last executing test programs: 27.592308245s ago: executing program 3 (id=4019): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) open(&(0x7f0000000040)='./file0\x00', 0x101201, 0xc9) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) 27.429043025s ago: executing program 3 (id=4021): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000007940)=ANY=[@ANYBLOB="3c000000420001000000000000000000030100000f0000001200010000113b33445566778899aabb80350000040002800c0003800800ba0087000000"], 0x3c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbd}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x84}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001fc0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) close(0x3) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0x64010180}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000300)={0xcf, 0x2, 0x68, 0x7f, 0x5, 0x5, 0x2, 0xfd, 0x67, 0x1, 0x3, 0x7, 0x4}, 0xe) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x38, r8, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0xffffffffffffff93}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x38}}, 0x0) 27.339546985s ago: executing program 3 (id=4023): unshare(0x28000600) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 27.276983261s ago: executing program 3 (id=4024): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x110, 0x0, 0x1a8, 0x110, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0x90, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) readv(r0, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000680)=""/250, 0xfa}, {&(0x7f0000000880)=""/175, 0xaf}, {&(0x7f0000000940)=""/218, 0xda}, {&(0x7f0000000a40)=""/23, 0x17}, {&(0x7f0000000a80)=""/10, 0xa}], 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') symlink(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000003400)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000000)=""/62, 0x28000, 0x800, 0x9, 0x2}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=@newtfilter={0x90, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x1}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 24.839709185s ago: executing program 3 (id=4043): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 24.412015293s ago: executing program 32 (id=4043): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 9.834602179s ago: executing program 5 (id=4094): socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d", 0xcf}, {&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb186706861b663e404ae5430d948a3deeb5982fbb1551c83edaad587e700949a9d32f5e7ab7cf7f52b86771efac9c04f3e30497f94e49127658062a15683e89b0aceb57d125d3b4ea3d1ad05f4e14c85034917bea1f128a1f6f3f33e7fd479c0c7124b558f472800bd87b2b9bb1221098d2e", 0x82}], 0x2}}], 0x1, 0x4000000) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000abe92710b1134200fe76010203010902240001040000000904090202c91802000905"], 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 8.247061982s ago: executing program 5 (id=4099): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b15, 0x0) 7.903804s ago: executing program 1 (id=4100): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46]}, 0x34) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000002c0)="0f20d835080000000f22d80f009239dd000026674b0fc71b66b852000f00d00f78ff430f1e1f65430f0664440f22400f32c482b5be9800000000", 0x3a}], 0x1, 0x31, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000001000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) write(r5, &(0x7f0000000500)="ffffffffffff00000000000188ca4f4000281000000000000000010000010100000100"/54, 0x36) 7.025509344s ago: executing program 4 (id=4104): r0 = socket(0x2, 0xa, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r2, 0x701, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x9, r3, 0x8000}, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000080000004200000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r8}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001580)={r8, &(0x7f0000000180), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040887}, 0x8004) r10 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) write$proc_mixer(r5, &(0x7f00000003c0)=[{'DIGITAL1', @void}, {'IGAIN', @void}, {'SYNTH', @val={' \'', 'Synth Capture Switch'}}, {'LINE', @val={' \'', 'Line Capture Switch'}}], 0x71) dup3(r10, r5, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000340)}, 0x10) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r11, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) poll(&(0x7f00000001c0)=[{r11, 0x8000}], 0x1, 0x1) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r12, 0x1, 0x15, &(0x7f0000000300)={0x0, 0x2710}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r14, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="c6", 0x1}], 0x1}, 0xd762cdf93fc61440) ioctl$SIOCSIFHWADDR(r13, 0x8905, 0x0) 6.816953769s ago: executing program 4 (id=4105): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) r1 = socket$kcm(0xa, 0x1, 0x106) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x19, 0x70bd2c, 0x255fdbfa, {0x0, 0x0, 0x0, 0x0, 0x40d87, 0x79269}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) ppoll(&(0x7f0000000080)=[{r2, 0x5300}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000600)) r4 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r5 = openat(r4, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000d00)='nf ::%.0.0.1 2\\00000000 l\\calhost\n', 0x24) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000001040)={0x28, 0x0, 0x2711, @local}, 0x10, 0xc1800) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x9, @multicast2}}, 0x24) sendmmsg(r6, &(0x7f0000001300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) unshare(0x26020480) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) fsopen(&(0x7f0000000140)='ocfs2_dlmfs\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x58, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) 6.524728309s ago: executing program 1 (id=4108): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="1201100127aa18080204025683490102030109021200010000500f0904"], 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x3, {0x1, 0x0, 0x4}, 0xfe}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) io_uring_register$IORING_REGISTER_CLOCK(r4, 0x1d, &(0x7f0000000040)={0x7}, 0x0) io_uring_enter(r4, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) shutdown(r5, 0x0) r6 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r6, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) shutdown(r5, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r1, @ANYRES8], 0x80}, 0x1, 0x0, 0x0, 0x60400d1}, 0x40) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) close_range(r1, r1, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x8, 0x1, 0x9}) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.733582473s ago: executing program 2 (id=4112): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r3 = epoll_create(0xaac) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000040)) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xfdef) 5.72108505s ago: executing program 4 (id=4113): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e20, @broadcast}}}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x8, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000100039042abd7000eaffffff000003e4", @ANYRES32=r6, @ANYRESHEX=0x0], 0x28}, 0x1, 0x0, 0x0, 0x24008084}, 0x40c0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000004000040040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001540)={0x0, 0xe72}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000015c0)={0x6, 0x12, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000a80055090100000000009500000000000000186100000200000000000000f9ffffff95ffffffed00bf91000084000000b70000000000000095000000000000008a077676055fa12d457e4538ad36d40091204104ff9cdc1f0b7bb6f6da13519efdce78c30a391ede0927de6957f001a695cd864bc57c0807"], &(0x7f0000000380)='GPL\x00', 0xfd, 0x1000, &(0x7f0000000500)=""/4096, 0x41100, 0x4, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[r7, r7, r7, r7, r7, r7, r7, r8], 0x0, 0x10, 0x5}, 0x94) 5.437715974s ago: executing program 0 (id=4114): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000200)={0x3, @win={{0x2, 0x4, 0x9, 0x8e8}, 0x2, 0x401a, &(0x7f00000021c0)={{0x2, 0x2, 0x1, 0x40}}, 0x3317, 0x0, 0x14}}) 5.325742358s ago: executing program 0 (id=4115): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x40, r3, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x8880}, 0x0) 5.187066616s ago: executing program 2 (id=4116): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c070054001280080001006873720048000280"], 0x90}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008"], 0xa4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c0006"], 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x1100000000000000) 5.102935817s ago: executing program 2 (id=4117): arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080)) syz_open_dev$char_usb(0xc, 0xb4, 0x1) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet(0x2, 0x800, 0x7) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0xe41, 0x0) pselect6(0x40, &(0x7f0000002a80)={0x7, 0x10000, 0x7, 0x5, 0x1, 0x8, 0x3, 0xfffffffffffffffc}, &(0x7f0000002ac0)={0x5, 0x7, 0x10000, 0x5, 0xff, 0x3, 0xdd, 0x2}, &(0x7f0000002b00)={0x9, 0xfffffffffffffff9, 0x10, 0x9, 0x4, 0x0, 0x2, 0x2}, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x9, 0x0, 0x80000001, 0x7fb, 0x8, 0x100200}, 0x0, &(0x7f0000000240)={0x1e, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0xa}, 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x406, r1) sendto$inet(r1, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000040)=0x3, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000007f40)=ANY=[], 0x76b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) link(&(0x7f0000000280)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000002c0)='./cgroup.cpu/cpuset.cpus\x00') ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0205865, 0x0) 4.997018894s ago: executing program 0 (id=4118): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect$lan78xx(0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x4f8, 0xffffffff, 0x1e0, 0x0, 0x358, 0xfeffffff, 0xffffffff, 0x4e0, 0x4e0, 0x4e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0x1a0, 0x1e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x3d11b30a, 0x8, 0x2, 0x1, 'syz0\x00', 0x4}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r3, 0x2000) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r3, 0x2000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) (async) r4 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604110, &(0x7f0000000600)={0x0, [[0x9, 0x0, 0x0, 0x9], [0x1000], [0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]], '\x00', [{}, {0x0, 0x1ff}, {0x1, 0x1000}, {0x25d, 0x12}, {0x8, 0x4}, {}, {}, {0x0, 0xfffffffc}, {}, {0x80000}], '\x00', 0x0, 0x0, 0x0, 0x2}) (async) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604110, &(0x7f0000000600)={0x0, [[0x9, 0x0, 0x0, 0x9], [0x1000], [0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]], '\x00', [{}, {0x0, 0x1ff}, {0x1, 0x1000}, {0x25d, 0x12}, {0x8, 0x4}, {}, {}, {0x0, 0xfffffffc}, {}, {0x80000}], '\x00', 0x0, 0x0, 0x0, 0x2}) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x101, 0x1, 0xffffffffffffffff, 0x0) (async) fanotify_mark(r5, 0x101, 0x1, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x64) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/hibernate_compression_threads', 0x60a02, 0x0) sendfile(r8, r8, 0x0, 0x3) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x4000002}, 0x28) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.947364911s ago: executing program 5 (id=4119): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a4000000010201040000000000000000020000030800044000000001080004400000ffff800001801400018008"], 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="05"], 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = fanotify_init(0x200, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001300050000000001feffffff07000000", @ANYRES32=r1, @ANYBLOB="402000000000000014001a80100004800c000a"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.534123398s ago: executing program 4 (id=4120): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x140000d0}, 0x20048810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000600)={0x5, 0x0, [{0x2, 0xfffffffe, 0x3, 0x8, 0x3, 0x110, 0x3}, {0x80000008, 0x2, 0x5, 0xfffffffb, 0x5, 0x7, 0x1}, {0x1, 0x67b7, 0x6, 0x800062d9, 0x9, 0x3, 0x7f}, {0xc0000000, 0x0, 0x4, 0x6b0, 0x823, 0xa5, 0x8000}, {0x40000001, 0x1, 0x4, 0xc, 0xff, 0x9, 0x7}]}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.40166226s ago: executing program 5 (id=4121): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000001080)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000e7ff05241a"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002a40)=@delchain={0x204, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_matchall={{}, {0x0, 0x2, [@TCA_MATCHALL_FLAGS={0x0, 0x3, 0x6}, @TCA_MATCHALL_FLAGS={0x0, 0x3, 0x6}, @TCA_MATCHALL_FLAGS={0x0, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x0, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x0, 0x3, 0x2}]}}]}, 0x204}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) socket(0x10, 0x803, 0x7f) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f00000043c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f0000004200)=""/198, 0xc6}, {&(0x7f0000004300)=""/151, 0x97}], 0x3, 0x2, 0xfffe0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89901) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000380)={0x7162, r2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x4, 0x2}, 0x80, &(0x7f0000003880)=[{&(0x7f00000002c0)="27031c00160016000000001106afacf706e1054000006558", 0x18}, {&(0x7f0000000640)="22ea7e2bb1b280b1718a70a8f814e3ba81f4d19edcce18b75bf5034bb80875", 0x1f}], 0x2}, 0x0) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x5, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0x9, 0x0, 0x0, 0x8, 0x6}}, 0x50) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) 3.392076642s ago: executing program 4 (id=4122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r4 = socket(0x10, 0x803, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000140)=0xfffffffe) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f000000000000005504000001ed0a002500000017ffffff460400007fffffff7b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a73"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94) r6 = userfaultfd(0x100003) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a000005", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRESDEC], 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x803, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc001) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r7, 0x0, r7) 3.109288772s ago: executing program 2 (id=4123): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x0, 0xa, 0x48, {0x48, 0x270012a5053329ee, "e14b54e8f8f99441040172ce995a0dc98babde32bf6c22f8549e0c16c61ade6ba08829357cc19a0acdcf4bcf5183bc661b553d684db4361db62320251283e91ff950066b477f"}}, &(0x7f0000000140)={0x0, 0x3, 0x4b, @string={0x4b, 0x3, "81655b7898078799e45f88c348158dd6f2d0c62ddc497430cc3fabc1c3e02803288b4bc87f96dea06962ed436c419a908d8879f5dc015a412c71677a542157ac40a9c3ad4783d784a9"}}}, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x0, 0xe, 0x2e, "a4cad4db734207d55e64d28c465214ea89e9f03adef79bba898505fcf0d0ec7a3ac70b820ad1012f91b3893bf9f5"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000002c0)={0x20, 0x81, 0x3, "0d016a"}, &(0x7f0000000300)={0x20, 0x82, 0x3, "f4bd87"}, &(0x7f0000000340)={0x20, 0x83, 0x1, 'r'}, &(0x7f0000000380)={0x20, 0x84, 0x4, "87ae01b1"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "970092"}}) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8025000041000701fefffffffeffffff017c0000040042800c00018006000600800a00005a250280bc1c1480b61318"], 0x2580}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0xb40, 0x870, 0x1, 0x1, 0xd59f80, 0x1, 0x9, 0x19ef, 0x2a, 0x107, 0x2800, 0x6, 0x7f, 0xd1, 0x4, 0x30, {0x9d, 0xffffffff}, 0x9, 0x5}}) 2.895412071s ago: executing program 1 (id=4124): syz_emit_ethernet(0x5e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000186dd61bbddf000283aff7e8800000000000000000000000001", @ANYRES32], 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0xfffffffffffffee0, 0x0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) 2.529211578s ago: executing program 0 (id=4125): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000200)={0x3, @win={{0x2, 0x4, 0x9, 0x8e8}, 0x2, 0x401a, &(0x7f00000021c0)={{0x2, 0x2, 0x1, 0x40}}, 0x3317, 0x0, 0x14}}) 2.165203803s ago: executing program 5 (id=4126): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fff6ffffffffff7f000000000000000000000000000000000400000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/softnet_stat\x00') read$FUSE(r3, &(0x7f0000005400)={0x2020}, 0xffe4) preadv(r3, &(0x7f0000003380)=[{&(0x7f00000020c0)=""/168, 0xa8}], 0x1, 0xffffffc0, 0x10000) read$FUSE(r3, &(0x7f00000033c0)={0x2020}, 0x2020) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe880000000000000000000000000001ac14142500000000000000000000000000000000200000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a00100001"], 0xc4}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x40008d0, &(0x7f0000000200)={0xa, 0x4e24, 0x36c2, @loopback={0xff00000000000000}, 0x2}, 0x1c) 2.07063138s ago: executing program 0 (id=4127): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1000000000000004, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0xd4, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @loopback}, r2, 0x40099d}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000080)=0x6, 0x3, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000980)={0x3, 0x4, 0x6, 0x800}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000000440)=0xfe, 0x4) r5 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r5, &(0x7f0000000040)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0xfe, @loopback, 0x1}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="20009b7b43b8d57da2468a75529800000000000048775c6302000ee575b32ca1450fa97c0000e80003000700000000080000", @ANYRES32=0x0], 0x20, 0x4855}, 0x24000052) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read$FUSE(r6, &(0x7f00000007c0)={0x2020}, 0x2020) 1.568749718s ago: executing program 1 (id=4128): socket$kcm(0x1e, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000026c0)={0xffffffffffffffff, 0x0, 0x200600, &(0x7f0000000400)={@_ha_fsid={[0xb, 0x6]}, {0x0, 0xfffb}}, 0x7, 0x0, &(0x7f0000002680)=0x80}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000007000000", @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) memfd_create(0x0, 0x6) (async) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x88, 0xd9, 0x3, 0xb, 0x57519bea}, 0x18, 0x1000) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='westwood', 0x8) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000240), 0xa, 0x8000, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) (async) read$dsp(r0, &(0x7f0000000680)=""/4096, 0x1000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a84000000060a010400000000000000000a0000040900010073797a30000000005800046a540001800c0001007061796c6f61640044000280080005400000000208000340000000320800084000000000080007400000000808000840000000000800074000000003080005400000000e08000240000000020900020073f079583c44d6b6619177a1362650d564a716e8220819676ffdf9f6d20950349ca60546347e40b88e5f0bc4969d9a29ab2ef27dce5bf3d69824b519a89818ed884f94fc42240cc2590cc4f742412398515b7984e5da150bc0589aa26b606885f76577cc098c5d9f8e5c721f749665d237d68810c3663027aaa6d05453456207221820fe3358428634972b6af9a4169c691f02ba8e76ec0c36695f32d78f2613", @ANYRES8=r2, @ANYRESDEC=r2], 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x40408c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) (async) ioctl$XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, 0x0) (async) socket(0x10, 