last executing test programs: 13m38.880745713s ago: executing program 1 (id=4517): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x40) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, r3, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8000000001000001, 0x0, 0x1}}, 0x40) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, 0x0) read(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x20e, &(0x7f0000000540)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x1d8, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @loopback, @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}, @hopopts={0x0, 0x32, '\x00', [@ra, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @pad1, @generic={0x1, 0x52, "08f1390b0c74cba47ed1dbe3290dbd16fe15f3802c8f12d8687cb72f6783172e63fafc0bc19fc7ea5e20fe65290cc5531784929dd4b5c8ff0df008542d00f6159b80595da8d72872864da820552af488c1ce"}]}]}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 13m35.925701667s ago: executing program 1 (id=4524): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="fb6bba8839", 0x5}], 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x40fd) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000000e14000425bd7000ffdbdf25080001000000000008003c0000000000080003000200000008000100000000000800a0dfeedf140f3b3403000100000008003c0004000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x5) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000a380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r2, &(0x7f000000c3c0)="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", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0xc, 0x10, 0x0, {0xffffffffffffffff, 0x9, 0x4030cf7d, 0x8000000000000001, 0x0, 0x200000004, 0x80000000, 0x9, 0xe29, 0x8000, 0x7, 0x0, r3, 0x2, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r4, 0x0, 0x2) openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) creat(&(0x7f0000000600)='./file0\x00', 0x1) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x20000000, 0x7, 0x0, 0x1, 0xdcd, 0x1000000}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x130808, 0x0) r5 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x24, 0x2, 0x0, @empty, @remote}, {0x16, 0x0, 0x0, @private=0xa010100}}}}}, 0x0) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002800)=@newsa={0x158, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x567ffffffc, 0x0, 0x0, 0x10001}, {0x401, 0x9}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x8, [0x8]}}]}, 0x158}}, 0x24000058) sendmsg(r5, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) socket$kcm(0x29, 0x7, 0x0) 13m33.028669866s ago: executing program 1 (id=4531): socket(0x10, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) capset(0xfffffffffffffffd, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r2, 0x1269, &(0x7f00000000c0)={0x1}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) 13m29.462931415s ago: executing program 1 (id=4536): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r3, 0x7}, 0x14}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfc40) setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000001ec0)="823a734c4f45e4d9720d9abbe9704398", 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x41) 13m28.497308585s ago: executing program 1 (id=4538): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4000) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv2(r5, &(0x7f0000005340), 0x0, 0x4, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x80000, 0x12b) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) 13m26.8340874s ago: executing program 1 (id=4541): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x401, 0xfffffe0800000001, 0xfa11, 0xf7ffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000053000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) 13m11.496514521s ago: executing program 32 (id=4541): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x401, 0xfffffe0800000001, 0xfa11, 0xf7ffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000053000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) 12.880254892s ago: executing program 3 (id=8617): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40840) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000719000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f000055d000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x24, 0x1c, 0x114236db3b607435, 0x70bd28, 0x25dfd3fe, {0x2, 0x0, 0x0, r1, 0x2, 0x80, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @empty=0x271}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044044}, 0x40080c0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50) io_uring_enter(r2, 0x4095, 0x7721, 0x16, 0x0, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) setpgid(r3, 0x0) 12.376947442s ago: executing program 3 (id=8620): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='mtd0\x00', &(0x7f0000000640)={0x200200, 0x101, 0x14}, 0x18) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) mount_setattr(r0, &(0x7f0000000680)='./file1\x00', 0x800, &(0x7f0000000700)={0x77, 0x7e, 0x1c0000, {r1}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000780), 0x80000, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x18, &(0x7f0000000000)=0xa, 0x4) sendmsg(r2, &(0x7f0000000040)={&(0x7f0000000180)=@phonet={0x23, 0x2, 0xfc, 0x1}, 0x80, &(0x7f0000000280)=[{&(0x7f00000002c0)="01f80281000600a30000", 0xa}, {0x0}], 0x2}, 0x4000000) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000800)='mtd0/file0\x00', 0x8) r3 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000540), 0x40400) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r5, @ANYBLOB="10080400895504002c001280110001006272696467655f736c61766500000000140005"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040010) connect$unix(r3, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a080, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000340)={0x5, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000380)={0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000600fc000000080011000700000008000e00800000000800", @ANYRES64=r11], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x7, &(0x7f0000000740)=[{0xc, 0x4, 0x3, 0x8}, {0x5, 0xf4, 0x5d, 0x785}, {0x0, 0x8, 0x5, 0x8}, {0x720, 0xae, 0x2, 0x2}, {0x0, 0x4, 0x1, 0xe}, {0x8, 0x9, 0x6, 0x81}, {0x5, 0x7, 0x0, 0x10001}]}) listns(&(0x7f0000000500)={0x20, 0x0, 0x9, 0x8000000, 0x0, 0x3}, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f00000003c0)={0x0, 0x0, 0x3, 0x0, 0x2, [0x0, 0x0, 0x0], [0x101, 0x9, 0x1, 0x100], [0x5, 0x582d, 0x80000000, 0x4], [0x8, 0xffffffff, 0x326, 0x2]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f0000000440)={r8, 0x8, 0xf, 0xa, 0x1, [r9, r10, 0x0, r13], [0x4, 0x9, 0x8, 0x4], [0x3, 0xa00000, 0x6cb, 0x7], [0x2daf, 0x1, 0xf290, 0x1]}) 11.862552781s ago: executing program 5 (id=8622): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x24, r8, 0x401, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004044}, 0x4800) 11.625406942s ago: executing program 3 (id=8624): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write(r0, 0x0, 0x0) 10.655129401s ago: executing program 5 (id=8626): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 9.878868473s ago: executing program 3 (id=8629): fcntl$lock(0xffffffffffffffff, 0x6, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) 8.71418263s ago: executing program 5 (id=8637): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x2) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) 7.441046221s ago: executing program 2 (id=8638): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000f401090102000000000000000808000640000000010900010094797a300000000008000340800000010400020000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20008051) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'ipvlan1\x00'}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000000300)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x7, 0x6}, {0x6, 0xfd, 0xee, 0x16}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000540)=0xfff) write$ppp(r0, &(0x7f00000001c0)="43f1", 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1fd93fd76d4934184bbec63c656291062a3d29cd3034d4ceaba77debecd9573575cd14ce0838f22abc3c4abd5ed67a90ed87b702e18760b6d86669edc113fc3d0fb30d76c29ca5d1ca9327b1b13f5c020d14d28ff3452cec6811f625cbbd4a55a1418c1fe5cbbd20b990c63ba007e69518e03b5ce67f73", 0x77}, {&(0x7f00000002c0)="3c205b072336bce6ff13a65e159454de32ebdcbc4731acffd34e211c584048de1c7bcbe3d078fc02a51e5db635eec4e205f69b90cace8bb4d2da8a78b8d943e7217619c89d28fca63b956fd6e231e732d6", 0x51}], 0x2}, 0x8841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x2000000000000000, 0x0, 0x4004840}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x29}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.71717729s ago: executing program 2 (id=8641): setrlimit(0xf, 0x0) syz_open_dev$usbfs(&(0x7f0000000280), 0x401, 0x8800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010800000000000001000500000005000100070000000900020073797a30000000000c00078008001240fffffffe050004000000000012000300686173683a6e65742c706f7274000000050005000a"], 0x58}, 0x1, 0x0, 0x0, 0x40280d5}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805ec4e"], 0x0) 6.372592379s ago: executing program 5 (id=8643): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @loopback, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvfrom(r0, &(0x7f0000001380)=""/179, 0xb3, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "e1ffe2030000000000000019064000", "1d382e23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, 0x0, 0x0, 0x12, 0x0, 0x0) writev(r0, &(0x7f0000001540), 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 4.735006584s ago: executing program 5 (id=8646): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000100)=0xfffe, 0x4) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x40, 0x5, 0x7, {0x7, 0x0, "0000000500"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.553555609s ago: executing program 0 (id=8647): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000100)={0x2, 'bridge_slave_1\x00', 0x2}, 0x18) readahead(r0, 0x8000000000000001, 0x4) 4.388089441s ago: executing program 0 (id=8648): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x24, r8, 0x401, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004044}, 0x4800) 4.363718581s ago: executing program 3 (id=8649): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffff69}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x40) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="09000000010000", 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, r6, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8000000001000001, 0x0, 0x1}}, 0x40) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x80802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r7, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r7, 0x0, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000"], 0x0}, 0x94) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r12 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r12, &(0x7f0000005400)=[{{&(0x7f0000001200)={0xa, 0x4e21, 0x7, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000012c0)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x135, 0x0, 0x2, 0x4}}}], 0x18}}], 0x1, 0x40810) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r13, r11, 0x25, 0x0, @val=@netkit={@void, @value=r13}}, 0x1c) syz_emit_ethernet(0xf87, &(0x7f0000000000)=ANY=[], 0x0) syz_emit_ethernet(0x206, &(0x7f0000000540)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x1d0, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @loopback, @empty, [@hopopts={0x0, 0x33, '\x00', [@ra, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @generic={0x1, 0x52, "08f1390b0c74cba47ed1dbe3290dbd16fe15f3802c8f12d8687cb72f6783172e63fafc0bc19fc7ea5e20fe65290cc5531784929dd4b5c8ff0df008542d00f6159b80595da8d72872864da820552af488c1ce"}]}]}}}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r10}, &(0x7f0000000100), &(0x7f0000000200)=r8}, 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x10, 0x2, 0x0) 3.215496823s ago: executing program 0 (id=8651): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000f401090102000000000000000808000640000000010900010094797a300000000008000340800000010400020000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20008051) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'ipvlan1\x00'}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000000300)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x7, 0x6}, {0x6, 0xfd, 0xee, 0x16}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000540)=0xfff) write$ppp(r0, &(0x7f00000001c0)="43f1", 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1fd93fd76d4934184bbec63c656291062a3d29cd3034d4ceaba77debecd9573575cd14ce0838f22abc3c4abd5ed67a90ed87b702e18760b6d86669edc113fc3d0fb30d76c29ca5d1ca9327b1b13f5c020d14d28ff3452cec6811f625cbbd4a55a1418c1fe5cbbd20b990c63ba007e69518e03b5ce67f73", 0x77}, {&(0x7f00000002c0)="3c205b072336bce6ff13a65e159454de32ebdcbc4731acffd34e211c584048de1c7bcbe3d078fc02a51e5db635eec4e205f69b90cace8bb4d2da8a78b8d943e7217619c89d28fca63b956fd6e231e732d6", 0x51}], 0x2}, 0x8841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x2000000000000000, 0x0, 0x4004840}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x29}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.089135435s ago: executing program 2 (id=8652): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write(r0, &(0x7f0000000180), 0x0) 2.925188265s ago: executing program 4 (id=8653): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'gretap0\x00', 0x0}) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000000200)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7ff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x3, 0x660, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0xc4}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6706, 0x4000, 0x0, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9fc4, 0x2000, 0x1, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x2, 0x1e8}}], 0x1, 0x0, 0x0) 2.702420556s ago: executing program 2 (id=8654): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000000340)={0x0, 0x74, 0x5c0000, 0x3, 0x4, 0x0, 0x6, 0x5}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1fd93fd76d4934184bbec63c656291062a3d29cd3034d4ceaba77debecd9573575cd14ce0838f22abc3c4abd5ed67a90ed87b702e18760b6d86669edc113fc3d0fb30d76c29ca5d1ca9327b1b13f5c020d14d28ff3452cec6811f625cbbd4a55a1418c1fe5cbbd20b990c63ba007e69518e03b5ce67f73", 0x77}, {&(0x7f00000002c0)="3c205b072336bce6ff13a65e159454de32ebdcbc4731acffd34e211c584048de1c7bcbe3d078fc02a51e5db635eec4e205f69b90cace8bb4d2da8a78b8d943e7217619c89d28fca63b956fd6e231e732d6", 0x51}], 0x2}, 0x8841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x2000000000000000, 0x0, 0x4004840}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x29}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.302598477s ago: executing program 0 (id=8655): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write(r0, &(0x7f0000000180)='transport=tcp,traddr=127.0.0.1,trsvci', 0x25) 2.266623653s ago: executing program 4 (id=8656): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000f401090102000000000000000808000640000000010900010094797a300000000008000340800000010400020000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20008051) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'ipvlan1\x00'}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000000300)={0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r2, 0xc028644b, &(0x7f0000000340)={r3, 0x74, 0x5c0000, 0x3, 0x4, 0x0, 0x6, 0x5}) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x7, 0x6}, {0x6, 0xfd, 0xee, 0x16}]}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1fd93fd76d4934184bbec63c656291062a3d29cd3034d4ceaba77debecd9573575cd14ce0838f22abc3c4abd5ed67a90ed87b702e18760b6d86669edc113fc3d0fb30d76c29ca5d1ca9327b1b13f5c020d14d28ff3452cec6811f625cbbd4a55a1418c1fe5cbbd20b990c63ba007e69518e03b5ce67f73", 0x77}, {&(0x7f00000002c0)="3c205b072336bce6ff13a65e159454de32ebdcbc4731acffd34e211c584048de1c7bcbe3d078fc02a51e5db635eec4e205f69b90cace8bb4d2da8a78b8d943e7217619c89d28fca63b956fd6e231e732d6", 0x51}], 0x2}, 0x8841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x2000000000000000, 0x0, 0x4004840}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.230941824s ago: executing program 2 (id=8657): socket$packet(0x11, 0x2, 0x300) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) 2.158816676s ago: executing program 0 (id=8658): r0 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write(r3, &(0x7f0000000180)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=nqn.201', 0x37) ioctl$TIOCCBRK(r2, 0x5428) 2.05343822s ago: executing program 3 (id=8659): fcntl$lock(0xffffffffffffffff, 0x6, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) 1.931667093s ago: executing program 2 (id=8660): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0xc0, 0x5, 0x3, "dfcfe3"}, &(0x7f00000004c0)}) 1.93018572s ago: executing program 4 (id=8661): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x24, r8, 0x401, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004044}, 0x4800) 1.914018258s ago: executing program 5 (id=8662): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000640)={{0x0, 0x2, 0xf, 0x8000000000000000, 0x1, 0x401, 0x1, 0x9, 0x5, 0x7ff, 0x9, 0x8, 0x6, 0x3, 0x8}, 0x8, [0x0]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4c840) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000405d86327c0001"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0}, 0xfc00) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1e) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000300)=0x36d) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = eventfd2(0x6, 0x80800) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000240)={r5, 0x7, 0x2}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x62, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) syz_usb_connect(0x3, 0x91, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d04210800010102030109027f0002010080fa09040000010e0100000d240100013f000000000001"], 0x0) 680.513554ms ago: executing program 4 (id=8663): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0x150, 0x65, 0x4, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x11c, 0x2, [@TCA_BPF_ACT={0x118, 0x1, [@m_ife={0x48, 0xe, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x4, 0x9, 0x7}}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0xcc, 0x0, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x4, 0x1, 0x19f, 0x1}, @empty, @private=0xa010101, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x1, 0x3}, @multicast1, @remote, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x4, 0x8, 0x0, 0xd}, @local, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6, 0x20000000, 0xffffffff, 0x10}, @local, @rand_addr=0x64010100, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x10, 0xc4}}]}, 0x150}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) sendto(r0, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 319.160779ms ago: executing program 4 (id=8664): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x10a000, 0x0) syz_open_procfs(0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, 0x0, 0x810) 19.973204ms ago: executing program 4 (id=8665): shutdown(0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mount$tmpfs(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '&\'@$:-*.