last executing test programs: 14.004388046s ago: executing program 2 (id=361): socket$inet6(0xa, 0x80003, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r2, 0x6d4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "00ee"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12.238904442s ago: executing program 2 (id=363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = syz_open_dev$usbmon(0x0, 0x7, 0x0) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000940)=""/4096, 0x79c5}], 0x1) 11.053565768s ago: executing program 3 (id=365): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYRESOCT=r0], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b3108000840"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 10.756193272s ago: executing program 3 (id=366): socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setattr(r1, &(0x7f00000000c0)={0x38, 0x3, 0x13, 0xffff9509, 0x5, 0x0, 0x9, 0x0, 0x7fffffff, 0x2}, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000340)='.\x00', 0xa50003d1) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r5, r6}, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x2c) 10.691980055s ago: executing program 0 (id=368): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000580)={0xfffffffc, 0x3, 0xb17, 0x8, 0x5, 0xc1c}) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x4, @vifc_lcl_addr=@empty, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r3, &(0x7f0000000280)='0', 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009800c000180080001"], 0xb0}}, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) 9.592044587s ago: executing program 3 (id=369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000040, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="aefdda9d240300005a90f57f07703aeff0f64ebbee010052f436dd2a000000000000000000000005000009d9", 0x2c}], 0x1) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, r9, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0)={0x27, r9, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r8) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24004840) 9.08727686s ago: executing program 0 (id=371): bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000180000000800000040"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) 8.150605514s ago: executing program 0 (id=373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000040, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="aefdda9d240300005a90f57f07703aeff0f64ebbee010052f436dd2a000000000000000000000005000009d9", 0x2c}], 0x1) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, r8, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r9, &(0x7f00000000c0)={0x27, r8, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r7) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24004840) 6.685117042s ago: executing program 0 (id=375): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYRESOCT=r0], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b3108000840"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 6.551410508s ago: executing program 1 (id=376): r0 = socket$inet6(0xa, 0x1, 0xfffffdfe) r1 = socket(0x10, 0x80002, 0x0) unshare(0x20040600) socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad60002784", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 6.397504456s ago: executing program 3 (id=377): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) syz_open_procfs$namespace(0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='sys/class/net/bridge_slave_0/brport/multicast_to_unicast\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) 6.396617436s ago: executing program 0 (id=378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x4, 0x0, &(0x7f0000000500)=[@enter_looper], 0x0, 0x0, &(0x7f0000000580)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.250894272s ago: executing program 1 (id=379): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000000740)="170000000200010000ffbe8c5ee17688a2006c000301000a000002a2576e5ed9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000fc0607bdca67a622c45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c56835382e9d969ba5149e9e90539062a80e605007f71174aa964f3c63e5a1b47b63a6323ded241482cfe17c3778a658cfecb61406ae729", 0xbf) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x12, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6.172227096s ago: executing program 3 (id=380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 4.781657663s ago: executing program 0 (id=381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x800) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r3 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x4000000) keyctl$read(0xb, r3, &(0x7f00000004c0)=""/208, 0xd0) 3.626594458s ago: executing program 3 (id=382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r5 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r4, &(0x7f0000000300)=[{0x0}], 0x1) 3.280548534s ago: executing program 1 (id=383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000040, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="aefdda9d240300005a90f57f07703aeff0f64ebbee010052f436dd2a000000000000000000000005000009d9", 0x2c}], 0x1) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, r8, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r9, &(0x7f00000000c0)={0x27, r8, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r7) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24004840) 2.123121079s ago: executing program 1 (id=384): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x45, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[], 0x12) 2.088811981s ago: executing program 2 (id=385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000040, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="aefdda9d240300005a90f57f07703aeff0f64ebbee010052f436dd2a000000000000000000000005000009d9", 0x2c}], 0x1) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, r9, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0)={0x27, r9, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r8) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24004840) 1.721402588s ago: executing program 1 (id=386): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES8], 0x21, 0x1cf, &(0x7f0000000780)="$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") 822.743851ms ago: executing program 2 (id=387): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000380)='8\n', 0x2) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000400)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507190029658100c0", 0x3f) close(0xffffffffffffffff) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='dummy_udc.0\n', 0xc) 419.08911ms ago: executing program 2 (id=388): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='sys/class/net/bridge_slave_0/brport/multicast_to_unicast\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) 200.6196ms ago: executing program 1 (id=389): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x3}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000200)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 0s ago: executing program 2 (id=390): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000080)={0xf0003e7, 0x1, 0x200006, 0xffffffffffffffff, 0xffe7, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) syz_emit_ethernet(0xae, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8937, &(0x7f0000000640)={'tunl0\x00', 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 73.072726][ T5763] cgroup: Unknown subsys name 'net' [ 