0x803, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r7, &(0x7f0000000000)={0x2, 0x0, @empty, 0xbffffffe}, 0x10) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff00aabbccddee08004500001c123420004073483c00000000ffffffff00000000"], 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff00aabbccddee08004500001c123420014073483b00000000ffffffff"], 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00aabbccddee08004500001c123400024073683a00000000ffffffff"], 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) 1.568466036s ago: executing program 5 (id=4129): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b15, 0x0) 940.492114ms ago: executing program 2 (id=4130): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e20, @broadcast}}}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x8, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000100039042abd7000eaffffff000003e4", @ANYRES32=r6, @ANYRESHEX=0x0], 0x28}, 0x1, 0x0, 0x0, 0x24008084}, 0x40c0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000004000040040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/12], 0x50) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001540)={0x0, 0xe72}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000015c0)={0x6, 0x12, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000a80055090100000000009500000000000000186100000200000000000000f9ffffff95ffffffed00bf91000084000000b70000000000000095000000000000008a077676055fa12d457e4538ad36d40091204104ff9cdc1f0b7bb6f6da13519efdce78c30a391ede0927de6957f001a695cd864bc57c0807"], &(0x7f0000000380)='GPL\x00', 0xfd, 0x1000, &(0x7f0000000500)=""/4096, 0x41100, 0x4, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[r7, r7, r7, r7, r7, r7, r7, r8], 0x0, 0x10, 0x5}, 0x94) 631.906064ms ago: executing program 1 (id=4131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001f5ffffffffffffff000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4dd7d637, 0xe}}, './file0\x00'}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000040)=0x5, 0x8) 459.086058ms ago: executing program 0 (id=4132): clock_adjtime(0x17, &(0x7f0000000e00)={0xe62b, 0x80000000000000, 0x309, 0x0, 0x8000, 0x9f69, 0x0, 0x200000000002000, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x80000001, 0x30, 0x80000001, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$kcm(0x21, 0x2, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x1, 0x0}, &(0x7f0000000340)=0x88) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0d00000003000000040000000400000000000000", @ANYRES32=r1], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f00000000c0), 0x0}, 0x20) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x28141, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x100, 0x2, 0xe2ae, 0x6ff, 0x2, 0x8, 0x7a, 0x3, 0x2006, 0x34, 0x22, 0xf8}}, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000400)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r8, 0xc010640b, &(0x7f0000000440)={r9}) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x9, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, &(0x7f00000001c0), {[{{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'wg1\x00', 'dummy0\x00', {}, {0xff}, 0x29, 0x81, 0x0, 0x60}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0x6dce, [0x8000, 0x6], 0x7, 0x1, 0x7, [@private2, @remote, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @mcast1, @private2, @loopback, @dev={0xfe, 0x80, '\x00', 0x44}, @private2, @private0, @dev={0xfe, 0x80, '\x00', 0x2c}, @remote, @dev={0xfe, 0x80, '\x00', 0x25}], 0x3}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0x8, 0x5, 'syz1\x00', {0x800}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @empty, [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0x0, 0xffffffff], 'tunl0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x1, 0x2, 0x1, 0x11}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x2, 0x1, 0x4, 'pptp\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) r10 = openat$cgroup_int(r7, &(0x7f0000000040)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r10, r10, 0x0, 0x1) 332.999521ms ago: executing program 1 (id=4133): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x7fffffff, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000200)=0x63) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r3, &(0x7f00000000c0), 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x3eae, &(0x7f00000034c0)={0x0, 0x7648, 0x1, 0x40000003, 0x2ea}, &(0x7f0000000180)=0x0, &(0x7f0000003580)=0x0, &(0x7f0000000280)) r7 = syz_open_dev$usbmon(&(0x7f0000000300), 0x6, 0x48180) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f0000000380)={0x0, 0x0, 0x31}) r8 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) lsetxattr$system_posix_acl(&(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200000001"], 0xfecc, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600655800000c00028008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) unshare(0x2040400) r9 = mmap$IORING_OFF_SQES(0x0, 0x0, 0x5, 0x100010, r1, 0x10000000) syz_io_uring_submit(r5, r6, r9, &(0x7f0000001a80)=@IORING_OP_SEND_ZC={0x2f, 0x61, 0x8, r8, &(0x7f00000009c0)="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", &(0x7f0000001a40)={&(0x7f00000019c0)="29813d4e87e1b527ab99f37175b7368c596520e5a50e81743caadb33b47b70070521b251d8734b988f005c93b89625844ec204b60a08a1b9de4c907ceddc433189205a64a0c73b5c596cbe6a131dcb4f71e8000818b058899101229446c5b6cc3b8581be4c3499d5d893272e4a5566c4e275da625ef9b68329ed22", 0x7b}, 0x9, 0x20000000, 0x0, {0x0, 0x0, 0x1000}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000140)=0x9) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="08001e"], 0x3c}}, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r4, 0x15, &(0x7f0000001dc0)=[{0x0, 0x0, 0x0}], 0x1) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000940)=ANY=[@ANYBLOB="0500000009000000001a0000f700000000000000", @ANYRES32=0x1, @ANYBLOB="001f0000000000002600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/21], 0x50) 255.800664ms ago: executing program 4 (id=4134): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x400000b6, 0x0, 0x7f}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x20008000) sendmsg$NL80211_CMD_GET_SCAN(r5, 0x0, 0x24020800) semget$private(0x0, 0x4, 0x6e9) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c"}, 0x1d) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r4, r6}) sendmmsg$inet(r7, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r7, &(0x7f0000008b40)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000500)=""/161, 0xa1}], 0x1, &(0x7f0000000880)=""/31, 0x1f}, 0x1000}], 0x1, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') linkat(r8, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x30, r9, 0x801, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0xad, 0x2}, {0x1, 0x4}, {0x81, 0x2}, {0x80, 0x1}], "518069b05d54b836"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) 0s ago: executing program 2 (id=4135): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_buf(r0, 0x29, 0xd2, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) readv(r2, &(0x7f0000000280), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="300000002000010000000000000000000200000000000000000000000c00144000000000000000000500130001"], 0x30}}, 0x4000) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0xfffffbfc, 0x2}, 0x2e) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x50080, 0x173) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000008c0)={0xc0}) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000002c00)=@filter={'filter\x00', 0xe, 0x1, 0x25e, [0x0, 0x200000002980, 0x2000000029b0, 0x200000002bae], 0x0, &(0x7f0000002940), &(0x7f0000002980)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x0, 0x80, 0x2, 'ip6erspan0\x00', 'team_slave_1\x00', 'macvtap0\x00', 'ip_vti0\x00', @random="7d73e7bf4b67", [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0x116, 0x17e, 0x1ce, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@empty, @mcast2, [0xffffff00, 0xff000000, 0xffffffff], [0xffffffff, 0xffffff00], 0x0, 0x0, 0x22, 0x0, 0x4e24, 0x4e21, 0x4e22, 0x4e21}}}, @cpu={{'cpu\x00', 0x0, 0x8}, {{0xff, 0x1}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xffffffffffffffff}}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x7, {0x6}}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x2d6) unshare(0x8040480) sendmsg$tipc(r1, &(0x7f0000002700)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10, &(0x7f0000002600)=[{&(0x7f0000000140)="565c3276a24a9fec13d5c0d997c78152b2438dd7c364fbe9e32f37cc3e2278360d1d0d3ebbcea8b0041986eab9897a8c623e4c08e1949b5eed305088a72a38069ec5f57caf811e9fb5aca0fba625b9d9283715875b19c00ecd523ac0e3e921f15d5a93e6f54b83a18e41381a0edc3655f513a2ff665f967411223a12fd0f822c98716a8746d0f6aebcb71aa45a383c8304d13f2161caa936efb5c3e0929f6fe242de69632a013bf3ce65fb9241b8a9159ffa034bc9006ecda9359f25c90528d8b21a0322348ca746f77e2ac2a79126d8dc798cbbf0e1de855c25f68e6314f010b99e073685ead4dabfe2c776ae1e", 0xee}, {&(0x7f0000000240)="0e87a42a6cb9085978d10092954f16f75a5e3d354624ecc686c376d9040bfba82a64f2af6a9f398f77f588995900557f6f521540b35c9173bd02e30b54ea1b213ce19d5d0f6f78956758e4bdd8653423b2fce184339db649db7f48b2efced3001578b178d17a820845a04e1ea5f3dd06730082e8ca84", 0x76}, {&(0x7f00000002c0)="8ca52a844b9de13cb0f54f302e7490459e6ad50898ceed020df226de4eba81d1496cc6967c16b2be8657725b8a8f207b816a48ae9c4e7f284e89a2ab836f6ee7367a513a4aca8f8295dc34f1fe25b9d0adde717995800bd0873f43b9261fb4928caa12a0d9cea1e3455d1c1c562cf3da48ac31adff7da793d24107b11c3dd79d188992b41bc96c3877ded76a69caedb8a1adebe25a0917bcadcb7d61b2a8", 0x9e}, {&(0x7f0000000380)="ce542829d08138c283a9f6440bb459f13b7c679dcb75f8dff75c25050eed35b3d0c31b9e6f289ff4984f4c3a4cc477a27dcfb35018c12d8eab29ea4799", 0x3d}, {&(0x7f00000024c0)="60d5c186d76c933533cf806aa08eaeec1840abde242f328b1bfb18be8e57c81f3715a0f8a621934bc3e7e4b367ff9f6acbc7a3bb58bbee7b6cc4f7e0328e163058f35095fa0c3a0bef87c13d3bead15af196fe9c1adba83a35d991fa403bc07628900288c48694afaaa262b951c1", 0x6e}, {&(0x7f0000002540)="64732ba82423688a28b8938d66f1eabbbaa8cf8a94add0ed9f", 0x19}, {&(0x7f0000002580)="41efa48aba95cc71400b6b8b2e13ca13e30d7ea3e46e31044fe6b5340bb0e80bf29b7eaa2801965da7d59ba1df135e3730e84ae36695f8fa", 0x38}, {&(0x7f00000025c0)="77cceb2f5cdd90", 0x7}], 0x8, &(0x7f0000002680)="01dcea855af60f503d3c8ade1c99cda240794502b3d0d93aab6233e4c316e5b42b570e30d57a832426f92e8ced509bfae0c72749d2b817e3f3a112f97e01f625d77e31cbd06b79f36d31275125c51c4ba6874f93253b869b514d064d51b89116f5771674a88b774375262502837620b2bfdc949c8bd87c33707699e6fb", 0x7d, 0x1}, 0x4000090) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002d80)={'vcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000002e80)={0x18, 0x5, &(0x7f0000002c80)=@raw=[@exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6a16}], &(0x7f0000002cc0)='GPL\x00', 0x7, 0x7b, &(0x7f0000002d00)=""/123, 0x1f00, 0x30, '\x00', r6, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000002dc0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000002e00)={0x1, 0x4, 0x3ff, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000002e40)=[{0x1, 0x5, 0xa, 0xa}], 0x10, 0x4}, 0x94) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000000240)={&(0x7f00000001c0)=""/88, 0x58}) r7 = mq_open(&(0x7f0000002740)='\x00', 0x800, 0x0, &(0x7f0000002780)={0x3, 0x80, 0x8, 0x8d94}) mq_notify(r7, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={&(0x7f00000027c0)="3d0471b519c3167db65ff1e7fac15bf423a9d2adacae6b22c1eb32e2991791cabf0386ad50c14f31aa4652ce39bcb098358b792eb3144ae51aa972c3d4944f72b9cc2c3176d5a06ac2f0ccd552b4f69a7232f00fd1fdb9b56b9426da2afcc04f30f2163d80553e81ff266c633fcc088dd229de", &(0x7f0000002840)="5a31b6dffadb5dfffd0ff74e506624e1d3ab73c039cdc358c5524fd14ca3c28ad68f819fb28e8d1f0f81826b319409d2ca0bb83ad0133d9b0195e2c2adc8236f48a534a563def146d455185bb75a261910cf75c443f2d32847ab63280718c3f85eabd79078bb5ce4413d397dbfb58f7e805b8913ab319d07c06a0c0b16c68e5948f97ac5f1ec21f6eaa375eba5ec5ec3f63aaf264eedbe301cbcb9a19af8e6433c0fbe8a5bb58ef35982f46be34642b7ecac5633efb7b75d7f0879c9cac7a95e78d82b0e01dc7acf1dab2fceff6349876f45f7d1412b1c7f16cb658df8d32f9cfa559d989a2c5bf7759f8766a5fa2fb1a9"}}) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x1) r8 = dup3(r1, r2, 0x0) read$FUSE(r8, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000002440)={0x50, 0x0, r9, {0x7, 0x2d, 0x9, 0x800000, 0x6, 0x5, 0x9, 0x8, 0x0, 0x0, 0x40, 0x7fffffff}}, 0x50) setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88) kernel console output (not intermixed with test programs): 0] usb 2-1: not running at top speed; connect to a high speed hub [ 826.990745][T12350] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 827.028015][T12350] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 827.028080][T12350] usb 2-1: config 0 has no interface number 0 [ 827.028161][T12350] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 827.028273][T12350] usb 2-1: config 0 interface 88 has no altsetting 0 [ 827.039000][ T5690] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 827.075310][T12350] usb 2-1: language id specifier not provided by device, defaulting to English [ 827.107160][T12350] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 827.107252][T12350] usb 2-1: Product: syz [ 827.107291][T12350] usb 2-1: SerialNumber: Љ [ 827.130664][T12350] usb 2-1: config 0 descriptor?? [ 827.144141][T17832] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 827.192174][ T5690] usb 4-1: device descriptor read/64, error -71 [ 827.223469][T17841] fuse: Unknown parameter 'user_id00000000000000000000' [ 827.441942][ T5690] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 827.513354][T17832] vlan3: entered promiscuous mode [ 827.513432][T17832] hsr0: entered promiscuous mode [ 827.549197][T17832] vlan3: entered allmulticast mode [ 827.549477][T17832] hsr0: entered allmulticast mode [ 827.549503][T17832] hsr_slave_0: entered allmulticast mode [ 827.549565][T17832] hsr_slave_1: entered allmulticast mode [ 827.581916][ T5690] usb 4-1: device descriptor read/64, error -71 [ 827.639052][ T31] kauditd_printk_skb: 238 callbacks suppressed [ 827.649118][ T31] audit: type=1326 audit(1788413075.492:6494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17831 comm="syz.1.3747" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde45b9e159 code=0x0 [ 827.690881][ T31] audit: type=1326 audit(1788413075.492:6495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17831 comm="syz.1.3747" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde45b9e159 code=0x0 [ 827.729649][ T5690] usb usb4-port1: attempt power cycle [ 828.072923][ T5690] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 828.112861][ T5690] usb 4-1: device descriptor read/8, error -71 [ 828.131891][T12340] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 828.302141][T12340] usb 3-1: Using ep0 maxpacket: 16 [ 828.311450][T12340] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 828.332952][T12340] usb 3-1: config 4 has an invalid interface number: 9 but max is 0 [ 828.333003][T12340] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 828.333032][T12340] usb 3-1: config 4 has no interface number 0 [ 828.333085][T12340] usb 3-1: config 4 interface 9 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 828.333113][T12340] usb 3-1: config 4 interface 9 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 828.333146][T12340] usb 3-1: config 4 interface 9 has no altsetting 0 [ 828.382890][ T5690] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 828.416667][ T5690] usb 4-1: device descriptor read/8, error -71 [ 828.436833][T12340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.449728][T12340] usb 3-1: Product: syz [ 828.449753][T12340] usb 3-1: Manufacturer: syz [ 828.449770][T12340] usb 3-1: SerialNumber: syz [ 828.520616][T12340] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 828.533817][ T5690] usb usb4-port1: unable to enumerate USB device [ 828.815754][T16786] usb 3-1: Failed to submit usb control message: -71 [ 828.815876][T16786] usb 3-1: unable to send the bmi data to the device: -71 [ 828.816124][T16786] usb 3-1: unable to get target info from device [ 828.816195][T16786] usb 3-1: could not get target info (-71) [ 828.816546][T16786] usb 3-1: could not probe fw (-71) [ 828.867717][ T5690] usb 3-1: USB disconnect, device number 99 [ 829.621288][T12350] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input87 [ 829.666873][ C1] usb_acecad 2-1:0.88: can't resubmit intr, dummy_hcd.1-1/input0, status -1 [ 829.689650][T12350] usb 2-1: USB disconnect, device number 106 [ 829.689766][ C0] usb_acecad 2-1:0.88: can't resubmit intr, dummy_hcd.1-1/input0, status -19 [ 830.133035][ T5714] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 830.298719][ T5714] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 830.304413][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.304529][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.304655][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.343030][ T5714] usb 1-1: config 0 descriptor?? [ 830.503593][T12340] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 830.602086][T17892] FAULT_INJECTION: forcing a failure. [ 830.602086][T17892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 830.602162][T17892] CPU: 1 UID: 0 PID: 17892 Comm: syz.4.3765 Tainted: G L syzkaller #0 PREEMPT(full) [ 830.602210][T17892] Tainted: [L]=SOFTLOCKUP [ 830.602278][T17892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 830.602320][T17892] Call Trace: [ 830.602344][T17892] [ 830.602367][T17892] dump_stack_lvl+0xe8/0x150 [ 830.602477][T17892] should_fail_ex+0x410/0x560 [ 830.602583][T17892] _copy_to_user+0x31/0xb0 [ 830.602662][T17892] simple_read_from_buffer+0xe1/0x170 [ 830.602760][T17892] proc_fail_nth_read+0x1bb/0x230 [ 830.602855][T17892] ? common_file_perm+0x20e/0x2b0 [ 830.602928][T17892] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 830.603035][T17892] ? rw_verify_area+0x24a/0x4c0 [ 830.603127][T17892] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 830.603212][T17892] vfs_read+0x213/0xa80 [ 830.603313][T17892] ? __pfx___mutex_lock+0x10/0x10 [ 830.603401][T17892] ? __pfx_vfs_read+0x10/0x10 [ 830.603486][T17892] ? __fget_files+0x2a/0x420 [ 830.603578][T17892] ? __fget_files+0x3a2/0x420 [ 830.603651][T17892] ? __fget_files+0x2a/0x420 [ 830.603755][T17892] ksys_read+0x150/0x270 [ 830.603858][T17892] ? __pfx_ksys_read+0x10/0x10 [ 830.603972][T17892] do_syscall_64+0x166/0x520 [ 830.604064][T17892] ? trace_irq_disable+0x3b/0x140 [ 830.604140][T17892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.604210][T17892] ? clear_bhb_loop+0x70/0xc0 [ 830.604285][T17892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.604342][T17892] RIP: 0033:0x7ff4a195e98e [ 830.604406][T17892] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 830.604458][T17892] RSP: 002b:00007ff4a27cafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 830.604528][T17892] RAX: ffffffffffffffda RBX: 00007ff4a27cb6c0 RCX: 00007ff4a195e98e [ 830.604570][T17892] RDX: 000000000000000f RSI: 00007ff4a27cb0a0 RDI: 0000000000000005 [ 830.604611][T17892] RBP: 00007ff4a27cb090 R08: 0000000000000000 R09: 0000000000000000 [ 830.604645][T17892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.604684][T17892] R13: 00007ff4a1c26128 R14: 00007ff4a1c26090 R15: 00007ff4a1d4fa48 [ 830.604770][T17892] [ 830.720986][T12340] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 830.746135][T12340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.941260][ T5714] hid-steam 0003:28DE:1142.004D: unknown main item tag 0x0 [ 830.980369][ T5714] hid-steam 0003:28DE:1142.004D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 831.038580][ T5714] hid-steam 0003:28DE:1142.004D: Steam wireless receiver connected [ 831.038629][ T5714] hid-steam 0003:28DE:1142.004D: No HID_FEATURE_REPORT present for ID 0 [ 831.038668][ T5714] hid-steam 0003:28DE:1142.004D: steam_probe:steam_get_conn_status failed with error -22 [ 831.273846][ T5714] hid-steam 0003:28DE:1142.004E: unknown main item tag 0x0 [ 831.436376][ T5714] hid-steam 0003:28DE:1142.004E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 