last executing test programs: 12m4.76159213s ago: executing program 2 (id=1468): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010025bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="102e05000f21000800"/24, @ANYRES16, @ANYBLOB="080001", @ANYRES32, @ANYBLOB="1400140076657468315f6d6163"], 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x4008084) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000200)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}, &(0x7f0000000040)=0x5) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r3}}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) rseq(0xfffffffffffffffc, 0xfccd, 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xb) 12m4.181752927s ago: executing program 2 (id=1473): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_submit(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94) 12m4.015268444s ago: executing program 2 (id=1474): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) (fail_nth: 1) 12m3.67050391s ago: executing program 2 (id=1475): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) (fail_nth: 1) 12m2.541346257s ago: executing program 2 (id=1479): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010025bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="102e05000f21000800"/24, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="1400140076657468315f6d6163"], 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x4008084) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000200)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="11a7366bceff00000000660007ce08000300", @ANYRES32=r3, @ANYBLOB="08002600640600000800b70097000000"], 0x2c}}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x7800, 0x8, 0x2, 0x0, {{0x1a, 0x4, 0x3, 0x0, 0x68, 0x64, 0x0, 0x3c, 0x2f, 0x0, @empty, @multicast1, {[@rr={0x7, 0x1b, 0xf4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1, @rand_addr=0x64010102, @multicast2, @remote]}, @rr={0x7, 0xf, 0xbe, [@dev={0xac, 0x14, 0x14, 0x2e}, @remote, @rand_addr=0x64010101]}, @generic={0x44, 0xa, "28dbae6f0cca41e1"}, @rr={0x7, 0x1f, 0x31, [@rand_addr=0x64010101, @multicast1, @rand_addr=0x64010102, @private=0xa010100, @remote, @private=0xa010101, @multicast2]}]}}}}}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x200000001, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) userfaultfd(0x80001) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) syz_usb_connect(0x5, 0x239, 0x0, 0x0) getrlimit(0x1, &(0x7f0000000000)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000090, 0x0, 0x0) setpriority(0x2, 0x0, 0x6340) ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f0000000080)={0x0, 0x300fdfd, 0x8, 0x1, 0x100, &(0x7f00000004c0)="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"}) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xcb, &(0x7f00000004c0)={0x1, 0x0, 0xa, r8, 0x8001}, 0xc) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="21032cbd7000fedbdf25010000000400030004000180280002800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_open_dev$vim2m(&(0x7f0000000140), 0x7ff, 0x2) 4m52.080788228s ago: executing program 33 (id=2897): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="11a7366bceff00000000660007ce08000300", @ANYRES32=r3, @ANYBLOB="08002600640600000800b70097000000"], 0x2c}}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x7800, 0x8, 0x2, 0x0, {{0x1a, 0x4, 0x3, 0x0, 0x68, 0x64, 0x0, 0x3c, 0x2f, 0x0, @empty, @multicast1, {[@rr={0x7, 0x1b, 0xf4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1, @rand_addr=0x64010102, @multicast2, @remote]}, @rr={0x7, 0xf, 0xbe, [@dev={0xac, 0x14, 0x14, 0x2e}, @remote, @rand_addr=0x64010101]}, @generic={0x44, 0xa, "28dbae6f0cca41e1"}, @rr={0x7, 0x1f, 0x31, [@rand_addr=0x64010101, @multicast1, @rand_addr=0x64010102, @private=0xa010100, @remote, @private=0xa010101, @multicast2]}]}}}}}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x200000001, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) userfaultfd(0x80001) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) syz_usb_connect(0x5, 0x239, 0x0, 0x0) getrlimit(0x1, &(0x7f0000000000)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000090, 0x0, 0x0) setpriority(0x2, 0x0, 0x6340) ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f0000000080)={0x0, 0x300fdfd, 0x8, 0x1, 0x100, &(0x7f00000004c0)="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"}) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xcb, &(0x7f00000004c0)={0x1, 0x0, 0xa, r8, 0x8001}, 0xc) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="21032cbd7000fedbdf25010000000400030004000180280002800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_open_dev$vim2m(&(0x7f0000000140), 0x7ff, 0x2) 2m8.409518101s ago: executing program 3 (id=3663): r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x1) sendmsg$inet_sctp(r0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000084000000", @ANYRES8=r0], 0x20, 0x4000040}, 0x4000000) 2m8.202761s ago: executing program 3 (id=3665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$igmp(0x2, 0x3, 0x2) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r8, r9, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000000180)={0x50, 0x0, r7, {0x7, 0x26, 0x5, 0xffffffff80010000, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x64961, 0xb3836f6d7a15f2d) close_range(r6, 0xffffffffffffffff, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) 2m6.616098618s ago: executing program 3 (id=3670): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, 0x0, 0x20040040) 2m6.005422655s ago: executing program 3 (id=3675): memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xed\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r2, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x5, 0x400007f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) r3 = syz_open_pts(r1, 0x60300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x9}]}}}]}, 0x48}}, 0x0) dup3(r0, r3, 0x80000) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 2m5.153863412s ago: executing program 3 (id=3679): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) r2 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000680)={'sit0\x00', 0x0, 0x8, 0x20, 0x8, 0xb08b549, {{0x5, 0x4, 0x2, 0x1, 0x14, 0x65, 0x0, 0x8b, 0x4, 0x0, @empty, @loopback}}}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc0102030109021b00010000000009044400012eafb200090581"], 0x0) bind$llc(r2, &(0x7f00000000c0)={0x1a, 0x320, 0xf0, 0x1e, 0x8e}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r3 = gettid() tkill(r3, 0x7) sched_setscheduler(r3, 0x5, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000440)='./file0\x00', 0x88) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@favordynmods}], [{@euid_lt={'euid<', 0xee01}}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2m0.481308658s ago: executing program 3 (id=3694): r0 = socket$inet6(0xa, 0x3, 0x7) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x7, 0x6c, 0x7}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x35b, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = add_key(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r7 = request_key(&(0x7f0000000280)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, r6) add_key$user(&(0x7f0000000180), 0x0, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffe) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_DOWN(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x33c7b6f104011696}, 0x20018854) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)={0x2, 0x0, @c}, 0x29, r7) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e"], 0x22) 1m58.477463443s ago: executing program 0 (id=3697): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) unshare(0x8040480) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000002080), 0x8001, 0x0) writev(r1, &(0x7f0000002540)=[{&(0x7f0000002440)='F/', 0x2}], 0x1) ioctl$KVM_TDX_INIT_VCPU(r1, 0xc008aeba, &(0x7f0000000140)={0x2, 0x0, 0x1ad}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x7}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) io_setup(0x8, &(0x7f0000004200)=0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, &(0x7f0000000080)=0x7) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000000400)=""/4096) (async) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1m56.975622231s ago: executing program 0 (id=3702): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00('], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}}, 0x24}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff3, 0xffff}, {0x5, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008180}, 0x800) (fail_nth: 1) 1m56.199281129s ago: executing program 0 (id=3706): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) openat(0xffffffffffffff9c, 0x0, 0x101081, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) tkill(r3, 0x12) waitid(0x1, r3, 0x0, 0x8, &(0x7f00000003c0)) rseq(&(0x7f0000004380)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x8, 0xfff2}, {0x1, 0xc}, {0x8, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) keyctl$dh_compute(0x17, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ce\x00'}}) 1m55.16788969s ago: executing program 0 (id=3709): userfaultfd(0x801) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (fail_nth: 1) 1m54.397919379s ago: executing program 0 (id=3712): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd(0x0) io_setup(0xc, &(0x7f0000000140)) socket$igmp(0x2, 0x3, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000084000000", @ANYRES8=r0], 0x20, 0x4000040}, 0x4000000) 1m53.687646178s ago: executing program 0 (id=3715): symlinkat(&(0x7f0000000400)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x110) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newqdisc={0x2c, 0x14, 0x70b, 0x70bd2b, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, {0x2}, {0xb, 0x3}, {0x5, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0xba, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000001c0), &(0x7f0000000240)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, 0xd, 0x6, 0x101, 0x0, 0x0, {0x549a22caca6cadd, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xcc0d0}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xfff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f00000004c0)=0x16e, 0x4) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1841}, 0x20000000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) 1m37.560573205s ago: executing program 34 (id=3715): symlinkat(&(0x7f0000000400)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x110) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newqdisc={0x2c, 0x14, 0x70b, 0x70bd2b, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, {0x2}, {0xb, 0x3}, {0x5, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0xba, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000001c0), &(0x7f0000000240)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, 0xd, 0x6, 0x101, 0x0, 0x0, {0x549a22caca6cadd, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xcc0d0}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xfff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f00000004c0)=0x16e, 0x4) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1841}, 0x20000000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) 10.83504015s ago: executing program 6 (id=4019): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711809000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000400000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff99}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0xe5c, 0x80000) eventfd(0x0) eventfd2(0xe5c, 0x80000) pipe2$9p(&(0x7f0000000080), 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000bc0)) inotify_init() fsopen(&(0x7f0000000180)='proc\x00', 0x1) timerfd_create(0x9, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24058013) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, 0x0, 0x0) 10.554425935s ago: executing program 6 (id=4023): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x8}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000005, 0xdb}, 0x9c) r2 = socket$kcm(0x10, 0x2, 0x0) listen(0xffffffffffffffff, 0x2) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) syz_usb_connect(0x0, 0x39c, &(0x7f0000000940)={{0x12, 0x1, 0x300, 0xcb, 0x62, 0xe0, 0x20, 0x403, 0xfd4b, 0x56a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38a, 0x2, 0xcb, 0x1, 0x40, 0x7, "", [{{0x9, 0x4, 0xb6, 0x2, 0x0, 0x24, 0x5e, 0x45, 0x40}}, {{0x9, 0x4, 0xf4, 0x0, 0xb, 0x1d, 0x51, 0x4c, 0x0, [], [{{0x9, 0x5, 0xb, 0xf, 0x3ff, 0x6, 0x5, 0x4}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0x4, 0xf0, 0x1, [@generic={0x9f, 0x30, "403d813c983b86b989cd305dc5364587e17231cae40d07f0412bdaded7bb2bf6a8ca59d85aa0a304286535709e47fb51bef3e1d1db46eb5e0ce0b42069d764a9c354081708069dcdb1e975eb2214c8e3bdeacef15577e8cb7aa720ed38c24e72863f5724e10b499c9bbdf2a38e878f9c1b2701632e34251983bece477159bcb245e2ac0907102a8ef37b41056d09bfb38dc24b560dde2e0d84ac4d8a87"}, @generic={0x6b, 0x3, "32e97bb342d83f1c1159076560808873e573e8eadf89c50b44765f82c7705506f8119b36a161cd41c678cfd67d1b56514cf66f0e8c798a37fcf5203936b0437970739bd2b308d7c09bed2fa2cf339cf272aec29ed2768e2185ac5849a53b118225c857423e35d2454b"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x2, 0xc, 0x2, [@generic={0x71, 0x22, "751b483c87a376853a287092ca8606d1896377a760d47ed09d33a27b41f4381f7a2da5855546454b897cd778dcf12f221cfd01c9d7fbcac2b3dece1814e44f99c8f32b3a71f7b67b91f4b93a1c59d33b156cf9541824cec106a152c391126e320db0420f4bb612c9f0620662b8317b"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0xf, 0x63, 0xf0, [@generic={0x89, 0x5, "20735ca1db08c1f32d0260e2dfc99355fd0de447572fc450740c5d1170fe876cc36364b1ce9fdfddf46882b0a4f3331c16baac7e5dafc1b84d057620f929d7d1112b32459b713a5eab519f3e457931aaaf2512db4c3988dd78b8152c2c7b641a73685ee0f477accb4be5edf4b096249eb8bf2d4f6b7a4e88c99d5d55cc05518d164ff9d9080c46"}, @generic={0x19, 0xe, "acf789925c378777645bae3307e7d8ed75d65c6a7b00f3"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0x8, 0x5, 0x53}}, {{0x9, 0x5, 0x8, 0x5, 0x400, 0x4, 0x9, 0x9, [@generic={0x2, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0xf}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0xe0, 0xf2}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x8, 0x1f, 0x81}}, {{0x9, 0x5, 0x80, 0x2, 0x200, 0x5, 0xe2, 0x86, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xff, 0x81}]}}, {{0x9, 0x5, 0x80, 0x10, 0x0, 0x81, 0x9, 0x8, [@generic={0xd1, 0x30, "0948892c305429c0ff2714a8d3a147f63f3cab57fa01bb389c6f93fa1bff085b370584f72bf8b6f0d625298ea9de8673931eb2b8f3d5929b45c64ecfc651daddb0470540c6aba8aadc90714e5356aa8d51516f965302262e2a3573e58d27b10872727099ee153ee59e05293de96c834280ec908048017f5e75bbdae481b5c80a86cb0982b43e95bde7caeccca2842634127a87fcf899ad010fe381987c53d68f4ab1c1c43d61bc7c11f83afb1aadf5f55abbf62e30b62a32b405527258c56c82d8f2179908c66803c8ca2aa15c93db"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xc, 0x7ff}]}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x1, 0xb, 0x8}}]}}]}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x300, 0x8, 0xfd, 0x6, 0x10, 0x58}, 0x10, &(0x7f0000000d80)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x7, 0x3d, 0x2, 0x7}]}, 0x7, [{0x0, 0x0}, {0x41, &(0x7f0000000e00)=@string={0x41, 0x3, "6aba14893902575d5032a7cdf6e0d797029dfacb1af46e0309ad0d6138446b6f3064fa767dc78e36f07915fafd08ce9eed5f8dc0e9bc0831e9352677b2b9fa"}}, {0x84, &(0x7f0000000e80)=@string={0x84, 0x3, "a82daf0d6e283928efec9bfde3adb6a73fa70d4d2aa6134f26697539269283fcb04125e1f2eb2c645556039f2a92986be206d6dc620d1d03e15b432dffc650e6b7593bf8d83391d00ba2bcbe1213caae64e2a38bad291c0143897b353b209281636b018324f3175003c1fc7bdaaca58894c67df1f770efa297c8e2db371ec9ad200c"}}, {0x19, &(0x7f0000000f40)=@string={0x19, 0x3, "2bd2aecaba8b4dd23efc5cca2b127ee6eefb9a8c5a5c71"}}, {0x19, &(0x7f0000000f80)=ANY=[@ANYBLOB="190353e794782db67f712aadf508553be9198df754ccec6223"]}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x180a}}]}) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) 8.121535126s ago: executing program 1 (id=4036): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) openat(0xffffffffffffff9c, 0x0, 0x101081, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) tkill(r3, 0x12) waitid(0x1, r3, 0x0, 0x8, &(0x7f00000003c0)) rseq(&(0x7f0000004380)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) keyctl$dh_compute(0x17, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ce\x00'}}) 7.039581426s ago: executing program 6 (id=4037): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x101) write$qrtrtun(r2, &(0x7f00000014c0), 0x0) setresuid(0xee00, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000a00)="5ea39da44e4f30dd914b402ba5d0f109961f18638d17216246dc7ea7b8a4d4", 0x1f, 0xfffffffffffffffc) prlimit64(0x0, 0xd, &(0x7f0000000680)={0x200000000005, 0x8000000000200003}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x5e, 0x1a, &(0x7f0000000280)="9ca2e244b56252899704dbebac3a356ffa9036e0257769f740c7eb740ac5cc6a1dc29490959a6e98c3727f4d0ad1fe269d5b5684449257635d0c2eede7f87ad3165ebf32db591205da126ebcfcaab79a2b5c78ed7f93413bf026816a25d2", &(0x7f0000000300)=""/26, 0x7, 0x0, 0xa4, 0x8d, &(0x7f0000000340)="600720e434824ae0ee1662c8d060d3496770722a958fe29466d5f1ef99fc067a25ed1023f899958c2359952175bd688ae9f9c6fb4e6a7d51544e2854e7a2eab660c008ce1f09d0a27a2066cae6eb837654f9536586c2b8eda19e229a6879c998e589012713a367334f0d1077cb3394531615af1971fb3aa6dc07dbf7422273307bee98a81f767b83396320b39d6a946b8b55af501d13d5628e59c6c627318a3abc25181f", &(0x7f0000000400)="2277cd4050ddd70ea6a15eef923e941e60345931ea53d45179d2df7e7f9a4495e9226c7b70d28fefbf57b95b04394e4fdde3126e37d16ae77f6c400a3d306e08513159bf8e99ee7f855cfcb57511ae2876d4b8e791d26fd6b31e539c5744432522cba69465da136d06f9631216c9ed523f4c2c1dcfd2c97357c1188052f72168d3d66f0eb15af4f466567d3c66", 0x6, 0x0, 0x80}, 0x50) r4 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x6, 0x13, r4, 0x7c42d000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="64000000180001002abd7000ffdbdf251d0100001500030001000060010300001d8541e9845ef93100000000150004"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x8048802) setpriority(0x2, 0x0, 0xffffffffffffffcd) 7.037900586s ago: executing program 1 (id=4038): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x15c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 6.891557726s ago: executing program 1 (id=4039): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYBLOB="1200ee050a00020036"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) 6.827473228s ago: executing program 1 (id=4040): r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x9, 0xa2000) r1 = epoll_create(0xe) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x7}) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7e, 0x2, 0x3, 0x80000000, 0x20000006, 0x4f, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x8000024, 0xd, 0x7, 0xfffffffc, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x5, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x88, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x800a, 