-)(&2\xb7x06\xcf\x1a\x03\xb0#\t\xed\xcf\xbc\x1e\xa5\xccJ\x83\x86i\xfb\x01\xa45\x85\xfe\xd0$\xf9\xa6\tu\xdfG\x00i\xe0f2;\xb1\"\xedd\xb9\xa3\xe7T\xe2\x9d!e9\x97b8>\xbe\xff\xd0\x01.\xfe\xb9S\xe3T\xdb9\n\xcf_\xd9o}g:\xfds\xd0N$\xa2I\xe4\xec\'\xa7$*T\xecL\xcb\xf7t/R\xde\x1bc\x92\x9e\xcc/_\xb4\rWn#\xe3]\xa5K\x05\xbd\f|\xd2\x93\x9b\x95\x8d\xa8\xb2\x18\xfb\xe0\x8a'}}]}) keyctl$set_timeout(0xf, r0, 0x101fffffe) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000dc0)=0x0) sendmmsg$sock(r1, &(0x7f0000001280)=[{{&(0x7f00000008c0)=@isdn={0x22, 0x7, 0x4, 0x8}, 0x80, &(0x7f0000000c80)=[{&(0x7f00000009c0)="f77e7354137bd2f28bebe6a7269f35848470051f4a905b232f44fdb0849bfa4e08759f4b6d703c97daf0eb1caaa110828adf67fe6646cb17a8370bac90bfb914751d462c5265076a4ee30319bfc75e2c9be2efe73a", 0x55}, {&(0x7f0000000a40)="b6c075f5cfd91954d2425c9726fcc1a5a29efbe0627052e51c3d56c8acdfc08234c1ace458d8c3edcc07a557e8055c929367f425d2b62d029116985d8d9faa1a1a1f3d8a4a2ae51afbed6d5ecfb85a404308d387fcda4620242fe56412f873ceab948e76a49ca0f409be41dc44e3", 0x6e}, {&(0x7f0000000ac0)="82904f976fe102b5a5bde5242b6443e085b3adac5df43a5632440c272da6572621d686c9accb37fdf6ef78fed300bf88de328c20abea85efd3ae4c0c912f4aeb38d08896af1da0d88b1dce584a53a01ade3407ad3ac05993c37bfeb939a87cedd4424ef25427f837be820d16a9524f200ac99f7b7dec81c404e1e2d3ea18845b22681d16819dfea786181b2cc5dafe01b874b8859cd3a36f780520a81b37a7ba3bf1", 0xa2}, {&(0x7f0000000b80)="59bbba3250e2650b778cbd1abedad4920236faa8ea9e3ca584d6330121c37a06ec2b3369527bcd4fff6120c2bc02f88c7001b801614711cc953809300f2646706e5b10cca79482358e6ef4965604757116f3c09132c4d8a1fcde4faa665f2b564f5f0d36b5e5d370c7205a1e94871151dc9f07c9dd0c0fa6ec8cf8386e9be8ef2eed9adf61c20a5de936fe7e9b6572f9543dc996ff9f8081398a0e625c1d8d62722528617b49d46afe0e7d9227c70ba406f152acabbbebfc25e0b67f4e88493bb7741556998c598185a633b196b6a734734ea4235cf36c80a82895f85e7e984c", 0xe0}], 0x4, &(0x7f0000000cc0)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffffc}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}, @txtime={{0x18, 0x1, 0x3d, 0xe675}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x8001}}], 0xd8}}, {{&(0x7f0000000e00)=@nfc_llcp={0x27, r2, 0x0, 0x4, 0x2, 0x9, "0ce3a8e89c7d563a4bf97e26df005fc5409e6c63cd9144da310def77b974c85732301659dfa4982330a0fc8fbe38ee431b66b38e9eea2f035a874f43673e3e", 0x13}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000e80)="b9c6cd092ada083e317b649e2c3ed1069740b91a786daffb1198f44fe51e9dd901ba2d577be3693dc02c985da0900ee2bf37eca7bc961092cfe64f4005656a2dfbe53e750ea65963c0ba00d9abc70a386062736b7145949c5ac76c3f3107c8857f2983d19996792b4baf6c826115927f32852554b0209aea3376e99fd2441eef0cd61814b41b8f73518959802c3b2e06decafa856620b3679366a5f1c35d4647b2e66866da91f6447b3bfd8c184f765cc4332032c3e76194c36abbd4ba07badc61189d", 0xc3}, {&(0x7f0000000f80)="e9c991b7b4fef487ebb6b9c0591a7f73ee4ec8d808d1984bccc94b4b77fe51db1bb59584286f5732c1c009c5241a7685b82e5bedea90241c44513cf3ae400c6f17e8383641f3ca37bb5c092934291af6819cc06709d392c395d67c0956acdb09a073d3b294d39f9085fc0557098c64b1994f1030f3b8b8be2496f310138cae85741ca276", 0x84}, {&(0x7f0000001040)="3ed40515ea142b10ee081b6d1ea336d82a626fab5ab7b0350844331ddc00f74e9363e613e29ba8fafa11c2ffb5ad7bfff43d5a8bd78c16a7", 0x38}, {&(0x7f0000001080)="d5309bc9565293a639488d8c290ab41cccd30effb4ded2e5ae123e492a8a7ca7d3140ecd86bcbcc4e0fe902a30b9d01580b2b1da4e0feb4c65770bb5afdec28d2ac22221bea26655341c38f50e9c1c397a95f61bea", 0x55}, {&(0x7f0000001100)="8947efbb4bd9f0aca16a7b5a4e4082354530600414b2826c9a9d41557e96df73423de08663f01c5d0f31a739d648f8c01b93abbb23b558b4658e718ded495e9a5c69ef75c7865a4e2d05413be1823b4e4a446088dcf1637f186cd6c4739c1f4434", 0x61}, {&(0x7f0000001180)="f3173f383940344d4007028bd4326482424facdfc95c37da876e028dcbe3f43f06192c3a97", 0x25}], 0x6, &(0x7f0000001240)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x30}}], 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd4, 0x15, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x8e, 0x8, "6f6f0ff23c15e77d5aca5139c12f539186771266bddcf6af5e6b6822c72987f621b9255e141bd346ba7f285778ca857151be78281aadbd7a56a28a212beec5d4e765e710e31c3935428a140433cf68673a8989f36137e48f967208e447e629612d8801d6459d513c2e987912778cf91a89d5b658c724a8fc836feefaa8bb3c0add512494e39ebb20c5c3"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008883) setsockopt$inet_buf(r3, 0x0, 0x2a, &(0x7f0000000040)="4a751db8a5c943f41ac071b7a7350eaa248d09caf121eb6594b0538c1309b335927d69cb8ec2a2b3334aeff0fec52eb3ee971d228c279e91008d56a59bcd614b87604ae86850fcee6033b2475466e23d4f24166802ab2a901e1869cf8db10fefe9099297d5129accd0a72fc1b3f5effaec328db90e1e2f9e46a9655c6796ee1dc654b6c1e80359d2c2c973820a0eb247f02edf5fc04d67cbbd4c715cab984dbd289e8dbabcb64c8a009564d8f54f39213a0ff2b4b7cb5c", 0xb7) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'gretap0\x00', &(0x7f0000000540)={'gretap0\x00', 0x0, 0x40, 0x8000, 0x0, 0x4, {{0x21, 0x4, 0x1, 0x0, 0x84, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x24, 0x38, 0x3, 0x8, [{@broadcast, 0x1a}, {@rand_addr=0x64010102, 0x7}, {@broadcast, 0x6}, {@multicast2, 0x5}]}, @rr={0x7, 0x23, 0xfd, [@dev={0xac, 0x14, 0x14, 0xe}, @multicast2, @rand_addr=0x64010101, @remote, @broadcast, @local, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x19}]}, @end, @timestamp={0x44, 0xc, 0xfe, 0x0, 0x7, [0xfffffff8, 0x8001]}, @ssrr={0x89, 0x13, 0x37, [@dev={0xac, 0x14, 0x14, 0x44}, @multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x7, 0x19, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) recvfrom$packet(r4, &(0x7f00000003c0)=""/157, 0x9d, 0x40000000, &(0x7f0000000700)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @local}, 0x14) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0xc, &(0x7f0000000880)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb3b0000ce220000000004000000e3"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x90) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) 0s ago: executing program 0 (id=8666): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'gretap0\x00', 0x0}) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000000200)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7ff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x3, 0x660, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0xc4}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6706, 0x4000, 0x0, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9fc4, 0x2000, 0x1, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x2, 0x1e8}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): ] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1945.122978][T29157] RSP: 002b:00007f0764956028 EFLAGS: 00000246 ORIG_RAX: 000000000000007b [ 1945.122998][T29157] RAX: ffffffffffffffda RBX: 00007f0766985fa0 RCX: 00007f07666fe0d9 [ 1945.123015][T29157] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1945.123026][T29157] RBP: 00007f0764956090 R08: 0000000000000000 R09: 0000000000000000 [ 1945.123038][T29157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1945.123049][T29157] R13: 00007f0766986038 R14: 00007f0766985fa0 R15: 00007ffd91d065a8 [ 1945.123077][T29157] [ 1945.395966][T26489] usb 3-1: USB disconnect, device number 121 [ 1945.478130][T29159] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7958'. [ 1945.492396][T29159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1945.492824][T29159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1946.255102][T29165] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.7959'. [ 1946.621708][T26489] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1946.678564][T29176] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7964'. [ 1946.749092][T29179] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1946.749119][T29179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1946.784691][T26489] usb 3-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 1946.787958][T26489] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1946.787985][T26489] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1946.788037][T26489] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1946.831717][T14437] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1946.859944][T26489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1946.859973][T26489] usb 3-1: Product: syz [ 1946.859991][T26489] usb 3-1: Manufacturer: syz [ 1946.860009][T26489] usb 3-1: SerialNumber: syz [ 1946.905783][T26489] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 1946.905820][T26489] uvcvideo 3-1:1.0: No valid video chain found. [ 1947.021833][T14437] usb 4-1: Using ep0 maxpacket: 16 [ 1947.028780][T14437] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1947.046340][T14437] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1947.046381][T14437] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1947.053281][T14437] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1947.053310][T14437] usb 4-1: Product: syz [ 1947.053334][T14437] usb 4-1: Manufacturer: syz [ 1947.053352][T14437] usb 4-1: SerialNumber: syz [ 1947.103373][T14437] usb 4-1: config 0 descriptor?? [ 1947.186870][ T5781] usb 3-1: USB disconnect, device number 122 [ 1947.217115][T14437] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1947.217152][T14437] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1947.262688][T29184] input: syz1 as /devices/virtual/input/input82 [ 1947.421820][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 1947.866146][T14437] em28xx 4-1:0.0: unknown em28xx chip ID (240) [ 1948.064018][T14437] em28xx 4-1:0.0: Config register raw data: 0xaf [ 1948.064046][T14437] em28xx 4-1:0.0: I2S Audio (3 sample rate(s)) [ 1948.064063][T14437] em28xx 4-1:0.0: No AC97 audio processor [ 1948.099792][T29196] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7972'. [ 1948.297722][T14437] usb 4-1: USB disconnect, device number 80 [ 1948.727661][T29208] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1948.727701][T29208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1948.771226][T29210] input: syz1 as /devices/virtual/input/input83 [ 1949.827460][T29250] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1949.827499][T29250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1949.997549][T29255] hub 8-0:1.0: USB hub found [ 1950.000119][T29255] hub 8-0:1.0: 1 port detected [ 1950.776851][T29258] input: syz1 as /devices/virtual/input/input84 [ 1951.169667][T29268] FAULT_INJECTION: forcing a failure. [ 1951.169667][T29268] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1951.169716][T29268] CPU: 1 UID: 0 PID: 29268 Comm: syz.2.7997 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1951.169753][T29268] Tainted: [L]=SOFTLOCKUP [ 1951.169763][T29268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1951.169778][T29268] Call Trace: [ 1951.169789][T29268] [ 1951.169801][T29268] dump_stack_lvl+0xe8/0x150 [ 1951.169845][T29268] should_fail_ex+0x467/0x600 [ 1951.169891][T29268] prepare_alloc_pages+0x223/0x690 [ 1951.169931][T29268] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1951.169969][T29268] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1951.170006][T29268] ? __pfx_policy_nodemask+0x10/0x10 [ 1951.170040][T29268] ? __lock_acquire+0x683/0x2ce0 [ 1951.170070][T29268] alloc_pages_mpol+0xce/0x280 [ 1951.170104][T29268] alloc_pages_noprof+0xd2/0x2f0 [ 1951.170139][T29268] pte_alloc_one+0x22/0x380 [ 1951.170171][T29268] __do_fault+0xd1/0x2a0 [ 1951.170205][T29268] do_pte_missing+0x659/0x28f0 [ 1951.170250][T29268] ? unwind_next_frame+0x8f/0x2550 [ 1951.170292][T29268] handle_mm_fault+0xd28/0x13f0 [ 1951.170344][T29268] ? handle_mm_fault+0xe8/0x13f0 [ 1951.170388][T29268] ? __pfx_handle_mm_fault+0x10/0x10 [ 1951.170428][T29268] ? mtree_load+0x12a/0x780 [ 1951.170500][T29268] __get_user_pages+0x166b/0x2590 [ 1951.170578][T29268] faultin_page_range+0x26a/0x8f0 [ 1951.170621][T29268] ? blk_start_plug+0x6e/0x1b0 [ 1951.170658][T29268] madvise_do_behavior+0x2e4/0x540 [ 1951.170697][T29268] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1951.170725][T29268] ? down_read+0x156/0x200 [ 1951.170789][T29268] do_madvise+0x26f/0x330 [ 1951.170829][T29268] ? __pfx_do_madvise+0x10/0x10 [ 1951.170874][T29268] ? __pfx_ksys_write+0x10/0x10 [ 1951.170903][T29268] ? fput+0xa0/0xd0 [ 1951.170948][T29268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1951.170978][T29268] __x64_sys_madvise+0xa6/0xc0 [ 1951.171011][T29268] do_syscall_64+0x174/0x580 [ 1951.171049][T29268] ? trace_irq_disable+0x3b/0x140 [ 1951.171090][T29268] ? clear_bhb_loop+0x70/0xc0 [ 1951.171123][T29268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1951.171151][T29268] RIP: 0033:0x7f232e1ce0d9 [ 1951.171176][T29268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1951.171198][T29268] RSP: 002b:00007f232c426028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1951.171236][T29268] RAX: ffffffffffffffda RBX: 00007f232e455fa0 RCX: 00007f232e1ce0d9 [ 1951.171255][T29268] RDX: 0000000000000017 RSI: 0000000000c00000 RDI: 0000200000000000 [ 1951.171272][T29268] RBP: 00007f232c426090 R08: 0000000000000000 R09: 0000000000000000 [ 1951.171289][T29268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1951.171305][T29268] R13: 00007f232e456038 R14: 00007f232e455fa0 R15: 00007ffdb69cd7c8 [ 1951.171346][T29268] [ 1951.661642][T29277] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8001'. [ 1951.927426][T29282] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.8003'. [ 1951.952271][T29286] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1951.952310][T29286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1952.275498][T29291] netlink: 116 bytes leftover after parsing attributes in process `syz.5.8005'. [ 1952.316305][T29291] hub 8-0:1.0: USB hub found [ 1952.340185][T29291] hub 8-0:1.0: 1 port detected [ 1953.251822][T29293] input: syz1 as /devices/virtual/input/input85 [ 1953.269517][T26489] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1953.412708][T26489] usb 4-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 1953.414486][T26489] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1953.414513][T26489] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1953.414566][T26489] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1953.486860][T26489] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1953.486888][T26489] usb 4-1: Product: syz [ 1953.486903][T26489] usb 4-1: Manufacturer: syz [ 1953.486919][T26489] usb 4-1: SerialNumber: syz [ 1953.558085][T29295] netlink: 16054 bytes leftover after parsing attributes in process `syz.5.8007'. [ 1953.564290][T26489] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 1953.564378][T26489] uvcvideo 4-1:1.0: No valid video chain found. [ 1953.759418][T14437] usb 4-1: USB disconnect, device number 81 [ 1953.919963][T29304] input: syz1 as /devices/virtual/input/input86 [ 1953.956958][T26489] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1954.174943][T26489] usb 6-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 1954.176576][T26489] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1954.176603][T26489] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1954.176656][T26489] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1954.179802][T26489] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1954.179829][T26489] usb 6-1: Product: syz [ 1954.179845][T26489] usb 6-1: Manufacturer: syz [ 1954.179862][T26489] usb 6-1: SerialNumber: syz [ 1954.213672][T26489] uvcvideo 6-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 1954.213705][T26489] uvcvideo 6-1:1.0: No valid video chain found. [ 1954.461397][ T31] usb 6-1: USB disconnect, device number 40 [ 1954.530817][T29314] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1954.530861][T29314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1954.723271][T29320] netlink: 116 bytes leftover after parsing attributes in process `syz.2.8017'. [ 1954.891775][T26489] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1955.041800][T26489] usb 4-1: Using ep0 maxpacket: 16 [ 1955.042740][T26489] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1955.044657][T26489] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1955.044692][T26489] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1955.089168][T26489] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.089197][T26489] usb 4-1: Product: syz [ 1955.089214][T26489] usb 4-1: Manufacturer: syz [ 1955.089230][T26489] usb 4-1: SerialNumber: syz [ 1955.145255][T26489] usb 4-1: config 0 descriptor?? [ 1955.174263][T26489] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1955.174306][T26489] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1955.369433][T29322] netlink: 16054 bytes leftover after parsing attributes in process `syz.4.8018'. [ 1955.408234][T29326] input: syz1 as /devices/virtual/input/input87 [ 1955.576448][T29331] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8022'. [ 