73.203540][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.842159][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.431988][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.439892][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.447854][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.456548][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.476582][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.486588][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.497699][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.502243][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.506711][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.513584][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.520541][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.533817][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.534798][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.541241][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.548828][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.556399][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.562599][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.570297][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.584819][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.592258][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.601398][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.601814][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.617106][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.624658][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.048592][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 77.095337][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 77.202544][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 77.235438][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 77.259146][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.266820][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.274163][ T5775] bridge_slave_0: entered allmulticast mode [ 77.281815][ T5775] bridge_slave_0: entered promiscuous mode [ 77.330118][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.339882][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.347106][ T5775] bridge_slave_1: entered allmulticast mode [ 77.353875][ T5775] bridge_slave_1: entered promiscuous mode [ 77.417919][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.425124][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.434790][ T5774] bridge_slave_0: entered allmulticast mode [ 77.441726][ T5774] bridge_slave_0: entered promiscuous mode [ 77.450731][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.457916][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.465072][ T5774] bridge_slave_1: entered allmulticast mode [ 77.471985][ T5774] bridge_slave_1: entered promiscuous mode [ 77.496904][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.537170][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.571450][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.600478][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.608366][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.615518][ T5776] bridge_slave_0: entered allmulticast mode [ 77.622660][ T5776] bridge_slave_0: entered promiscuous mode [ 77.631475][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.638679][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.645859][ T5776] bridge_slave_1: entered allmulticast mode [ 77.653531][ T5776] bridge_slave_1: entered promiscuous mode [ 77.661710][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.682232][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.689539][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.696778][ T5777] bridge_slave_0: entered allmulticast mode [ 77.703617][ T5777] bridge_slave_0: entered promiscuous mode [ 77.740411][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.748138][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.755261][ T5777] bridge_slave_1: entered allmulticast mode [ 77.762305][ T5777] bridge_slave_1: entered promiscuous mode [ 77.771901][ T5775] team0: Port device team_slave_0 added [ 77.792505][ T5774] team0: Port device team_slave_0 added [ 77.812489][ T5775] team0: Port device team_slave_1 added [ 77.830043][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.843469][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.854377][ T5774] team0: Port device team_slave_1 added [ 77.921838][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.928907][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.955189][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.970305][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.983352][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.993153][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.000336][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.026353][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.045673][ T5776] team0: Port device team_slave_0 added [ 78.054613][ T5776] team0: Port device team_slave_1 added [ 78.062291][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.069715][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.095787][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.122698][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.131716][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.158117][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.190947][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.198352][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.224664][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.261776][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.268862][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.294895][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.310830][ T5777] team0: Port device team_slave_0 added [ 78.360647][ T5774] hsr_slave_0: entered promiscuous mode [ 78.367905][ T5774] hsr_slave_1: entered promiscuous mode [ 78.376825][ T5777] team0: Port device team_slave_1 added [ 78.387127][ T5775] hsr_slave_0: entered promiscuous mode [ 78.393366][ T5775] hsr_slave_1: entered promiscuous mode [ 78.400188][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.408071][ T5775] Cannot create hsr debugfs directory [ 78.473568][ T5776] hsr_slave_0: entered promiscuous mode [ 78.482744][ T5776] hsr_slave_1: entered promiscuous mode [ 78.488981][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.497226][ T5776] Cannot create hsr debugfs directory [ 78.531017][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.538058][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.564094][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.577362][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.584322][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.611182][ T5782] Bluetooth: hci0: command tx timeout [ 78.611411][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.617349][ T5086] Bluetooth: hci2: command tx timeout [ 78.676317][ T5086] Bluetooth: hci3: command tx timeout [ 78.682395][ T5782] Bluetooth: hci1: command tx timeout [ 78.802751][ T5777] hsr_slave_0: entered promiscuous mode [ 78.810824][ T5777] hsr_slave_1: entered promiscuous mode [ 78.817234][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.824795][ T5777] Cannot create hsr debugfs directory [ 79.053859][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.082119][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.093914][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.122287][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.208920][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.221302][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.239651][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.251550][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.328445][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.351635][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.382514][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.393946][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.444892][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.463327][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.473875][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.500114][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.583512][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.625071][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.666550][ T2913] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.673905][ T2913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.709490][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.719388][ T2913] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.726609][ T2913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.755364][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.774865][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.808252][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.815403][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.891146][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.898297][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.918742][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.954241][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.961481][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.974170][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.981404][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.040885][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.137889][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.167022][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.174156][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.206929][ T2913] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.214131][ T2913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.329215][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.510995][ T5775] veth0_vlan: entered promiscuous mode [ 80.557961][ T5775] veth1_vlan: entered promiscuous mode [ 80.625136][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.677287][ T5782] Bluetooth: hci0: command tx timeout [ 80.682765][ T5782] Bluetooth: hci2: command tx timeout [ 80.738913][ T5775] veth0_macvtap: entered promiscuous mode [ 80.757132][ T5782] Bluetooth: hci1: command tx timeout [ 80.757143][ T5086] Bluetooth: hci3: command tx timeout [ 80.771726][ T5775] veth1_macvtap: entered promiscuous mode [ 80.793443][ T5776] veth0_vlan: entered promiscuous mode [ 80.821384][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.839773][ T5776] veth1_vlan: entered promiscuous mode [ 80.879499][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.917856][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.940553][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.963412][ T5776] veth0_macvtap: entered promiscuous mode [ 80.972641][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.982525][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.991550][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.001090][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.025533][ T5776] veth1_macvtap: entered promiscuous mode [ 81.033847][ T5774] veth0_vlan: entered promiscuous mode [ 81.058406][ T5774] veth1_vlan: entered promiscuous mode [ 81.074021][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.088244][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.099560][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.132676][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.143343][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.155696][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.169395][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.178792][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.187635][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.196368][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.260651][ T5777] veth0_vlan: entered promiscuous mode [ 81.342081][ T5777] veth1_vlan: entered promiscuous mode [ 81.353656][ T5774] veth0_macvtap: entered promiscuous mode [ 81.385600][ T5774] veth1_macvtap: entered promiscuous mode [ 81.415325][ T2913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.424767][ T2913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.470231][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.483239][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.493540][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.504393][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.516505][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.540289][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.548034][ T5777] veth0_macvtap: entered promiscuous mode [ 81.554176][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.561370][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.574508][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.586194][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.598882][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.609823][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.647724][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.659546][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.669042][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.678062][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.692512][ T5777] veth1_macvtap: entered promiscuous mode [ 81.719673][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.732184][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.754004][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.765725][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.779546][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.790169][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.801348][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.813643][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.825059][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.835615][ T2913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.852745][ T2913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.875081][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.893055][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.903447][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.913965][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.923863][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.934520][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.952214][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.984064][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.993026][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.004411][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.013968][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.114148][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.141803][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.311316][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.338257][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.361653][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.498905][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.206071][ T5086] Bluetooth: hci0: command tx timeout [ 83.211638][ T5782] Bluetooth: hci2: command tx timeout [ 83.211754][ T5787] Bluetooth: hci1: command tx timeout [ 83.211758][ T5780] Bluetooth: hci3: command tx timeout [ 83.244755][ T5841] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 83.244755][ T5841] program syz.2.3 not setting count and/or reply_len properly [ 83.322353][ T5839] syz.2.3 (5839): drop_caches: 2 [ 83.563570][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.669076][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.788125][ T5839] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 84.034216][ T5850] syz.1.6: attempt to access beyond end of device [ 84.034216][ T5850] loop0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 84.144473][ T5850] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 84.206709][ T5850] device-mapper: ioctl: error adding target to table [ 84.288095][ T5858] process 'syz.3.4' launched './file1' with NULL argv: empty string added [ 84.323104][ T5850] device-mapper: table: 248:1: thin: Error opening pool device (-ENOENT) [ 84.343403][ T5850] device-mapper: ioctl: error adding target to table [ 84.350888][ T5855] syz.2.7 (5855) used greatest