0x400, 0x80, 0x0, 0x5, 0x1008, 0x8, 0x3, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf8, 0xe, 0x2bc, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0xd, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x3ff, 0x7ffd, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x4005f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0xc, 0x9, 0x8, 0x9, 0x6, 0x43, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x6, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x10000007, 0x63fa0f21, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0x100b, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0xfffffffe, 0x3, 0x27ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2016, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0x100, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000001, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x2, 0x16, 0xffffffff, 0x8, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7b, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x3552, 0x5, 0x5, 0x8, 0x2, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0xdd3, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='-\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000007000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) 6.665511441s ago: executing program 6 (id=4041): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d0000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x3ff, 0x3, 0x4, 0x10201, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x7, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) write$bt_hci(0xffffffffffffffff, &(0x7f0000000500)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x54}}}, 0x5) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb", 0x42}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037", 0x27}, {0x0}, {&(0x7f0000000800)}], 0x4}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef0189388", 0x16}], 0x2}}], 0x2, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.627543881s ago: executing program 1 (id=4043): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) openat(0xffffffffffffff9c, 0x0, 0x101081, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) tkill(r3, 0x12) waitid(0x1, r3, 0x0, 0x8, 0x0) 3.596895439s ago: executing program 5 (id=4045): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="5c01", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088030010c8054000b8008000a008fee0000080009000000000008000a00afc3000008000a000000000008000a009a690000080009003b3e"], 0x15c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 3.45255087s ago: executing program 5 (id=4046): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) openat(0xffffffffffffff9c, 0x0, 0x101081, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) tkill(r3, 0x12) waitid(0x1, r3, 0x0, 0x8, &(0x7f00000003c0)) rseq(&(0x7f0000004380)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) keyctl$dh_compute(0x17, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ce\x00'}}) 3.173806478s ago: executing program 1 (id=4047): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x8}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000005, 0xdb}, 0x9c) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x2) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) syz_usb_connect(0x0, 0x39c, &(0x7f0000000940)={{0x12, 0x1, 0x300, 0xcb, 0x62, 0xe0, 0x20, 0x403, 0xfd4b, 0x56a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38a, 0x2, 0xcb, 0x1, 0x40, 0x7, "", [{{0x9, 0x4, 0xb6, 0x2, 0x0, 0x24, 0x5e, 0x45, 0x40}}, {{0x9, 0x4, 0xf4, 0x0, 0xb, 0x1d, 0x51, 0x4c, 0x0, [], [{{0x9, 0x5, 0xb, 0xf, 0x3ff, 0x6, 0x5, 0x4}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0x4, 0xf0, 0x1, [@generic={0x9f, 0x30, "403d813c983b86b989cd305dc5364587e17231cae40d07f0412bdaded7bb2bf6a8ca59d85aa0a304286535709e47fb51bef3e1d1db46eb5e0ce0b42069d764a9c354081708069dcdb1e975eb2214c8e3bdeacef15577e8cb7aa720ed38c24e72863f5724e10b499c9bbdf2a38e878f9c1b2701632e34251983bece477159bcb245e2ac0907102a8ef37b41056d09bfb38dc24b560dde2e0d84ac4d8a87"}, @generic={0x6b, 0x3, "32e97bb342d83f1c1159076560808873e573e8eadf89c50b44765f82c7705506f8119b36a161cd41c678cfd67d1b56514cf66f0e8c798a37fcf5203936b0437970739bd2b308d7c09bed2fa2cf339cf272aec29ed2768e2185ac5849a53b118225c857423e35d2454b"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x2, 0xc, 0x2, [@generic={0x71, 0x22, "751b483c87a376853a287092ca8606d1896377a760d47ed09d33a27b41f4381f7a2da5855546454b897cd778dcf12f221cfd01c9d7fbcac2b3dece1814e44f99c8f32b3a71f7b67b91f4b93a1c59d33b156cf9541824cec106a152c391126e320db0420f4bb612c9f0620662b8317b"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0xf, 0x63, 0xf0, [@generic={0x89, 0x5, "20735ca1db08c1f32d0260e2dfc99355fd0de447572fc450740c5d1170fe876cc36364b1ce9fdfddf46882b0a4f3331c16baac7e5dafc1b84d057620f929d7d1112b32459b713a5eab519f3e457931aaaf2512db4c3988dd78b8152c2c7b641a73685ee0f477accb4be5edf4b096249eb8bf2d4f6b7a4e88c99d5d55cc05518d164ff9d9080c46"}, @generic={0x19, 0xe, "acf789925c378777645bae3307e7d8ed75d65c6a7b00f3"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0x8, 0x5, 0x53}}, {{0x9, 0x5, 0x8, 0x5, 0x400, 0x4, 0x9, 0x9, [@generic={0x2, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0xf}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0xe0, 0xf2}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x8, 0x1f, 0x81}}, {{0x9, 0x5, 0x80, 0x2, 0x200, 0x5, 0xe2, 0x86, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xff, 0x81}]}}, {{0x9, 0x5, 0x80, 0x10, 0x0, 0x81, 0x9, 0x8, [@generic={0xd1, 0x30, "0948892c305429c0ff2714a8d3a147f63f3cab57fa01bb389c6f93fa1bff085b370584f72bf8b6f0d625298ea9de8673931eb2b8f3d5929b45c64ecfc651daddb0470540c6aba8aadc90714e5356aa8d51516f965302262e2a3573e58d27b10872727099ee153ee59e05293de96c834280ec908048017f5e75bbdae481b5c80a86cb0982b43e95bde7caeccca2842634127a87fcf899ad010fe381987c53d68f4ab1c1c43d61bc7c11f83afb1aadf5f55abbf62e30b62a32b405527258c56c82d8f2179908c66803c8ca2aa15c93db"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xc, 0x7ff}]}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x1, 0xb, 0x8}}]}}]}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x300, 0x8, 0xfd, 0x6, 0x10, 0x58}, 0x10, &(0x7f0000000d80)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x7, 0x3d, 0x2, 0x7}]}, 0x7, [{0x0, 0x0}, {0x41, &(0x7f0000000e00)=@string={0x41, 0x3, "6aba14893902575d5032a7cdf6e0d797029dfacb1af46e0309ad0d6138446b6f3064fa767dc78e36f07915fafd08ce9eed5f8dc0e9bc0831e9352677b2b9fa"}}, {0x84, &(0x7f0000000e80)=@string={0x84, 0x3, "a82daf0d6e283928efec9bfde3adb6a73fa70d4d2aa6134f26697539269283fcb04125e1f2eb2c645556039f2a92986be206d6dc620d1d03e15b432dffc650e6b7593bf8d83391d00ba2bcbe1213caae64e2a38bad291c0143897b353b209281636b018324f3175003c1fc7bdaaca58894c67df1f770efa297c8e2db371ec9ad200c"}}, {0x19, &(0x7f0000000f40)=@string={0x19, 0x3, "2bd2aecaba8b4dd23efc5cca2b127ee6eefb9a8c5a5c71"}}, {0x19, &(0x7f0000000f80)=ANY=[@ANYBLOB="190353e794782db67f712aadf508553be9198df754ccec6223"]}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x180a}}]}) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) 2.129228656s ago: executing program 5 (id=4048): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="1200ee050a00020036"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) 1.959714925s ago: executing program 6 (id=4049): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x101) write$qrtrtun(r2, &(0x7f00000014c0), 0x0) setresuid(0xee00, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000a00)="5ea39da44e4f30dd914b402ba5d0f109961f18638d17216246dc7ea7b8a4d4", 0x1f, 0xfffffffffffffffc) prlimit64(0x0, 0xd, &(0x7f0000000680)={0x200000000005, 0x8000000000200003}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x5e, 0x1a, &(0x7f0000000280)="9ca2e244b56252899704dbebac3a356ffa9036e0257769f740c7eb740ac5cc6a1dc29490959a6e98c3727f4d0ad1fe269d5b5684449257635d0c2eede7f87ad3165ebf32db591205da126ebcfcaab79a2b5c78ed7f93413bf026816a25d2", &(0x7f0000000300)=""/26, 0x7, 0x0, 0xa4, 0x8d, &(0x7f0000000340)="600720e434824ae0ee1662c8d060d3496770722a958fe29466d5f1ef99fc067a25ed1023f899958c2359952175bd688ae9f9c6fb4e6a7d51544e2854e7a2eab660c008ce1f09d0a27a2066cae6eb837654f9536586c2b8eda19e229a6879c998e589012713a367334f0d1077cb3394531615af1971fb3aa6dc07dbf7422273307bee98a81f767b83396320b39d6a946b8b55af501d13d5628e59c6c627318a3abc25181f", &(0x7f0000000400)="2277cd4050ddd70ea6a15eef923e941e60345931ea53d45179d2df7e7f9a4495e9226c7b70d28fefbf57b95b04394e4fdde3126e37d16ae77f6c400a3d306e08513159bf8e99ee7f855cfcb57511ae2876d4b8e791d26fd6b31e539c5744432522cba69465da136d06f9631216c9ed523f4c2c1dcfd2c97357c1188052f72168d3d66f0eb15af4f466567d3c66", 0x6, 0x0, 0x80}, 0x50) r4 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x6, 0x13, r4, 0x7c42d000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="64000000180001002abd7000ffdbdf251d0100001500030001000060010300001d8541e9845ef93100000000150004"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x8048802) setpriority(0x2, 0x0, 0xffffffffffffffcd) 1.778442201s ago: executing program 5 (id=4050): syz_usb_connect$uac2(0x6, 0x106, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf4, 0x3, 0x1, 0x9, 0x40, 0x5, {0x8, 0xb, 0x2, 0x2, 0x1, 0x0, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x2, 0x52, 0x90}, [@effect_unit={0x13, 0x24, 0x7, 0x6, 0x1, 0x6, [0x2, 0x3, 0x1, 0x2, 0x0, 0x3]}, @feature_unit={0x7, 0x24, 0x6, 0x3, 0x5, [0x6]}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x3, 0x4, 0x27, 0x10, 0x9}, @input_terminal={0x10, 0x24, 0x2, 0x6, 0x1ff, 0x2, 0x0, 0x5, 0x4, 0x6, 0x7, 0x7}, @source_unit={0x8, 0x24, 0xa, 0x8, 0x4, 0x12, 0xd1, 0x3}, @selector_unit={0xb, 0x24, 0xb, 0x7f, 0x6, "8e57abb4ae8e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x6, 0xff, 0xa}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x38, 0xf8, {0x8, 0x25, 0x1, 0x81, 0x3, 0x5, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x2, 0x8, 0x1, "", "1f0742"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x6, 0x2, 0x6}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x1, 0x5, 0x40, "aa5181b6bb"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xc, 0x4, 0x5, 0x1, "d5", "16"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x66, 0x3, 0x6, 0x10, "5cc5c9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x2, 0x40, 0x1, {0x8, 0x25, 0x1, 0x0, 0x35, 0x7, 0x1}}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0xfe, 0x7f, 0xf, 0x40, 0x9}, 0x59, &(0x7f0000000200)=ANY=[@ANYBLOB="050f5900050710020010040024100a02c000000030800100f5d8735b68b2715996027e3fa30b10010c3200400205000814100406bff8c68c642492c47bcca35142410a1003020a0000020700"/89], 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x459}}, {0xf5, &(0x7f00000003c0)=@string={0xf5, 0x3, "c0cb1f413a00f11f8fb23a8bc4dc00053a45b5fe70550fcbde020c782e8ccd7afa316d81b6e2bc692275a296c7f06491bb6cbe039eb2c769a5f780b850662ba53792afcc22de9a60d227942e72cee3453287c63df9aad0d73b7a1e01bc79f1098ce3b786e5fb0c839da73f930e19f47b1bb9a3cf5550f122b447ab371e4474498e3bced61bf25576c2a51d127f37037d0be44995527f6112f7756a9970654230349d80b2888a48ba28ff7c9f6baa97474ad3be41fbf065f21d78e24b2746c93e872fdb1cdef4f74fc95d0fb97374b658657466e5fa17a1eac1784a324f09900626fa024534b3c0f8f09e40f7917e68e1682c4d"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40e}}]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103200000000009058202080000000009050302"], 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000001c80)=ANY=[@ANYBLOB="12010000941b6508c410c1ea2f700102030109021200010000000009040102"], 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) faccessat2(r1, &(0x7f0000000040)='./file0\x00', 0x20, 0x200) 1.284476302s ago: executing program 6 (id=4051): r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x9, 0xa2000) r1 = epoll_create(0xe) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x7}) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7e, 0x2, 0x3, 0x80000000, 0x20000006, 0x4f, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x8000024, 0xd, 0x7, 0xfffffffc, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x5, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x88, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x800a, 0x400, 0x80, 0x0, 0x5, 0x1008, 0x8, 0x3, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf8, 0xe, 0x2bc, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0xd, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x3ff, 0x7ffd, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x4005f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0xc, 0x9, 0x8, 0x9, 0x6, 0x43, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x6, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x10000007, 0x63fa0f21, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0x100b, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0xfffffffe, 0x3, 0x27ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2016, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0x100, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000001, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x2, 0x16, 0xffffffff, 0x8, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7b, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x3552, 0x5, 0x5, 0x8, 0x2, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0xdd3, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='-\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000007000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) 1.133966068s ago: executing program 5 (id=4052): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) openat(0xffffffffffffff9c, 0x0, 0x101081, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) tkill(r3, 0x12) waitid(0x1, r3, 0x0, 0x8, &(0x7f00000003c0)) rseq(&(0x7f0000004380)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x8, 0xfff2}, {0x1, 0xc}, {0x8, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) keyctl$dh_compute(0x17, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ce\x00'}}) 0s ago: executing program 5 (id=4053): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a60000000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000600)=r0, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES64], 0x1c}}, 0x40000) kernel console output (not intermixed with test programs): (using control endpoint instead) [ 1001.144264][ T5331] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1001.156650][T17276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1001.459174][ T5331] usb 4-1: USB disconnect, device number 109 [ 1001.476747][ T5331] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1001.689413][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1001.725789][ T38] kauditd_printk_skb: 230 callbacks suppressed [ 1001.725808][ T38] audit: type=1326 audit(1783835619.751:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17280 comm="syz.6.3541" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25430ede59 code=0x7fc00000 [ 1002.068051][T17095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.070140][T17095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.070363][T17095] bridge_slave_0: entered allmulticast mode [ 1002.074707][T17095] bridge_slave_0: entered promiscuous mode [ 1002.094020][T17095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.095016][T17095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.096852][T17095] bridge_slave_1: entered allmulticast mode [ 1002.103889][T17095] bridge_slave_1: entered promiscuous mode [ 1002.522900][T17095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1002.541462][T17095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.725285][ T821] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 1002.782157][ T38] audit: type=1326 audit(1783835620.821:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17304 comm="syz.1.3548" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1002.782248][ T38] audit: type=1326 audit(1783835620.821:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17304 comm="syz.1.3548" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1002.782298][ T38] audit: type=1326 audit(1783835620.821:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17304 comm="syz.1.3548" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1002.782349][ T38] audit: type=1326 audit(1783835620.821:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17304 comm="syz.1.3548" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1002.782404][ T38] audit: type=1326 audit(1783835620.821:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17304 comm="syz.1.3548" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1002.782439][ T38] audit: type=1326 audit(1783835620.821:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17304 comm="syz.1.3548" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1002.782475][ T38] audit: type=1326 audit(1783835620.821:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17304 comm="syz.1.3548" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5d2387e68e code=0x7ffc0000 [ 1002.783626][ T38] audit: type=1326 audit(1783835620.821:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17304 comm="syz.1.3548" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1002.783687][ T38] audit: type=1326 audit(1783835620.821:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17304 comm="syz.1.3548" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5d2387e68e code=0x7ffc0000 [ 1002.987324][ T821] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1003.000294][ T821] usb 4-1: not running at top speed; connect to a high speed hub [ 1003.043868][ T821] usb 4-1: config 6 has an invalid interface number: 54 but max is 0 [ 1003.043892][ T821] usb 4-1: config 6 has no interface number 0 [ 1003.043938][ T821] usb 4-1: config 6 interface 54 altsetting 9 endpoint 0xC has invalid wMaxPacketSize 0 [ 1003.043955][ T821] usb 4-1: config 6 interface 54 has no altsetting 0 [ 1003.077863][ T821] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=24.4c [ 1003.077893][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.077918][ T821] usb 4-1: Product: syz [ 1003.077930][ T821] usb 4-1: Manufacturer: syz [ 1003.077941][ T821] usb 4-1: SerialNumber: syz [ 1003.537511][ T821] usbtest 4-1:6.54: couldn't get endpoints, -71 [ 1003.537602][ T821] usbtest 4-1:6.54: probe with driver usbtest failed with error -71 [ 1003.573759][ T821] usb 4-1: USB disconnect, device number 110 [ 1003.943115][T17320] FAULT_INJECTION: forcing a failure. [ 1003.943115][T17320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1003.943158][T17320] CPU: 1 UID: 0 PID: 17320 Comm: syz.1.3550 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1003.943190][T17320] Tainted: [L]=SOFTLOCKUP [ 1003.943199][T17320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1003.943214][T17320] Call Trace: [ 1003.943224][T17320] [ 1003.943234][T17320] dump_stack_lvl+0xe8/0x150 [ 1003.943274][T17320] should_fail_ex+0x467/0x600 [ 1003.943315][T17320] _copy_from_user+0x2d/0xb0 [ 1003.943342][T17320] ___sys_sendmsg+0x1c6/0x360 [ 1003.943367][T17320] ? __lock_acquire+0x683/0x2ce0 [ 1003.943396][T17320] ? __pfx____sys_sendmsg+0x10/0x10 [ 1003.943427][T17320] ? kstrtouint+0x6e/0xe0 [ 1003.943490][T17320] ? __fget_files+0x2a/0x420 [ 1003.943513][T17320] ? __fget_files+0x3a8/0x420 [ 1003.943548][T17320] __sys_sendmmsg+0x279/0x4d0 [ 1003.943580][T17320] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1003.943615][T17320] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1003.943658][T17320] ? ksys_write+0x248/0x270 [ 1003.943680][T17320] ? __pfx_ksys_write+0x10/0x10 [ 1003.943705][T17320] __x64_sys_sendmmsg+0xa0/0xc0 [ 1003.943724][T17320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.943742][T17320] do_syscall_64+0x174/0x580 [ 1003.943766][T17320] ? trace_irq_disable+0x3b/0x140 [ 1003.943781][T17320] ? clear_bhb_loop+0x40/0x90 [ 1003.943801][T17320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.943817][T17320] RIP: 0033:0x7f5d238bde59 [ 1003.943833][T17320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1003.943847][T17320] RSP: 002b:00007f5d21b16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1003.943864][T17320] RAX: ffffffffffffffda RBX: 00007f5d23b45fa0 RCX: 00007f5d238bde59 [ 1003.943877][T17320] RDX: 0000000000000002 RSI: 0000200000001f80 RDI: 0000000000000003 [ 1003.943887][T17320] RBP: 00007f5d21b16090 R08: 0000000000000000 R09: 0000000000000000 [ 1003.943897][T17320] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 1003.943908][T17320] R13: 00007f5d23b46038 R14: 00007f5d23b45fa0 R15: 00007ffe11807cd8 [ 1003.943933][T17320] [ 1004.494866][T17324] FAULT_INJECTION: forcing a failure. [ 1004.494866][T17324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1004.494908][T17324] CPU: 1 UID: 0 PID: 17324 Comm: syz.1.3551 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1004.494939][T17324] Tainted: [L]=SOFTLOCKUP [ 1004.494948][T17324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1004.494962][T17324] Call Trace: [ 1004.494971][T17324] [ 1004.494983][T17324] dump_stack_lvl+0xe8/0x150 [ 1004.495022][T17324] should_fail_ex+0x467/0x600 [ 1004.495060][T17324] _copy_from_user+0x2d/0xb0 [ 1004.495087][T17324] ___sys_sendmsg+0x1c6/0x360 [ 1004.495110][T17324] ? __lock_acquire+0x683/0x2ce0 [ 1004.495141][T17324] ? __pfx____sys_sendmsg+0x10/0x10 [ 1004.495200][T17324] ? __fget_files+0x2a/0x420 [ 1004.495224][T17324] ? __fget_files+0x3a8/0x420 [ 1004.495256][T17324] __x64_sys_sendmsg+0x1b7/0x290 [ 1004.495283][T17324] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1004.495325][T17324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.495351][T17324] do_syscall_64+0x174/0x580 [ 1004.495386][T17324] ? trace_irq_disable+0x3b/0x140 [ 1004.495402][T17324] ? clear_bhb_loop+0x40/0x90 [ 1004.495422][T17324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.495438][T17324] RIP: 0033:0x7f5d238bde59 [ 1004.495454][T17324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1004.495468][T17324] RSP: 002b:00007f5d21b16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1004.495492][T17324] RAX: ffffffffffffffda RBX: 00007f5d23b45fa0 RCX: 00007f5d238bde59 [ 1004.495504][T17324] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 1004.495515][T17324] RBP: 00007f5d21b16090 R08: 0000000000000000 R09: 0000000000000000 [ 1004.495526][T17324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1004.495535][T17324] R13: 00007f5d23b46038 R14: 00007f5d23b45fa0 R15: 00007ffe11807cd8 [ 1004.495560][T17324] [ 1005.186480][ T37] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1005.357251][ T37] usb 4-1: Using ep0 maxpacket: 32 [ 1005.371856][ T37] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1005.371912][ T37] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1005.371961][ T37] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1005.371990][ T37] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1005.372020][ T37] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1005.380758][ T37] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1005.380790][ T37] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1005.380814][ T37] usb 4-1: Product: syz [ 1005.380829][ T37] usb 4-1: Manufacturer: syz [ 1005.380845][ T37] usb 4-1: SerialNumber: syz [ 1005.453555][T17345] fuse: fd is not a fuse device [ 1005.624107][ T37] usb 4-1: config 0 descriptor?? [ 1005.671568][ T37] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1005.693400][ T37] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1005.732383][T17095] team0: Port device team_slave_0 added [ 1006.038013][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 1006.038099][ T37] usb 4-1: USB disconnect, device number 111 [ 1006.060702][ T37] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1006.088688][ T5260] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1006.092367][T17095] team0: Port device team_slave_1 added [ 1006.099670][T17350] veth0: entered promiscuous mode [ 1007.186069][T17347] veth0: left promiscuous mode [ 1007.826338][T17375] syz_tun: entered allmulticast mode [ 1007.831628][T17095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1007.831645][T17095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.831687][T17095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1008.212344][T17378] syz_tun: left allmulticast mode [ 1008.270504][T17095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1008.270523][T17095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1008.270555][T17095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1008.538845][T17383] fuse: fd is not a fuse device [ 1008.542434][ T38] kauditd_printk_skb: 213 callbacks suppressed [ 1008.542450][ T38] audit: type=1326 audit(1783835626.581:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17382 comm="syz.5.3569" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb37b7de59 code=0x7ffc0000 [ 1008.542524][ T38] audit: type=1326 audit(1783835626.581:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17382 comm="syz.5.3569" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb37b7de59 code=0x7ffc0000 [ 1008.543014][ T38] audit: type=1326 audit(1783835626.581:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17382 comm="syz.5.3569" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb37b7de59 code=0x7ffc0000 [ 1008.543066][ T38] audit: type=1326 audit(1783835626.581:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17382 comm="syz.5.3569" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb37b7de59 code=0x7ffc0000 [ 1008.543371][ T38] audit: type=1326 audit(1783835626.581:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17382 comm="syz.5.3569" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb37b7de59 code=0x7ffc0000 [ 1008.543684][ T38] audit: type=1326 audit(1783835626.581:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17382 comm="syz.5.3569" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fdb37b7de59 code=0x7ffc0000 [ 1008.543975][ T38] audit: type=1326 audit(1783835626.581:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17382 comm="syz.5.3569" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb37b7de59 code=0x7ffc0000 [ 1008.544504][ T38] audit: type=1326 audit(1783835626.581:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17382 comm="syz.5.3569" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdb37b7de59 code=0x7ffc0000 [ 1008.544557][ T38] audit: type=1326 audit(1783835626.581:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17382 comm="syz.5.3569" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb37b7de59 code=0x7ffc0000 [ 1008.545033][ T38] audit: type=1326 audit(1783835626.581:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17382 comm="syz.5.3569" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdb37b7de59 code=0x7ffc0000 [ 1010.191877][T17095] hsr_slave_0: entered promiscuous mode [ 1010.202734][T17095] hsr_slave_1: entered promiscuous mode [ 1010.204945][T17095] debugfs: 'hsr0' already exists in 'hsr' [ 1010.204972][T17095] Cannot create hsr debugfs directory [ 1010.481340][T17400] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1012.362073][T17436] FAULT_INJECTION: forcing a failure. [ 1012.362073][T17436] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.362114][T17436] CPU: 0 UID: 0 PID: 17436 Comm: syz.1.3583 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1012.362147][T17436] Tainted: [L]=SOFTLOCKUP [ 1012.362155][T17436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1012.362170][T17436] Call Trace: [ 1012.362180][T17436] [ 1012.362190][T17436] dump_stack_lvl+0xe8/0x150 [ 1012.362232][T17436] should_fail_ex+0x467/0x600 [ 1012.362278][T17436] should_failslab+0xa8/0x100 [ 1012.362308][T17436] __kmalloc_noprof+0xfe/0x780 [ 1012.362330][T17436] ? rcu_is_watching+0x15/0xb0 [ 1012.362359][T17436] ? tomoyo_realpath_from_path+0xef/0x640 [ 1012.362388][T17436] ? tomoyo_realpath_from_path+0xef/0x640 [ 1012.362424][T17436] tomoyo_realpath_from_path+0xef/0x640 [ 1012.362464][T17436] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1012.362504][T17436] tomoyo_path_number_perm+0x246/0x5f0 [ 1012.362545][T17436] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1012.362593][T17436] ? __lock_acquire+0x683/0x2ce0 [ 1012.362634][T17436] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1012.362668][T17436] ? hook_file_ioctl+0x1f3/0x600 [ 1012.362698][T17436] ? lockdep_hardirqs_on+0x7a/0x110 [ 1012.362771][T17436] ? __fget_files+0x2a/0x420 [ 1012.362797][T17436] ? __fget_files+0x2a/0x420 [ 1012.362819][T17436] ? __fget_files+0x3a8/0x420 [ 1012.362841][T17436] ? __fget_files+0x2a/0x420 [ 1012.362868][T17436] security_file_ioctl+0xc3/0x2a0 [ 1012.362895][T17436] __se_sys_ioctl+0x47/0x170 [ 1012.362925][T17436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.362951][T17436] do_syscall_64+0x174/0x580 [ 1012.362984][T17436] ? trace_irq_disable+0x3b/0x140 [ 1012.363007][T17436] ? clear_bhb_loop+0x40/0x90 [ 1012.363036][T17436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.363059][T17436] RIP: 0033:0x7f5d238bde59 [ 1012.363081][T17436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1012.363102][T17436] RSP: 002b:00007f5d21b16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1012.363128][T17436] RAX: ffffffffffffffda RBX: 00007f5d23b45fa0 RCX: 00007f5d238bde59 [ 1012.363145][T17436] RDX: 00002000000001c0 RSI: 0000000040086200 RDI: 0000000000000005 [ 1012.363161][T17436] RBP: 00007f5d21b16090 R08: 0000000000000000 R09: 0000000000000000 [ 1012.363176][T17436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1012.363191][T17436] R13: 00007f5d23b46038 R14: 00007f5d23b45fa0 R15: 00007ffe11807cd8 [ 1012.363226][T17436] [ 1012.363324][T17436] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1012.881522][T17442] FAULT_INJECTION: forcing a failure. [ 1012.881522][T17442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1012.881559][T17442] CPU: 1 UID: 0 PID: 17442 Comm: syz.1.3585 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1012.881586][T17442] Tainted: [L]=SOFTLOCKUP [ 1012.881593][T17442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1012.881604][T17442] Call Trace: [ 1012.881612][T17442] [ 1012.881620][T17442] dump_stack_lvl+0xe8/0x150 [ 1012.881654][T17442] should_fail_ex+0x467/0x600 [ 1012.881685][T17442] _copy_to_user+0x31/0xb0 [ 1012.881707][T17442] simple_read_from_buffer+0xe1/0x170 [ 1012.881746][T17442] proc_fail_nth_read+0x1be/0x230 [ 1012.881773][T17442] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1012.881801][T17442] ? rw_verify_area+0x250/0x4d0 [ 1012.881830][T17442] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1012.881852][T17442] vfs_read+0x219/0xa90 [ 1012.881888][T17442] ? __pfx_vfs_read+0x10/0x10 [ 1012.881918][T17442] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1012.881954][T17442] ? lockdep_hardirqs_on+0x7a/0x110 [ 1012.881987][T17442] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1012.882021][T17442] ? mutex_lock_nested+0x152/0x1d0 [ 1012.882050][T17442] ? fdget_pos+0x252/0x320 [ 1012.882083][T17442] ksys_read+0x156/0x270 [ 1012.882113][T17442] ? __pfx_ksys_read+0x10/0x10 [ 1012.882149][T17442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.882175][T17442] do_syscall_64+0x174/0x580 [ 1012.882208][T17442] ? trace_irq_disable+0x3b/0x140 [ 1012.882231][T17442] ? clear_bhb_loop+0x40/0x90 [ 1012.882259][T17442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.882283][T17442] RIP: 0033:0x7f5d2387e68e [ 1012.882304][T17442] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1012.882325][T17442] RSP: 002b:00007f5d21b15fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1012.882350][T17442] RAX: ffffffffffffffda RBX: 00007f5d21b166c0 RCX: 00007f5d2387e68e [ 1012.882367][T17442] RDX: 000000000000000f RSI: 00007f5d21b160a0 RDI: 0000000000000004 [ 1012.882382][T17442] RBP: 00007f5d21b16090 R08: 0000000000000000 R09: 0000000000000000 [ 1012.882409][T17442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1012.882422][T17442] R13: 00007f5d23b46038 R14: 00007f5d23b45fa0 R15: 00007ffe11807cd8 [ 1012.882455][T17442] [ 1013.249607][T17445] 0x000000000000-0x000000020000 : "" [ 1013.373915][T17447] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1013.408646][T17445] ftl_cs: FTL header not found. [ 1013.673243][T17456] random: crng reseeded on system resumption [ 1014.518338][T17467] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3594'. [ 1014.518374][T17467] netlink: 'syz.6.3594': attribute type 10 has an invalid length. [ 1014.518391][T17467] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3594'. [ 1014.834204][T17476] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3596'. [ 1014.947746][T17473] syz_tun: entered allmulticast mode [ 1015.359728][T17480] syz_tun: left allmulticast mode [ 1016.080279][ T38] kauditd_printk_skb: 52 callbacks suppressed [ 1016.080299][ T38] audit: type=1326 audit(1783835634.121:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17483 comm="syz.6.3598" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25430ede59 code=0x7ffc0000 [ 1016.080354][ T38] audit: type=1326 audit(1783835634.121:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17483 comm="syz.6.3598" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25430ede59 code=0x7ffc0000 [ 1016.080402][ T38] audit: type=1326 audit(1783835634.121:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17483 comm="syz.6.3598" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25430ede59 code=0x7ffc0000 [ 1016.080453][ T38] audit: type=1326 audit(1783835634.121:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17483 comm="syz.6.3598" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f25430ede59 code=0x7ffc0000 [ 1016.080513][ T38] audit: type=1326 audit(1783835634.121:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17483 comm="syz.6.3598" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25430ede59 code=0x7ffc0000 [ 1016.080562][ T38] audit: type=1326 audit(1783835634.121:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17483 comm="syz.6.3598" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f25430ae68e code=0x7ffc0000 [ 1016.081538][ T38] audit: type=1326 audit(1783835634.121:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17483 comm="syz.6.3598" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f25430ae68e code=0x7ffc0000 [ 1016.082992][ T38] audit: type=1326 audit(1783835634.121:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17483 comm="syz.6.3598" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25430ede59 code=0x7ffc0000 [ 1016.083049][ T38] audit: type=1326 audit(1783835634.121:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17483 comm="syz.6.3598" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f25430ae68e code=0x7ffc0000 [ 1016.086631][ T38] audit: type=1326 audit(1783835634.131:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17483 comm="syz.6.3598" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f25430ae68e code=0x7ffc0000 [ 1016.398508][ T36] bridge_slave_1: left allmulticast mode [ 1016.398545][ T36] bridge_slave_1: left promiscuous mode [ 1016.426356][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.435407][ T5617] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1016.603455][ T36] bridge_slave_0: left allmulticast mode [ 1016.603493][ T36] bridge_slave_0: left promiscuous mode [ 1016.603764][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.629025][ T5617] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.629083][ T5617] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1016.629110][ T5617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.669444][ T5617] usb 4-1: config 0 descriptor?? [ 1016.683352][ T5617] pwc: Askey VC010 type 2 USB webcam detected. [ 1016.765614][T17499] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1017.086824][ T5617] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1017.102888][ T5617] pwc: recv_control_msg error -71 req 02 val 2700 [ 1017.103332][ T5617] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1017.119085][ T5617] pwc: recv_control_msg error -71 req 04 val 1000 [ 1017.119756][ T5617] pwc: recv_control_msg error -71 req 04 val 1300 [ 1017.121940][ T5617] pwc: recv_control_msg error -71 req 04 val 1400 [ 1017.123988][ T5617] pwc: recv_control_msg error -71 req 02 val 2000 [ 1017.157521][ T5617] pwc: recv_control_msg error -71 req 02 val 2100 [ 1017.158042][ T5617] pwc: recv_control_msg error -71 req 04 val 1500 [ 1017.159587][ T5617] pwc: recv_control_msg error -71 req 02 val 2500 [ 1017.170185][ T5617] pwc: recv_control_msg error -71 req 02 val 2400 [ 1017.185312][ T5617] pwc: recv_control_msg error -71 req 02 val 2600 [ 1017.205150][ T5617] pwc: recv_control_msg error -71 req 02 val 2900 [ 1017.263356][ T5617] pwc: recv_control_msg error -71 req 02 val 2800 [ 1017.272079][ T5617] pwc: recv_control_msg error -71 req 04 val 1100 [ 1017.273178][ T5617] pwc: recv_control_msg error -71 req 04 val 1200 [ 1017.423815][ T5617] pwc: Registered as video103. [ 1017.435269][ T37] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1017.441920][ T5617] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input37 [ 1017.466063][ T5617] usb 4-1: USB disconnect, device number 112 [ 1017.619239][ T37] usb 2-1: Using ep0 maxpacket: 32 [ 1017.636603][ T37] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 1017.636633][ T37] usb 2-1: config 2 has no interface number 0 [ 1017.636691][ T37] usb 2-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 1017.636720][ T37] usb 2-1: config 2 interface 88 has no altsetting 0 [ 1017.647053][ T37] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 1017.647086][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1017.647109][ T37] usb 2-1: Product: syz [ 1017.647127][ T37] usb 2-1: Manufacturer: syz [ 1017.647143][ T37] usb 2-1: SerialNumber: syz [ 1017.759553][T17505] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1017.917642][T17513] mmap: syz.6.3604 (17513): VmData 37593088 