last executing test programs: 35.238174892s ago: executing program 3 (id=60): bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r1, &(0x7f0000000240)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000003c0)="00dd41dc115d27cf850a782da28375b561df298712d56b", 0x2}], 0x1}}, {{&(0x7f0000000400)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440), 0x30}}], 0x2, 0x41) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f00000005c0)='27', 0x2) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000600)=0x1) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x4000000086a82, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r4, 0x3554000) fadvise64(r4, 0x3, 0x4000000005, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x400000000000247, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000440)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000480)=0x1) ioctl$vim2m_VIDIOC_QBUF(r5, 0x40045613, &(0x7f00000004c0)=@mmap={0x1, 0x1, 0x4, 0x2000, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000ec0)=[{{0x0, 0x8c, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) close(0xffffffffffffffff) poll(&(0x7f0000000180)=[{r6, 0x820c}, {r0, 0x8000}], 0x2, 0x8) 34.274717277s ago: executing program 3 (id=61): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0xd044, 0x400, 0x0, 0x2a}, &(0x7f0000000180)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4623, 0x0, 0x3, 0x1c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2866, 0x1, 0x0, 0x1f5}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8391, 0x4, 0x3, 0x245}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa02a, 0x47, 0x3, 0x57}}], 0x4, &(0x7f00000014c0)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, '\x00', {0x3, 0x28e, 0x0, &(0x7f0000000400)=@buf_1k="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"}}, &(0x7f0000001480)) mmap$IORING_OFF_SQ_RING(0x0, 0x2, 0x100000c, 0x810, r2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, r1, &(0x7f00000000c0)={0x2e, 0x58, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000140)) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 34.146206134s ago: executing program 3 (id=63): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410017ff5d81"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0x5) setreuid(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r5, &(0x7f0000000400)='7', 0x1) keyctl$join(0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x26000, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./sys_sec\x00', &(0x7f00000004c0)='securityfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys_sec/tomoyo/domain_policy\x00', 0x202, 0x0) read(r6, &(0x7f0000000540)=""/9, 0xfffffd87) read$FUSE(r6, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x100, 0x18, 0x8000000100000001, 0x1, 0x2, 0x5, 0x1, 0x10000000000002, 0xfffdffffffffffff, 0x9, 0x730a, 0x40000000001c, 0x400, 0xffffffffffffffff, 0x100], 0xe000, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') 32.619130054s ago: executing program 3 (id=73): symlinkat(&(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, 0x43, 0x107, 0x2, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) mount$overlay(0x0, &(0x7f0000000580)='./bus\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000640)='./bus\x00') r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x400, 0x12a) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './file7\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x4) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f00000002c0)='7', 0x1) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a80)='./file7/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x50) 32.487242267s ago: executing program 3 (id=74): rmdir(&(0x7f0000000000)='./file0\x00') (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x40000, 0x42, 0x22}, 0x18) mknodat(r1, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x2) (async) fchdir(r1) (async, rerun: 64) setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)={'L-', 0x9}, 0x16, 0x0) (async, rerun: 64) close(r1) getsockopt$SO_NETNS_COOKIE(r0, 0x1, 0x47, &(0x7f00000001c0), &(0x7f0000000200)=0x8) (async) chroot(&(0x7f0000000240)='./file0\x00') (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x88001, 0x0) write$binfmt_aout(r2, &(0x7f00000002c0)={{0x10b, 0xfa, 0x8c, 0x1c8, 0x9e, 0x1, 0x306, 0x5}, "c9d73208e844ee5aa28f4bf8b61d6285fcb59308565b44170439d6d46ab70d91bbc56f78f8db987ae9d5bf129118424396a53853ce2bac47afd076a59c635ceceea9bbf5de431cd79d8c469be862be230701206cd7992fbdb448673e2328a988d1c4a988e43281230c1e2f9e93f8262fb621d04325fe3c9b48200b305e78e994d466f3fc730c3a3d0f371656809982ece4d2ef8d71c0614c388e44d68415d6d68be0924205a9ef73bd7141322d6628f43ddd4965989fd5cded0acc00dc799866501d3bc9231fbaf7f7639cd698259d6b8fa55f4bcb4231f506c639139565ea58f546c1dd440fcfaa285728", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x80b) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000b00)=0x3, 0x4) (async) mknod(&(0x7f0000000b40)='./file0\x00', 0x100, 0xffff6cab) (async) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000000b80)="06bc01aeae91d65b03613b1e0ef707d7366d32127d272bdce7785d5f9e35b4c6d20c4843a0ecb610090c67e79ce4a880a9566420d3f0637da6c0509288bdea8872df0de5d86d4261758bbd973371f7b3acbd5c0488e9cd1ef5f4b917733d93d41ae618832893d68a0b23d8ce78b0e718efc6bdffe883a27c288d3d928f735e775b265ca50561586205f89fafae9c0dd3d8fffaa6") (async) timer_create(0x5, &(0x7f0000000d40)={0x0, 0x3a, 0x1, @thr={&(0x7f0000000c40)="b6f71d561355eefed3a8b190ab960730387c7d19cf48f0add0fbadd09c58ce1c0a2721957aac1f6aa19dbee25f590328afe3fab3e8ce5e989cc401560f0c37e4b8288fd8275c995c089d0a3468e57efab319d6a856627101a4840eff772bdf27225cdb76cac266b390ef0def94280ee23170679344ded5cb2bceb6febc5eb6c896421309c1f1e6a88542f730bfcfec91c498b006b01fe9199a08454d481c", &(0x7f0000000d00)="e3b7f6121eaf42ad18831c785ca3eaf08e443846da47fc5e37373850bcab916200c62dc8539f3873ee6710c67733a6c55b0c9e5b8b2f1e8bdfe7b14494b0df36"}}, &(0x7f0000000d80)=0x0) timer_settime(r3, 0x0, &(0x7f0000000dc0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000e00)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000e40)={0x48, 0x2, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000ec0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000f00)={0x48, 0xa, r4, 0x0, r5}) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r6, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x10, 0x3fb, 0x8, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040000}, 0x44090) (async) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000010c0)={0x12a20, r7}, 0x1) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001140), r2) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000001500)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001180)={0x304, r8, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe67}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7fff, @local, 0x40000}}}}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x429, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'macsec0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xf38, @mcast2, 0xbf7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xee}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x78}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa7b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6deaab7d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x4008440}, 0x8000) (async) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001580), r2) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, r9, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4004) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000016c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001680), 0x0, 0xa}}, 0x20) (async, rerun: 64) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000001700)) (async) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000001740)=0x9, 0x4) 30.514959196s ago: executing program 3 (id=77): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xf, 0x325967a866143652) fallocate(r0, 0x3, 0x0, 0xffffffff000) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x20, 0x15, 0xa2, "941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfab0100000011ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYBLOB="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", @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYBLOB="2bc6ef273cb3315f755d10f2126a100f5d0e840b4dca3462ce5a0b61f1933d21496028189eb14870ec56259c63294c003b7919d08ba0b7b630ff745f30148baab1c7a6399d1a79c9975b3b6597b2f3e78a05daf39bc950", @ANYRESDEC=0x0, @ANYRESOCT=r0], 0x0) 30.311609959s ago: executing program 32 (id=77): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xf, 0x325967a866143652) fallocate(r0, 0x3, 0x0, 0xffffffff000) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x20, 0x15, 0xa2, "941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfab0100000011ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYBLOB="c8cec0a690d14ad420c9d80b41750c03cae417f8f644e307daf3602c2e53107418a1512c905ddadbcc97ec4659365189dfb4a338e336a8398df4b875991746a034efca0fef965b5e49b5bad42a733066babcf4ff1612b61713a5f3e44f1df6f737e54db3175409b455dd29cacea80177df8b038c11f283e25267d04640918728ea62a3ab5c3853b22adaebe629926c6e637b7d5d244ac7e9eba9ca4de7789d7f21963338547a68592e317384b8db5b85d83c9f1fa7f670cd365d362abed77fb9d83d84cb33b7d2fc4d03ab9b472d1262bdf4f27a18a857d35e578a4366d62c6ae9d9749bc40ac6566956010d8c67a0213a4a10601dbb4780895cc804f8d19c", @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYBLOB="2bc6ef273cb3315f755d10f2126a100f5d0e840b4dca3462ce5a0b61f1933d21496028189eb14870ec56259c63294c003b7919d08ba0b7b630ff745f30148baab1c7a6399d1a79c9975b3b6597b2f3e78a05daf39bc950", @ANYRESDEC=0x0, @ANYRESOCT=r0], 0x0) 5.473977192s ago: executing program 4 (id=189): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000540)={0x7}, 0x1) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "150000000200", "5579000000000000001000", "d28d34eb", "cb9d8450ab655ddc"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "db5206893bcdc404"}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000000200), 0x1c) (async) getsockopt$inet6_buf(r4, 0x29, 0x3d, 0x0, &(0x7f0000000240)=0x37) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xc1100, 0x0, 0x19, 0x0, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0xfe81}, 0x804) (async) recvmsg$unix(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x2e, 0x0, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000006c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000700)=0x0) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000740)={0x0, 0xbd, 0x0, 0x4, 0x31f}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x80, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003c001, 0x2b9, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2005, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) (async) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r2, @ANYBLOB="010023bd7000fedbdf25010000001400060000000000000000000000000000000000790101006e016cb1d76a742f6cdc827b5620b8326361700083f2a64c36eb3be6d9a71b736ab02496daf52f9c74db40822d972e4fd677cee5e1496b5eeea93d98dff05396ec71329cdc0790cc1938f30d968f4d2a46a25937c3fd1b722e3c1bbd295e9faa72ae78705725f74cc91d3ab1c566e34b7ba3b1d54ef4596a9f7a0377d38f11ef438da9fe22543d3489e653364729ef8c0f6daba4150f8415df87c88224182e7edf3892f5d963d82ece795aedfbd23286c751d599f34d6273b46e8d2304997142460d0fa9213cbe6e0a80326c05491ebf3dfd1affaa3d5219c64cb32e2f39b8570ad173bac5f8da28fe9c7479b03a5045eed21736104cf99a1de8cb93c98d1ec53cc86da02e60788818e923f40eb5748235941ba011618dabbf4c880efbc3b1ab04264bcf2d19e40094a8c6e14cb8321e64a657ed7caf4d37abc952efcf6770943e5d666be915934bde5544556451b7c419d3dacd913b436090279b80f0b7c71e620ee2a2b98b8d98ca96e1bf5d8bc7aabb36a266d8000000080002000300000008000800ac1414bb"], 0x1b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) (async) socket$nl_audit(0x10, 0x3, 0x9) r13 = syz_open_dev$vivid(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r13, 0x4020565a, &(0x7f00000001c0)={0x3, 0x0, 0x3}) 4.666514021s ago: executing program 1 (id=191): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = fsopen(&(0x7f0000000600)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000640)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000680)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x27) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={'bridge0\x00', {0x2, 0x4e22, @multicast2}}) r4 = open(&(0x7f0000000000)='.\x00', 0x8201, 0x80) r5 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_int(r5, 0x0, 0x22, 0x0, &(0x7f0000000400)=0x1) linkat(r4, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r4, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000003b000b0026bd7000024000000f"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x214000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r6, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x5, 0x8, 0x4]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, r6, 0x303, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20044080}, 0x20040890) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00082dbd7000ffdbdf34540000000c00990007000000430000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4044050) ioctl$UI_SET_FFBIT(r9, 0x4004556b, 0x51) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x2982, 0x0) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f00000004c0)={0xd, 0x4, 0x6}) close(r10) writev(0xffffffffffffffff, &(0x7f0000000b80)=[{&(0x7f0000000900)="b6a1d18955c8772f2438d7ca183d57c433157f5e65c582c18e6f2b308e72dc5c36b508f629893df7702451b4c65027dce36820a22e040afae620a0fbad09ac86b45b", 0x42}, {&(0x7f0000000980)="91babcbd7e11173eb7fdd5ef7cf3025ee664ac6d54ab1b7a1165d94af2dbf2a2ae3bd13c5e3175c886e7c93679317ec5cadae5cc8b6a3b765799790223f4c313e2949dd1de1035519b23e6d438", 0x4d}, {&(0x7f0000000a00)="ecb1001e010f8efdb1df44867feccdfbfd1b5e66e161e10dbe616d20a019443967c2688912510481db47b600cca0b5c8b61d8789867d6032b6600f5668d52f57ed557d6b2735c91e10f6702c74a67623789b7f8334d42f41ace17d5a138076c3f56c97b1911cf1b58dfc48691ec8f0fedfd1fa34fc511fc9265914c1274c05b50480f3d2324622dd41e6b1ab9b5d3da1b17662a43062061fac6dd39be74118c7d37c22ae50c3a354a602895ec0a9430d", 0xb0}, {&(0x7f0000000ac0)="7a3c2fccb12b95f8a647be25bfa8bb0250f6a5311d0e89983a1af86935d8545aa1b69ce141aae3bc5314990eca53c914c3fd57c0acc90266e09320d44801a2099ea603a104499ff24996f8cda81f24c171841e1fe5754173a38aebf5d32802f28c6fb1fe14e3b327da7f4a30d8ae95e257522571e0387dfa3f79bcbe44a03bfd2ca21f075d9ceb5c420829237e8bf5a434de6afdee2280d90d7ebe3de64aa54b2d31d15e379db9693ae38df25847", 0xae}], 0x4) 4.510530525s ago: executing program 4 (id=193): mknodat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x21c0, 0x103) faccessat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x3, 0x1000) r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904010000010230000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000b00)={0x2, &(0x7f0000000b40)=[{0xb1, 0x0, 0x0, 0x200003}, {0x6, 0xfe, 0x0, 0x8000006}]}, 0x10) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000020c0)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002080)={&(0x7f0000001dc0)={0x28c, 0x12, 0x400, 0x70bd2b, 0x25dfdbfc, {0x28, 0x9, 0x5, 0x0, {0x4e23, 0x4e20, [0x0, 0x2, 0x3ff, 0x5], [0x7, 0x2, 0x8000, 0x6], 0x0, [0xffffff48, 0x2b]}, 0x8, 0x1ff}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "05ba1e8b6a5b718f0b6a100425474c2fc6ade3ffb57f8b95bec95308b674f355511d5260134990f590459fc8d6bc2b05a844422df72149695fd2a49951042a6476d6c778a9fead4407d7e670904cc6988d34d08beceb45e96378d2ffd9d67238ba5f2765560fa8ab308b3f61d2497320be53d0240ea9dc786f35dcd484ca7aa3978ede0aaec8618a5118b3e54d896237bce05e1eb4cc720f9e14b98c40b09104f30f3c3ae9efae4e1179cefd"}, @INET_DIAG_REQ_BYTECODE={0x3b, 0x1, "fdc158a9418bb6f4b2983ba9cc6ed0840781a0053f90f6287b16c99d9a1fb5647c586b2a8e6bfd17c43f69d4917b5231cdde1c214a29b0"}, @INET_DIAG_REQ_BYTECODE={0x4e, 0x1, "d44e6a05bd248b77a2bb13a352f0241602987312133f06010508be480931fc94e02f5f23da7fe30df8c03c82d17aa39fb7154716c0613096fd77f0496be487f76d8b73e739e796946040"}, @INET_DIAG_REQ_BYTECODE={0x103, 0x1, "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"}]}, 0x28c}, 0x1, 0x0, 0x0, 0x600000d1}, 0x80) r2 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000c40)='./proc\x00', 0x1ff) mount(&(0x7f0000000c80)=@filename='none\x00', &(0x7f0000000cc0)='./proc\x00', &(0x7f0000000d00)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./proc/net/stat/arp_cache\x00', 0x0, 0x0) read(r4, &(0x7f0000000d80)=""/4096, 0x1000) sendmsg$NFT_BATCH(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'cgroup\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0xc, 0x3, "06275c8527702267"}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) syz_usb_control_io(r2, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000180)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000b80), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000bc0)=0x1000) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000c00)=0x3) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r5, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000200)={0x34, &(0x7f0000000240)={0x40, 0x31, 0x1, "ac"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f00000003c0)={0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="110de7000000e7018bada49f56a990a1bd6f369557d29150b9e4e8e05d7bc4b7807c9de6754da95a41c373526025399bf13fe5c229f4c1654bc75a47dd216ec7a59025f298f51005b225e7928143b0643591028c1b5ba4f11fc87d3f5cd5a459f5208edcc85019ea7618a506b627e22f696925e8491d19b9c2b317af2c9428ec03b55852623918d2048fe88272527dcafc1e24702edb9f78137b990ed92127463a2bb3f3a5fbd84529be3f713fed653b31f8d8ecd312c15820282ccdf7020f4d149d914b5ab6020dfbb89c6f3400bd39ba9b15478a4617d81fb32e83ee9761043804ad0a1c9600000000000000"], &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42f}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000400)={0x20, 0x17, 0xf5, "a0593d9af9e242bc366732ad193fc0a13de10c66931124f449e9e149381079c7585ad9ecae4a48e5558fe0c0866aa58196a556f1058453f166e4dacb9f1444ba0e41952bfe7883c34e26fee00199286f8e9b9e53da4b596e70afe511f33ce6783565a06f3f4d69d39241044d8a36e0ae111945f05c6755788aab25b4c2ba49835a69bbf378b287303117c0767e576be58168dd617a1671e2327f17dcd0827a3522cae687834bcf4b177e837cf7422f51104ec40c363e7c559f71897dc18ea17885b3338e5fa101eb1bdc29337603facb4f89eb63a9ba13fab5543adb834c8d6adda0f6132a94267a57a7e18b8c94c8a81e1d002222"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x9c}, &(0x7f0000000580)={0x20, 0x81, 0x3, "d5de0d"}, &(0x7f00000005c0)={0x20, 0x82, 0x1, '@'}, &(0x7f0000000600)={0x20, 0x83, 0x1, "f5"}, &(0x7f0000000640)={0x20, 0x84, 0x3, "db41b3"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "bea68b"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.468008779s ago: executing program 1 (id=194): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x6, @private1, 0x5}, 0x1c) syz_usb_connect(0x0, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff000000070581024000000705020240000007058303"], 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009040101010e020000070581"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) 3.628428312s ago: executing program 2 (id=197): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000100)=0x3, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, '/'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x2, 0x8000, 0x101, 0x8f, 0x2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x4a442, 0x1ff) ftruncate(r3, 0x8) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000380)=0x84) 3.382126129s ago: executing program 0 (id=198): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x33fe, 0x0, 0xfffc}}}) (async) r0 = syz_open_dev$evdev(&(0x7f0000000700), 0x0, 0x822b01) write$char_usb(r0, &(0x7f0000000740)="e2", 0xff0f) (async) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000780)=""/218) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) (async) listen(r1, 0x2) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000300)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000340)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r2, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/tcp6\x00') (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000003c0)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000400)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) (async) listen(r4, 0x2) (async, rerun: 32) preadv(r3, &(0x7f0000000440)=[{&(0x7f0000000480)=""/225, 0xe1}, {&(0x7f0000000580)=""/102, 0x66}, {&(0x7f0000000600)=""/149, 0x95}], 0x3, 0x7, 0x21000000) (async, rerun: 32) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 32) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) (rerun: 32) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async, rerun: 32) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000240)={0x48, 0x6, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x3) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f000056d000/0x4000)=nil, 0x4, 0x0, 0x0, 0xe, 0x0, 0x10, 0x0, 0x58}) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000180)=0x4) (async) ioctl$PPPIOCSCOMPRESS(r5, 0x4010744d) 3.217172577s ago: executing program 1 (id=199): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf7db) r0 = syz_open_dev$media(&(0x7f0000000040), 0x8d, 0x1c1100) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000740)={0x0, 0x4, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000540)=[{}, {}], 0x3, 0x0, &(0x7f0000000640)=[{0x0, 0x80000000}, {}, {}], 0x3, 0x0, &(0x7f00000006c0)=[{}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000280)={r1, &(0x7f0000000080), &(0x7f00000000c0)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000180)={r2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x4004804) r4 = inotify_init() r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0xa2c6000) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r5, 0x20, &(0x7f0000000300)="898af54270aac7e9556f7d7e207b0d92d026e22b33eb8275", 0x0, 0x18) syz_memcpy_off$KVM_EXIT_MMIO(r5, 0x20, &(0x7f00000007c0)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(r4, 0xffffffffffffffff, 0x0) r7 = syz_usb_connect(0x2, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="20130400000068d02fdc86313454"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf7db) (async) syz_open_dev$media(&(0x7f0000000040), 0x8d, 0x1c1100) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000740)={0x0, 0x4, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000540)=[{}, {}], 0x3, 0x0, &(0x7f0000000640)=[{}, {}, {}], 0x3, 0x0, &(0x7f00000006c0)=[{}, {}, {}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000280)={r1, &(0x7f0000000080), &(0x7f00000000c0)}) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000180)={r2}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x4004804) (async) inotify_init() (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) (async) userfaultfd(0x80001) (async) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0xa2c6000) (async) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) (async) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) (async) syz_memcpy_off$KVM_EXIT_MMIO(r5, 0x20, &(0x7f0000000300)="898af54270aac7e9556f7d7e207b0d92d026e22b33eb8275", 0x0, 0x18) (async) syz_memcpy_off$KVM_EXIT_MMIO(r5, 0x20, &(0x7f00000007c0)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) (async) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="20130400000068d02fdc86313454"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 2.74717468s ago: executing program 0 (id=200): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x80000000, @mcast1, 0x400}, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffff}, r1, 0xfffff4b2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x80000000, @mcast2, 0xd510}, {0xa, 0x4e21, 0x200, @dev={0xfe, 0x80, '\x00', 0x32}, 0xfffffffd}, r1, 0x401}}, 0x48) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f00000001c0)={0x8, 'ip6tnl0\x00', {'macvtap0\x00'}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x230, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010102}}}}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8fb3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @mcast2, 0xfffffc94}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9a07}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x89}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1082}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x20}, 0x11) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000540)=0x6, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xd0, 0x2, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x256}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x37}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xe}]}, 0xd0}}, 0x4841) ioctl$CEC_RECEIVE(r5, 0xc0386106, &(0x7f00000007c0)={0x0, 0x7fff, 0x4, 0x274a5c0, 0xff, 0x5, "1123c4832a450e0d2c5f9ccbec47f788", 0x9, 0x3, 0x5, 0x77, 0x1, 0x4, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000840)={0x5, &(0x7f0000000800)=[{0x15, 0x1, 0x7, 0x9}, {0x400, 0x5, 0x1, 0x2}, {0x400, 0x7, 0x7}, {0x3, 0x3, 0x1, 0x8}, {0x9, 0x8, 0xf7, 0x100}]}) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000880)=0x5, 0x4) syz_open_dev$dvb_dvr(&(0x7f00000008c0), 0x7fffffffffffffff, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x4e20, 0x373a, @private1, 0x9}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x80000, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000980), 0x4) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r5) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, r7, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000b00)={0x400, 0xffff, 0x200, 0x8, 0x8000, 0x9, 0x5, 0x2, 0x1}, &(0x7f0000000b40)=0x20) getsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(r5, 0x84, 0x85, &(0x7f0000000b80)={r8, @in6={{0xa, 0x4e22, 0x1ff, @loopback, 0x1}}, 0x9}, &(0x7f0000000c40)=0x90) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000c80)={0x1fe, 0x2, 0x100000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000cc0)={[{0x3, 0x200, 0x0, 0x2, 0x9, 0x6e, 0x4, 0x7, 0x6, 0x4, 0x4, 0x80, 0x3}, {0x8, 0x5f8, 0x0, 0x9, 0x94, 0xf7, 0x7f, 0x9, 0x9, 0xe7, 0x42, 0x7, 0x100000000}, {0x5, 0x6, 0x4, 0x5, 0x97, 0x5, 0x2, 0x81, 0x80, 0x6, 0x0, 0x3, 0x6}], 0xc}) socketpair(0x1d, 0x6, 0xfffffff9, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UBLK_U_IO_COMMIT_AND_FETCH_REQ(r5, 0xc0107521, &(0x7f0000001d80)={0x2, 0x15c, 0x4, &(0x7f0000000d80)=@buf_512="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"}) sendmsg$NFNL_MSG_ACCT_DEL(r9, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x54, 0x3, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xb}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x28f12dfa}, @NFACCT_FLAGS={0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x50) 2.616234992s ago: executing program 2 (id=201): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1, 0x0, &(0x7f0000000200)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000180)=@x86={0x8, 0xa, 0x7, 0x0, 0x724, 0x4, 0x2, 0xf7, 0x9, 0x7, 0x28, 0x9, 0x0, 0xfffffff8, 0x7, 0x7, 0x6, 0x3, 0x0, '\x00', 0x2, 0x8}) ioctl$KVM_RUN(r4, 0xae80, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x0, 0x0) 2.496688392s ago: executing program 0 (id=202): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f020000000002080003000000001e70dce02d5beaef5b", 0x68}], 0x1}, 0x4800) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_io_uring_setup(0x6688, &(0x7f0000000240)={0x0, 0x1d64, 0x4000, 0x2, 0x36a}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) syz_ublk_setup_io_uring(0x9c6, &(0x7f0000000380)={0x0, 0xaf5b, 0x80, 0x1, 0x12b}, &(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) syz_io_uring_setup(0x56a6, &(0x7f00000004c0)={0x0, 0x3e55, 0x20, 0x3, 0xcf}, &(0x7f0000000540), &(0x7f0000000580)=0x0, &(0x7f00000005c0)) syz_ublk_setup_io_uring(0x24d3, &(0x7f0000000600)={0x0, 0x77bc, 0x2, 0x2, 0xb6}, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)=0x0) r7 = getpgid(0xffffffffffffffff) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000780)={0x2e, 0x2, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000740)=@any_dev={0x4, 0x7a9, 0x0, 0x0, 0x1000, 0x3, r7}}}, &(0x7f0000000800)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.300622785s ago: executing program 0 (id=203): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x2af8, &(0x7f0000000200)={0x0, 0x0, 0x13090, 0x4, 0x71}, 0x0, &(0x7f0000000280), &(0x7f00000002c0)) dup(r1) (async) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000300)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000380)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) 2.246238785s ago: executing program 2 (id=204): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="de", 0x1}], 0x1) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x2, @vbi={0x425c, 0x7, 0x6, 0x41495043, [0x7], [0x3f44557e, 0x80000000], 0x1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x3f) mount(&(0x7f00000001c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x8010, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2003, 0x103) lseek(r1, 0x2, 0x3) 2.004860287s ago: executing program 2 (id=205): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/vlan/vlan1\x00') r3 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000140)={0x1, 'vlan1\x00', {}, 0x5832}) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000003900)={0x1, [{0x1, 0x8, 0x0, &(0x7f00000001c0)='k'}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x5b2, 0x0}, {0x0, 0x0, 0x2252, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x0, 0x0, 0xfffffffa, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x0, 0x0, 0xde56353, 0x0}, {0x3, 0x0, 0x102, 0x0}, {0x2, 0x0, 0x15, 0x0}, {0x1, 0x0, 0xa9c, 0x0}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="0f20c035000000200f22c0b900090000b82f470000ba00000000b9e30a0000b80b000000ba000000000f30c46389224ed502652e46f7beed00000064f3400f09f028860080000066430f3804bc3ded00000047d03d00200000643e420f01c364673e0fc7ae00000000", 0x69}], 0x1, 0x7c, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x3a) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x2}) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/vlan/vlan1\x00') (async) socket(0x2, 0x2, 0x0) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000140)={0x1, 'vlan1\x00', {}, 0x5832}) (async) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x4) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000003900)={0x1, [{0x1, 0x8, 0x0, &(0x7f00000001c0)='k'}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x5b2, 0x0}, {0x0, 0x0, 0x2252, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x0, 0x0, 0xfffffffa, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x0, 0x0, 0xde56353, 0x0}, {0x3, 0x0, 0x102, 0x0}, {0x2, 0x0, 0x15, 0x0}, {0x1, 0x0, 0xa9c, 0x0}]}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="0f20c035000000200f22c0b900090000b82f470000ba00000000b9e30a0000b80b000000ba000000000f30c46389224ed502652e46f7beed00000064f3400f09f028860080000066430f3804bc3ded00000047d03d00200000643e420f01c364673e0fc7ae00000000", 0x69}], 0x1, 0x7c, 0x0, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x2}) (async) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 1.29629504s ago: executing program 0 (id=206): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000500)=0x91, 0x4) (async) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f00000007c0)={0xa, 0x4e21, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000840)="2c5db18271fe054658fe1c586b1dc826d06eecc3a3d4bf8d4e96bee8fccc6fc6d9007e72cfd626690e4f7417b006c94270e430183086043c832a77bce4c65f222ab9bcf4150d0719ff224953c6973546b0addd455b442c5dee8d77a6a55944cb2abb20245833804f2fac736b3f4130cae1cf2e8662f906e3e706431a091b5643581cd7e8845df5c127be2f7e992acb", 0xff3b}, {&(0x7f0000000900)="84b688ed1cbebf252bbc6aabd90fbe35fbafc537dcdd565ba8b411e8be2284808f99d80b6603fc4fe127c29d4bf85c6fc7c5e6dcffe44b0cb81b402d3b73de214c5f7908d656ac194ec399f8a555fbfdb15f23489f1a7e9a088f946d81d63c24b8f771a54832df29f2a291e65acb5411b08c4a576ab26bdf61eb05c1f6b7bb0af7", 0x81}, {&(0x7f00000009c0)="35bd6bc58bbb757381f14f85ceb73c410612334952c497a1835af1d0f20812b23b4cb2f765a28dcec1", 0x29}], 0x3}}], 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev\x00', 0x1ff) (async) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000f80), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000fc0)=0x1000) (async, rerun: 32) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r1, 0x0) (async, rerun: 32) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000001040)=0x33) mount(0x0, &(0x7f0000000c40)='./dev\x00', &(0x7f0000000c80)='devtmpfs\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./dev/md0\x00', 0x28000, 0x8) ioctl(r2, 0x40140921, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) (async, rerun: 64) r3 = socket(0x11, 0x3, 0x300) (rerun: 64) setitimer(0x1, 0x0, &(0x7f0000000d40)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000b40)={'hsr0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000cc0)="01154e00010000112233445588fbca010001160cbfbcd16470adc14fd446ccc81e5e", 0x22, 0x44011, &(0x7f0000000d00)={0x11, 0x0, r4, 0x0, 0x0, 0x0}, 0x14) (async) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) (async) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) (async, rerun: 32) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000300)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5, 0x0, r2}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) (rerun: 32) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000480)=@IORING_OP_FGETXATTR={0x2b, 0xc, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0xc3472eb2bd492d97}) (async) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000740)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000580)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f00000005c0)) (async) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x21d5891, 0x0) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r9, &(0x7f0000000a00)=[{{&(0x7f0000000b00)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000b40), 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="2c0000000000000000000000070000000713c40a010100e0000002e0000002ac1414bb07071eac14143f0000000000006c"], 0xa0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000bc0)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1400000000000000000000000200000001000000c64f00001400000000000000000000000200000000200000000000001000e8b171bc704b490000000000000000000007000000100000000000000000000000070000001c0000000000000000000000080000007b02b6b3ad6285a477c5c15372875226785ce054077c8f6228f21c0dce6d54b4e531dee557b595957624c85d2db232126daec2167a8a7232bd0a378a37d80a035effb153cc98b90297eec01075f0c56126fa6b4204c233f67f1cfc02fc6176a1efbc86cde34031b8b77785e0aa020b70ff4a5f68810547cacdc49306a3bc736a7c54fe23e8cb46da1702fc0531296e94e3960fccf22da4bda9b34c8dd5a352b2a9a88da15fbc1bd35e7507a3e5c1d873bdbd54cba51d6c24521a0a84bb45435d556962626e9cec70d6cb7d1623a3e010b08af25cb787ad6fd89755f405", @ANYRES32=0x0, @ANYBLOB="7f000001ac14141800000000140000000000000000000000010000000100000000000000"], 0x88}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}], 0x4, 0x0) (async) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r10, 0xc0189379, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) syz_io_uring_setup(0x38d, &(0x7f0000000600)={0x0, 0x8a4d, 0x10, 0x3, 0x183, 0x0, r5}, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) 1.217808188s ago: executing program 4 (id=207): mmap(&(0x7f0000148000/0x3000)=nil, 0x3000, 0x0, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) 1.014249919s ago: executing program 4 (id=208): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket(0x2d, 0x2, 0x0) bind$xdp(r1, 0x0, 0x0) write(r0, &(0x7f0000000140)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x2000007, 0x12, r0, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000180)) ioctl(0xffffffffffffffff, 0x40204706, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000000)) 769.792273ms ago: executing program 4 (id=209): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000800) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000800) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3a}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2c}}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x10080) (async) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3a}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2c}}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x10080) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x700, 0x8, 0x7f6, 0x6, {{0xd, 0x4, 0x1, 0x2f, 0x34, 0x67, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x11, 0x2, [{0x7, 0xb, "9a2c25fdc4cabf3e6f"}]}, @timestamp={0x44, 0xc, 0xda, 0x0, 0x5, [0x4, 0x10001]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r7, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0x4}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xf4f2}, @ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8850}, 0x20000040) (async) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r7, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0x4}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xf4f2}, @ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8850}, 0x20000040) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x24000040) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000780)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000780)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) r10 = fsmount(0xffffffffffffffff, 0x0, 0x4f) ioctl$PPPIOCSCOMPRESS(r10, 0x4010744d) syncfs(r10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r10, 0xc0189375, &(0x7f0000000880)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r10, 0xc0189375, &(0x7f0000000880)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) ioctl$DVB_DEMUX_DMX_EXPBUF(r11, 0xc00c6f3e, &(0x7f00000008c0)={0x6, 0x80000, r10}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r11, 0xc02c564a, &(0x7f0000000900)={0x7, 0x50565559, 0x2, @stepwise={0x5, 0xfffffed3, 0xb13a, 0x8001, 0xf, 0x1f6}}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r13, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xb5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$binfmt_script(r12, &(0x7f0000000a80)={'#! ', './file0', [{}, {0x20, '802.15.4 MAC\x00'}, {0x20, '[+*'}], 0xa, "f344b0a0511f2e49ec63d424f3a4feb7ed8e99fcef84d29ee8c685233745fa0f24cb6a8351ff402fa711c2330a7603950022c6481ff9230525c3fba806f1d7460700a91db4f96041fd12bf40b7e7aee1cfaa362ed7d0dae5fee50e53e7e7a91c32368d3bdff5381f6ef85fb5e84a9b3b13fa3f3c7c7b17cd0d540585132ca577facee993840f06ae12db03fefa1d9d5c5aa5e52e118e37b07fd5fcf9f4cfc5f6"}, 0xbe) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000b40)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000b40)={'wpan0\x00'}) sendmsg$L2TP_CMD_SESSION_MODIFY(r11, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_vlan\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x90) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000cc0), r6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r12, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r14, 0x420, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x8000}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20000000) 691.331114ms ago: executing program 1 (id=210): socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000003100090027bd700000000000040000000800180002ac0f"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) bind$l2tp(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast, 0x3}, 0x10) 518.844925ms ago: executing program 2 (id=211): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000900)='.