stack depth: 20824 bytes left [ 84.823944][ T5869] binder: 5867:5869 ioctl c0306201 0 returned -14 [ 84.839582][ T5869] syz.2.8[5869]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 85.436253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.155831][ T5782] Bluetooth: hci2: command tx timeout [ 86.161470][ T5782] Bluetooth: hci1: command tx timeout [ 86.167054][ T5782] Bluetooth: hci0: command tx timeout [ 86.172431][ T5782] Bluetooth: hci3: command tx timeout [ 86.198818][ T5833] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.215173][ T5869] loop2: detected capacity change from 0 to 1764 [ 86.446333][ T5833] usb 1-1: Using ep0 maxpacket: 8 [ 86.512703][ T5833] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 86.540908][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.559545][ T5876] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET) [ 86.646821][ T5833] pvrusb2: Hardware description: Terratec Grabster AV400 [ 86.675715][ T5833] pvrusb2: ********** [ 86.697735][ T5833] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 86.726313][ T5833] pvrusb2: Important functionality might not be entirely working. [ 86.734242][ T5833] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 86.776516][ T5833] pvrusb2: ********** [ 86.851752][ T2322] pvrusb2: Invalid write control endpoint [ 86.917772][ T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 86.985682][ T2322] pvrusb2: Invalid write control endpoint [ 86.992923][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 87.004223][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 87.012074][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 87.023337][ T2322] pvrusb2: Device being rendered inoperable [ 87.030949][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 87.039096][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 87.050414][ T2322] pvrusb2: Attached sub-driver cx25840 [ 87.056064][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 87.066486][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 87.142641][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.166242][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 87.206079][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.232162][ T5860] pvrusb2: Attempted to execute control transfer when device not ok [ 87.242799][ T9] usb 4-1: config 0 descriptor?? [ 87.323283][ T5872] usb 1-1: USB disconnect, device number 2 [ 87.484953][ T9] ath6kl: Failed to submit usb control message: -71 [ 87.501956][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 87.522136][ T9] ath6kl: Unable to send get target info: -71 [ 87.542574][ T9] ath6kl: Failed to init ath6kl core: -71 [ 87.568457][ T9] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 87.606954][ T9] usb 4-1: USB disconnect, device number 2 [ 87.809963][ T5893] loop1: detected capacity change from 0 to 128 [ 88.143748][ T5893] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.196947][ T5782] Bluetooth: hci2: command tx timeout [ 88.394954][ T5893] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.898825][ T5893] syz.1.16 (pid 5893) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 89.146787][ T5893] fscrypt (loop1, inode 12): Error allocating 'adiantum(xchacha12,aes)' transform: -4 [ 89.284139][ T5776] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.704298][ T5926] loop1: detected capacity change from 0 to 32768 [ 91.853111][ T5924] ERROR: (device loop1): diAllocAG: ipimap->i_size is wrong [ 91.853111][ T5924] [ 92.005515][ T5924] ERROR: (device loop1): remounting filesystem as read-only [ 92.013060][ T5924] ialloc: diAlloc returned -5! [ 92.412129][ T8] cfg80211: failed to load regulatory.db [ 98.832670][ T5974] loop1: detected capacity change from 0 to 32768 [ 100.128973][ T5972] ERROR: (device loop1): diAllocAG: ipimap->i_size is wrong [ 100.128973][ T5972] [ 100.142772][ T5972] ERROR: (device loop1): remounting filesystem as read-only [ 100.150130][ T5972] ialloc: diAlloc returned -5! [ 100.348465][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 100.374124][ T5982] syz.0.43: attempt to access beyond end of device [ 100.374124][ T5982] loop0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 100.408427][ T5982] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 100.417713][ T5982] device-mapper: ioctl: error adding target to table [ 100.446185][ T5990] Zero length message leads to an empty skb [ 100.449922][ T5982] syz.0.43: attempt to access beyond end of device [ 100.449922][ T5982] loop0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 100.535493][ T5982] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EIO) [ 100.556342][ T5982] device-mapper: ioctl: error adding target to table [ 101.638719][ T27] audit: type=1800 audit(1790149999.209:2): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.53" name="UDC" dev="configfs" ino=7538 res=0 errno=0 [ 101.662719][ T6016] Config c/1 of g1 needs at least one function. [ 101.671345][ T6016] udc dummy_udc.0: failed to start g1: -22 [ 101.677905][ T6016] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 101.717084][ T6016] UDC core: g1: couldn't find an available UDC or it's busy [ 101.722085][ T6020] loop2: detected capacity change from 0 to 128 [ 103.312558][ T6034] sched: RT throttling activated [ 104.293028][ T5782] Bluetooth: hci1: command tx timeout [ 107.117101][ T6052] loop2: detected capacity change from 0 to 32768 [ 108.068141][ T6052] ERROR: (device loop2): diAllocAG: ipimap->i_size is wrong [ 108.068141][ T6052] [ 108.115194][ T6052] ERROR: (device loop2): remounting filesystem as read-only [ 108.127680][ T6052] ialloc: diAlloc returned -5! [ 108.480047][ T6061] syz.0.67: attempt to access beyond end of device [ 108.480047][ T6061] loop0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 108.601637][ T6061] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 108.604319][ T6063] syz.0.67: attempt to access beyond end of device [ 108.604319][ T6063] loop0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 108.691450][ T6061] device-mapper: ioctl: error adding target to table [ 108.896511][ T6063] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EIO) [ 108.927310][ T6063] device-mapper: ioctl: error adding target to table [ 110.131268][ T5782] Bluetooth: hci3: command tx timeout [ 110.626585][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 111.168209][ T6089] FAULT_INJECTION: forcing a failure. [ 111.168209][ T6089] name fail_futex, interval 1, probability 0, space 0, times 1 [ 111.197000][ T6089] CPU: 0 PID: 6089 Comm: syz.2.78 Not tainted syzkaller #0 [ 111.204282][ T6089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.214373][ T6089] Call Trace: [ 111.217681][ T6089] [ 111.220641][ T6089] dump_stack_lvl+0x18c/0x250 [ 111.225368][ T6089] ? show_regs_print_info+0x20/0x20 [ 111.230612][ T6089] ? load_image+0x420/0x420 [ 111.235171][ T6089] ? min_deadline_cb_rotate+0x150/0x150 [ 111.240762][ T6089] should_fail_ex+0x394/0x4c0 [ 111.245495][ T6089] get_futex_key+0x136/0x1030 [ 111.250209][ T6089] ? futex_setup_timer+0xc0/0xc0 [ 111.255154][ T6089] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 111.261146][ T6089] ? __lock_acquire+0x7d80/0x7d80 [ 111.266192][ T6089] ? lock_chain_count+0x20/0x20 [ 111.271067][ T6089] futex_wait_setup+0xbc/0x270 [ 111.275843][ T6089] ? futex_wait_multiple+0x920/0x920 [ 111.281145][ T6089] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 111.287059][ T6089] ? _raw_spin_unlock+0x40/0x40 [ 111.291927][ T6089] futex_wait+0x1bc/0x5c0 [ 111.296299][ T6089] ? futex_wait_setup+0x270/0x270 [ 111.301355][ T6089] ? lockdep_hardirqs_on+0x98/0x150 [ 111.306573][ T6089] do_futex+0x2ff/0x3e0 [ 111.310743][ T6089] ? __ia32_sys_get_robust_list+0x110/0x110 [ 111.316652][ T6089] __se_sys_futex+0x3a9/0x440 [ 111.321350][ T6089] ? __x64_sys_futex+0xf0/0xf0 [ 111.326244][ T6089] ? __x64_sys_futex+0x21/0xf0 [ 111.331046][ T6089] do_syscall_64+0x55/0xb0 [ 111.335499][ T6089] ? clear_bhb_loop+0x40/0x90 [ 111.340199][ T6089] ? clear_bhb_loop+0x40/0x90 [ 111.344896][ T6089] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.350808][ T6089] RIP: 0033:0x7fdafdf9e159 [ 111.355235][ T6089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.374851][ T6089] RSP: 002b:00007fdafef320e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.383284][ T6089] RAX: ffffffffffffffda RBX: 00007fdafe225fa8 RCX: 00007fdafdf9e159 [ 111.391285][ T6089] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdafe225fa8 [ 111.399291][ T6089] RBP: 00007fdafe225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 111.407282][ T6089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.415265][ T6089] R13: 00007fdafe226038 R14: 00007ffe3966e7a0 R15: 00007ffe3966e888 [ 111.423264][ T6089] [ 111.680949][ T6096] input: syz1 as /devices/virtual/input/input5 [ 114.156410][ T27] audit: type=1326 audit(1790150011.619:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.2.89" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdafdf9e159 code=0x7fc00000 [ 114.251968][ T27] audit: type=1326 audit(1790150011.619:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.2.89" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdafdf9e159 code=0x7fc00000 [ 114.642967][ T27] audit: type=1326 audit(1790150011.629:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.2.89" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdafdf9e159 code=0x7fc00000 [ 114.939262][ T6136] 9pnet: Could not find request transport: fd0x0000000000000003 [ 116.059855][ T6157] sctp: failed to load transform for md5: -2 [ 116.531154][ T6172] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 117.147826][ T6185] 9pnet: Could not find request transport: fd0x0000000000000003 [ 119.207388][ T6204] sctp: failed to load transform for md5: -2 [ 119.779253][ T6221] 9pnet: Could not find request transport: fd0x0000000000000003 [ 120.367165][ T6232] netdevsim0: mtu less than device minimum [ 120.915955][ T6241] capability: warning: `syz.1.122' uses deprecated v2 capabilities in a way that may be insecure [ 121.428089][ T6252] 9pnet_fd: Insufficient options for proto=fd [ 121.835479][ T6261] netdevsim0: mtu less than device minimum [ 121.943315][ T6257] zram0: detected capacity change from 0 to 8 [ 123.107097][ T6279] 9pnet_fd: Insufficient options for proto=fd [ 123.270180][ T6277] loop2: detected capacity change from 0 to 32768 [ 123.306383][ T6277] read_mapping_page failed! [ 123.311380][ T6277] ERROR: (device loop2): txCommit: [ 123.311380][ T6277] [ 123.355887][ T6282] ======================================================= [ 123.355887][ T6282] WARNING: The mand mount option has been deprecated and [ 123.355887][ T6282] and is ignored by this kernel. Remove the mand [ 123.355887][ T6282] option from the mount to silence this warning. [ 123.355887][ T6282] ======================================================= [ 123.504853][ T6284] netdevsim0: mtu less than device minimum [ 125.041054][ T6302] loop1: detected capacity change from 0 to 64 [ 125.146522][ T6302] Bad inode number on dev loop1: 6 is out of range [ 125.449831][ T6311] 9pnet_fd: Insufficient options for proto=fd [ 125.464245][ T6309] syzkaller0: entered promiscuous mode [ 125.476852][ T6309] syzkaller0: entered allmulticast mode [ 125.867884][ T6318] netdevsim0: mtu less than device minimum [ 126.423798][ T6328] loop0: detected capacity change from 0 to 128 [ 127.215615][ T6334] FAULT_INJECTION: forcing a failure. [ 127.215615][ T6334] name failslab, interval 1, probability 0, space 0, times 1 [ 127.228440][ T6334] CPU: 0 PID: 6334 Comm: syz.1.156 Not tainted syzkaller #0 [ 127.235772][ T6334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.245869][ T6334] Call Trace: [ 127.249185][ T6334] [ 127.252161][ T6334] dump_stack_lvl+0x18c/0x250 [ 127.256906][ T6334] ? show_regs_print_info+0x20/0x20 [ 127.262167][ T6334] ? load_image+0x420/0x420 [ 127.266718][ T6334] ? __lock_acquire+0x7d80/0x7d80 [ 127.271772][ T6334] should_fail_ex+0x394/0x4c0 [ 127.276484][ T6334] should_failslab+0x9/0x20 [ 127.281033][ T6334] slab_pre_alloc_hook+0x59/0x300 [ 127.286087][ T6334] ? key_alloc+0x34a/0x1030 [ 127.290612][ T6334] ? key_alloc+0x34a/0x1030 [ 127.295133][ T6334] __kmem_cache_alloc_node+0x53/0x250 [ 127.300523][ T6334] ? slab_post_alloc_hook+0x86/0x4d0 [ 127.305828][ T6334] ? key_alloc+0x34a/0x1030 [ 127.310350][ T6334] __kmalloc_node_track_caller+0xa4/0x230 [ 127.316101][ T6334] kmemdup+0x2b/0x70 [ 127.320035][ T6334] key_alloc+0x34a/0x1030 [ 127.324396][ T6334] keyring_alloc+0x45/0xb0 [ 127.328852][ T6334] lookup_user_key+0x428/0x1140 [ 127.333733][ T6334] ? lookup_user_key_possessed+0x40/0x40 [ 127.339394][ T6334] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 127.345402][ T6334] ? __might_fault+0xaa/0x120 [ 127.350362][ T6334] ? __might_fault+0xc6/0x120 [ 127.355050][ T6334] ? __might_fault+0xaa/0x120 [ 127.359749][ T6334] __se_sys_add_key+0x315/0x410 [ 127.364619][ T6334] ? __x64_sys_add_key+0xc0/0xc0 [ 127.369578][ T6334] ? lockdep_hardirqs_on+0x98/0x150 [ 127.374792][ T6334] ? __x64_sys_add_key+0x20/0xc0 [ 127.379746][ T6334] do_syscall_64+0x55/0xb0 [ 127.384177][ T6334] ? clear_bhb_loop+0x40/0x90 [ 127.388866][ T6334] ? clear_bhb_loop+0x40/0x90 [ 127.393556][ T6334] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.399464][ T6334] RIP: 0033:0x7f43c939e159 [ 127.403891][ T6334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.423509][ T6334] RSP: 002b:00007f43ca344028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 127.431964][ T6334] RAX: ffffffffffffffda RBX: 00007f43c9625fa0 RCX: 00007f43c939e159 [ 127.439948][ T6334] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 127.447935][ T6334] RBP: 00007f43c943506b R08: ffffffffffffffff R09: 0000000000000000 [ 127.455915][ T6334] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 127.463893][ T6334] R13: 00007f43c9626038 R14: 00007f43c9625fa0 R15: 00007ffecef5f618 [ 127.471895][ T6334] [ 127.717862][ T6340] warning: `syz.0.157' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 127.767465][ T6344] netdevsim0: mtu less than device minimum [ 129.718091][ T6377] ip_tables: iptables: counters copy to user failed while replacing table [ 129.738065][ T5782] Bluetooth: hci1: command tx timeout [ 131.236832][ T5782] Bluetooth: hci3: command tx timeout [ 132.108721][ T6404] overlayfs: missing 'lowerdir' [ 132.812807][ T6406] loop0: detected capacity change from 0 to 512 [ 133.364756][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.393746][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.393486][ T6414] zram: Can't change algorithm for initialized device [ 135.403182][ T6414] zram: Cannot change disksize for initialized device [ 136.636201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 139.258793][ T6498] zram: Can't change algorithm for initialized device [ 139.303414][ T6498] zram: Cannot change disksize for initialized device [ 139.629577][ T27] audit: type=1326 audit(1790150037.199:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.3.203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8021f9e159 code=0x7ffc0000 [ 139.682807][ T27] audit: type=1326 audit(1790150037.199:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.3.203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8021f9e159 code=0x7ffc0000 [ 139.735658][ T27] audit: type=1326 audit(1790150037.239:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.3.203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8021f9e159 code=0x7ffc0000 [ 139.737296][ T6525] syzkaller0: entered promiscuous mode [ 139.793895][ T27] audit: type=1326 audit(1790150037.259:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.3.203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8021f9e159 code=0x7ffc0000 [ 139.806229][ T6525] syzkaller0: entered allmulticast mode [ 139.819776][ T27] audit: type=1326 audit(1790150037.259:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.3.203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8021f9e159 