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 1017.969762][T17505] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1018.157379][T17520] FAULT_INJECTION: forcing a failure. [ 1018.157379][T17520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1018.157493][T17520] CPU: 1 UID: 0 PID: 17520 Comm: syz.6.3606 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1018.157523][T17520] Tainted: [L]=SOFTLOCKUP [ 1018.157532][T17520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1018.157546][T17520] Call Trace: [ 1018.157555][T17520] [ 1018.157566][T17520] dump_stack_lvl+0xe8/0x150 [ 1018.157629][T17520] should_fail_ex+0x467/0x600 [ 1018.157669][T17520] _copy_to_user+0x31/0xb0 [ 1018.157714][T17520] simple_read_from_buffer+0xe1/0x170 [ 1018.157744][T17520] proc_fail_nth_read+0x1be/0x230 [ 1018.157771][T17520] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1018.157798][T17520] ? rw_verify_area+0x250/0x4d0 [ 1018.157826][T17520] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1018.157849][T17520] vfs_read+0x219/0xa90 [ 1018.157886][T17520] ? __pfx_vfs_read+0x10/0x10 [ 1018.157915][T17520] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1018.157949][T17520] ? lockdep_hardirqs_on+0x7a/0x110 [ 1018.157981][T17520] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1018.158015][T17520] ? mutex_lock_nested+0x152/0x1d0 [ 1018.158040][T17520] ? fdget_pos+0x252/0x320 [ 1018.158072][T17520] ksys_read+0x156/0x270 [ 1018.158111][T17520] ? __pfx_ksys_read+0x10/0x10 [ 1018.158147][T17520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.158172][T17520] do_syscall_64+0x174/0x580 [ 1018.158203][T17520] ? trace_irq_disable+0x3b/0x140 [ 1018.158225][T17520] ? clear_bhb_loop+0x40/0x90 [ 1018.158253][T17520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.158276][T17520] RIP: 0033:0x7f25430ae68e [ 1018.158297][T17520] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1018.158316][T17520] RSP: 002b:00007f2541345fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1018.158340][T17520] RAX: ffffffffffffffda RBX: 00007f25413466c0 RCX: 00007f25430ae68e [ 1018.158356][T17520] RDX: 000000000000000f RSI: 00007f25413460a0 RDI: 0000000000000004 [ 1018.158370][T17520] RBP: 00007f2541346090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.158384][T17520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.158398][T17520] R13: 00007f2543376038 R14: 00007f2543375fa0 R15: 00007ffffed696e8 [ 1018.158434][T17520] [ 1019.025370][ T5754] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1019.155422][ T5754] usb 7-1: device descriptor read/64, error -71 [ 1019.395387][ T5754] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1019.402521][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1019.558542][ T5754] usb 7-1: device descriptor read/64, error -71 [ 1019.760198][ T5754] usb usb7-port1: attempt power cycle [ 1020.039134][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1020.058241][ T36] bond0 (unregistering): Released all slaves [ 1020.155328][ T5754] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1020.176258][ T5754] usb 7-1: device descriptor read/8, error -71 [ 1020.240741][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1020.460954][ T5754] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1020.490660][ T5754] usb 7-1: device descriptor read/8, error -71 [ 1020.493896][ T37] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1020.494613][ T37] asix 2-1:2.88: probe with driver asix failed with error -71 [ 1020.553394][ T37] usb 2-1: USB disconnect, device number 86 [ 1020.602313][ T5754] usb usb7-port1: unable to enumerate USB device [ 1020.950155][T17543] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1021.993953][T17552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1022.159085][ T37] hid_parser_main: 32 callbacks suppressed [ 1022.159112][ T37] hid-generic 0005:10CF:0009.000E: unknown main item tag 0x0 [ 1022.219829][ T36] hsr_slave_0: left promiscuous mode [ 1022.299981][ T36] hsr_slave_1: left promiscuous mode [ 1022.311393][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.359051][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.011189][ T37] hid-generic 0005:10CF:0009.000E: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1023.883460][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1024.080225][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1024.633925][T17571] fido_id[17571]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory [ 1027.443450][T12714] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1027.605235][T12714] usb 2-1: Using ep0 maxpacket: 32 [ 1027.606987][T12714] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.608484][T12714] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1027.608506][T12714] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1027.608521][T12714] usb 2-1: Product: syz [ 1027.608533][T12714] usb 2-1: Manufacturer: syz [ 1027.661817][T12714] hub 2-1:4.0: bad descriptor, ignoring hub [ 1027.661847][T12714] hub 2-1:4.0: probe with driver hub failed with error -5 [ 1027.692633][T12714] usbhid 2-1:4.0: couldn't find an input interrupt endpoint [ 1029.409252][T17612] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3629'. [ 1029.791037][T17617] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3626'. [ 1030.158768][T17623] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20001 [ 1030.424489][T17631] fuse: fd is not a fuse device [ 1031.081568][ T5617] usb 2-1: USB disconnect, device number 87 [ 1031.753116][T17650] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.3638'. [ 1032.089384][T17658] FAULT_INJECTION: forcing a failure. [ 1032.089384][T17658] name failslab, interval 1, probability 0, space 0, times 0 [ 1032.089425][T17658] CPU: 1 UID: 0 PID: 17658 Comm: syz.3.3640 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1032.089456][T17658] Tainted: [L]=SOFTLOCKUP [ 1032.089465][T17658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1032.089479][T17658] Call Trace: [ 1032.089488][T17658] [ 1032.089498][T17658] dump_stack_lvl+0xe8/0x150 [ 1032.089540][T17658] should_fail_ex+0x467/0x600 [ 1032.089581][T17658] should_failslab+0xa8/0x100 [ 1032.089609][T17658] kmem_cache_alloc_noprof+0xa4/0x650 [ 1032.089648][T17658] ? __send_signal_locked+0x22c/0xeb0 [ 1032.089683][T17658] ? __send_signal_locked+0x22c/0xeb0 [ 1032.089720][T17658] ? sig_get_ucounts+0x3da/0x450 [ 1032.089751][T17658] __send_signal_locked+0x22c/0xeb0 [ 1032.089787][T17658] ? send_signal_locked+0x1af/0x8e0 [ 1032.089833][T17658] ? do_send_specific+0x37/0x2c0 [ 1032.089943][T17658] do_send_specific+0x198/0x2c0 [ 1032.089973][T17658] __x64_sys_tkill+0x10d/0x180 [ 1032.090008][T17658] ? __pfx___x64_sys_tkill+0x10/0x10 [ 1032.090037][T17658] ? ksys_write+0x248/0x270 [ 1032.090068][T17658] ? __pfx_ksys_write+0x10/0x10 [ 1032.090106][T17658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.090131][T17658] do_syscall_64+0x174/0x580 [ 1032.090166][T17658] ? trace_irq_disable+0x3b/0x140 [ 1032.090188][T17658] ? clear_bhb_loop+0x40/0x90 [ 1032.090217][T17658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.090238][T17658] RIP: 0033:0x7f375e2dde59 [ 1032.090260][T17658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1032.090280][T17658] RSP: 002b:00007f375c536028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c8 [ 1032.090305][T17658] RAX: ffffffffffffffda RBX: 00007f375e565fa0 RCX: 00007f375e2dde59 [ 1032.090321][T17658] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000000798 [ 1032.090335][T17658] RBP: 00007f375c536090 R08: 0000000000000000 R09: 0000000000000000 [ 1032.090358][T17658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1032.090372][T17658] R13: 00007f375e566038 R14: 00007f375e565fa0 R15: 00007ffe124d3f08 [ 1032.090409][T17658] [ 1033.548793][T17674] syz_tun: entered allmulticast mode [ 1033.800200][T17675] fuse: fd is not a fuse device [ 1033.802506][T17675] syz_tun: left allmulticast mode [ 1034.893413][T17695] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.3649'. [ 1035.047019][T17095] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1035.186868][T17095] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1035.211591][T17095] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1035.346931][T17095] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1035.351251][T17095] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1035.617852][T17095] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1035.637331][T17095] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1035.733004][T17095] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1035.909767][T17723] netlink: 'syz.6.3653': attribute type 11 has an invalid length. [ 1035.924138][T17721] netlink: 'syz.1.3652': attribute type 10 has an invalid length. [ 1035.932549][T17723] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3653'. [ 1037.722852][T17095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1037.879547][T17742] FAULT_INJECTION: forcing a failure. [ 1037.879547][T17742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1037.879586][T17742] CPU: 0 UID: 0 PID: 17742 Comm: syz.6.3658 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1037.879617][T17742] Tainted: [L]=SOFTLOCKUP [ 1037.879626][T17742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1037.879639][T17742] Call Trace: [ 1037.879649][T17742] [ 1037.879658][T17742] dump_stack_lvl+0xe8/0x150 [ 1037.879697][T17742] should_fail_ex+0x467/0x600 [ 1037.879735][T17742] _copy_to_user+0x31/0xb0 [ 1037.879763][T17742] simple_read_from_buffer+0xe1/0x170 [ 1037.879792][T17742] proc_fail_nth_read+0x1be/0x230 [ 1037.879819][T17742] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1037.879845][T17742] ? rw_verify_area+0x250/0x4d0 [ 1037.879873][T17742] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1037.879896][T17742] vfs_read+0x219/0xa90 [ 1037.879933][T17742] ? __pfx_vfs_read+0x10/0x10 [ 1037.879962][T17742] ? do_sys_openat2+0x14e/0x200 [ 1037.879981][T17742] ? kmem_cache_free+0x187/0x6c0 [ 1037.880004][T17742] ? do_sys_openat2+0x14e/0x200 [ 1037.880044][T17742] ksys_read+0x156/0x270 [ 1037.880072][T17742] ? __pfx_ksys_read+0x10/0x10 [ 1037.880125][T17742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.880158][T17742] do_syscall_64+0x174/0x580 [ 1037.880192][T17742] ? trace_irq_disable+0x3b/0x140 [ 1037.880215][T17742] ? clear_bhb_loop+0x40/0x90 [ 1037.880243][T17742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.880266][T17742] RIP: 0033:0x7f25430ae68e [ 1037.880288][T17742] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1037.880309][T17742] RSP: 002b:00007f2541345fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1037.880333][T17742] RAX: ffffffffffffffda RBX: 00007f25413466c0 RCX: 00007f25430ae68e [ 1037.880350][T17742] RDX: 000000000000000f RSI: 00007f25413460a0 RDI: 0000000000000004 [ 1037.880365][T17742] RBP: 00007f2541346090 R08: 0000000000000000 R09: 0000000000000000 [ 1037.880379][T17742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1037.880393][T17742] R13: 00007f2543376038 R14: 00007f2543375fa0 R15: 00007ffffed696e8 [ 1037.880429][T17742] [ 1038.202410][T17095] 8021q: adding VLAN 0 to HW filter on device team0 [ 1038.234638][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.234776][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1038.438336][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.438480][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1038.518549][T17750] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.3660'. [ 1040.993366][T17797] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3671'. [ 1041.004377][T17797] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3671'. [ 1041.255321][ T5617] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1041.425271][ T5617] usb 7-1: Using ep0 maxpacket: 32 [ 1041.430812][ T5617] usb 7-1: config 203 has an invalid interface number: 182 but max is 1 [ 1041.430845][ T5617] usb 7-1: config 203 has an invalid interface number: 244 but max is 1 [ 1041.430870][ T5617] usb 7-1: config 203 has no interface number 0 [ 1041.430906][ T5617] usb 7-1: config 203 has no interface number 1 [ 1041.430978][ T5617] usb 7-1: config 203 interface 244 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 8 [ 1041.431006][ T5617] usb 7-1: config 203 interface 244 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1041.431035][ T5617] usb 7-1: config 203 interface 244 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 1041.431061][ T5617] usb 7-1: config 203 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1041.431086][ T5617] usb 7-1: config 203 interface 244 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 1041.431112][ T5617] usb 7-1: config 203 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1041.431133][ T5617] usb 7-1: config 203 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1041.431155][ T5617] usb 7-1: config 203 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1041.431177][ T5617] usb 7-1: config 203 interface 244 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 1041.431206][ T5617] usb 7-1: config 203 interface 182 has no altsetting 0 [ 1041.535460][ T5617] usb 7-1: string descriptor 0 read error: -22 [ 1041.535973][ T5617] usb 7-1: New USB device found, idVendor=0403, idProduct=fd4b, bcdDevice=56.a8 [ 1041.536057][ T5617] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.662058][ T5617] ftdi_sio 7-1:203.182: FTDI USB Serial Device converter detected [ 1041.679721][ T5617] ftdi_sio ttyUSB0: unknown device type: 0x56a8 [ 1041.793442][ T5617] ftdi_sio 7-1:203.244: FTDI USB Serial Device converter detected [ 1041.825480][ T5617] ftdi_sio ttyUSB1: unknown device type: 0x56a8 [ 1042.091599][ T5617] usb 7-1: USB disconnect, device number 16 [ 1042.116284][ T5617] ftdi_sio 7-1:203.182: device disconnected [ 1042.167227][T17826] FAULT_INJECTION: forcing a failure. [ 1042.167227][T17826] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.167267][T17826] CPU: 1 UID: 0 PID: 17826 Comm: syz.1.3678 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1042.167292][T17826] Tainted: [L]=SOFTLOCKUP [ 1042.167298][T17826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1042.167309][T17826] Call Trace: [ 1042.167316][T17826] [ 1042.167323][T17826] dump_stack_lvl+0xe8/0x150 [ 1042.167359][T17826] should_fail_ex+0x467/0x600 [ 1042.167393][T17826] should_failslab+0xa8/0x100 [ 1042.167417][T17826] __kmalloc_noprof+0xfe/0x780 [ 1042.167434][T17826] ? rcu_is_watching+0x15/0xb0 [ 1042.167457][T17826] ? tomoyo_realpath_from_path+0xef/0x640 [ 1042.167481][T17826] ? tomoyo_realpath_from_path+0xef/0x640 [ 1042.167510][T17826] tomoyo_realpath_from_path+0xef/0x640 [ 1042.167540][T17826] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1042.167573][T17826] tomoyo_path_number_perm+0x246/0x5f0 [ 1042.167607][T17826] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1042.167640][T17826] ? __lock_acquire+0x683/0x2ce0 [ 1042.167672][T17826] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1042.167702][T17826] ? hook_file_ioctl+0x1f3/0x600 [ 1042.167728][T17826] ? lockdep_hardirqs_on+0x7a/0x110 [ 1042.167783][T17826] ? __fget_files+0x2a/0x420 [ 1042.167804][T17826] ? __fget_files+0x2a/0x420 [ 1042.167820][T17826] ? __fget_files+0x3a8/0x420 [ 1042.167836][T17826] ? __fget_files+0x2a/0x420 [ 1042.167856][T17826] security_file_ioctl+0xc3/0x2a0 [ 1042.167878][T17826] __se_sys_ioctl+0x47/0x170 [ 1042.167903][T17826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.167924][T17826] do_syscall_64+0x174/0x580 [ 1042.167951][T17826] ? trace_irq_disable+0x3b/0x140 [ 1042.167974][T17826] ? clear_bhb_loop+0x40/0x90 [ 1042.168000][T17826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.168020][T17826] RIP: 0033:0x7f5d238bde59 [ 1042.168038][T17826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1042.168054][T17826] RSP: 002b:00007f5d21b16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1042.168074][T17826] RAX: ffffffffffffffda RBX: 00007f5d23b45fa0 RCX: 00007f5d238bde59 [ 1042.168087][T17826] RDX: 0000000000000000 RSI: 0000000040603d07 RDI: 0000000000000004 [ 1042.168098][T17826] RBP: 00007f5d21b16090 R08: 0000000000000000 R09: 0000000000000000 [ 1042.168109][T17826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1042.168120][T17826] R13: 00007f5d23b46038 R14: 00007f5d23b45fa0 R15: 00007ffe11807cd8 [ 1042.168147][T17826] [ 1042.180606][T17826] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1042.443571][T17095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1042.523738][ T5617] ftdi_sio 7-1:203.244: device disconnected [ 1042.774549][T17095] veth0_vlan: entered promiscuous mode [ 1042.832876][T17095] veth1_vlan: entered promiscuous mode [ 1042.885892][ T31] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1043.045298][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 1043.047622][ T31] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 1043.047660][ T31] usb 4-1: config 0 has no interface number 0 [ 1043.047709][ T31] usb 4-1: config 0 interface 68 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.062085][ T31] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1043.062145][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.062168][ T31] usb 4-1: Product: syz [ 1043.062222][ T31] usb 4-1: Manufacturer: syz [ 1043.062281][ T31] usb 4-1: SerialNumber: syz [ 1043.126037][T17095] veth0_macvtap: entered promiscuous mode [ 1043.127867][ T31] usb 4-1: config 0 descriptor?? [ 1043.227964][ T31] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1043.257581][T17095] veth1_macvtap: entered promiscuous mode [ 1043.475553][T17095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1043.662506][T15533] Bluetooth: hci4: unexpected event for opcode 0x0404 [ 1043.675035][T17095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1043.781335][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.781798][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.782278][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.782337][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.914965][T17846] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1043.914996][T17846] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1044.136530][T17846] vhci_hcd vhci_hcd.0: Device attached [ 1044.188715][T17858] cgroup: Unknown subsys name 'euid<00000000000000060929' [ 1044.290379][T17853] vhci_hcd: connection closed [ 1044.325271][ T5721] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1044.374620][ T36] usb 4-1: Failed to submit usb control message: -110 [ 1044.374658][ T36] usb 4-1: unable to send the bmi data to the device: -110 [ 1044.374676][ T36] usb 4-1: unable to get target info from device [ 1044.374689][ T36] usb 4-1: could not get target info (-110) [ 1044.374705][ T36] usb 4-1: could not probe fw (-110) [ 1044.438379][ T56] vhci_hcd vhci_hcd.6: stop threads [ 1044.444199][ T56] vhci_hcd vhci_hcd.6: release socket [ 1044.489806][ T56] vhci_hcd vhci_hcd.6: disconnect device [ 1045.497948][T17871] sctp: [Deprecated]: syz.1.3687 (pid 17871) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1045.497948][T17871] Use struct sctp_sack_info instead [ 1045.535272][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.535295][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.901538][T17880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1046.042343][ T1498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.042365][ T1498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.237018][T17888] FAULT_INJECTION: forcing a failure. [ 1046.237018][T17888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1046.237058][T17888] CPU: 1 UID: 0 PID: 17888 Comm: syz.6.3692 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1046.237089][T17888] Tainted: [L]=SOFTLOCKUP [ 1046.237098][T17888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1046.237113][T17888] Call Trace: [ 1046.237122][T17888] [ 1046.237132][T17888] dump_stack_lvl+0xe8/0x150 [ 1046.237173][T17888] should_fail_ex+0x467/0x600 [ 1046.237209][T17888] _copy_from_user+0x2d/0xb0 [ 1046.237242][T17888] ___sys_sendmsg+0x1c6/0x360 [ 1046.237268][T17888] ? __lock_acquire+0x683/0x2ce0 [ 1046.237297][T17888] ? __pfx____sys_sendmsg+0x10/0x10 [ 1046.237367][T17888] ? __fget_files+0x2a/0x420 [ 1046.237389][T17888] ? __fget_files+0x3a8/0x420 [ 1046.237423][T17888] __x64_sys_sendmsg+0x1b7/0x290 [ 1046.237451][T17888] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1046.237496][T17888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.237523][T17888] do_syscall_64+0x174/0x580 [ 1046.237557][T17888] ? trace_irq_disable+0x3b/0x140 [ 1046.237579][T17888] ? clear_bhb_loop+0x40/0x90 [ 1046.237609][T17888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.237632][T17888] RIP: 0033:0x7f25430ede59 [ 1046.237654][T17888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1046.237675][T17888] RSP: 002b:00007f2541346028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1046.237700][T17888] RAX: ffffffffffffffda RBX: 00007f2543375fa0 RCX: 00007f25430ede59 [ 1046.237718][T17888] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1046.237732][T17888] RBP: 00007f2541346090 R08: 0000000000000000 R09: 0000000000000000 [ 1046.237746][T17888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1046.237760][T17888] R13: 00007f2543376038 R14: 00007f2543375fa0 R15: 00007ffffed696e8 [ 1046.237795][T17888] [ 1046.540240][ T5729] usb 4-1: USB disconnect, device number 113 [ 1047.250858][T15533] Bluetooth: hci1: unexpected subevent 0x18 length: 30 > 19 [ 1047.250948][T15533] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 1048.047852][T17908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3309'. [ 1048.047879][T17908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3309'. [ 1048.047909][T17908] netlink: 'syz.0.3309': attribute type 15 has an invalid length. [ 1048.060861][T17908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3309'. [ 1048.060886][T17908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3309'. [ 1048.060914][T17908] netlink: 'syz.0.3309': attribute type 15 has an invalid length. [ 1048.224660][T17908] could not allocate digest TFM handle sha1-ce [ 1048.404708][ T56] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 1048.430561][ T1487] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 1048.430617][ T1487] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 1048.430658][ T1487] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 1048.805410][ T38] kauditd_printk_skb: 171 callbacks suppressed [ 1048.805431][ T38] audit: type=1326 audit(1783835666.841:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17920 comm="syz.6.3698" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25430ede59 code=0x0 [ 1049.573475][ T5721] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1049.852695][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1049.935649][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1049.988394][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1049.990654][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1049.993235][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1050.262639][T14370] syz_tun (unregistering): left allmulticast mode [ 1050.442845][T17943] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.3701'. [ 1050.520408][T17947] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3702'. [ 1050.539022][T17947] FAULT_INJECTION: forcing a failure. [ 1050.539022][T17947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1050.539062][T17947] CPU: 0 UID: 0 PID: 17947 Comm: syz.0.3702 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1050.539093][T17947] Tainted: [L]=SOFTLOCKUP [ 1050.539102][T17947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1050.539116][T17947] Call Trace: [ 1050.539125][T17947] [ 1050.539135][T17947] dump_stack_lvl+0xe8/0x150 [ 1050.539177][T17947] should_fail_ex+0x467/0x600 [ 1050.539216][T17947] _copy_from_user+0x2d/0xb0 [ 1050.539243][T17947] ___sys_sendmsg+0x1c6/0x360 [ 1050.539266][T17947] ? __lock_acquire+0x683/0x2ce0 [ 1050.539295][T17947] ? __pfx____sys_sendmsg+0x10/0x10 [ 1050.539355][T17947] ? __fget_files+0x2a/0x420 [ 1050.539384][T17947] ? __fget_files+0x3a8/0x420 [ 1050.539418][T17947] __x64_sys_sendmsg+0x1b7/0x290 [ 1050.539445][T17947] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1050.539487][T17947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.539513][T17947] do_syscall_64+0x174/0x580 [ 1050.539548][T17947] ? trace_irq_disable+0x3b/0x140 [ 1050.539570][T17947] ? clear_bhb_loop+0x40/0x90 [ 1050.539598][T17947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.539622][T17947] RIP: 0033:0x7f7a1349de59 [ 1050.539644][T17947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1050.539665][T17947] RSP: 002b:00007f7a116f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1050.539690][T17947] RAX: ffffffffffffffda RBX: 00007f7a13725fa0 RCX: 00007f7a1349de59 [ 1050.539707][T17947] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000003 [ 1050.539725][T17947] RBP: 00007f7a116f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1050.539740][T17947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1050.539753][T17947] R13: 00007f7a13726038 R14: 00007f7a13725fa0 R15: 00007ffc1d9c05e8 [ 1050.539787][T17947] [ 1050.785175][ T38] audit: type=1326 audit(1783835668.821:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17948 comm="syz.1.3704" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d238bde59 code=0x0 [ 1051.289777][T17963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3706'. [ 1051.289805][T17963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3706'. [ 1051.289833][T17963] netlink: 'syz.0.3706': attribute type 15 has an invalid length. [ 1051.290754][T17963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3706'. [ 1051.290775][T17963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3706'. [ 1051.290799][T17963] netlink: 'syz.0.3706': attribute type 15 has an invalid length. [ 1051.302765][T17962] vivid-002: ================= START STATUS ================= [ 1051.302980][T17962] vivid-002: Radio HW Seek Mode: Bounded [ 1051.303021][T17962] vivid-002: Radio Programmable HW Seek: false [ 1051.303043][T17962] vivid-002: RDS Rx I/O Mode: Block I/O [ 1051.303064][T17962] vivid-002: Generate RBDS Instead of RDS: false [ 1051.303086][T17962] vivid-002: RDS Reception: true [ 1051.303107][T17962] vivid-002: RDS Program Type: 0 inactive [ 1051.303134][T17962] vivid-002: RDS PS Name: inactive [ 1051.303160][T17962] vivid-002: RDS Radio Text: inactive [ 1051.303184][T17962] vivid-002: RDS Traffic Announcement: false inactive [ 1051.303210][T17962] vivid-002: RDS Traffic Program: false inactive [ 1051.303236][T17962] vivid-002: RDS Music: false inactive [ 1051.303263][T17962] vivid-002: ================== END STATUS ================== [ 1051.959262][T17963] could not allocate digest TFM handle sha1-ce [ 1052.212013][T17983] FAULT_INJECTION: forcing a failure. [ 1052.212013][T17983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1052.212055][T17983] CPU: 0 UID: 0 PID: 17983 Comm: syz.0.3709 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1052.212091][T17983] Tainted: [L]=SOFTLOCKUP [ 1052.212100][T17983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1052.212114][T17983] Call Trace: [ 1052.212136][T17983] [ 1052.212146][T17983] dump_stack_lvl+0xe8/0x150 [ 1052.212183][T17983] should_fail_ex+0x467/0x600 [ 1052.212226][T17983] _copy_from_user+0x2d/0xb0 [ 1052.212251][T17983] get_timespec64+0x96/0x1b0 [ 1052.212277][T17983] ? __pfx_get_timespec64+0x10/0x10 [ 1052.212300][T17983] ? kmem_cache_free+0x187/0x6c0 [ 1052.212324][T17983] ? do_sys_openat2+0x14e/0x200 [ 1052.212372][T17983] __se_sys_pselect6+0x13a/0x320 [ 1052.212413][T17983] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1052.212449][T17983] ? __pfx_ksys_write+0x10/0x10 [ 1052.212481][T17983] ? __x64_sys_pselect6+0x21/0xf0 [ 1052.212516][T17983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.212542][T17983] do_syscall_64+0x174/0x580 [ 1052.212578][T17983] ? clear_bhb_loop+0x40/0x90 [ 1052.212607][T17983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.212630][T17983] RIP: 0033:0x7f7a1349de59 [ 1052.212650][T17983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1052.212670][T17983] RSP: 002b:00007f7a116f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1052.212694][T17983] RAX: ffffffffffffffda RBX: 00007f7a13725fa0 RCX: 00007f7a1349de59 [ 1052.212712][T17983] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 1052.212726][T17983] RBP: 00007f7a116f6090 R08: 0000200000000280 R09: 0000000000000000 [ 1052.212742][T17983] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 1052.212757][T17983] R13: 00007f7a13726038 R14: 00007f7a13725fa0 R15: 00007ffc1d9c05e8 [ 1052.212791][T17983] [ 1052.267574][T15533] Bluetooth: hci3: command tx timeout [ 1053.708014][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1053.708056][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.708086][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 58547 - 0 [ 1053.815954][T17999] netlink: 'syz.6.3714': attribute type 3 has an invalid length. [ 1054.345422][T15533] Bluetooth: hci3: command tx timeout [ 1054.375765][T18021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3718'. [ 1054.375791][T18021] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3718'. [ 1054.375820][T18021] netlink: 'syz.6.3718': attribute type 15 has an invalid length. [ 1054.376718][T18021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3718'. [ 1054.376739][T18021] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3718'. [ 1054.376762][T18021] netlink: 'syz.6.3718': attribute type 15 has an invalid length. [ 1054.616062][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.616137][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.993366][T18021] could not allocate digest TFM handle sha1-ce [ 1056.427855][T15533] Bluetooth: hci3: command tx timeout [ 1056.790819][ T38] audit: type=1326 audit(1783835674.831:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18051 comm="syz.6.3725" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25430ede59 code=0x7ffc0000 [ 1056.790981][ T38] audit: type=1326 audit(1783835674.831:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18051 comm="syz.6.3725" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25430ede59 code=0x7ffc0000 [ 1056.793004][ T38] audit: type=1326 audit(1783835674.831:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18051 comm="syz.6.3725" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25430ede59 code=0x7ffc0000 [ 1056.793165][ T38] audit: type=1326 audit(1783835674.831:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18051 comm="syz.6.3725" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25430ede59 code=0x7ffc0000 [ 1056.793342][ T38] audit: type=1326 audit(1783835674.831:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18051 comm="syz.6.3725" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f25430ede59 code=0x7ffc0000 [ 1056.793506][ T38] audit: type=1326 audit(1783835674.831:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18051 comm="syz.6.3725" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25430ede59 code=0x7ffc0000 [ 1056.794216][ T38] audit: type=1326 audit(1783835674.831:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18051 comm="syz.6.3725" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25430ede59 code=0x7ffc0000 [ 1056.835599][ T38] audit: type=1326 audit(1783835674.841:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18051 comm="syz.6.3725" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25430ede59 code=0x7ffc0000 [ 1056.835760][ T38] audit: type=1326 audit(1783835674.841:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18051 comm="syz.6.3725" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25430ede59 code=0x7ffc0000 [ 1056.835877][ T38] audit: type=1326 audit(1783835674.841:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18051 comm="syz.6.3725" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25430ede59 code=0x7ffc0000 [ 1057.127918][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1057.127955][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.127984][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 58547 - 0 [ 1057.412677][T18007] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1057.412709][T18007] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1057.475412][T18007] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1057.682263][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1057.682314][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.682342][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 58547 - 0 [ 1057.842340][T18007] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1057.971332][T18057] netlink: 'syz.6.3727': attribute type 3 has an invalid length. [ 1058.505511][T15533] Bluetooth: hci3: command tx timeout [ 1058.575527][T18007] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1058.752339][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1058.752380][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.752409][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 58547 - 0 [ 1058.895239][T18069] syz_tun: entered allmulticast mode [ 1058.955925][T18067] fuse: fd is not a fuse device [ 1058.957899][T18067] syz_tun: left allmulticast mode [ 1061.041420][T18093] FAULT_INJECTION: forcing a failure. [ 1061.041420][T18093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1061.041460][T18093] CPU: 1 UID: 0 PID: 18093 Comm: syz.1.3738 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1061.041491][T18093] Tainted: [L]=SOFTLOCKUP [ 1061.041500][T18093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1061.041513][T18093] Call Trace: [ 1061.041522][T18093] [ 1061.041532][T18093] dump_stack_lvl+0xe8/0x150 [ 1061.041592][T18093] should_fail_ex+0x467/0x600 [ 1061.041631][T18093] _copy_from_iter+0x1d3/0x1660 [ 1061.041676][T18093] ? unwind_next_frame+0x8f/0x2550 [ 1061.041704][T18093] ? __pfx__copy_from_iter+0x10/0x10 [ 1061.041744][T18093] ? tun_get_user+0x6e7/0x4380 [ 1061.041789][T18093] copy_page_from_iter+0x219/0x2d0 [ 1061.041829][T18093] tun_get_user+0x1b68/0x4380 [ 1061.041861][T18093] ? is_bpf_text_address+0x292/0x2b0 [ 1061.041890][T18093] ? tun_get_user+0x6e7/0x4380 [ 1061.041942][T18093] ? __pfx_tun_get_user+0x10/0x10 [ 1061.041978][T18093] ? __lock_acquire+0x683/0x2ce0 [ 1061.042016][T18093] ? ref_tracker_alloc+0x353/0x4c0 [ 1061.042054][T18093] ? get_pid_task+0x20/0x1f0 [ 1061.042080][T18093] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1061.042104][T18093] ? tun_get+0x1c/0x2f0 [ 1061.042126][T18093] ? tun_get+0x1c/0x2f0 [ 1061.042151][T18093] ? tun_get+0x1c/0x2f0 [ 1061.042172][T18093] ? tun_get+0x1c/0x2f0 [ 1061.042197][T18093] tun_chr_write_iter+0x119/0x200 [ 1061.042221][T18093] vfs_write+0x61e/0xbb0 [ 1061.042246][T18093] ? __pfx_vfs_write+0x10/0x10 [ 1061.042276][T18093] ? __fget_files+0x2a/0x420 [ 1061.042299][T18093] ksys_write+0x156/0x270 [ 1061.042320][T18093] ? __pfx_ksys_write+0x10/0x10 [ 1061.042346][T18093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.042371][T18093] do_syscall_64+0x174/0x580 [ 1061.042397][T18093] ? trace_irq_disable+0x3b/0x140 [ 1061.042412][T18093] ? clear_bhb_loop+0x40/0x90 [ 1061.042433][T18093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.042449][T18093] RIP: 0033:0x7f5d2387e68e [ 1061.042464][T18093] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1061.042478][T18093] RSP: 002b:00007f5d21b15fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1061.042495][T18093] RAX: ffffffffffffffda RBX: 00007f5d21b166c0 RCX: 00007f5d2387e68e [ 1061.042508][T18093] RDX: 000000000000007a RSI: 0000200000000280 RDI: 00000000000000c8 [ 1061.042518][T18093] RBP: 00007f5d21b16090 R08: 0000000000000000 R09: 0000000000000000 [ 1061.042528][T18093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1061.042538][T18093] R13: 00007f5d23b46038 R14: 00007f5d23b45fa0 R15: 00007ffe11807cd8 [ 1061.042563][T18093] [ 1063.405258][ T5721] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1066.966815][ T5721] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1066.968419][ T5721] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1066.968447][ T5721] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1066.968469][ T5721] usb 7-1: SerialNumber: syz [ 1067.184435][ T5721] usb 7-1: can't set config #1, error -71 [ 1067.236746][ T5721] usb 7-1: USB disconnect, device number 17 [ 1067.700460][T18134] siw: device registration error -23 [ 1068.947487][T17939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.947937][T17939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.948740][T17939] bridge_slave_0: entered allmulticast mode [ 1069.290943][T17939] bridge_slave_0: entered promiscuous mode [ 1069.823483][T17939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.824199][T17939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.825006][T17939] bridge_slave_1: entered allmulticast mode [ 1070.180922][T17939] bridge_slave_1: entered promiscuous mode [ 1071.474245][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1072.157490][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1072.163659][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1072.184637][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1072.203555][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1072.786637][ T56] bridge_slave_1: left allmulticast mode [ 1072.786675][ T56] bridge_slave_1: left promiscuous mode [ 1072.786955][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.961250][ T56] bridge_slave_0: left allmulticast mode [ 1072.961288][ T56] bridge_slave_0: left promiscuous mode [ 1072.961569][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.995317][ T5721] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 1073.207222][ T5721] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1073.250395][ T5721] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1073.250428][ T5721] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1073.250448][ T5721] usb 7-1: SerialNumber: syz [ 1073.283186][T18160] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1073.494093][T18160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1073.494772][T18160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.529087][ T5721] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 1073.529861][ T5721] usb-storage 7-1:1.0: USB Mass Storage device detected [ 1073.545546][ T5721] usb-storage 7-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1073.579905][ T5721] scsi host1: usb-storage 7-1:1.0 [ 1073.643614][ T5721] usb 7-1: USB disconnect, device number 18 [ 1074.585395][ T59] Bluetooth: hci1: command tx timeout [ 1075.265818][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1075.332877][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1075.347613][ T56] bond0 (unregistering): Released all slaves [ 1075.362996][ T56] bond1 (unregistering): Released all slaves [ 1075.417115][T17939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1075.918814][T17939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.182214][T18190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3765'. [ 1076.182239][T18190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3765'. [ 1076.182265][T18190] netlink: 'syz.5.3765': attribute type 15 has an invalid length. [ 1076.193249][T18190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3765'. [ 1076.193335][T18190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3765'. [ 1076.193433][T18190] netlink: 'syz.5.3765': attribute type 15 has an invalid length. [ 1076.463877][T18190] could not allocate digest TFM handle sha1-ce [ 1076.665513][ T59] Bluetooth: hci1: command tx timeout [ 1076.714311][T17939] team0: Port device team_slave_0 added [ 1076.735870][ T56] IPVS: stopping master sync thread 9940 ... [ 1076.743341][T17939] team0: Port device team_slave_1 added [ 1077.115360][ T5728] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1077.318236][ T5728] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 1077.318604][ T5728] usb 2-1: config 0 has no interface number 0 [ 1077.318771][ T5728] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1077.318859][ T5728] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1077.340174][ T5728] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1077.340266][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.340327][ T5728] usb 2-1: Product: syz [ 1077.340368][ T5728] usb 2-1: Manufacturer: syz [ 1077.340412][ T5728] usb 2-1: SerialNumber: syz [ 1077.439169][ T5728] usb 2-1: config 0 descriptor?? [ 1077.441735][T18199] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1077.454542][ T5728] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1077.678697][ T5728] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1077.875396][T17939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1077.875428][T17939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1077.875457][T17939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1077.940769][T17939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1077.940789][T17939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1077.940819][T17939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1078.515969][ T5331] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1078.676908][ T5331] usb 7-1: Using ep0 maxpacket: 16 [ 1078.695281][ T5331] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1078.698598][ T5331] usb 7-1: config 127 has an invalid interface number: 195 but max is 1 [ 1078.698626][ T5331] usb 7-1: config 127 has an invalid interface number: 207 but max is 1 [ 1078.698654][ T5331] usb 7-1: config 127 has no interface number 0 [ 1078.698673][ T5331] usb 7-1: config 127 has no interface number 1 [ 1078.698735][ T5331] usb 7-1: config 127 interface 195 altsetting 5 bulk endpoint 0xA has invalid maxpacket 16 [ 1078.698765][ T5331] usb 7-1: config 127 interface 195 has no altsetting 0 [ 1078.698786][ T5331] usb 7-1: config 127 interface 207 has no altsetting 0 [ 1078.703686][ T5331] usb 7-1: New USB device found, idVendor=413c, idProduct=8218, bcdDevice=15.60 [ 1078.703715][ T5331] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.703738][ T5331] usb 7-1: Product: syz [ 1078.703754][ T5331] usb 7-1: Manufacturer: syz [ 1078.703786][ T5331] usb 7-1: SerialNumber: syz [ 1078.765787][ T59] Bluetooth: hci1: command tx timeout [ 1078.904156][T18212] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1079.291138][T18217] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3771'. [ 1080.154446][T12714] usb 2-1: USB disconnect, device number 88 [ 1080.345722][T12714] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1080.350369][T12714] cyberjack 2-1:0.69: device disconnected [ 1080.385243][ T5331] usb 7-1: USB disconnect, device number 19 [ 1080.703246][T17939] hsr_slave_0: entered promiscuous mode [ 1080.704884][T17939] hsr_slave_1: entered promiscuous mode [ 1080.711915][T17939] debugfs: 'hsr0' already exists in 'hsr' [ 1080.711988][T17939] Cannot create hsr debugfs directory [ 1080.825622][ T59] Bluetooth: hci1: command tx timeout [ 1080.905280][T12714] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1081.055318][T12714] usb 2-1: Using ep0 maxpacket: 16 [ 1081.058571][T12714] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1081.058603][T12714] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1081.058629][T12714] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1081.058663][T12714] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1081.058688][T12714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.124140][T12714] usb 2-1: config 0 descriptor?? [ 1081.276045][ T56] hsr_slave_0: left promiscuous mode [ 1081.316666][ T56] hsr_slave_1: left promiscuous mode [ 1081.317812][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1081.317838][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1081.349027][T18224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.349739][T18224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.402660][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1081.402691][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1081.634625][T12714] hid (null): invalid report_size -1059206387 [ 1081.638951][T12714] hid (null): unknown global tag 0xd [ 1081.639056][T12714] hid (null): invalid report_size 3499 [ 1081.640631][T12714] hid (null): unknown global tag 0xb4 [ 1081.640672][T12714] hid (null): unknown global tag 0xc [ 1081.640768][T12714] hid (null): invalid report_count 33552 [ 1081.640818][T12714] hid (null): bogus close delimiter [ 1081.640915][T12714] hid (null): unknown global tag 0xd [ 1081.640959][T12714] hid (null): global environment stack underflow [ 1081.824974][ T56] veth1_macvtap: left promiscuous mode [ 1081.848519][ T56] veth0_macvtap: left promiscuous mode [ 1081.848829][ T56] veth1_vlan: left promiscuous mode [ 1081.849006][ T56] veth0_vlan: left promiscuous mode [ 1081.856749][T12714] usb 2-1: USB disconnect, device number 89 [ 1085.315320][ T5721] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1085.480154][ T5721] usb 7-1: Using ep0 maxpacket: 16 [ 1085.640404][ T5721] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1085.771903][ T5721] usb 7-1: language id specifier not provided by device, defaulting to English [ 1085.787891][ T5721] usb 7-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 1085.787923][ T5721] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.787947][ T5721] usb 7-1: Product: syz [ 1085.787964][ T5721] usb 7-1: Manufacturer: 쟸⊁료戩⥎鋘홤鍃￸쓏豖휰⽗꩞㽮錋ǘ桢弍똔 [ 1085.787984][ T5721] usb 7-1: SerialNumber: syz [ 1086.198887][ T5721] usb 7-1: USB disconnect, device number 20 [ 1086.448662][T18260] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3781'. [ 1086.448716][T18260] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3781'. [ 1086.448752][T18260] netlink: 'syz.5.3781': attribute type 15 has an invalid length. [ 1087.327863][T18262] could not allocate digest TFM handle sha1-ce [ 1087.496021][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1087.556227][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1087.728208][T18260] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3781'. [ 1087.728233][T18260] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3781'. [ 1087.728262][T18260] netlink: 'syz.5.3781': attribute type 15 has an invalid length. [ 1087.982553][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1088.207969][T18274] netlink: 216 bytes leftover after parsing attributes in process `syz.6.3786'. [ 1088.207994][T18274] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3786'. [ 1089.502346][T18279] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3787'. [ 1089.502371][T18279] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3787'. [ 1089.502398][T18279] netlink: 'syz.6.3787': attribute type 15 has an invalid length. [ 1089.508453][T18279] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3787'. [ 1089.508476][T18279] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3787'. [ 1089.508513][T18279] netlink: 'syz.6.3787': attribute type 15 has an invalid length. [ 1089.694451][T18279] could not allocate digest TFM handle sha1-ce [ 1089.793658][T18291] FAULT_INJECTION: forcing a failure. [ 1089.793658][T18291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1089.793698][T18291] CPU: 0 UID: 0 PID: 18291 Comm: syz.6.3791 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1089.793730][T18291] Tainted: [L]=SOFTLOCKUP [ 1089.793738][T18291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1089.793753][T18291] Call Trace: [ 1089.793762][T18291] [ 1089.793773][T18291] dump_stack_lvl+0xe8/0x150 [ 1089.793813][T18291] should_fail_ex+0x467/0x600 [ 1089.793852][T18291] _copy_from_user+0x2d/0xb0 [ 1089.793879][T18291] __sys_bpf+0x2e7/0xd90 [ 1089.793911][T18291] ? __pfx___sys_bpf+0x10/0x10 [ 1089.793937][T18291] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1089.793978][T18291] ? rt_mutex_slowunlock+0x219/0x460 [ 1089.794024][T18291] ? ksys_write+0x248/0x270 [ 1089.794055][T18291] ? __pfx_ksys_write+0x10/0x10 [ 1089.794086][T18291] __x64_sys_bpf+0xba/0xd0 [ 1089.794119][T18291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.794144][T18291] do_syscall_64+0x174/0x580 [ 1089.794177][T18291] ? trace_irq_disable+0x3b/0x140 [ 1089.794199][T18291] ? clear_bhb_loop+0x40/0x90 [ 1089.794227][T18291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.794250][T18291] RIP: 0033:0x7f25430ede59 [ 1089.794271][T18291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1089.794290][T18291] RSP: 002b:00007f2541346028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1089.794315][T18291] RAX: ffffffffffffffda RBX: 00007f2543375fa0 RCX: 00007f25430ede59 [ 1089.794332][T18291] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1089.794346][T18291] RBP: 00007f2541346090 R08: 0000000000000000 R09: 0000000000000000 [ 1089.794360][T18291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1089.794374][T18291] R13: 00007f2543376038 R14: 00007f2543375fa0 R15: 00007ffffed696e8 [ 1089.794409][T18291] [ 1090.076449][T18293] netlink: 'syz.1.3790': attribute type 15 has an invalid length. [ 1090.094960][T18293] netlink: 'syz.1.3790': attribute type 15 has an invalid length. [ 1090.955481][T18293] could not allocate digest TFM handle sha1-ce [ 1091.309628][T18299] binder: 18298:18299 ioctl 80404518 200000000040 returned -22 [ 1091.549417][T18311] __nla_validate_parse: 4 callbacks suppressed [ 1091.549447][T18311] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3796'. [ 1091.999369][T18324] fuse: fd is not a fuse device [ 1092.245229][T18333] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3801'. [ 1092.695413][T18336] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3801'. [ 1093.737539][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1093.779145][ T56] IPVS: stop unused estimator thread 0... [ 1094.028733][T18152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.028952][T18152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.029153][T18152] bridge_slave_0: entered allmulticast mode [ 1094.032162][T18152] bridge_slave_0: entered promiscuous mode [ 1094.039242][T18152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.039833][T18152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.040403][T18152] bridge_slave_1: entered allmulticast mode [ 1094.050725][T18152] bridge_slave_1: entered promiscuous mode [ 1094.207983][T18355] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3806'. [ 1094.376344][ T38] kauditd_printk_skb: 83 callbacks suppressed [ 1094.376362][ T38] audit: type=1326 audit(1783835712.411:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18359 comm="syz.1.3809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1094.376408][ T38] audit: type=1326 audit(1783835712.411:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18359 comm="syz.1.3809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1094.376450][ T38] audit: type=1326 audit(1783835712.411:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18359 comm="syz.1.3809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1094.376492][ T38] audit: type=1326 audit(1783835712.411:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18359 comm="syz.1.3809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1094.376548][ T38] audit: type=1326 audit(1783835712.411:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18359 comm="syz.1.3809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1094.376585][ T38] audit: type=1326 audit(1783835712.411:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18359 comm="syz.1.3809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1094.376622][ T38] audit: type=1326 audit(1783835712.411:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18359 comm="syz.1.3809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1094.376659][ T38] audit: type=1326 audit(1783835712.411:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18359 comm="syz.1.3809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1094.376714][ T38] audit: type=1326 audit(1783835712.411:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18359 comm="syz.1.3809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1094.376752][ T38] audit: type=1326 audit(1783835712.411:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18359 comm="syz.1.3809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1096.415014][T18386] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3814'. [ 1096.415130][T18386] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3814'. [ 1096.415168][T18386] netlink: 'syz.6.3814': attribute type 15 has an invalid length. [ 1097.146614][T18386] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3814'. [ 1097.146640][T18386] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3814'. [ 1097.146667][T18386] netlink: 'syz.6.3814': attribute type 15 has an invalid length. [ 1097.151816][T18152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1097.166420][T18388] could not allocate digest TFM handle sha1-ce [ 1097.330715][T18384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3815'. [ 1097.368212][T18152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1098.356822][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1098.356873][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.432292][T18413] syz_tun: entered allmulticast mode [ 1099.806082][T18416] syz_tun: left allmulticast mode [ 1099.806362][T18415] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3825'. [ 1099.812369][T18152] team0: Port device team_slave_0 added [ 1099.973856][T18152] team0: Port device team_slave_1 added [ 1101.364180][ T38] kauditd_printk_skb: 262 callbacks suppressed [ 1101.364199][ T38] audit: type=1326 audit(1783835719.401:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18439 comm="syz.1.3834" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1101.364245][ T38] audit: type=1326 audit(1783835719.401:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18439 comm="syz.1.3834" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1101.371878][ T38] audit: type=1326 audit(1783835719.411:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18439 comm="syz.1.3834" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1101.371935][ T38] audit: type=1326 audit(1783835719.411:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18439 comm="syz.1.3834" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1101.379484][ T38] audit: type=1326 audit(1783835719.411:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18439 comm="syz.1.3834" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1101.379536][ T38] audit: type=1326 audit(1783835719.411:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18439 comm="syz.1.3834" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1101.379576][ T38] audit: type=1326 audit(1783835719.411:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18439 comm="syz.1.3834" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1101.379614][ T38] audit: type=1326 audit(1783835719.421:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18439 comm="syz.1.3834" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1101.379652][ T38] audit: type=1326 audit(1783835719.421:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18439 comm="syz.1.3834" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1101.379690][ T38] audit: type=1326 audit(1783835719.421:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18439 comm="syz.1.3834" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1101.642928][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1101.642969][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.829848][T18444] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3836'. [ 1101.850806][T18152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1101.850822][T18152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.850849][T18152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.925178][T18152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.925194][T18152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.925219][T18152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.522186][T18463] fuse: Bad value for 'group_id' [ 1102.522211][T18463] fuse: Bad value for 'group_id' [ 1102.837057][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1102.837097][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.896691][T18152] hsr_slave_0: entered promiscuous mode [ 1102.898196][T18152] hsr_slave_1: entered promiscuous mode [ 1103.297128][T18482] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3846'. [ 1103.825007][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1103.825045][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.063868][T18502] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3852'. [ 