\x00', &(0x7f0000000940)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r0, &(0x7f0000000040)=[{'VOLUME', @val={' \'', 'Line'}}, {'VOLUME', @void}], 0x2a) close(r0) mount$overlay(0x0, &(0x7f0000000980)='./bus\x00', &(0x7f00000009c0), 0x40, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sync() 311.645144ms ago: executing program 1 (id=212): r0 = socket$kcm(0x2, 0xa, 0x2) landlock_create_ruleset(&(0x7f0000000640)={0x123, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x30, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000102010200000010000000007dc62e169d01000008"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x4b564d01, 0x0, 0xaf}]}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r10, 0x4068aea3, &(0x7f00000004c0)={0xbe, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000540)={0x10000000000000cf, 0x0, [{}]}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026dc6a77ba2d7e919200000008000300", @ANYRES32=r7, @ANYBLOB="0a0006"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8854) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00082abd7000ffdbdf25060000000a0018000303030303030000180017800400050004000600041f458ae6b4b210b60001000a00e800ffffffffffff00000500530007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20004800) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x3}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8915, 0x0) 65.569898ms ago: executing program 0 (id=213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='secret\x00', &(0x7f00000002c0)='AqAAAAAAAAAAAAAAABAAA+AAAAAAAAAACAAAAA++\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x22) write(r2, &(0x7f0000000200)='4', 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x13, 0x3, 0x80, "8baa00000500c30000000006000000000000000000000000000400", 0x5160305}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x400c000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)=ANY=[@ANYRESHEX=r0], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$nl_netfilter(0x10, 0x3, 0xc) (async) fsopen(&(0x7f0000000100)='ceph\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='secret\x00', &(0x7f00000002c0)='AqAAAAAAAAAAAAAAABAAA+AAAAAAAAAACAAAAA++\x00', 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x22) (async) write(r2, &(0x7f0000000200)='4', 0x1) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x13, 0x3, 0x80, "8baa00000500c30000000006000000000000000000000000000400", 0x5160305}) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x400c000}, 0x44004000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)=ANY=[@ANYRESHEX=r0], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) 65.042312ms ago: executing program 2 (id=214): r0 = socket(0x2, 0x80805, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001580), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000015c0)={{0x0, 0x1, 0x212, 0x0, 0x1}}) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=@in={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='6', 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYRES8=r0], 0x78}], 0x1, 0x10) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0), 0xa4242, 0x0) r3 = landlock_create_ruleset(&(0x7f0000001440)={0x10, 0x9, 0x3}, 0x30, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f00000014c0)=0xfffffffffffffffa, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000001500)=0xffffffffffff7fff, 0x8) connect$vsock_stream(r4, &(0x7f0000001540)={0x28, 0x0, 0x2710}, 0x10) landlock_restrict_self(r3, 0x1d) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket(0xa, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x40082, 0x133) write(r6, &(0x7f0000001600)='3', 0x4e) ioctl$DRM_IOCTL_RM_MAP(r6, 0x4028641b, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000b87000/0x1000)=nil}) connect$inet(r5, &(0x7f0000001480)={0x2, 0x4e23, @broadcast}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r7 = dup(r2) write$UHID_INPUT(r7, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0xfffffe38) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0xa, 0xe, 0x13e, 0x1ff, 0xffffffff, 0x8f400000}) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = socket(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x5452, &(0x7f0000000280)={'syztnl1\x00', 0x0}) recvmsg(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r9, &(0x7f000000a680)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000001680)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001700)="ddeadea0204ecd8498607c67bbf968b258f88373976b5aa07564c7fb0b8ba7b99872abad87180e71a6c822a058d534b09113a306e26fe54813bac041050afeae8f3af653d64b43e323962db9eb58b194313db5bca27965cf5c97a40a84af52957c06e0378aae8d8bce2cf3b621e216c0f7360166e5569ee82dda9866e10b861b6fd94945d6b57fb7b0fc6a1554e1d0012373e858fc375dad725d3fc44f7f4dc2b619", 0xa2}], 0x1, 0x0, 0x0, 0x800}}, {{&(0x7f0000001800)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001880), 0x0, &(0x7f000000a5c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x90, 0x4000}}], 0x3, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x5393, &(0x7f0000000000)) 7.71855ms ago: executing program 1 (id=215): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) geteuid() sendmmsg$unix(r0, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x6c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4c, 0x6, "4648f228218ce8fba15bfa96d9b504b000746aafb4aa5b9c920d0187b161dc2b8943dbc02a54a3c3cee067afaf7cba86ceae72aa1e38d3f7857d1e56d4b24423b03a7f6c0d3b0154"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x94}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1bf) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x24000044) setns(0xc9, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f00000003c0)="a000000024000105010000000000000000000000020000000000ffffffffffff000000000b00010074617072696f0000700002806c000100010000000000000000000000000000000000010010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000c80080001000000000008000200dc050000", 0xa0) mount(&(0x7f0000000480)=@filename='./dev/sda1\x00', &(0x7f00000004c0)='./mnt\x00', &(0x7f0000000500)='ext4\x00', 0x8410, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000540)={@desc={0x1, 0x1000000, @auto="92f019a92d806a21"}}) fsetxattr(r3, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000040) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x8040) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0xc06c4124, &(0x7f00000000c0)) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfffd}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) 0s ago: executing program 4 (id=216): prctl$PR_CAPBSET_READ(0x17, 0x15) (async) prctl$PR_CAPBSET_READ(0x17, 0x6) (async) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x4, 0x40140) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000040)=0x9) (async) ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, &(0x7f0000000100)={&(0x7f0000000080)=""/67, 0x43}) prctl$PR_CAPBSET_READ(0x17, 0x1d) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x190, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x74a}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb48c}}]}, 0x190}, 0x1, 0x0, 0x0, 0x40}, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x24) (async) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000400)) r3 = syz_open_dev$ndb(&(0x7f0000000440), 0x0, 0x109000) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000480)) pipe2$9p(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r4, &(0x7f0000000500)={0x15, 0x65, 0xffff, 0x8, 0x8, '9P2000.u'}, 0x15) (async) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000540)={0x4, 0x7, 0x1}) (async) write$P9_RFLUSH(r0, &(0x7f0000000580)={0x7, 0x6d, 0x1}, 0x7) (async) prctl$PR_CAPBSET_READ(0x17, 0x1) (async) prctl$PR_CAPBSET_READ(0x17, 0x8) (async) prctl$PR_CAPBSET_READ(0x17, 0x16) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x100) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, 0xd, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}}, 0x40004) (async) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) prctl$PR_CAPBSET_READ(0x17, 0x3) open(&(0x7f00000006c0)='./file0\x00', 0x402, 0xd0) (async) prctl$PR_CAPBSET_READ(0x17, 0x3) r5 = syz_open_dev$video4linux(&(0x7f0000000700), 0x40, 0x4a0000) ioctl$NILFS_IOCTL_RESIZE(r5, 0x40086e8b, &(0x7f0000000740)=0x9) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000780)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r6, 0x5000940e, &(0x7f0000000800)={{}, "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"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.80' (ED25519) to the list of known hosts. [ 63.728362][ T5594] cgroup: Unknown subsys name 'net' [ 63.859285][ T5594] cgroup: Unknown subsys name 'cpuset' [ 63.867927][ T5594] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.214901][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.325172][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.336161][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.336678][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.342947][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.343626][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.486427][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.487791][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.502001][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.502214][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.504893][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.505408][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.506415][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.507013][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.514887][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.518674][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.527362][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.527957][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.542963][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.543595][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.558871][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.133342][ T5605] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.140695][ T5605] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.160015][ T5613] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 68.161698][ T5605] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.309083][ T5614] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 68.330422][ T5612] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 68.478756][ T5605] infiniband rxe0: set active [ 68.480839][ T5605] infiniband rxe0: added rxe_eth0 [ 68.507272][ T991] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.511122][ T5605] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 68.511152][ T5605] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 68.511195][ T5605] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 68.589902][ T5605] RDS/IB: rxe0: added [ 68.590483][ T5605] smc: adding ib device rxe0 with port count 1 [ 68.590582][ T5605] smc: ib device rxe0 port 1 has no pnetid [ 68.612728][ T991] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.627297][ T5605] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.978086][ T5605] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.126906][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.127909][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.128461][ T5613] bridge_slave_0: entered allmulticast mode [ 69.130645][ T5613] bridge_slave_0: entered promiscuous mode [ 69.172589][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.172694][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.172809][ T5613] bridge_slave_1: entered allmulticast mode [ 69.174710][ T5613] bridge_slave_1: entered promiscuous mode [ 69.189349][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.189446][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.189798][ T5612] bridge_slave_0: entered allmulticast mode [ 69.191642][ T5612] bridge_slave_0: entered promiscuous mode [ 69.245511][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.245677][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.245794][ T5612] bridge_slave_1: entered allmulticast mode [ 69.247922][ T5612] bridge_slave_1: entered promiscuous mode [ 69.262647][ T5605] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.317883][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.345482][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.358583][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.358779][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.358879][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.358993][ T5614] bridge_slave_0: entered allmulticast mode [ 69.360937][ T5614] bridge_slave_0: entered promiscuous mode [ 69.384575][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.388640][ T54] Bluetooth: hci0: command tx timeout [ 69.433147][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.433319][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.433717][ T5614] bridge_slave_1: entered allmulticast mode [ 69.435645][ T5614] bridge_slave_1: entered promiscuous mode [ 69.512806][ T5612] team0: Port device team_slave_0 added [ 69.516438][ T5613] team0: Port device team_slave_0 added [ 69.521005][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.524095][ T5612] team0: Port device team_slave_1 added [ 69.526551][ T5613] team0: Port device team_slave_1 added [ 69.529595][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.548211][ T54] Bluetooth: hci2: command tx timeout [ 69.588140][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.588154][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.588172][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.629388][ T54] Bluetooth: hci3: command tx timeout [ 69.629614][ T54] Bluetooth: hci1: command tx timeout [ 69.643085][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.643098][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.643119][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.647435][ T5614] team0: Port device team_slave_0 added [ 69.649589][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.649601][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.649622][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.666787][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.666800][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.666821][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.681568][ T5614] team0: Port device team_slave_1 added [ 69.685637][ T5605] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.833767][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.833783][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.833804][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.842974][ T5613] hsr_slave_0: entered promiscuous mode [ 69.844182][ T5613] hsr_slave_1: entered promiscuous mode [ 69.860025][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.860038][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.860059][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.896543][ T5612] hsr_slave_0: entered promiscuous mode [ 69.898948][ T5612] hsr_slave_1: entered promiscuous mode [ 69.901289][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 69.901364][ T5612] Cannot create hsr debugfs directory [ 70.056584][ T5614] hsr_slave_0: entered promiscuous mode [ 70.057308][ T5614] hsr_slave_1: entered promiscuous mode [ 70.057695][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 70.057712][ T5614] Cannot create hsr debugfs directory [ 70.391660][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.409849][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.412791][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.421761][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.428801][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.440589][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.457680][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.461666][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.524562][ T5612] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.542521][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.544930][ T5612] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.562830][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.563886][ T5612] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.582332][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.583181][ T5612] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.586187][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.703218][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.703334][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.703545][ T5605] bridge_slave_0: entered allmulticast mode [ 70.704454][ T5605] bridge_slave_0: entered promiscuous mode [ 70.719710][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.719803][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.719905][ T5605] bridge_slave_1: entered allmulticast mode [ 70.722668][ T5605] bridge_slave_1: entered promiscuous mode [ 70.778639][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.781054][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.789376][ T5614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.799676][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.800522][ T5614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.807608][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.808390][ T5614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.814440][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.815265][ T5614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.821066][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.898367][ T5605] team0: Port device team_slave_0 added [ 70.912742][ T5605] team0: Port device team_slave_1 added [ 70.945689][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.945705][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.945722][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.986432][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.986448][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.986469][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.071793][ T5605] hsr_slave_0: entered promiscuous mode [ 71.072541][ T5605] hsr_slave_1: entered promiscuous mode [ 71.072964][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 71.072982][ T5605] Cannot create hsr debugfs directory [ 71.134304][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.163692][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.241639][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.243057][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.272398][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.272501][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.288137][ T4104] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.288255][ T4104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.314176][ T4104] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.314235][ T4104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.348921][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.349022][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.390454][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.390497][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.425174][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.434511][ T5605] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.438574][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.442368][ T5605] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.454659][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.457758][ T5605] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.469560][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.471952][ T5606] Bluetooth: hci0: command tx timeout [ 71.486816][ T5605] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.489628][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.503102][ T5612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.551209][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.600363][ T4104] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.600461][ T4104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.634963][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.635082][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.636665][ T5606] Bluetooth: hci2: command tx timeout [ 71.706399][ T5606] Bluetooth: hci1: command tx timeout [ 71.706431][ T5606] Bluetooth: hci3: command tx timeout [ 71.893733][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.931533][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.953235][ T4158] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.953336][ T4158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.981970][ T4158] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.982055][ T4158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.380659][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.481316][ T5612] veth0_vlan: entered promiscuous mode [ 72.515251][ T5612] veth1_vlan: entered promiscuous mode [ 72.554691][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.616825][ T5612] veth0_macvtap: entered promiscuous mode [ 72.641072][ T5612] veth1_macvtap: entered promiscuous mode [ 72.680358][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.699830][ T5613] veth0_vlan: entered promiscuous mode [ 72.702793][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.734944][ T5613] veth1_vlan: entered promiscuous mode [ 72.882857][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.930209][ T5613] veth0_macvtap: entered promiscuous mode [ 72.943951][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.943971][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.972863][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.984993][ T5613] veth1_macvtap: entered promiscuous mode [ 72.999590][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.999610][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.017813][ T4158] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.018365][ T4158] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.018538][ T4158] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.018689][ T4158] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.066154][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.095435][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.130519][ T5612] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.177871][ T5614] veth0_vlan: entered promiscuous mode [ 73.212230][ T5605] veth0_vlan: entered promiscuous mode [ 73.216120][ T4158] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.216159][ T4158] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.216191][ T4158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.216230][ T4158] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.262019][ T5614] veth1_vlan: entered promiscuous mode [ 73.275240][ T5605] veth1_vlan: entered promiscuous mode [ 73.346393][ T4158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.346412][ T4158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.378946][ T5614] veth0_macvtap: entered promiscuous mode [ 73.394988][ T5614] veth1_macvtap: entered promiscuous mode [ 73.413378][ T4104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.413398][ T4104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.439292][ T5605] veth0_macvtap: entered promiscuous mode [ 73.456508][ T5605] veth1_macvtap: entered promiscuous mode [ 73.465220][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.498725][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.525859][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.544656][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.546432][ T54] Bluetooth: hci0: command tx timeout [ 73.589258][ T4104] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.589301][ T4104] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.589347][ T4104] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.637203][ T4158] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.644098][ T5761] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.646615][ T63] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.696012][ T63] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.776186][ T4158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.776205][ T4158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.786208][ T54] Bluetooth: hci3: command tx timeout [ 73.786238][ T54] Bluetooth: hci1: command tx timeout [ 73.818207][ T4104] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.819930][ T4200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.819975][ T4200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.819988][ T4200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.862848][ T4104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.862867][ T4104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.908406][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.908426][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.078086][ T5768] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 74.082864][ T5768] Bluetooth: MGMT ver 1.23 [ 74.082903][ T5768] Bluetooth: hci0: invalid length 0, exp 1 for type 31 [ 74.101511][ T5768] FAULT_INJECTION: forcing a failure. [ 74.101511][ T5768] name failslab, interval 1, probability 0, space 0, times 1 [ 74.101548][ T5768] CPU: 1 UID: 0 PID: 5768 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 74.101569][ T5768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.101596][ T5768] Call Trace: [ 74.101607][ T5768] [ 74.101616][ T5768] dump_stack_lvl+0xe8/0x150 [ 74.101647][ T5768] should_fail_ex+0x3eb/0x540 [ 74.101677][ T5768] should_failslab+0xa8/0x100 [ 74.101698][ T5768] __kmalloc_cache_node_noprof+0xa5/0x620 [ 74.101727][ T5768] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 74.101751][ T5768] ? __alloc_workqueue+0xbd7/0x21d0 [ 74.101777][ T5768] ? __alloc_workqueue+0xbd7/0x21d0 [ 74.101810][ T5768] __alloc_workqueue+0xbd7/0x21d0 [ 74.101854][ T5768] alloc_workqueue_noprof+0xe3/0x210 [ 74.101881][ T5768] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 74.101909][ T5768] ? ceph_get_tree+0x438/0x1a40 [ 74.101931][ T5768] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 74.101959][ T5768] ? __ceph_monc_want_map+0x105/0x4a0 [ 74.101988][ T5768] ceph_get_tree+0x489/0x1a40 [ 74.102010][ T5768] ? apparmor_capable+0x126/0x170 [ 74.102035][ T5768] vfs_get_tree+0x92/0x2a0 [ 74.102056][ T5768] do_new_mount+0x325/0xb00 [ 74.102086][ T5768] ? __pfx_do_new_mount+0x10/0x10 [ 74.102113][ T5768] ? ns_capable+0x84/0xe0 [ 74.102134][ T5768] ? path_mount+0x647/0x1050 [ 74.102161][ T5768] ? user_path_at+0xd4/0x160 [ 74.102191][ T5768] __se_sys_mount+0x31d/0x420 [ 74.102222][ T5768] ? __pfx___se_sys_mount+0x10/0x10 [ 74.102252][ T5768] ? __x64_sys_mount+0x20/0xc0 [ 74.102279][ T5768] do_syscall_64+0x166/0x520 [ 74.102304][ T5768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.102323][ T5768] ? clear_bhb_loop+0x70/0xc0 [ 74.102345][ T5768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.102364][ T5768] RIP: 0033:0x7f21cc39e559 [ 74.102386][ T5768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.102400][ T5768] RSP: 002b:00007f21cd345028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 74.102424][ T5768] RAX: ffffffffffffffda RBX: 00007f21cc625fa0 RCX: 00007f21cc39e559 [ 74.102438][ T5768] RDX: 00002000000028c0 RSI: 0000200000002880 RDI: 0000200000002840 [ 74.102451][ T5768] RBP: 00007f21cc435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 74.102463][ T5768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.102474][ T5768] R13: 00007f21cc626038 R14: 00007f21cc625fa0 R15: 00007ffe301b0ca8 [ 74.102504][ T5768] [ 74.388242][ T5606] Bluetooth: hci3: unexpected event 0x10 length: 4 > 1 [ 74.388834][ T5606] Bluetooth: hci3: hardware error 0x18 [ 74.392381][ T54] Bluetooth: hci3: unexpected event 0x10 length: 4 > 1 [ 74.653941][ T5791] netlink: 'syz.1.9': attribute type 1 has an invalid length. [ 74.669806][ T5792] misc userio: No port type given on /dev/userio [ 74.726301][ T5616] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.766166][ T5620] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.885998][ T5616] usb 1-1: Using ep0 maxpacket: 16 [ 74.887695][ T5616] usb 1-1: New USB device found: idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 74.893494][ T5616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.893515][ T5616] usb 1-1: Product: syz [ 74.893523][ T5616] usb 1-1: Manufacturer: syz [ 74.893531][ T5616] usb 1-1: SerialNumber: syz [ 74.933380][ T5616] usb 1-1: config 0 descriptor?? [ 74.946232][ T5620] usb 3-1: Using ep0 maxpacket: 16 [ 74.947094][ T5616] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 74.948432][ T5620] usb 3-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 74.951760][ T5620] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.951787][ T5620] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.951806][ T5620] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 74.951869][ T5620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.026524][ T5620] usb 3-1: config 0 descriptor?? [ 75.046358][ T5796] netlink: 300 bytes leftover after parsing attributes in process `syz.3.10'. [ 75.344764][ T5781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.358915][ T5781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.467155][ T5690] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 75.476168][ T5620] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input5 [ 75.570670][ T5808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.578793][ T5808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.586523][ T5810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.586923][ T5810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.596054][ T5690] usb 4-1: device descriptor read/64, error -71 [ 75.628476][ T5620] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 75.636078][ T54] Bluetooth: hci0: command tx timeout [ 75.669823][ T5620] usb 3-1: USB disconnect, device number 2 [ 75.708174][ T54] Bluetooth: hci2: command tx timeout [ 75.795496][ T5616] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 75.819074][ T5616] usb 1-1: USB disconnect, device number 2 [ 75.846181][ T5690] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 75.868125][ T54] Bluetooth: hci1: command tx timeout [ 75.903271][ T5811] fido_id[5811]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 75.905662][ T5815] process 'syz.1.12' launched './file0' with NULL argv: empty string added [ 75.940367][ T5815] netlink: 164 bytes leftover after parsing attributes in process `syz.1.12'. [ 75.977907][ T5690] usb 4-1: device descriptor read/64, error -71 [ 76.087922][ T5690] usb usb4-port1: attempt power cycle [ 76.382927][ T5840] warning: `syz.2.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.384940][ T5839] binder: Write failure EFAULT in pid:11 [ 76.417238][ T5840] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15'. [ 76.417262][ T5840] netlink: 56 bytes leftover after parsing attributes in process `syz.2.15'. [ 76.419650][ T54] Bluetooth: Unknown LE signaling command 0x20 [ 76.419670][ T54] Bluetooth: Wrong link type (-22) [ 76.429059][ T5690] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 76.447184][ T5690] usb 4-1: device descriptor read/8, error -71 [ 76.506058][ T5606] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 76.506158][ T5606] Bluetooth: hci3: hardware error 0x18 [ 76.646341][ T5682] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 76.686667][ T5690] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 76.706769][ T5690] usb 4-1: device descriptor read/8, error -71 [ 76.798251][ T5682] usb 1-1: New USB device found: idVendor=8087, idProduct=0025, bcdDevice=0.01 [ 76.799282][ T5682] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 76.799309][ T5682] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 76.799328][ T5682] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 76.799363][ T5682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.804544][ T5839] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 76.817843][ T5690] usb usb4-port1: unable to enumerate USB device [ 77.014236][ T5682] usb 1-1: USB disconnect, device number 3 [ 77.014533][ T54] Bluetooth: hci4: Reading Intel version command failed (-71) [ 77.018762][ T5838] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 77.232589][ T5849] tmpfs: Invalid gid '0x00000000ffffffff' [ 78.156039][ T5682] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.219042][ T5862] FAULT_INJECTION: forcing a failure. [ 78.219042][ T5862] name failslab, interval 1, probability 0, space 0, times 0 [ 78.219061][ T5862] CPU: 0 UID: 0 PID: 5862 Comm: syz.3.23 Not tainted syzkaller #0 PREEMPT(full) [ 78.219073][ T5862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.219080][ T5862] Call Trace: [ 78.219084][ T5862] [ 78.219089][ T5862] dump_stack_lvl+0xe8/0x150 [ 78.219108][ T5862] should_fail_ex+0x3eb/0x540 [ 78.219132][ T5862] ? __alloc_empty_sheaf+0x28/0x40 [ 78.219147][ T5862] should_failslab+0xa8/0x100 [ 78.219159][ T5862] ? __alloc_empty_sheaf+0x28/0x40 [ 78.219172][ T5862] __kmalloc_flags_noprof+0x123/0x790 [ 78.219189][ T5862] ? __alloc_empty_sheaf+0x28/0x40 [ 78.219207][ T5862] __alloc_empty_sheaf+0x28/0x40 [ 78.219220][ T5862] __pcs_replace_empty_main+0x43b/0x6c0 [ 78.219236][ T5862] kmem_cache_alloc_noprof+0x394/0x600 [ 78.219249][ T5862] ? kmem_cache_alloc_noprof+0x31a/0x600 [ 78.219262][ T5862] ? sk_prot_alloc+0x57/0x210 [ 78.219276][ T5862] ? kmem_cache_alloc_noprof+0x151/0x600 [ 78.219289][ T5862] ? sk_prot_alloc+0x57/0x210 [ 78.219306][ T5862] sk_prot_alloc+0x57/0x210 [ 78.219318][ T5862] ? sk_alloc+0x27/0x390 [ 78.219333][ T5862] sk_alloc+0x3a/0x390 [ 78.219349][ T5862] smc_create+0xf2/0x260 [ 78.219366][ T5862] __sock_create+0x4b5/0xac0 [ 78.219383][ T5862] __sys_socket+0xd6/0x1b0 [ 78.219397][ T5862] __x64_sys_socket+0x7a/0x90 [ 78.219409][ T5862] do_syscall_64+0x166/0x520 [ 78.219423][ T5862] ? trace_irq_disable+0x3b/0x140 [ 78.219436][ T5862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.219446][ T5862] ? clear_bhb_loop+0x70/0xc0 [ 78.219459][ T5862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.219469][ T5862] RIP: 0033:0x7faf5779e559 [ 78.219480][ T5862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.219488][ T5862] RSP: 002b:00007faf5866a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 78.219500][ T5862] RAX: ffffffffffffffda RBX: 00007faf57a25fa0 RCX: 00007faf5779e559 [ 78.219507][ T5862] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 78.219513][ T5862] RBP: 00007faf57835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 78.219519][ T5862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.219525][ T5862] R13: 00007faf57a26038 R14: 00007faf57a25fa0 R15: 00007fff848b0d98 [ 78.219541][ T5862] [ 78.223846][ T5862] rnbd_client L203: map_device: Unknown parameter or missing value 'w' [ 78.308594][ T5682] usb 2-1: New USB device found: idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 78.309815][ T5682] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 78.309841][ T5682] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 78.309865][ T5682] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 78.312884][ T5682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.313014][ T5682] usb 2-1: Product: syz [ 78.313028][ T5682] usb 2-1: Manufacturer: syz [ 78.313041][ T5682] usb 2-1: SerialNumber: syz [ 78.316263][ T5682] usb 2-1: config 0 descriptor?? [ 78.326882][ T5682] iguanair 2-1:0.0: probe with driver iguanair failed with error -12 [ 78.359321][ T5691] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 78.508236][ T5691] usb 3-1: New USB device found: idVendor=04b4, idProduct=07b1, bcdDevice=0.00 [ 78.510356][ T5691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 78.510397][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.520502][ T5691] usb 3-1: config 0 descriptor?? [ 78.521645][ T5858] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 78.537417][ T5690] usb 2-1: USB disconnect, device number 2 [ 78.588946][ T5606] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 78.728444][ T5858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.731552][ T5858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.938500][ T5682] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 78.950046][ T5691] cypress 0003:04B4:07B1.0002: item fetching failed at offset 5/8 [ 78.952750][ T5691] cypress 0003:04B4:07B1.0002: parse failed [ 78.952847][ T5691] cypress 0003:04B4:07B1.0002: probe with driver cypress failed with error -22 [ 79.031970][ T5869] netlink: 'syz.3.26': attribute type 27 has an invalid length. [ 79.031985][ T5869] netlink: 164 bytes leftover after parsing attributes in process `syz.3.26'. [ 79.072688][ T5682] usb 1-1: device descriptor read/64, error -71 [ 79.142144][ T46] usb 3-1: USB disconnect, device number 3 [ 79.308240][ T5682] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 79.399861][ T5899] sctp: [Deprecated]: syz.1.30 (pid 5899) Use of struct sctp_assoc_value in delayed_ack socket option. [ 79.399861][ T5899] Use struct sctp_sack_info instead [ 79.412211][ T5899] netlink: 156 bytes leftover after parsing attributes in process `syz.1.30'. [ 79.439562][ T5682] usb 1-1: device descriptor read/64, error -71 [ 79.550498][ T5682] usb usb1-port1: attempt power cycle [ 79.885998][ T5682] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 79.910098][ T5682] usb 1-1: device descriptor read/8, error -71 [ 80.146196][ T5682] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 80.167000][ T5682] usb 1-1: device descriptor read/8, error -71 [ 80.278811][ T5682] usb usb1-port1: unable to enumerate USB device [ 80.509608][ T5938] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 80.511186][ T5938] @0Ù: renamed from bond_slave_1 (while UP) [ 80.637854][ T5942] netlink: 'syz.1.35': attribute type 1 has an invalid length. [ 81.041590][ T5957] capability: warning: `syz.2.38' uses deprecated v2 capabilities in a way that may be insecure [ 81.240674][ T5961] FAULT_INJECTION: forcing a failure. [ 81.240674][ T5961] name failslab, interval 1, probability 0, space 0, times 0 [ 81.240705][ T5961] CPU: 1 UID: 0 PID: 5961 Comm: syz.3.39 Not tainted syzkaller #0 PREEMPT(full) [ 81.240726][ T5961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.240737][ T5961] Call Trace: [ 81.240745][ T5961] [ 81.240753][ T5961] dump_stack_lvl+0xe8/0x150 [ 81.240783][ T5961] should_fail_ex+0x3eb/0x540 [ 81.240821][ T5961] should_failslab+0xa8/0x100 [ 81.240845][ T5961] __kmalloc_noprof+0xf9/0x710 [ 81.240872][ T5961] ? ops_init+0x7b/0x5d0 [ 81.240895][ T5961] ? ops_init+0x7b/0x5d0 [ 81.240923][ T5961] ops_init+0x7b/0x5d0 [ 81.240960][ T5961] setup_net+0x118/0x350 [ 81.240985][ T5961] ? __pfx_setup_net+0x10/0x10 [ 81.241008][ T5961] ? down_read_killable+0x1b6/0x3b0 [ 81.241038][ T5961] ? __ns_common_init+0x38a/0x590 [ 81.241068][ T5961] copy_net_ns+0x536/0x770 [ 81.241093][ T5961] create_new_namespaces+0x3f0/0x6b0 [ 81.241118][ T5961] ? security_capable+0x7e/0x2c0 [ 81.241151][ T5961] unshare_nsproxy_namespaces+0x144/0x190 [ 81.241180][ T5961] ksys_unshare+0x532/0x890 [ 81.241207][ T5961] ? __pfx_ksys_unshare+0x10/0x10 [ 81.241232][ T5961] ? rcu_is_watching+0x16/0xb0 [ 81.241267][ T5961] __x64_sys_unshare+0x38/0x50 [ 81.241289][ T5961] do_syscall_64+0x166/0x520 [ 81.241313][ T5961] ? trace_irq_disable+0x3b/0x140 [ 81.241333][ T5961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.241351][ T5961] ? clear_bhb_loop+0x70/0xc0 [ 81.241373][ T5961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.241392][ T5961] RIP: 0033:0x7faf5779e559 [ 81.241410][ T5961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.241425][ T5961] RSP: 002b:00007faf5866a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 81.241445][ T5961] RAX: ffffffffffffffda RBX: 00007faf57a25fa0 RCX: 00007faf5779e559 [ 81.241459][ T5961] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 81.241472][ T5961] RBP: 00007faf57835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 81.241484][ T5961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.241495][ T5961] R13: 00007faf57a26038 R14: 00007faf57a25fa0 R15: 00007fff848b0d98 [ 81.241527][ T5961] [ 81.486830][ T5972] netlink: 64 bytes leftover after parsing attributes in process `syz.2.42'. [ 81.580979][ T5978] syzkaller1: entered promiscuous mode [ 81.581000][ T5978] syzkaller1: entered allmulticast mode [ 81.746064][ T5691] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 81.796069][ T46] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.875984][ T5691] usb 3-1: device descriptor read/64, error -71 [ 81.948063][ T46] usb 2-1: New USB device found: idVendor=103d, idProduct=0101, bcdDevice=0.40 [ 81.949192][ T46] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 81.949240][ T46] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 81.957868][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.957891][ T46] usb 2-1: Product: syz [ 81.957905][ T46] usb 2-1: Manufacturer: syz [ 81.957918][ T46] usb 2-1: SerialNumber: syz [ 82.066406][ T5690] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.116013][ T5691] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 82.183095][ T46] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 82.202954][ T46] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 82.256028][ T5691] usb 3-1: device descriptor read/64, error -71 [ 82.259564][ T46] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 82.263510][ T46] usb 2-1: USB disconnect, device number 3 [ 82.295977][ T5620] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 82.358390][ T5812] udevd[5812]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 82.388939][ T5691] usb usb3-port1: attempt power cycle [ 82.425993][ T5620] usb 1-1: device descriptor read/64, error -71 [ 82.465165][ T32] audit: type=1326 audit(1792350336.028:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.44" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5779e559 code=0x7fc00000 [ 82.466866][ T32] audit: type=1326 audit(1792350336.038:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.44" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7faf5779e559 code=0x7fc00000 [ 82.466906][ T32] audit: type=1326 audit(1792350336.038:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.44" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5779e559 code=0x7fc00000 [ 82.466938][ T32] audit: type=1326 audit(1792350336.038:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.44" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5779e559 code=0x7fc00000 [ 82.466969][ T32] audit: type=1326 audit(1792350336.038:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.44" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5779e559 code=0x7fc00000 [ 82.467004][ T32] audit: type=1326 audit(1792350336.038:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.44" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5779e559 code=0x7fc00000 [ 82.467038][ T32] audit: type=1326 audit(1792350336.038:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.44" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5779e559 code=0x7fc00000 [ 82.470187][ T32] audit: type=1326 audit(1792350336.038:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.44" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5779e559 code=0x7fc00000 [ 82.470229][ T32] audit: type=1326 audit(1792350336.038:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.44" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5779e559 code=0x7fc00000 [ 82.470263][ T32] audit: type=1326 audit(1792350336.038:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.44" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5779e559 code=0x7fc00000 [ 82.696905][ T5620] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 82.726953][ T5691] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 82.747322][ T5691] usb 3-1: device descriptor read/8, error -71 [ 82.831780][ T5620] usb 1-1: device descriptor read/64, error -71 [ 82.913691][ T6019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.929159][ T6019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.937274][ T5620] usb usb1-port1: attempt power cycle [ 82.986307][ T5691] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 83.003570][ T6023] sg_write: data in/out 808464396/132 bytes for SCSI command 0x37-- guessing data in; [ 83.003570][ T6023] program syz.3.48 not setting count and/or reply_len properly [ 83.027403][ T5691] usb 3-1: device descriptor read/8, error -71 [ 83.136379][ T5691] usb usb3-port1: unable to enumerate USB device [ 83.184715][ T6032] program syz.1.49 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.201738][ T6032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.49'. [ 83.232258][ T6032] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.49'. [ 83.286152][ T5620] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 83.307990][ T5620] usb 1-1: device descriptor read/8, error -71 [ 83.416473][ T5616] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 83.556137][ T5620] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 83.577074][ T5620] usb 1-1: device descriptor read/8, error -71 [ 83.577193][ T5616] usb 2-1: New USB device found: idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 83.578495][ T5616] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 83.578518][ T5616] usb 2-1: config 0 has no interface number 0 [ 83.578555][ T5616] usb 2-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 83.578577][ T5616] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 83.578609][ T5616] usb 2-1: config 0 interface 200 has no altsetting 0 [ 83.580863][ T5616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.580885][ T5616] usb 2-1: Product: syz [ 83.580898][ T5616] usb 2-1: Manufacturer: syz [ 83.580911][ T5616] usb 2-1: SerialNumber: syz [ 83.587042][ T5616] usb 2-1: config 0 descriptor?? [ 83.698187][ T5620] usb usb1-port1: unable to enumerate USB device [ 84.383366][ T5616] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input8 [ 84.398861][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.399087][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.399284][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.400025][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.400253][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.400496][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.400760][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.401175][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.401380][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.401584][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.401783][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.401984][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.402194][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.402918][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.403143][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.403357][ C0] usb 2-1: hanwang_irq - urb shutting down with status: -2 [ 84.408094][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.408296][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.408494][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.408692][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.408888][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.409143][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.409346][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.409541][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.409732][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.409921][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.410118][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.410972][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.411198][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.411396][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.411596][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.411787][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.411976][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.412173][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.412380][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.412605][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.412819][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.413042][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.413251][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.413444][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.413637][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.413829][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.414039][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.414233][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.414437][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.414640][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.414839][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.415040][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.415248][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.415505][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.415696][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.415890][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.416085][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.416284][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.416484][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 84.416674][ C0] usb 2-1: hanwang_irq - urb shutting down with status: -2 [ 84.431438][ T5616] usb 2-1: USB disconnect, device number 4 [ 85.297984][ T5691] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 85.426359][ T5691] usb 2-1: device descriptor read/64, error -71 [ 85.605844][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 85.605870][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 85.686205][ T5691] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 85.715990][ T5616] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 85.746289][ T5620] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 85.816126][ T5691] usb 2-1: device descriptor read/64, error -71 [ 85.876821][ T5616] usb 1-1: New USB device found: idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 85.878446][ T5616] usb 1-1: config 255 has an invalid interface number: 97 but max is 0 [ 85.878470][ T5616] usb 1-1: config 255 has no interface number 0 [ 85.878508][ T5616] usb 1-1: config 255 interface 97 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 85.878540][ T5616] usb 1-1: config 255 interface 97 has no altsetting 0 [ 85.880544][ T5616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.880568][ T5616] usb 1-1: Product: syz [ 85.880581][ T5616] usb 1-1: Manufacturer: syz [ 85.880593][ T5616] usb 1-1: SerialNumber: syz [ 85.895976][ T5620] usb 3-1: Using ep0 maxpacket: 32 [ 85.896919][ T5620] usb 3-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 85.898456][ T5620] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 85.898492][ T5620] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 85.898547][ T5620] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 85.898572][ T5620] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 85.898594][ T5620] usb 3-1: config 0 interface 0 has no altsetting 0 [ 85.903588][ T5620] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 85.903611][ T5620] usb 3-1: Product: syz [ 85.903624][ T5620] usb 3-1: Manufacturer: syz [ 85.903636][ T5620] usb 3-1: SerialNumber: syz [ 85.912626][ T5620] usb 3-1: config 0 descriptor?? [ 85.922113][ T5620] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 85.930186][ T5691] usb usb2-port1: attempt power cycle [ 85.950200][ T5620] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 86.115735][ T5616] rndis_host 1-1:255.97: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 86.165854][ T5616] usb 1-1: USB disconnect, device number 12 [ 86.199752][ T6102] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 86.250902][ T5806] usb 3-1: USB disconnect, device number 8 [ 86.251011][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 86.277102][ T5806] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 86.336015][ T5691] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 86.357265][ T5691] usb 2-1: device descriptor read/8, error -71 [ 86.605994][ T5691] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 86.626701][ T5691] usb 2-1: device descriptor read/8, error -71 [ 86.736409][ T5691] usb usb2-port1: unable to enumerate USB device [ 86.759623][ T1223] cfg80211: failed to load regulatory.db [ 86.819040][ T6121] bonding: bç¡·„ÆQ% is being created... [ 86.824650][ T6121] bonding: bç¡·„ÆQ% creation failed [ 87.085990][ T1223] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 87.236894][ T1223] usb 4-1: Using ep0 maxpacket: 8 [ 87.237615][ T1223] usb 4-1: New USB device found: idVendor=12ab, idProduct=0004, bcdDevice=0.00 [ 87.238731][ T1223] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 87.238754][ T1223] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 87.238771][ T1223] usb 4-1: config 179 has no interface number 0 [ 87.238807][ T1223] usb 4-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 87.238845][ T1223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.346129][ T5806] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 87.453013][ T6122] FAULT_INJECTION: forcing a failure. [ 87.453013][ T6122] name fail_futex, interval 1, probability 0, space 0, times 1 [ 87.453044][ T6122] CPU: 0 UID: 0 PID: 6122 Comm: syz.3.63 Not tainted syzkaller #0 PREEMPT(full) [ 87.453066][ T6122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.453077][ T6122] Call Trace: [ 87.453085][ T6122] [ 87.453094][ T6122] dump_stack_lvl+0xe8/0x150 [ 87.453126][ T6122] should_fail_ex+0x3eb/0x540 [ 87.453169][ T6122] get_futex_key+0x1ab/0x1410 [ 87.453205][ T6122] ? __pfx_get_futex_key+0x10/0x10 [ 87.453225][ T6122] ? do_raw_spin_unlock+0xf5/0x200 [ 87.453261][ T6122] futex_wake+0x119/0x5f0 [ 87.453293][ T6122] ? __pfx_futex_wake+0x10/0x10 [ 87.453320][ T6122] ? rcu_is_watching+0x16/0xb0 [ 87.453342][ T6122] ? kfree+0x4d/0x650 [ 87.453370][ T6122] do_futex+0x458/0x4e0 [ 87.453401][ T6122] ? __pfx_do_futex+0x10/0x10 [ 87.453424][ T6122] ? ktime_get+0x45/0x220 [ 87.453449][ T6122] __se_sys_futex+0x3a8/0x450 [ 87.453477][ T6122] ? __pfx_clockevents_program_event+0x10/0x10 [ 87.453502][ T6122] ? __pfx___se_sys_futex+0x10/0x10 [ 87.453533][ T6122] ? __x64_sys_futex+0x21/0xf0 [ 87.453559][ T6122] do_syscall_64+0x166/0x520 [ 87.453583][ T6122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.453603][ T6122] ? clear_bhb_loop+0x70/0xc0 [ 87.453626][ T6122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.453643][ T6122] RIP: 0033:0x7faf5779e559 [ 87.453661][ T6122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.453675][ T6122] RSP: 002b:00007faf5866a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 87.453695][ T6122] RAX: ffffffffffffffda RBX: 00007faf57a25fa8 RCX: 00007faf5779e559 [ 87.453709][ T6122] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faf57a25fac [ 87.453722][ T6122] RBP: 00007faf57a25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 87.453734][ T6122] R10: 00000000336207bb R11: 0000000000000246 R12: 0000000000000000 [ 87.453746][ T6122] R13: 00007faf57a26038 R14: 00007fff848b0cb0 R15: 00007fff848b0d98 [ 87.453776][ T6122] [ 87.498440][ T5806] usb 1-1: New USB device found: idVendor=17cc, idProduct=1969, bcdDevice=1.00 [ 87.499402][ T5806] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.499446][ T5806] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 87.499482][ T5806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.594411][ T1223] usb 4-1: USB disconnect, device number 6 [ 88.076036][ T1223] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 88.118744][ T5806] snd-usb-caiaq 1-1:1.0: bogus number of streams: 0 [ 88.118762][ T5806] snd-usb-caiaq 1-1:1.0: Unable to set up audio system (ret=-22) [ 88.118842][ C0] usb 1-1: received EP1 urb->status = -2 [ 88.118872][ T5806] usb 1-1: unable to init card! (ret=-22) [ 88.119399][ T5806] snd-usb-caiaq 1-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 88.223625][ T6130] netlink: 16 bytes leftover after parsing attributes in process `syz.0.65'. [ 88.223659][ T6130] netlink: 16 bytes leftover after parsing attributes in process `syz.0.65'. [ 88.245976][ T1223] usb 3-1: New USB device found: idVendor=0525, idProduct=127a, bcdDevice=1.00 [ 88.246860][ T1223] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.248103][ T1223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 88.248116][ T1223] usb 3-1: Product: syz [ 88.248124][ T1223] usb 3-1: Manufacturer: syz [ 88.253268][ T1223] usb_debug 3-1:1.0: debug converter detected [ 88.300114][ T1223] usb 3-1: debug converter now attached to ttyUSB0 [ 88.348841][ T5691] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 88.369657][ T6152] FAULT_INJECTION: forcing a failure. [ 88.369657][ T6152] name failslab, interval 1, probability 0, space 0, times 0 [ 88.369677][ T6152] CPU: 1 UID: 0 PID: 6152 Comm: syz.3.73 Not tainted syzkaller #0 PREEMPT(full) [ 88.369689][ T6152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.369695][ T6152] Call Trace: [ 88.369699][ T6152] [ 88.369704][ T6152] dump_stack_lvl+0xe8/0x150 [ 88.369724][ T6152] should_fail_ex+0x3eb/0x540 [ 88.369742][ T6152] should_failslab+0xa8/0x100 [ 88.369756][ T6152] __kmalloc_noprof+0xf9/0x710 [ 88.369771][ T6152] ? sk_prot_alloc+0xe7/0x210 [ 88.369785][ T6152] ? sk_prot_alloc+0xe7/0x210 [ 88.369802][ T6152] sk_prot_alloc+0xe7/0x210 [ 88.369815][ T6152] ? sk_alloc+0x27/0x390 [ 88.369831][ T6152] sk_alloc+0x3a/0x390 [ 88.369846][ T6152] packet_create+0x100/0x8b0 [ 88.369863][ T6152] __sock_create+0x4b5/0xac0 [ 88.369884][ T6152] __sys_socket+0xd6/0x1b0 [ 88.369898][ T6152] __x64_sys_socket+0x7a/0x90 [ 88.369911][ T6152] do_syscall_64+0x166/0x520 [ 88.369925][ T6152] ? trace_irq_disable+0x3b/0x140 [ 88.369937][ T6152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.369947][ T6152] ? clear_bhb_loop+0x70/0xc0 [ 88.369960][ T6152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.369970][ T6152] RIP: 0033:0x7faf5779e559 [ 88.369981][ T6152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.369989][ T6152] RSP: 