3, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x0, 0x3c5}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000040)=ANY=[@ANYRES64=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 12.349540096s ago: executing program 4 (id=1381): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="0002"], 0x18) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = dup(r0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'IPVS\x00'}], 0xa, "1be177522a2c3ef3f2de8f5cabee28a4c8a0f6cd2e0d32"}, 0x28) 12.160815657s ago: executing program 4 (id=1385): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x20, 0xe, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000000440)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000002c0)="03c43addec7a654638423c835f59d941e42b1d004bcd3f7632b266e9b5495edf473b0571d8b393a9bac038c13d1bef82b43c955133169a01c3fa73653ec5cd695c35d3b7b682b5f59d09b3e95436534732867a98504cf426e84d5647bcfc5e28be89650e0635b2eb07e98171d1e6be5d776ddf0b4348d31414d9793a13d7da53786e12554e425df35661f858bf43719a0e2f9f85fe483cd95eab1066d5f28d161aca57900292de799d831a725371fc780cf5854fe91cd9d84718b4f977c01bd5bce7d1200777dc0f6471659de81dc2e5d10e6ac5c61202a972e0eb72bde2390dceb92ef3bab3", 0xe6}, {&(0x7f0000000040)="bee037db519425b2fccfa44f575d68c3b0090ea9097f7975926dcbb79543ed77a9088168ae0c63f2aa36c160077309a084c61de4a2192b9d8ee3", 0x3a}], 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000fbffffff01000002", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="180000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0xee01], 0x34, 0x4000}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r5, &(0x7f0000001300)=""/4118, 0x1016, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0x3}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) memfd_create(0x0, 0x3) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r6, 0x0, 0x0) sendmsg$tipc(r7, 0x0, 0x8820) close(r6) 11.184351411s ago: executing program 4 (id=1392): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) bind$unix(r1, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e22}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) r4 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x4004510d, &(0x7f0000000000)) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) gettid() r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r5, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {&(0x7f0000000240)=""/78, 0x4e}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x3c, 0x0, @thr={0x0, &(0x7f0000000100)="8700ce0bc89e8283082ccc47363814fc9bcc0e7522b190110bc257698a1f9d0981016b437d04d98d5c0f4b5dcf4c3565673606dc2d1f6e1382cddb7d0c788767f677caeaa1f8a7a37bdb7f7dc7ef27350a1f4a3a2e9e0db56a16da4a05f80fbc4678648b84f8a1e33de36bfe1c3e68f0426d10a1f863ced625e85d7f9f4af20682"}}, 0x0) sendfile(r7, r6, 0x0, 0x21c) recvmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0x1}], 0x1, 0x0, 0x0, 0x20000805}, 0x20000880) 9.093640875s ago: executing program 5 (id=1395): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="0002"], 0x18) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = dup(r0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'IPVS\x00'}], 0xa, "1be177522a2c3ef3f2de8f5cabee28a4c8a0f6cd2e0d32"}, 0x28) 8.828243956s ago: executing program 5 (id=1397): socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x68152000) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000015001901000000000000000228"], 0x28}}, 0x0) 8.770556612s ago: executing program 4 (id=1400): r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x22, 0x2, 0x24) close(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x50402, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x12, r0, 0xc45f3000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) memfd_create(&(0x7f00000015c0)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF\x81\x00]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x0e\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0fi\x80\xb0)\t\xbf\xb6&!\xb3z\x17\xda\xfc\xc1\x05\x10\x1d\x8b\x17\xa1\x9b\xf285\\&\xc3\xa4\x14\xbb\xa7\xb63\xd6a\xa0x4w}\xe0O\xbc0n\xe8\x17\x7f\x9b\xf4m\xe4\nU\xa6\x91\x01\x9c;\xf6\xfcd0Q$[i\x04\x14\x12\xc5og\xe6\xca.\x95X\xfb\xf4\x87\xf1s\xee\xb6[)#\x02?\x1b\x18\xbbo\x88\x1e\x16\xd7\xc0\xd8\xa0\xaf\xbc`\xc9\x8e\xa5\xec', 0xe) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000180)={0x4, {0x2, 0x1, 0x8, 0x18, 0x2003, 0x4b}}) syz_emit_ethernet(0x1234, &(0x7f0000001540)=ANY=[@ANYBLOB="0180c200000000000000000088a8390081000000884800000f0000000000000f01000000000000000000639e244a11e221fffe880000000000000000000000000101fc0100000000000000000000000000005e000680660000000011000000000000c204"], 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x432783, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[@ANYRESHEX=r6, @ANYRESHEX=r2], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000080)={0x0, 0x100, 0x2, 0x0, 0x0, "0000fa00ea8000"}) r7 = syz_open_pts(0xffffffffffffffff, 0x0) r8 = dup3(r7, r5, 0x0) ioctl$TIOCSETD(r8, 0x541b, &(0x7f0000000ec0)) shutdown(r4, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000400)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @broadcast}, 0x14) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r6 = socket(0x2b, 0x80801, 0x1) (async) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = fcntl$dupfd(r7, 0x0, r7) write$sndseq(r8, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @time={0x5, 0x6}, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x9, 0xc9a}}}, {0x2, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r9 = accept4(r0, 0x0, 0x0, 0x800) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000340), 0x2, 0x2) (async, rerun: 32) ioctl$SG_GET_NUM_WAITING(r7, 0x227d, &(0x7f0000000380)) (rerun: 32) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) (async) getsockopt$inet6_tcp_int(r6, 0x6, 0x18, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) syz_emit_ethernet(0x145, &(0x7f00000003c0)=ANY=[], 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r10, 0x0) (async, rerun: 64) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000000c0)="b129f436911745a7b63b7ce04501c59d", 0x10) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) 6.152440993s ago: executing program 3 (id=1409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x600, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 5.964759848s ago: executing program 5 (id=1412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f0000000100)={0x2}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000140)={0x1, 0xf}) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@random="5b37182347bc", @random="130c937beae8", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9d0080", 0x14, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @loopback={0xffffff8d}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000a0000000900010073797a31000000004c000000030a010100000000000000000a0000000a000700720000746500000014000480080002400000000008000140000000000900010073797a3100000000090003"], 0x94}}, 0x0) 5.964060455s ago: executing program 1 (id=1413): r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x267) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="480003001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000c40), r1) 5.736087005s ago: executing program 3 (id=1414): syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}, @dev={0xac, 0x14, 0x14, 0x30}}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010101}, {@private, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1b}}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10b, 0x8000000000002}) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x839c7c92b5d59da7}, 0x10) ioctl$EVIOCRMFF(r4, 0x550c, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='fd=', @ANYRES64=0x0, @ANYRES16=r4, @ANYRESOCT=r2, @ANYBLOB="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", @ANYRESDEC=r0]) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x800, 0x800, 0x0) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x130, 0x0, 0x7, {0x5, 0x6, 0x0, '\x00', {0x7ff, 0xa2a, 0xd2f, 0x8000, 0x0, 0x0, 0x8000, '\x00', 0x0, 0x5, 0xb4e7, 0x7, {0x8007, 0x8}, {0xa, 0x10001}, {0x100000000, 0x7}, {0x400014, 0x9}, 0x0, 0x800b, 0x6, 0x2}}}}) write$FUSE_INIT(r6, &(0x7f0000001200)={0x50, 0x0, r7, {0x7, 0x2b, 0x0, 0x50054091, 0x2, 0x3, 0x1000}}, 0x50) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.539637926s ago: executing program 1 (id=1415): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') pread64(r1, 0x0, 0x0, 0x3c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000700)={0x5, &(0x7f00000000c0)=[{0x87b, 0xfe, 0xb9, 0x2}, {0x0, 0x4, 0xd, 0xf}, {0x81, 0x7, 0x8b}, {0x3, 0xfe, 0xbf, 0xfff}, {0xf8, 0x6, 0x2, 0x1}]}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000780)={0x4, &(0x7f0000000740)=[{0x5, 0xc, 0x26, 0x9}, {0x21, 0x5, 0x9, 0xc1a2}, {0x9, 0x0, 0x1, 0x7}, {0xe8, 0x5a, 0x71}]}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0x4, [0x0, 0x4, 0x2, 0x7, 0x0, 0x1, 0x1, 0x5, 0x8, 0x9, 0x1, 0x665, 0x4e, 0x200, 0x2f6, 0xfe01, 0x5, 0x9, 0x8, 0x643, 0x5, 0x1, 0x298b, 0x7, 0x7, 0x8000, 0x8, 0x639, 0x6, 0xfffd, 0xfff, 0xb, 0x8, 0x2, 0xa, 0x2, 0x8001, 0x7c, 0xc, 0x4, 0x1, 0xb, 0x1ff, 0x0, 0x7, 0x8, 0x948, 0xc], 0x8b}}) write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {0x401, 0x0, 0x0, 0xc}, 0x2e, [0x104, 0x8, 0xffff, 0x200, 0xe, 0x1, 0x1000, 0xe, 0xffff, 0x800, 0x0, 0x200, 0x4, 0x1000, 0x1, 0xd40, 0x8, 0xfffffe00, 0x3, 0x167b, 0x0, 0xfff, 0x2, 0x2, 0x3, 0xb06, 0x5881a732, 0x1, 0x6, 0x1ff, 0x5, 0x5, 0x31fa, 0xf85, 0x7, 0x19d, 0x9, 0x4, 0xef, 0xf, 0x6, 0x8, 0x4, 0x4, 0x4, 0xfffffff8, 0x5, 0x0, 0x8, 0xfffff801, 0x6, 0x4, 0x8, 0x40, 0xb, 0xfffffffd, 0x401, 0x4, 0x5, 0x1000, 0x5, 0x1, 0x7, 0x81], [0x7, 0x80000000, 0x7, 0x6, 0x5, 0x0, 0x7, 0xc, 0x0, 0x9cf2, 0x6, 0x3ff, 0x93f, 0x0, 0xb, 0x5, 0xca, 0x31f8, 0xdf4, 0xa15, 0xe0, 0xfffffffd, 0x7c2d, 0x100, 0x4, 0x5, 0x1ff, 0x6, 0xa, 0x4, 0xde49, 0xe3, 0x68, 0x4, 0x1ae14a87, 0x8001, 0x787, 0x5, 0x4, 0x0, 0xffff, 0x5, 0x1, 0xb, 0x28, 0x0, 0xc, 0x9, 0x45, 0xea1a, 0x0, 0x0, 0x7f, 0x6, 0x4, 0xff, 0x200, 0x1, 0x0, 0x9, 0x2, 0x8, 0x5, 0x2], [0x5, 0x1, 0x4, 0xffffffff, 0x1, 0x8, 0xffff, 0x4, 0x1, 0x8001, 0x4, 0x6, 0x4, 0x7fffffff, 0x6, 0x5, 0x0, 0x2, 0x3, 0xb, 0x2, 0x4, 0x2, 0x8, 0x400, 0x2b7b, 0x7, 0x6, 0xe, 0x7, 0x3, 0xffff8000, 0x71, 0x9, 0x1, 0xfffffffa, 0x9, 0x9, 0x1, 0xfaf1, 0x2, 0x5, 0x5, 0x4, 0x0, 0x6, 0xac6f, 0xffff4fa8, 0x9, 0x14, 0x6, 0x2, 0x0, 0x8001, 0x2, 0x8, 0x1, 0x3ff, 0x5, 0xfffffffc, 0x9, 0x0, 0x6, 0x20000], [0x6, 0x8, 0x9c000e00, 0x6, 0x9, 0x7, 0x2, 0x7c44, 0x5, 0x1ff, 0x9, 0x2, 0x80000000, 0x9, 0xfffff146, 0x9, 0x4, 0x4, 0x0, 0x0, 0x243, 0xfffffffc, 0x3e2f, 0x378683f3, 0x3, 0x4000000, 0x2ec, 0x5, 0x2, 0x5, 0x1400, 0x2, 0x1, 0x81, 0x5, 0x400, 0x7, 0x6, 0x1d0d, 0x8, 0x7, 0x0, 0x2, 0x7, 0x8000, 0x4, 0x8, 0x1, 0xb9b, 0x9, 0x5, 0x8, 0xeaf4, 0x8001, 0x9, 0x7, 0x7ff, 0x89b30000, 0x3, 0xf, 0x5, 0x0, 0xb7e, 0x7ff]}, 0x45c) sendmsg$nl_netfilter(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000004ec0)={0x18, 0x21, 0xa, 0x801, 0x0, 0x0, {}, [@nested={0x4, 0x3}]}, 0x18}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0xcc, 0x1, 0x7, 0xc00, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x44, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x19}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x800}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xced6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xa7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x101}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x401}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x40004) r2 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r2, 0x0) 5.300871991s ago: executing program 5 (id=1416): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r3, &(0x7f0000001300)=""/4118, 0x1016, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1022, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) memfd_create(0x0, 0x3) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x0) sendmsg$tipc(r5, 0x0, 0x8820) close(r4) 5.128408884s ago: executing program 1 (id=1417): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240)="ad5b5cfd0dedb018760749981b129dec1aac92a9a9758ebcbf5615cc5d23925a64fa10c2d600694ac2472d6e6576abbdbefd84904bf6cd52b0f2521d7356e6555ae2a5cc6a50b0a5eb3f71932fe8dc3229fae4e7a0ab67eaa30ce18c0962409cdc1460b9d0379ba8800493d55438c4a58f25b76d9deef7ebff0529521f85cafaa927c6a0783f5dd7", 0x88, r0}, 0x64) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x1e3a00, 0x0) ioctl$BLKALIGNOFF(r3, 0x40101287, 0x0) r4 = socket$inet_sctp(0x2, 0x0, 0x84) sendmsg$inet_sctp(r4, 0x0, 0xc851) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x8}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) r5 = socket(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r7 = inotify_init() r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r10}, 0xc) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100, r10}, 0xc) close_range(r7, 0xffffffffffffffff, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/4\x00') setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r6}, 0xc) (fail_nth: 2) 4.516652078s ago: executing program 1 (id=1418): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000040)={0x3fffffff, 0x101, "6a3ce4ab8ed6c54797be28dc6b7dcc8d5eba4a0f1dea455e02c75ec18cfcdbf4"}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfff, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$sw_sync(0xffffff9c, &(0x7f0000000040), 0x102281, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f00000000c0)=[@decrefs], 0x0, 0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r8, 0x4038ae7a, &(0x7f0000000040)={0x80, 0x40000105, 0x0, 0x0, 0xfffffd30}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = dup(r9) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000006010040"]) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000180), 0x10}, 0x94) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.512037446s ago: executing program 4 (id=1419): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r4 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000680)={'\x00', 0x8001, 0x101, 0x5308, 0xfffffffffffffffb, 0x40000, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000007c0)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000b00)=ANY=[@ANYBLOB="600012504e743ff781a700004c5af7b984eac120f309ef02bec22a3a1cb2ced5e07c3fdc6dc0f3f8c409067a5171d7ad66a8badb88dd0bf8fdea92163b6adf4e5676a931be042d6e4da1ce55f6fa3318e747576353a203bc3741c6e929a2889c4029ac9d9e93e4de53b2147392b1def7b6763c2937313590b08ce72dfbb28c86d0c1bb28fef9b0362b9a382467fcf0241ee06742", @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf253100000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000104376e986da5b5b2190000e8b1af551275", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=r6, @ANYBLOB='\b\x00R\x00', @ANYRES32=r7, @ANYBLOB="080001003f000000", @ANYRESDEC=r6, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r2, @ANYRESDEC=r4, @ANYRES8=r5], 0x60}}, 0x4000000) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) gettid() r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r8, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {&(0x7f0000000240)=""/78, 0x4e}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x3c, 0x0, @thr={0x0, &(0x7f0000000100)}}, 0x0) sendfile(r10, r9, &(0x7f0000002080)=0x64, 0x21c) r11 = dup(r0) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/93, 0xffffffffffffffa7}], 0x1, 0x2f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r11, 0x0) ioctl$BLKZEROOUT(r11, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) 3.516424692s ago: executing program 5 (id=1420): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="000202"], 0x18) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = dup(r0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'IPVS\x00'}], 0xa, "1be177522a2c3ef3f2de8f5cabee28a4c8a0f6cd2e0d32"}, 0x28) 2.912292921s ago: executing program 5 (id=1421): shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ee0000/0x3000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@fallback, 0xffffffffffffffff, 0x2f, 0x10}, 0x20) r2 = syz_clone3(&(0x7f0000001880)={0x120000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r2, r2, 0x3f) prctl$PR_SCHED_CORE(0x3e, 0x80002, r2, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x6) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) gettid() r5 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$ITER_CREATE(0x3f, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r5, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) lseek(0xffffffffffffffff, 0x36, 0x1) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x800000, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 2.664452079s ago: executing program 3 (id=1422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x7f, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0xe, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x800000, 0x5, 0x5, 0x10}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0x5, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x48, 0xe, 0x8, 0x9}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x2b, &(0x7f0000000340)=ANY=[@ANYBLOB="050f2b06"]}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 1.512450149s ago: executing program 0 (id=1424): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100000c004300"], 0x34}}, 0x0) 1.427451105s ago: executing program 1 (id=1425): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240)="ad5b5cfd0dedb018760749981b129dec1aac92a9a9758ebcbf5615cc5d23925a64fa10c2d600694ac2472d6e6576abbdbefd84904bf6cd52b0f2521d7356e6555ae2a5cc6a50b0a5eb3f71932fe8dc3229fae4e7a0ab67eaa30ce18c0962409cdc1460b9d0379ba8800493d55438c4a58f25b76d9deef7ebff0529521f85cafaa927c6a0783f5dd7", 0x88, r0}, 0x64) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x1e3a00, 0x0) ioctl$BLKALIGNOFF(r4, 0x40101287, 0x0) r5 = socket$inet_sctp(0x2, 0x0, 0x84) sendmsg$inet_sctp(r5, 0x0, 0xc851) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x8}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, 0x0) socket(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)) r6 = inotify_init() r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r9}, 0xc) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x10742, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x80a0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000380)={[0x4, 0x40, 0x4, 0x81, 0xffffc, 0xfffffffffffffffc, 0x2004c8, 0x8000000, 0x10000000000000, 0x0, 0x3, 0x6, 0x5, 0x40000000006b, 0x2, 0x3], 0xdddd0000, 0x190215}) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r12, 0x4040aea0, &(0x7f0000000040)=@x86={0xff, 0x1, 0x7, 0x0, 0x9, 0x3, 0x7f, 0x9, 0x62, 0x81, 0x7, 0xc, 0x0, 0x3fd, 0x7, 0x7, 0x2, 0xcd, 0x1, '\x00', 0xe, 0x84}) ioctl$KVM_RUN(r12, 0xae80, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100, r9}, 0xc) close_range(r6, 0xffffffffffffffff, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) 1.387382501s ago: executing program 0 (id=1426): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}, {{&(0x7f0000000680)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000700)="b5", 0x1}], 0x1}}], 0x3, 0x1005) (async) socket$kcm(0x10, 0x2, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x92) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000004c0)=[{{&(0x7f0000000280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000003580)=""/4096}]}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000880)=""/212, 0xd4}, {&(0x7f0000000980)=""/170, 