1955.663874][T29333] tmpfs: Unknown parameter 'grpquota_block_hardli`it' [ 1955.765523][T26489] em28xx 4-1:0.0: unknown em28xx chip ID (240) [ 1955.806306][T29337] syz_tun: entered allmulticast mode [ 1955.818920][T29336] syz_tun: left allmulticast mode [ 1955.967675][T26489] em28xx 4-1:0.0: Config register raw data: 0xaf [ 1955.967702][T26489] em28xx 4-1:0.0: I2S Audio (3 sample rate(s)) [ 1955.967721][T26489] em28xx 4-1:0.0: No AC97 audio processor [ 1956.362336][ T31] usb 6-1: new low-speed USB device number 41 using dummy_hcd [ 1956.837247][ T31] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.03 [ 1957.302327][T26489] usb 4-1: USB disconnect, device number 82 [ 1957.326740][ T31] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1957.326783][ T31] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1957.326870][ T31] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1957.326902][ T31] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0x47, changing to 0x7 [ 1957.326931][ T31] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x7 is Bulk; changing to Interrupt [ 1957.326955][ T31] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1957.326980][ T31] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1957.327010][ T31] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1957.328452][ T31] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1957.328491][ T31] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1957.328546][ T31] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1957.328576][ T31] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0x47, changing to 0x7 [ 1957.328605][ T31] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x7 is Bulk; changing to Interrupt [ 1957.328630][ T31] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1957.328662][ T31] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1957.328692][ T31] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1957.355674][ T31] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1957.355815][ T31] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1957.355927][ T31] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1957.355967][ T31] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0x47, changing to 0x7 [ 1957.356042][ T31] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x7 is Bulk; changing to Interrupt [ 1957.356106][ T31] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1957.356170][ T31] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1957.356253][ T31] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1957.426844][ T31] usb 6-1: string descriptor 0 read error: -22 [ 1957.427254][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1957.672677][ T31] adutux 6-1:168.0: interrupt endpoints not found [ 1958.065049][T29357] hub 8-0:1.0: USB hub found [ 1958.067983][T29357] hub 8-0:1.0: 1 port detected [ 1959.064221][T21101] usb 6-1: USB disconnect, device number 41 [ 1959.100156][T29359] input: syz1 as /devices/virtual/input/input88 [ 1959.143746][T29360] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8033'. [ 1960.710860][T29379] tipc: Failed to obtain node identity [ 1960.710892][T29379] tipc: Enabling of bearer rejected, failed to enable media [ 1960.841717][T29385] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8042'. [ 1961.147397][T29396] kvm: kvm [29395]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x8019b [ 1961.172724][T29401] FAULT_INJECTION: forcing a failure. [ 1961.172724][T29401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1961.172763][T29401] CPU: 0 UID: 0 PID: 29401 Comm: syz.2.8047 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1961.172794][T29401] Tainted: [L]=SOFTLOCKUP [ 1961.172802][T29401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1961.172817][T29401] Call Trace: [ 1961.172826][T29401] [ 1961.172836][T29401] dump_stack_lvl+0xe8/0x150 [ 1961.172874][T29401] should_fail_ex+0x467/0x600 [ 1961.172913][T29401] _copy_from_user+0x2d/0xb0 [ 1961.172942][T29401] ___sys_recvmsg+0x173/0x5a0 [ 1961.172996][T29401] ? __pfx____sys_recvmsg+0x10/0x10 [ 1961.173031][T29401] ? __fget_files+0x2a/0x420 [ 1961.173072][T29401] ? __fget_files+0x3a8/0x420 [ 1961.173106][T29401] __x64_sys_recvmsg+0x1b4/0x290 [ 1961.173139][T29401] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1961.173187][T29401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1961.173212][T29401] do_syscall_64+0x174/0x580 [ 1961.173245][T29401] ? trace_irq_disable+0x3b/0x140 [ 1961.173281][T29401] ? clear_bhb_loop+0x70/0xc0 [ 1961.173309][T29401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1961.173366][T29401] RIP: 0033:0x7f232e1ce0d9 [ 1961.173387][T29401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1961.173415][T29401] RSP: 002b:00007f232c426028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1961.173439][T29401] RAX: ffffffffffffffda RBX: 00007f232e455fa0 RCX: 00007f232e1ce0d9 [ 1961.173456][T29401] RDX: 0000000000000041 RSI: 0000200000000b00 RDI: 0000000000000003 [ 1961.173470][T29401] RBP: 00007f232c426090 R08: 0000000000000000 R09: 0000000000000000 [ 1961.173484][T29401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1961.173497][T29401] R13: 00007f232e456038 R14: 00007f232e455fa0 R15: 00007ffdb69cd7c8 [ 1961.173531][T29401] [ 1961.423997][T29403] input: syz1 as /devices/virtual/input/input89 [ 1961.498457][T29411] hub 8-0:1.0: USB hub found [ 1961.498868][T29411] hub 8-0:1.0: 1 port detected [ 1961.519604][T29410] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8051'. [ 1961.814155][T29413] tipc: Failed to obtain node identity [ 1961.814188][T29413] tipc: Enabling of bearer rejected, failed to enable media [ 1963.452444][T29442] input: syz1 as /devices/virtual/input/input90 [ 1963.931261][T19939] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1965.104116][T19939] usb 6-1: Using ep0 maxpacket: 8 [ 1965.152551][T19939] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1965.152613][T19939] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 1965.157709][T19939] usb 6-1: config 100 has an invalid interface number: 173 but max is 0 [ 1965.157738][T19939] usb 6-1: config 100 has an invalid descriptor of length 0, skipping remainder of the config [ 1965.157760][T19939] usb 6-1: config 100 has no interface number 0 [ 1965.157807][T19939] usb 6-1: config 100 interface 173 altsetting 142 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1965.157838][T19939] usb 6-1: config 100 interface 173 has no altsetting 0 [ 1965.161757][T19939] usb 6-1: string descriptor 0 read error: -22 [ 1965.162237][T19939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.256737][T29459] FAULT_INJECTION: forcing a failure. [ 1965.256737][T29459] name failslab, interval 1, probability 0, space 0, times 0 [ 1965.256778][T29459] CPU: 1 UID: 0 PID: 29459 Comm: syz.0.8068 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1965.256810][T29459] Tainted: [L]=SOFTLOCKUP [ 1965.256819][T29459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1965.256833][T29459] Call Trace: [ 1965.256843][T29459] [ 1965.256853][T29459] dump_stack_lvl+0xe8/0x150 [ 1965.256893][T29459] should_fail_ex+0x467/0x600 [ 1965.256934][T29459] should_failslab+0xa8/0x100 [ 1965.256962][T29459] __kmalloc_noprof+0xfe/0x780 [ 1965.256984][T29459] ? rcu_is_watching+0x15/0xb0 [ 1965.257012][T29459] ? tomoyo_realpath_from_path+0xef/0x640 [ 1965.257040][T29459] ? tomoyo_realpath_from_path+0xef/0x640 [ 1965.257077][T29459] tomoyo_realpath_from_path+0xef/0x640 [ 1965.257116][T29459] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1965.257154][T29459] tomoyo_path_number_perm+0x246/0x5f0 [ 1965.257195][T29459] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1965.257232][T29459] ? __lock_acquire+0x683/0x2ce0 [ 1965.257271][T29459] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1965.257304][T29459] ? hook_file_ioctl+0x1f3/0x600 [ 1965.257337][T29459] ? lockdep_hardirqs_on+0x7a/0x110 [ 1965.257398][T29459] ? __fget_files+0x2a/0x420 [ 1965.257425][T29459] ? __fget_files+0x2a/0x420 [ 1965.257446][T29459] ? __fget_files+0x3a8/0x420 [ 1965.257467][T29459] ? __fget_files+0x2a/0x420 [ 1965.257494][T29459] security_file_ioctl+0xc3/0x2a0 [ 1965.257521][T29459] __se_sys_ioctl+0x47/0x170 [ 1965.257551][T29459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1965.257581][T29459] do_syscall_64+0x174/0x580 [ 1965.257614][T29459] ? trace_irq_disable+0x3b/0x140 [ 1965.257650][T29459] ? clear_bhb_loop+0x70/0xc0 [ 1965.257679][T29459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1965.257702][T29459] RIP: 0033:0x7fe4ea92e0d9 [ 1965.257724][T29459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1965.257743][T29459] RSP: 002b:00007fe4e8b86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1965.257766][T29459] RAX: ffffffffffffffda RBX: 00007fe4eabb5fa0 RCX: 00007fe4ea92e0d9 [ 1965.257784][T29459] RDX: 00002000000003c0 RSI: 000000004008af30 RDI: 0000000000000005 [ 1965.257800][T29459] RBP: 00007fe4e8b86090 R08: 0000000000000000 R09: 0000000000000000 [ 1965.257814][T29459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1965.257828][T29459] R13: 00007fe4eabb6038 R14: 00007fe4eabb5fa0 R15: 00007ffd6ab969f8 [ 1965.257864][T29459] [ 1965.259485][T29459] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1965.260701][T19939] metro_usb 6-1:100.173: required endpoints missing [ 1965.549279][ T31] usb 6-1: USB disconnect, device number 42 [ 1965.668547][T29465] kvm: kvm [29464]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x8019b [ 1965.897785][T29476] input: syz1 as /devices/virtual/input/input91 [ 1966.135504][T29481] IPVS: sync thread started: state = BACKUP, mcast_ifn = vxcan1, syncid = 0, id = 0 [ 1966.520387][T29490] netlink: 116 bytes leftover after parsing attributes in process `syz.3.8080'. [ 1966.720065][ T31] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1966.913918][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 1967.045771][ T31] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1967.116805][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1967.345471][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.345502][ T31] usb 6-1: Product: syz [ 1967.345519][ T31] usb 6-1: Manufacturer: syz [ 1967.345535][ T31] usb 6-1: SerialNumber: syz [ 1967.351195][ T31] usb 6-1: config 0 descriptor?? [ 1967.381835][ T31] gs_usb 6-1:0.0: Required endpoints not found [ 1967.554231][T29498] FAULT_INJECTION: forcing a failure. [ 1967.554231][T29498] name failslab, interval 1, probability 0, space 0, times 0 [ 1967.554282][T29498] CPU: 0 UID: 0 PID: 29498 Comm: syz.2.8083 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1967.554314][T29498] Tainted: [L]=SOFTLOCKUP [ 1967.554323][T29498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1967.554338][T29498] Call Trace: [ 1967.554348][T29498] [ 1967.554358][T29498] dump_stack_lvl+0xe8/0x150 [ 1967.554398][T29498] should_fail_ex+0x467/0x600 [ 1967.554437][T29498] should_failslab+0xa8/0x100 [ 1967.554466][T29498] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1967.554507][T29498] ? __alloc_skb+0x1d7/0x7a0 [ 1967.554530][T29498] ? __alloc_skb+0x1d7/0x7a0 [ 1967.554560][T29498] __alloc_skb+0x1d7/0x7a0 [ 1967.554589][T29498] alloc_skb_with_frags+0xc6/0x760 [ 1967.554710][T29498] sock_alloc_send_pskb+0x884/0x9a0 [ 1967.554763][T29498] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1967.554797][T29498] ? smack_socket_sendmsg+0x1a9/0x590 [ 1967.554857][T29498] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1967.554892][T29498] hci_sock_sendmsg+0x208/0xf50 [ 1967.554981][T29498] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1967.555014][T29498] ? get_pid_task+0x20/0x1f0 [ 1967.555050][T29498] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1967.555075][T29498] sock_sendmsg_nosec+0x13a/0x180 [ 1967.555114][T29498] sock_write_iter+0x2e4/0x3f0 [ 1967.555149][T29498] ? __pfx_sock_write_iter+0x10/0x10 [ 1967.555190][T29498] ? bpf_lsm_file_permission+0x9/0x20 [ 1967.555224][T29498] ? security_file_permission+0x75/0x260 [ 1967.555257][T29498] vfs_write+0x61e/0xbb0 [ 1967.555303][T29498] ? __pfx_vfs_write+0x10/0x10 [ 1967.555343][T29498] ? __fget_files+0x2a/0x420 [ 1967.555376][T29498] ksys_write+0x156/0x270 [ 1967.555406][T29498] ? __pfx_ksys_write+0x10/0x10 [ 1967.555440][T29498] ? __secure_computing+0xe7/0x2b0 [ 1967.555468][T29498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1967.555494][T29498] do_syscall_64+0x174/0x580 [ 1967.555527][T29498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1967.555552][T29498] ? clear_bhb_loop+0x70/0xc0 [ 1967.555581][T29498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1967.555606][T29498] RIP: 0033:0x7f232e1ce0d9 [ 1967.555627][T29498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1967.555647][T29498] RSP: 002b:00007f232c426028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1967.555672][T29498] RAX: ffffffffffffffda RBX: 00007f232e455fa0 RCX: 00007f232e1ce0d9 [ 1967.555689][T29498] RDX: 0000000000000007 RSI: 0000200000000340 RDI: 0000000000000005 [ 1967.555703][T29498] RBP: 00007f232c426090 R08: 0000000000000000 R09: 0000000000000000 [ 1967.555718][T29498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1967.555732][T29498] R13: 00007f232e456038 R14: 00007f232e455fa0 R15: 00007ffdb69cd7c8 [ 1967.555767][T29498] [ 1967.594541][T29499] netlink: 116 bytes leftover after parsing attributes in process `syz.4.8082'. [ 1967.905103][T19939] usb 6-1: USB disconnect, device number 43 [ 1968.401376][T29503] netlink: ct family unspecified [ 1968.401399][T29503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1968.451142][T29508] input: syz1 as /devices/virtual/input/input92 [ 1968.484093][T29509] netlink: 116 bytes leftover after parsing attributes in process `syz.2.8086'. [ 1968.497489][T29509] hub 8-0:1.0: USB hub found [ 1968.499196][T29509] hub 8-0:1.0: 1 port detected [ 1968.746271][T29517] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8091'. [ 1968.840976][T21101] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1968.930311][T29521] netlink: 116 bytes leftover after parsing attributes in process `syz.4.8092'. [ 1968.935505][T29521] hub 8-0:1.0: USB hub found [ 1968.945210][T29521] hub 8-0:1.0: 1 port detected [ 1969.031712][T21101] usb 4-1: Using ep0 maxpacket: 8 [ 1969.038282][T21101] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1969.038342][T21101] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 1969.040974][T21101] usb 4-1: config 100 has an invalid interface number: 173 but max is 0 [ 1969.041003][T21101] usb 4-1: config 100 has an invalid descriptor of length 0, skipping remainder of the config [ 1969.041025][T21101] usb 4-1: config 100 has no interface number 0 [ 1969.041074][T21101] usb 4-1: config 100 interface 173 altsetting 142 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1969.041106][T21101] usb 4-1: config 100 interface 173 has no altsetting 0 [ 1969.146217][T21101] usb 4-1: string descriptor 0 read error: -22 [ 1969.146382][T21101] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.294026][T21101] metro_usb 4-1:100.173: required endpoints missing [ 1970.526192][T26489] usb 4-1: USB disconnect, device number 83 [ 1970.606120][T29534] netlink: 116 bytes leftover after parsing attributes in process `syz.0.8097'. [ 1970.752923][T29540] netlink: ct family unspecified [ 1970.752988][T29540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1970.784672][T29541] input: syz1 as /devices/virtual/input/input93 [ 1971.128106][T29548] netlink: 'syz.0.8102': attribute type 3 has an invalid length. [ 1972.840331][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1972.889571][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1972.919090][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1972.922195][T19939] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1972.940558][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1972.941512][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1973.013041][T29568] netlink: 116 bytes leftover after parsing attributes in process `syz.0.8109'. [ 1973.131926][T19939] usb 4-1: Using ep0 maxpacket: 32 [ 1973.138716][T19939] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1973.164522][T19939] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1973.167661][T19939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.167689][T19939] usb 4-1: Product: syz [ 1973.167704][T19939] usb 4-1: Manufacturer: syz [ 1973.167720][T19939] usb 4-1: SerialNumber: syz [ 1973.176130][T19939] usb 4-1: config 0 descriptor?? [ 1973.185610][T19939] gs_usb 4-1:0.0: Required endpoints not found [ 1973.360870][T29576] input: syz1 as /devices/virtual/input/input94 [ 1973.395950][T19939] usb 4-1: USB disconnect, device number 84 [ 1973.408215][T29572] netlink: ct family unspecified [ 1973.408238][T29572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1973.871794][T14437] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1974.021693][T14437] usb 5-1: Using ep0 maxpacket: 8 [ 1974.025224][T14437] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1974.025279][T14437] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 1974.027087][T14437] usb 5-1: config 100 has an invalid interface number: 173 but max is 0 [ 1974.027114][T14437] usb 5-1: config 100 has an invalid descriptor of length 0, skipping remainder of the config [ 1974.027324][T14437] usb 5-1: config 100 has no interface number 0 [ 1974.027377][T14437] usb 5-1: config 100 interface 173 altsetting 142 bulk endpoint 0xE has invalid maxpacket 64 [ 1974.027405][T14437] usb 5-1: config 100 interface 173 altsetting 142 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1974.027435][T14437] usb 5-1: config 100 interface 173 has no altsetting 0 [ 1974.128745][T14437] usb 5-1: string descriptor 0 read error: -22 [ 1974.128918][T14437] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1974.195497][T29582] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1974.199014][T14437] metro_usb 5-1:100.173: required endpoints missing [ 1974.402379][ T31] usb 5-1: USB disconnect, device number 89 [ 1975.694690][T25055] Bluetooth: hci3: command tx timeout [ 1976.336158][T29615] netlink: ct family unspecified [ 1976.336189][T29615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1976.358188][T29618] input: syz1 as /devices/virtual/input/input95 [ 1976.592511][T29622] netlink: 116 bytes leftover after parsing attributes in process `syz.4.8126'. [ 1976.625385][T29622] hub 8-0:1.0: USB hub found [ 1976.639418][T29622] hub 8-0:1.0: 1 port detected [ 1976.849904][T29630] netlink: 116 bytes leftover after parsing attributes in process `syz.2.8128'. [ 1977.071314][T19939] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1977.172114][T15813] bridge_slave_1: left allmulticast mode [ 1977.172154][T15813] bridge_slave_1: left promiscuous mode [ 1977.172439][T15813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1977.231687][T19939] usb 5-1: Using ep0 maxpacket: 8 [ 1977.234529][T19939] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1977.234589][T19939] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 1977.236111][T19939] usb 5-1: config 100 has an invalid interface number: 173 but max is 0 [ 1977.236140][T19939] usb 5-1: config 100 has an invalid descriptor of length 0, skipping remainder of the config [ 1977.236163][T19939] usb 5-1: config 100 has no interface number 0 [ 1977.236214][T19939] usb 5-1: config 100 interface 173 altsetting 142 bulk endpoint 0xE has invalid maxpacket 64 [ 1977.236242][T19939] usb 5-1: config 100 interface 173 altsetting 142 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1977.236272][T19939] usb 5-1: config 100 interface 173 has no altsetting 0 [ 1977.249498][T19939] usb 5-1: string descriptor 0 read error: -22 [ 1977.249873][T19939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.281783][ T9] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1977.326070][T29626] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1977.404289][T19939] metro_usb 5-1:100.173: required endpoints missing [ 1977.436286][T15813] bridge_slave_0: left allmulticast mode [ 1977.436313][T15813] bridge_slave_0: left promiscuous mode [ 1977.441702][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1977.442117][T15813] bridge0: port 1(bridge_slave_0) entered disabled state [ 1977.470877][ T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1977.483313][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1977.490321][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.490351][ T9] usb 4-1: Product: syz [ 1977.490368][ T9] usb 4-1: Manufacturer: syz [ 1977.490384][ T9] usb 4-1: SerialNumber: syz [ 1977.541973][ T9] usb 4-1: config 0 descriptor?? [ 1977.564940][ T9] gs_usb 4-1:0.0: Required endpoints not found [ 1977.620756][T19939] usb 5-1: USB disconnect, device number 90 [ 1977.751853][T25055] Bluetooth: hci3: command tx timeout [ 1978.851462][T29663] input: syz1 as /devices/virtual/input/input96 [ 1979.076423][T15813] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 1979.497640][T15813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1979.585321][T15813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1979.596966][T29674] hub 8-0:1.0: USB hub found [ 1979.624851][T29674] hub 8-0:1.0: 1 port detected [ 1979.669904][T15813] bond0 (unregistering): Released all slaves [ 1979.682939][T15813] bond1 (unregistering): Released all slaves [ 1979.704231][T15813] bond2 (unregistering): Released all slaves [ 1979.776200][T29658] netlink: 116 bytes leftover after parsing attributes in process `syz.0.8135'. [ 1979.829964][T25055] Bluetooth: hci3: command tx timeout [ 1979.934596][ T5243] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1979.936617][T29675] IPVS: sync thread started: state = BACKUP, mcast_ifn = vxcan1, syncid = 0, id = 0 [ 1980.167714][T18759] usb 4-1: USB disconnect, device number 85 [ 1980.206240][T15813] : left promiscuous mode [ 1980.269573][T29680] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8143'. [ 1981.680178][T15813] IPVS: stopping master sync thread 21738 ... [ 1981.906083][T25055] Bluetooth: hci3: command tx timeout [ 1981.988912][T29700] input: syz1 as /devices/virtual/input/input97 [ 1982.129451][T29706] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8148'. [ 1982.641743][T14437] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1982.792285][T14437] usb 3-1: Using ep0 maxpacket: 8 [ 1982.794656][T14437] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1982.794746][T14437] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 1982.796513][T14437] usb 3-1: config 100 has an invalid interface number: 173 but max is 0 [ 1982.796540][T14437] usb 3-1: config 100 has no interface number 0 [ 1982.796604][T14437] usb 3-1: config 100 interface 173 altsetting 142 bulk endpoint 0xE has invalid maxpacket 64 [ 1982.796632][T14437] usb 3-1: config 100 interface 173 altsetting 142 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1982.796662][T14437] usb 3-1: config 100 interface 173 has no altsetting 0 [ 1982.884866][T14437] usb 3-1: string descriptor 0 read error: -22 [ 1982.885037][T14437] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1982.911228][T29718] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1982.933021][T14437] metro_usb 3-1:100.173: required endpoints missing [ 1983.136252][ T5781] usb 3-1: USB disconnect, device number 123 [ 1983.412187][ T5243] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1983.792243][T29747] hub 8-0:1.0: USB hub found [ 1983.792668][T29747] hub 8-0:1.0: 1 port detected [ 1984.095372][T29564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1984.095511][T29564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1984.095780][T29564] bridge_slave_0: entered allmulticast mode [ 1984.104433][T29564] bridge_slave_0: entered promiscuous mode [ 1984.135069][T29564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1984.135249][T29564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1984.135528][T29564] bridge_slave_1: entered allmulticast mode [ 1984.139153][T29564] bridge_slave_1: entered promiscuous mode [ 1984.426321][T29758] input: syz1 as /devices/virtual/input/input98 [ 1984.489942][T29564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1984.581756][T15813] hsr_slave_0: left promiscuous mode [ 1984.623661][T15813] hsr_slave_1: left promiscuous mode [ 1984.624735][T15813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1984.624764][T15813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1984.674679][T15813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1984.674709][T15813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1984.793099][T15813] veth1_vlan: left promiscuous mode [ 1984.833084][T15813] veth0_vlan: left promiscuous mode [ 1984.834303][ T37] audit: type=1326 audit(1786377422.583:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29766 comm="syz.2.8163" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f232e1ce0d9 code=0x0 [ 1985.964806][T15813] team0 (unregistering): Port device team_slave_1 removed [ 1986.046204][T15813] team0 (unregistering): Port device team_slave_0 removed [ 1986.464531][T29564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1986.657276][T29564] team0: Port device team_slave_0 added [ 1986.681295][T29564] team0: Port device team_slave_1 added [ 1986.789784][T29778] netlink: ct family unspecified [ 1986.789820][T29778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1987.091662][T29564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1987.091678][T29564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1987.091701][T29564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1987.216168][T29564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1987.216189][T29564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1987.216221][T29564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1987.358622][T29564] hsr_slave_0: entered promiscuous mode [ 1987.375962][T29564] hsr_slave_1: entered promiscuous mode [ 1987.376807][T29564] debugfs: 'hsr0' already exists in 'hsr' [ 1987.376829][T29564] Cannot create hsr debugfs directory [ 1988.066342][T29793] input: syz1 as /devices/virtual/input/input99 [ 1988.517735][T29804] input: syz1 as /devices/virtual/input/input100 [ 1988.669525][ T37] audit: type=1326 audit(1786377426.413:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29806 comm="syz.0.8174" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4ea92e0d9 code=0x0 [ 1990.293269][ T5243] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1990.681714][T14437] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1990.853132][T14437] usb 3-1: device descriptor read/64, error -71 [ 1991.137749][T14437] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1991.271711][T14437] usb 3-1: device descriptor read/64, error -71 [ 1991.358641][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1991.358718][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1991.390453][T14437] usb usb3-port1: attempt power cycle [ 1991.771670][T14437] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1991.802583][T14437] usb 3-1: device descriptor read/8, error -71 [ 1992.104275][T14437] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1992.125230][T14437] usb 3-1: device descriptor read/8, error -71 [ 1992.127944][T15813] IPVS: stop unused estimator thread 0... [ 1992.232239][T14437] usb usb3-port1: unable to enumerate USB device [ 1992.348907][T29865] input: syz1 as /devices/virtual/input/input101 [ 1992.965785][T29879] kvm: kvm [29878]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x8019b [ 1993.424117][T25055] Bluetooth: hci5: command 0x0406 tx timeout [ 1994.110331][T29914] input: syz1 as /devices/virtual/input/input102 [ 1995.501856][T14437] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 1995.669291][T14437] usb 3-1: not running at top speed; connect to a high speed hub [ 1995.669334][T14437] usb 3-1: New USB device found, idVendor=12d1, idProduct=4b3b, bcdDevice=e7.d6 [ 1995.670835][T14437] usb 3-1: config 6 has an invalid interface number: 11 but max is 0 [ 1995.670865][T14437] usb 3-1: config 6 has an invalid interface number: 205 but max is 0 [ 1995.670886][T14437] usb 3-1: config 6 has 2 interfaces, different from the descriptor's value: 1 [ 1995.670908][T14437] usb 3-1: config 6 has no interface number 0 [ 1995.671017][T14437] usb 3-1: config 6 has no interface number 1 [ 1995.671081][T14437] usb 3-1: config 6 interface 11 altsetting 8 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1995.671129][T14437] usb 3-1: config 6 interface 11 altsetting 8 has an endpoint descriptor with address 0x76, changing to 0x6 [ 1995.671158][T14437] usb 3-1: config 6 interface 11 altsetting 8 endpoint 0x6 has invalid maxpacket 59513, setting to 64 [ 1995.671187][T14437] usb 3-1: config 6 interface 11 altsetting 8 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1995.671226][T14437] usb 3-1: too many endpoints for config 6 interface 205 altsetting 46: 113, using maximum allowed: 30 [ 1995.671287][T14437] usb 3-1: config 6 interface 205 altsetting 46 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1995.671316][T14437] usb 3-1: config 6 interface 205 altsetting 46 has 1 endpoint descriptor, different from the interface descriptor's value: 113 [ 1995.671346][T14437] usb 3-1: config 6 interface 11 has no altsetting 0 [ 1995.671366][T14437] usb 3-1: config 6 interface 205 has no altsetting 0 [ 1995.769093][T14437] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1995.769169][T14437] usb 3-1: Product: 梅⟸衆甁ꥸ⯒॔䄠贈넃쫬㏵ᢟ䄻ᳪ萯둮뛙䗏럵안띸顙沰ꊬ荽ꅗ橀㛩緺ऩꊡ罤台颱鐜3쉗⸆ⁿ넿ᗉ뾵᪖㐅쟼劘驹鎉拕샄路✳쳿帒ﵑⓖ剋嘢頗裚㯗규૥㵃࠵楂ᎆ舄췌괼㛇읲钁Ꟑ켃搡亽꾕퍩䞇㧔᪾돐㨢믈쵮䡃備鑌퀠⍫ঽ⟤珐뻗௯㿍꫶ﲭ鐙忤Ɥ뙎 [ 1995.769274][T14437] usb 3-1: Manufacturer:   [ 1995.769324][T14437] usb 3-1: SerialNumber: 瞡檢ᙵꟋ䍰갴蛹遰ꍹт現ଽ褠韊璪돟譵䨟鞉ୁ秫ܷ먍왤쾊愎䮑楛耠ඩ̻ိ磻淎ꏾ쟼⢦ꦩ쪲蹣䠟閂 [ 1995.882140][T29918] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1995.882258][T29918] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1996.136872][T14437] option 3-1:6.11: GSM modem (1-port) converter detected [ 1996.254403][T14437] usb 3-1: USB disconnect, device number 2 [ 1996.339794][T14437] option 3-1:6.11: device disconnected [ 1996.848671][T29959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8205'. [ 1997.121712][T14437] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 1997.287725][T14437] usb 5-1: not running at top speed; connect to a high speed hub [ 1997.287770][T14437] usb 5-1: New USB device found, idVendor=12d1, idProduct=4b3b, bcdDevice=e7.d6 [ 1997.289469][T14437] usb 5-1: config 6 has an invalid interface number: 11 but max is 0 [ 1997.289499][T14437] usb 5-1: config 6 has an invalid interface number: 205 but max is 0 [ 1997.289521][T14437] usb 5-1: config 6 has 2 interfaces, different from the descriptor's value: 1 [ 1997.289546][T14437] usb 5-1: config 6 has no interface number 0 [ 1997.289564][T14437] usb 5-1: config 6 has no interface number 1 [ 1997.289636][T14437] usb 5-1: config 6 interface 11 altsetting 8 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1997.289665][T14437] usb 5-1: config 6 interface 11 altsetting 8 has an endpoint descriptor with address 0x76, changing to 0x6 [ 1997.289693][T14437] usb 5-1: config 6 interface 11 altsetting 8 endpoint 0x6 has invalid maxpacket 59513, setting to 64 [ 1997.289722][T14437] usb 5-1: config 6 interface 11 altsetting 8 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1997.289864][T14437] usb 5-1: too many endpoints for config 6 interface 205 altsetting 46: 113, using maximum allowed: 30 [ 1997.289960][T14437] usb 5-1: config 6 interface 205 altsetting 46 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1997.289991][T14437] usb 5-1: config 6 interface 205 altsetting 46 has 1 endpoint descriptor, different from the interface descriptor's value: 113 [ 1997.290021][T14437] usb 5-1: config 6 interface 11 has no altsetting 0 [ 1997.290041][T14437] usb 5-1: config 6 interface 205 has no altsetting 0 [ 1997.331569][T14437] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1997.331599][T14437] usb 5-1: Product: 梅⟸衆甁ꥸ⯒॔䄠贈넃쫬㏵ᢟ䄻ᳪ萯둮뛙䗏럵안띸顙沰ꊬ荽ꅗ橀㛩緺ऩꊡ罤台颱鐜3쉗⸆ⁿ넿ᗉ뾵᪖㐅쟼劘驹鎉拕샄路✳쳿帒ﵑⓖ剋嘢頗裚㯗규૥㵃࠵楂ᎆ舄췌괼㛇읲钁Ꟑ켃搡亽꾕퍩䞇㧔᪾돐㨢믈쵮䡃備鑌퀠⍫ঽ⟤珐뻗௯㿍꫶ﲭ鐙忤Ɥ뙎 [ 1997.331636][T14437] usb 5-1: Manufacturer:   [ 1997.331652][T14437] usb 5-1: SerialNumber: 瞡檢ᙵꟋ䍰갴蛹遰ꍹт現ଽ褠韊璪돟譵䨟鞉ୁ秫ܷ먍왤쾊愎䮑楛耠ඩ̻ိ磻淎ꏾ쟼⢦ꦩ쪲蹣䠟閂 [ 1997.553069][T29959] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1997.553584][T29959] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1997.804154][T14437] option 5-1:6.11: GSM modem (1-port) converter detected [ 1997.846687][T14437] usb 5-1: USB disconnect, device number 91 [ 1997.974377][T14437] option 5-1:6.11: device disconnected [ 1999.126521][T29564] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1999.210057][T29564] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1999.215129][T29564] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1999.266355][T29564] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1999.308003][T29564] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1999.417666][T29564] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1999.425959][T29564] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1999.547815][T29564] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1999.908854][T30014] netlink: 'syz.2.8215': attribute type 25 has an invalid length. [ 2000.539303][T29564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2000.825616][T29564] 8021q: adding VLAN 0 to HW filter on device team0 [ 2000.912825][T29138] bridge0: port 1(bridge_slave_0) entered blocking state [ 2000.915763][T29138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2000.995476][T19929] bridge0: port 2(bridge_slave_1) entered blocking state [ 2000.995630][T19929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2001.044100][T30016] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8215'. [ 2001.145154][T30031] input: syz1 as /devices/virtual/input/input103 [ 2001.678963][T30041] input: syz1 as /devices/virtual/input/input104 [ 2003.303959][T30079] netlink: ct family unspecified [ 2003.303993][T30079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2003.465085][T30087] input: syz1 as /devices/virtual/input/input105 [ 2003.665146][T30094] FAULT_INJECTION: forcing a failure. [ 2003.665146][T30094] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2003.665190][T30094] CPU: 0 UID: 0 PID: 30094 Comm: syz.3.8236 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2003.665221][T30094] Tainted: [L]=SOFTLOCKUP [ 2003.665230][T30094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2003.665244][T30094] Call Trace: [ 2003.665254][T30094] [ 2003.665264][T30094] dump_stack_lvl+0xe8/0x150 [ 2003.665311][T30094] should_fail_ex+0x467/0x600 [ 2003.665353][T30094] prepare_alloc_pages+0x223/0x690 [ 2003.665388][T30094] __alloc_frozen_pages_noprof+0x12f/0x380 [ 2003.665419][T30094] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2003.665450][T30094] ? __pfx_policy_nodemask+0x10/0x10 [ 2003.665482][T30094] ? __lock_acquire+0x683/0x2ce0 [ 2003.665511][T30094] alloc_pages_mpol+0xce/0x280 [ 2003.665543][T30094] alloc_pages_noprof+0xd2/0x2f0 [ 2003.665574][T30094] pte_alloc_one+0x22/0x380 [ 2003.665603][T30094] __do_fault+0xd1/0x2a0 [ 2003.665633][T30094] do_pte_missing+0x659/0x28f0 [ 2003.665662][T30094] ? unwind_next_frame+0x8f/0x2550 [ 2003.665707][T30094] handle_mm_fault+0xd28/0x13f0 [ 2003.665754][T30094] ? handle_mm_fault+0xe8/0x13f0 [ 2003.665793][T30094] ? __pfx_handle_mm_fault+0x10/0x10 [ 2003.665828][T30094] ? mtree_load+0x12a/0x780 [ 2003.665895][T30094] __get_user_pages+0x166b/0x2590 [ 2003.665970][T30094] faultin_page_range+0x26a/0x8f0 [ 2003.666009][T30094] ? blk_start_plug+0x6e/0x1b0 [ 2003.666043][T30094] madvise_do_behavior+0x2e4/0x540 [ 2003.666078][T30094] ? __pfx_madvise_do_behavior+0x10/0x10 [ 2003.666104][T30094] ? down_read+0x156/0x200 [ 2003.666159][T30094] do_madvise+0x26f/0x330 [ 2003.666194][T30094] ? __pfx_do_madvise+0x10/0x10 [ 2003.666234][T30094] ? __pfx_ksys_write+0x10/0x10 [ 2003.666267][T30094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2003.666295][T30094] __x64_sys_madvise+0xa6/0xc0 [ 2003.666323][T30094] do_syscall_64+0x174/0x580 [ 2003.666356][T30094] ? trace_irq_disable+0x3b/0x140 [ 2003.666393][T30094] ? clear_bhb_loop+0x70/0xc0 [ 2003.666422][T30094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2003.666445][T30094] RIP: 0033:0x7f07666fe0d9 [ 2003.666467][T30094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2003.666486][T30094] RSP: 002b:00007f0764956028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 2003.666512][T30094] RAX: ffffffffffffffda RBX: 00007f0766985fa0 RCX: 00007f07666fe0d9 [ 2003.666528][T30094] RDX: 0000000000000017 RSI: 0000000000c00000 RDI: 0000200000000000 [ 2003.666543][T30094] RBP: 00007f0764956090 R08: 0000000000000000 R09: 0000000000000000 [ 2003.666557][T30094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2003.666571][T30094] R13: 00007f0766986038 R14: 00007f0766985fa0 R15: 00007ffd91d065a8 [ 2003.666606][T30094] [ 2004.222279][T29564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2005.337022][T29564] veth0_vlan: entered promiscuous mode [ 2005.387914][T29564] veth1_vlan: entered promiscuous mode [ 2005.431805][ T9] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2005.594369][ T9] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 2005.622453][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.622484][ T9] usb 4-1: Product: syz [ 2005.622501][ T9] usb 4-1: Manufacturer: syz [ 2005.622518][ T9] usb 4-1: SerialNumber: syz [ 2005.630833][T29564] veth0_macvtap: entered promiscuous mode [ 2005.669570][T29564] veth1_macvtap: entered promiscuous mode [ 2005.716697][T29564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2005.916674][T30125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2005.932227][T30125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2005.952058][T29564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2006.057125][T30137] netlink: 'syz.0.8244': attribute type 3 has an invalid length. [ 2006.274199][ T1435] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2006.379392][T30125] loop4: detected capacity change from 0 to 7 [ 2006.485058][T30147] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8245'. [ 2006.963169][ T986] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2007.336958][T30125] Dev loop4: unable to read RDB block 7 [ 2007.337006][T30125] loop4: AHDI p2 p3 [ 2007.337031][T30125] loop4: partition table partially beyond EOD, truncated [ 2008.020967][ T986] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2008.023023][T29138] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2008.026813][T30125] loop4: p3 start 335544320 is beyond EOD, truncated [ 2008.229226][T30158] input: syz1 as /devices/virtual/input/input106 [ 2008.427294][ T9] kalmia 4-1:1.0 (unnamed net_device) (uninitialized): Error receiving init result. Status -71 [ 2008.427611][ T9] kalmia 4-1:1.0: probe with driver kalmia failed with error -71 [ 2008.549794][ T9] usb 4-1: USB disconnect, device number 86 [ 2009.366844][T30172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8252'. [ 2009.556363][T19930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2009.556387][T19930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2009.633637][ T31] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 2009.795502][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 2009.795546][ T31] usb 4-1: New USB device found, idVendor=12d1, idProduct=4b3b, bcdDevice=e7.d6 [ 2009.796761][ T31] usb 4-1: config 6 has an invalid interface number: 11 but max is 0 [ 2009.796788][ T31] usb 4-1: config 6 has an invalid interface number: 205 but max is 0 [ 2009.796811][ T31] usb 4-1: config 6 has 2 interfaces, different from the descriptor's value: 1 [ 2009.796835][ T31] usb 4-1: config 6 has no interface number 0 [ 2009.796852][ T31] usb 4-1: config 6 has no interface number 1 [ 2009.796980][ T31] usb 4-1: config 6 interface 11 altsetting 8 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 2009.797011][ T31] usb 4-1: config 6 interface 11 altsetting 8 has an endpoint descriptor with address 0x76, changing to 0x6 [ 2009.797040][ T31] usb 4-1: config 6 interface 11 altsetting 8 endpoint 0x6 has invalid maxpacket 59513, setting to 64 [ 2009.797070][ T31] usb 4-1: config 6 interface 11 altsetting 8 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2009.797098][ T31] usb 4-1: too many endpoints for config 6 interface 205 altsetting 46: 113, using maximum allowed: 30 [ 2009.797148][ T31] usb 4-1: config 6 interface 205 altsetting 46 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 2009.797178][ T31] usb 4-1: config 6 interface 205 altsetting 46 has 1 endpoint descriptor, different from the interface descriptor's value: 113 [ 2009.797208][ T31] usb 4-1: config 6 interface 11 has no altsetting 0 [ 2009.797230][ T31] usb 4-1: config 6 interface 205 has no altsetting 0 [ 2009.801053][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2009.801079][ T31] usb 4-1: Product: 梅⟸衆甁ꥸ⯒॔䄠贈넃쫬㏵ᢟ䄻ᳪ萯둮뛙䗏럵안띸顙沰ꊬ荽ꅗ橀㛩緺ऩꊡ罤台颱鐜3쉗⸆ⁿ넿ᗉ뾵᪖㐅쟼劘驹鎉拕샄路✳쳿帒ﵑⓖ剋嘢頗裚㯗규૥㵃࠵楂ᎆ舄췌괼㛇읲钁Ꟑ켃搡亽꾕퍩䞇㧔᪾돐㨢믈쵮䡃備鑌퀠⍫ঽ⟤珐뻗௯㿍꫶ﲭ鐙忤Ɥ뙎 [ 2009.801118][ T31] usb 4-1: Manufacturer:   [ 2009.801143][ T31] usb 4-1: SerialNumber: 瞡檢ᙵꟋ䍰갴蛹遰ꍹт現ଽ褠韊璪돟譵䨟鞉ୁ秫ܷ먍왤쾊愎䮑楛耠ඩ̻ိ磻淎ꏾ쟼⢦ꦩ쪲蹣䠟閂 [ 2010.068829][T30172] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2010.068963][T30172] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2010.349835][ T31] option 4-1:6.11: GSM modem (1-port) converter detected [ 2010.350544][ T5838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2010.350565][ T5838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2010.420204][ T31] usb 4-1: USB disconnect, device number 87 [ 2010.447076][ T31] option 4-1:6.11: device disconnected [ 2010.800643][T30186] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 2010.857610][T30192] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8257'. [ 2011.408126][T30206] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8259'. [ 2011.790147][T30211] input: syz1 as /devices/virtual/input/input107 [ 2011.861710][ T9] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2012.021682][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 2012.022537][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2012.024039][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2012.024093][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 2012.028903][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.028928][ T9] usb 6-1: Product: syz [ 2012.028946][ T9] usb 6-1: Manufacturer: syz [ 2012.028963][ T9] usb 6-1: SerialNumber: syz [ 2012.150547][ T9] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 2012.150646][ T9] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 2012.380179][T26489] usb 6-1: USB disconnect, device number 44 [ 2012.651735][ T197] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2012.921727][ T197] usb 4-1: Using ep0 maxpacket: 32 [ 2012.939155][ T197] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2012.940881][ T197] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2012.975357][ T197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.975389][ T197] usb 4-1: Product: syz [ 2012.975406][ T197] usb 4-1: Manufacturer: syz [ 2012.975423][ T197] usb 4-1: SerialNumber: syz [ 2013.015092][ T197] usb 4-1: config 0 descriptor?? [ 2013.021323][ T197] gs_usb 4-1:0.0: Required endpoints not found [ 2013.262050][ T197] usb 4-1: USB disconnect, device number 88 [ 2013.479751][T30226] nvme nvme0: failed to connect socket: -111 [ 2013.855600][T30230] netlink: 16054 bytes leftover after parsing attributes in process `syz.4.8269'. [ 2014.144208][ T37] audit: type=1326 audit(1786377451.893:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30233 comm="syz.3.8270" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07666fe0d9 code=0x0 [ 2014.152697][ T5714] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 2014.302780][ T5714] usb 5-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 2014.304544][ T5714] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2014.304572][ T5714] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2014.304630][ T5714] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2014.310552][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2014.310580][ T5714] usb 5-1: Product: syz [ 2014.310597][ T5714] usb 5-1: Manufacturer: syz [ 2014.310614][ T5714] usb 5-1: SerialNumber: syz [ 2014.442154][ T5714] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 2014.442200][ T5714] uvcvideo 5-1:1.0: No valid video chain found. [ 2014.649952][ T5714] usb 5-1: USB disconnect, device number 92 [ 2014.815708][T30247] FAULT_INJECTION: forcing a failure. [ 2014.815708][T30247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2014.815754][T30247] CPU: 0 UID: 0 PID: 30247 Comm: syz.3.8274 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2014.815790][T30247] Tainted: [L]=SOFTLOCKUP [ 2014.815801][T30247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2014.815818][T30247] Call Trace: [ 2014.815828][T30247] [ 2014.815839][T30247] dump_stack_lvl+0xe8/0x150 [ 2014.815884][T30247] should_fail_ex+0x467/0x600 [ 2014.815928][T30247] _copy_from_user+0x2d/0xb0 [ 2014.815959][T30247] ___sys_sendmsg+0x1c6/0x360 [ 2014.815993][T30247] ? __lock_acquire+0x683/0x2ce0 [ 2014.816026][T30247] ? __pfx____sys_sendmsg+0x10/0x10 [ 2014.816113][T30247] ? __fget_files+0x2a/0x420 [ 2014.816146][T30247] ? __fget_files+0x3a8/0x420 [ 2014.816183][T30247] __x64_sys_sendmsg+0x1b7/0x290 [ 2014.816218][T30247] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2014.816272][T30247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2014.816300][T30247] do_syscall_64+0x174/0x580 [ 2014.816337][T30247] ? trace_irq_disable+0x3b/0x140 [ 2014.816376][T30247] ? clear_bhb_loop+0x70/0xc0 [ 2014.816408][T30247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2014.816435][T30247] RIP: 0033:0x7f07666fe0d9 [ 2014.816459][T30247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2014.816481][T30247] RSP: 002b:00007f0764956028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2014.816508][T30247] RAX: ffffffffffffffda RBX: 00007f0766985fa0 RCX: 00007f07666fe0d9 [ 2014.816527][T30247] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 2014.816543][T30247] RBP: 00007f0764956090 R08: 0000000000000000 R09: 0000000000000000 [ 2014.816558][T30247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2014.816573][T30247] R13: 00007f0766986038 R14: 00007f0766985fa0 R15: 00007ffd91d065a8 [ 2014.816611][T30247] [ 2016.222542][ T5714] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2016.501820][ T5714] usb 6-1: Using ep0 maxpacket: 32 [ 2016.502815][ T5714] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2016.504355][ T5714] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2016.508993][ T5714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.509020][ T5714] usb 6-1: Product: syz [ 2016.509036][ T5714] usb 6-1: Manufacturer: syz [ 2016.509053][ T5714] usb 6-1: SerialNumber: syz [ 2016.574640][ T5714] usb 6-1: config 0 descriptor?? [ 2016.579039][ T5714] gs_usb 6-1:0.0: Required endpoints not found [ 2016.893415][T21101] usb 6-1: USB disconnect, device number 45 [ 2017.070905][T30270] nvme nvme0: failed to connect socket: -111 [ 2018.661743][ T5781] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 2018.811641][ T5781] usb 5-1: Using ep0 maxpacket: 8 [ 2018.814328][ T5781] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2018.814375][ T5781] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 2018.815443][ T5781] usb 5-1: config 100 has an invalid interface number: 173 but max is 0 [ 2018.815468][ T5781] usb 5-1: config 100 has no interface number 0 [ 2018.815506][ T5781] usb 5-1: config 100 interface 173 altsetting 142 bulk endpoint 0xE has invalid maxpacket 64 [ 2018.815533][ T5781] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2018.815560][ T5781] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2018.815584][ T5781] usb 5-1: config 100 interface 173 has no altsetting 0 [ 2018.818312][ T5781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2018.818336][ T5781] usb 5-1: Product: syz [ 2018.818351][ T5781] usb 5-1: Manufacturer: syz [ 2018.818366][ T5781] usb 5-1: SerialNumber: syz [ 2018.925181][T30284] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2019.135325][ T5781] metro_usb 5-1:100.173: interrupt-out endpoint missing [ 2019.159676][ T5781] usb 5-1: USB disconnect, device number 93 [ 2020.346137][T30304] netlink: 'syz.3.8292': attribute type 3 has an invalid length. [ 2020.890664][T30320] input: syz1 as /devices/virtual/input/input108 [ 2021.339100][T30331] hub 8-0:1.0: USB hub found [ 2021.339437][T30331] hub 8-0:1.0: 1 port detected [ 2022.417304][T30348] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8304'. [ 2022.461763][T14437] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2022.611823][T21101] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 2022.782059][T14437] usb 3-1: Using ep0 maxpacket: 32 [ 2022.784304][T14437] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2022.787423][T14437] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2022.795279][T14437] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2022.795310][T14437] usb 3-1: Product: syz [ 2022.795328][T14437] usb 3-1: Manufacturer: syz [ 2022.795344][T14437] usb 3-1: SerialNumber: syz [ 2022.813204][ T31] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 2022.831847][T14437] usb 3-1: config 0 descriptor?? [ 2022.880541][T14437] gs_usb 3-1:0.0: Required endpoints not found [ 2022.950933][T21101] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 2022.953117][T21101] usb 5-1: config 0 has an invalid descriptor of length 144, skipping remainder of the config [ 2022.953171][T21101] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2022.953215][T21101] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2022.991326][ T31] usb 6-1: not running at top speed; connect to a high speed hub [ 2022.991371][ T31] usb 6-1: New USB device found, idVendor=12d1, idProduct=4b3b, bcdDevice=e7.d6 [ 2023.020119][ T31] usb 6-1: config 6 has an invalid interface number: 11 but max is 0 [ 2023.020150][ T31] usb 6-1: config 6 has an invalid interface number: 205 but max is 0 [ 2023.020171][ T31] usb 6-1: config 6 has 2 interfaces, different from the descriptor's value: 1 [ 2023.020192][ T31] usb 6-1: config 6 has no interface number 0 [ 2023.020210][ T31] usb 6-1: config 6 has no interface number 1 [ 2023.020270][ T31] usb 6-1: config 6 interface 11 altsetting 8 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 2023.020298][ T31] usb 6-1: config 6 interface 11 altsetting 8 has an endpoint descriptor with address 0x76, changing to 0x6 [ 2023.020324][ T31] usb 6-1: config 6 interface 11 altsetting 8 endpoint 0x6 has invalid maxpacket 59513, setting to 64 [ 2023.020351][ T31] usb 6-1: config 6 interface 11 altsetting 8 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2023.020379][ T31] usb 6-1: too many endpoints for config 6 interface 205 altsetting 46: 113, using maximum allowed: 30 [ 2023.020420][ T31] usb 6-1: config 6 interface 205 altsetting 46 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 2023.020447][ T31] usb 6-1: config 6 interface 205 altsetting 46 has 1 endpoint descriptor, different from the interface descriptor's value: 113 [ 2023.020476][ T31] usb 6-1: config 6 interface 11 has no altsetting 0 [ 2023.020495][ T31] usb 6-1: config 6 interface 205 has no altsetting 0 [ 2023.162571][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2023.162601][ T31] usb 6-1: Product: 梅⟸衆甁ꥸ⯒॔䄠贈넃쫬㏵ᢟ䄻ᳪ萯둮뛙䗏럵안띸顙沰ꊬ荽ꅗ橀㛩緺ऩꊡ罤台颱鐜3쉗⸆ⁿ넿ᗉ뾵᪖㐅쟼劘驹鎉拕샄路✳쳿帒ﵑⓖ剋嘢頗裚㯗규૥㵃࠵楂ᎆ舄췌괼㛇읲钁Ꟑ켃搡亽꾕퍩䞇㧔᪾돐㨢믈쵮䡃備鑌퀠⍫ঽ⟤珐뻗௯㿍꫶ﲭ鐙忤Ɥ뙎 [ 2023.162653][ T31] usb 6-1: Manufacturer:   [ 2023.162668][ T31] usb 6-1: SerialNumber: 瞡檢ᙵꟋ䍰갴蛹遰ꍹт現ଽ褠韊璪돟譵䨟鞉ୁ秫ܷ먍왤쾊愎䮑楛耠ඩ̻ိ磻淎ꏾ쟼⢦ꦩ쪲蹣䠟閂 [ 2023.452634][T21101] usb 5-1: config 0 descriptor?? [ 2023.462170][T14437] usb 3-1: USB disconnect, device number 3 [ 2023.487933][T30348] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2023.488073][T30348] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2023.677632][T21101] usb 5-1: USB disconnect, device number 94 [ 2023.785409][ T31] option 6-1:6.11: GSM modem (1-port) converter detected [ 2023.877503][ T31] usb 6-1: USB disconnect, device number 46 [ 2023.905231][ T31] option 6-1:6.11: device disconnected [ 2023.994944][T30357] input: syz1 as /devices/virtual/input/input109 [ 2024.406141][T30363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8309'. [ 2024.478631][T30363] netlink: 'syz.3.8309': attribute type 1 has an invalid length. [ 2024.478654][T30363] netlink: 'syz.3.8309': attribute type 2 has an invalid length. [ 2025.964582][T30385] hub 8-0:1.0: USB hub found [ 2025.965179][T30385] hub 8-0:1.0: 1 port detected [ 2027.293715][ T197] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 2027.452540][ T197] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 2027.454050][ T197] usb 5-1: config 0 has an invalid descriptor of length 144, skipping remainder of the config [ 2027.454104][ T197] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2027.454149][ T197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2027.510037][ T197] usb 5-1: config 0 descriptor?? [ 2027.729589][ T197] usb 5-1: USB disconnect, device number 95 [ 2027.769707][T30405] tipc: Failed to obtain node identity [ 2027.769739][T30405] tipc: Enabling of bearer rejected, failed to enable media [ 2027.823073][T30416] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8326'. [ 2028.063000][ T5781] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 2028.072041][T30420] hub 8-0:1.0: USB hub found [ 2028.072365][T30420] hub 8-0:1.0: 1 port detected [ 2028.225718][ T5781] usb 6-1: not running at top speed; connect to a high speed hub [ 2028.226643][ T5781] usb 6-1: New USB device found, idVendor=12d1, idProduct=4b3b, bcdDevice=e7.d6 [ 2028.231105][ T5781] usb 6-1: config 6 has an invalid interface number: 11 but max is 0 [ 2028.231136][ T5781] usb 6-1: config 6 has an invalid interface number: 205 but max is 0 [ 2028.231159][ T5781] usb 6-1: config 6 has 2 interfaces, different from the descriptor's value: 1 [ 2028.231182][ T5781] usb 6-1: config 6 has no interface number 0 [ 2028.231200][ T5781] usb 6-1: config 6 has no interface number 1 [ 2028.231278][ T5781] usb 