1104.063949][T18502] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3852'. [ 1104.064105][T18502] netlink: 'syz.6.3852': attribute type 15 has an invalid length. [ 1104.868282][T18504] could not allocate digest TFM handle sha1-ce [ 1104.909903][T18502] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3852'. [ 1104.909927][T18502] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3852'. [ 1104.909955][T18502] netlink: 'syz.6.3852': attribute type 15 has an invalid length. [ 1106.212331][T18532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3856'. [ 1106.294847][T17939] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1106.390506][T17939] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1106.519590][T17939] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1106.557629][T17939] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1106.658337][T17939] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1106.713522][T17939] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1106.845661][T18556] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3864'. [ 1106.849890][T17939] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1106.981478][T17939] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1107.003023][T18558] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3864'. [ 1107.456502][T18572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3867'. [ 1107.528346][T18579] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3868'. [ 1109.436158][T18598] could not allocate digest TFM handle sha1-ce [ 1109.800736][T18606] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3877'. [ 1109.896835][T15533] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1109.915524][ T5721] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1109.962024][T15533] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1110.003092][T15533] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1110.004390][T15533] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1110.011565][T15533] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1110.067521][ T5721] usb 2-1: Using ep0 maxpacket: 32 [ 1110.069880][ T5721] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1110.069907][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.141430][ T5721] usb 2-1: config 0 descriptor?? [ 1110.181872][ T56] bridge_slave_1: left allmulticast mode [ 1110.181909][ T56] bridge_slave_1: left promiscuous mode [ 1110.182198][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.235848][ T5721] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1110.381348][ T56] bridge_slave_0: left allmulticast mode [ 1110.381388][ T56] bridge_slave_0: left promiscuous mode [ 1110.408366][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.061879][ T5721] gspca_sq930x: reg_r 001f failed -110 [ 1111.061979][ T5721] sq930x 2-1:0.0: probe with driver sq930x failed with error -110 [ 1111.148290][T18618] fuse: fd is not a fuse device [ 1111.287044][ T5331] usb 2-1: USB disconnect, device number 90 [ 1112.231468][T15533] Bluetooth: hci2: command tx timeout [ 1112.509087][T18630] could not allocate digest TFM handle sha1-ce [ 1113.047275][T18642] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3889'. [ 1113.047294][T18642] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3889'. [ 1113.234476][T18646] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3891'. [ 1113.234495][T18646] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3891'. [ 1113.650583][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1113.779240][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1114.561892][T18656] could not allocate digest TFM handle sha1-ce [ 1114.608567][ T56] bond0 (unregistering): Released all slaves [ 1114.613003][ T9632] smbdirect: ib_dev[syz1] removed [ 1114.680008][ T59] Bluetooth: hci2: command tx timeout [ 1114.984277][T18664] fuse: Bad value for 'fd' [ 1114.985574][T18664] overlay: ./file0 is not a directory [ 1115.283724][ T37] infiniband syz1: ib_query_port failed (-19) [ 1115.369865][T18152] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1115.522123][T18152] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1115.544686][T18152] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1115.604622][T18152] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1115.617290][T18152] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1115.802027][T18152] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1115.809712][T18152] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1115.902639][T18152] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1116.002673][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.002740][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.015962][T18680] FAULT_INJECTION: forcing a failure. [ 1116.015962][T18680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1116.016066][T18680] CPU: 0 UID: 0 PID: 18680 Comm: syz.6.3900 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1116.016135][T18680] Tainted: [L]=SOFTLOCKUP [ 1116.016163][T18680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1116.016196][T18680] Call Trace: [ 1116.016218][T18680] [ 1116.016246][T18680] dump_stack_lvl+0xe8/0x150 [ 1116.016349][T18680] should_fail_ex+0x467/0x600 [ 1116.016461][T18680] _copy_from_user+0x2d/0xb0 [ 1116.016541][T18680] do_sys_poll+0x258/0xf50 [ 1116.016675][T18680] ? __lock_acquire+0x683/0x2ce0 [ 1116.016745][T18680] ? __pfx_do_sys_poll+0x10/0x10 [ 1116.016861][T18680] ? is_bpf_text_address+0x292/0x2b0 [ 1116.016923][T18680] ? is_bpf_text_address+0x26/0x2b0 [ 1116.017251][T18680] ? set_user_sigmask+0xcd/0x1c0 [ 1116.017330][T18680] ? __pfx_set_user_sigmask+0x10/0x10 [ 1116.017403][T18680] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1116.017491][T18680] __se_sys_ppoll+0x209/0x2b0 [ 1116.017595][T18680] ? fput+0xa0/0xd0 [ 1116.017693][T18680] ? __pfx___se_sys_ppoll+0x10/0x10 [ 1116.017788][T18680] ? __pfx_ksys_write+0x10/0x10 [ 1116.017874][T18680] ? __x64_sys_ppoll+0x20/0xc0 [ 1116.017964][T18680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.018029][T18680] do_syscall_64+0x174/0x580 [ 1116.018128][T18680] ? trace_irq_disable+0x3b/0x140 [ 1116.018184][T18680] ? clear_bhb_loop+0x40/0x90 [ 1116.018258][T18680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.018321][T18680] RIP: 0033:0x7f25430ede59 [ 1116.018394][T18680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1116.018448][T18680] RSP: 002b:00007f2541346028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1116.018506][T18680] RAX: ffffffffffffffda RBX: 00007f2543375fa0 RCX: 00007f25430ede59 [ 1116.018558][T18680] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 1116.018601][T18680] RBP: 00007f2541346090 R08: 0000000000000000 R09: 0000000000000000 [ 1116.018633][T18680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1116.018647][T18680] R13: 00007f2543376038 R14: 00007f2543375fa0 R15: 00007ffffed696e8 [ 1116.018698][T18680] [ 1116.838347][ T59] Bluetooth: hci2: command tx timeout [ 1117.129564][ T5617] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1117.273851][T18697] could not allocate digest TFM handle sha1-ce [ 1117.445240][ T5617] usb 2-1: Using ep0 maxpacket: 32 [ 1117.448018][ T5617] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1117.448047][ T5617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.500359][ T5617] usb 2-1: config 0 descriptor?? [ 1117.537062][ T5617] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1118.062088][ T5617] gspca_sq930x: reg_r 001f failed -110 [ 1118.062179][ T5617] sq930x 2-1:0.0: probe with driver sq930x failed with error -110 [ 1118.475963][T12714] usb 2-1: USB disconnect, device number 91 [ 1118.915425][ T59] Bluetooth: hci2: command tx timeout [ 1119.463709][T18733] netlink: 'syz.5.3911': attribute type 10 has an invalid length. [ 1119.661667][T18736] netlink: 'syz.5.3911': attribute type 10 has an invalid length. [ 1120.448545][T18733] team0: Port device dummy0 added [ 1120.686379][T18736] team0: Port device dummy0 removed [ 1120.690271][T18736] dummy0 (unregistering): left allmulticast mode [ 1120.770192][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1121.506337][ T56] hsr_slave_0: left promiscuous mode [ 1121.526398][ T56] hsr_slave_1: left promiscuous mode [ 1121.529461][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1121.529491][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1121.579188][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1121.579218][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1121.799282][ T56] veth1_macvtap: left promiscuous mode [ 1121.801051][ T56] veth0_macvtap: left promiscuous mode [ 1121.801697][ T56] veth1_vlan: left promiscuous mode [ 1121.802007][ T56] veth0_vlan: left promiscuous mode [ 1124.545879][ T5617] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1124.715250][ T5617] usb 2-1: Using ep0 maxpacket: 32 [ 1124.716347][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1124.717584][ T5617] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 1124.717638][ T5617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1124.720514][ T5617] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 1124.720544][ T5617] usb 2-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 1124.720566][ T5617] usb 2-1: Product: syz [ 1124.720583][ T5617] usb 2-1: Manufacturer: syz [ 1124.720599][ T5617] usb 2-1: SerialNumber: syz [ 1124.818910][ T5617] usb 2-1: config 0 descriptor?? [ 1124.867947][ T5617] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1124.891110][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1125.511577][T18778] netlink: 'syz.5.3919': attribute type 3 has an invalid length. [ 1125.574272][T12714] usb 2-1: USB disconnect, device number 92 [ 1125.597035][ T9632] usb 2-1: Failed to submit usb control message: -71 [ 1125.597073][ T9632] usb 2-1: unable to send the bmi data to the device: -71 [ 1125.597093][ T9632] usb 2-1: unable to get target info from device [ 1125.597110][ T9632] usb 2-1: could not get target info (-71) [ 1125.597240][ T9632] usb 2-1: could not probe fw (-71) [ 1125.871364][T18152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1125.942159][T18152] 8021q: adding VLAN 0 to HW filter on device team0 [ 1126.050693][T18295] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.050832][T18295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1126.123010][ T9632] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.123150][ T9632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1128.938158][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1129.216122][T18604] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.216299][T18604] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.216554][T18604] bridge_slave_0: entered allmulticast mode [ 1129.220917][T18604] bridge_slave_0: entered promiscuous mode [ 1129.243481][T18604] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.279039][T18604] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.279290][T18604] bridge_slave_1: entered allmulticast mode [ 1129.331985][T18604] bridge_slave_1: entered promiscuous mode [ 1130.457587][T18604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1130.481708][T18604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1130.482036][T18828] netlink: 'syz.5.3928': attribute type 3 has an invalid length. [ 1130.851165][T18604] team0: Port device team_slave_0 added [ 1130.874794][T18604] team0: Port device team_slave_1 added [ 1130.940657][T15533] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1130.999941][T15533] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1131.004784][T15533] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1131.025995][T15533] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1131.092253][T15533] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1131.618890][T18604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1131.618910][T18604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1131.618944][T18604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1133.419770][ T59] Bluetooth: hci3: command tx timeout [ 1133.718640][T18604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1133.718659][T18604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.718690][T18604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1134.853637][ T5260] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1135.355304][ T5721] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1135.495242][ T59] Bluetooth: hci3: command tx timeout [ 1135.513038][ T5721] usb 2-1: Using ep0 maxpacket: 32 [ 1135.524068][ T5721] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1135.524099][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.563369][ T5721] usb 2-1: config 0 descriptor?? [ 1135.579957][ T5721] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1136.273912][ T5721] gspca_sq930x: reg_r 001f failed -110 [ 1136.277387][ T5721] sq930x 2-1:0.0: probe with driver sq930x failed with error -110 [ 1136.438901][ T5721] usb 2-1: USB disconnect, device number 93 [ 1136.606893][T18604] hsr_slave_0: entered promiscuous mode [ 1136.614245][T18604] hsr_slave_1: entered promiscuous mode [ 1136.624985][T18604] debugfs: 'hsr0' already exists in 'hsr' [ 1136.625014][T18604] Cannot create hsr debugfs directory [ 1137.547399][ T59] Bluetooth: hci3: command tx timeout [ 1137.720558][ T821] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 1137.993588][ T821] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1138.132463][ T821] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1138.132501][ T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1138.132524][ T821] usb 2-1: SerialNumber: syz [ 1138.331344][T18918] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3948'. [ 1138.331371][T18918] bridge: RTM_NEWNEIGH with invalid ether address [ 1138.361122][T18922] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1138.596531][T18922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1138.621790][T18922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.634872][ T821] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 1138.661155][ T821] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1138.679834][ T821] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1138.683058][ T821] scsi host1: usb-storage 2-1:1.0 [ 1138.768164][ T821] usb 2-1: USB disconnect, device number 94 [ 1139.658388][T18948] could not allocate digest TFM handle sha1-ce [ 1139.659553][ T59] Bluetooth: hci3: command tx timeout [ 1140.857855][ T5260] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1140.858301][T18968] netlink: 'syz.1.3961': attribute type 3 has an invalid length. [ 1140.889125][T18971] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3962'. [ 1140.889152][T18971] bridge: RTM_NEWNEIGH with invalid ether address [ 1142.038382][T18979] could not allocate digest TFM handle sha1-ce [ 1142.515502][ T37] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 1142.667851][ T37] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1142.672568][ T37] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1142.672603][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1142.672627][ T37] usb 2-1: SerialNumber: syz [ 1142.738104][T18987] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1142.951419][T18987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1142.952148][T18987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1142.997388][ T37] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 1142.998200][ T37] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1143.026059][ T37] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1143.028273][ T37] scsi host1: usb-storage 2-1:1.0 [ 1143.082098][ T37] usb 2-1: USB disconnect, device number 95 [ 1143.399437][T19009] netlink: 'syz.6.3972': attribute type 3 has an invalid length. [ 1143.445963][T19010] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3971'. [ 1144.606817][T19022] could not allocate digest TFM handle sha1-ce [ 1145.365724][ T56] bridge_slave_1: left allmulticast mode [ 1145.365761][ T56] bridge_slave_1: left promiscuous mode [ 1145.366015][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.544429][ T56] bridge_slave_0: left allmulticast mode [ 1145.544466][ T56] bridge_slave_0: left promiscuous mode [ 1145.544745][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.165924][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1146.266203][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1146.327247][ T56] bond0 (unregistering): Released all slaves [ 1146.380562][T19039] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3981'. [ 1146.380753][T19041] netlink: 'syz.1.3982': attribute type 3 has an invalid length. [ 1146.855216][ T5331] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 1147.338066][ T5617] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1147.525993][ T5617] usb 7-1: Using ep0 maxpacket: 32 [ 1147.566142][ T5617] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 1147.566252][ T5617] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1147.733561][T19054] could not allocate digest TFM handle sha1-ce [ 1147.741794][ T5617] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 1147.741823][ T5617] usb 7-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 1147.741871][ T5617] usb 7-1: Product: syz [ 1147.741888][ T5617] usb 7-1: Manufacturer: syz [ 1147.741904][ T5617] usb 7-1: SerialNumber: syz [ 1147.899590][ T5617] usb 7-1: config 0 descriptor?? [ 1147.985401][ T5617] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1147.988156][ T5331] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1147.990305][ T5331] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1147.990331][ T5331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1147.990352][ T5331] usb 2-1: SerialNumber: syz [ 1148.058719][T19048] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1148.268607][T19048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.273770][T19048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.320389][ T5331] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 1148.321199][ T5331] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1148.352153][ T5331] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1148.369992][ T5331] scsi host1: usb-storage 2-1:1.0 [ 1148.409210][T18834] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.409340][T18834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.409570][T18834] bridge_slave_0: entered allmulticast mode [ 1148.443181][T18834] bridge_slave_0: entered promiscuous mode [ 1148.504431][ T5331] usb 2-1: USB disconnect, device number 96 [ 1148.798908][ T56] hsr_slave_0: left promiscuous mode [ 1148.827816][ T56] hsr_slave_1: left promiscuous mode [ 1148.828871][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1148.876225][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1149.145610][ T1478] usb 7-1: Failed to submit usb control message: -110 [ 1149.145650][ T1478] usb 7-1: unable to send the bmi data to the device: -110 [ 1149.145671][ T1478] usb 7-1: unable to get target info from device [ 1149.145686][ T1478] usb 7-1: could not get target info (-110) [ 1149.145912][ T1478] usb 7-1: could not probe fw (-110) [ 1149.484062][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1149.535825][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1149.929281][T18834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.929509][T18834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.929750][T18834] bridge_slave_1: entered allmulticast mode [ 1149.933088][T18834] bridge_slave_1: entered promiscuous mode [ 1150.109960][T19080] netlink: 'syz.1.3992': attribute type 3 has an invalid length. [ 1150.137045][ T37] usb 7-1: USB disconnect, device number 21 [ 1151.189966][T19090] could not allocate digest TFM handle sha1-ce [ 1151.810684][T18834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1151.818153][T18834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1151.895228][ T821] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 1152.127531][ T821] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1152.129358][ T821] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1152.129390][ T821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1152.129414][ T821] usb 7-1: SerialNumber: syz [ 1152.204249][T19100] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1152.290379][T18834] team0: Port device team_slave_0 added [ 1152.294408][T18834] team0: Port device team_slave_1 added [ 1152.408449][T19100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1152.409261][T19100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1152.414803][ T821] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 1152.456920][T19111] netlink: 'syz.1.4003': attribute type 3 has an invalid length. [ 1152.459443][ T821] usb-storage 7-1:1.0: USB Mass Storage device detected [ 1152.495027][ T821] usb-storage 7-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1152.498284][ T821] scsi host1: usb-storage 7-1:1.0 [ 1152.526105][T18834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1152.526121][T18834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1152.526144][T18834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1152.532521][ T821] usb 7-1: USB disconnect, device number 22 [ 1152.634060][T18834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1152.634079][T18834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1152.634110][T18834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1153.682098][T19122] could not allocate digest TFM handle sha1-ce [ 1154.472516][T18834] hsr_slave_0: entered promiscuous mode [ 1154.501681][T18834] hsr_slave_1: entered promiscuous mode [ 1154.520584][T18834] debugfs: 'hsr0' already exists in 'hsr' [ 1154.520606][T18834] Cannot create hsr debugfs directory [ 1155.893199][T19150] netlink: 'syz.6.4014': attribute type 3 has an invalid length. [ 1156.743662][T19184] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4023'. [ 1157.707741][T19193] could not allocate digest TFM handle sha1-ce [ 1157.875317][ T5617] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1157.988257][T19188] netlink: 'syz.1.4026': attribute type 3 has an invalid length. [ 1157.988342][T19189] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4023'. [ 1158.045544][ T5617] usb 7-1: Using ep0 maxpacket: 32 [ 1158.062915][ T5617] usb 7-1: config 203 has an invalid interface number: 182 but max is 1 [ 1158.062945][ T5617] usb 7-1: config 203 has an invalid interface number: 244 but max is 1 [ 1158.062970][ T5617] usb 7-1: config 203 has no interface number 0 [ 1158.062988][ T5617] usb 7-1: config 203 has no interface number 1 [ 1158.063063][ T5617] usb 7-1: config 203 interface 244 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 8 [ 1158.063091][ T5617] usb 7-1: config 203 interface 244 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1158.063128][ T5617] usb 7-1: config 203 interface 244 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 1158.063154][ T5617] usb 7-1: config 203 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1158.063185][ T5617] usb 7-1: config 203 interface 244 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 1158.063210][ T5617] usb 7-1: config 203 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1158.063232][ T5617] usb 7-1: config 203 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1158.063261][ T5617] usb 7-1: config 203 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1158.063285][ T5617] usb 7-1: config 203 interface 244 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 1158.063314][ T5617] usb 7-1: config 203 interface 182 has no altsetting 0 [ 1158.154032][ T5617] usb 7-1: string descriptor 0 read error: -22 [ 1158.154194][ T5617] usb 7-1: New USB device found, idVendor=0403, idProduct=fd4b, bcdDevice=56.a8 [ 1158.154221][ T5617] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.257425][ T5617] ftdi_sio 7-1:203.182: FTDI USB Serial Device converter detected [ 1158.266952][ T5617] ftdi_sio ttyUSB0: unknown device type: 0x56a8 [ 1158.296297][ T5617] ftdi_sio 7-1:203.244: FTDI USB Serial Device converter detected [ 1158.298429][ T5617] ftdi_sio ttyUSB1: unknown device type: 0x56a8 [ 1158.520567][ T38] kauditd_printk_skb: 44 callbacks suppressed [ 1158.520589][ T38] audit: type=1326 audit(1783835776.561:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19208 comm="syz.1.4032" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1158.521157][ T38] audit: type=1326 audit(1783835776.561:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19208 comm="syz.1.4032" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1158.585038][ T38] audit: type=1326 audit(1783835776.561:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19208 comm="syz.1.4032" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1158.585271][ T38] audit: type=1326 audit(1783835776.621:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19208 comm="syz.1.4032" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1158.585382][ T38] audit: type=1326 audit(1783835776.621:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19208 comm="syz.1.4032" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1158.636091][ T38] audit: type=1326 audit(1783835776.681:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19208 comm="syz.1.4032" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5d2387e68e code=0x7ffc0000 [ 1158.638017][ T38] audit: type=1326 audit(1783835776.681:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19208 comm="syz.1.4032" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5d2387e68e code=0x7ffc0000 [ 1158.640611][ T38] audit: type=1326 audit(1783835776.681:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19208 comm="syz.1.4032" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5d2387e68e code=0x7ffc0000 [ 1158.649118][ T38] audit: type=1326 audit(1783835776.681:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19208 comm="syz.1.4032" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5d2387e68e code=0x7ffc0000 [ 1158.651406][ T38] audit: type=1326 audit(1783835776.691:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19208 comm="syz.1.4032" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d238bde59 code=0x7ffc0000 [ 1158.901532][ T5617] usb 7-1: USB disconnect, device number 23 [ 1158.928352][ T5617] ftdi_sio 7-1:203.182: device disconnected [ 1158.969956][ T5617] ftdi_sio 7-1:203.244: device disconnected [ 1159.980765][T19219] could not allocate digest TFM handle sha1-ce [ 1160.327908][T19224] netlink: 'syz.6.4037': attribute type 3 has an invalid length. [ 1163.288923][T19244] could not allocate digest TFM handle sha1-ce [ 1164.746741][T19265] could not allocate digest TFM handle sha1-ce [ 1165.152275][T18604] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1165.248035][T18604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1165.252275][T18604] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1165.345255][ T5729] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1165.426522][T18604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1165.432644][T19281] netlink: 'syz.6.4049': attribute type 3 has an invalid length. [ 1165.475952][T18604] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1165.509368][ T5729] usb 2-1: Using ep0 maxpacket: 32 [ 1165.521699][ T5729] usb 2-1: config 203 has an invalid interface number: 182 but max is 1 [ 1165.521753][ T5729] usb 2-1: config 203 has an invalid interface number: 244 but max is 1 [ 1165.521812][ T5729] usb 2-1: config 203 has no interface number 0 [ 1165.521864][ T5729] usb 2-1: config 203 has no interface number 1 [ 1165.522070][ T5729] usb 2-1: config 203 interface 244 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 8 [ 1165.522146][ T5729] usb 2-1: config 203 interface 244 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1165.522223][ T5729] usb 2-1: config 203 interface 244 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 1165.522290][ T5729] usb 2-1: config 203 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1165.522356][ T5729] usb 2-1: config 203 interface 244 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 1165.522430][ T5729] usb 2-1: config 203 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1165.522487][ T5729] usb 2-1: config 203 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1165.522506][ T5729] usb 2-1: config 203 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1165.522528][ T5729] usb 2-1: config 203 interface 244 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 1165.522566][ T5729] usb 2-1: config 203 interface 182 has no altsetting 0 [ 1165.569722][ T5729] usb 2-1: string descriptor 0 read error: -22 [ 1165.570104][ T5729] usb 2-1: New USB device found, idVendor=0403, idProduct=fd4b, bcdDevice=56.a8 [ 1165.570177][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.708755][ T5729] ftdi_sio 2-1:203.182: FTDI USB Serial Device converter detected [ 1165.719087][ T5729] ftdi_sio ttyUSB0: unknown device type: 0x56a8 [ 1165.749275][ T5729] ftdi_sio 2-1:203.244: FTDI USB Serial Device converter detected [ 1165.761374][ T5729] ftdi_sio ttyUSB1: unknown device type: 0x56a8 [ 1165.774094][T18604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1165.828460][T18604] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1165.955279][ T5721] usb 2-1: USB disconnect, device number 97 [ 1166.032836][T18604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1166.052598][ T5721] ftdi_sio 2-1:203.182: device disconnected [ 1167.064376][ T5721] ftdi_sio 2-1:203.244: device disconnected [ 1167.075603][T19297] could not allocate digest TFM handle sha1-ce [ 1167.184187][T19298] ------------[ cut here ]------------ [ 1167.184203][T19298] refcount_t: saturated; leaking memory. [ 1167.184221][T19298] WARNING: lib/refcount.c:22 at refcount_warn_saturate+0x8c/0x110, CPU#0: syz.6.4051/19298 [ 1167.184291][T19298] Modules linked in: [ 1167.184321][T19298] CPU: 0 UID: 0 PID: 19298 Comm: syz.6.4051 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1167.184354][T19298] Tainted: [L]=SOFTLOCKUP [ 1167.184363][T19298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1167.184379][T19298] RIP: 0010:refcount_warn_saturate+0x8c/0x110 [ 1167.184407][T19298] Code: 75 68 e8 d7 1b 03 fd 48 8d 3d 80 2a f8 0a 67 48 0f b9 3a eb 66 85 db 74 3e 83 fb 01 75 4c e8 bb 1b 03 fd 48 8d 3d 74 2a f8 0a <67> 48 0f b9 3a eb 4a e8 a8 1b 03 fd 48 8d 3d 71 2a f8 0a 67 48 0f [ 1167.184428][T19298] RSP: 0018:ffffc90004cc7858 EFLAGS: 00010283 [ 1167.184449][T19298] RAX: ffffffff84c21cb5 RBX: 0000000000000001 RCX: 0000000000080000 [ 1167.184466][T19298] RDX: ffffc90018934000 RSI: 00000000000007d2 RDI: ffffffff8fba4730 [ 1167.184483][T19298] RBP: 00000000ffffffff R08: ffff888037be3e00 R09: 0000000000000005 [ 1167.184500][T19298] R10: 0000000000000100 R11: 0000000000000004 R12: ffff88802ca02018 [ 1167.184516][T19298] R13: ffffffff99a8aa60 R14: ffff88802ca02010 R15: ffff88802ca02000 [ 1167.184535][T19298] FS: 00007f25413466c0(0000) GS:ffff888125c49000(0000) knlGS:0000000000000000 [ 1167.185887][T19298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1167.185910][T19298] CR2: 000000110c25352e CR3: 000000005bc9c000 CR4: 00000000003526f0 [ 1167.185932][T19298] Call Trace: [ 1167.185942][T19298] [ 1167.185954][T19298] dvb_device_open+0x30a/0x350 [ 1167.186097][T19298] ? rt_spin_unlock+0x163/0x200 [ 1167.186132][T19298] chrdev_open+0x4dc/0x600 [ 1167.186172][T19298] ? __pfx_chrdev_open+0x10/0x10 [ 1167.186204][T19298] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 1167.186243][T19298] ? __pfx_chrdev_open+0x10/0x10 [ 1167.186276][T19298] do_dentry_open+0x849/0x1420 [ 1167.186357][T19298] vfs_open+0x3b/0x350 [ 1167.186390][T19298] ? path_openat+0x2e49/0x3850 [ 1167.186424][T19298] path_openat+0x2e60/0x3850 [ 1167.186473][T19298] ? kmem_cache_alloc_noprof+0x355/0x650 [ 1167.186512][T19298] ? __x64_sys_openat+0x138/0x170 [ 1167.186533][T19298] ? do_syscall_64+0x174/0x580 [ 1167.186566][T19298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.186613][T19298] do_file_open+0x23e/0x4a0 [ 1167.186639][T19298] ? lockdep_hardirqs_on+0x7a/0x110 [ 1167.186678][T19298] ? __pfx_do_file_open+0x10/0x10 [ 1167.186739][T19298] ? alloc_fd+0x654/0x6d0 [ 1167.186795][T19298] do_sys_openat2+0x115/0x200 [ 1167.186818][T19298] ? __se_sys_futex+0x3a8/0x450 [ 1167.186850][T19298] ? __pfx_do_sys_openat2+0x10/0x10 [ 1167.186884][T19298] ? rcu_is_watching+0x15/0xb0 [ 1167.186919][T19298] __x64_sys_openat+0x138/0x170 [ 1167.186945][T19298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.186970][T19298] do_syscall_64+0x174/0x580 [ 1167.187006][T19298] ? clear_bhb_loop+0x40/0x90 [ 1167.187035][T19298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.187058][T19298] RIP: 0033:0x7f25430ae68e [ 1167.187079][T19298] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1167.187100][T19298] RSP: 002b:00007f2541345b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1167.187124][T19298] RAX: ffffffffffffffda RBX: 00007f25413466c0 RCX: 00007f25430ae68e [ 1167.187142][T19298] RDX: 0000000000040002 RSI: 00007f2541345c00 RDI: ffffffffffffff9c [ 1167.187160][T19298] RBP: 00007f2541345c00 R08: 0000000000000000 R09: 0000000000000000 [ 1167.187175][T19298] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1167.187190][T19298] R13: 00007f2543376038 R14: 00007f2543375fa0 R15: 00007ffffed696e8 [ 1167.187226][T19298] [ 1167.187238][T19298] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1167.187264][T19298] CPU: 0 UID: 0 PID: 19298 Comm: syz.6.4051 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1167.187295][T19298] Tainted: [L]=SOFTLOCKUP [ 1167.187305][T19298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1167.187320][T19298] Call Trace: [ 1167.187329][T19298] [ 1167.187338][T19298] vpanic+0x56c/0xa60 [ 1167.187376][T19298] ? __pfx__printk+0x10/0x10 [ 1167.187404][T19298] ? __pfx_vpanic+0x10/0x10 [ 1167.187426][T19298] ? is_bpf_text_address+0x292/0x2b0 [ 1167.187450][T19298] ? is_bpf_text_address+0x26/0x2b0 [ 1167.187484][T19298] panic+0xc5/0xd0 [ 1167.187506][T19298] ? __pfx_panic+0x10/0x10 [ 1167.187545][T19298] __warn+0x315/0x4c0 [ 1167.187565][T19298] ? refcount_warn_saturate+0x8c/0x110 [ 1167.187592][T19298] ? refcount_warn_saturate+0x8c/0x110 [ 1167.187617][T19298] __report_bug+0x331/0x530 [ 1167.187704][T19298] ? refcount_warn_saturate+0x8c/0x110 [ 1167.187730][T19298] ? __pfx___report_bug+0x10/0x10 [ 1167.187777][T19298] ? dvb_device_open+0x82/0x350 [ 1167.187813][T19298] report_bug_entry+0x19a/0x290 [ 1167.187848][T19298] ? refcount_warn_saturate+0x8c/0x110 [ 1167.187874][T19298] ? refcount_warn_saturate+0x91/0x110 [ 1167.187898][T19298] handle_bug+0xce/0x200 [ 1167.187922][T19298] exc_invalid_op+0x1a/0x50 [ 1167.187945][T19298] asm_exc_invalid_op+0x1a/0x20 [ 1167.187967][T19298] RIP: 0010:refcount_warn_saturate+0x8c/0x110 [ 1167.187991][T19298] Code: 75 68 e8 d7 1b 03 fd 48 8d 3d 80 2a f8 0a 67 48 0f b9 3a eb 66 85 db 74 3e 83 fb 01 75 4c e8 bb 1b 03 fd 48 8d 3d 74 2a f8 0a <67> 48 0f b9 3a eb 4a e8 a8 1b 03 fd 48 8d 3d 71 2a f8 0a 67 48 0f [ 1167.188010][T19298] RSP: 0018:ffffc90004cc7858 EFLAGS: 00010283 [ 1167.188029][T19298] RAX: ffffffff84c21cb5 RBX: 0000000000000001 RCX: 0000000000080000 [ 1167.188044][T19298] RDX: ffffc90018934000 RSI: 00000000000007d2 RDI: ffffffff8fba4730 [ 1167.188061][T19298] RBP: 00000000ffffffff R08: ffff888037be3e00 R09: 0000000000000005 [ 1167.188077][T19298] R10: 0000000000000100 R11: 0000000000000004 R12: ffff88802ca02018 [ 1167.188092][T19298] R13: ffffffff99a8aa60 R14: ffff88802ca02010 R15: ffff88802ca02000 [ 1167.188118][T19298] ? refcount_warn_saturate+0x85/0x110 [ 1167.188149][T19298] ? refcount_warn_saturate+0x85/0x110 [ 1167.188174][T19298] dvb_device_open+0x30a/0x350 [ 1167.188205][T19298] ? rt_spin_unlock+0x163/0x200 [ 1167.188236][T19298] chrdev_open+0x4dc/0x600 [ 1167.188271][T19298] ? __pfx_chrdev_open+0x10/0x10 [ 1167.188300][T19298] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 1167.188333][T19298] ? __pfx_chrdev_open+0x10/0x10 [ 1167.188362][T19298] do_dentry_open+0x849/0x1420 [ 1167.188407][T19298] vfs_open+0x3b/0x350 [ 1167.188439][T19298] ? path_openat+0x2e49/0x3850 [ 1167.188470][T19298] path_openat+0x2e60/0x3850 [ 1167.188505][T19298] ? kmem_cache_alloc_noprof+0x355/0x650 [ 1167.188542][T19298] ? __x64_sys_openat+0x138/0x170 [ 1167.188563][T19298] ? do_syscall_64+0x174/0x580 [ 1167.188596][T19298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.188640][T19298] do_file_open+0x23e/0x4a0 [ 1167.188666][T19298] ? lockdep_hardirqs_on+0x7a/0x110 [ 1167.188713][T19298] ? __pfx_do_file_open+0x10/0x10 [ 1167.188766][T19298] ? alloc_fd+0x654/0x6d0 [ 1167.188842][T19298] do_sys_openat2+0x115/0x200 [ 1167.188865][T19298] ? __se_sys_futex+0x3a8/0x450 [ 1167.188897][T19298] ? __pfx_do_sys_openat2+0x10/0x10 [ 1167.188926][T19298] ? rcu_is_watching+0x15/0xb0 [ 1167.188961][T19298] __x64_sys_openat+0x138/0x170 [ 1167.188988][T19298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.189014][T19298] do_syscall_64+0x174/0x580 [ 1167.189053][T19298] ? clear_bhb_loop+0x40/0x90 [ 1167.189083][T19298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.189107][T19298] RIP: 0033:0x7f25430ae68e [ 1167.189130][T19298] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1167.189150][T19298] RSP: 002b:00007f2541345b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1167.189175][T19298] RAX: ffffffffffffffda RBX: 00007f25413466c0 RCX: 00007f25430ae68e [ 1167.189193][T19298] RDX: 0000000000040002 RSI: 00007f2541345c00 RDI: ffffffffffffff9c [ 1167.189211][T19298] RBP: 00007f2541345c00 R08: 0000000000000000 R09: 0000000000000000 [ 1167.189226][T19298] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1167.189242][T19298] R13: 00007f2543376038 R14: 00007f2543375fa0 R15: 00007ffffed696e8 [ 1167.189279][T19298] [ 1167.189898][T19298] Kernel Offset: disabled