code=0x7ffc0000 [ 139.853738][ T27] audit: type=1326 audit(1790150037.289:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6524 comm="syz.3.203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8021f5e98e code=0x7ffc0000 [ 139.888591][ T27] audit: type=1326 audit(1790150037.349:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.3.203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f8021f9e159 code=0x7ffc0000 [ 139.923692][ T27] audit: type=1326 audit(1790150037.349:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.3.203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8021f9e159 code=0x7ffc0000 [ 139.955510][ T27] audit: type=1326 audit(1790150037.349:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.3.203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f8021f9e159 code=0x7ffc0000 [ 139.984686][ T27] audit: type=1326 audit(1790150037.349:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.3.203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8021f9e159 code=0x7ffc0000 [ 141.473796][ T6537] syzkaller0: entered promiscuous mode [ 141.484303][ T6537] syzkaller0: entered allmulticast mode [ 141.945453][ T6549] loop1: detected capacity change from 0 to 256 [ 141.968225][ T6546] zram: Can't change algorithm for initialized device [ 142.002529][ T6546] zram: Cannot change disksize for initialized device [ 142.283610][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.216'. [ 143.627605][ T6568] syzkaller0: entered promiscuous mode [ 143.633155][ T6568] syzkaller0: entered allmulticast mode [ 143.848756][ T6575] netdevsim0: mtu less than device minimum [ 143.924806][ T6577] loop1: detected capacity change from 0 to 1024 [ 145.625631][ T6602] netlink: 48 bytes leftover after parsing attributes in process `syz.1.232'. [ 145.730510][ T6604] syzkaller0: entered promiscuous mode [ 145.736058][ T6604] syzkaller0: entered allmulticast mode [ 149.455054][ T6630] zram: Can't change algorithm for initialized device [ 149.469818][ T6630] zram: Cannot change disksize for initialized device [ 151.137202][ T6638] loop2: detected capacity change from 0 to 32768 [ 151.479267][ T6636] ERROR: (device loop2): diAllocAG: ipimap->i_size is wrong [ 151.479267][ T6636] [ 151.529960][ T6636] ERROR: (device loop2): remounting filesystem as read-only [ 151.537593][ T6636] ialloc: diAlloc returned -5! [ 152.326479][ T6653] syzkaller0: entered promiscuous mode [ 152.337378][ T6653] syzkaller0: entered allmulticast mode [ 156.836215][ T789] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 157.037797][ T789] usb 1-1: not running at top speed; connect to a high speed hub [ 157.067128][ T789] usb 1-1: config index 0 descriptor too short (expected 43, got 25) [ 157.086211][ T789] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.128269][ T789] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 157.166644][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 157.189784][ T789] usb 1-1: Product: syz [ 157.195133][ T789] usb 1-1: Manufacturer: syz [ 157.645047][ T6700] loop2: detected capacity change from 0 to 32768 [ 157.701741][ T6700] read_mapping_page failed! [ 157.706491][ T6700] ERROR: (device loop2): txCommit: [ 157.706491][ T6700] [ 157.809889][ T789] msi2500 1-1:1.0: Registered as swradio24 [ 157.931117][ T789] msi2500 1-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 158.047242][ T789] usb 1-1: USB disconnect, device number 3 [ 159.998806][ T6721] zram: Can't change algorithm for initialized device [ 160.031061][ T6721] zram: Cannot change disksize for initialized device [ 160.682414][ T6729] loop0: detected capacity change from 0 to 512 [ 160.857621][ T6729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.942752][ T6729] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.055864][ T6729] EXT4-fs error (device loop0): ext4_get_first_dir_block:3594: inode #12: block 32: comm syz.0.272: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 161.098264][ T6729] EXT4-fs error (device loop0): ext4_get_first_dir_block:3597: inode #12: comm syz.0.272: directory missing '.' [ 161.459040][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 161.459059][ T27] audit: type=1800 audit(1790150059.029:19): pid=6729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.272" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 161.860238][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.889883][ T6741] loop1: detected capacity change from 0 to 64 [ 164.853069][ T6762] pimreg: entered allmulticast mode [ 168.941642][ T6792] loop0: detected capacity change from 0 to 131072 [ 168.996631][ T6792] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 169.005145][ T6792] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 169.018803][ T6792] F2FS-fs (loop0): invalid crc value [ 169.044801][ T6792] F2FS-fs (loop0): Found nat_bits in checkpoint [ 169.134184][ T6792] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 169.141390][ T6792] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 170.934675][ T6809] device-mapper: table: 248:0: thin-pool: Error opening metadata block device (-EBUSY) [ 170.955183][ T6809] device-mapper: ioctl: error adding target to table [ 170.963525][ T6809] device-mapper: table: 248:1: thin: Error opening pool device (-ENOENT) [ 170.972214][ T6809] device-mapper: ioctl: error adding target to table [ 171.979008][ T6818] zram: Can't change algorithm for initialized device [ 172.289305][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.299'. [ 172.347603][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.299'. [ 172.368772][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.299'. [ 172.395915][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.299'. [ 174.046940][ T6822] loop2: detected capacity change from 0 to 32768 [ 174.188935][ T6822] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.458729][ T6822] XFS (loop2): Ending clean mount [ 174.646354][ T5778] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 174.690973][ T5775] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.996529][ T5778] usb 1-1: Using ep0 maxpacket: 32 [ 175.003908][ T5778] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 175.017531][ T5778] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 175.845304][ T5778] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 175.856483][ T5778] usb 1-1: config 1 has no interface number 0 [ 175.862655][ T5778] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.874040][ T5778] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 175.887325][ T5778] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 175.898021][ T5778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.931073][ T5778] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 176.179866][ T5778] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 177.225265][ T6861] loop2: detected capacity change from 0 to 32768 [ 177.238246][ T8] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 177.596233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 178.088426][ T6861] ERROR: (device loop2): diAllocAG: ipimap->i_size is wrong [ 178.088426][ T6861] [ 178.105077][ T6861] ERROR: (device loop2): remounting filesystem as read-only [ 178.113395][ T6861] ialloc: diAlloc returned -5! [ 178.427646][ T5872] usb 1-1: USB disconnect, device number 4 [ 178.448500][ T5872] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 180.870446][ T6887] loop1: detected capacity change from 0 to 128 [ 181.128576][ T6887] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 182.221303][ T6901] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 182.221303][ T6901] program syz.1.318 not setting count and/or reply_len properly [ 182.689515][ T6900] syz.1.318 (6900): drop_caches: 2 [ 183.856771][ T6913] v: renamed from veth0_vlan (while UP) [ 184.446227][ T6928] mmap: syz.1.326 (6928) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 185.467514][ T6935] ip_tables: iptables: counters