0xaa}], 0x2, &(0x7f0000000b00)=""/199, 0xc7}, 0x7}, {{&(0x7f0000000a40)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000c00)=""/67, 0x43}, {&(0x7f0000000c80)=""/172, 0xac}, {&(0x7f0000000d40)=""/134, 0x86}, {&(0x7f0000000e00)=""/136, 0x82}], 0x4}, 0xa2e}, {{&(0x7f0000000ec0)=@ieee802154, 0x80, &(0x7f0000001080)=[{&(0x7f0000001cc0)=""/239, 0xef}, {&(0x7f0000001040)=""/27, 0x1b}], 0x2, &(0x7f00000010c0)=""/24, 0x32}, 0x6}, {{&(0x7f0000001c40)=@xdp, 0x80, &(0x7f0000001240)=[{&(0x7f0000001180)=""/185, 0xb9}], 0x1, &(0x7f0000001280)=""/186, 0xba}, 0xfffffffa}, {{&(0x7f0000001340)=@isdn, 0x80, &(0x7f00000017c0)=[{&(0x7f00000013c0)=""/6, 0x6}, {&(0x7f0000001400)=""/187, 0xbb}, {&(0x7f00000014c0)=""/16, 0x10}, {&(0x7f0000001500)=""/245, 0xf5}, {&(0x7f0000001600)=""/162, 0xa2}, {&(0x7f00000016c0)=""/12, 0xc}, {&(0x7f0000001700)=""/128, 0x80}], 0x7, &(0x7f0000001800)=""/100, 0x64}, 0x8}, {{&(0x7f0000001880)=@pppoe, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001900)=""/155, 0x9b}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000006ec0)=""/4103, 0x1007}, {&(0x7f00000019c0)=""/102, 0x66}, {&(0x7f0000001a40)=""/31, 0x1f}], 0x5, &(0x7f0000001ac0)=""/6, 0x6}, 0x4}, {{&(0x7f0000001b00)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001e80), 0x0, &(0x7f0000001ec0)=""/59, 0x3b}, 0x36cf}, {{&(0x7f0000001f00)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002140)=[{&(0x7f0000001f80)=""/95, 0x5f}, {&(0x7f0000002000)=""/166, 0xa6}, {&(0x7f00000020c0)=""/63, 0x3f}, {&(0x7f0000002100)=""/18, 0x12}], 0x4, &(0x7f0000002180)=""/62, 0x3e}, 0xfffffffa}, {{&(0x7f00000021c0)=@ax25={{0x3, @bcast}, [@rose, @default, @rose, @remote, @remote, @default, @null]}, 0x80, &(0x7f0000004600)=[{&(0x7f0000002340)=""/226, 0xe2}, {&(0x7f0000002440)=""/150, 0x96}, {&(0x7f0000002240)=""/116, 0x74}, {&(0x7f0000001100)=""/96, 0x5a}], 0x4, &(0x7f0000004640)=""/105, 0x69}, 0x1}], 0xa, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004940)="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", 0x2000, &(0x7f0000006e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002500)={0x78, 0x0, 0x2, {0x7f, 0xfffffff8, 0x0, {0x5, 0x7, 0x8, 0xffffffffffffffff, 0x45, 0x800, 0x8, 0x3, 0x2, 0x1000, 0x3, 0x0, 0x0, 0x3, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[], 0x200}, 0x1, 0x0, 0x0, 0x48000}, 0x4004) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000600000000000007000000890704e0067d36bdc100006a001cfae98e3f33095b0d00", @ANYRES16=r2, @ANYBLOB="3aabcf7b90c31580cf641b8b4edaea931cd3", @ANYRES32=r2], 0x38}, 0x0) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) socket$kcm(0x2d, 0x2, 0x0) (async) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r3) prlimit64(0x0, 0xe, 0x0, 0x0) (async) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r4, 0xc028aa03, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="ec0000001000000228bd700000000000ac1e0901000000000000000000000000ac1414aa0000000000000000000000004e230001000020000a00000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe88000000000000000000000000000100000000320000002001000000000000000000000000000100000000000000000000000000000000080000000000000001000000010000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fcffffffffffffff0c000000fcffffff0000000027bd7000000000000200000200000000c86ad4ca4f74e6a8a9ac2bb1faf74cce1a2523a3fd"], 0xec}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtclass={0x54, 0x28, 0x500, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0x1, 0x9}, {0xb}}, [@tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x7, 0x2}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x5b, 0x9}}, @tclass_kind_options=@c_multiq={0xb}]}, 0x54}}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000054000100dbceb5", @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.12860238s ago: executing program 0 (id=1427): r0 = socket(0xa, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) listen(r0, 0x267) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000c40), r1) 1.12394746s ago: executing program 4 (id=1428): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x10c000, 0x80000000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0x2000, 0x1000, 0xfffffffc}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x40, 0x9, @empty, 0x6}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) writev(r7, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) futex_waitv(&(0x7f0000002180)=[{0x200, &(0x7f0000000140)=0x3, 0x82}, {0x4, &(0x7f0000000200)=0x100000001, 0x2}, {0x5, &(0x7f00000002c0)=0x8, 0x2}, {0x8, &(0x7f0000000300)=0x8, 0x2}, {0x6070d72e, &(0x7f0000000340)=0xfffffffffffffffd, 0x82}, {0x609f0de7, &(0x7f00000003c0)=0xfb, 0x82}, {0x20000, &(0x7f0000000400)=0x2, 0x82}, {0x30000000000, &(0x7f0000000440)=0x9, 0x2}, {0xd232, 0x0, 0x82}, {0xffffffff00000000, &(0x7f00000006c0)=0x80, 0x2}, {0x94a, &(0x7f0000000700)=0xfffffffffffffff9, 0x2}, {0x6, 0x0, 0x2}, {0x8, &(0x7f00000007c0)=0x18, 0x82}, {0x3, 0x0, 0x82}, {0xfffffffffffffffc, &(0x7f0000000840)=0x9, 0x2}, {0x0, &(0x7f0000000880)=0x200000009, 0x82}, {0x1, &(0x7f00000008c0), 0x2}, {0x100000000, &(0x7f0000000900), 0x2}, {0xffffffffffffffff, &(0x7f0000000940)=0x8000000000000000, 0x2}, {0x3, &(0x7f0000000980)=0xffffffffffffffff, 0x2}, {0xffffffffffffffff, &(0x7f00000009c0)=0x3, 0x82}, {0x0, &(0x7f0000000a00)=0x5, 0x82}, {0xa, &(0x7f0000000a40)=0x10000, 0x82}, {0x6, &(0x7f0000000a80), 0x2}, {0x1, &(0x7f0000000ac0)=0x1000, 0x82}, {0x3000, &(0x7f0000000b00)=0x100d29, 0x82}, {0x0, &(0x7f0000000b40)=0x1ff, 0x2}, {0x9, &(0x7f0000000b80)=0x5, 0x2}, {0x8000000000000001, &(0x7f0000000bc0)=0xfffffffffffffff9, 0x82}, {0x2, &(0x7f0000000c00)=0x8001, 0x82}, {0x7fffffffffffffff, 0x0, 0x82}, {0x0, &(0x7f0000000cc0)=0x401, 0x2}, {0x46, &(0x7f0000000d00)=0x8, 0x2}, {0x7, &(0x7f0000000d40)=0x100000001, 0x82}, {0x80000000000000, &(0x7f0000000d80)=0x2, 0x2}, {0xd, &(0x7f0000000dc0)=0xa, 0x82}, {0xb, &(0x7f0000000e00)=0x9, 0x82}, {0x3, &(0x7f0000000e40)=0xe84, 0x2}, {0x1, &(0x7f0000000e80)=0x7, 0x2}, {0x2, &(0x7f0000000ec0)=0x6, 0x2}, {0x6, &(0x7f0000000f00)=0x3, 0x2}, {0x38, &(0x7f0000000f40)=0x1, 0x2}, {0x80000000, &(0x7f0000000f80)=0x7, 0x82}, {0xd11c, &(0x7f0000000fc0)=0x6, 0x2}, {0x2, &(0x7f0000001000)=0x7fffffff, 0x2}, {0x7ff, &(0x7f0000001040)=0x8000000000000001, 0x2}, {0x8ec3, &(0x7f0000001080)=0x8, 0x2}, {0x1, &(0x7f00000010c0)=0x4, 0x2}, {0x1, &(0x7f0000001100)=0xfffffffffffffff7, 0x2}, {0x0, &(0x7f0000001140)=0xfc, 0x2}, {0x2396, &(0x7f0000001180)=0x3ff0000000000000, 0x2}, {0x9, &(0x7f00000011c0)=0x6, 0x2}, {0x4, &(0x7f0000001240)=0x6}, {0x2, &(0x7f0000001280)=0x4, 0x82}, {0xffff, &(0x7f00000012c0)=0x7}, {0x6, &(0x7f0000001300)=0x8, 0x82}, {0x3, &(0x7f0000001340)=0x7, 0x2}, {0x9, &(0x7f0000001380)=0x6, 0x2}, {0x4, &(0x7f00000013c0)=0x6, 0x82}, {0x5, &(0x7f0000001400)=0x3, 0x82}, {0x5, &(0x7f0000001440)=0x3, 0x82}, {0x0, &(0x7f0000001480)=0xfff, 0x82}, {0x800, &(0x7f00000014c0)=0x8, 0x82}, {0x7, &(0x7f0000001500)=0x4, 0x82}, {0x1ff, &(0x7f0000001540)=0xfffffffffffff801, 0x82}, {0x3, &(0x7f0000001580)=0x2, 0x82}, {0x9, &(0x7f00000015c0)=0x8}, {0xadf2, &(0x7f0000001600)=0x7, 0x82}, {0x10001, &(0x7f0000001640)=0x7, 0x82}, {0x9, &(0x7f0000001680)=0x100, 0x82}, {0x2, &(0x7f00000016c0), 0x82}, {0x6, &(0x7f0000001700)=0x7, 0x82}, {0xe, &(0x7f0000001740)=0x7fff, 0x82}, {0xfff, &(0x7f0000001780)=0x4, 0x2}, {0x3, &(0x7f00000017c0)=0x87e, 0x82}, {0xa, &(0x7f0000001800)=0xffffffff, 0x2}, {0x4d6, 0x0, 0x82}, {0x0, &(0x7f0000001880)=0x373, 0x2}, {0x5, &(0x7f00000018c0)=0x6, 0x82}, {0xa, 0x0, 0x82}, {0x5, &(0x7f0000001940)=0x5, 0x2}, {0x32, &(0x7f0000001980)=0x3, 0x82}, {0x9, 0x0, 0x2}, {0x7fffffffffffffff, &(0x7f0000001a00)=0xbe92, 0x2}, {0x101, 0x0, 0x82}, {0x80000000, &(0x7f0000001a80)=0xffffffffffffffff, 0x2}, {0x8, &(0x7f0000001b00)=0x7, 0x2}, {0x8001, &(0x7f0000001b40)=0x4, 0x2}, {0x7, &(0x7f0000001b80)=0x3, 0x82}, {0x0, 0x0}, {0x2, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0xffffffff, &(0x7f0000001c80)=0x4, 0x82}, {0x3, 0x0, 0x82}, {0x8, &(0x7f0000001d00)=0xfffffffffffffffc, 0x82}, {0x6, &(0x7f0000001d40)=0x5}, {0xe, 0x0, 0x82}, {0x1, &(0x7f0000001dc0)=0x1, 0x2}, {0x2, &(0x7f0000001e00)=0x3a5, 0x2}, {0x6c2, 0x0, 0x82}, {0xb54, 0x0, 0x82}, {0x6, &(0x7f0000001f00)=0x139fcf2c, 0x2}, {0xa80, &(0x7f0000001f40)=0x100000000, 0x2}, {0x181b, &(0x7f0000001f80)=0x40, 0x2}, {0x2, &(0x7f0000002000)=0x3ff, 0x2}, {0x8000, &(0x7f0000002040)=0x8, 0x82}, {0x6, &(0x7f0000002080)=0xfffffffffffffffd}, {0x7fffffffffffffff, &(0x7f00000020c0)=0xf, 0x2}, {0x4, &(0x7f0000002140)=0x7ff, 0x82}], 0x6d, 0x0, &(0x7f0000000240)={0x77359400}, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="b4000000190001000000000000000000ac1414aa000000000000000000000000ffffffff000000000000000000000000000000034e1d00000a0000805e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'bond0\x00', &(0x7f0000000200)=@ethtool_drvinfo={0x3, "93be27ff6dd984055a101c449bbe58aeb9583c618fca9139aab63dbee6eba110", "21a509821a9d4138bf9826b549a3f025eeab79b50c7fa60c70b0eb7036235854", "af5e8db399c4b5eecc8db19cf9559e0045bdb589ae296946c2ab4b1d3b0f9552", "8d45ade8dfbc67b035dbe93d30269a5752320ce50c2843b934c639b6cee937d1", "904ac01a6d96e1339bae54614f1e2c36117eff01e00377b6f5635a5c5755bb07", "0ebc1ec72770801d723a8fd8", 0x3, 0x5914, 0x0, 0x80, 0x10001}}) 932.265218ms ago: executing program 0 (id=1429): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r0, 0xa00) 931.873486ms ago: executing program 1 (id=1430): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) syz_emit_ethernet(0x42, &(0x7f0000000200)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @remote}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0xf, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x88, 0xfffe, @loopback, @dev={0xac, 0x14, 0x14, 0xe}}}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0xf, 0x4, 0x70}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000009902"]) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x20000804) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r9, @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r8, 0x7, 0x9, 0xfffffffe}) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0}]) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) open(&(0x7f0000000380)='./file0\x00', 0x400000, 0x129) 873.167755ms ago: executing program 0 (id=1431): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="000202"], 0x18) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = dup(r0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'IPVS\x00'}], 0xa, "1be177522a2c3ef3f2de8f5cabee28a4c8a0f6cd2e0d32"}, 0x28) 580.547779ms ago: executing program 0 (id=1432): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000030000000900010073797a30000000005c000000090a010400000000000000000300000008000a40000000000909000000000000000000000900010073797a30000000000800054000000023200011800e000100636f6e6e6c696d69740000000c0002800800024000000000140000001000010000000000000000000000000a"], 0xa4}}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9c000000000000", @ANYRESDEC=r0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c150100000000377e0000000c00010065000000000000000c00010003000000000000000c00010005000000000000020c00010000000000000000000c00070000bf89000000000000000480080005"], 0x9c}, 0x1, 0xba01}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r2}, 0x7f, &(0x7f00000005c0)={&(0x7f00000000c0)=@can={{}, 0xfe, 0x0, 0x4, 0x2, '\x00\x00\x00\x00\a\x00'}, 0x210}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) r4 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r4, &(0x7f0000000080)="6332ae6d9fc7ff54865e0aca0ddd0abef0ceefc4bb0e5d12838dc15c52d161f552d8e46faa4088c45e73df92a9e91cc5017aafbd122f8f7288ffec6e6cb97152381a64e186e2c9a49560bfddf992f638997beab6b86c92d9e14de9063062534701ffa58223f2eb28f87324535be81e4b4692d50097aa9f4ba65065b58f1ab6c7d4e4297782dcf256cd4e6a5e484425651fa0a9a65b004a37cc8ba97f4c93", 0x9e) close(r3) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') syz_open_dev$vbi(&(0x7f0000000f40), 0x0, 0x2) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) eventfd(0x80b) 0s ago: executing program 3 (id=1433): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) read$alg(r2, &(0x7f0000000580)=""/83, 0x53) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@delqdisc={0x34, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x3}, {0x7, 0x9}, {0x1, 0xffe0}}, [@q_dsmark={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x3ff}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000200)="fd", 0x1}], 0x1, 0x0, 0x0, 0x8008044}, 0x881) r4 = dup(r0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000000)=0xb, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) kernel console output (not intermixed with test programs): 9906] netlink: 32 bytes leftover after parsing attributes in process `syz.3.993'. [ 413.678171][ T5950] gs_usb 1-1:0.0: Configuring for 14 interfaces [ 413.688211][ T5950] gs_usb 1-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 413.712957][ T5950] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 413.930625][ T9914] syz.4.996 (9914): drop_caches: 2 [ 413.946393][ T9914] syz.4.996 (9914): drop_caches: 2 [ 415.564792][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.998'. [ 415.689253][ T9936] usb usb8: usbfs: process 9936 (syz.2.1000) did not claim interface 0 before use [ 415.717437][ T9936] syz.2.1000 (9936): drop_caches: 2 [ 415.779880][ T9936] syz.2.1000 (9936): drop_caches: 2 [ 415.805322][ T9] usb 1-1: USB disconnect, device number 30 [ 415.856513][ T9936] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 416.122013][ T9940] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 417.506924][ T9953] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 417.741126][ T9967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.178342][ T9979] netlink: 'syz.3.1010': attribute type 5 has an invalid length. [ 418.315991][ T9979] ip6erspan0: entered promiscuous mode [ 418.511874][ T9969] tipc: Enabled bearer , priority 0 [ 418.705139][ T9976] tipc: Disabling bearer [ 419.195843][ T9986] syz.0.1011 (9986): drop_caches: 2 [ 419.217655][ T9986] syz.0.1011 (9986): drop_caches: 2 [ 421.413401][T10027] netlink: 'syz.1.1024': attribute type 2 has an invalid length. [ 421.591284][ T980] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 421.699351][T10037] FAULT_INJECTION: forcing a failure. [ 421.699351][T10037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.717361][T10037] CPU: 1 UID: 0 PID: 10037 Comm: syz.3.1028 Not tainted syzkaller #0 PREEMPT(full) [ 421.717395][T10037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 421.717411][T10037] Call Trace: [ 421.717421][T10037] [ 421.717431][T10037] dump_stack_lvl+0x189/0x250 [ 421.717466][T10037] ? __pfx____ratelimit+0x10/0x10 [ 421.717491][T10037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.717519][T10037] ? __pfx__printk+0x10/0x10 [ 421.717566][T10037] should_fail_ex+0x414/0x560 [ 421.717608][T10037] _copy_to_user+0x31/0xb0 [ 421.717643][T10037] simple_read_from_buffer+0xe1/0x170 [ 421.717684][T10037] proc_fail_nth_read+0x1b3/0x220 [ 421.717715][T10037] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 421.717746][T10037] ? rw_verify_area+0x2a6/0x4d0 [ 421.717775][T10037] ? __lock_acquire+0xab9/0xd20 [ 421.717806][T10037] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 421.717834][T10037] vfs_read+0x1fd/0xa30 [ 421.717863][T10037] ? fdget_pos+0x247/0x320 [ 421.717889][T10037] ? __pfx___mutex_lock+0x10/0x10 [ 421.717916][T10037] ? __pfx_vfs_read+0x10/0x10 [ 421.717948][T10037] ? __fget_files+0x2a/0x420 [ 421.717974][T10037] ? __fget_files+0x3a0/0x420 [ 421.717994][T10037] ? __fget_files+0x2a/0x420 [ 421.718025][T10037] ksys_read+0x145/0x250 [ 421.718072][T10037] ? __pfx_ksys_read+0x10/0x10 [ 421.718108][T10037] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.718137][T10037] __do_fast_syscall_32+0xb6/0x2b0 [ 421.718164][T10037] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.718193][T10037] do_fast_syscall_32+0x34/0x80 [ 421.718219][T10037] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 421.718248][T10037] RIP: 0023:0xf7fc4539 [ 421.718279][T10037] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 421.718299][T10037] RSP: 002b:00000000f54a5590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 421.718323][T10037] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54a5620 [ 421.718339][T10037] RDX: 000000000000000f RSI: 00000000f7454ff4 RDI: 0000000000000000 [ 421.718353][T10037] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 421.718366][T10037] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 421.718380][T10037] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 421.718415][T10037] [ 422.020452][ T980] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 422.040030][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.102195][ T980] usb 3-1: config 0 descriptor?? [ 422.259677][T10042] netlink: 'syz.0.1027': attribute type 5 has an invalid length. [ 422.329994][T10031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.407853][T10031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.451563][T10031] bond0 (unregistering): Released all slaves [ 422.817677][ T980] hackrf 3-1:0.0: Board ID: 00 [ 422.830967][ T980] hackrf 3-1:0.0: Firmware version: [ 422.887148][ T980] hackrf 3-1:0.0: Registered as swradio24 [ 422.901147][ T980] videodev: could not get a free minor [ 422.906829][ T980] hackrf 3-1:0.0: Failed to register as video device (-23) [ 422.942126][ T980] hackrf 3-1:0.0: probe with driver hackrf failed with error -23 [ 423.089069][T10054] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:21 [ 423.097427][T10042] ip6erspan0: entered promiscuous mode [ 423.105746][ T980] usb 3-1: USB disconnect, device number 39 [ 423.114787][T10054] netlink: 'syz.4.1030': attribute type 50 has an invalid length. [ 423.241064][T10055] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1030'. [ 423.361281][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 423.439917][T10061] bond0: entered promiscuous mode [ 423.453385][T10061] bond0 (unregistering): Released all slaves [ 423.547053][ T9] usb 4-1: config 0 has no interfaces? [ 423.556511][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 423.568701][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.577372][ T9] usb 4-1: Product: syz [ 423.582016][ T9] usb 4-1: Manufacturer: syz [ 423.586664][ T9] usb 4-1: SerialNumber: syz [ 423.690387][ T9] usb 4-1: config 0 descriptor?? [ 426.647311][ T5943] usb 4-1: USB disconnect, device number 38 [ 427.059611][T10127] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:21 [ 427.069412][T10127] netlink: 'syz.1.1052': attribute type 50 has an invalid length. [ 427.085475][T10127] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1052'. [ 427.261197][ T5943] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 427.450211][ T5943] usb 4-1: no configurations [ 427.458942][ T5943] usb 4-1: can't read configurations, error -22 [ 427.581162][ T983] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 427.626696][ T5943] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 428.042148][ T983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.061464][ T983] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 428.071208][ T5943] usb 4-1: no configurations [ 428.075865][ T5943] usb 4-1: can't read configurations, error -22 [ 428.091634][ T5943] usb usb4-port1: attempt power cycle [ 428.111275][ T983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.141771][ T983] usb 1-1: config 0 descriptor?? [ 428.373525][ T983] usbhid 1-1:0.0: can't add hid device: -71 [ 428.427547][ T983] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 428.461776][ T983] usb 1-1: USB disconnect, device number 31 [ 428.471090][ T5943] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 428.512530][ T5943] usb 4-1: no configurations [ 428.517207][ T5943] usb 4-1: can't read configurations, error -22 [ 428.662216][ T5943] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 428.692247][ T5943] usb 4-1: no configurations [ 428.697054][ T5943] usb 4-1: can't read configurations, error -22 [ 428.706046][ T5943] usb usb4-port1: unable to enumerate USB device [ 428.811195][ T980] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 428.901205][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 428.921198][ T983] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 428.963114][ T980] usb 2-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 428.976481][ T980] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 428.986103][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.994642][ T980] usb 2-1: Product: syz [ 428.998858][ T980] usb 2-1: Manufacturer: syz [ 429.003932][ T980] usb 2-1: SerialNumber: syz [ 429.020264][ T980] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 429.028333][ T980] dvb-usb: bulk message failed: -22 (3/0) [ 429.051311][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 429.064221][ T980] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 429.076866][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.081330][ T983] usb 1-1: Using ep0 maxpacket: 16 [ 429.091600][ T980] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 429.102606][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.104766][ T983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.113186][ T980] dvb_usb_umt_010 2-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 429.135037][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 429.151750][ T983] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 429.164526][ T983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.171166][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 429.185401][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.212287][ T9] usb 3-1: config 0 descriptor?? [ 429.275140][ T983] usb 1-1: config 0 descriptor?? [ 429.323170][ T980] usb 2-1: USB disconnect, device number 31 [ 429.491291][T10139] binder: 10138:10139 ioctl c0306201 80000300 returned -14 [ 429.576943][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 429.591080][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 429.616832][ T9] usb 3-1: USB disconnect, device number 40 [ 429.729350][ T983] mcp2221 0003:04D8:00DD.000F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 430.215575][T10153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.232037][T10153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.246796][T10153] bond0 (unregistering): Released all slaves [ 430.305675][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 430.338651][ T30] audit: type=1326 audit(1758164464.413:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10156 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7fc00000 [ 430.371587][ T980] usb 1-1: USB disconnect, device number 32 [ 430.473514][ T9] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 430.484894][ T9] usb 2-1: config 0 has no interface number 0 [ 430.495696][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 430.520978][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.537488][ T9] usb 2-1: Product: syz [ 430.542770][ T9] usb 2-1: Manufacturer: syz [ 430.547634][ T9] usb 2-1: SerialNumber: syz [ 430.565871][ T9] usb 2-1: config 0 descriptor?? [ 430.609054][T10171] FAULT_INJECTION: forcing a failure. [ 430.609054][T10171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.622985][T10171] CPU: 1 UID: 0 PID: 10171 Comm: syz.4.1070 Not tainted syzkaller #0 PREEMPT(full) [ 430.623015][T10171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 430.623027][T10171] Call Trace: [ 430.623036][T10171] [ 430.623044][T10171] dump_stack_lvl+0x189/0x250 [ 430.623074][T10171] ? __pfx____ratelimit+0x10/0x10 [ 430.623094][T10171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.623118][T10171] ? __pfx__printk+0x10/0x10 [ 430.623162][T10171] should_fail_ex+0x414/0x560 [ 430.623216][T10171] strncpy_from_user+0x36/0x290 [ 430.623250][T10171] path_getxattrat+0x122/0x400 [ 430.623292][T10171] ? __pfx_path_getxattrat+0x10/0x10 [ 430.623349][T10171] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.623371][T10171] __do_fast_syscall_32+0xb6/0x2b0 [ 430.623393][T10171] do_fast_syscall_32+0x34/0x80 [ 430.623409][T10171] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 430.623429][T10171] RIP: 0023:0xf705e539 [ 430.623447][T10171] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 430.623468][T10171] RSP: 002b:00000000f544e55c EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 430.623488][T10171] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002100 [ 430.623502][T10171] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 430.623513][T10171] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 430.623524][T10171] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 430.623535][T10171] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 430.623556][T10171] [ 430.815856][ T9] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 430.831216][ T9] usb 2-1: No valid video chain found. [ 430.847329][ T9] usb 2-1: USB disconnect, device number 32 [ 430.955362][ T30] audit: type=1326 audit(1758164465.003:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10156 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc4539 code=0x7fc00000 [ 431.054023][ T30] audit: type=1326 audit(1758164465.003:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10156 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7fc00000 [ 431.152235][ T30] audit: type=1326 audit(1758164465.003:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10156 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7fc00000 [ 431.336682][ T30] audit: type=1326 audit(1758164465.003:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10156 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7fc00000 [ 431.449278][ T30] audit: type=1326 audit(1758164465.003:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10156 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7fc00000 [ 431.667587][T10191] netlink: 'syz.1.1076': attribute type 8 has an invalid length. [ 432.832534][T10204] FAULT_INJECTION: forcing a failure. [ 432.832534][T10204] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 432.931074][T10204] CPU: 0 UID: 0 PID: 10204 Comm: syz.4.1079 Not tainted syzkaller #0 PREEMPT(full) [ 432.931104][T10204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 432.931116][T10204] Call Trace: [ 432.931125][T10204] [ 432.931134][T10204] dump_stack_lvl+0x189/0x250 [ 432.931164][T10204] ? __pfx____ratelimit+0x10/0x10 [ 432.931184][T10204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.931208][T10204] ? __pfx__printk+0x10/0x10 [ 432.931238][T10204] ? fs_reclaim_acquire+0x7d/0x100 [ 432.931267][T10204] should_fail_ex+0x414/0x560 [ 432.931303][T10204] prepare_alloc_pages+0x213/0x610 [ 432.931341][T10204] __alloc_frozen_pages_noprof+0x123/0x370 [ 432.931368][T10204] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 432.931395][T10204] ? cpuset_nodemask_valid_mems_allowed+0x6e/0x80 [ 432.931420][T10204] ? policy_nodemask+0x59d/0x720 [ 432.931448][T10204] ? _raw_read_unlock+0x28/0x50 [ 432.931481][T10204] alloc_pages_mpol+0x232/0x4a0 [ 432.931517][T10204] vma_alloc_folio_noprof+0xe4/0x200 [ 432.931550][T10204] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 432.931593][T10204] folio_prealloc+0x30/0x180 [ 432.931625][T10204] __handle_mm_fault+0x16fd/0x5440 [ 432.931670][T10204] ? __pfx___handle_mm_fault+0x10/0x10 [ 432.931712][T10204] ? follow_page_pte+0x7ef/0x13e0 [ 432.931749][T10204] handle_mm_fault+0x40a/0x8e0 [ 432.931788][T10204] __get_user_pages+0x1699/0x2ce0 [ 432.931852][T10204] populate_vma_page_range+0x29f/0x3a0 [ 432.931880][T10204] ? __pfx_populate_vma_page_range+0x10/0x10 [ 432.931903][T10204] ? apply_vma_lock_flags+0x344/0x3c0 [ 432.931932][T10204] ? down_read+0x1ad/0x2e0 [ 432.931958][T10204] __mm_populate+0x24c/0x380 [ 432.931985][T10204] ? __pfx___mm_populate+0x10/0x10 [ 432.932013][T10204] ? up_write+0x1c4/0x420 [ 432.932041][T10204] do_mlock+0x625/0x740 [ 432.932074][T10204] ? __pfx_do_mlock+0x10/0x10 [ 432.932097][T10204] ? fput+0xa0/0xd0 [ 432.932118][T10204] ? ksys_write+0x22a/0x250 [ 432.932153][T10204] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 432.932180][T10204] __ia32_sys_mlock+0x5f/0x70 [ 432.932202][T10204] __do_fast_syscall_32+0xb6/0x2b0 [ 432.932226][T10204] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.932251][T10204] do_fast_syscall_32+0x34/0x80 [ 432.932273][T10204] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 432.932297][T10204] RIP: 0023:0xf705e539 [ 432.932315][T10204] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 432.932338][T10204] RSP: 002b:00000000f544e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000096 [ 432.932361][T10204] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000800000 [ 432.932375][T10204] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 432.932387][T10204] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 432.932399][T10204] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 432.932412][T10204] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 432.932442][T10204] [ 433.894218][T10221] FAULT_INJECTION: forcing a failure. [ 433.894218][T10221] name failslab, interval 1, probability 0, space 0, times 0 [ 433.910747][T10221] CPU: 0 UID: 0 PID: 10221 Comm: syz.3.1084 Not tainted syzkaller #0 PREEMPT(full) [ 433.910776][T10221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 433.910789][T10221] Call Trace: [ 433.910797][T10221] [ 433.910806][T10221] dump_stack_lvl+0x189/0x250 [ 433.910835][T10221] ? __pfx____ratelimit+0x10/0x10 [ 433.910856][T10221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.910884][T10221] ? __pfx__printk+0x10/0x10 [ 433.910918][T10221] ? __pfx___might_resched+0x10/0x10 [ 433.910935][T10221] ? fs_reclaim_acquire+0x7d/0x100 [ 433.910969][T10221] should_fail_ex+0x414/0x560 [ 433.911006][T10221] should_failslab+0xa8/0x100 [ 433.911039][T10221] kmem_cache_alloc_noprof+0x73/0x3c0 [ 433.911066][T10221] ? vm_area_dup+0x2b/0x680 [ 433.911102][T10221] vm_area_dup+0x2b/0x680 [ 433.911138][T10221] __split_vma+0x1a9/0xa00 [ 433.911174][T10221] ? __pfx___split_vma+0x10/0x10 [ 433.911220][T10221] ? __lock_acquire+0xab9/0xd20 [ 433.911259][T10221] vms_gather_munmap_vmas+0x2ea/0x12f0 [ 433.911300][T10221] ? __might_fault+0xb0/0x130 [ 433.911327][T10221] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 433.911349][T10221] ? _parse_integer_limit+0x1ae/0x1f0 [ 433.911387][T10221] do_vmi_align_munmap+0x25d/0x420 [ 433.911431][T10221] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 433.911489][T10221] do_vmi_munmap+0x253/0x2e0 [ 433.911519][T10221] __vm_munmap+0x23b/0x3d0 [ 433.911547][T10221] ? __pfx___vm_munmap+0x10/0x10 [ 433.911592][T10221] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 433.911620][T10221] __ia32_sys_munmap+0x5f/0x70 [ 433.911650][T10221] __do_fast_syscall_32+0xb6/0x2b0 [ 433.911674][T10221] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.911699][T10221] do_fast_syscall_32+0x34/0x80 [ 433.911722][T10221] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 433.911748][T10221] RIP: 0023:0xf7fc4539 [ 433.911766][T10221] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 433.911784][T10221] RSP: 002b:00000000f54a555c EFLAGS: 00000206 ORIG_RAX: 000000000000005b [ 433.911806][T10221] RAX: ffffffffffffffda RBX: 0000000080001000 RCX: 0000000000003000 [ 433.911821][T10221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 433.911833][T10221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 433.911845][T10221] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 433.911857][T10221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 433.911888][T10221] [ 434.805057][T10236] FAULT_INJECTION: forcing a failure. [ 434.805057][T10236] name failslab, interval 1, probability 0, space 0, times 0 [ 434.983498][T10236] CPU: 1 UID: 0 PID: 10236 Comm: syz.2.1089 Not tainted syzkaller #0 PREEMPT(full) [ 434.983521][T10236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 434.983531][T10236] Call Trace: [ 434.983537][T10236] [ 434.983543][T10236] dump_stack_lvl+0x189/0x250 [ 434.983566][T10236] ? __pfx____ratelimit+0x10/0x10 [ 434.983581][T10236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.983599][T10236] ? __pfx__printk+0x10/0x10 [ 434.983629][T10236] ? __pfx___might_resched+0x10/0x10 [ 434.983643][T10236] ? fs_reclaim_acquire+0x7d/0x100 [ 434.983661][T10236] should_fail_ex+0x414/0x560 [ 434.983687][T10236] should_failslab+0xa8/0x100 [ 434.983709][T10236] __kmalloc_cache_noprof+0x70/0x3d0 [ 434.983729][T10236] ? tomoyo_init_log+0x183/0x1f70 [ 434.983749][T10236] tomoyo_init_log+0x183/0x1f70 [ 434.983772][T10236] ? format_decode+0xd9/0xe30 [ 434.983793][T10236] ? string+0x279/0x2b0 [ 434.983814][T10236] ? __pfx_tomoyo_init_log+0x10/0x10 [ 434.983828][T10236] ? tomoyo_profile+0x11/0x50 [ 434.983842][T10236] ? tomoyo_profile+0x11/0x50 [ 434.983857][T10236] ? tomoyo_domain_quota_is_ok+0x42b/0x570 [ 434.983881][T10236] tomoyo_supervisor+0x340/0x1480 [ 434.983906][T10236] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 434.983935][T10236] ? tomoyo_check_path_acl+0x137/0x1d0 [ 434.983958][T10236] ? tomoyo_check_acl+0x386/0x400 [ 434.983978][T10236] ? __pfx_tomoyo_check_path_acl+0x10/0x10 [ 434.984001][T10236] tomoyo_path_permission+0x25a/0x380 [ 434.984026][T10236] tomoyo_check_open_permission+0x24d/0x3b0 [ 434.984047][T10236] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 434.984068][T10236] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 434.984087][T10236] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 434.984130][T10236] ? lockref_get+0x15/0x60 [ 434.984152][T10236] ? tomoyo_file_open+0x165/0x220 [ 434.984172][T10236] security_file_open+0xb1/0x270 [ 434.984193][T10236] do_dentry_open+0x384/0x13f0 [ 434.984213][T10236] ? vfs_open+0x31/0x340 [ 434.984230][T10236] vfs_open+0x3b/0x340 [ 434.984242][T10236] ? path_openat+0x2ecd/0x3830 [ 434.984262][T10236] path_openat+0x2ee5/0x3830 [ 434.984278][T10236] ? arch_stack_walk+0xfc/0x150 [ 434.984309][T10236] ? stack_depot_save_flags+0x40/0x860 [ 434.984341][T10236] ? __pfx_path_openat+0x10/0x10 [ 434.984356][T10236] ? do_fast_syscall_32+0x34/0x80 [ 434.984371][T10236] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 434.984404][T10236] do_filp_open+0x1fa/0x410 [ 434.984420][T10236] ? __lock_acquire+0xab9/0xd20 [ 434.984443][T10236] ? __pfx_do_filp_open+0x10/0x10 [ 434.984477][T10236] ? _raw_spin_unlock+0x28/0x50 [ 434.984498][T10236] ? alloc_fd+0x64c/0x6c0 [ 434.984529][T10236] do_sys_openat2+0x121/0x1c0 [ 434.984546][T10236] ? __pfx_do_sys_openat2+0x10/0x10 [ 434.984565][T10236] ? ksys_write+0x22a/0x250 [ 434.984590][T10236] __ia32_compat_sys_openat+0x131/0x160 [ 434.984611][T10236] __do_fast_syscall_32+0xb6/0x2b0 [ 434.984628][T10236] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.984646][T10236] do_fast_syscall_32+0x34/0x80 [ 434.984662][T10236] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 434.984680][T10236] RIP: 0023:0xf7fa6539 [ 434.984692][T10236] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 434.984705][T10236] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 434.984720][T10236] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000740 [ 434.984731][T10236] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 434.984739][T10236] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 434.984747][T10236] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 434.984755][T10236] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 434.984776][T10236] [ 435.811046][ T983] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 435.945477][T10243] netlink: set zone limit has 8 unknown bytes [ 436.087111][ T983] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 436.162227][ T5943] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 436.188951][ T983] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 436.321026][ T983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 436.358850][ T983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 436.393569][ T5943] usb 4-1: Using ep0 maxpacket: 8 [ 436.398797][ T983] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 436.422437][ T5943] usb 4-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 436.446646][ T5943] usb 4-1: config 1 interface 0 has no altsetting 0 [ 436.454205][ T983] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 436.477293][ T5943] usb 4-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 436.496668][ T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.510735][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.545380][ T5943] usb 4-1: Product: syz [ 436.568832][ T983] usb 5-1: config 0 descriptor?? [ 436.585345][ T5943] usb 4-1: Manufacturer: syz [ 436.617969][ T5943] usb 4-1: SerialNumber: syz [ 436.627438][T10237] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 437.508910][T10239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.584579][T10239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.021608][ T44] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 438.497184][ T44] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.513316][ T44] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 438.549471][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.566933][ T5943] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input20 [ 438.584554][ T44] usb 3-1: Product: syz [ 438.593250][ T44] usb 3-1: Manufacturer: syz [ 438.596202][ T5220] bcm5974 4-1:1.0: could not read from device [ 438.598058][ T44] usb 3-1: SerialNumber: syz [ 438.659051][ T5943] usb 4-1: USB disconnect, device number 43 [ 438.874523][ T5220] bcm5974 4-1:1.0: could not read from device [ 439.388994][ T983] usbhid 5-1:0.0: can't add hid device: -71 [ 439.401038][ T5943] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 439.414208][ T983] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 439.506755][ T983] usb 5-1: USB disconnect, device number 41 [ 439.683227][T10272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.698483][T10272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.726319][ T5870] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 439.734396][ T44] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 439.741192][ T44] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 439.748775][ T44] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 439.759226][T10277] openvswitch: netlink: Key type 9747 is out of range max 32 [ 439.768876][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 439.911021][ T9] usb 1-1: device descriptor read/64, error -71 [ 440.151177][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 440.291195][ T9] usb 1-1: device descriptor read/64, error -71 [ 440.317505][T10284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1102'. [ 440.365232][T10284] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 440.375014][T10284] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 440.392122][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.398483][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.405481][ T9] usb usb1-port1: attempt power cycle [ 440.428742][ T7288] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.761867][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 440.791787][ T9] usb 1-1: device descriptor read/8, error -71 [ 440.914533][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1103'. [ 441.244666][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 441.282741][ T9] usb 1-1: device descriptor read/8, error -71 [ 441.382385][ T44] cdc_ncm 3-1:1.0: setting tx_max = 68 [ 441.391495][ T9] usb usb1-port1: unable to enumerate USB device [ 441.537227][ T44] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 441.734312][ T5943] usb 4-1: unable to get BOS descriptor or descriptor too short [ 441.780215][ T44] usb 3-1: USB disconnect, device number 41 [ 441.787771][ T5943] usb 4-1: no configurations [ 441.871055][ T5943] usb 4-1: can't read configurations, error -22 [ 441.889724][ T44] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 442.318590][T10299] syz.2.1105 (10299): drop_caches: 2 [ 442.326992][T10299] syz.2.1105 (10299): drop_caches: 2 [ 442.802172][T10306] fuse: Bad value for 'fd' [ 443.281118][ T44] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 443.460534][ T44] usb 1-1: unable to get BOS descriptor or descriptor too short [ 443.510334][ T44] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 443.534028][ T44] usb 1-1: can't read configurations, error -71 [ 443.981050][ T980] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 444.116530][T10329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1115'. [ 444.138828][T10329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1115'. [ 444.166139][T10329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1115'. [ 444.184854][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 444.206889][ T980] usb 5-1: config 0 has an invalid interface number: 213 but max is 0 [ 444.222006][ T980] usb 5-1: config 0 has no interface number 0 [ 444.242410][ T980] usb 5-1: config 0 interface 213 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 444.274066][ T980] usb 5-1: config 0 interface 213 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 444.304755][ T980] usb 5-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice=c5.ad [ 444.323914][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.351255][ T980] usb 5-1: Product: syz [ 444.358035][ T980] usb 5-1: Manufacturer: syz [ 444.363965][ T980] usb 5-1: SerialNumber: syz [ 444.390183][ T980] usb 5-1: config 0 descriptor?? [ 444.409441][T10321] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 444.595835][T10338] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:21 [ 444.605637][T10338] netlink: 'syz.0.1116': attribute type 50 has an invalid length. [ 444.621946][T10338] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1116'. [ 445.771600][T10351] fuse: Bad value for 'fd' [ 445.931044][ T9] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 446.085459][ T9] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 446.158527][ T9] usb 4-1: config 0 has no interface number 0 [ 446.161996][ T9] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 446.162028][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.162050][ T9] usb 4-1: Product: syz [ 446.162066][ T9] usb 4-1: Manufacturer: syz [ 446.162081][ T9] usb 4-1: SerialNumber: syz [ 446.164522][ T9] usb 4-1: config 0 descriptor?? [ 446.267659][T10366] syz.0.1124 (10366): drop_caches: 2 [ 446.268783][T10366] syz.0.1124 (10366): drop_caches: 2 [ 446.626228][ T980] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 447.011433][ T980] usb 5-1: USB disconnect, device number 42 [ 447.177537][ T5915] udevd[5915]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.213/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.196009][ T9] usb 4-1: non-Atmel transceiver xxxx3800 [ 447.389261][ T5879] syz_tun (unregistering): left allmulticast mode [ 447.404518][ T9] usb 4-1: Firmware: major: 213, minor: 112, hardware type: UNKNOWN (212) [ 447.621362][ T9] usb 4-1: failed to fetch extended address, random address set [ 447.661493][ T9] usb 4-1: atusb_probe: initialization failed, error = -524 [ 447.669466][ T9] atusb 4-1:0.128: probe with driver atusb failed with error -524 [ 447.812520][ T9] usb 4-1: USB disconnect, device number 46 [ 447.973466][ T7279] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.244494][ T7279] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.361030][ T5869] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 448.438847][ T7279] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.461671][T10384] fuse: Bad value for 'fd' [ 448.555892][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 448.616537][ T7279] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.716582][ T5869] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 448.736158][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.755355][ T5869] usb 5-1: Product: syz [ 448.759630][ T5869] usb 5-1: Manufacturer: syz [ 448.784594][ T5869] usb 5-1: SerialNumber: syz [ 448.805725][ T5869] usb 5-1: config 0 descriptor?? [ 448.843910][ T5869] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 449.047991][T10378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.069757][T10378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.236919][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 449.249144][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 449.258746][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 449.260633][ T7279] bridge_slave_1: left allmulticast mode [ 449.371199][ T5869] gspca_sonixj: reg_w1 err -110 [ 449.376481][ T5869] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 449.384904][ T5867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 449.393137][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 449.451333][ T7279] bridge_slave_1: left promiscuous mode [ 449.458830][ T7279] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.495739][ T7279] bridge_slave_0: left allmulticast mode [ 449.533669][ T7279] bridge_slave_0: left promiscuous mode [ 449.565124][ T7279] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.598336][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1129'. [ 449.610110][T10378] netlink: 'syz.4.1129': attribute type 23 has an invalid length. [ 451.370055][ T5869] usb 5-1: USB disconnect, device number 43 [ 451.461109][ T5870] Bluetooth: hci2: command tx timeout [ 452.323468][T10435] FAULT_INJECTION: forcing a failure. [ 452.323468][T10435] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 452.339313][ T7279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.608993][ T7279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.708944][T10435] CPU: 0 UID: 0 PID: 10435 Comm: syz.3.1139 Not tainted syzkaller #0 PREEMPT(full) [ 452.708966][T10435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 452.708976][T10435] Call Trace: [ 452.708982][T10435] [ 452.708990][T10435] dump_stack_lvl+0x189/0x250 [ 452.709011][T10435] ? __pfx____ratelimit+0x10/0x10 [ 452.709027][T10435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.709044][T10435] ? __pfx__printk+0x10/0x10 [ 452.709066][T10435] ? fs_reclaim_acquire+0x7d/0x100 [ 452.709087][T10435] should_fail_ex+0x414/0x560 [ 452.709113][T10435] prepare_alloc_pages+0x213/0x610 [ 452.709133][T10435] __alloc_frozen_pages_noprof+0x123/0x370 [ 452.709153][T10435] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 452.709170][T10435] ? __pfx__copy_from_iter+0x10/0x10 [ 452.709188][T10435] ? policy_nodemask+0x27c/0x720 [ 452.709212][T10435] alloc_pages_mpol+0x232/0x4a0 [ 452.709238][T10435] alloc_pages_noprof+0xa9/0x190 [ 452.709261][T10435] anon_pipe_write+0xb85/0x1360 [ 452.709291][T10435] ? __pfx_anon_pipe_write+0x10/0x10 [ 452.709305][T10435] ? __pfx_aa_file_perm+0x10/0x10 [ 452.709331][T10435] do_iter_readv_writev+0x619/0x8b0 [ 452.709357][T10435] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 452.709377][T10435] ? common_file_perm+0x1b5/0x230 [ 452.709399][T10435] ? bpf_lsm_file_permission+0x9/0x20 [ 452.709418][T10435] ? security_file_permission+0x75/0x290 [ 452.709439][T10435] ? rw_verify_area+0x255/0x4d0 [ 452.709460][T10435] vfs_writev+0x31a/0x960 [ 452.709478][T10435] ? __lock_acquire+0xab9/0xd20 [ 452.709501][T10435] ? __pfx_vfs_writev+0x10/0x10 [ 452.709526][T10435] ? __fget_files+0x2a/0x420 [ 452.709543][T10435] ? __fget_files+0x3a0/0x420 [ 452.709554][T10435] ? __fget_files+0x2a/0x420 [ 452.709573][T10435] do_writev+0x14d/0x2d0 [ 452.709590][T10435] ? __pfx_do_writev+0x10/0x10 [ 452.709606][T10435] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.709623][T10435] __do_fast_syscall_32+0xb6/0x2b0 [ 452.709641][T10435] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.709658][T10435] do_fast_syscall_32+0x34/0x80 [ 452.709674][T10435] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 452.709692][T10435] RIP: 0023:0xf7fc4539 [ 452.709705][T10435] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 452.709718][T10435] RSP: 002b:00000000f54a555c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 452.709733][T10435] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 452.709743][T10435] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 452.709752][T10435] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 452.709760][T10435] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 452.709769][T10435] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 452.709789][T10435] [ 453.072352][ T7279] bond0 (unregistering): Released all slaves [ 453.570574][ T5870] Bluetooth: hci2: command tx timeout [ 453.661027][ T5962] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 453.699642][T10414] netdevsim netdevsim0: Direct firmware load for x failed with error -2 [ 453.719609][T10414] netdevsim netdevsim0: Falling back to sysfs fallback for: x [ 453.747641][ T7279] tipc: Disabling bearer [ 453.753404][ T7279] tipc: Left network mode [ 453.822731][ T5962] usb 4-1: Using ep0 maxpacket: 32 [ 453.858746][ T5962] usb 4-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 453.886582][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.944684][ T5962] usb 4-1: config 0 descriptor?? [ 453.972939][ T5962] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 453.981232][ T5962] gspca_mr97310a: reg write [21] error -22 [ 454.022820][ T5962] mr97310a 4-1:0.0: probe with driver mr97310a failed with error -22 [ 454.178964][T10442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.212223][T10442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.493597][ T5962] usb 4-1: USB disconnect, device number 47 [ 454.795289][T10450] syz.4.1141 (10450): drop_caches: 2 [ 454.891859][T10450] syz.4.1141 (10450): drop_caches: 2 [ 455.329444][ T7279] hsr_slave_0: left promiscuous mode [ 455.339516][ T7279] hsr_slave_1: left promiscuous mode [ 455.351229][ T7279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.383548][ T7279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.419456][ T7279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.430421][ T7279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.479212][ T7279] veth1_macvtap: left promiscuous mode [ 455.525680][ T7279] veth0_macvtap: left promiscuous mode [ 455.621355][ T5870] Bluetooth: hci2: command tx timeout [ 456.000512][ T30] audit: type=1326 audit(1758164490.073:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10482 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 456.155241][ T30] audit: type=1326 audit(1758164490.113:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10482 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 456.331383][ T30] audit: type=1326 audit(1758164490.143:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10482 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 456.391010][ T30] audit: type=1326 audit(1758164490.143:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10482 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 456.465619][ T30] audit: type=1326 audit(1758164490.143:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10482 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 456.621610][ T30] audit: type=1326 audit(1758164490.163:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10482 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 456.811482][ T30] audit: type=1326 audit(1758164490.163:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10482 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 456.894615][ T30] audit: type=1326 audit(1758164490.163:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10482 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 456.938064][T10500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1152'. [ 456.969012][ T30] audit: type=1326 audit(1758164490.163:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10482 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 457.014565][ T30] audit: type=1326 audit(1758164490.163:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10482 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 457.701522][ T5870] Bluetooth: hci2: command tx timeout [ 457.796505][ T7279] team0 (unregistering): Port device team_slave_1 removed [ 457.850616][ T7279] team0 (unregistering): Port device team_slave_0 removed [ 459.446521][T10402] chnl_net:caif_netlink_parms(): no params data found [ 459.684713][ T7279] IPVS: stop unused estimator thread 0... [ 459.711179][ T5869] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 459.894804][T10402] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.067164][T10402] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.076831][ T5869] usb 2-1: config 0 has an invalid descriptor of length 89, skipping remainder of the config [ 460.161473][T10402] bridge_slave_0: entered allmulticast mode [ 460.164854][ T5869] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 460.178067][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.183209][T10402] bridge_slave_0: entered promiscuous mode [ 460.198721][T10402] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.378274][T10540] syz.3.1158 (10540): drop_caches: 2 [ 460.394138][T10540] syz.3.1158 (10540): drop_caches: 2 [ 460.438473][T10402] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.447115][T10402] bridge_slave_1: entered allmulticast mode [ 460.458181][T10402] bridge_slave_1: entered promiscuous mode [ 460.470983][ T5869] usb 2-1: Product: syz [ 460.475203][ T5869] usb 2-1: Manufacturer: syz [ 460.541198][ T5869] usb 2-1: SerialNumber: syz [ 460.587816][ T5869] usb 2-1: config 0 descriptor?? [ 460.960252][T10549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.994725][T10549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.035868][T10402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.138070][T10402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.244885][ T5869] usb 2-1: bad CDC descriptors [ 461.250378][ T5869] usb 2-1: unsupported MDLM descriptors [ 461.297582][ T5869] usb 2-1: USB disconnect, device number 33 [ 461.532178][T10402] team0: Port device team_slave_0 added [ 461.612665][T10402] team0: Port device team_slave_1 added [ 461.711651][T10561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1164'. [ 462.070143][T10561] bond0: entered promiscuous mode [ 462.175396][T10561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.262052][T10575] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:21 [ 462.271469][T10575] netlink: 'syz.3.1166': attribute type 50 has an invalid length. [ 462.332242][T10402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.377602][T10402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.418818][T10576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1166'. [ 462.508920][T10402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.548624][T10402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.581314][T10402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.716254][T10582] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:21 [ 462.734521][T10402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.737907][T10582] netlink: 'syz.4.1169': attribute type 50 has an invalid length. [ 462.771382][T10578] netlink: 'syz.1.1168': attribute type 12 has an invalid length. [ 462.942103][T10584] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1169'. [ 463.262901][T10402] hsr_slave_0: entered promiscuous mode [ 463.286928][T10402] hsr_slave_1: entered promiscuous mode [ 463.506651][T10402] debugfs: 'hsr0' already exists in 'hsr' [ 463.519642][T10402] Cannot create hsr debugfs directory [ 464.515029][T10608] netlink: 'syz.0.1174': attribute type 1 has an invalid length. [ 464.565950][T10608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 464.741896][ T5943] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 464.865114][T10402] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 464.918868][T10402] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 464.975154][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.975237][T10402] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 465.007990][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.021001][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 465.021020][ T30] audit: type=1326 audit(1758164499.083:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.0.1177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 465.118408][T10622] syz.1.1176 (10622): drop_caches: 2 [ 465.156552][T10622] syz.1.1176 (10622): drop_caches: 2 [ 465.188246][T10402] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 465.232543][ T5943] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 465.257254][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.322497][ T30] audit: type=1326 audit(1758164499.083:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.0.1177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 465.347588][ T5943] usb 5-1: config 0 descriptor?? [ 465.404212][ T30] audit: type=1326 audit(1758164499.083:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.0.1177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 465.476013][ T30] audit: type=1326 audit(1758164499.083:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.0.1177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 465.572449][ T30] audit: type=1326 audit(1758164499.083:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.0.1177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 465.581789][ T5962] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 465.690980][ T30] audit: type=1326 audit(1758164499.123:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.0.1177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 465.777325][ T5943] hid-led 0003:0FC5:B080.0010: unknown main item tag 0x0 [ 465.811162][ T5962] usb 1-1: Using ep0 maxpacket: 32 [ 465.826980][ T30] audit: type=1326 audit(1758164499.123:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.0.1177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 465.827322][ T5962] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 465.916347][ T30] audit: type=1326 audit(1758164499.123:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.0.1177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 465.928853][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.022575][T10402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.023312][ T5962] usb 1-1: config 0 descriptor?? [ 466.041102][ T30] audit: type=1326 