002b:00007faf5866a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 88.370001][ T6152] RAX: ffffffffffffffda RBX: 00007faf57a25fa0 RCX: 00007faf5779e559 [ 88.370008][ T6152] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 88.370014][ T6152] RBP: 00007faf57835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 88.370020][ T6152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.370026][ T6152] R13: 00007faf57a26038 R14: 00007faf57a25fa0 R15: 00007fff848b0d98 [ 88.370042][ T6152] [ 88.435398][ T5614] overlayfs: failed lookup in lower (newroot/22, name='bus', err=-40): overlapping layers [ 88.435707][ T5614] overlayfs: failed lookup in lower (newroot/22, name='bus', err=-40): overlapping layers [ 88.468747][ T6145] cgroup2: Unknown parameter 'ufstype' [ 88.472726][ T6153] cgroup2: Unknown parameter 'ufstype' [ 88.537178][ T5691] usb 2-1: New USB device found: idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 88.541893][ T5691] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.541941][ T5691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.550590][ T5691] usb 2-1: config 0 descriptor?? [ 88.554979][ T5691] rndis_host 2-1:0.0: ACM capabilities ff, not really RNDIS? [ 90.084691][ T6150] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 90.085303][ T6150] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 90.100110][ T6150] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 90.103502][ T6150] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 90.103582][ T6150] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 90.106884][ T6150] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 90.129442][ T6150] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 90.129506][ T6150] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 90.138016][ T6150] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 90.162897][ T6155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.163355][ T6147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.163792][ T6147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.164047][ T6155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.172768][ T5691] usb 3-1: USB disconnect, device number 9 [ 90.177689][ T5691] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 90.178209][ T5691] usb_debug 3-1:1.0: device disconnected [ 90.255219][ T5690] usb 2-1: USB disconnect, device number 9 [ 90.255231][ T5620] usb 1-1: USB disconnect, device number 13 [ 90.266284][ T5606] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.431654][ T5691] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 90.435474][ T5691] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 90.465123][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.562899][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.630896][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.688280][ T5690] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 90.728524][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.736320][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.739827][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.740440][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.741349][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.742237][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.982334][ T13] bridge_slave_1: left allmulticast mode [ 90.982379][ T13] bridge_slave_1: left promiscuous mode [ 90.983233][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.014877][ T13] bridge_slave_0: left allmulticast mode [ 91.014901][ T13] bridge_slave_0: left promiscuous mode [ 91.015361][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.196653][ T5691] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 91.203808][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.225439][ T13] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 91.246059][ T13] bond0 (unregistering): Released all slaves [ 91.469625][ T6161] ceph: No mds server is up or the cluster is laggy [ 91.842142][ T6166] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.093056][ T6210] netlink: 72 bytes leftover after parsing attributes in process `syz.2.86'. [ 92.106897][ T5606] Bluetooth: hci1: command 0x0c1a tx timeout [ 92.115764][ T13] hsr_slave_0: left promiscuous mode [ 92.123841][ T13] hsr_slave_1: left promiscuous mode [ 92.124781][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.124811][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.131130][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.131149][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.168986][ T13] veth1_macvtap: left promiscuous mode [ 92.169095][ T13] veth0_macvtap: left promiscuous mode [ 92.169198][ T13] veth1_vlan: left promiscuous mode [ 92.169282][ T13] veth0_vlan: left promiscuous mode [ 92.189063][ T5606] Bluetooth: hci2: command 0x0c1a tx timeout [ 92.325993][ T5620] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 92.346989][ T5606] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.498609][ T5620] usb 3-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 92.500115][ T5620] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.500134][ T5620] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 92.500162][ T5620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.572041][ T5620] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 92.592113][ T13] team0 (unregistering): Port device team_slave_1 removed [ 92.614912][ T13] team0 (unregistering): Port device team_slave_0 removed [ 92.721943][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 92.753598][ T6211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.758214][ T6211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.759117][ T6211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.759499][ T6211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.767067][ T6211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.769322][ T6211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.772339][ T6211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.773932][ T6211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.774870][ T6211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.778803][ T6211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.795835][ T5691] usb 3-1: USB disconnect, device number 10 [ 92.824517][ T5691] idmouse 3-1:1.0: disconnected [ 92.828371][ T5606] Bluetooth: hci3: command tx timeout [ 93.263568][ T6166] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.263739][ T6166] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.263857][ T6166] bridge_slave_0: entered allmulticast mode [ 93.265557][ T6166] bridge_slave_0: entered promiscuous mode [ 93.295159][ T6166] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.295319][ T6166] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.295443][ T6166] bridge_slave_1: entered allmulticast mode [ 93.318772][ T6166] bridge_slave_1: entered promiscuous mode [ 93.402564][ T6166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.406266][ T5690] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 93.423831][ T6166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.461959][ T6166] team0: Port device team_slave_0 added [ 93.464662][ T6166] team0: Port device team_slave_1 added [ 93.504972][ T6166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.504988][ T6166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.505008][ T6166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.551317][ T6166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.558449][ T6166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.558481][ T6166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.559759][ T5690] usb 1-1: Using ep0 maxpacket: 32 [ 93.560524][ T5690] usb 1-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 93.561988][ T5690] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 93.562009][ T5690] usb 1-1: config 0 has no interface number 0 [ 93.562048][ T5690] usb 1-1: config 0 interface 184 has no altsetting 0 [ 93.571686][ T5690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.571708][ T5690] usb 1-1: Product: syz [ 93.571720][ T5690] usb 1-1: Manufacturer: syz [ 93.571732][ T5690] usb 1-1: SerialNumber: syz [ 93.583451][ T5690] usb 1-1: config 0 descriptor?? [ 93.681190][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 93.699429][ T6166] hsr_slave_0: entered promiscuous mode [ 93.701797][ T6166] hsr_slave_1: entered promiscuous mode [ 93.702349][ T6166] debugfs: 'hsr0' already exists in 'hsr' [ 93.702367][ T6166] Cannot create hsr debugfs directory [ 93.987184][ T6166] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.010805][ T6166] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.013420][ T6166] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.041928][ T6166] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.045093][ T6166] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.053226][ T6166] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.055824][ T6166] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.082076][ T6166] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.186655][ T5606] Bluetooth: hci1: command 0x0c1a tx timeout [ 94.208154][ T5690] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 94.208182][ T5690] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 94.208198][ T5690] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 94.208428][ T5690] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 94.267133][ T5606] Bluetooth: hci2: command 0x0c1a tx timeout [ 94.363243][ T6166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.410728][ T6166] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.426990][ T5606] Bluetooth: hci0: command 0x0c1a tx timeout [ 94.432024][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.432162][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.464967][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.465065][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.579062][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 94.623881][ T6287] < [ 94.720314][ T6293] fuse: Unknown parameter 'f' [ 94.789068][ T6296] ======================================================= [ 94.789068][ T6296] WARNING: The mand mount option has been deprecated and [ 94.789068][ T6296] and is ignored by this kernel. Remove the mand [ 94.789068][ T6296] option from the mount to silence this warning. [ 94.789068][ T6296] ======================================================= [ 94.789165][ T6296] tmpfs: Unknown parameter 'smackfsdef' [ 94.896030][ T5620] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 94.908393][ T5606] Bluetooth: hci3: command tx timeout [ 94.927881][ T6303] MINIX-fs: unable to read superblock [ 95.047872][ T5620] usb 2-1: New USB device found: idVendor=1d34, idProduct=000a, bcdDevice=0.00 [ 95.050259][ T5620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.050285][ T5620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.050321][ T5620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.054777][ T5620] usb 2-1: config 0 descriptor?? [ 95.269279][ T6286] netlink: 'syz.1.92': attribute type 21 has an invalid length. [ 95.269381][ T6286] netlink: 'syz.1.92': attribute type 6 has an invalid length. [ 95.269403][ T6286] netlink: 132 bytes leftover after parsing attributes in process `syz.1.92'. [ 95.421713][ T6166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.443848][ T6308] sg_write: data in/out 585691/136 bytes for SCSI command 0x0-- guessing data in; [ 95.443848][ T6308] program syz.2.97 not setting count and/or reply_len properly [ 95.618810][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 95.711154][ T5620] hid-led 0003:1D34:000A.0003: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0 [ 95.754037][ T5620] hid-led 0003:1D34:000A.0003: Dream Cheeky Webmail Notifier initialized [ 95.908670][ T5691] usb 2-1: USB disconnect, device number 10 [ 95.975792][ T6166] veth0_vlan: entered promiscuous mode [ 96.003724][ T6166] veth1_vlan: entered promiscuous mode [ 96.030462][ T6340] sd 0:0:1:0: PR command failed: 1026 [ 96.030517][ T6340] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 96.030561][ T6340] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 96.064542][ T6166] veth0_macvtap: entered promiscuous mode [ 96.077627][ T6166] veth1_macvtap: entered promiscuous mode [ 96.088358][ T6166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.092122][ T6166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.127339][ T4200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.127384][ T4200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.127417][ T4200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.127448][ T4200] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.196761][ T46] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 96.214658][ T4200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.214692][ T4200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.246524][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.246542][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.266739][ T5606] Bluetooth: hci1: command 0x0c1a tx timeout [ 96.346182][ T5606] Bluetooth: hci2: command 0x0c1a tx timeout [ 96.350010][ T46] usb 3-1: unable to get BOS descriptor or descriptor too short [ 96.350059][ T46] usb 3-1: New USB device found: idVendor=0582, idProduct=004c, bcdDevice=0.40 [ 96.351295][ T46] usb 3-1: config 1 has an invalid interface number: 64 but max is 2 [ 96.351320][ T46] usb 3-1: config 1 has no interface number 0 [ 96.351390][ T46] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 96.353677][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.353700][ T46] usb 3-1: Product: syz [ 96.353722][ T46] usb 3-1: Manufacturer: syz [ 96.353736][ T46] usb 3-1: SerialNumber: syz [ 96.606388][ T6348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.606819][ T6348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.774767][ T46] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 96.784523][ T46] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 96.784552][ T46] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 96.784583][ T46] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 96.785215][ T46] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 96.785236][ T46] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 96.785257][ T46] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 96.794183][ T46] usb 3-1: failed to enable PITCH for EP 0x82 [ 96.931544][ T46] usb 3-1: USB disconnect, device number 11 [ 96.988686][ T5606] Bluetooth: hci3: command tx timeout [ 97.061439][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.64/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.123995][ T5616] usb 1-1: USB disconnect, device number 14 [ 97.596742][ T5616] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 97.687997][ T32] kauditd_printk_skb: 679 callbacks suppressed [ 97.688015][ T32] audit: type=1800 audit(1792350351.258:691): pid=6388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.109" name="bus" dev="tmpfs" ino=211 res=0 errno=-22 [ 97.756887][ T5616] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 97.757415][ T5616] usb 1-1: config 0 has no interfaces? [ 97.759623][ T5616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.759645][ T5616] usb 1-1: Product: syz [ 97.759658][ T5616] usb 1-1: Manufacturer: syz [ 97.759671][ T5616] usb 1-1: SerialNumber: syz [ 97.764091][ T5616] usb 1-1: config 0 descriptor?? [ 98.016012][ T5806] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 98.044526][ T5616] libceph: connect (1)[c::]:6789 error -101 [ 98.044788][ T5616] libceph: mon0 (1)[c::]:6789 connect error [ 98.047138][ T5616] libceph: connect (1)[c::]:6789 error -101 [ 98.047231][ T5616] libceph: mon0 (1)[c::]:6789 connect error [ 98.142200][ T6392] ceph: No mds server is up or the cluster is laggy [ 98.177132][ T5806] usb 3-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=0.00 [ 98.178134][ T5806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.666048][ T5616] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 98.816616][ T5616] usb 2-1: New USB device found: idVendor=15dc, idProduct=1806, bcdDevice=0.40 [ 98.818047][ T5616] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 98.818076][ T5616] usb 2-1: can't read configurations, error -61 [ 98.946258][ T5616] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 99.066065][ T5606] Bluetooth: hci3: command tx timeout [ 99.096887][ T5616] usb 2-1: New USB device found: idVendor=15dc, idProduct=1806, bcdDevice=0.40 [ 99.098281][ T5616] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 99.098312][ T5616] usb 2-1: can't read configurations, error -61 [ 99.098563][ T5616] usb usb2-port1: attempt power cycle [ 99.190155][ T5806] usb 3-1: Firmware version (0.0) predates our first public release. [ 99.190180][ T5806] usb 3-1: Please update to version 0.2 or newer [ 99.248594][ T5806] usb 3-1: USB disconnect, device number 12 [ 99.456087][ T5616] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 99.476921][ T5616] usb 2-1: New USB device found: idVendor=15dc, idProduct=1806, bcdDevice=0.40 [ 99.478313][ T5616] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 99.478346][ T5616] usb 2-1: can't read configurations, error -61 [ 99.606113][ T5616] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 99.627366][ T5616] usb 2-1: New USB device found: idVendor=15dc, idProduct=1806, bcdDevice=0.40 [ 99.628743][ T5616] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 99.628776][ T5616] usb 2-1: can't read configurations, error -61 [ 99.629039][ T5616] usb usb2-port1: unable to enumerate USB device [ 99.976094][ T5682] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 100.146558][ T5682] usb 3-1: New USB device found: idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 100.147360][ T5682] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.148955][ T5682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.148968][ T5682] usb 3-1: Product: syz [ 100.148975][ T5682] usb 3-1: Manufacturer: syz [ 100.148983][ T5682] usb 3-1: SerialNumber: syz [ 100.150824][ T5682] usb 3-1: config 0 descriptor?? [ 100.154037][ T5682] CoreChips 3-1:0.0: probe with driver CoreChips failed with error -22 [ 100.276981][ T5806] usb 1-1: USB disconnect, device number 15 [ 100.354331][ T5616] usb 3-1: USB disconnect, device number 13 [ 100.887844][ T6435] jffs2: notice: (6435) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 101.186167][ T46] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 101.224367][ T4200] IPVS: starting estimator thread 0... [ 101.292715][ T6445] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 101.292970][ T6445] CUSE: info not properly terminated [ 101.319219][ T6443] IPVS: using max 32 ests per chain, 76800 per kthread [ 101.343817][ T6448] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 101.353017][ T46] usb 3-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 101.354229][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 101.354244][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 101.354256][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 101.354268][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 101.410959][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.410982][ T46] usb 3-1: Product: syz [ 101.410995][ T46] usb 3-1: Manufacturer: syz [ 101.411009][ T46] usb 3-1: SerialNumber: syz [ 101.414618][ T46] usb 3-1: config 0 descriptor?? [ 101.706091][ T5616] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 101.867021][ T5616] usb 1-1: Using ep0 maxpacket: 