copy to user failed while replacing table [ 186.776754][ T6948] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 186.776754][ T6948] program syz.1.330 not setting count and/or reply_len properly [ 187.024617][ T6948] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 187.059172][ T6946] syz.1.330 (6946): drop_caches: 2 [ 188.652559][ T6957] zram: Can't change algorithm for initialized device [ 188.703448][ T6957] zram: Cannot change disksize for initialized device [ 190.807718][ T6978] loop2: detected capacity change from 0 to 131072 [ 190.844314][ T6978] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 190.852576][ T6978] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 190.863714][ T6978] F2FS-fs (loop2): invalid crc value [ 190.883145][ T6978] F2FS-fs (loop2): Found nat_bits in checkpoint [ 190.942818][ T6978] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 190.950879][ T6978] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 191.524295][ T6991] program syz.0.342 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.722461][ T7003] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 194.382416][ T7017] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 194.382416][ T7017] program syz.2.351 not setting count and/or reply_len properly [ 194.708994][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.761779][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.142274][ T7020] loop0: detected capacity change from 0 to 131072 [ 196.837897][ T7020] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 196.846452][ T7020] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 196.946285][ T7020] F2FS-fs (loop0): invalid crc value [ 197.649647][ T7020] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-4) [ 197.877389][ T7013] syz.2.351 (7013): drop_caches: 2 [ 198.104481][ T7028] FAULT_INJECTION: forcing a failure. [ 198.104481][ T7028] name failslab, interval 1, probability 0, space 0, times 0 [ 198.196555][ T7028] CPU: 0 PID: 7028 Comm: syz.0.353 Not tainted syzkaller #0 [ 198.203937][ T7028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.214032][ T7028] Call Trace: [ 198.217342][ T7028] [ 198.220309][ T7028] dump_stack_lvl+0x18c/0x250 [ 198.225040][ T7028] ? show_regs_print_info+0x20/0x20 [ 198.230278][ T7028] ? load_image+0x420/0x420 [ 198.234833][ T7028] ? __lock_acquire+0x7d80/0x7d80 [ 198.239921][ T7028] should_fail_ex+0x394/0x4c0 [ 198.244660][ T7028] should_failslab+0x9/0x20 [ 198.249220][ T7028] slab_pre_alloc_hook+0x59/0x300 [ 198.254300][ T7028] ? rcu_is_watching+0x15/0xb0 [ 198.259127][ T7028] kmem_cache_alloc+0x5a/0x2c0 [ 198.263944][ T7028] ? ceph_msg_new2+0x3a/0x490 [ 198.268675][ T7028] ceph_msg_new2+0x3a/0x490 [ 198.273246][ T7028] ceph_monc_init+0x5b6/0xa70 [ 198.277983][ T7028] ceph_create_client+0x225/0x300 [ 198.283065][ T7028] ceph_get_tree+0x1ca/0x1800 [ 198.287794][ T7028] ? bpf_lsm_capable+0x9/0x10 [ 198.292511][ T7028] ? security_capable+0x89/0xb0 [ 198.297434][ T7028] vfs_get_tree+0x8c/0x280 [ 198.301897][ T7028] vfs_cmd_create+0xe3/0x230 [ 198.306545][ T7028] __se_sys_fsconfig+0x70a/0x850 [ 198.311545][ T7028] ? __x64_sys_fsconfig+0xc0/0xc0 [ 198.316630][ T7028] ? lockdep_hardirqs_on+0x98/0x150 [ 198.321869][ T7028] ? __x64_sys_fsconfig+0x20/0xc0 [ 198.326947][ T7028] do_syscall_64+0x55/0xb0 [ 198.331415][ T7028] ? clear_bhb_loop+0x40/0x90 [ 198.336139][ T7028] ? clear_bhb_loop+0x40/0x90 [ 198.340870][ T7028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.346814][ T7028] RIP: 0033:0x7f552eb9e159 [ 198.351266][ T7028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.370920][ T7028] RSP: 002b:00007f552f9bb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 198.379387][ T7028] RAX: ffffffffffffffda RBX: 00007f552ee25fa0 RCX: 00007f552eb9e159 [ 198.387505][ T7028] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 198.395521][ T7028] RBP: 00007f552ec3506b R08: 0000000000000000 R09: 0000000000000000 [ 198.403539][ T7028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.411555][ T7028] R13: 00007f552ee26038 R14: 00007f552ee25fa0 R15: 00007ffc3614b448 [ 198.419598][ T7028] [ 200.972881][ T5778] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 202.063592][ T5778] usb 2-1: Using ep0 maxpacket: 8 [ 202.071492][ T5778] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 202.086424][ T5778] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 202.116153][ T5778] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 202.148498][ T5778] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 202.163591][ T7072] hub 1-0:1.0: USB hub found [ 202.179127][ T5778] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 202.191597][ T7072] hub 1-0:1.0: 1 port detected [ 202.201927][ T5778] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.262120][ T5778] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 202.271640][ T5778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.374815][ T5778] usb 2-1: usb_control_msg returned -71 [ 202.421109][ T5778] usbtmc 2-1:16.0: can't read capabilities [ 202.479820][ T5778] usb 2-1: USB disconnect, device number 2 [ 203.449061][ T5086] Bluetooth: hci2: command 0x0406 tx timeout [ 203.455163][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 203.455193][ T5789] Bluetooth: hci0: command 0x0406 tx timeout [ 203.462613][ T5086] Bluetooth: hci1: command 0x0406 tx timeout [ 204.113376][ T7094] loop1: detected capacity change from 0 to 512 [ 204.196254][ T7094] EXT4-fs (loop1): bad s_min_extra_isize: 544 [ 205.291255][ T7117] loop1: detected capacity change from 0 to 8 [ 205.415007][ T7117] SQUASHFS error: zlib decompression failed, data probably corrupt [ 205.488439][ T7117] SQUASHFS error: Failed to read block 0x9b: -5 [ 205.538048][ T7121] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 205.538048][ T7121] program syz.0.373 not setting count and/or reply_len properly [ 205.595808][ T7120] syz.0.373 (7120): drop_caches: 2 [ 205.603182][ T7117] SQUASHFS error: Unable to read metadata cache entry [99] [ 205.714520][ T7117] SQUASHFS error: Unable to read inode 0x127 [ 208.410314][ T7140] syzkaller0: entered promiscuous mode [ 208.415866][ T7140] syzkaller0: entered allmulticast mode [ 210.070542][ T7154] syz.1.383 (7154): drop_caches: 2 [ 210.080731][ T7154] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 210.080731][ T7154] program syz.1.383 not setting count and/or reply_len properly [ 210.807414][ T7154] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 211.297788][ T7164] syz.2.385 (7164): drop_caches: 2 [ 211.323748][ T7164] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 211.323748][ T7164] program syz.2.385 not setting count and/or reply_len properly [ 212.488138][ T7173] loop1: detected capacity change from 0 to 8 [ 212.536151][ T27] audit: type=1800 audit(1790150110.109:20): pid=7172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.387" name="UDC" dev="configfs" ino=9968 res=0 errno=0 [ 212.568022][ T7173] SQUASHFS error: zlib decompression failed, data probably corrupt [ 212.575999][ T7173] SQUASHFS error: Failed to read block 0x9b: -5 [ 212.677102][ T7173] SQUASHFS error: Unable to read metadata cache entry [99] [ 212.684387][ T7173] SQUASHFS error: Unable to read inode 0x127 [ 212.946939][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 213.171821][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.191938][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 213.256215][ T23] usb 1-1: Dual-Role OTG device on HNP port [ 213.283000][ T23] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 213.428252][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.448726][ C1] ------------[ cut here ]------------ [ 213.454622][ C1] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 213.461805][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x263/0x440 [ 213.471572][ C1] Modules linked in: [ 213.475478][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 213.482514][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.492577][ C1] RIP: 0010:usb_ep_enable+0x263/0x440 [ 213.497972][ C1] Code: 49 8b 0e 48 c7 c0 c0 0f 7b 8b 49 c7 c0 e0 0f 7b 8b 4c 0f 44 c0 48 c7 c7 80 0f 7b 8b 48 c7 c6 5c 27 a7 8c 89 ea e8 9d 03 95 fa <0f> 0b e9 e1 fe ff ff e8 91 3f cb fa 49 bc 00 00 00 00 00 fc ff df [ 213.517587][ C1] RSP: 0018:ffffc900001f0790 EFLAGS: 00010046 [ 213.523663][ C1] RAX: 9e605f98aebede00 RBX: ffff88802368c0e0 RCX: ffff88801c653c00 [ 213.531643][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 213.539622][ C1] RBP: 0000000000000081 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 213.547603][ C1] R10: dffffc0000000000 R11: ffffed10171e518b R12: dffffc0000000000 [ 213.555580][ C1] R13: ffff88802368c10d R14: ffff88802368c0e8 R15: ffff88802d08243a [ 213.563562][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 213.572499][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.579094][ C1] CR2: 00007f8022da7ff8 CR3: 000000002fb4c000 CR4: 00000000003506e0 [ 213.587080][ C1] Call Trace: [ 213.590374][ C1] [ 213.593229][ C1] hidg_set_alt+0x12a/0xa10 [ 213.597775][ C1] ? usb_gadget_set_state+0x12c/0x2a0 [ 213.603161][ C1] set_config+0x735/0xff0 [ 213.607528][ C1] composite_setup+0x1df4/0x33a0 [ 213.612484][ C1] configfs_composite_setup+0xc7/0x100 [ 213.617962][ C1] dummy_timer+0x1324/0x34e0 [ 213.622591][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 213.627625][ C1] ? lock_chain_count+0x20/0x20 [ 213.632510][ C1] ? dummy_free_streams+0x520/0x520 [ 213.637722][ C1] ? dummy_free_streams+0x520/0x520 [ 213.642935][ C1] __hrtimer_run_queues+0x525/0xc10 [ 213.648157][ C1] ? hrtimer_interrupt+0x980/0x980 [ 213.653276][ C1] ? read_tsc+0x9/0x20 [ 213.657361][ C1] hrtimer_run_softirq+0x177/0x290 [ 213.662484][ C1] handle_softirqs+0x27d/0x820 [ 213.667255][ C1] ? read_tsc+0x9/0x20 [ 213.671335][ C1] ? ktime_get+0x24b/0x280 [ 213.675763][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 213.680537][ C1] ? do_softirq+0x1a0/0x1a0 [ 213.685051][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 213.690265][ C1] __irq_exit_rcu+0xd3/0x190 [ 213.694861][ C1] ? irq_exit_rcu+0x20/0x20 [ 213.699379][ C1] irq_exit_rcu+0x9/0x20 [ 213.703625][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 213.709265][ C1] [ 213.712207][ C1] [ 213.715145][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 213.721139][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 213.726783][ C1] Code: 89 18 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 03 f6 36 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 213.746395][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 213.752470][ C1] RAX: 9e605f98aebede00 RBX: ffffffff81631e24 RCX: 9e605f98aebede00 [ 213.760449][ C1] RDX: 0000000000000001 RSI: ffffffff8acacce0 RDI: ffffffff8b1d3ba0 [ 213.768426][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b6b R09: 1ffff110171e6d6d [ 213.776405][ C1] R10: dffffc0000000000 R11: ffffed10171e6d6e R12: 1ffff92000030fc8 [ 213.784381][ C1] R13: dffffc0000000000 R14: 1ffff110038ca780 R15: 0000000000000000 [ 213.792363][ C1] ? do_idle+0x334/0x5c0 [ 213.796627][ C1] default_idle+0x13/0x20 [ 213.800968][ C1] default_idle_call+0x6c/0xa0 [ 213.805743][ C1] do_idle+0x334/0x5c0 [ 213.809828][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 213.815033][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 213.820243][ C1] ? asm_sysvec_error_interrupt+0x10/0x20 [ 213.825993][ C1] cpu_startup_entry+0x43/0x60 [ 213.830766][ C1] start_secondary+0xee/0xf0 [ 213.835363][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 213.841451][ C1] [ 213.844478][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 213.851758][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 213.858782][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.868841][ C1] Call Trace: [ 213.872126][ C1] [ 213.874977][ C1] dump_stack_lvl+0x18c/0x250 [ 213.879665][ C1] ? show_regs_print_info+0x20/0x20 [ 213.884872][ C1] ? load_image+0x420/0x420 [ 213.889656][ C1] panic+0x2ca/0x720 [ 213.893572][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 213.898087][ C1] ? secondary_startup_64_no_verify+0x179/0x17b [ 213.904337][ C1] __warn+0x2e0/0x470 [ 213.908322][ C1] ? usb_ep_enable+0x263/0x440 [ 213.913098][ C1] ? usb_ep_enable+0x263/0x440 [ 213.917888][ C1] report_bug+0x2be/0x4f0 [ 213.922235][ C1] ? usb_ep_enable+0x263/0x440 [ 213.927005][ C1] ? usb_ep_enable+0x263/0x440 [ 213.931776][ C1] ? usb_ep_enable+0x265/0x440 [ 213.936550][ C1] handle_bug+0xcf/0x120 [ 213.940809][ C1] exc_invalid_op+0x1a/0x50 [ 213.945333][ C1] asm_exc_invalid_op+0x1a/0x20 [ 213.950193][ C1] RIP: 0010:usb_ep_enable+0x263/0x440 [ 213.955572][ C1] Code: 49 8b 0e 48 c7 c0 c0 0f 7b 8b 49 c7 c0 e0 0f 7b 8b 4c 0f 44 c0 48 c7 c7 80 0f 7b 8b 48 c7 c6 5c 27 a7 8c 89 ea e8 9d 03 95 fa <0f> 0b e9 e1 fe ff ff e8 91 3f cb fa 49 bc 00 00 00 00 00 fc ff df [ 213.975183][ C1] RSP: 0018:ffffc900001f0790 EFLAGS: 00010046 [ 213.981267][ C1] RAX: 9e605f98aebede00 RBX: ffff88802368c0e0 RCX: ffff88801c653c00 [ 213.989243][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 213.997216][ C1] RBP: 0000000000000081 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 214.005191][ C1] R10: dffffc0000000000 R11: ffffed10171e518b R12: dffffc0000000000 [ 214.013167][ C1] R13: ffff88802368c10d R14: ffff88802368c0e8 R15: ffff88802d08243a [ 214.021161][ C1] hidg_set_alt+0x12a/0xa10 [ 214.025676][ C1] ? usb_gadget_set_state+0x12c/0x2a0 [ 214.031058][ C1] set_config+0x735/0xff0 [ 214.035400][ C1] composite_setup+0x1df4/0x33a0 [ 214.040357][ C1] configfs_composite_setup+0xc7/0x100 [ 214.045829][ C1] dummy_timer+0x1324/0x34e0 [ 214.050457][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 214.055490][ C1] ? lock_chain_count+0x20/0x20 [ 214.060356][ C1] ? dummy_free_streams+0x520/0x520 [ 214.065563][ C1] ? dummy_free_streams+0x520/0x520 [ 214.070769][ C1] __hrtimer_run_queues+0x525/0xc10 [ 214.075989][ C1] ? hrtimer_interrupt+0x980/0x980 [ 214.081108][ C1] ? read_tsc+0x9/0x20 [ 214.085194][ C1] hrtimer_run_softirq+0x177/0x290 [ 214.090315][ C1] handle_softirqs+0x27d/0x820 [ 214.095081][ C1] ? read_tsc+0x9/0x20 [ 214.099155][ C1] ? ktime_get+0x24b/0x280 [ 214.103578][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 214.108350][ C1] ? do_softirq+0x1a0/0x1a0 [ 214.112874][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 214.118083][ C1] __irq_exit_rcu+0xd3/0x190 [ 214.122676][ C1] ? irq_exit_rcu+0x20/0x20 [ 214.127189][ C1] irq_exit_rcu+0x9/0x20 [ 214.131433][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 214.137071][ C1] [ 214.140005][ C1] [ 214.142940][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 214.148933][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 214.154567][ C1] Code: 89 18 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 03 f6 36 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 214.174175][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 214.180250][ C1] RAX: 9e605f98aebede00 RBX: ffffffff81631e24 RCX: 9e605f98aebede00 [ 214.188228][ C1] RDX: 0000000000000001 RSI: ffffffff8acacce0 RDI: ffffffff8b1d3ba0 [ 214.196208][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b6b R09: 1ffff110171e6d6d [ 214.204183][ C1] R10: dffffc0000000000 R11: ffffed10171e6d6e R12: 1ffff92000030fc8 [ 214.212159][ C1] R13: dffffc0000000000 R14: 1ffff110038ca780 R15: 0000000000000000 [ 214.220136][ C1] ? do_idle+0x334/0x5c0 [ 214.224400][ C1] default_idle+0x13/0x20 [ 214.228738][ C1] default_idle_call+0x6c/0xa0 [ 214.233510][ C1] do_idle+0x334/0x5c0 [ 214.237588][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 214.242790][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 214.247993][ C1] ? asm_sysvec_error_interrupt+0x10/0x20 [ 214.253740][ C1] cpu_startup_entry+0x43/0x60 [ 214.258513][ C1] start_secondary+0xee/0xf0 [ 214.263106][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 214.269190][ C1] [ 214.272342][ C1] Kernel Offset: disabled [ 214.276720][ C1] Rebooting in 86400 seconds..