audit(1758164499.123:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.0.1177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 466.075580][ T30] audit: type=1326 audit(1758164499.123:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.0.1177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 466.117451][T10402] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.167530][ T7284] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.174771][ T7284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.198200][T10607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.211496][T10607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.215839][ T5943] hid-led 0003:0FC5:B080.0010: probe with driver hid-led failed with error -32 [ 466.264467][ T7288] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.271691][ T7288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.342443][ T5962] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 466.389977][ T9] usb 5-1: USB disconnect, device number 44 [ 466.428408][ T5962] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 466.505702][ T5962] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 466.535499][ T5962] usb 1-1: media controller created [ 466.589197][T10402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 466.758782][ T5962] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 466.767892][T10402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.042700][T10402] veth0_vlan: entered promiscuous mode [ 467.048660][ T5962] DVB: Unable to find symbol dib7000p_attach() [ 467.072013][ T5962] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 467.094220][T10648] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20000 [ 467.095668][T10402] veth1_vlan: entered promiscuous mode [ 467.331055][ T5962] rc_core: IR keymap rc-dib0700-rc5 not found [ 467.427520][T10646] syz.4.1178 (10646): drop_caches: 2 [ 467.448660][T10646] syz.4.1178 (10646): drop_caches: 2 [ 467.460288][ T5962] Registered IR keymap rc-empty [ 467.522283][ T5962] dvb-usb: could not initialize remote control. [ 467.534857][ T5962] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 468.277717][T10402] veth0_macvtap: entered promiscuous mode [ 468.349457][T10402] veth1_macvtap: entered promiscuous mode [ 468.394609][T10402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.610151][T10402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.688330][ T7282] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.757942][ T7282] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.833464][ T7282] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.916704][ T7282] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.007711][ T5962] usb 1-1: USB disconnect, device number 39 [ 469.193665][ T5962] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 469.286171][ T7282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.341250][ T7282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.498422][ T7286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.519548][ T7286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.003917][T10680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1184'. [ 470.762184][ T983] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 470.942160][T10680] team0 (unregistering): Port device team_slave_0 removed [ 470.955577][T10680] team0 (unregistering): Port device team_slave_1 removed [ 470.967394][ T983] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 471.007436][ T983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.040936][ T983] usb 6-1: Product: syz [ 471.059094][ T983] usb 6-1: Manufacturer: syz [ 471.066534][ T983] usb 6-1: SerialNumber: syz [ 471.117585][ T983] usb 6-1: config 0 descriptor?? [ 471.162959][T10683] vxcan3: entered promiscuous mode [ 471.404429][T10690] tipc: Started in network mode [ 471.409509][T10690] tipc: Node identity 0254440eff27, cluster identity 4711 [ 471.434127][T10690] tipc: Enabled bearer , priority 0 [ 471.444619][T10690] syzkaller0: entered promiscuous mode [ 471.450190][T10690] syzkaller0: entered allmulticast mode [ 471.790898][T10701] bridge0: entered promiscuous mode [ 471.809448][T10701] macvlan3: entered promiscuous mode [ 472.147439][T10707] FAULT_INJECTION: forcing a failure. [ 472.147439][T10707] name failslab, interval 1, probability 0, space 0, times 0 [ 472.165889][T10707] CPU: 0 UID: 0 PID: 10707 Comm: syz.3.1192 Not tainted syzkaller #0 PREEMPT(full) [ 472.165919][T10707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 472.165933][T10707] Call Trace: [ 472.165942][T10707] [ 472.165952][T10707] dump_stack_lvl+0x189/0x250 [ 472.165984][T10707] ? __pfx____ratelimit+0x10/0x10 [ 472.166007][T10707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.166032][T10707] ? __pfx__printk+0x10/0x10 [ 472.166063][T10707] ? __lock_acquire+0xab9/0xd20 [ 472.166105][T10707] should_fail_ex+0x414/0x560 [ 472.166142][T10707] should_failslab+0xa8/0x100 [ 472.166174][T10707] kmem_cache_alloc_noprof+0x73/0x3c0 [ 472.166202][T10707] ? skb_clone+0x212/0x3a0 [ 472.166234][T10707] skb_clone+0x212/0x3a0 [ 472.166265][T10707] __netlink_deliver_tap+0x404/0x850 [ 472.166302][T10707] ? netlink_deliver_tap+0x2e/0x1b0 [ 472.166326][T10707] netlink_deliver_tap+0x19c/0x1b0 [ 472.166350][T10707] netlink_unicast+0x7fa/0x9e0 [ 472.166392][T10707] ? __pfx_netlink_unicast+0x10/0x10 [ 472.166425][T10707] ? netlink_sendmsg+0x642/0xb30 [ 472.166444][T10707] ? skb_put+0x11b/0x210 [ 472.166470][T10707] netlink_sendmsg+0x805/0xb30 [ 472.166509][T10707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.166535][T10707] ? __import_iovec+0x5d4/0x7f0 [ 472.166560][T10707] ? aa_sock_msg_perm+0xf1/0x1d0 [ 472.166583][T10707] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 472.166605][T10707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.166624][T10707] __sock_sendmsg+0x21c/0x270 [ 472.166653][T10707] ____sys_sendmsg+0x505/0x830 [ 472.166714][T10707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 472.166752][T10707] ___sys_sendmsg+0x21f/0x2a0 [ 472.166776][T10707] ? __pfx____sys_sendmsg+0x10/0x10 [ 472.166837][T10707] ? __fget_files+0x2a/0x420 [ 472.166852][T10707] ? __fget_files+0x3a0/0x420 [ 472.166877][T10707] __sys_sendmsg+0x164/0x220 [ 472.166901][T10707] ? __pfx___sys_sendmsg+0x10/0x10 [ 472.166937][T10707] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.166964][T10707] __do_fast_syscall_32+0xb6/0x2b0 [ 472.166984][T10707] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.167005][T10707] do_fast_syscall_32+0x34/0x80 [ 472.167024][T10707] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 472.167046][T10707] RIP: 0023:0xf7fc4539 [ 472.167063][T10707] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 472.167079][T10707] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 472.167101][T10707] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 472.167114][T10707] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 472.167124][T10707] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 472.167135][T10707] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 472.167146][T10707] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 472.167172][T10707] [ 472.662225][ T44] tipc: Node number set to 4252189710 [ 472.894638][T10715] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:21 [ 472.907491][T10715] netlink: 'syz.3.1193': attribute type 50 has an invalid length. [ 472.928311][T10715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1193'. [ 475.195761][T10686] tipc: Resetting bearer [ 475.262376][T10686] tipc: Disabling bearer [ 475.621605][ T983] usb-storage 6-1:0.0: USB Mass Storage device detected [ 475.734657][T10740] FAULT_INJECTION: forcing a failure. [ 475.734657][T10740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.902582][T10740] CPU: 0 UID: 0 PID: 10740 Comm: syz.5.1197 Not tainted syzkaller #0 PREEMPT(full) [ 475.902611][T10740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 475.902623][T10740] Call Trace: [ 475.902630][T10740] [ 475.902638][T10740] dump_stack_lvl+0x189/0x250 [ 475.902665][T10740] ? __pfx____ratelimit+0x10/0x10 [ 475.902684][T10740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.902706][T10740] ? __pfx__printk+0x10/0x10 [ 475.902732][T10740] ? __might_fault+0xb0/0x130 [ 475.902768][T10740] should_fail_ex+0x414/0x560 [ 475.902800][T10740] _copy_from_iter+0x1de/0x1790 [ 475.902829][T10740] ? rcu_is_watching+0x15/0xb0 [ 475.902849][T10740] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 475.902900][T10740] ? __pfx__copy_from_iter+0x10/0x10 [ 475.902923][T10740] ? __build_skb_around+0x257/0x3e0 [ 475.902947][T10740] ? netlink_sendmsg+0x642/0xb30 [ 475.902965][T10740] ? skb_put+0x11b/0x210 [ 475.902989][T10740] netlink_sendmsg+0x6b2/0xb30 [ 475.903018][T10740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.903040][T10740] ? __import_iovec+0x5d4/0x7f0 [ 475.903061][T10740] ? aa_sock_msg_perm+0xf1/0x1d0 [ 475.903082][T10740] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 475.903102][T10740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.903122][T10740] __sock_sendmsg+0x21c/0x270 [ 475.903153][T10740] ____sys_sendmsg+0x505/0x830 [ 475.903182][T10740] ? __pfx_____sys_sendmsg+0x10/0x10 [ 475.903222][T10740] ___sys_sendmsg+0x21f/0x2a0 [ 475.903247][T10740] ? __pfx____sys_sendmsg+0x10/0x10 [ 475.903305][T10740] ? __fget_files+0x2a/0x420 [ 475.903321][T10740] ? __fget_files+0x3a0/0x420 [ 475.903347][T10740] __sys_sendmsg+0x164/0x220 [ 475.903372][T10740] ? __pfx___sys_sendmsg+0x10/0x10 [ 475.903410][T10740] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.903432][T10740] __do_fast_syscall_32+0xb6/0x2b0 [ 475.903453][T10740] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.903476][T10740] do_fast_syscall_32+0x34/0x80 [ 475.903495][T10740] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 475.903518][T10740] RIP: 0023:0xf7f15539 [ 475.903535][T10740] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 475.903551][T10740] RSP: 002b:00000000f541655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 475.903577][T10740] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000280 [ 475.903589][T10740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 475.903600][T10740] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 475.903610][T10740] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 475.903620][T10740] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 475.903647][T10740] [ 475.922005][ T983] usb 6-1: USB disconnect, device number 2 [ 475.944453][T10743] binder: BINDER_SET_CONTEXT_MGR already set [ 476.206237][T10743] binder: 10742:10743 ioctl 4018620d 800002c0 returned -16 [ 476.759173][T10764] syz.1.1202 (10764): drop_caches: 2 [ 476.776336][T10764] syz.1.1202 (10764): drop_caches: 2 [ 476.800363][T10767] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20003 [ 477.710980][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 477.903066][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 477.923990][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.937960][ T9] usb 4-1: Product: syz [ 477.962140][ T9] usb 4-1: Manufacturer: syz [ 477.992501][ T9] usb 4-1: SerialNumber: syz [ 478.046566][ T9] usb 4-1: config 0 descriptor?? [ 478.359934][T10778] tipc: Started in network mode [ 478.365221][T10778] tipc: Node identity fea9891c4c14, cluster identity 4711 [ 478.376778][T10778] tipc: Enabled bearer , priority 0 [ 478.390438][T10778] syzkaller0: entered promiscuous mode [ 478.396133][T10778] syzkaller0: entered allmulticast mode [ 479.491033][ T980] tipc: Node number set to 2998765852 [ 479.500099][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1215'. [ 479.627489][T10809] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:21 [ 480.531254][ T5943] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 480.700937][ T5943] usb 6-1: Using ep0 maxpacket: 32 [ 480.725339][ T5943] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 480.765138][ T5943] usb 6-1: config 0 has no interface number 0 [ 480.799952][ T5943] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 33573, setting to 1024 [ 480.834211][ T5943] usb 6-1: config 0 interface 2 has no altsetting 0 [ 480.870120][ T5943] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 480.886664][T10775] tipc: Resetting bearer [ 480.900958][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.926285][ T5943] usb 6-1: Product: syz [ 480.930536][ T5943] usb 6-1: Manufacturer: syz [ 480.959574][ T5943] usb 6-1: SerialNumber: syz [ 481.004301][ T5943] usb 6-1: config 0 descriptor?? [ 481.025694][T10775] tipc: Disabling bearer [ 481.141480][ T9] usb-storage 4-1:0.0: USB Mass Storage device detected [ 481.217974][ T5943] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 481.309255][ T9] usb 4-1: USB disconnect, device number 48 [ 481.345733][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1223'. [ 481.383522][ T983] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 481.534498][ T5943] usb 6-1: USB disconnect, device number 3 [ 481.784153][ T983] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.819809][ T983] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 481.874050][ T7675] udevd[7675]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 481.911018][ T983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 481.949307][ T983] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 482.037566][ T983] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 482.097054][ T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.190984][ T983] usb 1-1: Product: syz [ 482.197606][ T983] usb 1-1: Manufacturer: syz [ 482.203190][ T983] usb 1-1: SerialNumber: syz [ 482.241951][ T983] usb 1-1: config 0 descriptor?? [ 482.290693][ T983] garmin_gps 1-1:0.0: Garmin GPS usb/tty converter detected [ 482.388865][ T983] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 482.464582][ T983] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 482.501368][ T44] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 482.664281][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 482.681936][ T44] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 482.695826][ T44] usb 2-1: config 0 has no interface number 0 [ 482.723790][ T44] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 482.733176][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.741597][ T44] usb 2-1: Product: syz [ 482.806228][ T44] usb 2-1: Manufacturer: syz [ 482.884776][ T44] usb 2-1: SerialNumber: syz [ 482.999065][ T44] usb 2-1: config 0 descriptor?? [ 483.104895][ T44] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 483.667352][ T44] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 483.710597][ T44] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 484.139406][T10884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1232'. [ 484.206435][ T5869] usb 1-1: USB disconnect, device number 40 [ 484.221115][ T44] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 484.240826][ T5869] garmin_gps 1-1:0.0: device disconnected [ 484.288009][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 484.327866][ T9] usb 2-1: USB disconnect, device number 34 [ 484.385902][ T44] usb 5-1: config 0 has an invalid interface number: 94 but max is 0 [ 484.412573][ T44] usb 5-1: config 0 has no interface number 0 [ 484.435971][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 484.451435][ T44] usb 5-1: config 0 interface 94 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 484.487493][ T44] usb 5-1: config 0 interface 94 altsetting 5 bulk endpoint 0x2 has invalid maxpacket 0 [ 484.531100][ T44] usb 5-1: config 0 interface 94 altsetting 5 has an endpoint descriptor with address 0x69, changing to 0x9 [ 484.596331][ T44] usb 5-1: config 0 interface 94 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 484.756058][ T9] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 484.778649][ T44] usb 5-1: config 0 interface 94 has no altsetting 0 [ 484.822472][ T44] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2f.16 [ 484.876450][ T9] quatech2 2-1:0.51: device disconnected [ 484.882144][ T44] usb 5-1: New USB device strings: Mfr=1, Product=50, SerialNumber=157 [ 484.882174][ T44] usb 5-1: Product: syz [ 484.882190][ T44] usb 5-1: Manufacturer: syz [ 484.882206][ T44] usb 5-1: SerialNumber: syz [ 485.042876][ T44] usb 5-1: config 0 descriptor?? [ 485.061016][ T5869] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 485.069952][ T44] kvaser_usb 5-1:0.94: error -ENODEV: Cannot get usb endpoint(s) [ 485.239878][ T5869] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 485.261324][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.269408][ T5869] usb 1-1: Product: syz [ 485.348477][ T5869] usb 1-1: Manufacturer: syz [ 485.368710][ T5869] usb 1-1: SerialNumber: syz [ 485.391656][ T5869] usb 1-1: config 0 descriptor?? [ 486.227585][ T980] usb 5-1: USB disconnect, device number 45 [ 486.553686][T10894] tipc: Enabled bearer , priority 0 [ 486.568209][T10894] syzkaller0: entered promiscuous mode [ 486.574297][T10894] syzkaller0: entered allmulticast mode [ 486.666433][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1239'. [ 487.674367][ T44] tipc: Node number set to 2522828221 [ 488.344634][T10916] team0 (unregistering): Port device team_slave_0 removed [ 488.375946][T10916] team0 (unregistering): Port device team_slave_1 removed [ 488.391135][ T980] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 488.564535][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.709264][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.731669][T10893] tipc: Resetting bearer [ 488.742215][ T980] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 488.805131][ T980] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 488.821236][T10893] tipc: Disabling bearer [ 488.829050][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.866850][ T980] usb 2-1: config 0 descriptor?? [ 488.952477][ T5869] usb-storage 1-1:0.0: USB Mass Storage device detected [ 489.097171][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 489.097191][ T30] audit: type=1326 audit(1758164523.163:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10937 comm="syz.3.1244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 489.169450][ T30] audit: type=1326 audit(1758164523.163:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10937 comm="syz.3.1244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 489.220669][ T30] audit: type=1326 audit(1758164523.163:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10937 comm="syz.3.1244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 489.250233][ T5869] usb 1-1: USB disconnect, device number 41 [ 489.328109][T10935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.338678][T10935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.378798][ T30] audit: type=1326 audit(1758164523.163:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10937 comm="syz.3.1244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 489.447004][ T30] audit: type=1326 audit(1758164523.163:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10937 comm="syz.3.1244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 489.531718][ T980] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x2 [ 489.535556][ T30] audit: type=1326 audit(1758164523.163:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10937 comm="syz.3.1244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 489.603724][ T980] plantronics 0003:047F:FFFF.0011: item fetching failed at offset 14/15 [ 489.605805][T10935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.620070][ T980] plantronics 0003:047F:FFFF.0011: parse failed [ 489.630763][T10935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.731796][ T980] plantronics 0003:047F:FFFF.0011: probe with driver plantronics failed with error -22 [ 489.755721][ T30] audit: type=1326 audit(1758164523.163:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10937 comm="syz.3.1244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 489.870971][ T5869] usb 2-1: USB disconnect, device number 35 [ 489.947135][ T30] audit: type=1326 audit(1758164523.163:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10937 comm="syz.3.1244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 490.038104][ T30] audit: type=1326 audit(1758164523.163:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10937 comm="syz.3.1244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 490.074674][ T30] audit: type=1326 audit(1758164523.163:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10937 comm="syz.3.1244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 490.435022][ T5869] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 490.612847][ T5869] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.636551][ T5869] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 490.646720][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.682045][ T5869] usb 2-1: config 0 descriptor?? [ 490.705135][ T5869] pwc: Askey VC010 type 2 USB webcam detected. [ 490.856095][ T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 490.992953][ T9] usb 4-1: device descriptor read/64, error -71 [ 491.095976][ T5869] pwc: recv_control_msg error -32 req 02 val 2b00 [ 491.104132][ T5869] pwc: recv_control_msg error -32 req 02 val 2700 [ 491.114767][ T5869] pwc: recv_control_msg error -32 req 02 val 2c00 [ 491.122651][ T5869] pwc: recv_control_msg error -32 req 04 val 1000 [ 491.135882][ T5869] pwc: recv_control_msg error -32 req 04 val 1300 [ 491.145036][ T5869] pwc: recv_control_msg error -32 req 04 val 1400 [ 491.153216][ T5869] pwc: recv_control_msg error -32 req 02 val 2000 [ 491.160944][ T5869] pwc: recv_control_msg error -32 req 02 val 2100 [ 491.168336][ T5869] pwc: recv_control_msg error -32 req 04 val 1500 [ 491.177253][ T5869] pwc: recv_control_msg error -32 req 02 val 2500 [ 491.186229][ T5869] pwc: recv_control_msg error -32 req 02 val 2400 [ 491.235724][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 491.371159][ T9] usb 4-1: device descriptor read/64, error -71 [ 491.481876][ T9] usb usb4-port1: attempt power cycle [ 491.835220][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 491.867030][ T9] usb 4-1: device descriptor read/8, error -71 [ 492.111204][ T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 492.133370][ T9] usb 4-1: device descriptor read/8, error -71 [ 492.245905][ T9] usb usb4-port1: unable to enumerate USB device [ 492.559907][T10979] netlink: 'syz.4.1251': attribute type 23 has an invalid length. [ 492.639792][T10985] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1250'. [ 492.691214][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1250'. [ 493.055336][ T5869] pwc: recv_control_msg error -71 req 02 val 2900 [ 493.141499][ T5869] pwc: recv_control_msg error -71 req 02 val 2800 [ 493.232861][ T5869] pwc: recv_control_msg error -71 req 04 val 1100 [ 493.247701][ T5869] pwc: recv_control_msg error -71 req 04 val 1200 [ 493.267696][ T5869] pwc: Registered as video103. [ 493.378310][ T5869] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input24 [ 493.410999][ T980] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 493.424026][ T5869] usb 2-1: USB disconnect, device number 36 [ 493.599115][ T980] usb 1-1: unable to get BOS descriptor or descriptor too short [ 493.627119][ T980] usb 1-1: not running at top speed; connect to a high speed hub [ 493.811951][ T980] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 493.914828][ T980] usb 1-1: string descriptor 0 read error: -22 [ 493.923588][ T980] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 494.003493][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.117091][ T980] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 494.211018][ T5943] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 494.421666][ T5943] usb 2-1: Using ep0 maxpacket: 16 [ 494.460141][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.498800][ T5943] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 494.588340][ T980] usb 1-1: unit 0 not found! [ 494.616103][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.629703][ T980] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 494.792462][ T980] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 494.832747][ T5943] usb 2-1: config 0 descriptor?? [ 494.847780][ T980] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 494.883755][T11006] bridge0: port 3(dummy0) entered disabled state [ 494.899613][T11008] netlink: 'syz.4.1258': attribute type 16 has an invalid length. [ 494.924724][ T980] usb 1-1: USB disconnect, device number 42 [ 494.981112][T11008] netlink: 'syz.4.1258': attribute type 17 has an invalid length. [ 495.091439][T11006] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.133642][T11006] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.292986][ T5962] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 495.451136][ T5962] usb 6-1: Using ep0 maxpacket: 32 [ 495.460028][ T5962] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 495.470176][ T5962] usb 6-1: config 0 has no interface number 0 [ 495.505575][ T5962] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 495.528480][ T5962] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.566971][T11008] bridge0: port 3(dummy0) entered blocking state [ 495.573547][T11008] bridge0: port 3(dummy0) entered forwarding state [ 495.591283][ T5962] usb 6-1: Product: syz [ 495.605492][ T5962] usb 6-1: Manufacturer: syz [ 495.619773][ T5962] usb 6-1: SerialNumber: syz [ 495.707027][ T5962] usb 6-1: config 0 descriptor?? [ 495.765444][ T5962] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 495.789774][T11008] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 496.115015][T11020] netlink: 'syz.0.1262': attribute type 8 has an invalid length. [ 496.157995][T11020] netlink: 'syz.0.1262': attribute type 8 has an invalid length. [ 496.320050][ T5962] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 496.344614][ T5962] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 496.652767][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 496.653356][ T44] usb 6-1: USB disconnect, device number 4 [ 496.715134][ T44] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 496.748498][ T44] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 496.766765][ T5943] usbhid 2-1:0.0: can't add hid device: -71 [ 496.786474][ T5943] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 496.801883][ T44] quatech2 6-1:0.51: device disconnected [ 496.835539][T11032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1265'. [ 496.850157][ T5943] usb 2-1: USB disconnect, device number 37 [ 496.978085][T11040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1267'. [ 496.987446][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1267'. [ 497.327525][T11046] FAULT_INJECTION: forcing a failure. [ 497.327525][T11046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.417634][T11046] CPU: 0 UID: 0 PID: 11046 Comm: syz.1.1268 Not tainted syzkaller #0 PREEMPT(full) [ 497.417662][T11046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 497.417674][T11046] Call Trace: [ 497.417683][T11046] [ 497.417692][T11046] dump_stack_lvl+0x189/0x250 [ 497.417715][T11046] ? __pfx____ratelimit+0x10/0x10 [ 497.417731][T11046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.417748][T11046] ? __pfx__printk+0x10/0x10 [ 497.417769][T11046] ? __might_fault+0xb0/0x130 [ 497.417798][T11046] should_fail_ex+0x414/0x560 [ 497.417826][T11046] _copy_from_user+0x2d/0xb0 [ 497.417846][T11046] kstrtouint_from_user+0xc4/0x170 [ 497.417864][T11046] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 497.417893][T11046] proc_fail_nth_write+0x88/0x200 [ 497.417910][T11046] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 497.417930][T11046] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 497.417948][T11046] vfs_write+0x27e/0xb30 [ 497.417974][T11046] ? __pfx_vfs_write+0x10/0x10 [ 497.417995][T11046] ? __fget_files+0x2a/0x420 [ 497.418011][T11046] ? __fget_files+0x3a0/0x420 [ 497.418022][T11046] ? __fget_files+0x2a/0x420 [ 497.418041][T11046] ksys_write+0x145/0x250 [ 497.418072][T11046] ? __pfx_ksys_write+0x10/0x10 [ 497.418094][T11046] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.418111][T11046] __do_fast_syscall_32+0xb6/0x2b0 [ 497.418128][T11046] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.418146][T11046] do_fast_syscall_32+0x34/0x80 [ 497.418161][T11046] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 497.418179][T11046] RIP: 0023:0xf70be539 [ 497.418192][T11046] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 497.418204][T11046] RSP: 002b:00000000f548d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 497.418219][T11046] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f548d620 [ 497.418229][T11046] RDX: 0000000000000001 RSI: 00000000f7444ff4 RDI: 0000000000000000 [ 497.418238][T11046] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 497.418246][T11046] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 497.418255][T11046] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 497.418275][T11046] [ 497.892690][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1266'. [ 497.921963][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1266'. [ 498.008050][T11053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1270'. [ 498.041776][T11053] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 498.059496][T11054] netlink: 'syz.0.1266': attribute type 29 has an invalid length. [ 498.099165][T11041] netlink: 'syz.0.1266': attribute type 29 has an invalid length. [ 498.883228][T11073] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.897374][T11073] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.919726][T11075] netlink: 'syz.5.1277': attribute type 16 has an invalid length. [ 499.172291][T11075] netlink: 'syz.5.1277': attribute type 17 has an invalid length. [ 499.300332][T11075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 500.043436][T11096] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1282'. [ 500.080970][T11096] binder: 11092:11096 unknown command 0 [ 500.087162][T11096] binder: 11092:11096 ioctl c0306201 80000480 returned -22 [ 500.181874][ T5962] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 500.344981][ T5962] usb 1-1: Using ep0 maxpacket: 8 [ 500.355754][ T5962] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.377727][ T5962] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 500.387838][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.400761][ T5962] usb 1-1: config 0 descriptor?? [ 500.413059][ T5962] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 501.457269][T11098] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 501.466460][ T5962] gspca_vc032x: reg_r err -71 [ 501.481361][ T5962] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 501.489771][T11098] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 501.503416][ T5962] usb 1-1: USB disconnect, device number 43 [ 501.515504][T11098] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 501.547847][T11098] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 501.561479][T11098] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 501.573674][T11098] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 501.592847][T11098] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 501.601073][T11098] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 501.615482][T11098] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 501.623053][T11098] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 501.653953][T11098] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 501.789185][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.798611][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.835871][T11122] FAULT_INJECTION: forcing a failure. [ 501.835871][T11122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.849415][T11122] CPU: 0 UID: 0 PID: 11122 Comm: syz.4.1290 Not tainted syzkaller #0 PREEMPT(full) [ 501.849444][T11122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 501.849458][T11122] Call Trace: [ 501.849468][T11122] [ 501.849477][T11122] dump_stack_lvl+0x189/0x250 [ 501.849506][T11122] ? __pfx____ratelimit+0x10/0x10 [ 501.849528][T11122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.849551][T11122] ? __pfx__printk+0x10/0x10 [ 501.849594][T11122] should_fail_ex+0x414/0x560 [ 501.849629][T11122] _copy_to_iter+0x589/0x1790 [ 501.849670][T11122] ? __pfx__copy_to_iter+0x10/0x10 [ 501.849691][T11122] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 501.849726][T11122] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 501.849761][T11122] __skb_datagram_iter+0xf8/0x990 [ 501.849790][T11122] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 501.849827][T11122] skb_copy_datagram_iter+0xc5/0x230 [ 501.849859][T11122] netlink_recvmsg+0x2ab/0xa30 [ 501.849891][T11122] ? __pfx_netlink_recvmsg+0x10/0x10 [ 501.849913][T11122] ? trace_kmalloc+0x1f/0xd0 [ 501.849938][T11122] ? __kmalloc_noprof+0x29b/0x4f0 [ 501.849967][T11122] ? aa_sock_msg_perm+0xf1/0x1d0 [ 501.849990][T11122] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 501.850012][T11122] ? security_socket_recvmsg+0x7e/0x2e0 [ 501.850037][T11122] ? __pfx_netlink_recvmsg+0x10/0x10 [ 501.850059][T11122] sock_recvmsg+0x22c/0x270 [ 501.850094][T11122] ____sys_recvmsg+0x1c9/0x460 [ 501.850130][T11122] ? __pfx_____sys_recvmsg+0x10/0x10 [ 501.850154][T11122] ? get_compat_msghdr+0x37e/0x4a0 [ 501.850190][T11122] ? ktime_get_ts64+0xa2/0x3d0 [ 501.850222][T11122] ___sys_recvmsg+0x1b5/0x510 [ 501.850255][T11122] ? __pfx____sys_recvmsg+0x10/0x10 [ 501.850307][T11122] ? __fget_files+0x3a0/0x420 [ 501.850338][T11122] do_recvmmsg+0x36a/0x770 [ 501.850374][T11122] ? __pfx_do_recvmmsg+0x10/0x10 [ 501.850421][T11122] ? _copy_from_user+0x94/0xb0 [ 501.850465][T11122] __sys_recvmmsg+0x127/0x280 [ 501.850493][T11122] ? __pfx___sys_recvmmsg+0x10/0x10 [ 501.850517][T11122] ? ksys_write+0x22a/0x250 [ 501.850547][T11122] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 501.850571][T11122] __do_fast_syscall_32+0xb6/0x2b0 [ 501.850590][T11122] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.850609][T11122] do_fast_syscall_32+0x34/0x80 [ 501.850627][T11122] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 501.850648][T11122] RIP: 0023:0xf705e539 [ 501.850663][T11122] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 501.850677][T11122] RSP: 002b:00000000f544e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 501.850694][T11122] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0 [ 501.850706][T11122] RDX: 00000000000003b4 RSI: 0000000002040000 RDI: 0000000080003700 [ 501.850716][T11122] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 501.850725][T11122] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 501.850734][T11122] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 501.850756][T11122] [ 502.150568][ C0] vkms_vblank_simulate: vblank timer overrun [ 502.160613][ T5869] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 502.271534][ T5870] Bluetooth: hci0: command 0x0406 tx timeout [ 503.188760][ T5869] usb 2-1: config 7 has an invalid interface number: 34 but max is 0 [ 503.231074][ T5869] usb 2-1: config 7 has no interface number 0 [ 503.256650][ T5869] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=5e.35 [ 503.291024][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.299084][ T5869] usb 2-1: Product: syz [ 503.336805][ T5869] usb 2-1: Manufacturer: syz [ 503.346718][ T5869] usb 2-1: SerialNumber: syz [ 503.541222][ T5870] Bluetooth: hci1: command 0x0406 tx timeout [ 503.621662][ T5867] Bluetooth: hci4: command 0x0406 tx timeout [ 503.627920][ T5867] Bluetooth: hci3: command 0x0406 tx timeout [ 503.635620][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout [ 503.821058][ T5962] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 503.952328][ T5962] usb 1-1: device descriptor read/64, error -71 [ 504.040948][ T44] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 504.181340][ T44] usb 5-1: device descriptor read/64, error -71 [ 504.191007][ T5962] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 504.323726][T11154] input: syz1 as /devices/virtual/input/input25 [ 504.331054][ T5962] usb 1-1: device descriptor read/64, error -71 [ 504.352967][ T5870] Bluetooth: hci0: command 0x0406 tx timeout [ 504.442460][ T5962] usb usb1-port1: attempt power cycle [ 504.471063][ T44] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 504.611284][ T44] usb 5-1: device descriptor read/64, error -71 [ 504.713586][ T5869] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual USB' in warm state. [ 504.722167][ T44] usb usb5-port1: attempt power cycle [ 504.744174][ T5869] dvb-usb: bulk message failed: -22 (2/0) [ 504.765270][ T5869] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 504.798615][ T5869] dvb-usb: DViCO FusionHDTV DVB-T Dual USB error while loading driver (-19) [ 504.811011][ T5962] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 504.841908][ T5962] usb 1-1: device descriptor read/8, error -71 [ 504.849485][ T5869] dvb_usb_cxusb 2-1:7.34: probe with driver dvb_usb_cxusb failed with error -22 [ 504.882610][ T5869] usb 2-1: USB disconnect, device number 38 [ 505.041121][ T980] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 505.071058][ T44] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 505.111053][ T5962] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 505.120123][ T44] usb 5-1: device descriptor read/8, error -71 [ 505.133653][ T5962] usb 1-1: device descriptor read/8, error -71 [ 505.203545][ T980] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.234674][ T980] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 505.246355][ T980] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 505.260467][ T5962] usb usb1-port1: unable to enumerate USB device [ 505.268158][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 505.280125][ T980] usb 4-1: SerialNumber: syz [ 505.371010][ T44] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 505.456869][ T44] usb 5-1: device descriptor read/8, error -71 [ 505.474672][T11163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1300'. [ 505.502474][T11161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.523647][T11161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.572746][ T44] usb usb5-port1: unable to enumerate USB device [ 505.583619][ T980] usb 4-1: 0:2 : does not exist [ 505.621148][ T5870] Bluetooth: hci1: command 0x0406 tx timeout [ 505.660531][ T980] usb 4-1: USB disconnect, device number 53 [ 505.701129][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout [ 505.707354][ T5867] Bluetooth: hci4: command 0x0406 tx timeout [ 505.709294][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 505.827006][ T6023] udevd[6023]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.057700][T11177] FAULT_INJECTION: forcing a failure. [ 506.057700][T11177] name failslab, interval 1, probability 0, space 0, times 0 [ 506.075037][T11177] CPU: 1 UID: 0 PID: 11177 Comm: syz.5.1305 Not tainted syzkaller #0 