8 [ 101.867739][ T5616] usb 1-1: New USB device found: idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 101.868720][ T5616] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 101.868741][ T5616] usb 1-1: config 6 has no interface number 0 [ 101.868778][ T5616] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 101.868798][ T5616] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 101.868820][ T5616] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 171, changing to 7 [ 101.868841][ T5616] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 49781, setting to 1024 [ 101.870907][ T5616] usb 1-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 101.870928][ T5616] usb 1-1: Product: syz [ 101.870941][ T5616] usb 1-1: Manufacturer: syz [ 101.870954][ T5616] usb 1-1: SerialNumber: syz [ 101.876446][ T5616] hso 1-1:6.2: Failed to find INT IN ep [ 102.081130][ T5616] usb 1-1: USB disconnect, device number 16 [ 102.484448][ T6466] Zero length message leads to an empty skb [ 102.584321][ T6470] tmpfs: Bad value for 'nr_blocks' [ 102.846429][ T5707] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 102.906166][ T5682] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 103.017997][ T5707] usb 2-1: not running at top speed; connect to a high speed hub [ 103.018032][ T5707] usb 2-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 103.019333][ T5707] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.019380][ T5707] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 103.019400][ T5707] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 103.019462][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.086220][ T5707] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 103.093846][ T5707] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 103.116067][ T5682] usb 1-1: New USB device found: idVendor=04d8, idProduct=0082, bcdDevice=1.00 [ 103.116992][ T5707] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 103.117119][ T5707] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 103.118054][ T5682] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 103.118121][ T5682] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 103.118145][ T5682] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 103.118166][ T5682] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 103.118185][ T5682] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 103.118219][ T5682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.123433][ T5707] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 103.124237][ T6472] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 103.237396][ T5682] ims_pcu 1-1:1.0: Max IN packet size is too small (0) [ 103.237450][ T5682] ims_pcu 1-1:1.0: probe with driver ims_pcu failed with error -22 [ 103.328929][ T5682] usb 1-1: USB disconnect, device number 17 [ 103.763086][ T5616] usb 2-1: USB disconnect, device number 15 [ 103.784042][ T5616] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 103.795193][ T5616] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 103.799235][ T5616] keyspan 2-1:1.0: device disconnected [ 103.988855][ T6478] binder: validate_parent_fixup: new_min_offset=66, sg_entry.length=0 [ 103.990184][ T6478] syz.1.133 (6478) used greatest stack depth: 12224 bytes left [ 104.017685][ T46] adutux 3-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 104.024714][ T46] usb 3-1: USB disconnect, device number 14 [ 104.236783][ T6491] netlink: NAT attribute has 8 unknown bytes [ 104.236830][ T6491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.384537][ T6491] FAULT_INJECTION: forcing a failure. [ 104.384537][ T6491] name failslab, interval 1, probability 0, space 0, times 0 [ 104.384570][ T6491] CPU: 0 UID: 0 PID: 6491 Comm: syz.2.138 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.384595][ T6491] Tainted: [L]=SOFTLOCKUP [ 104.384602][ T6491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.384613][ T6491] Call Trace: [ 104.384620][ T6491] [ 104.384628][ T6491] dump_stack_lvl+0xe8/0x150 [ 104.384659][ T6491] should_fail_ex+0x3eb/0x540 [ 104.384689][ T6491] should_failslab+0xa8/0x100 [ 104.384710][ T6491] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 104.384738][ T6491] ? __lock_acquire+0x747/0x2de0 [ 104.384756][ T6491] ? __kernfs_new_node+0xa9/0x980 [ 104.384775][ T6491] ? __kernfs_new_node+0xa9/0x980 [ 104.384801][ T6491] kstrdup+0x42/0x100 [ 104.384826][ T6491] __kernfs_new_node+0xa9/0x980 [ 104.384856][ T6491] ? __pfx___kernfs_new_node+0x10/0x10 [ 104.384887][ T6491] ? kernfs_root+0x1c/0x230 [ 104.384913][ T6491] ? kernfs_root+0x1c/0x230 [ 104.384932][ T6491] ? kernfs_root+0x1c/0x230 [ 104.384949][ T6491] ? kernfs_root+0x1c/0x230 [ 104.384977][ T6491] kernfs_new_node+0xeb/0x140 [ 104.385003][ T6491] kernfs_create_link+0xe3/0x240 [ 104.385034][ T6491] sysfs_do_create_link_sd+0x83/0x110 [ 104.385056][ T6491] device_create_sys_dev_entry+0x122/0x190 [ 104.385080][ T6491] ? __pfx_device_create_sys_dev_entry+0x10/0x10 [ 104.385101][ T6491] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 104.385130][ T6491] ? device_create_file+0xf4/0x1b0 [ 104.385153][ T6491] device_add+0x71e/0xb80 [ 104.385176][ T6491] tty_register_device_attr+0x428/0x9b0 [ 104.385212][ T6491] ? __pfx_tty_register_device_attr+0x10/0x10 [ 104.385249][ T6491] ? tty_port_init+0x136/0x1a0 [ 104.385277][ T6491] ? gsm_dlci_alloc+0x330/0x640 [ 104.385299][ T6491] gsm_activate_mux+0x110/0x2a0 [ 104.385323][ T6491] gsmld_ioctl+0xcf5/0x1930 [ 104.385359][ T6491] ? __pfx_gsmld_ioctl+0x10/0x10 [ 104.385398][ T6491] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 104.385429][ T6491] ? ldsem_down_read+0x12/0x40 [ 104.385455][ T6491] ? __pfx_gsmld_ioctl+0x10/0x10 [ 104.385481][ T6491] tty_ioctl+0x9bd/0xde0 [ 104.385508][ T6491] ? __pfx_tty_ioctl+0x10/0x10 [ 104.385534][ T6491] __se_sys_ioctl+0xfc/0x170 [ 104.385557][ T6491] do_syscall_64+0x166/0x520 [ 104.385583][ T6491] ? trace_irq_disable+0x3b/0x140 [ 104.385604][ T6491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.385623][ T6491] ? clear_bhb_loop+0x70/0xc0 [ 104.385645][ T6491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.385663][ T6491] RIP: 0033:0x7fcb34f9e559 [ 104.385680][ T6491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.385695][ T6491] RSP: 002b:00007fcb35e62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.385715][ T6491] RAX: ffffffffffffffda RBX: 00007fcb35225fa0 RCX: 00007fcb34f9e559 [ 104.385730][ T6491] RDX: 0000200000000300 RSI: 0000000040204706 RDI: 0000000000000006 [ 104.385742][ T6491] RBP: 00007fcb35035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 104.385753][ T6491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.385763][ T6491] R13: 00007fcb35226038 R14: 00007fcb35225fa0 R15: 00007fff3490da18 [ 104.385794][ T6491] [ 104.786923][ T6503] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 104.837502][ T6507] qnx6: Unable to read first mmi superblock [ 104.861603][ T6508] netlink: 16 bytes leftover after parsing attributes in process `syz.1.139'. [ 105.167868][ T6520] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 105.260464][ T6523] FAULT_INJECTION: forcing a failure. [ 105.260464][ T6523] name failslab, interval 1, probability 0, space 0, times 0 [ 105.260487][ T6523] CPU: 1 UID: 0 PID: 6523 Comm: syz.2.146 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.260502][ T6523] Tainted: [L]=SOFTLOCKUP [ 105.260505][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.260512][ T6523] Call Trace: [ 105.260517][ T6523] [ 105.260521][ T6523] dump_stack_lvl+0xe8/0x150 [ 105.260541][ T6523] should_fail_ex+0x3eb/0x540 [ 105.260559][ T6523] should_failslab+0xa8/0x100 [ 105.260572][ T6523] __kmalloc_noprof+0xf9/0x710 [ 105.260588][ T6523] ? tomoyo_encode+0x2ad/0x570 [ 105.260603][ T6523] ? tomoyo_encode+0x2ad/0x570 [ 105.260621][ T6523] tomoyo_encode+0x2ad/0x570 [ 105.260640][ T6523] tomoyo_realpath_from_path+0x5fa/0x640 [ 105.260663][ T6523] tomoyo_check_open_permission+0x229/0x470 [ 105.260677][ T6523] ? tomoyo_check_open_permission+0x1d3/0x470 [ 105.260691][ T6523] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 105.260706][ T6523] ? __asan_memset+0x22/0x50 [ 105.260737][ T6523] ? devcgroup_check_permission+0x31/0x8f0 [ 105.260751][ T6523] security_file_open+0xa9/0x240 [ 105.260765][ T6523] do_dentry_open+0x495/0x1360 [ 105.260787][ T6523] vfs_open_consume+0x4a/0x350 [ 105.260799][ T6523] ? path_openat+0x16e1/0x20f0 [ 105.260810][ T6523] path_openat+0x16fc/0x20f0 [ 105.260830][ T6523] do_file_open+0x23e/0x4a0 [ 105.260843][ T6523] ? __pfx_do_file_open+0x10/0x10 [ 105.260864][ T6523] ? _raw_spin_unlock+0x28/0x50 [ 105.260877][ T6523] ? alloc_fd+0x6af/0x760 [ 105.260897][ T6523] do_sys_openat2+0x115/0x200 [ 105.260913][ T6523] ? __se_sys_futex+0x3a8/0x450 [ 105.260928][ T6523] ? __pfx_do_sys_openat2+0x10/0x10 [ 105.260941][ T6523] ? ksys_write+0x242/0x270 [ 105.260957][ T6523] ? __pfx___se_sys_futex+0x10/0x10 [ 105.260972][ T6523] ? __pfx_ksys_write+0x10/0x10 [ 105.260990][ T6523] __x64_sys_openat+0x138/0x170 [ 105.261006][ T6523] do_syscall_64+0x166/0x520 [ 105.261020][ T6523] ? trace_irq_disable+0x3b/0x140 [ 105.261032][ T6523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.261042][ T6523] ? clear_bhb_loop+0x70/0xc0 [ 105.261056][ T6523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.261066][ T6523] RIP: 0033:0x7fcb34f9e559 [ 105.261076][ T6523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.261084][ T6523] RSP: 002b:00007fcb35e62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 105.261096][ T6523] RAX: ffffffffffffffda RBX: 00007fcb35225fa0 RCX: 00007fcb34f9e559 [ 105.261104][ T6523] RDX: 0000000000000400 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 105.261111][ T6523] RBP: 00007fcb35035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 105.261117][ T6523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.261123][ T6523] R13: 00007fcb35226038 R14: 00007fcb35225fa0 R15: 00007fff3490da18 [ 105.261139][ T6523] [ 105.261179][ T6523] ERROR: Out of memory at tomoyo_realpath_from_path. [ 105.660652][ T6531] netlink: NAT attribute has 8 unknown bytes [ 105.660687][ T6531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.454960][ T6539] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 106.491658][ T6531] FAULT_INJECTION: forcing a failure. [ 106.491658][ T6531] name failslab, interval 1, probability 0, space 0, times 0 [ 106.491691][ T6531] CPU: 0 UID: 0 PID: 6531 Comm: syz.1.148 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.491720][ T6531] Tainted: [L]=SOFTLOCKUP [ 106.491727][ T6531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.491739][ T6531] Call Trace: [ 106.491747][ T6531] [ 106.491756][ T6531] dump_stack_lvl+0xe8/0x150 [ 106.491787][ T6531] should_fail_ex+0x3eb/0x540 [ 106.491818][ T6531] should_failslab+0xa8/0x100 [ 106.491841][ T6531] __kmalloc_noprof+0xf9/0x710 [ 106.491865][ T6531] ? kobj_map+0x76/0x5b0 [ 106.491885][ T6531] ? kobj_map+0x76/0x5b0 [ 106.491913][ T6531] kobj_map+0x76/0x5b0 [ 106.491935][ T6531] ? __pfx_exact_match+0x10/0x10 [ 106.491954][ T6531] ? __pfx_exact_lock+0x10/0x10 [ 106.491975][ T6531] ? __kmalloc_cache_noprof+0x148/0x600 [ 106.492006][ T6531] cdev_add+0x8c/0x160 [ 106.492028][ T6531] tty_register_device_attr+0x788/0x9b0 [ 106.492064][ T6531] ? __pfx_tty_register_device_attr+0x10/0x10 [ 106.492101][ T6531] ? tty_port_init+0x136/0x1a0 [ 106.492132][ T6531] ? gsm_dlci_alloc+0x330/0x640 [ 106.492166][ T6531] gsm_activate_mux+0x110/0x2a0 [ 106.492190][ T6531] gsmld_ioctl+0xcf5/0x1930 [ 106.492227][ T6531] ? __pfx_gsmld_ioctl+0x10/0x10 [ 106.492266][ T6531] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 106.492298][ T6531] ? ldsem_down_read+0x12/0x40 [ 106.492327][ T6531] ? __pfx_gsmld_ioctl+0x10/0x10 [ 106.492354][ T6531] tty_ioctl+0x9bd/0xde0 [ 106.492384][ T6531] ? __pfx_tty_ioctl+0x10/0x10 [ 106.492409][ T6531] __se_sys_ioctl+0xfc/0x170 [ 106.492431][ T6531] do_syscall_64+0x166/0x520 [ 106.492457][ T6531] ? trace_irq_disable+0x3b/0x140 [ 106.492479][ T6531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.492500][ T6531] ? clear_bhb_loop+0x70/0xc0 [ 106.492525][ T6531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.492546][ T6531] RIP: 0033:0x7f21cc39e559 [ 106.492566][ T6531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.492583][ T6531] RSP: 002b:00007f21cd345028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.492606][ T6531] RAX: ffffffffffffffda RBX: 00007f21cc625fa0 RCX: 00007f21cc39e559 [ 106.492622][ T6531] RDX: 0000200000000300 RSI: 0000000040204706 RDI: 0000000000000006 [ 106.492634][ T6531] RBP: 00007f21cc435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 106.492646][ T6531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.492656][ T6531] R13: 00007f21cc626038 R14: 00007f21cc625fa0 R15: 00007ffe301b0ca8 [ 106.492687][ T6531] [ 106.499492][ T6533] smpboot: CPU 1 is now offline [ 106.791479][ T5806] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 106.827303][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 106.849968][ T6537] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 106.954131][ T5806] usb 3-1: unable to get BOS descriptor or descriptor too short [ 106.955014][ T5806] usb 3-1: not running at top speed; connect to a high speed hub [ 106.955043][ T5806] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a3, bcdDevice=fd.97 [ 106.983873][ T5806] usb 3-1: config 2 has an invalid interface number: 8 but max is 0 [ 106.983898][ T5806] usb 3-1: config 2 has no interface number 0 [ 106.983938][ T5806] usb 3-1: config 2 interface 8 has no altsetting 0 [ 107.003696][ T10] usb 1-1: New USB device found: idVendor=044f, idProduct=b65a, bcdDevice=0.00 [ 107.023702][ T5806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.023724][ T5806] usb 3-1: Product: syz [ 107.023736][ T5806] usb 3-1: Manufacturer: syz [ 107.023820][ T5806] usb 3-1: SerialNumber: syz [ 107.026865][ T10] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.026894][ T10] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.026917][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 107.026947][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.079330][ T10] usb 1-1: config 0 descriptor?? [ 107.112916][ T10] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count [ 107.323159][ T5806] usbtest 3-1:2.8: couldn't get endpoints, -71 [ 107.323209][ T5806] usbtest 3-1:2.8: probe with driver usbtest failed with error -71 [ 107.345473][ T5806] usb 3-1: USB disconnect, device number 15 [ 107.406595][ T5757] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 107.557252][ T5757] usb 2-1: New USB device found: idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 107.558416][ T5757] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 107.558442][ T5757] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 107.558463][ T5757] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 107.560719][ T5757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.560742][ T5757] usb 2-1: Product: syz [ 107.560755][ T5757] usb 2-1: Manufacturer: syz [ 107.560769][ T5757] usb 2-1: SerialNumber: syz [ 107.570954][ T5757] usb 2-1: config 0 descriptor?? [ 107.572939][ T6553] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 107.573058][ T6553] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 107.575045][ T5757] usb 2-1: ucan: probing device on interface #0 [ 107.702371][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 107.702469][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 107.705615][ T10] usb 1-1: USB disconnect, device number 18 [ 107.775315][ T5757] usb 2-1: ucan: could not read protocol version, ret=-71 [ 107.775340][ T5757] usb 2-1: ucan: probe failed; try to update the device firmware [ 107.794961][ T5757] usb 2-1: USB disconnect, device number 16 [ 108.887347][ T5691] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 108.908702][ T5757] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 109.041309][ T6626] netlink: NAT attribute has 8 unknown bytes [ 109.041343][ T6626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.047535][ T5691] usb 1-1: Using ep0 maxpacket: 8 [ 109.048775][ T5691] usb 1-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40 [ 109.050678][ T5691] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.050698][ T5691] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 109.050747][ T5691] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 109.056384][ T5691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.056404][ T5691] usb 1-1: Product: syz [ 109.056417][ T5691] usb 1-1: Manufacturer: syz [ 109.056429][ T5691] usb 1-1: SerialNumber: syz [ 109.078818][ T6628] SQUASHFS error: Failed to read block 0x0: -5 [ 109.078897][ T6628] unable to read squashfs_super_block [ 109.086200][ T5757] usb 3-1: unable to get BOS descriptor or descriptor too short [ 109.086269][ T5757] usb 3-1: New USB device found: idVendor=04fa, idProduct=4201, bcdDevice=0.40 [ 109.087436][ T5757] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 36, changing to 7 [ 109.091582][ T5757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.091604][ T5757] usb 3-1: Product: syz [ 109.091616][ T5757] usb 3-1: Manufacturer: syz [ 109.091652][ T5757] usb 3-1: SerialNumber: syz [ 109.291175][ T6626] FAULT_INJECTION: forcing a failure. [ 109.291175][ T6626] name failslab, interval 1, probability 0, space 0, times 0 [ 109.291206][ T6626] CPU: 1 UID: 0 PID: 6626 Comm: syz.4.161 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.291230][ T6626] Tainted: [L]=SOFTLOCKUP [ 109.291239][ T6626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.291250][ T6626] Call Trace: [ 109.291258][ T6626] [ 109.291266][ T6626] dump_stack_lvl+0xe8/0x150 [ 109.291297][ T6626] should_fail_ex+0x3eb/0x540 [ 109.291328][ T6626] should_failslab+0xa8/0x100 [ 109.291347][ T6626] ? skb_clone+0x212/0x3a0 [ 109.291376][ T6626] kmem_cache_alloc_noprof+0x9c/0x600 [ 109.291405][ T6626] ? skb_clone+0x212/0x3a0 [ 109.291437][ T6626] skb_clone+0x212/0x3a0 [ 109.291462][ T6626] ? netlink_broadcast_filtered+0x5a0/0x1070 [ 109.291485][ T6626] netlink_broadcast_filtered+0x5ae/0x1070 [ 109.291530][ T6626] netlink_broadcast+0x37/0x50 [ 109.291553][ T6626] kobject_uevent_net_broadcast+0x378/0x560 [ 109.291583][ T6626] kobject_uevent_env+0x566/0x9e0 [ 109.291611][ T6626] tty_register_device_attr+0x4fe/0x9b0 [ 109.291645][ T6626] ? __pfx_tty_register_device_attr+0x10/0x10 [ 109.291681][ T6626] ? tty_port_init+0x136/0x1a0 [ 109.291709][ T6626] ? gsm_dlci_alloc+0x330/0x640 [ 109.291732][ T6626] gsm_activate_mux+0x110/0x2a0 [ 109.291757][ T6626] gsmld_ioctl+0xcf5/0x1930 [ 109.291792][ T6626] ? __pfx_gsmld_ioctl+0x10/0x10 [ 109.291832][ T6626] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 109.291863][ T6626] ? ldsem_down_read+0x12/0x40 [ 109.291890][ T6626] ? __pfx_gsmld_ioctl+0x10/0x10 [ 109.291916][ T6626] tty_ioctl+0x9bd/0xde0 [ 109.291942][ T6626] ? __pfx_tty_ioctl+0x10/0x10 [ 109.291968][ T6626] __se_sys_ioctl+0xfc/0x170 [ 109.291991][ T6626] do_syscall_64+0x166/0x520 [ 109.292014][ T6626] ? trace_irq_disable+0x3b/0x140 [ 109.292035][ T6626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.292055][ T6626] ? clear_bhb_loop+0x70/0xc0 [ 109.292078][ T6626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.292096][ T6626] RIP: 0033:0x7ff6a619e559 [ 109.292115][ T6626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.292130][ T6626] RSP: 002b:00007ff6a43f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.292150][ T6626] RAX: ffffffffffffffda RBX: 00007ff6a6425fa0 RCX: 00007ff6a619e559 [ 109.292165][ T6626] RDX: 0000200000000300 RSI: 0000000040204706 RDI: 