831.587304][T17903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.604477][T17904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.617180][T17904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.629064][T17903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.960854][T12340] cxacru 3-1:1.0: send of cm 0x90 failed (-71) [ 831.972653][T17909] cxacru 3-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 831.972713][T17909] cxacru 3-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 832.075383][T12340] usb 3-1: USB disconnect, device number 100 [ 832.347275][T17911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3768'. [ 832.448361][T17915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3770'. [ 832.448413][T17915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3770'. [ 832.612000][T12354] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 832.773063][T12354] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 832.777849][T12354] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.777943][T12354] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.778011][T12354] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 832.778177][T12354] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.824505][T12354] usb 5-1: config 0 descriptor?? [ 832.937711][ T5690] usb 1-1: USB disconnect, device number 103 [ 832.998154][ T5690] hid-steam 0003:28DE:1142.004D: Steam wireless receiver disconnected [ 833.286092][T12354] plantronics 0003:047F:FFFF.004F: reserved main item tag 0xd [ 833.318828][T12354] plantronics 0003:047F:FFFF.004F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 833.512134][ T5690] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 833.559943][T17913] FAULT_INJECTION: forcing a failure. [ 833.559943][T17913] name failslab, interval 1, probability 0, space 0, times 0 [ 833.560036][T17913] CPU: 1 UID: 0 PID: 17913 Comm: syz.4.3769 Tainted: G L syzkaller #0 PREEMPT(full) [ 833.560069][T17913] Tainted: [L]=SOFTLOCKUP [ 833.560078][T17913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 833.560093][T17913] Call Trace: [ 833.560145][T17913] [ 833.560181][T17913] dump_stack_lvl+0xe8/0x150 [ 833.560300][T17913] should_fail_ex+0x410/0x560 [ 833.560483][T17913] should_failslab+0xa8/0x100 [ 833.560562][T17913] __kmalloc_noprof+0xfe/0x720 [ 833.560656][T17913] ? rcu_is_watching+0x16/0xb0 [ 833.560727][T17913] ? tomoyo_realpath_from_path+0xef/0x640 [ 833.560805][T17913] ? tomoyo_realpath_from_path+0xef/0x640 [ 833.560893][T17913] tomoyo_realpath_from_path+0xef/0x640 [ 833.561000][T17913] ? tomoyo_path_number_perm+0x219/0x5f0 [ 833.561115][T17913] tomoyo_path_number_perm+0x246/0x5f0 [ 833.561234][T17913] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 833.561319][T17913] ? __lock_acquire+0x6df/0x2e50 [ 833.561431][T17913] ? hook_file_ioctl+0x1f2/0x600 [ 833.561568][T17913] ? __fget_files+0x2a/0x420 [ 833.561653][T17913] ? __fget_files+0x2a/0x420 [ 833.561720][T17913] ? __fget_files+0x3a2/0x420 [ 833.561793][T17913] ? __fget_files+0x2a/0x420 [ 833.561878][T17913] security_file_ioctl+0xc3/0x2a0 [ 833.561981][T17913] __se_sys_ioctl+0x47/0x170 [ 833.562053][T17913] do_syscall_64+0x166/0x520 [ 833.562131][T17913] ? trace_irq_disable+0x3b/0x140 [ 833.562184][T17913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.562254][T17913] ? clear_bhb_loop+0x70/0xc0 [ 833.562342][T17913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.562410][T17913] RIP: 0033:0x7ff4a199e159 [ 833.562472][T17913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.562656][T17913] RSP: 002b:00007ff4a27ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 833.562744][T17913] RAX: ffffffffffffffda RBX: 00007ff4a1c25fa0 RCX: 00007ff4a199e159 [ 833.562797][T17913] RDX: 00002000000000c0 RSI: 00000000d01c4813 RDI: 0000000000000005 [ 833.562840][T17913] RBP: 00007ff4a27ec090 R08: 0000000000000000 R09: 0000000000000000 [ 833.562899][T17913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.562949][T17913] R13: 00007ff4a1c26038 R14: 00007ff4a1c25fa0 R15: 00007ff4a1d4fa48 [ 833.563081][T17913] [ 833.617719][T17913] ERROR: Out of memory at tomoyo_realpath_from_path. [ 833.690047][ T5690] usb 1-1: Using ep0 maxpacket: 16 [ 833.714958][ T5690] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 833.749685][ T5690] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 833.749720][ T5690] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 833.749792][ T5690] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 833.749819][ T5690] usb 1-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 833.749858][ T5690] usb 1-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 833.860434][ T5690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.860481][ T5690] usb 1-1: Product: syz [ 833.860501][ T5690] usb 1-1: Manufacturer: syz [ 833.860519][ T5690] usb 1-1: SerialNumber: syz [ 834.109030][ T5714] usb 5-1: USB disconnect, device number 5 [ 834.266428][T17932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3775'. [ 834.704406][ T5714] usb 1-1: USB disconnect, device number 104 [ 835.102409][T12343] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 835.273403][T12343] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 835.287187][T12343] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 835.287234][T12343] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 835.287287][T12343] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 835.335795][T12343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.347908][T12343] usb 4-1: Product: syz [ 835.353499][T12343] usb 4-1: Manufacturer: syz [ 835.358640][T12343] usb 4-1: SerialNumber: syz [ 835.385158][T12343] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 835.394506][T12343] cdc_ncm 4-1:1.0: bind() failure [ 835.648711][ T191] usb 4-1: USB disconnect, device number 26 [ 835.671982][T12343] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 835.732488][ T5714] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 835.833407][T12343] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 835.856587][T12343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.856644][T12343] usb 2-1: Product: syz [ 835.859536][T12343] usb 2-1: Manufacturer: syz [ 835.859613][T12343] usb 2-1: SerialNumber: syz [ 835.892747][ T5714] usb 1-1: Using ep0 maxpacket: 8 [ 835.901241][ T5714] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 835.913371][T12343] usb 2-1: config 0 descriptor?? [ 835.926240][ T5714] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 835.937244][ T5714] usb 1-1: config 16 has an invalid descriptor of length 126, skipping remainder of the config [ 835.937337][ T5714] usb 1-1: config 16 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 835.937373][ T5714] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 835.937424][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.140864][T17966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 836.229666][T12343] usb 2-1: USB disconnect, device number 107 [ 836.342501][T17961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.343076][T17961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.491880][T12355] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 836.642267][T12355] usb 5-1: Using ep0 maxpacket: 32 [ 836.650484][T12355] usb 5-1: unable to get BOS descriptor or descriptor too short [ 836.659820][T12355] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=89.ca [ 836.672941][T12355] usb 5-1: config 2 has an invalid interface number: 75 but max is 0 [ 836.672987][T12355] usb 5-1: config 2 has no interface number 0 [ 836.673039][T12355] usb 5-1: config 2 interface 75 has no altsetting 0 [ 836.702032][T12355] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.702095][T12355] usb 5-1: Product: syz [ 836.702132][T12355] usb 5-1: Manufacturer: syz [ 836.702156][T12355] usb 5-1: SerialNumber: syz [ 836.957221][T12355] usb 5-1: USB disconnect, device number 6 [ 837.067586][T17982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3790'. [ 837.172058][ T191] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 837.355634][ T191] usb 4-1: unable to get BOS descriptor or descriptor too short [ 837.358608][ T191] usb 4-1: not running at top speed; connect to a high speed hub [ 837.358841][ T191] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 837.368048][ T191] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 837.368150][ T191] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 837.368211][ T191] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 837.368251][ T191] usb 4-1: config 14 has no interface number 0 [ 837.368301][ T191] usb 4-1: config 14 has no interface number 1 [ 837.368472][ T191] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 837.368545][ T191] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 837.368619][ T191] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 837.368709][ T191] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 837.368790][ T191] usb 4-1: config 14 interface 57 has no altsetting 0 [ 837.368845][ T191] usb 4-1: config 14 interface 228 has no altsetting 0 [ 837.391980][ T191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.392075][ T191] usb 4-1: Product: syz [ 837.392110][ T191] usb 4-1: Manufacturer: syz [ 837.392161][ T191] usb 4-1: SerialNumber: syz [ 837.699259][T17980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.711513][T17980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.822301][ T191] legousbtower 4-1:14.57: interrupt endpoints not found [ 837.840899][ T191] legousbtower 4-1:14.228: get version request failed: -71 [ 837.841115][ T191] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 837.865520][ T191] usb 4-1: USB disconnect, device number 27 [ 838.066158][ T31] audit: type=1326 audit(1788413085.922:6496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17989 comm="syz.2.3793" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783399e159 code=0x7ffc0000 [ 838.097492][ T31] audit: type=1326 audit(1788413085.922:6497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17989 comm="syz.2.3793" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783399e159 code=0x7ffc0000 [ 838.097595][ T31] audit: type=1326 audit(1788413085.922:6498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17989 comm="syz.2.3793" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783399e159 code=0x7ffc0000 [ 838.097646][ T31] audit: type=1326 audit(1788413085.922:6499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17989 comm="syz.2.3793" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f783399e159 code=0x7ffc0000 [ 838.097696][ T31] audit: type=1326 audit(1788413085.922:6500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17989 comm="syz.2.3793" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783399e159 code=0x7ffc0000 [ 838.097744][ T31] audit: type=1326 audit(1788413085.922:6501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17989 comm="syz.2.3793" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783399e159 code=0x7ffc0000 [ 838.097791][ T31] audit: type=1326 audit(1788413085.922:6502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17989 comm="syz.2.3793" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783399e159 code=0x7ffc0000 [ 838.097840][ T31] audit: type=1326 audit(1788413085.922:6503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17989 comm="syz.2.3793" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783399e159 code=0x7ffc0000 [ 838.097890][ T31] audit: type=1326 audit(1788413085.922:6504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17989 comm="syz.2.3793" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f783399e159 code=0x7ffc0000 [ 838.097940][ T31] audit: type=1326 audit(1788413085.922:6505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17989 comm="syz.2.3793" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783399e159 code=0x7ffc0000 [ 838.641505][T12343] usb 1-1: USB disconnect, device number 105 [ 838.811691][T12355] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 838.973248][T12355] usb 5-1: device descriptor read/64, error -71 [ 839.134106][T12343] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 839.199153][ T191] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 839.211848][T12355] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 839.335164][T12343] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 839.349135][T12343] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 839.349186][T12343] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 839.349285][T12343] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 839.377078][T12355] usb 5-1: device descriptor read/64, error -71 [ 839.391927][ T191] usb 2-1: Using ep0 maxpacket: 32 [ 839.397743][T12343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.397803][T12343] usb 4-1: Product: syz [ 839.397819][T12343] usb 4-1: Manufacturer: syz [ 839.397834][T12343] usb 4-1: SerialNumber: syz [ 839.405107][ T191] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 839.423916][ T191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.424026][ T191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.424147][ T191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.473517][ T191] usb 2-1: config 0 descriptor?? [ 839.497514][T12355] usb usb5-port1: attempt power cycle [ 839.562385][T12343] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 839.562476][T12343] cdc_ncm 4-1:1.0: bind() failure [ 839.804320][T18005] fuse: Bad value for 'user_id' [ 839.804393][T18005] fuse: Bad value for 'user_id' [ 839.825312][T12343] usb 4-1: USB disconnect, device number 28 [ 839.833887][T12355] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 839.864411][T12355] usb 5-1: device descriptor read/8, error -71 [ 839.895223][T18025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3802'. [ 839.940953][ T191] savu 0003:1E7D:2D5A.0050: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 840.111972][T12355] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 840.142610][T12355] usb 5-1: device descriptor read/8, error -71 [ 840.252172][T12355] usb usb5-port1: unable to enumerate USB device [ 840.429685][T18028] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3803'. [ 840.429742][T18028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3803'. [ 840.751977][T12355] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 840.816218][T18033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3805'. [ 840.837371][T18033] erspan0: entered promiscuous mode [ 840.911880][T12355] usb 4-1: Using ep0 maxpacket: 32 [ 840.920358][T12355] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 840.939787][T12355] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 840.939878][T12355] usb 4-1: config 0 has no interface number 0 [ 840.940031][T12355] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 840.940133][T12355] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 840.940199][T12355] usb 4-1: config 0 interface 85 has no altsetting 0 [ 841.026441][T12355] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.026530][T12355] usb 4-1: Product: syz [ 841.026578][T12355] usb 4-1: Manufacturer: syz [ 841.026645][T12355] usb 4-1: SerialNumber: syz [ 841.061418][T12355] usb 4-1: config 0 descriptor?? [ 841.269030][T18032] erspan0: left promiscuous mode [ 841.374601][T18038] tipc: Cannot configure node identity twice [ 841.403577][ T9] usb 2-1: reset high-speed USB device number 108 using dummy_hcd [ 841.664166][T18045] vlan2: entered promiscuous mode [ 841.670846][T18045] gretap0: entered promiscuous mode [ 841.732834][T18047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3810'. [ 841.854266][T18053] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3811'. [ 842.291941][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 842.382047][ T9] usb 2-1: device descriptor read/64, error -71 [ 842.445732][T18060] syzkaller0: entered promiscuous mode [ 842.452366][T18060] syzkaller0: entered allmulticast mode [ 842.464383][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 842.484986][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.485049][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.485094][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 842.485143][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.521375][ T10] usb 5-1: config 0 descriptor?? [ 842.706019][ T9] usb 2-1: reset high-speed USB device number 108 using dummy_hcd [ 842.714696][ T9] usb 2-1: device reset changed ep0 maxpacket size! [ 842.745238][ T191] usb 2-1: USB disconnect, device number 108 [ 842.941972][ T191] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 842.995009][T18071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3817'. [ 843.104584][ T191] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 843.115714][ T191] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.115878][ T191] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 843.116070][ T191] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 843.144867][ T191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.145030][ T191] usb 2-1: Product: syz [ 843.145081][ T191] usb 2-1: Manufacturer: syz [ 843.145178][ T191] usb 2-1: SerialNumber: syz [ 843.209684][ T191] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 843.209819][ T191] cdc_ncm 2-1:1.0: bind() failure [ 843.479100][T12355] appletouch 4-1:0.85: Failed to read mode from device. [ 843.487810][T12355] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 843.517945][T12355] usb 4-1: USB disconnect, device number 29 [ 843.615803][ T191] usb 2-1: USB disconnect, device number 109 [ 843.939670][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 843.939807][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 843.961976][T12355] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 843.989746][ T10] usb 5-1: USB disconnect, device number 11 [ 844.101964][T12355] usb 4-1: device descriptor read/64, error -71 [ 844.219749][T18088] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3823'. [ 844.341977][T12355] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 844.482130][T12355] usb 4-1: device descriptor read/64, error -71 [ 844.592376][T12355] usb usb4-port1: attempt power cycle [ 844.605424][ T31] kauditd_printk_skb: 425 callbacks suppressed [ 844.605517][ T31] audit: type=1326 audit(1788413092.462:6931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18098 comm="syz.1.3828" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde45b9e159 code=0x7ffc0000 [ 844.608808][ T31] audit: type=1326 audit(1788413092.462:6932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18098 comm="syz.1.3828" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde45b9e159 code=0x7ffc0000 [ 844.610645][ T31] audit: type=1326 audit(1788413092.462:6933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18098 comm="syz.1.3828" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fde45b9e159 code=0x7ffc0000 [ 844.611229][ T31] audit: type=1326 audit(1788413092.462:6934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18098 comm="syz.1.3828" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde45b9e159 code=0x7ffc0000 [ 844.650324][ T31] audit: type=1326 audit(1788413092.502:6935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18098 comm="syz.1.3828" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde45b9e159 code=0x7ffc0000 [ 844.650500][ T31] audit: type=1326 audit(1788413092.502:6936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18098 comm="syz.1.3828" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde45b5e98e code=0x7ffc0000 [ 844.660106][ T31] audit: type=1326 audit(1788413092.502:6937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18098 comm="syz.1.3828" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fde45b5e98e code=0x7ffc0000 [ 844.661906][T18099] FAULT_INJECTION: forcing a failure. [ 844.661906][T18099] name failslab, interval 1, probability 0, space 0, times 0 [ 844.661995][T18099] CPU: 0 UID: 0 PID: 18099 Comm: syz.1.3828 Tainted: G L syzkaller #0 PREEMPT(full) [ 844.662077][T18099] Tainted: [L]=SOFTLOCKUP [ 844.662108][T18099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 844.662148][T18099] Call Trace: [ 844.662171][T18099] [ 844.662200][T18099] dump_stack_lvl+0xe8/0x150 [ 844.662304][T18099] should_fail_ex+0x410/0x560 [ 844.662418][T18099] should_failslab+0xa8/0x100 [ 844.662514][T18099] ? audit_log_start+0x103/0xa10 [ 844.662599][T18099] kmem_cache_alloc_noprof+0xa1/0x600 [ 844.662685][T18099] ? auditd_test_task+0x22/0x280 [ 844.662756][T18099] ? auditd_test_task+0x22/0x280 [ 844.662820][T18099] ? audit_log_start+0x103/0xa10 [ 844.662913][T18099] audit_log_start+0x103/0xa10 [ 844.663000][T18099] ? __pfx_audit_log_start+0x10/0x10 [ 844.663086][T18099] ? get_pid_task+0x20/0x1f0 [ 844.663149][T18099] ? get_pid_task+0x20/0x1f0 [ 844.663200][T18099] ? get_pid_task+0x20/0x1f0 [ 844.663275][T18099] audit_seccomp+0x63/0x190 [ 844.663345][T18099] ? clear_bhb_loop+0x70/0xc0 [ 844.663406][T18099] ? clear_bhb_loop+0xe/0xc0 [ 844.663472][T18099] __seccomp_filter+0xd14/0x1de0 [ 844.663621][T18099] ? __pfx___seccomp_filter+0x10/0x10 [ 844.663685][T18099] ? __mutex_unlock_slowpath+0x731/0x900 [ 844.663802][T18099] ? __fget_files+0x2a/0x420 [ 844.663892][T18099] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 844.663989][T18099] ? __fget_files+0x3a2/0x420 [ 844.664208][T18099] ? fput+0xa0/0xd0 [ 844.664327][T18099] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 844.664441][T18099] do_syscall_64+0x11f/0x520 [ 844.664540][T18099] ? trace_irq_disable+0x3b/0x140 [ 844.664604][T18099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.664684][T18099] ? clear_bhb_loop+0x70/0xc0 [ 844.664769][T18099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.664842][T18099] RIP: 0033:0x7fde45b9e159 [ 844.664922][T18099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.664985][T18099] RSP: 002b:00007fde469a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 844.665053][T18099] RAX: ffffffffffffffda RBX: 00007fde45e25fa0 RCX: 00007fde45b9e159 [ 844.665110][T18099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 844.665152][T18099] RBP: 00007fde469a4090 R08: 0000000000000000 R09: 0000000000000000 [ 844.665195][T18099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.665236][T18099] R13: 00007fde45e26038 R14: 00007fde45e25fa0 R15: 00007fde45f4fa48 [ 844.665337][T18099] [ 844.674645][T18099] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 844.674709][T18099] audit: out of memory in audit_log_start [ 844.675803][ T31] audit: type=1326 audit(1788413092.532:6938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18098 comm="syz.1.3828" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fde45b5e98e code=0x7ffc0000 [ 845.062104][T12355] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 845.098422][T12355] usb 4-1: device descriptor read/8, error -71 [ 845.341906][T12355] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 845.359790][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3830'. [ 845.373590][T12355] usb 4-1: device descriptor read/8, error -71 [ 845.482521][T12355] usb usb4-port1: unable to enumerate USB device [ 845.747555][T18117] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3835'. [ 845.980266][T18121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3837'. [ 845.982350][T18121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3837'. [ 846.033539][T18121] sctp: [Deprecated]: syz.2.3837 (pid 18121) Use of int in max_burst socket option. [ 846.033539][T18121] Use struct sctp_assoc_value instead [ 846.046310][T18123] xt_ecn: cannot match TCP bits for non-tcp packets [ 846.746171][T18138] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3843'. [ 846.821284][T18140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3842'. [ 847.372245][T18148] pim6reg9: entered allmulticast mode [ 847.528762][T18152] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3847'. [ 847.633934][T18154] batadv_slave_0: entered promiscuous mode [ 847.647534][T18154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3848'. [ 847.663712][T18154] batadv_slave_0 (unregistering): left promiscuous mode [ 847.663810][T18154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.800015][T18159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3849'. [ 847.800084][T18159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3849'. [ 847.865522][T18159] sctp: [Deprecated]: syz.1.3849 (pid 18159) Use of int in max_burst socket option. [ 847.865522][T18159] Use struct sctp_assoc_value instead [ 848.474968][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.474968][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.475846][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.475846][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.485568][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.485568][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.490043][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.490043][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.490978][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.490978][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.498757][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.498757][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.506502][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.506502][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.507375][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.507375][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.512491][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.512491][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.516474][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.516474][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.516867][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.516867][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.517178][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.517178][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.517656][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.517656][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.522571][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.522571][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.527482][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.527482][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.533395][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.533395][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.537801][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.537801][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.538217][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.538217][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.545880][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.545880][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.553040][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.553040][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.560500][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.560500][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.560829][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.560829][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.561194][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.561194][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.561523][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.561523][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.562909][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 848.577757][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.577757][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.586315][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.586315][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.590462][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.590462][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.599428][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.599428][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.600308][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.600308][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.620297][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.620297][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.625553][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.625553][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.627385][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.627385][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.628865][T18177] fuse: Unknown parameter 'UÈãM^þ$ÔÙu›þØ÷³ÓE¤ V!/Ñù{†HÀ!éMþ# É~è;:@sgŽQ7›Ý¦ªÚxEt?µ~)Ù·vY¯€ Œ×Î>pãÓTgóο2ï?qÜÁ-N [ 848.628865][T18177] |Ís¯ë4ÜcXèE>Ùìk)×30f(©ðã ª’"' [ 848.713889][ T10] usb 4-1: device descriptor read/64, error -71 [ 848.992503][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 849.152067][ T10] usb 4-1: device descriptor read/64, error -71 [ 849.272237][ T10] usb usb4-port1: attempt power cycle [ 849.567969][T18195] sctp: [Deprecated]: syz.1.3862 (pid 18195) Use of int in max_burst socket option. [ 849.567969][T18195] Use struct sctp_assoc_value instead [ 849.652026][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 849.688872][ T10] usb 4-1: device descriptor read/8, error -71 [ 849.932344][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 849.956871][ T10] usb 4-1: device descriptor read/8, error -71 [ 850.072973][ T10] usb usb4-port1: unable to enumerate USB device [ 850.151945][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 850.313425][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 850.316543][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 850.316620][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 850.316736][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 850.326642][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.326751][ T9] usb 5-1: Product: syz [ 850.326794][ T9] usb 5-1: Manufacturer: syz [ 850.326842][ T9] usb 5-1: SerialNumber: syz [ 850.390790][ T9] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 850.404118][ T9] cdc_ncm 5-1:1.0: bind() failure [ 850.879948][ T10] usb 5-1: USB disconnect, device number 12 [ 850.986622][T18236] __nla_validate_parse: 5 callbacks suppressed [ 850.987801][T18236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3875'. [ 850.987873][T18236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3875'. [ 851.005409][T18236] sctp: [Deprecated]: syz.2.3875 (pid 18236) Use of int in max_burst socket option. [ 851.005409][T18236] Use struct sctp_assoc_value instead [ 851.722259][ T10] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 851.811968][T12350] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 851.893698][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 851.903661][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.976991][T12350] usb 4-1: unable to get BOS descriptor or descriptor too short [ 851.977064][T12350] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 851.995928][T12350] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 851.995975][T12350] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 852.018985][T12350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.019029][T12350] usb 4-1: Product: syz [ 852.019083][T12350] usb 4-1: Manufacturer: syz [ 852.019105][T12350] usb 4-1: SerialNumber: syz [ 852.051407][T12350] usb 4-1: selecting invalid altsetting 1 [ 852.058848][T12350] usb 4-1: unit 0 not found! [ 852.101874][ T5714] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 852.231888][ T5714] usb 5-1: device descriptor read/64, error -71 [ 852.254551][T12350] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 852.399874][T15689] udevd[15689]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 852.491859][ T5714] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 852.621813][ T5714] usb 5-1: device descriptor read/64, error -71 [ 852.733520][ T5714] usb usb5-port1: attempt power cycle [ 853.071920][ T5714] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 853.102954][ T5714] usb 5-1: device descriptor read/8, error -71 [ 853.215418][T18261] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3881'. [ 853.256194][T18261] loop5: detected capacity change from 0 to 7 [ 853.264327][T18261] Dev loop5: unable to read RDB block 7 [ 853.264387][T18261] loop5: AHDI p1 p3 p4 [ 853.264444][T18261] loop5: partition table partially beyond EOD, truncated [ 853.264974][T18261] loop5: p1 size 100663296 extends beyond EOD, truncated [ 853.285739][T18261] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 853.313129][T18261] netlink: 'syz.2.3881': attribute type 88 has an invalid length. [ 853.353716][ T5714] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 853.374139][ T5714] usb 5-1: device descriptor read/8, error -71 [ 853.382691][T15896] udevd[15896]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 853.384543][T15689] udevd[15689]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 853.482152][ T5714] usb usb5-port1: unable to enumerate USB device [ 853.545334][T18265] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3883'. [ 853.860280][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 853.860418][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 853.879654][ T10] usb 2-1: USB disconnect, device number 110 [ 854.206694][T18277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3886'. [ 854.217053][T18277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3886'. [ 854.229243][T18277] sctp: [Deprecated]: syz.1.3886 (pid 18277) Use of int in max_burst socket option. [ 854.229243][T18277] Use struct sctp_assoc_value instead [ 854.531955][ T10] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 854.693005][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 854.696065][ T10] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 854.696184][ T10] usb 2-1: no configurations [ 854.696224][ T10] usb 2-1: can't read configurations, error -22 [ 854.713505][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 854.824813][ T10] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 854.915640][ T191] usb 4-1: USB disconnect, device number 38 [ 854.984182][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 854.988525][ T10] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 854.988652][ T10] usb 2-1: no configurations [ 854.988686][ T10] usb 2-1: can't read configurations, error -22 [ 854.990024][ T10] usb usb2-port1: attempt power cycle [ 855.152112][T18296] FAULT_INJECTION: forcing a failure. [ 855.152112][T18296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 855.168217][T18296] CPU: 1 UID: 0 PID: 18296 Comm: syz.3.3892 Tainted: G L syzkaller #0 PREEMPT(full) [ 855.168254][T18296] Tainted: [L]=SOFTLOCKUP [ 855.168264][T18296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 855.168277][T18296] Call Trace: [ 855.168287][T18296] [ 855.168298][T18296] dump_stack_lvl+0xe8/0x150 [ 855.168338][T18296] should_fail_ex+0x410/0x560 [ 855.168377][T18296] _copy_from_user+0x2d/0xb0 [ 855.168403][T18296] ___sys_sendmsg+0x1c6/0x360 [ 855.168430][T18296] ? __lock_acquire+0x6df/0x2e50 [ 855.168456][T18296] ? __pfx____sys_sendmsg+0x10/0x10 [ 855.168511][T18296] ? __fget_files+0x2a/0x420 [ 855.168539][T18296] ? __fget_files+0x3a2/0x420 [ 855.168575][T18296] __x64_sys_sendmsg+0x1b1/0x290 [ 855.168603][T18296] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 855.168648][T18296] do_syscall_64+0x166/0x520 [ 855.168681][T18296] ? trace_irq_disable+0x3b/0x140 [ 855.168703][T18296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.168728][T18296] ? clear_bhb_loop+0x70/0xc0 [ 855.168757][T18296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.168781][T18296] RIP: 0033:0x7fd94ad9e159 [ 855.168803][T18296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.168822][T18296] RSP: 002b:00007fd94bc25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 855.168847][T18296] RAX: ffffffffffffffda RBX: 00007fd94b025fa0 RCX: 00007fd94ad9e159 [ 855.168864][T18296] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 855.168879][T18296] RBP: 00007fd94bc25090 R08: 0000000000000000 R09: 0000000000000000 [ 855.168903][T18296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 855.168918][T18296] R13: 00007fd94b026038 R14: 00007fd94b025fa0 R15: 00007fd94b14fa48 [ 855.168953][T18296] [ 855.337291][ T10] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 855.365682][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 855.367416][ T10] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 855.367520][ T10] usb 2-1: no configurations [ 855.367560][ T10] usb 2-1: can't read configurations, error -22 [ 855.517177][ T10] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 855.537122][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 855.544615][ T10] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 855.544677][ T10] usb 2-1: no configurations [ 855.544707][ T10] usb 2-1: can't read configurations, error -22 [ 855.545689][ T10] usb usb2-port1: unable to enumerate USB device [ 855.875396][T18312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3897'. [ 855.884678][T18312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3897'. [ 855.940485][T18313] sit1: entered allmulticast mode [ 856.170795][T18318] FAULT_INJECTION: forcing a failure. [ 856.170795][T18318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 856.185824][T18318] CPU: 1 UID: 0 PID: 18318 Comm: syz.0.3900 Tainted: G L syzkaller #0 PREEMPT(full) [ 856.185854][T18318] Tainted: [L]=SOFTLOCKUP [ 856.185862][T18318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 856.185874][T18318] Call Trace: [ 856.185882][T18318] [ 856.185890][T18318] dump_stack_lvl+0xe8/0x150 [ 856.185922][T18318] should_fail_ex+0x410/0x560 [ 856.185956][T18318] _copy_to_iter+0x404/0x1810 [ 856.185983][T18318] ? unwind_get_return_address+0x4d/0x90 [ 856.186018][T18318] ? __pfx__copy_to_iter+0x10/0x10 [ 856.186047][T18318] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 856.186073][T18318] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 856.186096][T18318] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 856.186129][T18318] __skb_datagram_iter+0xf8/0x980 [ 856.186152][T18318] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 856.186181][T18318] skb_copy_datagram_iter+0xb5/0x240 [ 856.186227][T18318] netlink_recvmsg+0x2b9/0xa50 [ 856.186273][T18318] ? __pfx_netlink_recvmsg+0x10/0x10 [ 856.186312][T18318] ? aa_sock_msg_perm+0x144/0x210 [ 856.186343][T18318] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 856.186366][T18318] ? security_socket_recvmsg+0x7e/0x2c0 [ 856.186391][T18318] ? __pfx_netlink_recvmsg+0x10/0x10 [ 856.186414][T18318] sock_recvmsg+0x196/0x1e0 [ 856.186442][T18318] ____sys_recvmsg+0x1e6/0x4a0 [ 856.186460][T18318] ? iovec_from_user+0x87/0x250 [ 856.186485][T18318] ? __pfx_____sys_recvmsg+0x10/0x10 [ 856.186517][T18318] ? import_iovec+0x73/0xa0 [ 856.186539][T18318] ___sys_recvmsg+0x213/0x5a0 [ 856.186558][T18318] ? lock_acquire+0x115/0x350 [ 856.186578][T18318] ? __pfx____sys_recvmsg+0x10/0x10 [ 856.186604][T18318] ? lock_acquire+0x115/0x350 [ 856.186636][T18318] ? __fget_files+0x3a2/0x420 [ 856.186668][T18318] do_recvmmsg+0x31a/0x7f0 [ 856.186699][T18318] ? __pfx_do_recvmmsg+0x10/0x10 [ 856.186729][T18318] ? get_timespec64+0x119/0x1b0 [ 856.186751][T18318] ? __pfx_get_timespec64+0x10/0x10 [ 856.186780][T18318] __x64_sys_recvmmsg+0x1b7/0x250 [ 856.186804][T18318] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 856.186835][T18318] do_syscall_64+0x166/0x520 [ 856.186862][T18318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.186880][T18318] ? clear_bhb_loop+0x70/0xc0 [ 856.186902][T18318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.186920][T18318] RIP: 0033:0x7f83fed9e159 [ 856.186938][T18318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.186954][T18318] RSP: 002b:00007f83fcff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 856.186974][T18318] RAX: ffffffffffffffda RBX: 00007f83ff025fa0 RCX: 00007f83fed9e159 [ 856.186988][T18318] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 856.187001][T18318] RBP: 00007f83fcff6090 