6-1: config 6 interface 11 altsetting 8 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 2028.231310][ T5781] usb 6-1: config 6 interface 11 altsetting 8 has an endpoint descriptor with address 0x76, changing to 0x6 [ 2028.231338][ T5781] usb 6-1: config 6 interface 11 altsetting 8 endpoint 0x6 has invalid maxpacket 59513, setting to 64 [ 2028.231369][ T5781] usb 6-1: config 6 interface 11 altsetting 8 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2028.231407][ T5781] usb 6-1: too many endpoints for config 6 interface 205 altsetting 46: 113, using maximum allowed: 30 [ 2028.231450][ T5781] usb 6-1: config 6 interface 205 altsetting 46 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 2028.231479][ T5781] usb 6-1: config 6 interface 205 altsetting 46 has 1 endpoint descriptor, different from the interface descriptor's value: 113 [ 2028.264857][ T5781] usb 6-1: config 6 interface 11 has no altsetting 0 [ 2028.264884][ T5781] usb 6-1: config 6 interface 205 has no altsetting 0 [ 2028.390854][ T5781] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.390887][ T5781] usb 6-1: Product: 梅⟸衆甁ꥸ⯒॔䄠贈넃쫬㏵ᢟ䄻ᳪ萯둮뛙䗏럵안띸顙沰ꊬ荽ꅗ橀㛩緺ऩꊡ罤台颱鐜3쉗⸆ⁿ넿ᗉ뾵᪖㐅쟼劘驹鎉拕샄路✳쳿帒ﵑⓖ剋嘢頗裚㯗규૥㵃࠵楂ᎆ舄췌괼㛇읲钁Ꟑ켃搡亽꾕퍩䞇㧔᪾돐㨢믈쵮䡃備鑌퀠⍫ঽ⟤珐뻗௯㿍꫶ﲭ鐙忤Ɥ뙎 [ 2028.390926][ T5781] usb 6-1: Manufacturer:   [ 2028.390942][ T5781] usb 6-1: SerialNumber: 瞡檢ᙵꟋ䍰갴蛹遰ꍹт現ଽ褠韊璪돟譵䨟鞉ୁ秫ܷ먍왤쾊愎䮑楛耠ඩ̻ိ磻淎ꏾ쟼⢦ꦩ쪲蹣䠟閂 [ 2028.762203][T30416] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2028.762413][T30416] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2028.996852][ T5781] option 6-1:6.11: GSM modem (1-port) converter detected [ 2029.046006][ T5781] usb 6-1: USB disconnect, device number 47 [ 2029.103231][ T5781] option 6-1:6.11: device disconnected [ 2029.169041][T30426] netlink: 116 bytes leftover after parsing attributes in process `syz.4.8329'. [ 2029.340597][T30427] hub 8-0:1.0: USB hub found [ 2029.340994][T30427] hub 8-0:1.0: 1 port detected [ 2030.910496][T30462] netlink: 116 bytes leftover after parsing attributes in process `syz.0.8341'. [ 2031.241747][ T31] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2031.391664][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 2031.393017][ T31] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2031.397213][ T31] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 2031.397260][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2031.397282][ T31] usb 6-1: config 0 has no interface number 0 [ 2031.442385][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2031.442417][ T31] usb 6-1: Product: syz [ 2031.442434][ T31] usb 6-1: Manufacturer: syz [ 2031.442451][ T31] usb 6-1: SerialNumber: syz [ 2031.477182][ T31] usb 6-1: config 0 descriptor?? [ 2031.492901][ T31] uvcvideo 6-1:0.31: probe with driver uvcvideo failed with error -22 [ 2031.731020][T26489] usb 6-1: USB disconnect, device number 48 [ 2031.935108][T30475] netlink: ct family unspecified [ 2031.935145][T30475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2033.275401][T21101] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2033.346618][T30498] netlink: 'syz.3.8355': attribute type 12 has an invalid length. [ 2033.433133][ T37] audit: type=1326 audit(1786377471.173:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30497 comm="syz.4.8356" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc30767e0d9 code=0x0 [ 2033.441741][T21101] usb 3-1: Using ep0 maxpacket: 32 [ 2033.442725][T21101] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2033.475845][T21101] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2033.496162][T21101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2033.496193][T21101] usb 3-1: Product: syz [ 2033.496211][T21101] usb 3-1: Manufacturer: syz [ 2033.496228][T21101] usb 3-1: SerialNumber: syz [ 2033.547660][T21101] usb 3-1: config 0 descriptor?? [ 2033.560984][T21101] gs_usb 3-1:0.0: Required endpoints not found [ 2033.802380][T30512] netlink: 116 bytes leftover after parsing attributes in process `syz.0.8360'. [ 2033.859669][T30512] hub 8-0:1.0: USB hub found [ 2033.863808][T30512] hub 8-0:1.0: 1 port detected [ 2034.894653][T21100] usb 3-1: USB disconnect, device number 4 [ 2035.136974][T30523] netlink: 116 bytes leftover after parsing attributes in process `syz.0.8362'. [ 2035.436281][T30529] netlink: 116 bytes leftover after parsing attributes in process `syz.4.8365'. [ 2036.558272][T30533] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.8368'. [ 2036.750776][T30537] netlink: 'syz.4.8369': attribute type 12 has an invalid length. [ 2036.761680][T21101] usb 4-1: new low-speed USB device number 89 using dummy_hcd [ 2036.912504][T21101] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2036.915827][T21101] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2036.915868][T21101] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2036.915912][T21101] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2036.915942][T21101] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 2036.915970][T21101] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8C is Bulk; changing to Interrupt [ 2036.916004][T21101] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8C has invalid wMaxPacketSize 0 [ 2036.916029][T21101] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2036.916058][T21101] usb 4-1: config 168 interface 0 has no altsetting 0 [ 2036.918302][T21101] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2036.918357][T21101] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2036.918402][T21101] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2036.918432][T21101] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 2036.918461][T21101] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8C is Bulk; changing to Interrupt [ 2036.918486][T21101] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8C has invalid wMaxPacketSize 0 [ 2036.918514][T21101] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2036.918544][T21101] usb 4-1: config 168 interface 0 has no altsetting 0 [ 2036.920848][T21101] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2036.920888][T21101] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2036.920932][T21101] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2036.920963][T21101] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 2036.921001][T21101] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8C is Bulk; changing to Interrupt [ 2036.921026][T21101] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8C has invalid wMaxPacketSize 0 [ 2036.921051][T21101] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2036.921082][T21101] usb 4-1: config 168 interface 0 has no altsetting 0 [ 2037.579482][T30550] jffs2: notice: (30550) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 2037.654584][T30553] netlink: 'syz.5.8374': attribute type 11 has an invalid length. [ 2037.740955][T30551] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8374'. [ 2037.793861][T30542] nvme nvme0: failed to connect socket: -111 [ 2039.558588][T21101] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.595797][T21101] usb 4-1: can't set config #168, error -71 [ 2039.630293][T21101] usb 4-1: USB disconnect, device number 89 [ 2039.821856][ T5781] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 2039.951663][ T5781] usb 5-1: device descriptor read/64, error -71 [ 2040.114246][T30595] netlink: 116 bytes leftover after parsing attributes in process `syz.0.8391'. [ 2040.191733][ T5781] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 2040.321694][ T5781] usb 5-1: device descriptor read/64, error -71 [ 2040.377284][T30601] netlink: 116 bytes leftover after parsing attributes in process `syz.5.8392'. [ 2040.383807][T30601] hub 8-0:1.0: USB hub found [ 2040.384304][T30601] hub 8-0:1.0: 1 port detected [ 2040.432301][ T5781] usb usb5-port1: attempt power cycle [ 2040.771734][ T5781] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 2040.792840][ T5781] usb 5-1: device descriptor read/8, error -71 [ 2041.042359][ T5781] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 2041.062949][ T5781] usb 5-1: device descriptor read/8, error -71 [ 2041.172235][ T5781] usb usb5-port1: unable to enumerate USB device [ 2041.344682][T30611] input: syz1 as /devices/virtual/input/input110 [ 2041.412810][ T5781] IPVS: starting estimator thread 0... [ 2041.514382][T30613] IPVS: using max 8 ests per chain, 19200 per kthread [ 2041.781387][T30625] netlink: 116 bytes leftover after parsing attributes in process `syz.5.8400'. [ 2041.835241][T30624] netlink: 'syz.2.8401': attribute type 3 has an invalid length. [ 2043.335392][T30646] input: syz1 as /devices/virtual/input/input111 [ 2044.418801][T30664] netlink: 16054 bytes leftover after parsing attributes in process `syz.4.8417'. [ 2044.599509][T30669] netlink: 116 bytes leftover after parsing attributes in process `syz.0.8416'. [ 2045.095012][T30680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8423'. [ 2045.205085][ T37] audit: type=1326 audit(1786377482.953:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30681 comm="syz.3.8424" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07666fe0d9 code=0x7ffc0000 [ 2045.205147][ T37] audit: type=1326 audit(1786377482.953:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30681 comm="syz.3.8424" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07666fe0d9 code=0x7ffc0000 [ 2045.205204][ T37] audit: type=1326 audit(1786377482.953:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30681 comm="syz.3.8424" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07666fe0d9 code=0x7ffc0000 [ 2045.205257][ T37] audit: type=1326 audit(1786377482.953:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30681 comm="syz.3.8424" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07666fe0d9 code=0x7ffc0000 [ 2045.205812][ T37] audit: type=1326 audit(1786377482.953:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30681 comm="syz.3.8424" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07666fe0d9 code=0x7ffc0000 [ 2045.206733][ T37] audit: type=1326 audit(1786377482.953:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30681 comm="syz.3.8424" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f07666fe0d9 code=0x7ffc0000 [ 2045.210116][ T37] audit: type=1326 audit(1786377482.953:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30681 comm="syz.3.8424" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07666fe0d9 code=0x7ffc0000 [ 2045.260707][ T37] audit: type=1326 audit(1786377483.003:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30681 comm="syz.3.8424" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07666fe0d9 code=0x7ffc0000 [ 2045.264026][ T37] audit: type=1326 audit(1786377483.003:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30681 comm="syz.3.8424" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07666fe0d9 code=0x7ffc0000 [ 2045.264323][ T37] audit: type=1326 audit(1786377483.013:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30681 comm="syz.3.8424" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07666fe0d9 code=0x7ffc0000 [ 2045.394871][ T7112] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 2045.664954][ T7112] usb 3-1: not running at top speed; connect to a high speed hub [ 2045.664999][ T7112] usb 3-1: New USB device found, idVendor=12d1, idProduct=4b3b, bcdDevice=e7.d6 [ 2045.666573][ T7112] usb 3-1: config 6 has an invalid interface number: 11 but max is 0 [ 2045.666601][ T7112] usb 3-1: config 6 has an invalid interface number: 205 but max is 0 [ 2045.666624][ T7112] usb 3-1: config 6 has 2 interfaces, different from the descriptor's value: 1 [ 2045.666647][ T7112] usb 3-1: config 6 has no interface number 0 [ 2045.666665][ T7112] usb 3-1: config 6 has no interface number 1 [ 2045.666726][ T7112] usb 3-1: config 6 interface 11 altsetting 8 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 2045.666755][ T7112] usb 3-1: config 6 interface 11 altsetting 8 has an endpoint descriptor with address 0x76, changing to 0x6 [ 2045.666782][ T7112] usb 3-1: config 6 interface 11 altsetting 8 endpoint 0x6 has invalid maxpacket 59513, setting to 64 [ 2045.666821][ T7112] usb 3-1: config 6 interface 11 altsetting 8 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2045.666850][ T7112] usb 3-1: too many endpoints for config 6 interface 205 altsetting 46: 113, using maximum allowed: 30 [ 2045.666891][ T7112] usb 3-1: config 6 interface 205 altsetting 46 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 2045.666920][ T7112] usb 3-1: config 6 interface 205 altsetting 46 has 1 endpoint descriptor, different from the interface descriptor's value: 113 [ 2045.666949][ T7112] usb 3-1: config 6 interface 11 has no altsetting 0 [ 2045.666969][ T7112] usb 3-1: config 6 interface 205 has no altsetting 0 [ 2045.671441][ T7112] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.671467][ T7112] usb 3-1: Product: 梅⟸衆甁ꥸ⯒॔䄠贈넃쫬㏵ᢟ䄻ᳪ萯둮뛙䗏럵안띸顙沰ꊬ荽ꅗ橀㛩緺ऩꊡ罤台颱鐜3쉗⸆ⁿ넿ᗉ뾵᪖㐅쟼劘驹鎉拕샄路✳쳿帒ﵑⓖ剋嘢頗裚㯗규૥㵃࠵楂ᎆ舄췌괼㛇읲钁Ꟑ켃搡亽꾕퍩䞇㧔᪾돐㨢믈쵮䡃備鑌퀠⍫ঽ⟤珐뻗௯㿍꫶ﲭ鐙忤Ɥ뙎 [ 2045.671743][ T7112] usb 3-1: Manufacturer:   [ 2045.671807][ T7112] usb 3-1: SerialNumber: 瞡檢ᙵꟋ䍰갴蛹遰ꍹт現ଽ褠韊璪돟譵䨟鞉ୁ秫ܷ먍왤쾊愎䮑楛耠ඩ̻ိ磻淎ꏾ쟼⢦ꦩ쪲蹣䠟閂 [ 2045.883926][T30680] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2045.909696][T30680] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2046.135633][ T7112] option 3-1:6.11: GSM modem (1-port) converter detected [ 2046.242446][ T7112] usb 3-1: USB disconnect, device number 5 [ 2046.296679][ T7112] option 3-1:6.11: device disconnected [ 2046.585146][T30698] netlink: 116 bytes leftover after parsing attributes in process `syz.5.8428'. [ 2046.746157][T30700] netlink: 16054 bytes leftover after parsing attributes in process `syz.4.8430'. [ 2047.954366][T30721] hub 8-0:1.0: USB hub found [ 2047.957222][T30721] hub 8-0:1.0: 1 port detected [ 2049.189068][T30727] FAULT_INJECTION: forcing a failure. [ 2049.189068][T30727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2049.189110][T30727] CPU: 0 UID: 0 PID: 30727 Comm: syz.2.8441 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2049.189142][T30727] Tainted: [L]=SOFTLOCKUP [ 2049.189150][T30727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2049.189165][T30727] Call Trace: [ 2049.189175][T30727] [ 2049.189185][T30727] dump_stack_lvl+0xe8/0x150 [ 2049.189225][T30727] should_fail_ex+0x467/0x600 [ 2049.189264][T30727] _copy_from_user+0x2d/0xb0 [ 2049.189292][T30727] ___sys_sendmsg+0x1c6/0x360 [ 2049.189333][T30727] ? __lock_acquire+0x683/0x2ce0 [ 2049.189363][T30727] ? __pfx____sys_sendmsg+0x10/0x10 [ 2049.189428][T30727] ? __fget_files+0x2a/0x420 [ 2049.189452][T30727] ? __fget_files+0x3a8/0x420 [ 2049.189484][T30727] __x64_sys_sendmsg+0x1b7/0x290 [ 2049.189516][T30727] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2049.189567][T30727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2049.189594][T30727] do_syscall_64+0x174/0x580 [ 2049.189628][T30727] ? trace_irq_disable+0x3b/0x140 [ 2049.189665][T30727] ? clear_bhb_loop+0x70/0xc0 [ 2049.189694][T30727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2049.189718][T30727] RIP: 0033:0x7f232e1ce0d9 [ 2049.189739][T30727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2049.189760][T30727] RSP: 002b:00007f232c426028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2049.189785][T30727] RAX: ffffffffffffffda RBX: 00007f232e455fa0 RCX: 00007f232e1ce0d9 [ 2049.189803][T30727] RDX: 00000000040080c0 RSI: 0000200000000240 RDI: 0000000000000003 [ 2049.189819][T30727] RBP: 00007f232c426090 R08: 0000000000000000 R09: 0000000000000000 [ 2049.189834][T30727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2049.189847][T30727] R13: 00007f232e456038 R14: 00007f232e455fa0 R15: 00007ffdb69cd7c8 [ 2049.189882][T30727] [ 2049.558140][T30729] netlink: 16054 bytes leftover after parsing attributes in process `syz.4.8442'. [ 2051.190272][T30749] netlink: ct family unspecified [ 2051.190305][T30749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2051.753640][T30771] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8456'. [ 2052.033005][T21101] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2052.181645][T21101] usb 6-1: Using ep0 maxpacket: 8 [ 2052.182472][T21101] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2052.185604][T21101] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2052.185655][T21101] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 2052.189642][T21101] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.189669][T21101] usb 6-1: Product: syz [ 2052.189685][T21101] usb 6-1: Manufacturer: syz [ 2052.189701][T21101] usb 6-1: SerialNumber: syz [ 2052.283399][T21101] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 2052.283490][T21101] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 2052.370170][T30783] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8461'. [ 2052.501197][T14437] usb 6-1: USB disconnect, device number 49 [ 2052.651719][T26489] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 2052.790895][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 2052.790985][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 2052.817148][T26489] usb 5-1: Using ep0 maxpacket: 8 [ 2052.829283][T26489] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2052.844998][T26489] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2052.845054][T26489] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2052.936195][T26489] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.936225][T26489] usb 5-1: Product: syz [ 2052.936241][T26489] usb 5-1: Manufacturer: syz [ 2052.936258][T26489] usb 5-1: SerialNumber: syz [ 2052.989430][T26489] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 2053.000500][T26489] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 2053.192484][T21100] usb 5-1: USB disconnect, device number 100 [ 2053.458456][T30799] IPVS: sync thread started: state = BACKUP, mcast_ifn = vxcan1, syncid = 0, id = 0 [ 2054.023687][ T31] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2054.051692][ T197] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2054.175799][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2054.179862][ T31] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2054.179895][ T31] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 2054.212697][ T197] usb 3-1: New USB device found, idVendor=0001, idProduct=0000, bcdDevice= 4.09 [ 2054.215204][ T197] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2054.215240][ T197] usb 3-1: can't read configurations, error -61 [ 2054.217582][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.217609][ T31] usb 6-1: Product: syz [ 2054.217626][ T31] usb 6-1: Manufacturer: syz [ 2054.217642][ T31] usb 6-1: SerialNumber: syz [ 2054.361687][ T197] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2054.512864][T30801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2054.514153][T30801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2054.613818][ T197] usb 3-1: New USB device found, idVendor=0001, idProduct=0000, bcdDevice= 4.09 [ 2054.631324][ T197] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2054.631364][ T197] usb 3-1: can't read configurations, error -61 [ 2054.634657][ T197] usb usb3-port1: attempt power cycle [ 2054.842325][T30805] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !ns (limit 1000000) max_states_ [ 2054.902587][T30801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2054.905660][T30801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2055.023205][ T197] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2055.053204][ T197] usb 3-1: New USB device found, idVendor=0001, idProduct=0000, bcdDevice= 4.09 [ 2055.058095][ T197] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2055.058133][ T197] usb 3-1: can't read configurations, error -61 [ 2055.211778][ T197] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2055.235646][ T197] usb 3-1: New USB device found, idVendor=0001, idProduct=0000, bcdDevice= 4.09 [ 2055.237914][ T197] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2055.237951][ T197] usb 3-1: can't read configurations, error -61 [ 2055.242740][ T197] usb usb3-port1: unable to enumerate USB device [ 2055.507731][ T31] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 2055.507816][ T31] cdc_ncm 6-1:1.0: bind() failure [ 2055.542637][ T31] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 2055.542692][ T31] cdc_ncm 6-1:1.1: bind() failure [ 2055.577922][ T31] usb 6-1: USB disconnect, device number 50 [ 2057.329085][T30829] netlink: 'syz.5.8478': attribute type 11 has an invalid length. [ 2057.329155][T30829] netlink: 'syz.5.8478': attribute type 4 has an invalid length. [ 2057.495790][T30837] nvme nvme0: failed to connect socket: -111 [ 2059.823928][T30871] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8492'. [ 2061.218525][T30899] jffs2: notice: (30899) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 2061.341320][T30903] netlink: 'syz.5.8503': attribute type 11 has an invalid length. [ 2061.596265][T30899] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8503'. [ 2063.353546][T30927] netlink: 116 bytes leftover after parsing attributes in process `syz.3.8509'. [ 2063.399878][T30927] hub 8-0:1.0: USB hub found [ 2063.403498][T30927] hub 8-0:1.0: 1 port detected [ 2064.537790][T30946] jffs2: notice: (30946) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 2064.843417][T30946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8517'. [ 2065.407890][T30966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8523'. [ 2065.432768][T30962] netlink: ct family unspecified [ 2065.432804][T30962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2065.671821][T14437] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 2065.849566][T14437] usb 5-1: not running at top speed; connect to a high speed hub [ 2065.849610][T14437] usb 5-1: New USB device found, idVendor=12d1, idProduct=4b3b, bcdDevice=e7.d6 [ 2065.873151][T14437] usb 5-1: config 6 has an invalid interface number: 11 but max is 0 [ 2065.873181][T14437] usb 5-1: config 6 has an invalid interface number: 205 but max is 0 [ 2065.873204][T14437] usb 5-1: config 6 has 2 interfaces, different from the descriptor's value: 1 [ 2065.873228][T14437] usb 5-1: config 6 has no interface number 0 [ 2065.873246][T14437] usb 5-1: config 6 has no interface number 1 [ 2065.873307][T14437] usb 5-1: config 6 interface 11 altsetting 8 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 2065.873337][T14437] usb 5-1: config 6 interface 11 altsetting 8 has an endpoint descriptor with address 0x76, changing to 0x6 [ 2065.873406][T14437] usb 5-1: config 6 interface 11 altsetting 8 endpoint 0x6 has invalid maxpacket 59513, setting to 64 [ 2065.873437][T14437] usb 5-1: config 6 interface 11 altsetting 8 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2065.873467][T14437] usb 5-1: too many endpoints for config 6 interface 205 altsetting 46: 113, using maximum allowed: 30 [ 2065.873520][T14437] usb 5-1: config 6 interface 205 altsetting 46 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 2065.873551][T14437] usb 5-1: config 6 interface 205 altsetting 46 has 1 endpoint descriptor, different from the interface descriptor's value: 113 [ 2065.873582][T14437] usb 5-1: config 6 interface 11 has no altsetting 0 [ 2065.873602][T14437] usb 5-1: config 6 interface 205 has no altsetting 0 [ 2065.898559][T14437] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2065.898607][T14437] usb 5-1: Product: 梅⟸衆甁ꥸ⯒॔䄠贈넃쫬㏵ᢟ䄻ᳪ萯둮뛙䗏럵안띸顙沰ꊬ荽ꅗ橀㛩緺ऩꊡ罤台颱鐜3쉗⸆ⁿ넿ᗉ뾵᪖㐅쟼劘驹鎉拕샄路✳쳿帒ﵑⓖ剋嘢頗裚㯗규૥㵃࠵楂ᎆ舄췌괼㛇읲钁Ꟑ켃搡亽꾕퍩䞇㧔᪾돐㨢믈쵮䡃備鑌퀠⍫ঽ⟤珐뻗௯㿍꫶ﲭ鐙忤Ɥ뙎 [ 2065.898646][T14437] usb 5-1: Manufacturer:   [ 2065.898662][T14437] usb 5-1: SerialNumber: 瞡檢ᙵꟋ䍰갴蛹遰ꍹт現ଽ褠韊璪돟譵䨟鞉ୁ秫ܷ먍왤쾊愎䮑楛耠ඩ̻ိ磻淎ꏾ쟼⢦ꦩ쪲蹣䠟閂 [ 2066.093241][T30966] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2066.093373][T30966] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2066.318013][T14437] option 5-1:6.11: GSM modem (1-port) converter detected [ 2066.367425][T14437] usb 5-1: USB disconnect, device number 101 [ 2066.392157][T14437] option 5-1:6.11: device disconnected [ 2066.990266][T30989] 0x000000000007-0x000000020000 : "" [ 2067.131305][T30989] ftl_cs: FTL header corrupt! [ 2067.623913][T30993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8530'. [ 2068.268864][T30991] jffs2: notice: (30991) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 2069.375835][T31018] netlink: ct family unspecified [ 2069.375867][T31018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2069.569553][T31016] netlink: 16054 bytes leftover after parsing attributes in process `syz.5.8536'. [ 2069.653608][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 2069.653628][ T37] audit: type=1326 audit(1786377507.393:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31023 comm="syz.0.8539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ea92e0d9 code=0x7ffc0000 [ 2069.657443][ T37] audit: type=1326 audit(1786377507.403:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31023 comm="syz.0.8539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ea92e0d9 code=0x7ffc0000 [ 2069.657503][ T37] audit: type=1326 audit(1786377507.403:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31023 comm="syz.0.8539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ea92e0d9 code=0x7ffc0000 [ 2069.659335][ T37] audit: type=1326 audit(1786377507.403:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31023 comm="syz.0.8539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe4ea92e0d9 code=0x7ffc0000 [ 2069.695459][ T37] audit: type=1326 audit(1786377507.443:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31023 comm="syz.0.8539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ea92e0d9 code=0x7ffc0000 [ 2069.805646][ T37] audit: type=1326 audit(1786377507.553:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31023 comm="syz.0.8539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ea92e0d9 code=0x7ffc0000 [ 2069.805695][ T37] audit: type=1326 audit(1786377507.553:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31023 comm="syz.0.8539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ea92e0d9 code=0x7ffc0000 [ 2069.805734][ T37] audit: type=1326 audit(1786377507.553:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31023 comm="syz.0.8539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ea92e0d9 code=0x7ffc0000 [ 2069.805774][ T37] audit: type=1326 audit(1786377507.553:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31023 comm="syz.0.8539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ea92e0d9 code=0x7ffc0000 [ 2069.805810][ T37] audit: type=1326 audit(1786377507.553:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31023 comm="syz.0.8539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fe4ea92e0d9 code=0x7ffc0000 [ 2069.933050][T26489] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2070.034039][T31032] netlink: 116 bytes leftover after parsing attributes in process `syz.3.8538'. [ 2070.113578][T26489] usb 6-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 2070.115407][T26489] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2070.115432][T26489] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2070.117101][T26489] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2070.119887][T26489] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2070.119913][T26489] usb 6-1: Product: syz [ 2070.119929][T26489] usb 6-1: Manufacturer: syz [ 2070.119945][T26489] usb 6-1: SerialNumber: syz [ 2070.212456][T26489] uvcvideo 6-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 2070.212492][T26489] uvcvideo 6-1:1.0: No valid video chain found. [ 2070.451890][T26489] usb 6-1: USB disconnect, device number 51 [ 2070.790846][T31039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8542'. [ 2071.674587][T31051] netlink: 116 bytes leftover after parsing attributes in process `syz.3.8545'. [ 2072.754790][T31064] input: syz1 as /devices/virtual/input/input112 [ 2073.313782][T31073] tipc: Failed to obtain node identity [ 2073.313809][T31073] tipc: Enabling of bearer rejected, failed to enable media [ 2073.440579][T31077] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8554'. [ 2073.721671][ T5781] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2073.873401][ T5781] usb 3-1: Using ep0 maxpacket: 8 [ 2073.875872][ T5781] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2073.878899][ T5781] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2073.878970][ T5781] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2073.931824][ T5781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2073.931852][ T5781] usb 3-1: Product: syz [ 2073.931867][ T5781] usb 3-1: Manufacturer: syz [ 2073.931882][ T5781] usb 3-1: SerialNumber: syz [ 2074.106544][ T5781] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 2074.106668][ T5781] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 2074.348987][ T7112] usb 3-1: USB disconnect, device number 10 [ 2074.358032][T31082] nvme_fabrics: missing parameter 'transport=%s' [ 2074.358050][T31082] nvme_fabrics: missing parameter 'nqn=%s' [ 2074.547166][T31088] input: syz1 as /devices/virtual/input/input113 [ 2075.445225][T31101] netlink: 116 bytes leftover after parsing attributes in process `syz.0.8561'. [ 2076.544557][T31114] input: syz1 as /devices/virtual/input/input114 [ 2076.660433][T31117] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8569'. [ 2076.764835][ T37] kauditd_printk_skb: 143 callbacks suppressed [ 2076.764855][ T37] audit: type=1326 audit(1786377514.513:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31119 comm="syz.0.8570" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4ea92e0d9 code=0x0 [ 2076.921692][T21101] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2077.075317][T21101] usb 4-1: Using ep0 maxpacket: 8 [ 2077.078560][T21101] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2077.110029][T21101] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2077.110089][T21101] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 2077.208562][T21101] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2077.208593][T21101] usb 4-1: Product: syz [ 2077.208609][T21101] usb 4-1: Manufacturer: syz [ 2077.208634][T21101] usb 4-1: SerialNumber: syz [ 2077.309889][T21101] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 2077.309981][T21101] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 2077.540931][T14437] usb 4-1: USB disconnect, device number 90 [ 2078.590039][T31144] netlink: 116 bytes leftover after parsing attributes in process `syz.0.8576'. [ 2080.011055][T31163] input: syz1 as /devices/virtual/input/input115 [ 2080.278411][T31167] nvme_fabrics: missing parameter 'transport=%s' [ 2080.278429][T31167] nvme_fabrics: missing parameter 'nqn=%s' [ 2080.729444][T31178] netlink: 116 bytes leftover after parsing attributes in process `syz.3.8586'. [ 2081.045572][T31184] netlink: 116 bytes leftover after parsing attributes in process `syz.4.8588'. [ 2082.191819][T31188] netlink: 116 bytes leftover after parsing attributes in process `syz.2.8590'. [ 2082.239387][T31188] hub 8-0:1.0: USB hub found [ 2082.244238][T31188] hub 8-0:1.0: 1 port detected [ 2084.021686][ T31] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 2084.175846][ T31] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2084.177695][ T31] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2084.177737][ T31] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2084.177825][ T31] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2084.177856][ T31] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 2084.177885][ T31] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8C is Bulk; changing to Interrupt [ 2084.177910][ T31] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8C has invalid wMaxPacketSize 0 [ 2084.177935][ T31] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2084.177964][ T31] usb 3-1: config 168 interface 0 has no altsetting 0 [ 2084.181801][ T31] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2084.181842][ T31] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2084.181885][ T31] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2084.181915][ T31] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 2084.181943][ T31] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8C is Bulk; changing to Interrupt [ 2084.181968][ T31] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8C has invalid wMaxPacketSize 0 [ 2084.181994][ T31] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2084.182024][ T31] usb 3-1: config 168 interface 0 has no altsetting 0 [ 2084.257397][ T31] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2084.257443][ T31] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2084.257496][ T31] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2084.257527][ T31] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 2084.257556][ T31] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8C is Bulk; changing to Interrupt [ 2084.257581][ T31] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8C has invalid wMaxPacketSize 0 [ 2084.257606][ T31] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2084.257636][ T31] usb 3-1: config 168 interface 0 has no altsetting 0 [ 2085.340755][T31217] hub 8-0:1.0: USB hub found [ 2085.343221][T31217] hub 8-0:1.0: 1 port detected [ 2086.424353][T31219] netlink: 116 bytes leftover after parsing attributes in process `syz.5.8601'. [ 2086.725125][T31224] netlink: 116 bytes leftover after parsing attributes in process `syz.0.8602'. [ 2086.762456][T31224] hub 8-0:1.0: USB hub found [ 2086.764879][T31224] hub 8-0:1.0: 1 port detected [ 2087.798715][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2087.858378][ T31] usb 3-1: can't set config #168, error -71 [ 2087.872127][ T31] usb 3-1: USB disconnect, device number 11 [ 2088.009758][T31235] jffs2: notice: (31235) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 2088.079668][T31228] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.8604'. [ 2088.170525][T31235] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8606'. [ 2088.254684][T31240] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.8608'. [ 2088.441720][ T31] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 2088.594664][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 2088.596209][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2088.596243][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2088.596294][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2088.650554][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2088.650581][ T31] usb 4-1: Product: syz [ 2088.650598][ T31] usb 4-1: Manufacturer: syz [ 2088.650614][ T31] usb 4-1: SerialNumber: syz [ 2088.754390][ T31] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 2088.754427][ T31] uvcvideo 4-1:1.0: No valid video chain found. [ 2088.815351][T31244] nvme_fabrics: missing parameter 'transport=%s' [ 2088.815370][T31244] nvme_fabrics: missing parameter 'nqn=%s' [ 2088.974080][T14437] usb 4-1: USB disconnect, device number 91 [ 2089.251320][T31257] netlink: 116 bytes leftover after parsing attributes in process `syz.2.8614'. [ 2089.485799][T31261] nvme_fabrics: missing parameter 'transport=%s' [ 2089.485818][T31261] nvme_fabrics: missing parameter 'nqn=%s' [ 2090.094648][T31274] netlink: 16054 bytes leftover after parsing attributes in process `syz.5.8619'. [ 2090.519432][T31276] jffs2: notice: (31276) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 2090.614125][T31278] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8620'. [ 2090.924523][T31288] netlink: 116 bytes leftover after parsing attributes in process `syz.5.8622'. [ 2090.929439][T31288] hub 8-0:1.0: USB hub found [ 2090.929778][T31288] hub 8-0:1.0: 1 port detected [ 2091.980576][T31290] nvme nvme0: failed to connect socket: -111 [ 2092.191628][T14437] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2092.365537][T14437] usb 6-1: Using ep0 maxpacket: 16 [ 2092.366570][T14437] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2092.368415][T14437] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2092.368449][T14437] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2092.419503][T14437] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2092.419535][T14437] usb 6-1: Product: syz [ 