PREEMPT(full) [ 506.075068][T11177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 506.075082][T11177] Call Trace: [ 506.075091][T11177] [ 506.075101][T11177] dump_stack_lvl+0x189/0x250 [ 506.075131][T11177] ? __pfx____ratelimit+0x10/0x10 [ 506.075153][T11177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.075177][T11177] ? __pfx__printk+0x10/0x10 [ 506.075222][T11177] ? __pfx___might_resched+0x10/0x10 [ 506.075241][T11177] ? fs_reclaim_acquire+0x7d/0x100 [ 506.075266][T11177] should_fail_ex+0x414/0x560 [ 506.075303][T11177] should_failslab+0xa8/0x100 [ 506.075335][T11177] kmem_cache_alloc_noprof+0x73/0x3c0 [ 506.075361][T11177] ? security_inode_alloc+0x39/0x330 [ 506.075389][T11177] security_inode_alloc+0x39/0x330 [ 506.075413][T11177] inode_init_always_gfp+0x9ed/0xdc0 [ 506.075451][T11177] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 506.075471][T11177] alloc_inode+0x82/0x1b0 [ 506.075502][T11177] new_inode+0x22/0x170 [ 506.075538][T11177] __debugfs_create_file+0x14d/0x4f0 [ 506.075575][T11177] debugfs_create_file_full+0x3f/0x60 [ 506.075611][T11177] ref_tracker_dir_debugfs+0x14e/0x270 [ 506.075632][T11177] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 506.075683][T11177] ? rcu_is_watching+0x15/0xb0 [ 506.075703][T11177] ? alloc_netdev_mqs+0xa3/0x11b0 [ 506.075738][T11177] ? __raw_spin_lock_init+0x45/0x100 [ 506.075767][T11177] alloc_netdev_mqs+0x26f/0x11b0 [ 506.075794][T11177] ? __pfx_macvlan_setup+0x10/0x10 [ 506.075831][T11177] rtnl_create_link+0x31f/0xd10 [ 506.075869][T11177] rtnl_newlink_create+0x25c/0xb00 [ 506.075900][T11177] ? __lock_acquire+0xab9/0xd20 [ 506.075955][T11177] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 506.075985][T11177] ? __pfx___mutex_lock+0x10/0x10 [ 506.076019][T11177] ? ns_capable+0x8a/0xf0 [ 506.076045][T11177] rtnl_newlink+0x16d6/0x1c70 [ 506.076069][T11177] ? netlink_sendmsg+0x805/0xb30 [ 506.076106][T11177] ? __pfx_rtnl_newlink+0x10/0x10 [ 506.076155][T11177] ? kasan_quarantine_put+0xdd/0x220 [ 506.076180][T11177] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.076214][T11177] ? nlmon_xmit+0xb0/0x100 [ 506.076235][T11177] ? kmem_cache_free+0x18f/0x400 [ 506.076272][T11177] ? __local_bh_enable_ip+0x12d/0x1c0 [ 506.076292][T11177] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.076314][T11177] ? __local_bh_enable_ip+0x12d/0x1c0 [ 506.076335][T11177] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 506.076360][T11177] ? __dev_queue_xmit+0x27b/0x3b50 [ 506.076388][T11177] ? __dev_queue_xmit+0x27b/0x3b50 [ 506.076412][T11177] ? __dev_queue_xmit+0x27b/0x3b50 [ 506.076441][T11177] ? __dev_queue_xmit+0x1d79/0x3b50 [ 506.076476][T11177] ? __lock_acquire+0xab9/0xd20 [ 506.076535][T11177] ? __pfx_rtnl_newlink+0x10/0x10 [ 506.076557][T11177] rtnetlink_rcv_msg+0x7cf/0xb70 [ 506.076583][T11177] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 506.076604][T11177] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 506.076623][T11177] ? ref_tracker_free+0x63a/0x7d0 [ 506.076643][T11177] ? __asan_memcpy+0x40/0x70 [ 506.076666][T11177] ? __pfx_ref_tracker_free+0x10/0x10 [ 506.076699][T11177] netlink_rcv_skb+0x205/0x470 [ 506.076722][T11177] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 506.076746][T11177] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 506.076782][T11177] ? netlink_deliver_tap+0x2e/0x1b0 [ 506.076813][T11177] netlink_unicast+0x82f/0x9e0 [ 506.076854][T11177] ? __pfx_netlink_unicast+0x10/0x10 [ 506.076888][T11177] ? netlink_sendmsg+0x642/0xb30 [ 506.076908][T11177] ? skb_put+0x11b/0x210 [ 506.076936][T11177] netlink_sendmsg+0x805/0xb30 [ 506.076970][T11177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.076996][T11177] ? __import_iovec+0x5d4/0x7f0 [ 506.077020][T11177] ? aa_sock_msg_perm+0xf1/0x1d0 [ 506.077043][T11177] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 506.077066][T11177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.077089][T11177] __sock_sendmsg+0x21c/0x270 [ 506.077124][T11177] ____sys_sendmsg+0x505/0x830 [ 506.077157][T11177] ? __pfx_____sys_sendmsg+0x10/0x10 [ 506.077208][T11177] ___sys_sendmsg+0x21f/0x2a0 [ 506.077237][T11177] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.077306][T11177] ? __fget_files+0x2a/0x420 [ 506.077323][T11177] ? __fget_files+0x3a0/0x420 [ 506.077354][T11177] __sys_sendmsg+0x164/0x220 [ 506.077383][T11177] ? __pfx___sys_sendmsg+0x10/0x10 [ 506.077428][T11177] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.077453][T11177] __do_fast_syscall_32+0xb6/0x2b0 [ 506.077477][T11177] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.077503][T11177] do_fast_syscall_32+0x34/0x80 [ 506.077526][T11177] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 506.077552][T11177] RIP: 0023:0xf7f15539 [ 506.077570][T11177] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 506.077588][T11177] RSP: 002b:00000000f541655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 506.077610][T11177] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 506.077624][T11177] RDX: 0000000008000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 506.077637][T11177] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 506.077649][T11177] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 506.077661][T11177] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 506.077693][T11177] [ 506.077736][T11177] debugfs: out of free dentries, can not create file 'netdev@ffff888058348610' [ 506.511238][ T5950] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 506.520550][T11177] team_slave_0: entered promiscuous mode [ 506.621468][T11177] team_slave_1: entered promiscuous mode [ 506.669098][T11177] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 506.900336][ T5950] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 506.926487][ T5950] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 506.961785][ T5950] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 506.971094][ T5950] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 506.999809][ T5950] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 507.019042][ T5950] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 507.028973][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 507.037966][ T5950] usb 2-1: Product: syz [ 507.045307][ T5950] usb 2-1: Manufacturer: syz [ 507.061354][ T5950] cdc_wdm 2-1:1.0: skipping garbage [ 507.067192][ T5950] cdc_wdm 2-1:1.0: skipping garbage [ 507.088585][ T5950] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 507.095214][ T5950] cdc_wdm 2-1:1.0: Unknown control protocol [ 507.356402][T11180] fuse: Bad value for 'group_id' [ 507.361550][T11180] fuse: Bad value for 'group_id' [ 507.424681][T11180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.450801][T11180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.467393][T11202] syzkaller0: entered promiscuous mode [ 507.807557][T11202] syzkaller0: entered allmulticast mode [ 507.813568][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 508.398752][T11209] netlink: 'syz.5.1314': attribute type 4 has an invalid length. [ 509.203179][ T5950] usb 2-1: USB disconnect, device number 39 [ 509.421372][T11233] blktrace: Concurrent blktraces are not allowed on nullb0 [ 509.527922][T11233] syz.3.1319 (11233): drop_caches: 2 [ 509.633368][T11233] syz.3.1319 (11233): drop_caches: 2 [ 511.052310][T11261] syz.0.1324 (11261): drop_caches: 2 [ 511.061510][T11261] syz.0.1324 (11261): drop_caches: 2 [ 516.244276][T11319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1346'. [ 516.827687][ T980] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 517.093080][ T5943] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 517.108995][ T980] usb 2-1: Using ep0 maxpacket: 8 [ 517.121214][ T980] usb 2-1: unable to get BOS descriptor or descriptor too short [ 517.130682][ T980] usb 2-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 517.188977][ T980] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 517.206533][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.236436][ T980] usb 2-1: Product: syz [ 517.246543][ T980] usb 2-1: Manufacturer: syz [ 517.251054][ T5943] usb 6-1: Using ep0 maxpacket: 32 [ 517.256443][ T980] usb 2-1: SerialNumber: syz [ 517.430796][ T5943] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 517.466675][ T5943] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 517.514128][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 517.534131][ T5943] usb 6-1: Product: syz [ 517.538445][ T5943] usb 6-1: Manufacturer: syz [ 517.548189][ T5943] usb 6-1: SerialNumber: syz [ 517.601951][ T5943] usb 6-1: config 0 descriptor?? [ 517.822337][ T980] usb 2-1: USB disconnect, device number 41 [ 517.979589][T11343] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 518.013932][ T5943] hub 6-1:0.0: bad descriptor, ignoring hub [ 518.034483][ T5943] hub 6-1:0.0: probe with driver hub failed with error -5 [ 518.360319][ T980] usb 6-1: USB disconnect, device number 5 [ 519.271076][ T980] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 519.456381][ T980] usb 6-1: Using ep0 maxpacket: 32 [ 519.501588][ T980] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 519.988644][ T980] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 519.998477][ T980] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 520.035396][ T980] usb 6-1: config 0 descriptor?? [ 520.068868][ T980] usb 6-1: can't set config #0, error -71 [ 520.087014][ T980] usb 6-1: USB disconnect, device number 6 [ 520.450972][ T980] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 520.625561][ T980] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 520.637134][ T980] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 520.647540][ T980] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 520.657010][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.673423][T11372] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 520.694413][ T980] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 520.908742][ T983] usb 6-1: USB disconnect, device number 7 [ 521.685687][T11376] FAULT_INJECTION: forcing a failure. [ 521.685687][T11376] name failslab, interval 1, probability 0, space 0, times 0 [ 521.731750][T11376] CPU: 1 UID: 0 PID: 11376 Comm: syz.4.1359 Not tainted syzkaller #0 PREEMPT(full) [ 521.731780][T11376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 521.731793][T11376] Call Trace: [ 521.731802][T11376] [ 521.731811][T11376] dump_stack_lvl+0x189/0x250 [ 521.731841][T11376] ? __pfx____ratelimit+0x10/0x10 [ 521.731863][T11376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 521.731887][T11376] ? __pfx__printk+0x10/0x10 [ 521.731930][T11376] should_fail_ex+0x414/0x560 [ 521.731966][T11376] should_failslab+0xa8/0x100 [ 521.731998][T11376] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 521.732028][T11376] ? __alloc_skb+0x112/0x2d0 [ 521.732048][T11376] ? __pfx_br_get_link_af_size_filtered+0x10/0x10 [ 521.732074][T11376] __alloc_skb+0x112/0x2d0 [ 521.732101][T11376] br_info_notify+0x105/0x260 [ 521.732135][T11376] br_device_event+0x86c/0x910 [ 521.732166][T11376] ? __pfx_br_device_event+0x10/0x10 [ 521.732203][T11376] notifier_call_chain+0x1b3/0x3e0 [ 521.732234][T11376] netif_state_change+0x284/0x3a0 [ 521.732257][T11376] ? __pfx_netif_state_change+0x10/0x10 [ 521.732283][T11376] ? netif_change_flags+0xe8/0x1a0 [ 521.732314][T11376] do_setlink+0x35de/0x41c0 [ 521.732336][T11376] ? rcu_is_watching+0x15/0xb0 [ 521.732373][T11376] ? __pfx_do_setlink+0x10/0x10 [ 521.732398][T11376] ? __local_bh_enable_ip+0x12d/0x1c0 [ 521.732419][T11376] ? lockdep_hardirqs_on+0x9c/0x150 [ 521.732440][T11376] ? __local_bh_enable_ip+0x12d/0x1c0 [ 521.732481][T11376] ? br_multicast_set_port_router+0xb05/0xc50 [ 521.732507][T11376] ? br_multicast_set_port_router+0xb05/0xc50 [ 521.732535][T11376] ? __pfx_br_multicast_set_port_router+0x10/0x10 [ 521.732570][T11376] ? __mutex_lock+0xd3b/0x1350 [ 521.732593][T11376] ? br_port_flags_change+0x19f/0x1f0 [ 521.732615][T11376] ? __lock_acquire+0xab9/0xd20 [ 521.732652][T11376] ? __local_bh_enable_ip+0x12d/0x1c0 [ 521.732674][T11376] ? lockdep_hardirqs_on+0x9c/0x150 [ 521.732696][T11376] ? __local_bh_enable_ip+0x12d/0x1c0 [ 521.732717][T11376] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 521.732743][T11376] ? do_raw_spin_unlock+0x122/0x240 [ 521.732770][T11376] ? br_port_slave_changelink+0x139/0x150 [ 521.732794][T11376] ? br_port_slave_changelink+0x139/0x150 [ 521.732819][T11376] rtnl_newlink+0x160b/0x1c70 [ 521.732840][T11376] ? netlink_sendmsg+0x805/0xb30 [ 521.732869][T11376] ? rtnl_newlink+0x8c1/0x1c70 [ 521.732896][T11376] ? __pfx_rtnl_newlink+0x10/0x10 [ 521.732946][T11376] ? kasan_quarantine_put+0xdd/0x220 [ 521.732973][T11376] ? lockdep_hardirqs_on+0x9c/0x150 [ 521.733001][T11376] ? nlmon_xmit+0xb0/0x100 [ 521.733024][T11376] ? kmem_cache_free+0x18f/0x400 [ 521.733062][T11376] ? __local_bh_enable_ip+0x12d/0x1c0 [ 521.733083][T11376] ? lockdep_hardirqs_on+0x9c/0x150 [ 521.733106][T11376] ? __local_bh_enable_ip+0x12d/0x1c0 [ 521.733127][T11376] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 521.733154][T11376] ? __dev_queue_xmit+0x27b/0x3b50 [ 521.733180][T11376] ? __dev_queue_xmit+0x27b/0x3b50 [ 521.733206][T11376] ? __dev_queue_xmit+0x27b/0x3b50 [ 521.733234][T11376] ? __dev_queue_xmit+0x1d79/0x3b50 [ 521.733265][T11376] ? __lock_acquire+0xab9/0xd20 [ 521.733321][T11376] ? __pfx_rtnl_newlink+0x10/0x10 [ 521.733345][T11376] rtnetlink_rcv_msg+0x7cf/0xb70 [ 521.733370][T11376] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 521.733392][T11376] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 521.733411][T11376] ? ref_tracker_free+0x63a/0x7d0 [ 521.733430][T11376] ? __asan_memcpy+0x40/0x70 [ 521.733459][T11376] ? __pfx_ref_tracker_free+0x10/0x10 [ 521.733489][T11376] netlink_rcv_skb+0x205/0x470 [ 521.733513][T11376] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 521.733536][T11376] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 521.733570][T11376] ? netlink_deliver_tap+0x2e/0x1b0 [ 521.733600][T11376] netlink_unicast+0x82f/0x9e0 [ 521.733640][T11376] ? __pfx_netlink_unicast+0x10/0x10 [ 521.733672][T11376] ? netlink_sendmsg+0x642/0xb30 [ 521.733692][T11376] ? skb_put+0x11b/0x210 [ 521.733719][T11376] netlink_sendmsg+0x805/0xb30 [ 521.733752][T11376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.733776][T11376] ? __import_iovec+0x5d4/0x7f0 [ 521.733801][T11376] ? aa_sock_msg_perm+0xf1/0x1d0 [ 521.733824][T11376] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 521.733846][T11376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.733869][T11376] __sock_sendmsg+0x21c/0x270 [ 521.733904][T11376] ____sys_sendmsg+0x505/0x830 [ 521.733937][T11376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 521.733980][T11376] ___sys_sendmsg+0x21f/0x2a0 [ 521.734007][T11376] ? __pfx____sys_sendmsg+0x10/0x10 [ 521.734071][T11376] ? __fget_files+0x2a/0x420 [ 521.734088][T11376] ? __fget_files+0x3a0/0x420 [ 521.734117][T11376] __sys_sendmsg+0x164/0x220 [ 521.734144][T11376] ? __pfx___sys_sendmsg+0x10/0x10 [ 521.734185][T11376] ? lockdep_hardirqs_on+0x9c/0x150 [ 521.734210][T11376] __do_fast_syscall_32+0xb6/0x2b0 [ 521.734234][T11376] ? lockdep_hardirqs_on+0x9c/0x150 [ 521.734258][T11376] do_fast_syscall_32+0x34/0x80 [ 521.734281][T11376] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 521.734307][T11376] RIP: 0023:0xf705e539 [ 521.734326][T11376] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 521.734342][T11376] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 521.734364][T11376] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 521.734380][T11376] RDX: 0000000024044040 RSI: 0000000000000000 RDI: 0000000000000000 [ 521.734392][T11376] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 521.734426][T11376] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 521.734438][T11376] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 521.734477][T11376] [ 522.689784][T11397] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1367'. [ 522.701549][T11397] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 522.991538][T11404] FAULT_INJECTION: forcing a failure. [ 522.991538][T11404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.040285][T11404] CPU: 1 UID: 0 PID: 11404 Comm: syz.3.1370 Not tainted syzkaller #0 PREEMPT(full) [ 523.040314][T11404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 523.040328][T11404] Call Trace: [ 523.040337][T11404] [ 523.040347][T11404] dump_stack_lvl+0x189/0x250 [ 523.040376][T11404] ? __pfx____ratelimit+0x10/0x10 [ 523.040397][T11404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 523.040421][T11404] ? __pfx__printk+0x10/0x10 [ 523.040462][T11404] should_fail_ex+0x414/0x560 [ 523.040499][T11404] _copy_to_user+0x31/0xb0 [ 523.040527][T11404] simple_read_from_buffer+0xe1/0x170 [ 523.040570][T11404] proc_fail_nth_read+0x1b3/0x220 [ 523.040596][T11404] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 523.040622][T11404] ? rw_verify_area+0x2a6/0x4d0 [ 523.040646][T11404] ? __lock_acquire+0xab9/0xd20 [ 523.040675][T11404] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 523.040701][T11404] vfs_read+0x1fd/0xa30 [ 523.040728][T11404] ? fdget_pos+0x247/0x320 [ 523.040752][T11404] ? __pfx___mutex_lock+0x10/0x10 [ 523.040776][T11404] ? __pfx_vfs_read+0x10/0x10 [ 523.040805][T11404] ? __fget_files+0x2a/0x420 [ 523.040833][T11404] ? __fget_files+0x3a0/0x420 [ 523.040850][T11404] ? __fget_files+0x2a/0x420 [ 523.040877][T11404] ksys_read+0x145/0x250 [ 523.040906][T11404] ? __pfx_ksys_read+0x10/0x10 [ 523.040936][T11404] ? lockdep_hardirqs_on+0x9c/0x150 [ 523.040960][T11404] __do_fast_syscall_32+0xb6/0x2b0 [ 523.040984][T11404] ? lockdep_hardirqs_on+0x9c/0x150 [ 523.041010][T11404] do_fast_syscall_32+0x34/0x80 [ 523.041033][T11404] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 523.041059][T11404] RIP: 0023:0xf7fc4539 [ 523.041078][T11404] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 523.041096][T11404] RSP: 002b:00000000f54c6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 523.041118][T11404] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54c6620 [ 523.041134][T11404] RDX: 000000000000000f RSI: 00000000f7454ff4 RDI: 0000000000000000 [ 523.041147][T11404] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 523.041159][T11404] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 523.041172][T11404] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 523.041202][T11404] [ 523.360373][T11418] syzkaller0: entered promiscuous mode [ 523.390458][T11418] syzkaller0: entered allmulticast mode [ 523.611017][ T5943] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 523.762505][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.800922][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.814816][ T5943] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 523.831299][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.867716][ T5943] usb 1-1: config 0 descriptor?? [ 523.965626][T11426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1375'. [ 524.363224][ T5943] pyra 0003:1E7D:2CF6.0012: unbalanced delimiter at end of report description [ 524.431063][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1379'. [ 524.443362][ T5943] pyra 0003:1E7D:2CF6.0012: parse failed [ 524.458041][ T5943] pyra 0003:1E7D:2CF6.0012: probe with driver pyra failed with error -22 [ 525.122768][T11460] tipc: Failed to remove unknown binding: 66,1,1/0:3304207871/3304207873 [ 525.147804][T11460] tipc: Failed to remove unknown binding: 66,1,1/0:3304207871/3304207873 [ 525.157821][T11460] tipc: Failed to remove unknown binding: 66,1,1/0:3304207871/3304207873 [ 525.614657][ T5950] usb 1-1: USB disconnect, device number 48 [ 526.450117][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 526.450132][ T30] audit: type=1326 audit(1758164560.523:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11484 comm="syz.0.1391" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x0 [ 526.879931][T11492] syzkaller0: entered promiscuous mode [ 526.896520][T11492] syzkaller0: entered allmulticast mode [ 527.951229][T11498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1394'. [ 528.516358][T11516] delete_channel: no stack [ 528.901069][ T980] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 529.143052][ T980] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 529.154493][ T980] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 529.181778][ T980] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 529.210999][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.256609][T11516] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 529.286988][ T980] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 530.688346][T11536] netlink: 'syz.3.1407': attribute type 10 has an invalid length. [ 531.132399][T11545] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 531.861559][ T983] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 532.115014][T11568] FAULT_INJECTION: forcing a failure. [ 532.115014][T11568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.169406][ T983] usb 4-1: Using ep0 maxpacket: 8 [ 532.191396][T11567] tipc: Failed to remove unknown binding: 66,1,1/4252189710:684416775/684416777 [ 532.203849][T11567] tipc: Failed to remove unknown binding: 66,1,1/4252189710:684416775/684416777 [ 532.213916][T11567] tipc: Failed to remove unknown binding: 66,1,1/4252189710:684416775/684416777 [ 532.226330][T11568] CPU: 1 UID: 0 PID: 11568 Comm: syz.1.1417 Not tainted syzkaller #0 PREEMPT(full) [ 532.226361][T11568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 532.226375][T11568] Call Trace: [ 532.226385][T11568] [ 532.226394][T11568] dump_stack_lvl+0x189/0x250 [ 532.226426][T11568] ? __pfx____ratelimit+0x10/0x10 [ 532.226456][T11568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.226481][T11568] ? __pfx__printk+0x10/0x10 [ 532.226523][T11568] should_fail_ex+0x414/0x560 [ 532.226561][T11568] _copy_to_user+0x31/0xb0 [ 532.226591][T11568] simple_read_from_buffer+0xe1/0x170 [ 532.226627][T11568] proc_fail_nth_read+0x1b3/0x220 [ 532.226654][T11568] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 532.226682][T11568] ? rw_verify_area+0x2a6/0x4d0 [ 532.226708][T11568] ? __lock_acquire+0xab9/0xd20 [ 532.226737][T11568] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 532.226763][T11568] vfs_read+0x1fd/0xa30 [ 532.226789][T11568] ? fdget_pos+0x247/0x320 [ 532.226813][T11568] ? __pfx___mutex_lock+0x10/0x10 [ 532.226837][T11568] ? __pfx_vfs_read+0x10/0x10 [ 532.226866][T11568] ? __fget_files+0x2a/0x420 [ 532.226889][T11568] ? __fget_files+0x3a0/0x420 [ 532.226907][T11568] ? __fget_files+0x2a/0x420 [ 532.226936][T11568] ksys_read+0x145/0x250 [ 532.226967][T11568] ? __pfx_ksys_read+0x10/0x10 [ 532.227000][T11568] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.227025][T11568] __do_fast_syscall_32+0xb6/0x2b0 [ 532.227051][T11568] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.227077][T11568] do_fast_syscall_32+0x34/0x80 [ 532.227101][T11568] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 532.227127][T11568] RIP: 0023:0xf70be539 [ 532.227146][T11568] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 532.227165][T11568] RSP: 002b:00000000f548d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 532.227187][T11568] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f548d620 [ 532.227202][T11568] RDX: 000000000000000f RSI: 00000000f7444ff4 RDI: 0000000000000000 [ 532.227215][T11568] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 532.227228][T11568] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 532.227240][T11568] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 532.227272][T11568] [ 532.527995][ T9] usb 5-1: USB disconnect, device number 50 [ 532.589852][ T983] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 532.599129][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.607191][ T983] usb 4-1: Product: syz [ 532.611394][ T983] usb 4-1: Manufacturer: syz [ 532.615986][ T983] usb 4-1: SerialNumber: syz [ 532.629608][ T983] usb 4-1: config 0 descriptor?? [ 532.875771][T11575] binder: 11570:11575 ioctl 4018620d 0 returned -22 [ 532.884101][T11575] binder: 11570:11575 ioctl c0306201 80000540 returned -22 [ 532.943766][ T983] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 533.030943][T11578] blktrace: Concurrent blktraces are not allowed on nullb0 [ 533.095144][T11578] syz.4.1419 (11578): drop_caches: 2 [ 533.130494][T11578] syz.4.1419 (11578): drop_caches: 2 [ 533.395706][ T51] Bluetooth: hci0: unexpected event for opcode 0x204e [ 533.397611][T11555] fuse: Bad value for 'fd' [ 533.636276][ T983] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 533.681212][ T983] usb 4-1: USB disconnect, device number 54 [ 534.678088][T11587] vxcan1: entered allmulticast mode [ 535.171989][T11591] FAULT_INJECTION: forcing a failure. [ 535.171989][T11591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.232100][T11591] CPU: 0 UID: 0 PID: 11591 Comm: syz.0.1423 Not tainted syzkaller #0 PREEMPT(full) [ 535.232131][T11591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 535.232146][T11591] Call Trace: [ 535.232155][T11591] [ 535.232165][T11591] dump_stack_lvl+0x189/0x250 [ 535.232195][T11591] ? __pfx____ratelimit+0x10/0x10 [ 535.232217][T11591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 535.232242][T11591] ? __pfx__printk+0x10/0x10 [ 535.232271][T11591] ? __might_fault+0xb0/0x130 [ 535.232311][T11591] should_fail_ex+0x414/0x560 [ 535.232347][T11591] _copy_to_iter+0x1de/0x1790 [ 535.232388][T11591] ? __pfx__copy_to_iter+0x10/0x10 [ 535.232416][T11591] ? chacha_block_generic+0x53/0xc80 [ 535.232466][T11591] get_random_bytes_user+0x1a0/0x380 [ 535.232499][T11591] ? __pfx_get_random_bytes_user+0x10/0x10 [ 535.232535][T11591] ? __pfx_vfs_write+0x10/0x10 [ 535.232575][T11591] ? import_ubuf+0xfb/0x1d0 [ 535.232605][T11591] __ia32_sys_getrandom+0x16d/0x260 [ 535.232637][T11591] ? __pfx___ia32_sys_getrandom+0x10/0x10 [ 535.232662][T11591] ? ksys_write+0x22a/0x250 [ 535.232700][T11591] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.232725][T11591] __do_fast_syscall_32+0xb6/0x2b0 [ 535.232751][T11591] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.232777][T11591] do_fast_syscall_32+0x34/0x80 [ 535.232801][T11591] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 535.232827][T11591] RIP: 0023:0xf70ee539 [ 535.232845][T11591] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 535.232864][T11591] RSP: 002b:00000000f54de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000163 [ 535.232886][T11591] RAX: ffffffffffffffda RBX: 0000000080000240 RCX: 00000000ffffff9a [ 535.232902][T11591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 535.232915][T11591] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 535.232928][T11591] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 535.232940][T11591] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 535.232971][T11591] [ 535.580960][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 535.741519][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 535.772853][ T9] usb 4-1: unable to get BOS descriptor set [ 535.779936][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 535.798049][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 72 [ 535.812532][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 535.830802][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 535.841190][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.849232][ T9] usb 4-1: Product: syz [ 535.860796][ T9] usb 4-1: Manufacturer: syz [ 535.903143][ T9] usb 4-1: SerialNumber: syz [ 535.928230][T11592] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 535.966730][T11592] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 536.212531][T11592] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 536.317737][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 536.564829][ T9] usb 4-1: USB disconnect, device number 55 [ 536.732297][T11625] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1432'. [ 537.242110][T11620] ------------[ cut here ]------------ [ 537.247872][T11620] WARNING: CPU: 1 PID: 11620 at net/mac80211/tx.c:6202 ieee80211_tx_skb_tid+0x380/0x420 [ 537.257718][T11620] Modules linked in: [ 537.262084][T11620] CPU: 1 UID: 0 PID: 11620 Comm: syz.1.1430 Not tainted syzkaller #0 PREEMPT(full) [ 537.271552][T11620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 537.281696][T11620] RIP: 0010:ieee80211_tx_skb_tid+0x380/0x420 [ 537.287721][T11620] Code: a8 a3 f6 e9 b1 fe ff ff e8 1d cd c5 f6 90 0f 0b 90 e9 1f fe ff ff e8 0f cd c5 f6 90 0f 0b 90 e9 2a fe ff ff e8 01 cd c5 f6 90 <0f> 0b 90 e8 58 e2 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 [ 537.307411][T11620] RSP: 0018:ffffc9000d4bf2d8 EFLAGS: 00010283 [ 537.313569][T11620] RAX: ffffffff8af9f05f RBX: ffffffff8af9ed0f RCX: 0000000000080000 [ 537.321626][T11620] RDX: ffffc9000f46d000 RSI: 0000000000020842 RDI: 0000000000020843 [ 537.329712][T11620] RBP: 00000000ffffffff R08: 0000000000000000 R09: ffffffff8af9ed0f [ 537.337763][T11620] R10: dffffc0000000000 R11: ffffed100b6d8146 R12: ffff88805af28d80 [ 537.345808][T11620] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 537.353936][T11620] FS: 0000000000000000(0000) GS:ffff888125d15000(0063) knlGS:00000000f546cb40 [ 537.362977][T11620] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 537.369593][T11620] CR2: 00007fbabbd4fb4c CR3: 0000000032214000 CR4: 00000000003526f0 [ 537.377635][T11620] Call Trace: [ 537.380981][T11620] [ 537.383934][T11620] mesh_plink_frame_tx+0x734/0xc10 [ 537.389072][T11620] ? __pfx_mesh_plink_frame_tx+0x10/0x10 [ 537.394754][T11620] ? ieee80211_mps_set_sta_local_pm+0xb1/0x310 [ 537.400966][T11620] mesh_plink_deactivate+0x18e/0x2f0 [ 537.406262][T11620] mesh_sta_cleanup+0x42/0x150 [ 537.411068][T11620] cleanup_single_sta+0x40f/0x660 [ 537.416105][T11620] __sta_info_flush+0x5e4/0x710 [ 537.421097][T11620] ? __pfx___sta_info_flush+0x10/0x10 [ 537.426480][T11620] ieee80211_do_stop+0x399/0x1fb0 [ 537.431569][T11620] ? __lock_acquire+0xab9/0xd20 [ 537.436439][T11620] ? do_raw_spin_lock+0x121/0x290 [ 537.441497][T11620] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 537.446876][T11620] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 537.452381][T11620] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 537.458303][T11620] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.463555][T11620] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 537.469908][T11620] ? wiphy_work_cancel+0x1eb/0x3c0 [ 537.475073][T11620] ieee80211_stop+0x1b1/0x240 [ 537.479757][T11620] ? __pfx_ieee80211_stop+0x10/0x10 [ 537.485010][T11620] __dev_close_many+0x361/0x6f0 [ 537.489890][T11620] ? __pfx___dev_close_many+0x10/0x10 [ 537.495312][T11620] ? __mutex_trylock_common+0x153/0x260 [ 537.500913][T11620] netif_close_many+0x225/0x410 [ 537.505804][T11620] ? __pfx_netif_close_many+0x10/0x10 [ 537.511302][T11620] ? __mutex_lock+0x335/0x1350 [ 537.516157][T11620] ? __lock_acquire+0xab9/0xd20 [ 537.521059][T11620] netif_close+0x158/0x210 [ 537.525482][T11620] ? __pfx_netif_close+0x10/0x10 [ 537.530423][T11620] ? __pfx___mutex_lock+0x10/0x10 [ 537.535495][T11620] dev_close+0x10a/0x220 [ 537.539752][T11620] cfg80211_shutdown_all_interfaces+0xd4/0x220 [ 537.545945][T11620] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 537.552133][T11620] cfg80211_rfkill_set_block+0x2d/0x50 [ 537.557622][T11620] rfkill_set_block+0x1cf/0x440 [ 537.562563][T11620] rfkill_fop_write+0x44b/0x570 [ 537.567435][T11620] ? __pfx_rfkill_fop_write+0x10/0x10 [ 537.572844][T11620] ? security_file_permission+0x20/0x290 [ 537.578506][T11620] ? rw_verify_area+0x255/0x4d0 [ 537.583401][T11620] ? __lock_acquire+0xab9/0xd20 [ 537.588289][T11620] ? __pfx_rfkill_fop_write+0x10/0x10 [ 537.593718][T11620] vfs_write+0x27e/0xb30 [ 537.597983][T11620] ? __pfx_vfs_write+0x10/0x10 [ 537.602817][T11620] ? __fget_files+0x2a/0x420 [ 537.608387][T11620] ? __fget_files+0x2a/0x420 [ 537.613050][T11620] ? __fget_files+0x3a0/0x420 [ 537.617823][T11620] ? __fget_files+0x2a/0x420 [ 537.622456][T11620] ksys_write+0x145/0x250 [ 537.626800][T11620] ? __pfx_ksys_write+0x10/0x10 [ 537.631712][T11620] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.636932][T11620] __do_fast_syscall_32+0xb6/0x2b0 [ 537.642091][T11620] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.647299][T11620] do_fast_syscall_32+0x34/0x80 [ 537.652198][T11620] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 537.658550][T11620] RIP: 0023:0xf70be539 [ 537.662650][T11620] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 537.682311][T11620] RSP: 002b:00000000f546c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 537.690732][T11620] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080 [ 537.698739][T11620] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 537.706741][T11620] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 537.714748][T11620] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 537.722764][T11620] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 537.730756][T11620] [ 537.733823][T11620] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 537.741110][T11620] CPU: 1 UID: 0 PID: 11620 Comm: syz.1.1430 Not tainted syzkaller #0 PREEMPT(full) [ 537.750739][T11620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 537.760903][T11620] Call Trace: [ 537.764210][T11620] [ 537.767183][T11620] dump_stack_lvl+0x99/0x250 [ 537.771894][T11620] ? __asan_memcpy+0x40/0x70 [ 537.776495][T11620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.781699][T11620] ? __pfx__printk+0x10/0x10 [ 537.786351][T11620] vpanic+0x281/0x750 [ 537.790340][T11620] ? __pfx__printk+0x10/0x10 [ 537.794952][T11620] ? __pfx_vpanic+0x10/0x10 [ 537.799461][T11620] ? is_bpf_text_address+0x292/0x2b0 [ 537.804767][T11620] panic+0xb9/0xc0 [ 537.808495][T11620] ? __pfx_panic+0x10/0x10 [ 537.812930][T11620] __warn+0x31b/0x4b0 [ 537.816933][T11620] ? ieee80211_tx_skb_tid+0x380/0x420 [ 537.822319][T11620] ? ieee80211_tx_skb_tid+0x380/0x420 [ 537.827696][T11620] report_bug+0x2be/0x4f0 [ 537.832051][T11620] ? ieee80211_tx_skb_tid+0x380/0x420 [ 537.837446][T11620] ? ieee80211_tx_skb_tid+0x380/0x420 [ 537.842825][T11620] ? ieee80211_tx_skb_tid+0x382/0x420 [ 537.848207][T11620] handle_bug+0x84/0x160 [ 537.852456][T11620] exc_invalid_op+0x1a/0x50 [ 537.856973][T11620] asm_exc_invalid_op+0x1a/0x20 [ 537.861827][T11620] RIP: 0010:ieee80211_tx_skb_tid+0x380/0x420 [ 537.867816][T11620] Code: a8 a3 f6 e9 b1 fe ff ff e8 1d cd c5 f6 90 0f 0b 90 e9 1f fe ff ff e8 0f cd c5 f6 90 0f 0b 90 e9 2a fe ff ff e8 01 cd c5 f6 90 <0f> 0b 90 e8 58 e2 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 [ 537.887427][T11620] RSP: 0018:ffffc9000d4bf2d8 EFLAGS: 00010283 [ 537.893592][T11620] RAX: ffffffff8af9f05f RBX: ffffffff8af9ed0f RCX: 0000000000080000 [ 537.901566][T11620] RDX: ffffc9000f46d000 RSI: 0000000000020842 RDI: 0000000000020843 [ 537.909535][T11620] RBP: 00000000ffffffff R08: 0000000000000000 R09: ffffffff8af9ed0f [ 537.917593][T11620] R10: dffffc0000000000 R11: ffffed100b6d8146 R12: ffff88805af28d80 [ 537.925585][T11620] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 537.933563][T11620] ? ieee80211_tx_skb_tid+0x2f/0x420 [ 537.938861][T11620] ? ieee80211_tx_skb_tid+0x2f/0x420 [ 537.944162][T11620] ? ieee80211_tx_skb_tid+0x37f/0x420 [ 537.949550][T11620] ? ieee80211_tx_skb_tid+0x37f/0x420 [ 537.954942][T11620] mesh_plink_frame_tx+0x734/0xc10 [ 537.960095][T11620] ? __pfx_mesh_plink_frame_tx+0x10/0x10 [ 537.965727][T11620] ? ieee80211_mps_set_sta_local_pm+0xb1/0x310 [ 537.971907][T11620] mesh_plink_deactivate+0x18e/0x2f0 [ 537.977248][T11620] mesh_sta_cleanup+0x42/0x150 [ 537.982115][T11620] cleanup_single_sta+0x40f/0x660 [ 537.987152][T11620] __sta_info_flush+0x5e4/0x710 [ 537.992018][T11620] ? __pfx___sta_info_flush+0x10/0x10 [ 537.997402][T11620] ieee80211_do_stop+0x399/0x1fb0 [ 538.002431][T11620] ? __lock_acquire+0xab9/0xd20 [ 538.007308][T11620] ? do_raw_spin_lock+0x121/0x290 [ 538.012341][T11620] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 538.017740][T11620] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 538.023207][T11620] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 538.029131][T11620] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.034381][T11620] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 538.040745][T11620] ? wiphy_work_cancel+0x1eb/0x3c0 [ 538.045877][T11620] ieee80211_stop+0x1b1/0x240 [ 538.050563][T11620] ? __pfx_ieee80211_stop+0x10/0x10 [ 538.055802][T11620] __dev_close_many+0x361/0x6f0 [ 538.060684][T11620] ? __pfx___dev_close_many+0x10/0x10 [ 538.066062][T11620] ? __mutex_trylock_common+0x153/0x260 [ 538.071628][T11620] netif_close_many+0x225/0x410 [ 538.076514][T11620] ? __pfx_netif_close_many+0x10/0x10 [ 538.081894][T11620] ? __mutex_lock+0x335/0x1350 [ 538.086665][T11620] ? __lock_acquire+0xab9/0xd20 [ 538.091565][T11620] netif_close+0x158/0x210 [ 538.096011][T11620] ? __pfx_netif_close+0x10/0x10 [ 538.100977][T11620] ? __pfx___mutex_lock+0x10/0x10 [ 538.106017][T11620] dev_close+0x10a/0x220 [ 538.110285][T11620] cfg80211_shutdown_all_interfaces+0xd4/0x220 [ 538.116443][T11620] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 538.122615][T11620] cfg80211_rfkill_set_block+0x2d/0x50 [ 538.128074][T11620] rfkill_set_block+0x1cf/0x440 [ 538.132941][T11620] rfkill_fop_write+0x44b/0x570 [ 538.137800][T11620] ? __pfx_rfkill_fop_write+0x10/0x10 [ 538.143177][T11620] ? security_file_permission+0x20/0x290 [ 538.148818][T11620] ? rw_verify_area+0x255/0x4d0 [ 538.153680][T11620] ? __lock_acquire+0xab9/0xd20 [ 538.158545][T11620] ? __pfx_rfkill_fop_write+0x10/0x10 [ 538.163928][T11620] vfs_write+0x27e/0xb30 [ 538.168206][T11620] ? __pfx_vfs_write+0x10/0x10 [ 538.172998][T11620] ? __fget_files+0x2a/0x420 [ 538.177600][T11620] ? __fget_files+0x2a/0x420 [ 538.182211][T11620] ? __fget_files+0x3a0/0x420 [ 538.186891][T11620] ? __fget_files+0x2a/0x420 [ 538.191508][T11620] ksys_write+0x145/0x250 [ 538.195874][T11620] ? __pfx_ksys_write+0x10/0x10 [ 538.200833][T11620] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.206104][T11620] __do_fast_syscall_32+0xb6/0x2b0 [ 538.211233][T11620] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.216539][T11620] do_fast_syscall_32+0x34/0x80 [ 538.221504][T11620] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 538.227844][T11620] RIP: 0023:0xf70be539 [ 538.232011][T11620] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 538.251630][T11620] RSP: 002b:00000000f546c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 538.260083][T11620] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080 [ 538.268081][T11620] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 538.276135][T11620] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 538.284169][T11620] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 538.292163][T11620] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 538.300195][T11620] [ 538.303538][T11620] Kernel Offset: disabled [ 538.307870][T11620] Rebooting in 86400 seconds..