0000000000000006 [ 109.292177][ T6626] RBP: 00007ff6a6235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 109.292189][ T6626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.292200][ T6626] R13: 00007ff6a6426038 R14: 00007ff6a6425fa0 R15: 00007fffac800e68 [ 109.292232][ T6626] [ 109.647668][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.162'. [ 109.942003][ T6607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.945209][ T6607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.947574][ T5691] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 109.951146][ T5691] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 110.045551][ T6608] netlink: 24 bytes leftover after parsing attributes in process `syz.2.154'. [ 110.045656][ T6608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.154'. [ 110.183825][ T6608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.184339][ T6608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.281948][ T5757] usb 3-1: 1:1 : unsupported format bits 0x2004 [ 110.281977][ T5757] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 110.306296][ T5691] usb 1-1: USB disconnect, device number 19 [ 111.120361][ T6675] bonding: bç¡·„ÆQ% is being created... [ 111.128005][ T6675] bonding: bç¡·„ÆQ% creation failed [ 111.515496][ T5757] usb 3-1: unit 2 not found! [ 111.515519][ T5757] usb 3-1: unit 0 not found! [ 111.644812][ T5757] usb 3-1: USB disconnect, device number 16 [ 111.935340][ T6690] netlink: 'syz.4.174': attribute type 29 has an invalid length. [ 111.935375][ T6690] netlink: 1 bytes leftover after parsing attributes in process `syz.4.174'. [ 112.000365][ T6688] netlink: NAT attribute has 8 unknown bytes [ 112.000400][ T6688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.073414][ T6692] netlink: 9 bytes leftover after parsing attributes in process `syz.1.175'. [ 112.082192][ T6692] gretap0: entered promiscuous mode [ 112.183131][ T6688] FAULT_INJECTION: forcing a failure. [ 112.183131][ T6688] name failslab, interval 1, probability 0, space 0, times 0 [ 112.183159][ T6688] CPU: 0 UID: 0 PID: 6688 Comm: syz.0.173 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.183187][ T6688] Tainted: [L]=SOFTLOCKUP [ 112.183193][ T6688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.183203][ T6688] Call Trace: [ 112.183210][ T6688] [ 112.183217][ T6688] dump_stack_lvl+0xe8/0x150 [ 112.183247][ T6688] should_fail_ex+0x3eb/0x540 [ 112.183277][ T6688] should_failslab+0xa8/0x100 [ 112.183297][ T6688] ? skb_clone+0x212/0x3a0 [ 112.183325][ T6688] kmem_cache_alloc_noprof+0x9c/0x600 [ 112.183353][ T6688] ? skb_clone+0x212/0x3a0 [ 112.183385][ T6688] skb_clone+0x212/0x3a0 [ 112.183408][ T6688] ? netlink_broadcast_filtered+0x5a0/0x1070 [ 112.183430][ T6688] netlink_broadcast_filtered+0x5ae/0x1070 [ 112.183464][ T6688] netlink_broadcast+0x37/0x50 [ 112.183483][ T6688] kobject_uevent_net_broadcast+0x378/0x560 [ 112.183512][ T6688] kobject_uevent_env+0x566/0x9e0 [ 112.183541][ T6688] tty_register_device_attr+0x4fe/0x9b0 [ 112.183585][ T6688] ? __pfx_tty_register_device_attr+0x10/0x10 [ 112.183623][ T6688] ? tty_port_init+0x136/0x1a0 [ 112.183652][ T6688] ? gsm_dlci_alloc+0x330/0x640 [ 112.183675][ T6688] gsm_activate_mux+0x110/0x2a0 [ 112.183699][ T6688] gsmld_ioctl+0xcf5/0x1930 [ 112.183735][ T6688] ? __pfx_gsmld_ioctl+0x10/0x10 [ 112.183775][ T6688] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 112.183808][ T6688] ? ldsem_down_read+0x12/0x40 [ 112.183833][ T6688] ? __pfx_gsmld_ioctl+0x10/0x10 [ 112.183858][ T6688] tty_ioctl+0x9bd/0xde0 [ 112.183884][ T6688] ? __pfx_tty_ioctl+0x10/0x10 [ 112.183907][ T6688] __se_sys_ioctl+0xfc/0x170 [ 112.183929][ T6688] do_syscall_64+0x166/0x520 [ 112.183953][ T6688] ? trace_irq_disable+0x3b/0x140 [ 112.183971][ T6688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.183991][ T6688] ? clear_bhb_loop+0x70/0xc0 [ 112.184014][ T6688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.184033][ T6688] RIP: 0033:0x7f9b82d9e559 [ 112.184049][ T6688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.184063][ T6688] RSP: 002b:00007f9b83c2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.184083][ T6688] RAX: ffffffffffffffda RBX: 00007f9b83025fa0 RCX: 00007f9b82d9e559 [ 112.184095][ T6688] RDX: 0000200000000300 RSI: 0000000040204706 RDI: 0000000000000006 [ 112.184107][ T6688] RBP: 00007f9b82e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 112.184118][ T6688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.184129][ T6688] R13: 00007f9b83026038 R14: 00007f9b83025fa0 R15: 00007ffc23aced18 [ 112.184158][ T6688] [ 112.804964][ T6692] 9p: Bad value for 'rfdno' [ 112.940278][ T6702] FAULT_INJECTION: forcing a failure. [ 112.940278][ T6702] name failslab, interval 1, probability 0, space 0, times 0 [ 112.940308][ T6702] CPU: 0 UID: 0 PID: 6702 Comm: syz.2.178 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.940333][ T6702] Tainted: [L]=SOFTLOCKUP [ 112.940339][ T6702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.940349][ T6702] Call Trace: [ 112.940356][ T6702] [ 112.940364][ T6702] dump_stack_lvl+0xe8/0x150 [ 112.940393][ T6702] should_fail_ex+0x3eb/0x540 [ 112.940422][ T6702] should_failslab+0xa8/0x100 [ 112.940441][ T6702] ? alloc_empty_file+0x5b/0x1d0 [ 112.940463][ T6702] kmem_cache_alloc_noprof+0x9c/0x600 [ 112.940487][ T6702] ? stack_depot_save_flags+0x33/0x7f0 [ 112.940512][ T6702] ? alloc_empty_file+0x5b/0x1d0 [ 112.940548][ T6702] alloc_empty_file+0x5b/0x1d0 [ 112.940567][ T6702] path_openat+0x96/0x20f0 [ 112.940595][ T6702] do_file_open+0x23e/0x4a0 [ 112.940612][ T6702] ? __pfx_do_file_open+0x10/0x10 [ 112.940641][ T6702] ? _raw_spin_unlock+0x28/0x50 [ 112.940656][ T6702] ? alloc_fd+0x6af/0x760 [ 112.940682][ T6702] do_sys_openat2+0x115/0x200 [ 112.940699][ T6702] ? __se_sys_futex+0x3a8/0x450 [ 112.940717][ T6702] ? __pfx_do_sys_openat2+0x10/0x10 [ 112.940738][ T6702] ? rcu_is_watching+0x16/0xb0 [ 112.940758][ T6702] __x64_sys_openat+0x138/0x170 [ 112.940779][ T6702] do_syscall_64+0x166/0x520 [ 112.940796][ T6702] ? trace_irq_disable+0x3b/0x140 [ 112.940811][ T6702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.940825][ T6702] ? clear_bhb_loop+0x70/0xc0 [ 112.940842][ T6702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.940856][ T6702] RIP: 0033:0x7fcb34f9e559 [ 112.940871][ T6702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.940882][ T6702] RSP: 002b:00007fcb35e20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 112.940897][ T6702] RAX: ffffffffffffffda RBX: 00007fcb35226180 RCX: 00007fcb34f9e559 [ 112.940912][ T6702] RDX: 0000000000000802 RSI: 0000200000002a40 RDI: ffffffffffffff9c [ 112.940921][ T6702] RBP: 00007fcb35035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 112.940930][ T6702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.940938][ T6702] R13: 00007fcb35226218 R14: 00007fcb35226180 R15: 00007fff3490da18 [ 112.940962][ T6702] [ 113.545181][ T6712] cgroup: Unknown subsys name './config' [ 113.801452][ T6720] netlink: 20 bytes leftover after parsing attributes in process `syz.1.184'. [ 113.996019][ T5691] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 114.056174][ T5757] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 114.146258][ T5691] usb 1-1: Using ep0 maxpacket: 8 [ 114.146938][ T5691] usb 1-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 114.149273][ T5691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.149314][ T5691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.151904][ T5691] usb 1-1: config 0 descriptor?? [ 114.218873][ T5682] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 114.221359][ T5757] usb 2-1: unable to get BOS descriptor or descriptor too short [ 114.221412][ T5757] usb 2-1: New USB device found: idVendor=0c45, idProduct=800a, bcdDevice=5a.9d [ 114.223632][ T5757] usb 2-1: config 3 has an invalid interface number: 249 but max is 0 [ 114.223654][ T5757] usb 2-1: config 3 has no interface number 0 [ 114.223680][ T5757] usb 2-1: config 3 interface 249 has no altsetting 0 [ 114.227150][ T5757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.227172][ T5757] usb 2-1: Product: syz [ 114.227184][ T5757] usb 2-1: Manufacturer: syz [ 114.227219][ T5757] usb 2-1: SerialNumber: syz [ 114.357275][ T5691] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 114.405197][ T6736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.405629][ T6736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.423156][ T5691] nci: nci_stop_poll: unable to stop poll, since poll is not active [ 114.440596][ T5682] usb 3-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 114.443062][ T5682] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 114.443095][ T5682] usb 3-1: can't read configurations, error -71 [ 114.459255][ T5757] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 114.459664][ T5757] gspca_sn9c2028: read1 error -71 [ 114.460005][ T5757] gspca_sn9c2028: read1 error -71 [ 114.460340][ T5757] gspca_sn9c2028: read1 error -71 [ 114.460418][ T5757] sn9c2028 2-1:3.249: probe with driver sn9c2028 failed with error -71 [ 114.463387][ T5757] usb 2-1: USB disconnect, device number 17 [ 114.563909][ T5691] usb 1-1: USB disconnect, device number 20 [ 115.409421][ T5691] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 115.556847][ T5691] usb 1-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 115.564143][ T5691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.564166][ T5691] usb 1-1: Product: syz [ 115.564179][ T5691] usb 1-1: Manufacturer: syz [ 115.564192][ T5691] usb 1-1: SerialNumber: syz [ 115.694610][ T5606] Bluetooth: hci0: unexpected event for opcode 0x0035 [ 115.787483][ T6743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.789834][ T6743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.874998][ T5691] rtl8150 1-1:1.0: couldn't reset the device [ 115.875407][ T5691] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 115.891222][ T5691] usb 1-1: USB disconnect, device number 21 [ 116.689517][ T6770] binder: Error in use_page_slow: ESRCH [ 116.691206][ T6770] binder: use_range failure ESRCH [ 116.691948][ T6770] netlink: 140 bytes leftover after parsing attributes in process `syz.0.195'. [ 116.691965][ T6770] netlink: 6 bytes leftover after parsing attributes in process `syz.0.195'. [ 116.756009][ T5691] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 116.852014][ T6723] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 116.908444][ T5691] usb 2-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 116.912537][ T5691] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 116.912574][ T5691] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 116.912596][ T5691] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 116.912617][ T5691] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 116.912652][ T5691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.922214][ T6766] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 116.922343][ T6766] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 116.929677][ T5691] pl2303 2-1:1.0: pl2303 converter detected [ 116.947998][ T5691] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 117.134556][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.140868][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.143902][ T5691] usb 2-1: USB disconnect, device number 18 [ 117.165717][ T5691] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 117.171232][ T5691] pl2303 2-1:1.0: device disconnected [ 118.106424][ T5757] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 118.268391][ T5757] usb 2-1: New USB device found: idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 118.283197][ T5757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.283220][ T5757] usb 2-1: Product: syz [ 118.283232][ T5757] usb 2-1: Manufacturer: syz [ 118.283245][ T5757] usb 2-1: SerialNumber: syz [ 118.295383][ T5757] r8152-cfgselector 2-1: Unknown version 0x0000 [ 118.295403][ T5757] r8152-cfgselector 2-1: config 0 descriptor?? [ 118.517742][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.202'. [ 118.572005][ T6798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.742587][ T5806] r8152-cfgselector 2-1: USB disconnect, device number 19 [ 119.088233][ T5806] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 119.247172][ T5806] usb 2-1: New USB device found: idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 119.268184][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.268208][ T5806] usb 2-1: Product: syz [ 119.268221][ T5806] usb 2-1: Manufacturer: syz [ 119.268234][ T5806] usb 2-1: SerialNumber: syz [ 119.302655][ T5806] r8152-cfgselector 2-1: Unknown version 0x0000 [ 119.302677][ T5806] r8152-cfgselector 2-1: config 0 descriptor?? [ 119.510530][ T5806] r8152-cfgselector 2-1: Unknown version 0x0000 [ 119.511003][ T5806] r8152-cfgselector 2-1: No union descriptors [ 119.531144][ T5806] r8152-cfgselector 2-1: USB disconnect, device number 20 [ 119.838961][ T6827] syz.0.206 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 119.931446][ T6834] FAULT_INJECTION: forcing a failure. [ 119.931446][ T6834] name failslab, interval 1, probability 0, space 0, times 0 [ 119.931491][ T6834] CPU: 0 UID: 0 PID: 6834 Comm: syz.4.208 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.931521][ T6834] Tainted: [L]=SOFTLOCKUP [ 119.931528][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.931539][ T6834] Call Trace: [ 119.931546][ T6834] [ 119.931554][ T6834] dump_stack_lvl+0xe8/0x150 [ 119.931596][ T6834] should_fail_ex+0x3eb/0x540 [ 119.931629][ T6834] should_failslab+0xa8/0x100 [ 119.931653][ T6834] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 119.931681][ T6834] ? alloc_inode+0xb8/0x1b0 [ 119.931704][ T6834] ? alloc_inode+0xb8/0x1b0 [ 119.931733][ T6834] alloc_inode+0xb8/0x1b0 [ 119.931758][ T6834] path_from_stashed+0x205/0x580 [ 119.931788][ T6834] ? userns_get+0x1f7/0x250 [ 119.931813][ T6834] proc_ns_get_link+0x16b/0x2a0 [ 119.931834][ T6834] ? __pfx_proc_ns_get_link+0x10/0x10 [ 119.931861][ T6834] ? __pfx_proc_ns_get_link+0x10/0x10 [ 119.931882][ T6834] pick_link+0x72a/0xfd0 [ 119.931920][ T6834] step_into_slowpath+0x58a/0x820 [ 119.931950][ T6834] ? __pfx_step_into_slowpath+0x10/0x10 [ 119.931987][ T6834] path_openat+0xa97/0x20f0 [ 119.932026][ T6834] do_file_open+0x23e/0x4a0 [ 119.932051][ T6834] ? __pfx_do_file_open+0x10/0x10 [ 119.932089][ T6834] ? _raw_spin_unlock+0x28/0x50 [ 119.932111][ T6834] ? alloc_fd+0x6af/0x760 [ 119.932146][ T6834] do_sys_openat2+0x115/0x200 [ 119.932173][ T6834] ? __se_sys_futex+0x3a8/0x450 [ 119.932201][ T6834] ? __pfx_do_sys_openat2+0x10/0x10 [ 119.932233][ T6834] ? rcu_is_watching+0x16/0xb0 [ 119.932272][ T6834] __x64_sys_openat+0x138/0x170 [ 119.932304][ T6834] do_syscall_64+0x166/0x520 [ 119.932332][ T6834] ? trace_irq_disable+0x3b/0x140 [ 119.932355][ T6834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.932377][ T6834] ? clear_bhb_loop+0x70/0xc0 [ 119.932402][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.932423][ T6834] RIP: 0033:0x7ff6a615ed8e [ 119.932450][ T6834] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 119.932467][ T6834] RSP: 002b:00007ff6a43f5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 119.932495][ T6834] RAX: ffffffffffffffda RBX: 00007ff6a43f66c0 RCX: 00007ff6a615ed8e [ 119.932511][ T6834] RDX: 0000000000000000 RSI: 00007ff6a43f5f90 RDI: ffffffffffffff9c [ 119.932524][ T6834] RBP: 00007ff6a6235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 119.932538][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.932549][ T6834] R13: 00007ff6a6426038 R14: 00007ff6a6425fa0 R15: 00007fffac800e68 [ 119.932583][ T6834] [ 120.814984][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'. [ 121.157822][ T6860] [ 121.160214][ T6860] ============================================ [ 121.166372][ T6860] WARNING: possible recursive locking detected [ 121.172546][ T6860] syzkaller #0 Tainted: G L [ 121.178618][ T6860] -------------------------------------------- [ 121.184777][ T6860] syz.2.214/6860 is trying to acquire lock: [ 121.190679][ T6860] ffff888028179ee8 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_buffered_write+0xd7/0x160 [ 121.201404][ T6860] [ 121.201404][ T6860] but task is already holding lock: [ 121.208762][ T6860] ffff888028179ee8 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_write_iter+0x6c5/0x810 [ 121.219233][ T6860] [ 121.219233][ T6860] other info that might help us debug this: [ 121.227291][ T6860] Possible unsafe locking scenario: [ 121.227291][ T6860] [ 121.234741][ T6860] CPU0 [ 121.238017][ T6860] ---- [ 121.241300][ T6860] lock(&sb->s_type->i_mutex_key#10); [ 121.246790][ T6860] lock(&sb->s_type->i_mutex_key#10); [ 121.252250][ T6860] [ 121.252250][ T6860] *** DEADLOCK *** [ 121.252250][ T6860] [ 121.260385][ T6860] May be due to missing lock nesting notation [ 121.260385][ T6860] [ 121.268695][ T6860] locks held by syz.2.214/6860: 1, last CPU#1: [ 121.274852][ T6860] #0: ffff888028179ee8 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_write_iter+0x6c5/0x810 [ 121.275984][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 121.293289][ T6860] [ 121.293289][ T6860] stack backtrace: [ 121.299183][ T6860] CPU: 1 UID: 0 PID: 6860 Comm: syz.2.214 Tainted: G L syzkaller #0 PREEMPT(full) [ 121.310029][ T6860] Tainted: [L]=SOFTLOCKUP [ 121.314352][ T6860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.324402][ T6860] Call Trace: [ 121.327679][ T6860] [ 121.330605][ T6860] dump_stack_lvl+0xe8/0x150 [ 121.335215][ T6860] print_deadlock_bug+0x27a/0x290 [ 121.340248][ T6860] __lock_acquire+0x25db/0x2de0 [ 121.345091][ T6860] ? __lock_acquire+0x747/0x2de0 [ 121.350025][ T6860] lock_acquire+0x115/0x350 [ 121.354517][ T6860] ? blkdev_buffered_write+0xd7/0x160 [ 121.359879][ T6860] down_read+0x45/0x320 [ 121.364030][ T6860] ? blkdev_buffered_write+0xd7/0x160 [ 121.369389][ T6860] blkdev_buffered_write+0xd7/0x160 [ 121.374573][ T6860] blkdev_write_iter+0x6d5/0x810 [ 121.379505][ T6860] vfs_write+0x612/0xba0 [ 121.383752][ T6860] ? __pfx_vfs_write+0x10/0x10 [ 121.388515][ T6860] ? __fget_files+0x3a2/0x420 [ 121.393184][ T6860] ? __fget_files+0x2a/0x420 [ 121.397767][ T6860] ? fdget+0x1ac/0x250 [ 121.401830][ T6860] ksys_write+0x150/0x270 [ 121.406156][ T6860] ? __pfx_ksys_write+0x10/0x10 [ 121.411004][ T6860] do_syscall_64+0x166/0x520 [ 121.415584][ T6860] ? trace_irq_disable+0x3b/0x140 [ 121.420601][ T6860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.426663][ T6860] ? clear_bhb_loop+0x70/0xc0 [ 121.431331][ T6860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.437210][ T6860] RIP: 0033:0x7fcb34f9e559 [ 121.441611][ T6860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.461207][ T6860] RSP: 002b:00007fcb35e62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 121.469610][ T6860] RAX: ffffffffffffffda RBX: 00007fcb35225fa0 RCX: 00007fcb34f9e559 [ 121.477573][ T6860] RDX: 00000000fffffe38 RSI: 0000200000000400 RDI: 0000000000000009 [ 121.485530][ T6860] RBP: 00007fcb35035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 121.493488][ T6860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.501535][ T6860] R13: 00007fcb35226038 R14: 00007fcb35225fa0 R15: 00007fff3490da18 [ 121.509501][ T6860] [ 121.634434][ T10] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 121.635604][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 121.659650][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 121.659674][ T10] usb 2-1: SerialNumber: syz [ 121.897429][ T10] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 121.900196][ T10] usb 2-1: USB disconnect, device number 21