2092.419551][T14437] usb 6-1: Manufacturer: syz [ 2092.419569][T14437] usb 6-1: SerialNumber: syz [ 2092.475392][T14437] usb 6-1: config 0 descriptor?? [ 2092.480225][T31294] nvme_fabrics: missing parameter 'transport=%s' [ 2092.480241][T31294] nvme_fabrics: missing parameter 'nqn=%s' [ 2092.531898][T14437] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2092.531934][T14437] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 2092.977285][T31308] netlink: 116 bytes leftover after parsing attributes in process `syz.3.8629'. [ 2093.148558][T14437] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 2093.149044][T14437] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 2093.149535][T14437] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 2093.149553][T14437] em28xx 6-1:0.0: No AC97 audio processor [ 2093.270087][T14437] usb 6-1: USB disconnect, device number 52 [ 2093.290773][T14437] em28xx 6-1:0.0: Disconnecting em28xx [ 2093.307363][T14437] em28xx 6-1:0.0: Freeing device [ 2093.333287][T31313] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.8631'. [ 2093.455563][T31315] input: syz1 as /devices/virtual/input/input116 [ 2094.286247][T31324] netlink: 116 bytes leftover after parsing attributes in process `syz.2.8636'. [ 2094.347236][T31327] hub 8-0:1.0: USB hub found [ 2094.351554][T31327] hub 8-0:1.0: 1 port detected [ 2094.981411][T31330] netlink: 116 bytes leftover after parsing attributes in process `syz.5.8637'. [ 2095.631638][T31336] nvme_fabrics: missing parameter 'transport=%s' [ 2095.631656][T31336] nvme_fabrics: missing parameter 'nqn=%s' [ 2095.673375][T31339] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8640'. [ 2095.821874][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 2095.951636][ T7112] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 2096.131768][ T7112] usb 5-1: Using ep0 maxpacket: 8 [ 2096.132729][ T7112] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2096.134438][ T7112] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2096.134493][ T7112] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2096.138590][ T7112] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2096.138632][ T7112] usb 5-1: Product: syz [ 2096.138649][ T7112] usb 5-1: Manufacturer: syz [ 2096.138665][ T7112] usb 5-1: SerialNumber: syz [ 2096.934678][ T5781] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 2097.082557][ T5781] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2097.084263][ T5781] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2097.084305][ T5781] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2097.084358][ T5781] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2097.084388][ T5781] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 2097.084418][ T5781] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8C is Bulk; changing to Interrupt [ 2097.084444][ T5781] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8C has invalid wMaxPacketSize 0 [ 2097.084469][ T5781] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2097.084500][ T5781] usb 3-1: config 168 interface 0 has no altsetting 0 [ 2097.085923][ T5781] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2097.085961][ T5781] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2097.086002][ T5781] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2097.086030][ T5781] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 2097.086057][ T5781] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8C is Bulk; changing to Interrupt [ 2097.086081][ T5781] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8C has invalid wMaxPacketSize 0 [ 2097.086104][ T5781] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2097.086133][ T5781] usb 3-1: config 168 interface 0 has no altsetting 0 [ 2097.088266][ T5781] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2097.088306][ T5781] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2097.088358][ T5781] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2097.088388][ T5781] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 2097.088416][ T5781] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8C is Bulk; changing to Interrupt [ 2097.088441][ T5781] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8C has invalid wMaxPacketSize 0 [ 2097.088478][ T5781] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2097.088507][ T5781] usb 3-1: config 168 interface 0 has no altsetting 0 [ 2097.290956][ T7112] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 2097.302592][ T7112] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 2097.518153][ T7112] usb 5-1: USB disconnect, device number 102 [ 2097.784072][T31353] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.8645'. [ 2098.051680][ T5714] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2098.264929][T31363] netlink: 116 bytes leftover after parsing attributes in process `syz.0.8648'. [ 2098.843294][ T5714] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2099.143919][ T5714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2099.143956][ T5714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2099.143999][ T5714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2099.195904][ T5714] usb 6-1: config 0 descriptor?? [ 2099.348212][ T5781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2099.397209][ T5781] usb 3-1: can't set config #168, error -71 [ 2099.425085][ T5781] usb 3-1: USB disconnect, device number 12 [ 2099.689148][T31372] nvme_fabrics: missing parameter 'transport=%s' [ 2099.689178][T31372] nvme_fabrics: missing parameter 'nqn=%s' [ 2099.731172][ T5714] cp2112 0003:10C4:EA90.0028: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 2099.855104][ T5714] cp2112 0003:10C4:EA90.0028: error requesting version [ 2099.858577][ T5714] cp2112 0003:10C4:EA90.0028: probe with driver cp2112 failed with error -32 [ 2099.880685][ T5714] usb 6-1: USB disconnect, device number 53 [ 2099.969544][T31380] fido_id[31380]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 2100.173648][T31394] nvme_fabrics: unknown parameter or missing value 'trsvci' in ctrl creation request [ 2100.790244][T31413] netlink: 116 bytes leftover after parsing attributes in process `syz.4.8661'. [ 2100.820639][T31413] hub 8-0:1.0: USB hub found [ 2100.826400][T31413] hub 8-0:1.0: 1 port detected [ 2101.661682][ T5781] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2101.754724][T31400] nvme nvme0: failed to connect socket: -512 [ 2101.780659][T31414] netlink: 116 bytes leftover after parsing attributes in process `syz.3.8659'. [ 2101.850005][T31408] netlink: 16054 bytes leftover after parsing attributes in process `syz.5.8662'. [ 2101.881638][ T5781] usb 3-1: Using ep0 maxpacket: 16 [ 2101.882703][ T5781] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2101.884208][ T5781] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2101.884239][ T5781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2101.887196][ T5781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2101.887230][ T5781] usb 3-1: Product: syz [ 2101.887248][ T5781] usb 3-1: Manufacturer: syz [ 2101.887265][ T5781] usb 3-1: SerialNumber: syz [ 2101.955800][ T5781] usb 3-1: config 0 descriptor?? [ 2101.974958][ T5781] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2101.974991][ T5781] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 2102.361966][T14437] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 2102.512850][T14437] usb 6-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 2102.514386][T14437] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2102.514410][T14437] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2102.514458][T14437] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2102.518496][T14437] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2102.518521][T14437] usb 6-1: Product: syz [ 2102.518538][T14437] usb 6-1: Manufacturer: syz [ 2102.518553][T14437] usb 6-1: SerialNumber: syz [ 2102.589656][ T37] audit: type=1326 audit(1786377540.333:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31422 comm="syz.4.8665" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30767e0d9 code=0x7ffc0000 [ 2102.589800][ T37] audit: type=1326 audit(1786377540.333:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31422 comm="syz.4.8665" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30767e0d9 code=0x7ffc0000 [ 2102.634301][ T37] audit: type=1326 audit(1786377540.343:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31422 comm="syz.4.8665" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30767e0d9 code=0x7ffc0000 [ 2102.634439][ T37] audit: type=1326 audit(1786377540.343:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31422 comm="syz.4.8665" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30767e0d9 code=0x7ffc0000 [ 2102.634510][ T37] audit: type=1326 audit(1786377540.353:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31422 comm="syz.4.8665" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30767e0d9 code=0x7ffc0000 [ 2102.634594][ T37] audit: type=1326 audit(1786377540.353:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31422 comm="syz.4.8665" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc30767e0d9 code=0x7ffc0000 [ 2102.634645][ T37] audit: type=1326 audit(1786377540.353:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31422 comm="syz.4.8665" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30767e0d9 code=0x7ffc0000 [ 2102.634758][ T37] audit: type=1326 audit(1786377540.363:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31422 comm="syz.4.8665" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30767e0d9 code=0x7ffc0000 [ 2102.634811][ T37] audit: type=1326 audit(1786377540.363:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31422 comm="syz.4.8665" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30767e0d9 code=0x7ffc0000 [ 2102.634924][ T37] audit: type=1326 audit(1786377540.363:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31422 comm="syz.4.8665" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fc30767e0d9 code=0x7ffc0000 [ 2102.662780][ T5781] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 2102.663148][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 2102.663317][ T5781] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 2102.663740][ T5781] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 2102.663758][ T5781] em28xx 3-1:0.0: No AC97 audio processor [ 2102.797244][T14437] uvcvideo 6-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 2102.797359][T14437] uvcvideo 6-1:1.0: No valid video chain found. [ 2102.930567][T14437] usb 6-1: USB disconnect, device number 54 [ 2102.959003][ T5781] usb 3-1: USB disconnect, device number 13 [ 2102.982261][ T5781] em28xx 3-1:0.0: Disconnecting em28xx [ 2103.029506][ C1] ------------[ cut here ]------------ [ 2103.029521][ C1] DEBUG_LOCKS_WARN_ON(1) [ 2103.029608][ C1] WARNING: kernel/locking/lockdep.c:238 at __lock_acquire+0x382/0x2ce0, CPU#1: ktimers/1/29 [ 2103.029691][ C1] Modules linked in: [ 2103.029724][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2103.029758][ C1] Tainted: [L]=SOFTLOCKUP [ 2103.029767][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2103.029782][ C1] RIP: 0010:__lock_acquire+0x389/0x2ce0 [ 2103.029819][ C1] Code: 83 3d fa 84 07 18 00 75 27 90 e8 a2 ae 1d 03 85 c0 74 1c 83 3d eb fd 0d 0e 00 75 13 48 8d 3d 3e 48 11 0e 48 c7 c6 d4 f6 99 8d <67> 48 0f b9 3a 90 31 c0 0f b6 98 c4 00 00 00 41 8b 45 20 25 ff 1f [ 2103.029837][ C1] RSP: 0018:ffffc90000a3f6b8 EFLAGS: 00010046 [ 2103.029858][ C1] RAX: 0000000000000001 RBX: 0000000000040000 RCX: ffff88801d2b3e00 [ 2103.029874][ C1] RDX: 0000000000000100 RSI: ffffffff8d99f6d4 RDI: ffffffff8fb2a8e0 [ 2103.029892][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000100 [ 2103.029906][ C1] R10: dffffc0000000000 R11: fffffbfff1f5ebd1 R12: 0000000000001134 [ 2103.029923][ C1] R13: ffff88801d2b4af8 R14: ffff88801d2b3e00 R15: ffff88801d2b4a08 [ 2103.029941][ C1] FS: 0000000000000000(0000) GS:ffff888125d46000(0000) knlGS:0000000000000000 [ 2103.029961][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2103.029977][ C1] CR2: 00007f4698ebee9c CR3: 000000005e660000 CR4: 00000000003526f0 [ 2103.029998][ C1] Call Trace: [ 2103.030007][ C1] [ 2103.030023][ C1] ? __lock_acquire+0x683/0x2ce0 [ 2103.030052][ C1] ? tcp_tsq_handler+0x29/0x200 [ 2103.030123][ C1] lock_acquire+0x106/0x350 [ 2103.030143][ C1] ? tcp_tsq_handler+0x29/0x200 [ 2103.030177][ C1] ? register_lock_class+0x31/0x2e0 [ 2103.030248][ C1] rt_spin_lock+0x83/0x400 [ 2103.030274][ C1] ? tcp_tsq_handler+0x29/0x200 [ 2103.030305][ C1] ? try_to_take_rt_mutex+0x842/0xb00 [ 2103.030332][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 2103.030356][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 2103.030429][ C1] tcp_tsq_handler+0x29/0x200 [ 2103.030463][ C1] tcp_tsq_workfn+0x384/0x410 [ 2103.030497][ C1] ? __pfx_tcp_tsq_workfn+0x10/0x10 [ 2103.030531][ C1] ? rcu_is_watching+0x15/0xb0 [ 2103.030559][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 2103.030585][ C1] process_scheduled_works+0xa8e/0x14e0 [ 2103.030624][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2103.030648][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 2103.030685][ C1] bh_worker+0x46a/0x880 [ 2103.030742][ C1] tasklet_action+0xc/0x70 [ 2103.030770][ C1] handle_softirqs+0x1d9/0x6c0 [ 2103.030801][ C1] run_ktimerd+0x69/0x100 [ 2103.030829][ C1] smpboot_thread_fn+0x57c/0xa80 [ 2103.030884][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 2103.030916][ C1] kthread+0x388/0x470 [ 2103.030948][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2103.030975][ C1] ? __pfx_kthread+0x10/0x10 [ 2103.031006][ C1] ret_from_fork+0x514/0xb70 [ 2103.031088][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2103.031121][ C1] ? __switch_to+0xc89/0x1420 [ 2103.031172][ C1] ? __pfx_kthread+0x10/0x10 [ 2103.031204][ C1] ret_from_fork_asm+0x1a/0x30 [ 2103.031247][ C1] [ 2103.031265][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2103.031288][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2103.031322][ C1] Tainted: [L]=SOFTLOCKUP [ 2103.031331][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2103.031346][ C1] Call Trace: [ 2103.031355][ C1] [ 2103.031370][ C1] vpanic+0x56c/0xa60 [ 2103.031415][ C1] ? __pfx__printk+0x10/0x10 [ 2103.031439][ C1] ? __pfx_vpanic+0x10/0x10 [ 2103.031474][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 2103.031501][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 2103.031528][ C1] panic+0xc5/0xd0 [ 2103.031559][ C1] ? __pfx_panic+0x10/0x10 [ 2103.031595][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 2103.031631][ C1] __warn+0x315/0x4c0 [ 2103.031662][ C1] ? __lock_acquire+0x382/0x2ce0 [ 2103.031685][ C1] ? __lock_acquire+0x382/0x2ce0 [ 2103.031705][ C1] __report_bug+0x276/0x570 [ 2103.031807][ C1] ? __lock_acquire+0x382/0x2ce0 [ 2103.031829][ C1] ? __pfx___report_bug+0x10/0x10 [ 2103.031882][ C1] ? net_rx_action+0x621/0xd70 [ 2103.031934][ C1] ? handle_softirqs+0x1d9/0x6c0 [ 2103.031960][ C1] ? run_ktimerd+0x69/0x100 [ 2103.031989][ C1] ? smpboot_thread_fn+0x57c/0xa80 [ 2103.032017][ C1] ? kthread+0x388/0x470 [ 2103.032046][ C1] ? ret_from_fork+0x514/0xb70 [ 2103.032079][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 2103.032117][ C1] report_bug_entry+0x19a/0x290 [ 2103.032150][ C1] ? __lock_acquire+0x389/0x2ce0 [ 2103.032171][ C1] ? __lock_acquire+0x38e/0x2ce0 [ 2103.032191][ C1] handle_bug+0xce/0x200 [ 2103.032213][ C1] exc_invalid_op+0x1a/0x50 [ 2103.032234][ C1] asm_exc_invalid_op+0x1a/0x20 [ 2103.032258][ C1] RIP: 0010:__lock_acquire+0x389/0x2ce0 [ 2103.032283][ C1] Code: 83 3d fa 84 07 18 00 75 27 90 e8 a2 ae 1d 03 85 c0 74 1c 83 3d eb fd 0d 0e 00 75 13 48 8d 3d 3e 48 11 0e 48 c7 c6 d4 f6 99 8d <67> 48 0f b9 3a 90 31 c0 0f b6 98 c4 00 00 00 41 8b 45 20 25 ff 1f [ 2103.032305][ C1] RSP: 0018:ffffc90000a3f6b8 EFLAGS: 00010046 [ 2103.032328][ C1] RAX: 0000000000000001 RBX: 0000000000040000 RCX: ffff88801d2b3e00 [ 2103.032347][ C1] RDX: 0000000000000100 RSI: ffffffff8d99f6d4 RDI: ffffffff8fb2a8e0 [ 2103.032373][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000100 [ 2103.032388][ C1] R10: dffffc0000000000 R11: fffffbfff1f5ebd1 R12: 0000000000001134 [ 2103.032405][ C1] R13: ffff88801d2b4af8 R14: ffff88801d2b3e00 R15: ffff88801d2b4a08 [ 2103.032433][ C1] ? __lock_acquire+0x36e/0x2ce0 [ 2103.032460][ C1] ? __lock_acquire+0x683/0x2ce0 [ 2103.032489][ C1] ? tcp_tsq_handler+0x29/0x200 [ 2103.032523][ C1] lock_acquire+0x106/0x350 [ 2103.032544][ C1] ? tcp_tsq_handler+0x29/0x200 [ 2103.032580][ C1] ? register_lock_class+0x31/0x2e0 [ 2103.032621][ C1] rt_spin_lock+0x83/0x400 [ 2103.032647][ C1] ? tcp_tsq_handler+0x29/0x200 [ 2103.032681][ C1] ? try_to_take_rt_mutex+0x842/0xb00 [ 2103.032709][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 2103.032738][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 2103.032772][ C1] tcp_tsq_handler+0x29/0x200 [ 2103.032808][ C1] tcp_tsq_workfn+0x384/0x410 [ 2103.032844][ C1] ? __pfx_tcp_tsq_workfn+0x10/0x10 [ 2103.032879][ C1] ? rcu_is_watching+0x15/0xb0 [ 2103.032907][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 2103.032933][ C1] process_scheduled_works+0xa8e/0x14e0 [ 2103.032974][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2103.032999][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 2103.033039][ C1] bh_worker+0x46a/0x880 [ 2103.033072][ C1] tasklet_action+0xc/0x70 [ 2103.033099][ C1] handle_softirqs+0x1d9/0x6c0 [ 2103.033130][ C1] run_ktimerd+0x69/0x100 [ 2103.033160][ C1] smpboot_thread_fn+0x57c/0xa80 [ 2103.033190][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 2103.033222][ C1] kthread+0x388/0x470 [ 2103.033254][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2103.033283][ C1] ? __pfx_kthread+0x10/0x10 [ 2103.033316][ C1] ret_from_fork+0x514/0xb70 [ 2103.033352][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2103.033393][ C1] ? __switch_to+0xc89/0x1420 [ 2103.033422][ C1] ? __pfx_kthread+0x10/0x10 [ 2103.033454][ C1] ret_from_fork_asm+0x1a/0x30 [ 2103.033496][ C1] [ 2103.034103][ C1] Kernel Offset: disabled