R08: 0000200000003700 R09: 0000000000000000 [ 856.187013][T18318] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 856.187025][T18318] R13: 00007f83ff026038 R14: 00007f83ff025fa0 R15: 00007f83ff14fa48 [ 856.187052][T18318] [ 856.549073][T18323] fuse: Bad value for 'user_id' [ 856.554381][T18323] fuse: Bad value for 'user_id' [ 856.848324][T18331] FAULT_INJECTION: forcing a failure. [ 856.848324][T18331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 856.861962][T18331] CPU: 1 UID: 0 PID: 18331 Comm: syz.3.3905 Tainted: G L syzkaller #0 PREEMPT(full) [ 856.861998][T18331] Tainted: [L]=SOFTLOCKUP [ 856.862007][T18331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 856.862020][T18331] Call Trace: [ 856.862030][T18331] [ 856.862040][T18331] dump_stack_lvl+0xe8/0x150 [ 856.862079][T18331] should_fail_ex+0x410/0x560 [ 856.862121][T18331] _copy_from_iter+0x1d3/0x1660 [ 856.862165][T18331] ? __lock_acquire+0x6df/0x2e50 [ 856.862190][T18331] ? __pfx__copy_from_iter+0x10/0x10 [ 856.862241][T18331] tun_get_user+0x26b/0x44d0 [ 856.862293][T18331] ? aa_file_perm+0x18b/0x15f0 [ 856.862325][T18331] ? aa_file_perm+0x4ed/0x15f0 [ 856.862351][T18331] ? __pfx_tun_get_user+0x10/0x10 [ 856.862386][T18331] ? __lock_acquire+0x6df/0x2e50 [ 856.862412][T18331] ? kstrtoull+0x137/0x1d0 [ 856.862450][T18331] ? ref_tracker_alloc+0x341/0x4b0 [ 856.862473][T18331] ? lock_acquire+0x115/0x350 [ 856.862497][T18331] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 856.862531][T18331] ? lock_acquire+0x115/0x350 [ 856.862554][T18331] ? tun_get+0x1c/0x2f0 [ 856.862592][T18331] ? tun_get+0x1c/0x2f0 [ 856.862624][T18331] ? tun_get+0x1c/0x2f0 [ 856.862662][T18331] tun_chr_write_iter+0x113/0x200 [ 856.862698][T18331] vfs_write+0x612/0xba0 [ 856.862740][T18331] ? __pfx_vfs_write+0x10/0x10 [ 856.862785][T18331] ? __fget_files+0x2a/0x420 [ 856.862822][T18331] ksys_write+0x150/0x270 [ 856.862856][T18331] ? __pfx_ksys_write+0x10/0x10 [ 856.862898][T18331] do_syscall_64+0x166/0x520 [ 856.862931][T18331] ? trace_irq_disable+0x3b/0x140 [ 856.862953][T18331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.862977][T18331] ? clear_bhb_loop+0x70/0xc0 [ 856.863005][T18331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.863029][T18331] RIP: 0033:0x7fd94ad9e159 [ 856.863050][T18331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.863071][T18331] RSP: 002b:00007fd94bc25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 856.863096][T18331] RAX: ffffffffffffffda RBX: 00007fd94b025fa0 RCX: 00007fd94ad9e159 [ 856.863113][T18331] RDX: 0000000000000ffe RSI: 00002000000000c0 RDI: 0000000000000003 [ 856.863128][T18331] RBP: 00007fd94bc25090 R08: 0000000000000000 R09: 0000000000000000 [ 856.863143][T18331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 856.863157][T18331] R13: 00007fd94b026038 R14: 00007fd94b025fa0 R15: 00007fd94b14fa48 [ 856.863192][T18331] [ 857.910202][T18368] FAULT_INJECTION: forcing a failure. [ 857.910202][T18368] name failslab, interval 1, probability 0, space 0, times 0 [ 857.926832][T18368] CPU: 1 UID: 0 PID: 18368 Comm: syz.0.3915 Tainted: G L syzkaller #0 PREEMPT(full) [ 857.926871][T18368] Tainted: [L]=SOFTLOCKUP [ 857.926879][T18368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 857.926890][T18368] Call Trace: [ 857.926897][T18368] [ 857.926913][T18368] dump_stack_lvl+0xe8/0x150 [ 857.926944][T18368] should_fail_ex+0x410/0x560 [ 857.926976][T18368] should_failslab+0xa8/0x100 [ 857.926997][T18368] ? skb_clone+0x212/0x3a0 [ 857.927018][T18368] kmem_cache_alloc_noprof+0xa1/0x600 [ 857.927045][T18368] ? skb_clone+0x212/0x3a0 [ 857.927069][T18368] skb_clone+0x212/0x3a0 [ 857.927091][T18368] __netlink_deliver_tap+0x413/0x860 [ 857.927127][T18368] ? netlink_deliver_tap+0x2e/0x1b0 [ 857.927150][T18368] netlink_deliver_tap+0x19c/0x1b0 [ 857.927191][T18368] netlink_unicast+0x781/0x940 [ 857.927220][T18368] netlink_sendmsg+0x813/0xb40 [ 857.927249][T18368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 857.927278][T18368] ? apparmor_socket_sendmsg+0x98/0x360 [ 857.927309][T18368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 857.927331][T18368] sock_sendmsg_nosec+0x13a/0x180 [ 857.927361][T18368] ____sys_sendmsg+0x54e/0x850 [ 857.927393][T18368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 857.927427][T18368] ? import_iovec+0x73/0xa0 [ 857.927450][T18368] ___sys_sendmsg+0x2a5/0x360 [ 857.927468][T18368] ? __lock_acquire+0x6df/0x2e50 [ 857.927489][T18368] ? __pfx____sys_sendmsg+0x10/0x10 [ 857.927540][T18368] ? __fget_files+0x2a/0x420 [ 857.927564][T18368] ? __fget_files+0x3a2/0x420 [ 857.927598][T18368] __x64_sys_sendmsg+0x1b1/0x290 [ 857.927621][T18368] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 857.927668][T18368] do_syscall_64+0x166/0x520 [ 857.927696][T18368] ? trace_irq_disable+0x3b/0x140 [ 857.927714][T18368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.927735][T18368] ? clear_bhb_loop+0x70/0xc0 [ 857.927760][T18368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.927781][T18368] RIP: 0033:0x7f83fed9e159 [ 857.927802][T18368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.927818][T18368] RSP: 002b:00007f83fcfd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 857.927838][T18368] RAX: ffffffffffffffda RBX: 00007f83ff026090 RCX: 00007f83fed9e159 [ 857.927852][T18368] RDX: 0000000000000044 RSI: 0000200000000200 RDI: 0000000000000003 [ 857.927863][T18368] RBP: 00007f83fcfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 857.927874][T18368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.927885][T18368] R13: 00007f83ff026128 R14: 00007f83ff026090 R15: 00007f83ff14fa48 [ 857.927946][T18368] [ 858.993822][T18393] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3926'. [ 859.058414][T18394] kvm [18392]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xcd [ 859.063943][T18394] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3925'. [ 859.434136][T12350] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 859.592806][T12350] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 859.605936][T12350] usb 5-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 859.623185][T12350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.623234][T12350] usb 5-1: Product: syz [ 859.623282][T12350] usb 5-1: Manufacturer: syz [ 859.623304][T12350] usb 5-1: SerialNumber: syz [ 859.649869][T18407] FAULT_INJECTION: forcing a failure. [ 859.649869][T18407] name failslab, interval 1, probability 0, space 0, times 0 [ 859.649941][T18407] CPU: 0 UID: 0 PID: 18407 Comm: syz.1.3932 Tainted: G L syzkaller #0 PREEMPT(full) [ 859.650005][T18407] Tainted: [L]=SOFTLOCKUP [ 859.650023][T18407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 859.650070][T18407] Call Trace: [ 859.650099][T18407] [ 859.650124][T18407] dump_stack_lvl+0xe8/0x150 [ 859.650244][T18407] should_fail_ex+0x410/0x560 [ 859.650355][T18407] should_failslab+0xa8/0x100 [ 859.650435][T18407] __kmalloc_cache_noprof+0xa3/0x600 [ 859.650526][T18407] ? __kmalloc_cache_noprof+0x14d/0x600 [ 859.650608][T18407] ? sctp_add_bind_addr+0x8c/0x370 [ 859.650679][T18407] ? sctp_add_bind_addr+0x8c/0x370 [ 859.650756][T18407] sctp_add_bind_addr+0x8c/0x370 [ 859.650845][T18407] sctp_copy_local_addr_list+0x31a/0x4e0 [ 859.650919][T18407] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 859.650999][T18407] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 859.651073][T18407] ? sctp_v6_is_any+0x64/0x80 [ 859.651155][T18407] ? sctp_copy_one_addr+0x93/0x360 [ 859.651245][T18407] sctp_bind_addr_copy+0xb3/0x3c0 [ 859.651316][T18407] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 859.651395][T18407] sctp_connect_new_asoc+0x2ff/0x6b0 [ 859.651510][T18407] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 859.651627][T18407] ? __local_bh_enable_ip+0xd6/0x140 [ 859.651698][T18407] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 859.651763][T18407] ? security_sctp_bind_connect+0x7e/0x2c0 [ 859.651855][T18407] sctp_sendmsg+0x159b/0x2d00 [ 859.651966][T18407] ? kstrtouint+0x6e/0xe0 [ 859.652048][T18407] ? __pfx_sctp_sendmsg+0x10/0x10 [ 859.652121][T18407] ? lock_acquire+0x115/0x350 [ 859.652181][T18407] ? get_pid_task+0x20/0x1f0 [ 859.652290][T18407] ? aa_sock_msg_perm+0xf5/0x210 [ 859.652350][T18407] ? sock_rps_record_flow+0x19/0x350 [ 859.652445][T18407] ? inet_sendmsg+0x298/0x320 [ 859.652525][T18407] ? __pfx_inet_sendmsg+0x10/0x10 [ 859.652594][T18407] sock_sendmsg_nosec+0x10e/0x180 [ 859.652675][T18407] __sys_sendto+0x408/0x5a0 [ 859.652730][T18407] ? ksys_write+0x1e6/0x270 [ 859.652825][T18407] ? __pfx___sys_sendto+0x10/0x10 [ 859.652918][T18407] ? __mutex_unlock_slowpath+0x731/0x900 [ 859.653083][T18407] ? __pfx_ksys_write+0x10/0x10 [ 859.653159][T18407] __x64_sys_sendto+0xde/0x100 [ 859.653218][T18407] do_syscall_64+0x166/0x520 [ 859.653302][T18407] ? trace_irq_disable+0x3b/0x140 [ 859.653353][T18407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.653410][T18407] ? clear_bhb_loop+0x70/0xc0 [ 859.653491][T18407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.653550][T18407] RIP: 0033:0x7fde45b9e159 [ 859.653603][T18407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.653651][T18407] RSP: 002b:00007fde469a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 859.653712][T18407] RAX: ffffffffffffffda RBX: 00007fde45e25fa0 RCX: 00007fde45b9e159 [ 859.653780][T18407] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 859.653819][T18407] RBP: 00007fde469a4090 R08: 0000200000000280 R09: 000000000000001c [ 859.653852][T18407] R10: 0000000000000081 R11: 0000000000000246 R12: 0000000000000002 [ 859.653890][T18407] R13: 00007fde45e26038 R14: 00007fde45e25fa0 R15: 00007fde45f4fa48 [ 859.653974][T18407] [ 859.994041][T12350] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 860.001964][T12350] dvb-usb: bulk message failed: -22 (3/0) [ 860.045258][T12350] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 860.059365][T12350] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 860.059444][T12350] dvb_usb_umt_010 5-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 860.114838][ T9] usb 5-1: USB disconnect, device number 17 [ 860.139096][T18412] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3933'. [ 860.145838][T18412] syzkaller1: entered allmulticast mode [ 860.196778][T18414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3931'. [ 860.559744][T18424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3936'. [ 860.569026][T18424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3936'. [ 860.697218][T18424] syz.3.3936 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 860.697318][T18424] CPU: 0 UID: 0 PID: 18424 Comm: syz.3.3936 Tainted: G L syzkaller #0 PREEMPT(full) [ 860.697352][T18424] Tainted: [L]=SOFTLOCKUP [ 860.697361][T18424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 860.697402][T18424] Call Trace: [ 860.697444][T18424] [ 860.697483][T18424] dump_stack_lvl+0xe8/0x150 [ 860.697676][T18424] dump_header+0xd3/0x4b0 [ 860.697805][T18424] oom_kill_process+0x3ab/0x9e0 [ 860.697898][T18424] out_of_memory+0x1064/0x1480 [ 860.697972][T18424] ? try_charge_memcg+0xc32/0x15e0 [ 860.698076][T18424] ? __pfx_out_of_memory+0x10/0x10 [ 860.698151][T18424] ? do_raw_spin_unlock+0xf5/0x200 [ 860.698264][T18424] try_charge_memcg+0xcdf/0x15e0 [ 860.698388][T18424] ? __pfx_try_charge_memcg+0x10/0x10 [ 860.698477][T18424] ? percpu_ref_tryget+0x15/0x180 [ 860.698582][T18424] ? __memcg_slab_post_alloc_hook+0x793/0xf80 [ 860.698653][T18424] ? __memcg_slab_post_alloc_hook+0x793/0xf80 [ 860.698724][T18424] __memcg_slab_post_alloc_hook+0x92b/0xf80 [ 860.698850][T18424] kmem_cache_alloc_lru_noprof+0x351/0x5f0 [ 860.698975][T18424] ? kmem_cache_alloc_lru_noprof+0x153/0x5f0 [ 860.699065][T18424] ? sock_alloc_inode+0x2c/0x1a0 [ 860.699148][T18424] ? sock_alloc_inode+0x2c/0x1a0 [ 860.699239][T18424] ? __pfx_sock_alloc_inode+0x10/0x10 [ 860.699318][T18424] sock_alloc_inode+0x2c/0x1a0 [ 860.699398][T18424] ? __pfx_sock_alloc_inode+0x10/0x10 [ 860.699470][T18424] alloc_inode+0x6a/0x1b0 [ 860.699549][T18424] __sock_create+0x12d/0x9d0 [ 860.699657][T18424] __sys_socket+0xd6/0x1b0 [ 860.699758][T18424] __x64_sys_socket+0x7a/0x90 [ 860.699850][T18424] do_syscall_64+0x166/0x520 [ 860.699947][T18424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.700009][T18424] ? clear_bhb_loop+0x70/0xc0 [ 860.700082][T18424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.700137][T18424] RIP: 0033:0x7fd94ad9e159 [ 860.700197][T18424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.700257][T18424] RSP: 002b:00007fd94bc25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 860.700341][T18424] RAX: ffffffffffffffda RBX: 00007fd94b025fa0 RCX: 00007fd94ad9e159 [ 860.700398][T18424] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 0000000000000002 [ 860.700438][T18424] RBP: 00007fd94ae35024 R08: 0000000000000000 R09: 0000000000000000 [ 860.700479][T18424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 860.700519][T18424] R13: 00007fd94b026038 R14: 00007fd94b025fa0 R15: 00007fd94b14fa48 [ 860.700622][T18424] [ 860.921640][T18424] memory: usage 0kB, limit 0kB, failcnt 38 [ 860.922125][T18424] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 860.922175][T18424] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 860.922216][T18424] Memory cgroup stats for /syz3/test: [ 860.922737][T18424] cache 0 [ 860.922767][T18424] rss 0 [ 860.922788][T18424] rss_huge 0 [ 860.922815][T18424] shmem 0 [ 860.922837][T18424] mapped_file 0 [ 860.922860][T18424] dirty 0 [ 860.922881][T18424] writeback 0 [ 860.922902][T18424] workingset_refault_anon 0 [ 860.922924][T18424] workingset_refault_file 0 [ 860.922952][T18424] swap 0 [ 860.922972][T18424] swapcached 0 [ 860.922995][T18424] pgpgin 163 [ 860.923016][T18424] pgpgout 163 [ 860.923038][T18424] pgfault 33 [ 860.923058][T18424] pgmajfault 0 [ 860.923096][T18424] inactive_anon 0 [ 860.923118][T18424] active_anon 0 [ 860.923146][T18424] inactive_file 0 [ 860.923174][T18424] active_file 0 [ 860.923584][T18424] unevictable 0 [ 860.950268][T18424] hierarchical_memory_limit 0 [ 860.950324][T18424] hierarchical_memsw_limit 9223372036854771712 [ 860.950348][T18424] total_cache 0 [ 860.950377][T18424] total_rss 0 [ 860.950398][T18424] total_rss_huge 0 [ 860.950420][T18424] total_shmem 0 [ 860.950441][T18424] total_mapped_file 0 [ 860.950468][T18424] total_dirty 0 [ 860.950490][T18424] total_writeback 0 [ 860.950512][T18424] total_workingset_refault_anon 0 [ 860.950541][T18424] total_workingset_refault_file 0 [ 860.950563][T18424] total_swap 0 [ 860.950578][T18424] total_swapcached 0 [ 860.950606][T18424] total_pgpgin 163 [ 860.950627][T18424] total_pgpgout 163 [ 860.950648][T18424] total_pgfault 33 [ 860.950669][T18424] total_pgmajfault 0 [ 860.950690][T18424] total_inactive_anon 0 [ 860.950711][T18424] total_active_anon 0 [ 860.950738][T18424] total_inactive_file 0 [ 860.950760][T18424] total_active_file 0 [ 860.950788][T18424] total_unevictable 0 [ 860.950810][T18424] anon_cost 0 [ 860.950831][T18424] file_cost 0 [ 860.950860][T18424] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.3936,pid=18423,uid=0 [ 861.179215][T18424] Memory cgroup out of memory: Killed process 18423 (syz.3.3936) total-vm:102252kB, anon-rss:1440kB, file-rss:23460kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 861.210666][T18424] socket: no more sockets [ 861.338952][T18429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3937'. [ 861.527047][T18441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3938'. [ 861.602334][T18443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3938'. [ 861.976907][T18442] hub 8-0:1.0: USB hub found [ 861.977804][T18442] hub 8-0:1.0: 1 port detected [ 862.428743][T18466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3947'. [ 862.650085][T18470] syzkaller0: left promiscuous mode [ 862.650130][T18470] syzkaller0: left allmulticast mode [ 862.741838][ T9] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 862.892055][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 862.894860][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 862.901012][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 862.901149][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 862.901219][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 862.901306][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 862.901378][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 862.901501][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.131408][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 863.131484][ T9] usbtmc 2-1:16.0: can't read capabilities [ 863.571847][T12354] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 863.732057][T12354] usb 5-1: Using ep0 maxpacket: 32 [ 863.737999][T12354] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 863.748472][T12354] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 863.748516][T12354] usb 5-1: config 0 has no interface number 0 [ 863.748616][T12354] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 863.748716][T12354] usb 5-1: config 0 interface 85 has no altsetting 0 [ 863.764757][T12354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.764828][T12354] usb 5-1: Product: syz [ 863.764877][T12354] usb 5-1: Manufacturer: syz [ 863.764941][T12354] usb 5-1: SerialNumber: syz [ 863.778705][T12354] usb 5-1: config 0 descriptor?? [ 865.108488][T18509] __nla_validate_parse: 1 callbacks suppressed [ 865.108554][T18509] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3958'. [ 865.346015][T18518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3962'. [ 865.445725][T18522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3961'. [ 865.484747][ T9] usb 2-1: USB disconnect, device number 115 [ 865.871845][ T9] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 866.021798][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 866.024218][ T9] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 866.033129][ T9] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 866.033208][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.033261][ T9] usb 2-1: config 0 has no interfaces? [ 866.059010][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.059111][ T9] usb 2-1: Product: syz [ 866.059160][ T9] usb 2-1: Manufacturer: syz [ 866.059201][ T9] usb 2-1: SerialNumber: syz [ 866.096954][ T9] usb 2-1: config 0 descriptor?? [ 866.399863][T12354] appletouch 5-1:0.85: Failed to request geyser raw mode [ 866.412074][T12354] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 866.441874][T12354] usb 5-1: USB disconnect, device number 18 [ 866.534562][ T9] usb 2-1: USB disconnect, device number 116 [ 867.523711][T18552] FAULT_INJECTION: forcing a failure. [ 867.523711][T18552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 867.537476][T18552] CPU: 1 UID: 0 PID: 18552 Comm: syz.4.3972 Tainted: G L syzkaller #0 PREEMPT(full) [ 867.537503][T18552] Tainted: [L]=SOFTLOCKUP [ 867.537509][T18552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 867.537519][T18552] Call Trace: [ 867.537526][T18552] [ 867.537534][T18552] dump_stack_lvl+0xe8/0x150 [ 867.537563][T18552] should_fail_ex+0x410/0x560 [ 867.537594][T18552] _copy_to_user+0x31/0xb0 [ 867.537614][T18552] simple_read_from_buffer+0xe1/0x170 [ 867.537639][T18552] proc_fail_nth_read+0x1bb/0x230 [ 867.537663][T18552] ? common_file_perm+0x20e/0x2b0 [ 867.537681][T18552] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 867.537708][T18552] ? rw_verify_area+0x24a/0x4c0 [ 867.537732][T18552] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 867.537755][T18552] vfs_read+0x213/0xa80 [ 867.537782][T18552] ? __pfx___mutex_lock+0x10/0x10 [ 867.537806][T18552] ? __pfx_vfs_read+0x10/0x10 [ 867.537829][T18552] ? __fget_files+0x2a/0x420 [ 867.537853][T18552] ? __fget_files+0x3a2/0x420 [ 867.537872][T18552] ? __fget_files+0x2a/0x420 [ 867.537898][T18552] ksys_read+0x150/0x270 [ 867.537923][T18552] ? __pfx_ksys_read+0x10/0x10 [ 867.537952][T18552] do_syscall_64+0x166/0x520 [ 867.537974][T18552] ? trace_irq_disable+0x3b/0x140 [ 867.537990][T18552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.538005][T18552] ? clear_bhb_loop+0x70/0xc0 [ 867.538025][T18552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.538040][T18552] RIP: 0033:0x7ff4a195e98e [ 867.538055][T18552] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 867.538069][T18552] RSP: 002b:00007ff4a27ebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 867.538085][T18552] RAX: ffffffffffffffda RBX: 00007ff4a27ec6c0 RCX: 00007ff4a195e98e [ 867.538097][T18552] RDX: 000000000000000f RSI: 00007ff4a27ec0a0 RDI: 0000000000000006 [ 867.538108][T18552] RBP: 00007ff4a27ec090 R08: 0000000000000000 R09: 0000000000000000 [ 867.538118][T18552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 867.538127][T18552] R13: 00007ff4a1c26038 R14: 00007ff4a1c25fa0 R15: 00007ff4a1d4fa48 [ 867.538151][T18552] [ 867.775075][T18549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3970'. [ 867.883101][T18559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3973'. [ 867.954876][T18565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3976'. [ 868.442878][T12354] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 868.606276][T12354] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 868.617146][T12354] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 868.617191][T12354] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 868.617241][T12354] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 868.617276][T12354] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 868.617311][T12354] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 868.687530][T12354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.687566][T12354] usb 5-1: Product: syz [ 868.687611][T12354] usb 5-1: Manufacturer: syz [ 868.687633][T12354] usb 5-1: SerialNumber: syz [ 868.716471][T12354] usb 5-1: config 0 descriptor?? [ 868.722544][T18574] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 868.746968][T12354] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input92 [ 868.778075][T18585] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 869.039022][T18591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.051536][T18591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.098575][ C1] kbtab 5-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 869.110022][T18591] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3980'. [ 869.173595][ T10] usb 5-1: USB disconnect, device number 19 [ 869.577336][T18595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3985'. [ 869.577392][T18595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3985'. [ 869.592648][T18595] syzkaller0: entered promiscuous mode [ 869.592721][T18595] syzkaller0: entered allmulticast mode [ 869.601336][T16786] 0: reclassify loop, rule prio 0, protocol 800 [ 869.709741][T18597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3986'. [ 869.894090][T18603] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.898512][T18603] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.030211][T18607] syz.3.3988 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 870.030285][T18607] CPU: 1 UID: 0 PID: 18607 Comm: syz.3.3988 Tainted: G L syzkaller #0 PREEMPT(full) [ 870.030320][T18607] Tainted: [L]=SOFTLOCKUP [ 870.030330][T18607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 870.030346][T18607] Call Trace: [ 870.030357][T18607] [ 870.030368][T18607] dump_stack_lvl+0xe8/0x150 [ 870.030410][T18607] dump_header+0xd3/0x4b0 [ 870.030444][T18607] oom_kill_process+0x3ab/0x9e0 [ 870.030479][T18607] out_of_memory+0x1064/0x1480 [ 870.030507][T18607] ? try_charge_memcg+0xc32/0x15e0 [ 870.030550][T18607] ? __pfx_out_of_memory+0x10/0x10 [ 870.030576][T18607] ? do_raw_spin_unlock+0xf5/0x200 [ 870.030620][T18607] try_charge_memcg+0xcdf/0x15e0 [ 870.030670][T18607] ? __pfx_try_charge_memcg+0x10/0x10 [ 870.030713][T18607] ? percpu_ref_tryget+0x15/0x180 [ 870.030755][T18607] ? __memcg_slab_post_alloc_hook+0x793/0xf80 [ 870.030781][T18607] ? __memcg_slab_post_alloc_hook+0x793/0xf80 [ 870.030809][T18607] __memcg_slab_post_alloc_hook+0x92b/0xf80 [ 870.030859][T18607] kmem_cache_alloc_lru_noprof+0x351/0x5f0 [ 870.030899][T18607] ? kmem_cache_alloc_lru_noprof+0x153/0x5f0 [ 870.030935][T18607] ? sock_alloc_inode+0x2c/0x1a0 [ 870.030966][T18607] ? sock_alloc_inode+0x2c/0x1a0 [ 870.031004][T18607] ? __pfx_sock_alloc_inode+0x10/0x10 [ 870.031035][T18607] sock_alloc_inode+0x2c/0x1a0 [ 870.031067][T18607] ? __pfx_sock_alloc_inode+0x10/0x10 [ 870.031097][T18607] alloc_inode+0x6a/0x1b0 [ 870.031129][T18607] __sock_create+0x12d/0x9d0 [ 870.031173][T18607] __sys_socket+0xd6/0x1b0 [ 870.031211][T18607] __x64_sys_socket+0x7a/0x90 [ 870.031247][T18607] do_syscall_64+0x166/0x520 [ 870.031283][T18607] ? trace_irq_disable+0x3b/0x140 [ 870.031306][T18607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.031332][T18607] ? clear_bhb_loop+0x70/0xc0 [ 870.031362][T18607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.031386][T18607] RIP: 0033:0x7fd94ad9e159 [ 870.031409][T18607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.031431][T18607] RSP: 002b:00007fd94bc04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 870.031457][T18607] RAX: ffffffffffffffda RBX: 00007fd94b026090 RCX: 00007fd94ad9e159 [ 870.031476][T18607] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000010 [ 870.031492][T18607] RBP: 00007fd94ae35024 R08: 0000000000000000 R09: 0000000000000000 [ 870.031508][T18607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 870.031523][T18607] R13: 00007fd94b026128 R14: 00007fd94b026090 R15: 00007fd94b14fa48 [ 870.031561][T18607] [ 870.051043][T18607] memory: usage 0kB, limit 0kB, failcnt 110 [ 870.051145][T18607] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 870.051190][T18607] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 870.051227][T18607] Memory cgroup stats for /syz3/test: [ 870.051570][T18607] cache 0 [ 870.051599][T18607] rss 0 [ 870.051619][T18607] rss_huge 0 [ 870.051641][T18607] shmem 0 [ 870.051671][T18607] mapped_file 0 [ 870.051693][T18607] dirty 0 [ 870.057737][T18607] writeback 0 [ 870.057774][T18607] workingset_refault_anon 0 [ 870.057803][T18607] workingset_refault_file 0 [ 870.057822][T18607] swap 0 [ 870.057829][T18607] swapcached 0 [ 870.057837][T18607] pgpgin 163 [ 870.057846][T18607] pgpgout 163 [ 870.057854][T18607] pgfault 34 [ 870.057862][T18607] pgmajfault 0 [ 870.057871][T18607] inactive_anon 0 [ 870.057878][T18607] active_anon 0 [ 870.057886][T18607] inactive_file 0 [ 870.057894][T18607] active_file 0 [ 870.057903][T18607] unevictable 0 [ 870.069571][T18607] hierarchical_memory_limit 0 [ 870.069611][T18607] hierarchical_memsw_limit 9223372036854771712 [ 870.069641][T18607] total_cache 0 [ 870.069661][T18607] total_rss 0 [ 870.069683][T18607] total_rss_huge 0 [ 870.069711][T18607] total_shmem 0 [ 870.069732][T18607] total_mapped_file 0 [ 870.069754][T18607] total_dirty 0 [ 870.069774][T18607] total_writeback 0 [ 870.069801][T18607] total_workingset_refault_anon 0 [ 870.069823][T18607] total_workingset_refault_file 0 [ 870.069850][T18607] total_swap 0 [ 870.069871][T18607] total_swapcached 0 [ 870.069892][T18607] total_pgpgin 163 [ 870.069921][T18607] total_pgpgout 163 [ 870.069948][T18607] total_pgfault 34 [ 870.069975][T18607] total_pgmajfault 0 [ 870.070003][T18607] total_inactive_anon 0 [ 870.070030][T18607] total_active_anon 0 [ 870.070058][T18607] total_inactive_file 0 [ 870.070078][T18607] total_active_file 0 [ 870.070105][T18607] total_unevictable 0 [ 870.070126][T18607] anon_cost 0 [ 870.070146][T18607] file_cost 0 [ 870.070181][T18607] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.3988,pid=18601,uid=0 [ 870.070492][T18607] Memory cgroup out of memory: Killed process 18601 (syz.3.3988) total-vm:104432kB, anon-rss:1448kB, file-rss:23040kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 870.076383][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.076626][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.573664][T18607] socket: no more sockets [ 870.816974][T16786] IPVS: starting estimator thread 0... [ 870.831175][T18623] xt_TCPMSS: Only works on TCP SYN packets [ 870.911811][T18622] IPVS: using max 27 ests per chain, 64800 per kthread [ 870.999190][T18629] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3997'. [ 871.012852][ T31] kauditd_printk_skb: 64 callbacks suppressed [ 871.012889][ T31] audit: type=1326 audit(1788413118.872:7003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.4.3997" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a199e159 code=0x7ffc0000 [ 871.015545][ T31] audit: type=1326 audit(1788413118.872:7004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.4.3997" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a199e159 code=0x7ffc0000 [ 871.030281][ T31] audit: type=1326 audit(1788413118.882:7005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.4.3997" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff4a199e159 code=0x7ffc0000 [ 871.034428][ T31] audit: type=1326 audit(1788413118.882:7006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.4.3997" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a199e159 code=0x7ffc0000 [ 871.036592][ T31] audit: type=1326 audit(1788413118.882:7007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.4.3997" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a199e159 code=0x7ffc0000 [ 871.037944][ T31] audit: type=1326 audit(1788413118.882:7008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.4.3997" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7ff4a199e159 code=0x7ffc0000 [ 871.039714][ T31] audit: type=1326 audit(1788413118.882:7009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.4.3997" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a199e159 code=0x7ffc0000 [ 871.041812][ T31] audit: type=1326 audit(1788413118.882:7010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.4.3997" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a199e159 code=0x7ffc0000 [ 871.046800][ T31] audit: type=1326 audit(1788413118.882:7011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.4.3997" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff4a199f9c7 code=0x7ffc0000 [ 871.050796][ T31] audit: type=1326 audit(1788413118.882:7012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.4.3997" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff4a195e98e code=0x7ffc0000 [ 871.287938][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 871.412976][T18633] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3999'. [ 871.442150][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 871.447918][ T9] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 871.457204][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.469386][ T9] usb 4-1: config 0 descriptor?? [ 871.490565][ T9] as10x_usb: device has been detected [ 871.497605][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 871.541050][ T9] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 871.668680][ T9] as10x_usb: error during firmware upload part1 [ 871.670200][ T9] Registered device nBox DVB-T Dongle [ 871.764978][T18628] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 871.765411][T18628] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 871.765838][T18628] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 871.766236][T18628] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 871.801589][T18628] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 871.851975][ T9] usb 4-1: USB disconnect, device number 39 [ 872.005057][ T9] Unregistered device nBox DVB-T Dongle [ 872.014590][ T9] as10x_usb: device has been disconnected [ 872.239419][T18653] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4006'. [ 872.460900][T18661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4008'. [ 872.460947][T18661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4008'. [ 872.461182][T18661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4008'. [ 872.461204][T18661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4008'. [ 872.461411][T18661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4008'. [ 872.461433][T18661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4008'. [ 872.461630][T18661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4008'. [ 872.621150][T18661] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 873.166444][T18683] netlink: 'syz.3.4014': attribute type 3 has an invalid length. [ 873.536479][T18702] bond1: entered allmulticast mode [ 873.832871][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 873.833350][ T4938] Bluetooth: hci3: command 0x0c1a tx timeout [ 873.833389][ T4938] Bluetooth: hci4: command 0x0c1a tx timeout [ 873.833435][ T4938] Bluetooth: hci2: command 0x0c1a tx timeout [ 873.833464][ T4938] Bluetooth: hci5: command 0x0c1a tx timeout [ 873.883769][T18718] ipvlan0: entered promiscuous mode [ 873.890610][T18718] ipvlan0: left promiscuous mode [ 874.161881][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 874.203783][T18722] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.262771][T18725] netlink: 'syz.1.4028': attribute type 8 has an invalid length. [ 874.314384][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 874.326849][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.326909][ T9] usb 5-1: Product: syz [ 874.326927][ T9] usb 5-1: Manufacturer: syz [ 874.326943][ T9] usb 5-1: SerialNumber: syz [ 874.548782][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 874.548872][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 874.548934][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 874.567616][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 874.630115][ T9] usb 5-1: USB disconnect, device number 20 [ 874.640764][T18733] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 874.982918][ T191] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 875.090870][T16786] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.111962][ T191] usb 2-1: device descriptor read/64, error -71 [ 875.265456][T16786] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.326097][T18749] FAULT_INJECTION: forcing a failure. [ 875.326097][T18749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 875.326163][T18749] CPU: 0 UID: 0 PID: 18749 Comm: syz.4.4037 Tainted: G L syzkaller #0 PREEMPT(full) [ 875.326193][T18749] Tainted: [L]=SOFTLOCKUP [ 875.326243][T18749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 875.326295][T18749] Call Trace: [ 875.326323][T18749] [ 875.326346][T18749] dump_stack_lvl+0xe8/0x150 [ 875.326448][T18749] should_fail_ex+0x410/0x560 [ 875.326552][T18749] _copy_from_iter+0x1d3/0x1660 [ 875.326653][T18749] ? __alloc_skb+0x27a/0x7a0 [ 875.326743][T18749] ? __alloc_skb+0x27a/0x7a0 [ 875.326834][T18749] ? __alloc_skb+0x27a/0x7a0 [ 875.326923][T18749] ? __pfx__copy_from_iter+0x10/0x10 [ 875.326990][T18749] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 875.327072][T18749] ? __alloc_skb+0x27a/0x7a0 [ 875.327158][T18749] ? __alloc_skb+0x27a/0x7a0 [ 875.327258][T18749] ? netlink_sendmsg+0x650/0xb40 [ 875.327331][T18749] ? skb_put+0x112/0x210 [ 875.327404][T18749] netlink_sendmsg+0x6c0/0xb40 [ 875.327494][T18749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 875.327589][T18749] ? apparmor_socket_sendmsg+0x98/0x360 [ 875.327687][T18749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 875.327779][T18749] sock_sendmsg_nosec+0x13a/0x180 [ 875.327867][T18749] ____sys_sendmsg+0x54e/0x850 [ 875.327941][T18749] ? __pfx_____sys_sendmsg+0x10/0x10 [ 875.328031][T18749] ? import_iovec+0x73/0xa0 [ 875.328102][T18749] ___sys_sendmsg+0x2a5/0x360 [ 875.328166][T18749] ? __lock_acquire+0x6df/0x2e50 [ 875.328230][T18749] ? __pfx____sys_sendmsg+0x10/0x10 [ 875.328289][T18749] ? __lock_acquire+0x6df/0x2e50 [ 875.328354][T18749] ? kstrtouint+0x6e/0xe0 [ 875.328530][T18749] __sys_sendmmsg+0x273/0x4d0 [ 875.328609][T18749] ? __pfx___sys_sendmmsg+0x10/0x10 [ 875.328702][T18749] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 875.328832][T18749] ? ksys_write+0x242/0x270 [ 875.328922][T18749] ? __pfx_ksys_write+0x10/0x10 [ 875.329027][T18749] __x64_sys_sendmmsg+0xa0/0xc0 [ 875.329101][T18749] do_syscall_64+0x166/0x520 [ 875.329188][T18749] ? trace_irq_disable+0x3b/0x140 [ 875.329247][T18749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.329305][T18749] ? clear_bhb_loop+0x70/0xc0 [ 875.329369][T18749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.329426][T18749] RIP: 0033:0x7ff4a199e159 [ 875.329478][T18749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.329526][T18749] RSP: 002b:00007ff4a27ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 875.329585][T18749] RAX: ffffffffffffffda RBX: 00007ff4a1c25fa0 RCX: 00007ff4a199e159 [ 875.329633][T18749] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 875.329666][T18749] RBP: 00007ff4a27ec090 R08: 0000000000000000 R09: 0000000000000000 [ 875.329704][T18749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.329735][T18749] R13: 00007ff4a1c26038 R14: 00007ff4a1c25fa0 R15: 00007ff4a1d4fa48 [ 875.329816][T18749] [ 875.351999][ T191] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 875.492462][ T191] usb 2-1: device descriptor read/64, error -71 [ 875.603341][ T191] usb usb2-port1: attempt power cycle [ 875.754793][T16786] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.882024][T16786] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.942547][ T191] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 875.963564][ T191] usb 2-1: device descriptor read/8, error -71 [ 876.212143][ T191] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 876.234660][ T191] usb 2-1: device descriptor read/8, error -71 [ 876.343208][ T191] usb usb2-port1: unable to enumerate USB device [ 876.377019][T16786] bridge_slave_1: left allmulticast mode [ 876.377066][T16786] bridge_slave_1: left promiscuous mode [ 876.383523][T16786] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.412705][T16786] bridge_slave_0: left allmulticast mode [ 876.418735][T16786] bridge_slave_0: left promiscuous mode [ 876.420324][T16786] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.909778][T18719] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 876.942044][T18719] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 876.948917][T18719] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 876.966467][T18719] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 876.973917][T18719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 877.126278][T16786] bond4 (unregistering): (slave geneve2): Releasing active interface [ 877.556179][T16786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 877.606660][T16786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 877.626742][T16786] bond0 (unregistering): Released all slaves [ 877.661560][T16786] bond1 (unregistering): Released all slaves [ 877.711359][T16786] bond2 (unregistering): Released all slaves [ 877.778038][T16786] bond3 (unregistering): Released all slaves [ 877.839059][T16786] bond4 (unregistering): Released all slaves [ 877.967404][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 878.390712][T16786] hsr_slave_0: left promiscuous mode [ 878.400515][T16786] hsr_slave_1: left promiscuous mode [ 878.406168][T12354] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 878.414545][T16786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 878.414608][T16786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.439309][T16786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 878.439364][T16786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.447029][ T5714] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 878.508137][T16786] veth1_macvtap: left promiscuous mode [ 878.508203][T16786] veth0_macvtap: left promiscuous mode [ 878.508487][T16786] veth1_vlan: left promiscuous mode [ 878.508666][T16786] veth0_vlan: left promiscuous mode [ 878.552606][T12354] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 878.563174][T12354] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 878.563223][T12354] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 878.563289][T12354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.612067][ T5714] usb 5-1: Invalid ep0 maxpacket: 16 [ 878.756021][ T5714] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 878.818089][T12354] usb 2-1: GET_CAPABILITIES returned 0 [ 878.818159][T12354] usbtmc 2-1:16.0: can't read capabilities [ 878.912627][ T5714] usb 5-1: Invalid ep0 maxpacket: 16 [ 878.918361][ T5714] usb usb5-port1: attempt power cycle [ 879.112104][ T5625] Bluetooth: hci1: command tx timeout [ 879.249666][T16786] team0 (unregistering): Port device 72žÿ removed [ 879.272741][ T5714] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 879.297026][ T5714] usb 5-1: Invalid ep0 maxpacket: 16 [ 879.324176][T16786] team0 (unregistering): Port device team_slave_0 removed [ 879.432274][ T5714] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 879.452538][ T5714] usb 5-1: Invalid ep0 maxpacket: 16 [ 879.458259][ T5714] usb usb5-port1: unable to enumerate USB device [ 879.531925][T18840] FAULT_INJECTION: forcing a failure. [ 879.531925][T18840] name failslab, interval 1, probability 0, space 0, times 0 [ 879.532149][T18840] CPU: 0 UID: 0 PID: 18840 Comm: syz.2.4054 Tainted: G L syzkaller #0 PREEMPT(full) [ 879.532238][T18840] Tainted: [L]=SOFTLOCKUP [ 879.532266][T18840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 879.532299][T18840] Call Trace: [ 879.532321][T18840] [ 879.532349][T18840] dump_stack_lvl+0xe8/0x150 [ 879.532431][T18840] should_fail_ex+0x410/0x560 [ 879.532546][T18840] should_failslab+0xa8/0x100 [ 879.532618][T18840] __kmalloc_noprof+0xfe/0x720 [ 879.532709][T18840] ? trace_kmalloc+0x2a/0xf0 [ 879.532800][T18840] ? ethnl_default_doit+0x166/0x15c0 [ 879.532879][T18840] ? ethnl_default_doit+0x166/0x15c0 [ 879.532961][T18840] ? __kmalloc_noprof+0x38c/0x720 [ 879.533052][T18840] ethnl_default_doit+0x166/0x15c0 [ 879.533149][T18840] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 879.533257][T18840] genl_family_rcv_msg_doit+0x233/0x340 [ 879.533357][T18840] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 879.533475][T18840] ? __dev_queue_xmit+0x29b/0x3820 [ 879.533682][T18840] genl_rcv_msg+0x614/0x7a0 [ 879.533782][T18840] ? __pfx_genl_rcv_msg+0x10/0x10 [ 879.533871][T18840] ? __pfx_ethnl_default_doit+0x10/0x10 [ 879.533952][T18840] ? __pfx_ref_tracker_free+0x10/0x10 [ 879.534034][T18840] netlink_rcv_skb+0x226/0x4a0 [ 879.534105][T18840] ? __pfx_genl_rcv_msg+0x10/0x10 [ 879.534197][T18840] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 879.534306][T18840] ? down_read+0x2be/0x330 [ 879.534374][T18840] genl_rcv+0x28/0x40 [ 879.534441][T18840] netlink_unicast+0x7bd/0x940 [ 879.534532][T18840] netlink_sendmsg+0x813/0xb40 [ 879.534623][T18840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 879.534728][T18840] ? apparmor_socket_sendmsg+0x98/0x360 [ 879.534820][T18840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 879.534889][T18840] sock_sendmsg_nosec+0x13a/0x180 [ 879.534999][T18840] ____sys_sendmsg+0x54e/0x850 [ 879.535085][T18840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 879.535167][T18840] ? import_iovec+0x73/0xa0 [ 879.535238][T18840] ___sys_sendmsg+0x2a5/0x360 [ 879.535298][T18840] ? __lock_acquire+0x6df/0x2e50 [ 879.535373][T18840] ? __pfx____sys_sendmsg+0x10/0x10 [ 879.535516][T18840] ? __fget_files+0x2a/0x420 [ 879.535592][T18840] ? __fget_files+0x3a2/0x420 [ 879.535728][T18840] __x64_sys_sendmsg+0x1b1/0x290 [ 879.535800][T18840] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 879.535928][T18840] do_syscall_64+0x166/0x520 [ 879.536017][T18840] ? trace_irq_disable+0x3b/0x140 [ 879.536070][T18840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.536135][T18840] ? clear_bhb_loop+0x70/0xc0 [ 879.536208][T18840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.536270][T18840] RIP: 0033:0x7f783399e159 [ 879.536337][T18840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.536404][T18840] RSP: 002b:00007f7834899028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 879.536481][T18840] RAX: ffffffffffffffda RBX: 00007f7833c25fa0 RCX: 00007f783399e159 [ 879.536525][T18840] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 879.536567][T18840] RBP: 00007f7834899090 R08: 0000000000000000 R09: 0000000000000000 [ 879.536607][T18840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.536647][T18840] R13: 00007f7833c26038 R14: 00007f7833c25fa0 R15: 00007f7833d4fa48 [ 879.536748][T18840] [ 880.106695][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 880.973561][T18855] syzkaller0: entered promiscuous mode [ 880.973618][T18855] syzkaller0: entered allmulticast mode [ 881.009933][T16786] IPVS: stop unused estimator thread 0... [ 881.192259][ T5625] Bluetooth: hci1: command tx timeout [ 881.538008][T18786] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.546044][T18786] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.546263][T18786] bridge_slave_0: entered allmulticast mode [ 881.567822][T18786] bridge_slave_0: entered promiscuous mode [ 881.617284][T18786] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.617455][T18786] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.617654][T18786] bridge_slave_1: entered allmulticast mode [ 881.619767][T18786] bridge_slave_1: entered promiscuous mode [ 882.055495][T18786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.085302][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 882.106325][T18786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.360349][T18786] team0: Port device team_slave_0 added [ 882.409717][T18786] team0: Port device team_slave_1 added [ 882.503190][T18786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.503258][T18786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.503291][T18786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.529068][T18786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.529122][T18786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.529206][T18786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.630698][T12361] usb 2-1: USB disconnect, device number 121 [ 882.651947][T18885] __nla_validate_parse: 68 callbacks suppressed [ 882.652001][T18885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4060'. [ 882.845984][T18786] hsr_slave_0: entered promiscuous mode [ 882.859079][T18786] hsr_slave_1: entered promiscuous mode [ 883.070365][T18893] fuse: Bad value for 'fd' [ 883.272295][ T5625] Bluetooth: hci1: command tx timeout [ 883.467062][T18911] netlink: 'syz.4.4062': attribute type 13 has an invalid length. [ 883.740427][T18903] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 883.783988][T18903] syzkaller0: entered promiscuous mode [ 883.793615][T18903] syzkaller0: entered allmulticast mode [ 883.886890][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4 [ 883.929607][T18918] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4064'. [ 884.174304][T18923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4065'. [ 884.231427][T18927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4067'. [ 884.288594][T12361] bridge0: entered promiscuous mode [ 884.326210][T18927] tipc: Cannot configure node identity twice [ 884.601959][T12361] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 884.713297][T18944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4072'. [ 884.765259][T12361] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 884.781574][T12361] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 884.781647][T12361] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 884.782348][T12361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.949225][T18786] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 884.983108][T18786] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 884.999349][T18786] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 885.039704][T18786] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 885.052654][T18786] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 885.071036][T12361] usb 2-1: GET_CAPABILITIES returned 0 [ 885.071108][T12361] usbtmc 2-1:16.0: can't read capabilities [ 885.098725][T18786] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 885.131390][T18786] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 885.179589][T18786] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 885.226871][T18952] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4073'. [ 885.226995][T18952] xfrm0: Caught tx_queue_len zero misconfig [ 885.306373][T18952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 885.352508][ T5625] Bluetooth: hci1: command tx timeout [ 885.572970][T18949] loop8: detected capacity change from 0 to 7 [ 885.590616][T18949] Dev loop8: unable to read RDB block 7 [ 885.610501][T18949] loop8: unable to read partition table [ 885.618187][T18949] loop8: partition table beyond EOD, truncated [ 885.618247][T18949] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 885.910961][T18786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.990398][T18786] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.023429][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.023782][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.064331][T16782] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.064563][T16782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.318584][T18786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 886.477178][T18786] veth0_vlan: entered promiscuous mode [ 886.501671][T18786] veth1_vlan: entered promiscuous mode [ 886.691093][T18786] veth0_macvtap: entered promiscuous mode [ 886.710034][T18786] veth1_macvtap: entered promiscuous mode [ 886.781197][T18786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 886.973871][ T5714] usb 2-1: USB disconnect, device number 122 [ 887.076243][T18786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 887.232010][T16783] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.262941][ T269] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.264114][ T269] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.313178][T16783] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.434422][T12350] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 887.594848][T12350] usb 5-1: Using ep0 maxpacket: 8 [ 887.600043][T12350] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 887.619192][T12350] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 887.619305][T12350] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 887.619352][T12350] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 887.619384][T12350] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 887.619415][T12350] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 887.619465][T12350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.978546][T16782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.978642][T16782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.210477][T16782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.210529][T16782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.539309][T18998] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4044'. [ 888.591930][T18997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4082'. [ 889.024981][T19009] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4083'. [ 889.318575][T19013] FAULT_INJECTION: forcing a failure. [ 889.318575][T19013] name failslab, interval 1, probability 0, space 0, times 0 [ 889.335962][T19013] CPU: 0 UID: 0 PID: 19013 Comm: syz.2.4086 Tainted: G L syzkaller #0 PREEMPT(full) [ 889.336011][T19013] Tainted: [L]=SOFTLOCKUP [ 889.336029][T19013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 889.336043][T19013] Call Trace: [ 889.336061][T19013] [ 889.336080][T19013] dump_stack_lvl+0xe8/0x150 [ 889.336131][T19013] should_fail_ex+0x410/0x560 [ 889.336174][T19013] should_failslab+0xa8/0x100 [ 889.336203][T19013] ? xfrm_state_alloc+0x24/0x2f0 [ 889.336234][T19013] kmem_cache_alloc_noprof+0xa1/0x600 [ 889.336272][T19013] ? xfrm_state_alloc+0x24/0x2f0 [ 889.336304][T19013] xfrm_state_alloc+0x24/0x2f0 [ 889.336330][T19013] ipcomp6_init_state+0x2b4/0x920 [ 889.336356][T19013] ? __xfrm_init_state+0x745/0x1320 [ 889.336395][T19013] __xfrm_init_state+0x9dd/0x1320 [ 889.336460][T19013] ? __xfrm_init_state+0x745/0x1320 [ 889.336497][T19013] xfrm_init_state+0x1e/0xa0 [ 889.336526][T19013] pfkey_add+0x1d71/0x2e50 [ 889.336575][T19013] ? __pfx_pfkey_add+0x10/0x10 [ 889.336615][T19013] pfkey_sendmsg+0xceb/0x11d0 [ 889.336656][T19013] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 889.336742][T19013] ? security_socket_sendmsg+0x66/0x280 [ 889.336778][T19013] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 889.336800][T19013] sock_sendmsg_nosec+0x13a/0x180 [ 889.336834][T19013] ____sys_sendmsg+0x54e/0x850 [ 889.336863][T19013] ? __pfx_____sys_sendmsg+0x10/0x10 [ 889.336897][T19013] ? import_iovec+0x73/0xa0 [ 889.336924][T19013] ___sys_sendmsg+0x2a5/0x360 [ 889.336947][T19013] ? __lock_acquire+0x6df/0x2e50 [ 889.336974][T19013] ? __pfx____sys_sendmsg+0x10/0x10 [ 889.337076][T19013] ? __fget_files+0x2a/0x420 [ 889.337105][T19013] ? __fget_files+0x3a2/0x420 [ 889.337154][T19013] __x64_sys_sendmsg+0x1b1/0x290 [ 889.337182][T19013] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 889.337265][T19013] do_syscall_64+0x166/0x520 [ 889.337300][T19013] ? trace_irq_disable+0x3b/0x140 [ 889.337359][T19013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.337383][T19013] ? clear_bhb_loop+0x70/0xc0 [ 889.337412][T19013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.337437][T19013] RIP: 0033:0x7f783399e159 [ 889.337459][T19013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 889.337480][T19013] RSP: 002b:00007f7834899028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 889.337507][T19013] RAX: ffffffffffffffda RBX: 00007f7833c25fa0 RCX: 00007f783399e159 [ 889.337522][T19013] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 889.337537][T19013] RBP: 00007f7834899090 R08: 0000000000000000 R09: 0000000000000000 [ 889.337552][T19013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 889.337566][T19013] R13: 00007f7833c26038 R14: 00007f7833c25fa0 R15: 00007f7833d4fa48 [ 889.337601][T19013] [ 890.221966][T12361] usb 5-1: USB disconnect, device number 25 [ 890.718254][T19030] program syz.5.4091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 890.751906][T12350] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 890.917119][T12350] usb 5-1: unable to get BOS descriptor or descriptor too short [ 890.920847][T12350] usb 5-1: not running at top speed; connect to a high speed hub [ 890.920992][T12350] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 890.930624][T12350] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 890.930720][T12350] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 890.930781][T12350] usb 5-1: config 4 has no interface number 0 [ 891.028072][T12350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.028158][T12350] usb 5-1: Product: syz [ 891.028186][T12350] usb 5-1: Manufacturer: syz [ 891.028232][T12350] usb 5-1: SerialNumber: syz [ 891.143443][T19036] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4093'. [ 891.336768][T12350] uvcvideo 5-1:4.147: Found multiple Units with ID 6 [ 891.336875][T12350] uvcvideo 5-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 891.337029][T12350] uvcvideo 5-1:4.147: No valid video chain found. [ 891.358432][T12350] usb 5-1: USB disconnect, device number 26 [ 891.501816][T12343] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 891.665130][T12343] usb 6-1: Using ep0 maxpacket: 16 [ 891.673308][T12343] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 891.690889][T12343] usb 6-1: config 4 has an invalid interface number: 9 but max is 0 [ 891.690938][T12343] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 891.690981][T12343] usb 6-1: config 4 has no interface number 0 [ 891.691031][T12343] usb 6-1: config 4 interface 9 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 891.691059][T12343] usb 6-1: config 4 interface 9 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 891.691091][T12343] usb 6-1: config 4 interface 9 has no altsetting 0 [ 891.786984][T12343] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.797446][T12343] usb 6-1: Product: syz [ 891.797500][T12343] usb 6-1: Manufacturer: syz [ 891.797522][T12343] usb 6-1: SerialNumber: syz [ 891.887387][T12343] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 892.131626][ T12] usb 6-1: Failed to submit usb control message: -71 [ 892.133848][T12350] usb 6-1: USB disconnect, device number 2 [ 892.181031][ T12] usb 6-1: unable to send the bmi data to the device: -71 [ 892.201855][ T12] usb 6-1: unable to get target info from device [ 892.215254][ T12] usb 6-1: could not get target info (-71) [ 892.221956][ T12] usb 6-1: could not probe fw (-71) [ 892.420547][T19049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4097'. [ 892.420611][T19049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4097'. [ 892.451057][T19049] sctp: [Deprecated]: syz.2.4097 (pid 19049) Use of int in max_burst socket option. [ 892.451057][T19049] Use struct sctp_assoc_value instead [ 892.877968][T19058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4098'. [ 893.115913][T12361] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 893.292983][T12361] usb 6-1: Using ep0 maxpacket: 8 [ 893.300698][T12361] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 893.319093][T12361] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 893.319193][T12361] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 893.319220][T12361] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 893.319342][T12361] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 893.319402][T12361] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 893.319467][T12361] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.583698][T19067] tipc: Started in network mode [ 893.583760][T19067] tipc: Node identity d2f886a6ef1a, cluster identity 4711 [ 893.584045][T19067] tipc: Enabled bearer , priority 1 [ 894.084371][T19060] tipc: Resetting bearer [ 894.225625][T19060] tipc: Disabling bearer [ 894.741907][ T9] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 894.840663][T19091] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4109'. [ 894.841442][T19091] netlink: 'syz.2.4109': attribute type 1 has an invalid length. [ 894.903163][ T9] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 894.926112][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.939551][ T9] usb 2-1: Product: syz [ 894.939578][ T9] usb 2-1: Manufacturer: syz [ 894.939595][ T9] usb 2-1: SerialNumber: syz [ 894.969275][ T9] usb 2-1: config 0 descriptor?? [ 894.976625][T19091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4109'. [ 895.002726][ T9] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 895.033241][T19095] bond3: (slave geneve3): making interface the new active one [ 895.055589][T19095] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 895.083499][T19091] 8021q: adding VLAN 0 to HW filter on device bond3 [ 895.113665][T16782] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 895.113803][T16782] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 895.113879][T16782] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 895.114019][T16782] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 895.460814][T19103] syzkaller1: entered promiscuous mode [ 895.460870][T19103] syzkaller1: entered allmulticast mode [ 895.489897][T19107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4108'. [ 895.709028][T17909] cxacru 3-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 895.791472][T19115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4113'. [ 896.028609][T12340] usb 6-1: USB disconnect, device number 3 [ 897.144792][T12340] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 897.314324][T12340] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 897.337594][T12340] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 897.337663][T12340] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 897.338033][T12340] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 897.397970][T12340] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.398057][T12340] usb 6-1: Product: syz [ 897.398077][T12340] usb 6-1: Manufacturer: syz [ 897.398094][T12340] usb 6-1: SerialNumber: syz [ 897.466943][T12340] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 897.467032][T12340] cdc_ncm 6-1:1.0: bind() failure [ 898.071557][T12354] usb 6-1: USB disconnect, device number 4 [ 898.147490][ T9] gspca_m5602: Failed to find a sensor [ 898.147529][ T9] ALi m5602 2-1:0.0: ALi m5602 webcam failed [ 898.210371][ T9] usb 2-1: USB disconnect, device number 123 [ 898.381935][T12350] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 898.543444][T12350] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 898.562639][T12350] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 898.562717][T12350] usb 3-1: config 0 has no interface number 0 [ 898.562824][T12350] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 898.562884][T12350] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 898.562934][T12350] usb 3-1: config 0 interface 255 has no altsetting 0 [ 898.562980][T12350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.651181][T12350] usb 3-1: config 0 descriptor?? [ 898.668812][T12350] cp210x 3-1:0.255: cp210x converter detected [ 899.116315][T19179] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4126'. [ 899.167627][T12350] usb 3-1: cp210x converter now attached to ttyUSB0 [ 899.379586][T19165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 899.475410][ T10] usb 3-1: USB disconnect, device number 101 [ 899.529351][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 899.574435][ T10] cp210x 3-1:0.255: device disconnected [ 900.001989][T12350] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 900.154226][T12350] usb 6-1: Using ep0 maxpacket: 8 [ 900.161497][T12350] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 900.179028][T12350] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 900.179116][T12350] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 900.179160][T12350] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 900.179191][T12350] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 900.179221][T12350] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 900.179271][T12350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.412664][T19201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4130'. [ 900.856669][T19210] kvm: emulating exchange as write [ 900.948722][T19213] openvswitch: netlink: Actions may not be safe on all matching packets [ 901.045414][T19213] [ 901.047837][T19213] ====================================================== [ 901.054947][T19213] WARNING: possible circular locking dependency detected [ 901.062171][T19213] syzkaller #0 Tainted: G L [ 901.068212][T19213] ------------------------------------------------------ [ 901.075448][T19213] syz.1.4133/19213 is trying to acquire lock: [ 901.081631][T19213] ffffffff8ee8f980 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0xbc/0x720 [ 901.090728][T19213] [ 901.090728][T19213] but task is already holding lock: [ 901.098557][T19213] ffffffff8ee69aa0 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 901.108853][T19213] [ 901.108853][T19213] which lock already depends on the new lock. [ 901.108853][T19213] [ 901.121411][T19213] [ 901.121411][T19213] the existing dependency chain (in reverse order) is: [ 901.131963][T19213] [ 901.131963][T19213] -> #3 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 901.140147][T19213] __mutex_lock+0x19d/0x1550 [ 901.145771][T19213] pcpu_alloc_noprof+0x231/0x1900 [ 901.152475][T19213] percpu_ref_init+0x42/0x350 [ 901.157981][T19213] blkg_alloc+0xee/0x8f0 [ 901.162934][T19213] blkg_conf_prep+0x60b/0xd80 [ 901.168296][T19213] tg_set_conf+0x20b/0x4e0 [ 901.173545][T19213] cgroup_file_write+0x331/0x8f0 [ 901.179330][T19213] kernfs_fop_write_iter+0x3a4/0x540 [ 901.185359][T19213] vfs_write+0x612/0xba0 [ 901.190635][T19213] ksys_write+0x150/0x270 [ 901.195547][T19213] do_syscall_64+0x166/0x520 [ 901.200799][T19213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.207260][T19213] [ 901.207260][T19213] -> #2 (&q->blkcg_mutex){+.+.}-{4:4}: [ 901.215445][T19213] __mutex_lock+0x19d/0x1550 [ 901.220780][T19213] blkcg_activate_policy+0x1cb/0x8e0 [ 901.226624][T19213] blk_throtl_init+0x2f7/0x420 [ 901.232066][T19213] tg_set_conf+0x1db/0x4e0 [ 901.237041][T19213] cgroup_file_write+0x331/0x8f0 [ 901.242534][T19213] kernfs_fop_write_iter+0x3a4/0x540 [ 901.248372][T19213] vfs_write+0x612/0xba0 [ 901.253263][T19213] ksys_write+0x150/0x270 [ 901.258192][T19213] do_syscall_64+0x166/0x520 [ 901.263717][T19213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.271270][T19213] [ 901.271270][T19213] -> #1 (&q->q_usage_counter(io)#17){++++}-{0:0}: [ 901.281519][T19213] blk_alloc_queue+0x544/0x690 [ 901.288477][T19213] __blk_mq_alloc_disk+0x194/0x390 [ 901.295405][T19213] loop_add+0x480/0xb40 [ 901.300478][T19213] loop_init+0xd7/0x160 [ 901.305287][T19213] do_one_initcall+0x250/0x870 [ 901.311193][T19213] do_initcall_level+0x10a/0x1a0 [ 901.316903][T19213] do_initcalls+0x59/0xa0 [ 901.322813][T19213] kernel_init_freeable+0x29d/0x3e0 [ 901.329659][T19213] kernel_init+0x22/0x1d0 [ 901.335358][T19213] ret_from_fork+0x514/0xb70 [ 901.341518][T19213] ret_from_fork_asm+0x1a/0x30 [ 901.347425][T19213] [ 901.347425][T19213] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 901.354695][T19213] __lock_acquire+0x15ff/0x2e50 [ 901.361868][T19213] lock_acquire+0x115/0x350 [ 901.368035][T19213] fs_reclaim_acquire+0x71/0x100 [ 901.375755][T19213] __kmalloc_noprof+0xbc/0x720 [ 901.382132][T19213] alloc_pages_bulk_mempolicy_noprof+0xaef/0x1690 [ 901.389557][T19213] __vmalloc_node_range_noprof+0xa0a/0x1540 [ 901.397377][T19213] __vmalloc_noprof+0xd2/0x120 [ 901.402889][T19213] pcpu_create_chunk+0x1cb/0xc30 [ 901.408438][T19213] pcpu_alloc_noprof+0x73e/0x1900 [ 901.415840][T19213] bpf_map_alloc_percpu+0x65/0x180 [ 901.423642][T19213] prealloc_init+0x214/0x650 [ 901.430671][T19213] htab_map_alloc+0x6a0/0xc90 [ 901.436347][T19213] map_create+0xf3d/0x1b70 [ 901.443022][T19213] __sys_bpf+0xaea/0xd90 [ 901.450330][T19213] __x64_sys_bpf+0xba/0xd0 [ 901.456809][T19213] do_syscall_64+0x166/0x520 [ 901.462520][T19213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.469667][T19213] [ 901.469667][T19213] other info that might help us debug this: [ 901.469667][T19213] [ 901.480728][T19213] Chain exists of: [ 901.480728][T19213] fs_reclaim --> &q->blkcg_mutex --> pcpu_alloc_mutex [ 901.480728][T19213] [ 901.494392][T19213] Possible unsafe locking scenario: [ 901.494392][T19213] [ 901.501966][T19213] CPU0 CPU1 [ 901.507946][T19213] ---- ---- [ 901.513473][T19213] lock(pcpu_alloc_mutex); [ 901.519946][T19213] lock(&q->blkcg_mutex); [ 901.528152][T19213] lock(pcpu_alloc_mutex); [ 901.535514][T19213] lock(fs_reclaim); [ 901.540100][T19213] [ 901.540100][T19213] *** DEADLOCK *** [ 901.540100][T19213] [ 901.548888][T19213] locks held by syz.1.4133/19213: 1, last CPU#1: [ 901.556167][T19213] #0: ffffffff8ee69aa0 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 901.567965][T19213] [ 901.567965][T19213] stack backtrace: [ 901.575686][T19213] CPU: 1 UID: 0 PID: 19213 Comm: syz.1.4133 Tainted: G L syzkaller #0 PREEMPT(full) [ 901.588074][T19213] Tainted: [L]=SOFTLOCKUP [ 901.593655][T19213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 901.606304][T19213] Call Trace: [ 901.610337][T19213] [ 901.613818][T19213] dump_stack_lvl+0xe8/0x150 [ 901.619827][T19213] print_circular_bug+0x2e2/0x300 [ 901.626842][T19213] check_noncircular+0x12f/0x150 [ 901.633068][T19213] __lock_acquire+0x15ff/0x2e50 [ 901.639028][T19213] ? get_page_from_freelist+0x2209/0x2280 [ 901.645966][T19213] ? kasan_save_track+0x4f/0x80 [ 901.650870][T19213] lock_acquire+0x115/0x350 [ 901.655466][T19213] ? __kmalloc_noprof+0xbc/0x720 [ 901.660475][T19213] ? __lock_acquire+0x6df/0x2e50 [ 901.665448][T19213] ? alloc_pages_bulk_mempolicy_noprof+0xaef/0x1690 [ 901.672186][T19213] fs_reclaim_acquire+0x71/0x100 [ 901.677188][T19213] ? __kmalloc_noprof+0xbc/0x720 [ 901.682176][T19213] __kmalloc_noprof+0xbc/0x720 [ 901.687426][T19213] ? alloc_pages_bulk_mempolicy_noprof+0xaef/0x1690 [ 901.694183][T19213] ? alloc_pages_bulk_mempolicy_noprof+0xaef/0x1690 [ 901.700838][T19213] alloc_pages_bulk_mempolicy_noprof+0xaef/0x1690 [ 901.708580][T19213] ? __split_page_owner+0x2c/0x330 [ 901.714546][T19213] ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10 [ 901.723074][T19213] ? __split_page_owner+0x2fc/0x330 [ 901.729922][T19213] ? __split_page_owner+0x2c/0x330 [ 901.735804][T19213] __vmalloc_node_range_noprof+0xa0a/0x1540 [ 901.742728][T19213] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 901.749890][T19213] ? trace_kmalloc+0x2a/0xf0 [ 901.754855][T19213] ? __kmalloc_noprof+0x38c/0x720 [ 901.760893][T19213] ? pcpu_create_chunk+0x1cb/0xc30 [ 901.766369][T19213] __vmalloc_noprof+0xd2/0x120 [ 901.772256][T19213] ? pcpu_create_chunk+0x1cb/0xc30 [ 901.777505][T19213] pcpu_create_chunk+0x1cb/0xc30 [ 901.782838][T19213] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 901.790377][T19213] pcpu_alloc_noprof+0x73e/0x1900 [ 901.796100][T19213] bpf_map_alloc_percpu+0x65/0x180 [ 901.804082][T19213] prealloc_init+0x214/0x650 [ 901.811543][T19213] htab_map_alloc+0x6a0/0xc90 [ 901.818728][T19213] map_create+0xf3d/0x1b70 [ 901.823720][T19213] ? __pfx_map_create+0x10/0x10 [ 901.829323][T19213] ? bpf_lsm_bpf+0x9/0x20 [ 901.833738][T19213] ? security_bpf+0x7e/0x2d0 [ 901.838618][T19213] __sys_bpf+0xaea/0xd90 [ 901.842932][T19213] ? __pfx___sys_bpf+0x10/0x10 [ 901.848006][T19213] ? do_futex+0x3e7/0x4e0 [ 901.852446][T19213] ? __pfx___se_sys_futex+0x10/0x10 [ 901.858242][T19213] ? rcu_is_watching+0x16/0xb0 [ 901.864049][T19213] __x64_sys_bpf+0xba/0xd0 [ 901.870161][T19213] do_syscall_64+0x166/0x520 [ 901.874970][T19213] ? trace_irq_disable+0x3b/0x140 [ 901.880070][T19213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.886277][T19213] ? clear_bhb_loop+0x70/0xc0 [ 901.891474][T19213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.899008][T19213] RIP: 0033:0x7fde45b9e159 [ 901.904074][T19213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.926329][T19213] RSP: 002b:00007fde469a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 901.935569][T19213] RAX: ffffffffffffffda RBX: 00007fde45e25fa0 RCX: 00007fde45b9e159 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 901.944677][T19213] RDX: 0000000000000050 RSI: 0000200000000940 RDI: 1101000000000000 [ 901.955568][T19213] RBP: 00007fde45c35024 R08: 0000000000000000 R09: 0000000000000000 [ 901.965361][T19213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 901.973998][T19213] R13: 00007fde45e26038 R14: 00007fde45e25fa0 R15: 00007fde45f4fa48 [ 901.983366][T19213] [ 903.060269][ T9593] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.137214][ T9] usb 6-1: USB disconnect, device number 5 [ 903.217511][ T9593] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.299036][ T9593] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.369883][ T9593] vlan2 (unregistering): left allmulticast mode [ 903.369958][ T9593] vlan2 (unregistering): left promiscuous mode [ 903.370040][ T9593] bridge0: port 3(vlan2) entered disabled state [ 903.405561][ T9593] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.556514][ T9593] bridge_slave_1: left allmulticast mode [ 903.556564][ T9593] bridge_slave_1: left promiscuous mode [ 903.557055][ T9593] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.576892][ T9593] bridge_slave_0: left allmulticast mode [ 903.576941][ T9593] bridge_slave_0: left promiscuous mode [ 903.577501][ T9593] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.604077][ T9593] pim6reg9: left allmulticast mode [ 903.829740][ T9593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 903.841554][ T9593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 903.855309][ T9593] bond0 (unregistering): Released all slaves [ 903.950479][ T9593] tipc: Left network mode [ 903.966330][ T9593] IPVS: stopping master sync thread 16218 ... [ 904.132612][ T9593] hsr_slave_0: left promiscuous mode [ 904.138130][ T9593] hsr_slave_1: left promiscuous mode [ 904.144685][ T9593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 904.144743][ T9593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 904.160050][ T9593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 904.160095][ T9593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 904.177180][ T9593] veth1_macvtap: left promiscuous mode [ 904.183017][ T9593] veth0_macvtap: left promiscuous mode [ 904.188708][ T9593] veth1_vlan: left promiscuous mode [ 904.194184][ T9593] veth0_vlan: left promiscuous mode [ 904.370989][ T9593] team0 (unregistering): Port device team_slave_1 removed [ 904.380731][ T9593] team0 (unregistering): Port device team_slave_0 removed [ 904.428028][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5 [ 904.670351][ T9593] IPVS: stop unused estimator thread 0... [ 904.789558][ T9593] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.849519][ T9593] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.880679][ T5283] 8021q: adding VLAN 0 to HW filter on device eth6 [ 904.895565][ T9593] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.949443][ T9593] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.091259][ T9593] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.146921][ T9593] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.177075][ T9593] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.244687][ T9593] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.256123][ T5283] 8021q: adding VLAN 0 to HW filter on device eth7 [ 905.340437][ T9593] bridge_slave_1: left allmulticast mode [ 905.340476][ T9593] bridge_slave_1: left promiscuous mode [ 905.340646][ T9593] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.362947][ T9593] bridge_slave_0: left allmulticast mode [ 905.368693][ T9593] bridge_slave_0: left promiscuous mode [ 905.374583][ T9593] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.387574][ T9593] bridge_slave_1: left allmulticast mode [ 905.393803][ T9593] bridge_slave_1: left promiscuous mode [ 905.393952][ T9593] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.409473][ T9593] bridge_slave_0: left allmulticast mode [ 905.415974][ T9593] bridge_slave_0: left promiscuous mode [ 905.417769][ T9593] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.435627][ T9593] bond1: left allmulticast mode [ 905.551617][ T9593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 905.574224][ T9593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 905.585608][ T9593] bond0 (unregistering): Released all slaves [ 905.651455][ T9593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 905.670560][ T9593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 905.680374][ T9593] bond0 (unregistering): Released all slaves [ 905.687984][ T9593] bond1 (unregistering): Released all slaves [ 905.795549][ T5283] 8021q: adding VLAN 0 to HW filter on device eth8 [ 906.104375][ T9593] hsr_slave_0: left promiscuous mode [ 906.110258][ T9593] hsr_slave_1: left promiscuous mode [ 906.119965][ T9593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 906.120005][ T9593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 906.135501][ T9593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 906.143580][ T9593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 906.158038][ T9593] hsr_slave_0: left promiscuous mode [ 906.164166][ T9593] hsr_slave_1: left promiscuous mode [ 906.170139][ T9593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 906.178274][ T9593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 906.186102][ T9593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 906.193738][ T9593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 906.207753][ T9593] veth1_macvtap: left promiscuous mode [ 906.213520][ T9593] veth0_macvtap: left promiscuous mode [ 906.219126][ T9593] veth1_vlan: left promiscuous mode [ 906.225561][ T9593] veth0_vlan: left promiscuous mode [ 906.231323][ T9593] veth1_macvtap: left promiscuous mode [ 906.231380][ T9593] veth0_macvtap: left promiscuous mode [ 906.231479][ T9593] veth1_vlan: left promiscuous mode [ 906.231529][ T9593] veth0_vlan: left promiscuous mode [ 906.396870][ T9593] team0 (unregistering): Port device team_slave_1 removed [ 906.415883][ T9593] team0 (unregistering): Port device team_slave_0 removed [ 906.564706][ T9593] team0 (unregistering): Port device team_slave_1 removed [ 906.585053][ T9593] team0 (unregistering): Port device team_slave_0 removed [ 906.673153][ T5283] 8021q: adding VLAN 0 to HW filter on device eth9 [ 907.135906][ T5283] 8021q: adding VLAN 0 to HW filter on device eth10 [ 907.187307][ T9593] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.187407][ T9593] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 907.187559][ T9593] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 907.253945][ T9593] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.264396][ T9593] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 907.274765][ T9593] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 907.348363][ T9593] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.348419][ T9593] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 907.348461][ T9593] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 907.426191][ T9593] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.437639][ T9593] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 907.448238][ T9593] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 907.524990][ T9593] bridge_slave_1: left allmulticast mode [ 907.525034][ T9593] bridge_slave_1: left promiscuous mode [ 907.525464][ T9593] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.544991][ T9593] bridge_slave_0: left allmulticast mode [ 907.545043][ T9593] bridge_slave_0: left promiscuous mode [ 907.545477][ T9593] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.717931][ T9593] bond3 (unregistering): (slave geneve3): Releasing active interface [ 907.748028][ T9593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 907.758395][ T9593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 907.768306][ T9593] bond0 (unregistering): Released all slaves [ 907.775518][ T9593] bond1 (unregistering): Released all slaves [ 907.785101][ T9593] bond2 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 907.797361][ T9593] bond2 (unregistering): Released all slaves [ 907.806300][ T9593] bond3 (unregistering): Released all slaves [ 907.817219][ T5283] 8021q: adding VLAN 0 to HW filter on device eth11 [ 907.892460][ T9593] tipc: Left network mode [ 908.044852][ T9593] hsr_slave_0: left promiscuous mode [ 908.050348][ T9593] hsr_slave_1: left promiscuous mode [ 908.058359][ T9593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 908.058409][ T9593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 908.066537][ T9593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 908.066571][ T9593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 908.092183][ T9593] veth1_macvtap: left promiscuous mode [ 908.092236][ T9593] veth0_macvtap: left promiscuous mode [ 908.092471][ T9593] veth1_vlan: left promiscuous mode [ 908.092534][ T9593] veth0_vlan: left promiscuous mode [ 908.314069][ T9593] team0 (unregistering): Port device team_slave_1 removed [ 908.330660][ T9593] team0 (unregistering): Port device team_slave_0 removed [ 908.407712][ T5283] 8021q: adding VLAN 0 to HW filter on device eth12 [ 908.584382][ T9593] IPVS: stop unused estimator thread 0... [ 908.786930][ T5283] 8021q: adding VLAN 0 to HW filter on device eth13 [ 909.050123][ T5283] 8021q: adding VLAN 0 to HW filter on device eth14 [ 909.313385][ T5283] 8021q: adding VLAN 0 to HW filter on device eth15 [ 909.580155][ T5283] 8021q: adding VLAN 0 to HW filter on device eth16 [ 909.843035][ T5283] 8021q: adding VLAN 0 to HW filter on device eth17 [ 910.110699][ T5283] 8021q: adding VLAN 0 to HW filter on device eth18 [ 910.368151][ T5283] 8021q: adding VLAN 0 to HW filter on device eth19 [ 910.627112][ T5283] 8021q: adding VLAN 0 to HW filter on device eth20